$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_25405c76c7a043c89ace167e9d2cf79c/0/3B86A4A45380C6D455CDE580DED1BC5612D0A578.mft File: 3B86A4A45380C6D455CDE580DED1BC5612D0A578.mft (raw, json) Hash identifier: ZZsksVIok5tL01tyHtH1hJIDgq04pJ+hyXhey9UJ7BU= Subject key identifier: E1:A8:B0:58:36:0D:34:90:AE:9A:EB:4A:35:CB:C1:F6:CB:59:FF:BC Authority key identifier: 3B:86:A4:A4:53:80:C6:D4:55:CD:E5:80:DE:D1:BC:56:12:D0:A5:78 Certificate issuer: /CN=3B86A4A45380C6D455CDE580DED1BC5612D0A578 Certificate serial: 2C5BB8FFDD55BD193C01532BF3D04C79906D6E75 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/3B86A4A45380C6D455CDE580DED1BC5612D0A578.cer Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_25405c76c7a043c89ace167e9d2cf79c/0/3B86A4A45380C6D455CDE580DED1BC5612D0A578.mft Manifest number: 03AD Signing time: Wed 29 Jul 2026 03:43:33 +0000 Manifest this update: Wed 29 Jul 2026 03:38:32 +0000 Manifest next update: Thu 30 Jul 2026 05:56:32 +0000 Files and hashes: 1: 326131313a663263303a666664633a3a2f34382d3438203d3e20323135303639.roa (hash: vn32w0zGgfB0cVJZQUH0tGQAvf+HZ/StuvYLZuELll0=) 2: 326131313a663263303a666664643a3a2f34382d3438203d3e20323135303639.roa (hash: KSgTOOL8ZdXrf0lBxQkVAAr95/tmOBwkp7oTrpzhA3k=) 3: 326131313a663263303a666664313a3a2f34382d3438203d3e20323135303639.roa (hash: AvPgJpOsI1TploqZ0/2ASRnaOVLSsJ7W3kE96A2TVTo=) 4: 326131313a663263303a666664303a3a2f34382d3438203d3e20323135303639.roa (hash: udhj+Cj6LdKS6F7VmXpps98C6UmzFOStEjpktiC8S+w=) 5: 326131313a663263303a666664343a3a2f34362d3436203d3e20323135303639.roa (hash: 8j902cWXOhTuCO690tGBwZ7dH1WqGBRJ8B21eNCGG6w=) 6: 3B86A4A45380C6D455CDE580DED1BC5612D0A578.crl (hash: sPvr6hpz7buecDE1uIoWbEdG4LU78rpW2x8nIgjHXWU=) 7: 326131313a663263303a666664653a3a2f34382d3438203d3e20323135303639.roa (hash: +Pw2Pz/niLR0OIvDdEcfjmpFskGwMua2flzbLEwL+Go=) Validation: OK Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_25405c76c7a043c89ace167e9d2cf79c/0/3B86A4A45380C6D455CDE580DED1BC5612D0A578.crl rsync://rpki-repo.as207960.net/repo/rpki_ca_25405c76c7a043c89ace167e9d2cf79c/0/3B86A4A45380C6D455CDE580DED1BC5612D0A578.mft rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/3B86A4A45380C6D455CDE580DED1BC5612D0A578.cer rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 30 Jul 2026 01:13:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:5b:b8:ff:dd:55:bd:19:3c:01:53:2b:f3:d0:4c:79:90:6d:6e:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3B86A4A45380C6D455CDE580DED1BC5612D0A578 Validity Not Before: Jul 29 03:38:32 2026 GMT Not After : Jul 30 05:56:32 2026 GMT Subject: CN=E1A8B058360D3490AE9AEB4A35CBC1F6CB59FFBC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:9a:24:01:5d:79:dc:60:0a:7c:7a:4f:05:35: 4e:b2:98:18:a3:8a:d6:a3:85:54:97:01:50:7d:47: 7a:cb:1a:94:28:51:ad:17:45:60:f4:63:a4:f3:78: cc:b7:d9:1b:b8:da:e4:34:c2:2c:60:64:7e:f5:1a: 2a:04:7e:0f:d6:31:b4:80:2f:4a:50:e5:20:97:72: d5:0d:c8:55:8f:43:4c:a2:29:a0:99:ec:e5:ff:9b: 47:b6:08:c6:fa:ff:2d:e5:65:50:33:6e:23:33:39: e9:8d:aa:f3:93:05:a5:6f:82:a2:af:9c:ff:f9:ac: 3f:d3:ed:16:48:2d:ce:87:7a:71:ef:22:2d:2b:4e: a0:e8:dd:89:60:aa:5a:01:b6:8d:22:85:99:5a:60: 81:48:c4:30:eb:52:1d:54:cc:be:01:c1:e0:20:e8: 44:65:06:a6:bb:ae:65:42:d2:42:18:a4:02:ce:dc: ec:2a:00:a4:48:3c:28:26:81:1f:30:c5:cf:0b:18: 1a:77:6e:4d:8f:dc:23:2f:f5:0a:3d:dc:1a:6e:04: e5:32:fb:c6:58:49:46:72:05:5a:4d:7e:b6:da:ba: 2e:59:fe:6a:58:d6:98:d6:d8:58:3b:71:0c:2f:86: 2b:d1:36:9a:48:c6:df:b6:88:77:8f:f8:10:df:97: ac:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:A8:B0:58:36:0D:34:90:AE:9A:EB:4A:35:CB:C1:F6:CB:59:FF:BC X509v3 Authority Key Identifier: keyid:3B:86:A4:A4:53:80:C6:D4:55:CD:E5:80:DE:D1:BC:56:12:D0:A5:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_25405c76c7a043c89ace167e9d2cf79c/0/3B86A4A45380C6D455CDE580DED1BC5612D0A578.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/3B86A4A45380C6D455CDE580DED1BC5612D0A578.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_25405c76c7a043c89ace167e9d2cf79c/0/3B86A4A45380C6D455CDE580DED1BC5612D0A578.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 98:8c:8d:8e:42:d2:4e:ec:7b:5a:ed:49:8f:73:dc:31:02:12: 80:df:ae:ef:8a:d8:20:1b:3e:87:d3:79:0e:b5:8f:67:47:f7: 3a:63:03:eb:77:27:a4:3b:c0:c2:aa:14:92:1c:eb:f5:d3:34: 06:e7:4c:89:71:13:be:6e:aa:c5:d7:31:a8:2b:29:36:4e:3f: 4d:d4:34:ea:06:8e:d7:70:7b:79:e8:a2:0c:53:6a:b6:a6:94: c0:6d:45:db:11:14:c3:4f:f8:a4:3f:ee:b6:ac:7e:5b:96:31: b5:87:6e:27:a3:2f:fd:ad:4f:16:be:37:f2:4a:3e:3b:d5:a9: ee:14:dd:79:40:83:cc:dc:44:85:75:28:05:2d:1f:2d:03:4b: 2f:fe:84:45:e0:ab:8a:58:da:fa:80:0b:b3:2b:62:76:36:6e: 03:f7:bb:a1:f5:7a:32:35:b7:1b:bd:b3:78:09:92:b9:cc:08: 81:a5:b8:75:06:5f:32:48:10:b4:37:42:0b:e4:ae:be:93:de: 83:f5:96:ea:1c:f3:eb:1a:2d:be:26:05:4d:4c:81:a0:33:70: ac:0b:c7:c5:0b:76:cc:73:24:2f:1b:5e:44:3f:17:7b:17:a4: ba:41:64:25:af:fe:bd:65:98:4e:ae:a0:8f:b9:99:d8:57:e3: 53:21:29:83 -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIULFu4/91VvRk8AVMr89BMeZBtbnUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0I4NkE0QTQ1MzgwQzZENDU1Q0RFNTgwREVEMUJDNTYx MkQwQTU3ODAeFw0yNjA3MjkwMzM4MzJaFw0yNjA3MzAwNTU2MzJaMDMxMTAvBgNV BAMTKEUxQThCMDU4MzYwRDM0OTBBRTlBRUI0QTM1Q0JDMUY2Q0I1OUZGQkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxmiQBXXncYAp8ek8FNU6ymBij itajhVSXAVB9R3rLGpQoUa0XRWD0Y6TzeMy32Ru42uQ0wixgZH71GioEfg/WMbSA L0pQ5SCXctUNyFWPQ0yiKaCZ7OX/m0e2CMb6/y3lZVAzbiMzOemNqvOTBaVvgqKv nP/5rD/T7RZILc6HenHvIi0rTqDo3YlgqloBto0ihZlaYIFIxDDrUh1UzL4BweAg 6ERlBqa7rmVC0kIYpALO3OwqAKRIPCgmgR8wxc8LGBp3bk2P3CMv9Qo93BpuBOUy +8ZYSUZyBVpNfrbaui5Z/mpY1pjW2Fg7cQwvhivRNppIxt+2iHeP+BDfl6yDAgMB AAGjggJ4MIICdDAdBgNVHQ4EFgQU4aiwWDYNNJCumutKNcvB9stZ/7wwHwYDVR0j BBgwFoAUO4akpFOAxtRVzeWA3tG8VhLQpXgwDgYDVR0PAQH/BAQDAgeAMIGPBgNV HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv cmVwby9ycGtpX2NhXzI1NDA1Yzc2YzdhMDQzYzg5YWNlMTY3ZTlkMmNmNzljLzAv M0I4NkE0QTQ1MzgwQzZENDU1Q0RFNTgwREVEMUJDNTYxMkQwQTU3OC5jcmwwgZ4G CCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5wYWFz LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQxYjUtODJh MC1mMGQwMmMwM2EyYzYvNy8zQjg2QTRBNDUzODBDNkQ0NTVDREU1ODBERUQxQkM1 NjEyRDBBNTc4LmNlcjCBmgYIKwYBBQUHAQsEgY0wgYowgYcGCCsGAQUFBzALhnty c3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQvcmVwby9ycGtpX2NhXzI1NDA1 Yzc2YzdhMDQzYzg5YWNlMTY3ZTlkMmNmNzljLzAvM0I4NkE0QTQ1MzgwQzZENDU1 Q0RFNTgwREVEMUJDNTYxMkQwQTU3OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAJiMjY5C0k7se1rtSY9z 3DECEoDfru+K2CAbPofTeQ61j2dH9zpjA+t3J6Q7wMKqFJIc6/XTNAbnTIlxE75u qsXXMagrKTZOP03UNOoGjtdwe3noogxTaramlMBtRdsRFMNP+KQ/7rasfluWMbWH biejL/2tTxa+N/JKPjvVqe4U3XlAg8zcRIV1KAUtHy0DSy/+hEXgq4pY2vqAC7Mr YnY2bgP3u6H1ejI1txu9s3gJkrnMCIGluHUGXzJIELQ3Qgvkrr6T3oP1luoc8+sa Lb4mBU1MgaAzcKwLx8ULdsxzJC8bXkQ/F3sXpLpBZCWv/r1lmE6uoI+5mdhX41Mh KYM= -----END CERTIFICATE-----Generated at Wed Jul 29 11:03:34 2026 by rpki-client