$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_a8405eb53de446a994d21f3c27ea3f98/0/AF5AEE5AC3835DADFF52DCE6BE76F9832BC3D439.mft File: AF5AEE5AC3835DADFF52DCE6BE76F9832BC3D439.mft (raw, json) Hash identifier: RU2WOm0DAW21wWs6xfz7VUwfreGGGuksm/quF3ZDt/w= Subject key identifier: CE:E1:5F:20:68:96:DA:52:C9:D0:34:FA:7C:F6:9D:92:94:09:06:80 Authority key identifier: AF:5A:EE:5A:C3:83:5D:AD:FF:52:DC:E6:BE:76:F9:83:2B:C3:D4:39 Certificate issuer: /CN=AF5AEE5AC3835DADFF52DCE6BE76F9832BC3D439 Certificate serial: 1ACD2307E51C707AEC92F3C11DBB559BD19C2399 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/AF5AEE5AC3835DADFF52DCE6BE76F9832BC3D439.cer Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_a8405eb53de446a994d21f3c27ea3f98/0/AF5AEE5AC3835DADFF52DCE6BE76F9832BC3D439.mft Manifest number: 03A8 Signing time: Tue 28 Jul 2026 19:14:45 +0000 Manifest this update: Tue 28 Jul 2026 19:09:45 +0000 Manifest next update: Wed 29 Jul 2026 22:41:45 +0000 Files and hashes: 1: AF5AEE5AC3835DADFF52DCE6BE76F9832BC3D439.crl (hash: nyi1FqaGiQeEOqKVWRpT/uSpMRm/QXpI8SyBbL/xlCc=) 2: 326131313a663263303a666663633a3a2f34382d3438203d3e20323135373638.roa (hash: Kk1bQIf9LRxj6c8BCVTFj/J0x7No1PMyTUzJXHrtFfg=) Validation: OK Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_a8405eb53de446a994d21f3c27ea3f98/0/AF5AEE5AC3835DADFF52DCE6BE76F9832BC3D439.crl rsync://rpki-repo.as207960.net/repo/rpki_ca_a8405eb53de446a994d21f3c27ea3f98/0/AF5AEE5AC3835DADFF52DCE6BE76F9832BC3D439.mft rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/AF5AEE5AC3835DADFF52DCE6BE76F9832BC3D439.cer rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 29 Jul 2026 22:41:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:cd:23:07:e5:1c:70:7a:ec:92:f3:c1:1d:bb:55:9b:d1:9c:23:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AF5AEE5AC3835DADFF52DCE6BE76F9832BC3D439 Validity Not Before: Jul 28 19:09:45 2026 GMT Not After : Jul 29 22:41:45 2026 GMT Subject: CN=CEE15F206896DA52C9D034FA7CF69D9294090680 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:84:4b:e4:be:6e:be:83:31:bd:72:16:43:ec: f0:54:62:9b:b7:66:a2:fc:f3:98:30:a9:a6:ef:8c: 88:cf:54:02:e8:d7:a0:14:d2:c4:5b:a4:e1:33:9c: ed:8b:07:55:da:89:be:f2:1c:45:36:bd:6a:dc:6e: 7f:02:79:69:9c:6d:a0:9a:8c:29:2f:68:7a:d8:95: 23:f2:5d:ba:a4:e3:cd:c6:84:b9:3c:68:35:62:fd: f8:c2:70:00:e5:03:22:b7:b5:0e:9f:39:da:58:f8: 6f:ee:7a:6b:b3:9f:c9:3b:77:97:c9:02:80:a5:c2: 07:1a:40:d5:7a:f5:ea:2b:19:58:97:5d:1c:20:a8: ed:d5:fb:1b:32:58:18:f6:4b:ff:cd:95:9b:24:ee: e2:14:34:c5:9c:5e:64:55:0f:de:25:3a:92:8a:8c: 06:51:76:b7:b7:e3:be:99:db:b0:b8:66:87:86:11: 4c:66:9d:49:5d:26:38:3c:c4:59:6c:47:5f:e2:e2: a4:7b:ee:83:28:6e:36:86:30:52:a3:12:49:51:59: 96:f2:23:57:91:89:9f:6b:20:9f:5c:55:f2:1a:ec: 06:63:52:5d:4e:86:6f:8f:ce:2e:c1:07:4a:63:70: bf:ed:51:5b:e3:6b:f2:85:9d:e1:72:ac:65:c8:16: c0:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:E1:5F:20:68:96:DA:52:C9:D0:34:FA:7C:F6:9D:92:94:09:06:80 X509v3 Authority Key Identifier: keyid:AF:5A:EE:5A:C3:83:5D:AD:FF:52:DC:E6:BE:76:F9:83:2B:C3:D4:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_a8405eb53de446a994d21f3c27ea3f98/0/AF5AEE5AC3835DADFF52DCE6BE76F9832BC3D439.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/AF5AEE5AC3835DADFF52DCE6BE76F9832BC3D439.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_a8405eb53de446a994d21f3c27ea3f98/0/AF5AEE5AC3835DADFF52DCE6BE76F9832BC3D439.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:33:92:2b:65:a8:5f:dc:21:da:ab:a3:8a:bb:91:b5:e7:34: e8:95:03:45:82:51:90:0a:12:da:a0:2d:c9:33:e6:ac:49:2a: fe:cc:a8:72:47:ce:e3:e6:5b:24:14:e5:c1:2a:79:18:a7:ba: 8b:11:75:a8:52:6a:2f:23:4a:0d:81:03:f1:6d:b6:34:56:6e: 49:f6:a1:d1:d3:da:9f:fd:82:2b:74:45:97:ee:57:b6:70:8c: 47:45:21:d2:e9:67:fc:5b:18:16:c3:5a:c7:e1:7d:13:a1:96: d9:73:c8:1b:a3:2e:e9:9d:df:6f:45:1c:0f:ce:ce:03:be:76: 2c:4a:9e:8b:99:94:d1:ce:fa:68:b2:12:80:54:ed:c3:c8:ef: 08:d3:88:98:c4:20:29:b5:d2:7e:5f:c9:23:eb:9b:3c:f9:9f: 40:55:fd:31:6c:57:ad:6c:99:ee:5a:2a:cd:e0:3f:7a:8a:80: 78:6e:1c:3a:87:e1:27:9e:d4:f9:56:99:b8:e9:e5:18:35:89: fe:c8:31:60:ca:b2:a8:6c:63:93:19:35:37:ea:89:1f:ea:90: 9c:1c:0a:01:c2:0a:92:20:a3:de:f0:de:3a:4a:d2:6f:7b:b5: 1a:05:c1:df:20:a6:ff:06:29:2c:ec:4d:06:b5:0a:a3:8a:3f: 59:3d:66:82 -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIUGs0jB+UccHrskvPBHbtVm9GcI5kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUY1QUVFNUFDMzgzNURBREZGNTJEQ0U2QkU3NkY5ODMy QkMzRDQzOTAeFw0yNjA3MjgxOTA5NDVaFw0yNjA3MjkyMjQxNDVaMDMxMTAvBgNV BAMTKENFRTE1RjIwNjg5NkRBNTJDOUQwMzRGQTdDRjY5RDkyOTQwOTA2ODAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMhEvkvm6+gzG9chZD7PBUYpu3 ZqL885gwqabvjIjPVALo16AU0sRbpOEznO2LB1Xaib7yHEU2vWrcbn8CeWmcbaCa jCkvaHrYlSPyXbqk483GhLk8aDVi/fjCcADlAyK3tQ6fOdpY+G/uemuzn8k7d5fJ AoClwgcaQNV69eorGViXXRwgqO3V+xsyWBj2S//NlZsk7uIUNMWcXmRVD94lOpKK jAZRdre3476Z27C4ZoeGEUxmnUldJjg8xFlsR1/i4qR77oMobjaGMFKjEklRWZby I1eRiZ9rIJ9cVfIa7AZjUl1Ohm+Pzi7BB0pjcL/tUVvja/KFneFyrGXIFsDDAgMB AAGjggJ4MIICdDAdBgNVHQ4EFgQUzuFfIGiW2lLJ0DT6fPadkpQJBoAwHwYDVR0j BBgwFoAUr1ruWsODXa3/Utzmvnb5gyvD1DkwDgYDVR0PAQH/BAQDAgeAMIGPBgNV HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv cmVwby9ycGtpX2NhX2E4NDA1ZWI1M2RlNDQ2YTk5NGQyMWYzYzI3ZWEzZjk4LzAv QUY1QUVFNUFDMzgzNURBREZGNTJEQ0U2QkU3NkY5ODMyQkMzRDQzOS5jcmwwgZ4G CCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5wYWFz LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQxYjUtODJh MC1mMGQwMmMwM2EyYzYvNy9BRjVBRUU1QUMzODM1REFERkY1MkRDRTZCRTc2Rjk4 MzJCQzNENDM5LmNlcjCBmgYIKwYBBQUHAQsEgY0wgYowgYcGCCsGAQUFBzALhnty c3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQvcmVwby9ycGtpX2NhX2E4NDA1 ZWI1M2RlNDQ2YTk5NGQyMWYzYzI3ZWEzZjk4LzAvQUY1QUVFNUFDMzgzNURBREZG NTJEQ0U2QkU3NkY5ODMyQkMzRDQzOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBACwzkitlqF/cIdqro4q7 kbXnNOiVA0WCUZAKEtqgLckz5qxJKv7MqHJHzuPmWyQU5cEqeRinuosRdahSai8j Sg2BA/FttjRWbkn2odHT2p/9git0RZfuV7ZwjEdFIdLpZ/xbGBbDWsfhfROhltlz yBujLumd329FHA/OzgO+dixKnouZlNHO+miyEoBU7cPI7wjTiJjEICm10n5fySPr mzz5n0BV/TFsV61sme5aKs3gP3qKgHhuHDqH4See1PlWmbjp5Rg1if7IMWDKsqhs Y5MZNTfqiR/qkJwcCgHCCpIgo97w3jpK0m97tRoFwd8gpv8GKSzsTQa1CqOKP1k9 ZoI= -----END CERTIFICATE-----Generated at Wed Jul 29 08:14:41 2026 by rpki-client