$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_a8405eb53de446a994d21f3c27ea3f98/0/AF5AEE5AC3835DADFF52DCE6BE76F9832BC3D439.mft File: AF5AEE5AC3835DADFF52DCE6BE76F9832BC3D439.mft (raw, json) Hash identifier: ImYewNG1qadAhiIxS2RYu/z3nBvcoKo5fkGQ69FofYk= Subject key identifier: 10:7E:A0:C6:83:D1:30:B4:7B:47:0C:2C:8E:2C:41:66:25:F6:09:7D Authority key identifier: AF:5A:EE:5A:C3:83:5D:AD:FF:52:DC:E6:BE:76:F9:83:2B:C3:D4:39 Certificate issuer: /CN=AF5AEE5AC3835DADFF52DCE6BE76F9832BC3D439 Certificate serial: 08285294F283EFF7F7C45F520AC454D6B50383AA Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/AF5AEE5AC3835DADFF52DCE6BE76F9832BC3D439.cer Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_a8405eb53de446a994d21f3c27ea3f98/0/AF5AEE5AC3835DADFF52DCE6BE76F9832BC3D439.mft Manifest number: 036C Signing time: Sat 13 Jun 2026 13:01:29 +0000 Manifest this update: Sat 13 Jun 2026 12:56:29 +0000 Manifest next update: Sun 14 Jun 2026 14:06:29 +0000 Files and hashes: 1: AF5AEE5AC3835DADFF52DCE6BE76F9832BC3D439.crl (hash: nsZRzTNWOnovxozj1zxnmhm6b1mJym1zn49pSKIAv1s=) 2: 326131313a663263303a666663633a3a2f34382d3438203d3e20323135373638.roa (hash: Kk1bQIf9LRxj6c8BCVTFj/J0x7No1PMyTUzJXHrtFfg=) Validation: OK Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_a8405eb53de446a994d21f3c27ea3f98/0/AF5AEE5AC3835DADFF52DCE6BE76F9832BC3D439.crl rsync://rpki-repo.as207960.net/repo/rpki_ca_a8405eb53de446a994d21f3c27ea3f98/0/AF5AEE5AC3835DADFF52DCE6BE76F9832BC3D439.mft rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/AF5AEE5AC3835DADFF52DCE6BE76F9832BC3D439.cer rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Jun 2026 10:00:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:28:52:94:f2:83:ef:f7:f7:c4:5f:52:0a:c4:54:d6:b5:03:83:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AF5AEE5AC3835DADFF52DCE6BE76F9832BC3D439 Validity Not Before: Jun 13 12:56:29 2026 GMT Not After : Jun 14 14:06:29 2026 GMT Subject: CN=107EA0C683D130B47B470C2C8E2C416625F6097D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:ad:ec:0e:0d:d3:84:f7:71:65:5c:f7:40:b1: a4:bf:31:25:7b:bf:fe:2e:c2:e0:95:be:7a:6b:09: 41:a4:40:c7:a1:27:d9:71:e0:74:8e:e1:cf:c5:28: 9a:a7:b9:10:1d:d4:49:83:3a:20:04:df:89:51:ca: 2f:42:b2:4c:07:5b:81:cf:49:32:41:a4:ff:16:67: 72:b0:9e:20:2d:2f:3f:16:0c:1a:6b:90:83:5f:4e: b8:46:ad:71:e9:a4:70:e3:a9:cd:e4:e3:d7:e1:e0: 99:05:94:d6:b0:18:cf:91:42:50:09:9b:57:31:13: c4:9d:38:c6:6e:21:d4:08:b0:e7:d2:8e:01:95:da: af:29:d4:02:48:2d:25:e4:81:3d:db:75:f2:15:79: 70:de:c0:ed:89:43:d4:01:dc:b2:ac:1e:9b:4f:7d: 80:c4:b7:61:c2:3c:c8:27:8b:34:54:af:77:88:88: 14:cc:ae:2d:df:58:06:20:09:04:bb:88:c4:05:fd: dd:b1:d4:6d:70:7b:be:b8:51:01:5c:62:07:50:8c: 73:b7:8a:36:7c:72:8c:a9:58:a3:f3:09:71:2c:e2: 7b:9a:a9:03:b2:b4:52:a5:d7:2e:81:c5:d7:8a:65: 28:0b:97:f5:86:c3:a0:74:31:dc:85:da:3d:f6:51: 58:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:7E:A0:C6:83:D1:30:B4:7B:47:0C:2C:8E:2C:41:66:25:F6:09:7D X509v3 Authority Key Identifier: keyid:AF:5A:EE:5A:C3:83:5D:AD:FF:52:DC:E6:BE:76:F9:83:2B:C3:D4:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_a8405eb53de446a994d21f3c27ea3f98/0/AF5AEE5AC3835DADFF52DCE6BE76F9832BC3D439.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/AF5AEE5AC3835DADFF52DCE6BE76F9832BC3D439.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_a8405eb53de446a994d21f3c27ea3f98/0/AF5AEE5AC3835DADFF52DCE6BE76F9832BC3D439.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:d6:38:b1:3f:81:06:ee:e2:96:51:82:85:8a:39:b3:01:2f: a7:07:bd:70:4b:35:19:97:5c:aa:0b:92:93:f5:68:ef:47:c1: 32:8a:bc:8c:19:b0:f9:e0:43:a0:49:d7:69:19:7b:67:5e:2d: 38:c2:f0:7b:85:c4:b3:43:7e:87:d6:4c:8e:a6:62:c4:9c:60: 66:b6:d0:4e:d8:22:18:83:cb:46:c6:37:b1:68:ab:fb:14:94: fe:32:68:1f:76:bc:14:00:a4:a1:de:71:fb:d9:c4:af:fa:d4: c2:7c:77:d1:fa:9b:6a:1b:ea:fb:7c:a4:ae:54:61:69:f1:08: 48:f4:86:98:fd:4d:21:2c:14:85:6d:ce:df:75:2a:30:da:0b: 53:cb:84:70:1a:ec:b3:ab:74:7c:52:3b:3a:ed:63:ea:61:3a: 32:d6:d5:7e:86:6a:b2:66:a6:80:d8:d3:96:b3:54:23:39:48: 7d:95:d6:8b:1e:a9:63:f1:5f:7f:06:fb:9e:7d:b7:7a:b3:59: d3:56:91:14:c5:67:46:78:08:e0:7f:4d:c4:34:65:99:c7:44: 1f:fc:4b:c2:0a:8a:04:f2:d5:05:48:94:1a:88:8d:3f:77:5d: 25:70:d4:ec:a5:30:0b:4c:6b:9d:71:5c:43:7d:be:03:1d:15: 5a:bf:a1:11 -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIUCChSlPKD7/f3xF9SCsRU1rUDg6owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUY1QUVFNUFDMzgzNURBREZGNTJEQ0U2QkU3NkY5ODMy QkMzRDQzOTAeFw0yNjA2MTMxMjU2MjlaFw0yNjA2MTQxNDA2MjlaMDMxMTAvBgNV BAMTKDEwN0VBMEM2ODNEMTMwQjQ3QjQ3MEMyQzhFMkM0MTY2MjVGNjA5N0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCprewODdOE93FlXPdAsaS/MSV7 v/4uwuCVvnprCUGkQMehJ9lx4HSO4c/FKJqnuRAd1EmDOiAE34lRyi9CskwHW4HP STJBpP8WZ3KwniAtLz8WDBprkINfTrhGrXHppHDjqc3k49fh4JkFlNawGM+RQlAJ m1cxE8SdOMZuIdQIsOfSjgGV2q8p1AJILSXkgT3bdfIVeXDewO2JQ9QB3LKsHptP fYDEt2HCPMgnizRUr3eIiBTMri3fWAYgCQS7iMQF/d2x1G1we764UQFcYgdQjHO3 ijZ8coypWKPzCXEs4nuaqQOytFKl1y6BxdeKZSgLl/WGw6B0MdyF2j32UVj/AgMB AAGjggJ4MIICdDAdBgNVHQ4EFgQUEH6gxoPRMLR7RwwsjixBZiX2CX0wHwYDVR0j BBgwFoAUr1ruWsODXa3/Utzmvnb5gyvD1DkwDgYDVR0PAQH/BAQDAgeAMIGPBgNV HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv cmVwby9ycGtpX2NhX2E4NDA1ZWI1M2RlNDQ2YTk5NGQyMWYzYzI3ZWEzZjk4LzAv QUY1QUVFNUFDMzgzNURBREZGNTJEQ0U2QkU3NkY5ODMyQkMzRDQzOS5jcmwwgZ4G CCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5wYWFz LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQxYjUtODJh MC1mMGQwMmMwM2EyYzYvNy9BRjVBRUU1QUMzODM1REFERkY1MkRDRTZCRTc2Rjk4 MzJCQzNENDM5LmNlcjCBmgYIKwYBBQUHAQsEgY0wgYowgYcGCCsGAQUFBzALhnty c3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQvcmVwby9ycGtpX2NhX2E4NDA1 ZWI1M2RlNDQ2YTk5NGQyMWYzYzI3ZWEzZjk4LzAvQUY1QUVFNUFDMzgzNURBREZG NTJEQ0U2QkU3NkY5ODMyQkMzRDQzOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBABvWOLE/gQbu4pZRgoWK ObMBL6cHvXBLNRmXXKoLkpP1aO9HwTKKvIwZsPngQ6BJ12kZe2deLTjC8HuFxLND fofWTI6mYsScYGa20E7YIhiDy0bGN7Foq/sUlP4yaB92vBQApKHecfvZxK/61MJ8 d9H6m2ob6vt8pK5UYWnxCEj0hpj9TSEsFIVtzt91KjDaC1PLhHAa7LOrdHxSOzrt Y+phOjLW1X6GarJmpoDY05azVCM5SH2V1oseqWPxX38G+559t3qzWdNWkRTFZ0Z4 COB/TcQ0ZZnHRB/8S8IKigTy1QVIlBqIjT93XSVw1OylMAtMa51xXEN9vgMdFVq/ oRE= -----END CERTIFICATE-----Generated at Sat Jun 13 20:33:18 2026 by rpki-client