$ rpki-client -vvvf rpki-repo.as207960.net/repo/rpki_ca_a8405eb53de446a994d21f3c27ea3f98/0/AF5AEE5AC3835DADFF52DCE6BE76F9832BC3D439.mft File: AF5AEE5AC3835DADFF52DCE6BE76F9832BC3D439.mft (raw, json) Hash identifier: Yw+mbINaACg5F63EvhSf3Nvmrdek/Vrrw3TRwC5Wlhk= Subject key identifier: 81:41:8C:06:32:7E:FE:06:56:48:58:03:F4:8E:7D:0A:EE:36:39:BF Authority key identifier: AF:5A:EE:5A:C3:83:5D:AD:FF:52:DC:E6:BE:76:F9:83:2B:C3:D4:39 Certificate issuer: /CN=AF5AEE5AC3835DADFF52DCE6BE76F9832BC3D439 Certificate serial: 2F7B6AD72693FB2B3662C05846317111BCB5556C Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/AF5AEE5AC3835DADFF52DCE6BE76F9832BC3D439.cer Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_a8405eb53de446a994d21f3c27ea3f98/0/AF5AEE5AC3835DADFF52DCE6BE76F9832BC3D439.mft Manifest number: 03E4 Signing time: Fri 25 Sep 2026 03:36:00 +0000 Manifest this update: Fri 25 Sep 2026 03:31:00 +0000 Manifest next update: Sat 26 Sep 2026 05:31:00 +0000 Files and hashes: 1: 326131313a663263303a666663633a3a2f34382d3438203d3e20323135373638.roa (hash: Kk1bQIf9LRxj6c8BCVTFj/J0x7No1PMyTUzJXHrtFfg=) 2: AF5AEE5AC3835DADFF52DCE6BE76F9832BC3D439.crl (hash: A21IBCXpdKueUS99MoyempbpTh/G+4eL9MdM0lSouTM=) Validation: OK Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_a8405eb53de446a994d21f3c27ea3f98/0/AF5AEE5AC3835DADFF52DCE6BE76F9832BC3D439.crl rsync://rpki-repo.as207960.net/repo/rpki_ca_a8405eb53de446a994d21f3c27ea3f98/0/AF5AEE5AC3835DADFF52DCE6BE76F9832BC3D439.mft rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/AF5AEE5AC3835DADFF52DCE6BE76F9832BC3D439.cer rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 25 Sep 2026 12:08:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:7b:6a:d7:26:93:fb:2b:36:62:c0:58:46:31:71:11:bc:b5:55:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AF5AEE5AC3835DADFF52DCE6BE76F9832BC3D439 Validity Not Before: Sep 25 03:31:00 2026 GMT Not After : Sep 26 05:31:00 2026 GMT Subject: CN=81418C06327EFE0656485803F48E7D0AEE3639BF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:90:25:80:e2:d2:8a:a8:6f:2d:ad:29:7b:33: 8e:93:60:0f:8e:a7:0e:fb:ba:09:a2:a3:71:c6:c6: 7f:90:58:3e:17:5f:db:c7:50:09:b6:9e:05:c5:d5: 75:d8:13:4f:24:ef:be:10:3e:56:08:83:cb:1f:f8: 29:0a:2d:0f:94:1b:9f:e7:ec:19:54:e8:6a:d1:45: b4:2f:eb:d4:4f:1a:1f:ed:08:2b:df:e8:20:27:3b: b0:f5:8a:b3:7b:7c:51:99:09:a9:61:7a:c2:b6:ea: 36:30:e2:98:3a:d7:00:01:68:02:4a:bc:57:2a:5b: 1e:a4:b6:63:35:2f:0c:6a:c9:88:1c:a5:44:f3:77: a9:03:95:c1:f2:bb:aa:21:20:2e:dc:00:dc:87:e7: 8b:d5:21:f6:90:f5:aa:fe:ad:17:3f:28:15:4c:d7: 7f:f9:be:4a:57:19:1f:04:a8:d4:3d:24:21:59:66: fb:40:ba:ca:94:a1:a0:6c:93:2e:20:24:eb:5d:03: c4:ac:50:05:fc:5d:76:67:00:c1:16:de:94:b8:4f: 4d:86:a1:c3:e0:83:77:f7:fc:e7:d7:a9:6c:f7:32: f9:24:20:a8:ca:53:40:44:92:68:71:be:fe:37:ce: 7b:79:83:9d:9c:41:ce:1c:2a:7f:78:e7:de:dd:65: 23:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:41:8C:06:32:7E:FE:06:56:48:58:03:F4:8E:7D:0A:EE:36:39:BF X509v3 Authority Key Identifier: keyid:AF:5A:EE:5A:C3:83:5D:AD:FF:52:DC:E6:BE:76:F9:83:2B:C3:D4:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_a8405eb53de446a994d21f3c27ea3f98/0/AF5AEE5AC3835DADFF52DCE6BE76F9832BC3D439.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/AF5AEE5AC3835DADFF52DCE6BE76F9832BC3D439.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_a8405eb53de446a994d21f3c27ea3f98/0/AF5AEE5AC3835DADFF52DCE6BE76F9832BC3D439.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:2d:bf:8f:64:fa:1a:63:92:0f:41:85:b9:ba:5c:6b:5c:41: 5b:9c:04:ba:45:c5:04:6c:a1:26:a0:5a:90:41:18:06:54:b0: 78:35:1e:7b:0a:12:60:42:42:03:84:bc:4e:72:f3:7b:f1:44: 04:0b:56:a4:4d:6a:46:10:e4:5c:be:66:7f:40:35:9b:bb:3a: 90:81:8d:ba:0a:be:10:1d:24:3a:4d:7f:3a:e9:94:b5:99:49: 30:2f:e9:ca:da:ec:d5:f8:18:c1:bb:e0:08:4c:65:8a:06:fb: aa:a8:f3:e8:a2:fa:9f:17:01:c2:6b:3b:0c:00:18:ac:d7:f0: 7a:39:4b:b4:3f:38:b0:58:c0:4c:71:75:b6:1e:1d:e9:ce:45: 78:23:48:4d:c4:b5:23:27:d3:03:6d:78:e9:e6:21:85:45:14: 71:05:09:ae:38:f7:05:9d:3d:b1:ba:00:e7:91:98:a8:0b:44: b2:79:fa:fb:51:bd:43:33:fa:0f:05:4e:0b:85:f0:48:31:8a: 83:fe:95:74:ec:ea:28:89:9c:62:e6:b1:ed:b2:90:85:ba:14: 09:ba:eb:84:1f:69:68:db:64:b0:3a:5a:22:99:7a:e5:79:05: b5:f7:d8:46:ee:95:b1:a4:f5:a3:5b:de:f2:c6:21:bf:46:fc: c9:b5:d4:18 -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIUL3tq1yaT+ys2YsBYRjFxEby1VWwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUY1QUVFNUFDMzgzNURBREZGNTJEQ0U2QkU3NkY5ODMy QkMzRDQzOTAeFw0yNjA5MjUwMzMxMDBaFw0yNjA5MjYwNTMxMDBaMDMxMTAvBgNV BAMTKDgxNDE4QzA2MzI3RUZFMDY1NjQ4NTgwM0Y0OEU3RDBBRUUzNjM5QkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHkCWA4tKKqG8trSl7M46TYA+O pw77ugmio3HGxn+QWD4XX9vHUAm2ngXF1XXYE08k774QPlYIg8sf+CkKLQ+UG5/n 7BlU6GrRRbQv69RPGh/tCCvf6CAnO7D1irN7fFGZCalhesK26jYw4pg61wABaAJK vFcqWx6ktmM1LwxqyYgcpUTzd6kDlcHyu6ohIC7cANyH54vVIfaQ9ar+rRc/KBVM 13/5vkpXGR8EqNQ9JCFZZvtAusqUoaBsky4gJOtdA8SsUAX8XXZnAMEW3pS4T02G ocPgg3f3/OfXqWz3MvkkIKjKU0BEkmhxvv43znt5g52cQc4cKn94597dZSNFAgMB AAGjggJ4MIICdDAdBgNVHQ4EFgQUgUGMBjJ+/gZWSFgD9I59Cu42Ob8wHwYDVR0j BBgwFoAUr1ruWsODXa3/Utzmvnb5gyvD1DkwDgYDVR0PAQH/BAQDAgeAMIGPBgNV HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv cmVwby9ycGtpX2NhX2E4NDA1ZWI1M2RlNDQ2YTk5NGQyMWYzYzI3ZWEzZjk4LzAv QUY1QUVFNUFDMzgzNURBREZGNTJEQ0U2QkU3NkY5ODMyQkMzRDQzOS5jcmwwgZ4G CCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5wYWFz LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQxYjUtODJh MC1mMGQwMmMwM2EyYzYvNy9BRjVBRUU1QUMzODM1REFERkY1MkRDRTZCRTc2Rjk4 MzJCQzNENDM5LmNlcjCBmgYIKwYBBQUHAQsEgY0wgYowgYcGCCsGAQUFBzALhnty c3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQvcmVwby9ycGtpX2NhX2E4NDA1 ZWI1M2RlNDQ2YTk5NGQyMWYzYzI3ZWEzZjk4LzAvQUY1QUVFNUFDMzgzNURBREZG NTJEQ0U2QkU3NkY5ODMyQkMzRDQzOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAEwtv49k+hpjkg9Bhbm6 XGtcQVucBLpFxQRsoSagWpBBGAZUsHg1HnsKEmBCQgOEvE5y83vxRAQLVqRNakYQ 5Fy+Zn9ANZu7OpCBjboKvhAdJDpNfzrplLWZSTAv6cra7NX4GMG74AhMZYoG+6qo 8+ii+p8XAcJrOwwAGKzX8Ho5S7Q/OLBYwExxdbYeHenORXgjSE3EtSMn0wNteOnm IYVFFHEFCa449wWdPbG6AOeRmKgLRLJ5+vtRvUMz+g8FTguF8EgxioP+lXTs6iiJ nGLmse2ykIW6FAm664QfaWjbZLA6WiKZeuV5BbX32EbulbGk9aNb3vLGIb9G/Mm1 1Bg= -----END CERTIFICATE-----Generated at Fri Sep 25 05:35:35 2026 by rpki-client