$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_a8405eb53de446a994d21f3c27ea3f98/0/AF5AEE5AC3835DADFF52DCE6BE76F9832BC3D439.mft File: AF5AEE5AC3835DADFF52DCE6BE76F9832BC3D439.mft (raw, json) Hash identifier: uu4zfUfagoeyjlFGNvol0T+pC2T5sTwvZ8/AZ3L1x6c= Subject key identifier: 65:CC:2E:8E:AB:64:F4:63:74:84:D3:36:8B:EE:05:A7:38:8B:64:F6 Authority key identifier: AF:5A:EE:5A:C3:83:5D:AD:FF:52:DC:E6:BE:76:F9:83:2B:C3:D4:39 Certificate issuer: /CN=AF5AEE5AC3835DADFF52DCE6BE76F9832BC3D439 Certificate serial: 575C42ECBE97F4C6A8D53A1DE7FBF95CCD7B2B2E Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/AF5AEE5AC3835DADFF52DCE6BE76F9832BC3D439.cer Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_a8405eb53de446a994d21f3c27ea3f98/0/AF5AEE5AC3835DADFF52DCE6BE76F9832BC3D439.mft Manifest number: 0320 Signing time: Fri 17 Apr 2026 21:37:30 +0000 Manifest this update: Fri 17 Apr 2026 21:32:28 +0000 Manifest next update: Sat 18 Apr 2026 23:25:28 +0000 Files and hashes: 1: AF5AEE5AC3835DADFF52DCE6BE76F9832BC3D439.crl (hash: 9+ip5YmT/qyFXkdIVSfVa2tFu3QZA2Av2ZuO2p+hvss=) 2: 326131313a663263303a666663633a3a2f34382d3438203d3e20323135373638.roa (hash: 40KX5Azg+QOWUNYOrdl6IsWrdX+iJJgcObJYGtl3Q6w=) Validation: OK Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_a8405eb53de446a994d21f3c27ea3f98/0/AF5AEE5AC3835DADFF52DCE6BE76F9832BC3D439.crl rsync://rpki-repo.as207960.net/repo/rpki_ca_a8405eb53de446a994d21f3c27ea3f98/0/AF5AEE5AC3835DADFF52DCE6BE76F9832BC3D439.mft rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/AF5AEE5AC3835DADFF52DCE6BE76F9832BC3D439.cer rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 18 Apr 2026 16:00:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:5c:42:ec:be:97:f4:c6:a8:d5:3a:1d:e7:fb:f9:5c:cd:7b:2b:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AF5AEE5AC3835DADFF52DCE6BE76F9832BC3D439 Validity Not Before: Apr 17 21:32:28 2026 GMT Not After : Apr 18 23:25:28 2026 GMT Subject: CN=65CC2E8EAB64F4637484D3368BEE05A7388B64F6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:de:43:0b:5c:81:46:77:49:8b:aa:af:88:39: 71:df:5a:7f:e8:25:83:8a:b9:2d:df:e8:fa:08:ea: 6c:6b:33:d8:89:c7:82:f0:47:ec:ff:cd:35:3a:01: 0a:55:e7:14:63:cf:d3:b7:b1:8d:ca:bd:28:86:f0: 54:49:6a:e7:7f:76:d6:19:36:38:1d:ef:d7:e4:de: 4d:03:25:81:e0:78:1f:8d:7d:29:40:ab:d5:9c:ee: e1:44:82:35:2d:33:23:28:b5:27:19:cd:6d:63:c3: 47:b5:6c:b8:91:14:db:d8:08:ed:69:17:99:c1:08: e3:7d:46:9e:6b:52:5c:7c:d8:95:5f:6e:a1:4f:fa: 36:28:61:b9:c8:04:b7:ac:95:51:23:b2:36:48:15: c8:29:95:12:8f:99:d4:b0:52:90:e1:c7:7a:a7:0a: 8b:85:1b:8b:40:37:da:b6:c4:06:4f:1f:2a:d9:d9: 7d:9a:8b:f9:0a:ad:ce:92:cc:dd:c6:f4:5b:ad:a5: 6a:bb:27:40:a4:73:10:75:a5:e9:ef:f8:c5:f6:54: 4b:74:c6:34:25:f1:e9:a9:9d:d0:fa:99:bc:ae:cf: 36:d7:ad:1f:73:6a:76:9c:59:1f:43:98:d6:8a:38: 46:3d:4f:8b:97:57:b5:5a:37:98:06:19:34:0f:c7: 8e:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:CC:2E:8E:AB:64:F4:63:74:84:D3:36:8B:EE:05:A7:38:8B:64:F6 X509v3 Authority Key Identifier: keyid:AF:5A:EE:5A:C3:83:5D:AD:FF:52:DC:E6:BE:76:F9:83:2B:C3:D4:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_a8405eb53de446a994d21f3c27ea3f98/0/AF5AEE5AC3835DADFF52DCE6BE76F9832BC3D439.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/AF5AEE5AC3835DADFF52DCE6BE76F9832BC3D439.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_a8405eb53de446a994d21f3c27ea3f98/0/AF5AEE5AC3835DADFF52DCE6BE76F9832BC3D439.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:50:84:b5:9f:96:7b:5d:fd:c5:e8:47:ae:2d:1b:7c:03:a5: c4:ec:11:8d:d2:59:0d:01:08:07:25:64:b4:b1:ae:eb:71:a9: 92:93:43:75:b9:cb:bc:e8:ed:43:a0:71:ff:a0:de:b8:a4:d8: da:34:05:f3:78:4e:d1:92:7c:05:47:0c:1e:a5:5e:f6:44:02: d6:42:3b:0d:da:12:ab:01:c4:97:d9:85:9b:5f:35:68:31:0a: 6d:35:72:3d:57:ce:45:69:b3:1f:27:e4:f3:ad:30:14:ce:8c: 72:f9:63:b4:6d:8f:7d:19:c2:16:1f:30:eb:b3:fd:2f:9a:70: 87:b6:fa:db:7a:19:a9:06:e7:a1:52:05:f4:ab:64:8d:16:ff: 5f:73:bd:b5:66:c2:43:7a:d0:f8:83:77:93:ac:10:85:8f:4d: 9a:70:74:13:47:e9:9f:86:b2:af:10:1c:fe:6d:a7:1f:cd:ff: 68:fb:c8:0b:0f:7a:ce:e9:61:ed:8d:32:9b:c9:72:f7:ca:5f: bb:0b:df:4d:c5:92:7d:a6:81:8b:77:8e:8b:58:d4:74:5a:1b: 19:60:a1:c2:b7:9f:dc:35:14:70:e9:a7:ba:b1:84:48:f3:7f: 64:4f:bf:ae:08:fb:04:a9:99:20:db:e3:33:6c:7f:83:59:ef: 93:bd:f2:8b -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIUV1xC7L6X9Mao1Tod5/v5XM17Ky4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUY1QUVFNUFDMzgzNURBREZGNTJEQ0U2QkU3NkY5ODMy QkMzRDQzOTAeFw0yNjA0MTcyMTMyMjhaFw0yNjA0MTgyMzI1MjhaMDMxMTAvBgNV BAMTKDY1Q0MyRThFQUI2NEY0NjM3NDg0RDMzNjhCRUUwNUE3Mzg4QjY0RjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDH3kMLXIFGd0mLqq+IOXHfWn/o JYOKuS3f6PoI6mxrM9iJx4LwR+z/zTU6AQpV5xRjz9O3sY3KvSiG8FRJaud/dtYZ Njgd79fk3k0DJYHgeB+NfSlAq9Wc7uFEgjUtMyMotScZzW1jw0e1bLiRFNvYCO1p F5nBCON9Rp5rUlx82JVfbqFP+jYoYbnIBLeslVEjsjZIFcgplRKPmdSwUpDhx3qn CouFG4tAN9q2xAZPHyrZ2X2ai/kKrc6SzN3G9FutpWq7J0CkcxB1penv+MX2VEt0 xjQl8empndD6mbyuzzbXrR9zanacWR9DmNaKOEY9T4uXV7VaN5gGGTQPx46ZAgMB AAGjggJ4MIICdDAdBgNVHQ4EFgQUZcwujqtk9GN0hNM2i+4FpziLZPYwHwYDVR0j BBgwFoAUr1ruWsODXa3/Utzmvnb5gyvD1DkwDgYDVR0PAQH/BAQDAgeAMIGPBgNV HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv cmVwby9ycGtpX2NhX2E4NDA1ZWI1M2RlNDQ2YTk5NGQyMWYzYzI3ZWEzZjk4LzAv QUY1QUVFNUFDMzgzNURBREZGNTJEQ0U2QkU3NkY5ODMyQkMzRDQzOS5jcmwwgZ4G CCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5wYWFz LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQxYjUtODJh MC1mMGQwMmMwM2EyYzYvNy9BRjVBRUU1QUMzODM1REFERkY1MkRDRTZCRTc2Rjk4 MzJCQzNENDM5LmNlcjCBmgYIKwYBBQUHAQsEgY0wgYowgYcGCCsGAQUFBzALhnty c3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQvcmVwby9ycGtpX2NhX2E4NDA1 ZWI1M2RlNDQ2YTk5NGQyMWYzYzI3ZWEzZjk4LzAvQUY1QUVFNUFDMzgzNURBREZG NTJEQ0U2QkU3NkY5ODMyQkMzRDQzOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAHxQhLWflntd/cXoR64t G3wDpcTsEY3SWQ0BCAclZLSxrutxqZKTQ3W5y7zo7UOgcf+g3rik2No0BfN4TtGS fAVHDB6lXvZEAtZCOw3aEqsBxJfZhZtfNWgxCm01cj1XzkVpsx8n5POtMBTOjHL5 Y7Rtj30ZwhYfMOuz/S+acIe2+tt6GakG56FSBfSrZI0W/19zvbVmwkN60PiDd5Os EIWPTZpwdBNH6Z+Gsq8QHP5tpx/N/2j7yAsPes7pYe2NMpvJcvfKX7sL303Fkn2m gYt3jotY1HRaGxlgocK3n9w1FHDpp7qxhEjzf2RPv64I+wSpmSDb4zNsf4NZ75O9 8os= -----END CERTIFICATE-----Generated at Sat Apr 18 01:30:26 2026 by rpki-client