$ rpki-client -vvvf rpki-repo.as207960.net/repo/rpki_ca_cf8a4e16b3584a11b911bb04d7e0a43f/0/3FF2982D4C8AE10F3F4EABDC8163F1D209271824.mft File: 3FF2982D4C8AE10F3F4EABDC8163F1D209271824.mft (raw, json) Hash identifier: E/NCNR466Yl+vzMGtNqXYeFqlcmkI+0Hwp5spJrwECw= Subject key identifier: 58:B4:46:4F:0E:29:23:A5:83:6D:4A:D5:30:5C:7D:27:AA:9C:FA:6E Authority key identifier: 3F:F2:98:2D:4C:8A:E1:0F:3F:4E:AB:DC:81:63:F1:D2:09:27:18:24 Certificate issuer: /CN=3FF2982D4C8AE10F3F4EABDC8163F1D209271824 Certificate serial: 5B383486F29844E5987658389E7E4920E644438A Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/3FF2982D4C8AE10F3F4EABDC8163F1D209271824.cer Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_cf8a4e16b3584a11b911bb04d7e0a43f/0/3FF2982D4C8AE10F3F4EABDC8163F1D209271824.mft Manifest number: B9 Signing time: Sat 26 Sep 2026 23:31:28 +0000 Manifest this update: Sat 26 Sep 2026 23:26:27 +0000 Manifest next update: Mon 28 Sep 2026 02:08:27 +0000 Files and hashes: 1: 3FF2982D4C8AE10F3F4EABDC8163F1D209271824.crl (hash: P0WjhzbzUa/UJ1ONtIfdVTqZcD9BCgW8wkOr0sTJfTU=) 2: 326131313a663263303a666665333a3a2f34382d3438203d3e20323131333730.roa (hash: v6P7lVcBcrvneKUvz62ZdwKzn3zDH59Qve86pHfHkj8=) Validation: OK Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_cf8a4e16b3584a11b911bb04d7e0a43f/0/3FF2982D4C8AE10F3F4EABDC8163F1D209271824.crl rsync://rpki-repo.as207960.net/repo/rpki_ca_cf8a4e16b3584a11b911bb04d7e0a43f/0/3FF2982D4C8AE10F3F4EABDC8163F1D209271824.mft rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/3FF2982D4C8AE10F3F4EABDC8163F1D209271824.cer rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 28 Sep 2026 02:08:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:38:34:86:f2:98:44:e5:98:76:58:38:9e:7e:49:20:e6:44:43:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3FF2982D4C8AE10F3F4EABDC8163F1D209271824 Validity Not Before: Sep 26 23:26:27 2026 GMT Not After : Sep 28 02:08:27 2026 GMT Subject: CN=58B4464F0E2923A5836D4AD5305C7D27AA9CFA6E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:e3:8a:f5:d7:91:a9:19:64:9c:31:84:de:e3: 9e:5d:ce:a8:e3:3d:83:7c:c9:08:43:58:88:65:36: 1e:8b:ed:fa:0f:d7:f4:78:42:8a:98:88:5a:10:3d: ba:bb:d2:d6:3b:68:12:6e:c2:10:55:9c:1f:03:42: 0b:f2:1e:68:60:e0:83:08:30:7d:b1:59:d0:a5:b7: 3a:7f:05:ee:a9:b3:5e:17:9f:91:17:aa:a7:9f:b6: 41:80:27:95:32:85:24:6b:3e:73:86:e2:88:d4:1e: 76:cc:b8:a6:16:40:6f:0c:ac:97:65:c1:45:62:09: 10:10:f0:0d:62:ed:2a:15:d1:4c:8e:da:bf:dd:23: 83:d0:f6:c0:02:19:29:1c:48:06:03:cb:1a:90:45: 83:ca:f0:ad:c5:17:cc:21:1a:88:ae:56:16:9c:0a: d3:68:53:4d:57:c1:33:83:c4:19:17:12:a3:b7:c2: 1b:97:f9:7a:55:4d:94:3b:8b:46:02:0a:29:73:6e: c7:07:cc:bb:70:07:6f:dd:95:6c:ab:a8:95:8d:b7: 46:76:79:b9:79:81:38:42:c1:ca:d2:fe:fb:78:cb: f1:d2:5f:3f:14:fa:5c:27:a9:91:4d:bf:e0:2b:76: ed:4f:d6:1f:60:04:be:12:89:22:19:c5:84:7a:46: 52:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:B4:46:4F:0E:29:23:A5:83:6D:4A:D5:30:5C:7D:27:AA:9C:FA:6E X509v3 Authority Key Identifier: keyid:3F:F2:98:2D:4C:8A:E1:0F:3F:4E:AB:DC:81:63:F1:D2:09:27:18:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_cf8a4e16b3584a11b911bb04d7e0a43f/0/3FF2982D4C8AE10F3F4EABDC8163F1D209271824.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/3FF2982D4C8AE10F3F4EABDC8163F1D209271824.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_cf8a4e16b3584a11b911bb04d7e0a43f/0/3FF2982D4C8AE10F3F4EABDC8163F1D209271824.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:81:cc:b0:ac:be:e8:2d:38:c9:f7:c9:8e:40:31:a5:69:e1: 91:1e:ef:4a:53:48:3c:cf:b7:31:00:6f:82:98:bd:16:2f:bc: 1b:59:66:a1:90:01:44:b7:32:b7:10:23:96:ce:b9:77:77:8b: 17:55:52:13:36:e2:1f:4b:c6:a1:ac:e6:2e:d2:d0:18:b0:e3: f7:1a:3e:06:c8:e7:cb:8c:07:7c:c0:df:26:90:2b:5f:9c:cb: 51:3f:e9:18:30:92:34:8c:39:7b:45:f4:f9:8e:dd:d0:cc:af: e1:64:e7:08:cd:57:85:23:2f:35:25:9b:e8:fe:da:7e:a5:0f: 4c:b2:70:e5:ad:00:63:59:a0:71:15:0d:23:40:ae:84:c3:f7: 6b:a5:b2:12:4b:47:ed:21:b1:c4:9e:b7:2c:9c:0d:ac:51:f1: 53:15:a5:cf:73:83:76:cc:ab:5e:01:98:6e:86:05:12:17:88: 0f:f9:20:25:dd:dc:96:b0:b7:75:c0:f0:ad:5e:97:69:f8:19: 86:8a:35:65:e5:6c:94:5e:01:55:ac:2e:69:34:85:85:9b:e8: ce:82:d7:c4:b6:94:59:92:85:69:7a:63:58:45:02:70:74:d0: 0e:10:86:0f:c2:dd:8a:11:fe:ec:3f:e8:1a:9c:3c:13:32:28: 3c:3c:35:ac -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIUWzg0hvKYROWYdlg4nn5JIOZEQ4owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0ZGMjk4MkQ0QzhBRTEwRjNGNEVBQkRDODE2M0YxRDIw OTI3MTgyNDAeFw0yNjA5MjYyMzI2MjdaFw0yNjA5MjgwMjA4MjdaMDMxMTAvBgNV BAMTKDU4QjQ0NjRGMEUyOTIzQTU4MzZENEFENTMwNUM3RDI3QUE5Q0ZBNkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDF44r115GpGWScMYTe455dzqjj PYN8yQhDWIhlNh6L7foP1/R4QoqYiFoQPbq70tY7aBJuwhBVnB8DQgvyHmhg4IMI MH2xWdCltzp/Be6ps14Xn5EXqqeftkGAJ5UyhSRrPnOG4ojUHnbMuKYWQG8MrJdl wUViCRAQ8A1i7SoV0UyO2r/dI4PQ9sACGSkcSAYDyxqQRYPK8K3FF8whGoiuVhac CtNoU01XwTODxBkXEqO3whuX+XpVTZQ7i0YCCilzbscHzLtwB2/dlWyrqJWNt0Z2 ebl5gThCwcrS/vt4y/HSXz8U+lwnqZFNv+Ardu1P1h9gBL4SiSIZxYR6RlJrAgMB AAGjggJ4MIICdDAdBgNVHQ4EFgQUWLRGTw4pI6WDbUrVMFx9J6qc+m4wHwYDVR0j BBgwFoAUP/KYLUyK4Q8/TqvcgWPx0gknGCQwDgYDVR0PAQH/BAQDAgeAMIGPBgNV HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv cmVwby9ycGtpX2NhX2NmOGE0ZTE2YjM1ODRhMTFiOTExYmIwNGQ3ZTBhNDNmLzAv M0ZGMjk4MkQ0QzhBRTEwRjNGNEVBQkRDODE2M0YxRDIwOTI3MTgyNC5jcmwwgZ4G CCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5wYWFz LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQxYjUtODJh MC1mMGQwMmMwM2EyYzYvNy8zRkYyOTgyRDRDOEFFMTBGM0Y0RUFCREM4MTYzRjFE MjA5MjcxODI0LmNlcjCBmgYIKwYBBQUHAQsEgY0wgYowgYcGCCsGAQUFBzALhnty c3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQvcmVwby9ycGtpX2NhX2NmOGE0 ZTE2YjM1ODRhMTFiOTExYmIwNGQ3ZTBhNDNmLzAvM0ZGMjk4MkQ0QzhBRTEwRjNG NEVBQkRDODE2M0YxRDIwOTI3MTgyNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBADOBzLCsvugtOMn3yY5A MaVp4ZEe70pTSDzPtzEAb4KYvRYvvBtZZqGQAUS3MrcQI5bOuXd3ixdVUhM24h9L xqGs5i7S0Biw4/caPgbI58uMB3zA3yaQK1+cy1E/6RgwkjSMOXtF9PmO3dDMr+Fk 5wjNV4UjLzUlm+j+2n6lD0yycOWtAGNZoHEVDSNAroTD92ulshJLR+0hscSetyyc DaxR8VMVpc9zg3bMq14BmG6GBRIXiA/5ICXd3Jawt3XA8K1el2n4GYaKNWXlbJRe AVWsLmk0hYWb6M6C18S2lFmShWl6Y1hFAnB00A4Qhg/C3YoR/uw/6BqcPBMyKDw8 Naw= -----END CERTIFICATE-----Generated at Sun Sep 27 15:03:22 2026 by rpki-client