$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_f114c1ea7788452cbf38be854ea8359d/0/2B3B97334DA06978185DAC76A2F3EA3585E8231E.mft File: 2B3B97334DA06978185DAC76A2F3EA3585E8231E.mft (raw, json) Hash identifier: JwQyU4kozAuqcMaV8d6784+JoUHmn3lteFk5rQF2z7s= Subject key identifier: A1:61:D4:A3:99:45:83:7E:E8:D3:86:79:2F:98:73:BD:BA:EA:E3:BA Authority key identifier: 2B:3B:97:33:4D:A0:69:78:18:5D:AC:76:A2:F3:EA:35:85:E8:23:1E Certificate issuer: /CN=2B3B97334DA06978185DAC76A2F3EA3585E8231E Certificate serial: 30325A6A879572EF320016B31FCA1E7D9D9C3FE6 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/2B3B97334DA06978185DAC76A2F3EA3585E8231E.cer Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_f114c1ea7788452cbf38be854ea8359d/0/2B3B97334DA06978185DAC76A2F3EA3585E8231E.mft Manifest number: BD Signing time: Fri 17 Apr 2026 20:17:42 +0000 Manifest this update: Fri 17 Apr 2026 20:12:40 +0000 Manifest next update: Sat 18 Apr 2026 22:12:40 +0000 Files and hashes: 1: 326131313a663263303a666665303a3a2f34382d3438203d3e20323134373439.roa (hash: SsKZ08+rzpnXlHPVlF1X2ydZv//GE/sZxshtEoPOB40=) 2: 2B3B97334DA06978185DAC76A2F3EA3585E8231E.crl (hash: rJf98uGTSejRmqKn1H4RO8mQXFLnsXlI8XjGITigB9M=) Validation: OK Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_f114c1ea7788452cbf38be854ea8359d/0/2B3B97334DA06978185DAC76A2F3EA3585E8231E.crl rsync://rpki-repo.as207960.net/repo/rpki_ca_f114c1ea7788452cbf38be854ea8359d/0/2B3B97334DA06978185DAC76A2F3EA3585E8231E.mft rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/2B3B97334DA06978185DAC76A2F3EA3585E8231E.cer rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 18 Apr 2026 16:00:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:32:5a:6a:87:95:72:ef:32:00:16:b3:1f:ca:1e:7d:9d:9c:3f:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2B3B97334DA06978185DAC76A2F3EA3585E8231E Validity Not Before: Apr 17 20:12:40 2026 GMT Not After : Apr 18 22:12:40 2026 GMT Subject: CN=A161D4A39945837EE8D386792F9873BDBAEAE3BA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:26:ed:97:39:95:af:59:25:6b:bd:3d:97:38: d2:d6:5d:61:0b:96:32:39:52:3e:bc:57:ba:c9:66: d3:bc:de:5e:3c:78:08:f2:5b:29:51:91:ad:9a:21: 36:72:6b:f3:03:c9:6a:77:24:00:f4:af:2d:06:bb: c0:8d:0d:65:65:f9:92:0d:3c:a4:98:5f:3c:ef:8d: d9:32:59:bf:2a:11:66:1f:d0:2c:67:84:e0:60:cc: 8e:1a:06:94:af:79:5a:60:6a:6b:14:10:3b:9d:77: af:1a:7a:01:29:1f:12:6f:b6:8a:e2:38:d5:99:ed: d7:e0:c6:61:3e:c3:a9:8b:92:de:63:8b:2d:0e:9e: 34:30:b2:da:f0:f0:52:8c:28:db:d4:c5:83:ed:c6: f1:14:21:da:8c:95:29:56:2d:e0:bd:96:62:56:36: f0:2a:e8:f8:05:d4:c5:90:51:76:a0:67:11:8e:cc: 6f:12:fc:52:a1:69:18:b8:aa:ed:c6:33:2e:9e:fa: b0:71:66:56:4f:a1:28:29:58:27:f2:21:17:4a:e3: ee:b4:f9:aa:21:85:9f:a2:fa:fd:5a:36:0a:14:65: f9:a0:ed:2d:18:0a:2f:bc:8e:b7:5d:e5:22:ef:a2: 12:db:6e:4b:3c:87:c8:e8:62:4b:3a:e5:64:67:8c: e1:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:61:D4:A3:99:45:83:7E:E8:D3:86:79:2F:98:73:BD:BA:EA:E3:BA X509v3 Authority Key Identifier: keyid:2B:3B:97:33:4D:A0:69:78:18:5D:AC:76:A2:F3:EA:35:85:E8:23:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_f114c1ea7788452cbf38be854ea8359d/0/2B3B97334DA06978185DAC76A2F3EA3585E8231E.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/2B3B97334DA06978185DAC76A2F3EA3585E8231E.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_f114c1ea7788452cbf38be854ea8359d/0/2B3B97334DA06978185DAC76A2F3EA3585E8231E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 50:d8:62:59:74:08:e0:43:90:e0:15:00:ef:f8:34:a5:07:c9: a6:32:b7:47:73:c6:74:02:2e:7a:5b:3e:8a:41:e8:78:a8:20: a1:6f:9f:c6:81:4e:49:87:21:5e:85:c9:58:8e:57:f7:b2:d0: 43:f4:9b:22:81:e2:f8:20:ee:fd:cc:6b:00:86:fa:a4:92:f5: ec:0a:d3:12:33:83:3e:52:63:e4:b1:b7:32:e4:25:19:29:6e: c6:b5:b9:13:79:57:3a:aa:40:24:16:4c:b8:52:52:2e:93:ea: c6:6f:a5:26:89:d9:f1:d9:56:24:df:20:86:8c:7e:53:7b:2c: c4:60:20:bc:13:a4:eb:94:99:f8:7e:12:7e:70:64:60:d8:3d: 16:d0:fa:22:bc:16:dd:af:16:0a:c9:e6:de:e5:49:08:3a:33: 55:c2:c9:e8:d7:1f:5c:a4:7c:f1:0a:87:ad:9c:01:1a:60:ef: 93:0f:d0:87:16:89:1f:d5:32:b7:0c:8b:19:59:7b:57:a5:b8: 3e:e6:37:8e:6c:b7:56:6b:1d:a7:14:02:4e:da:a4:7a:fe:db: 41:01:33:7a:a5:48:2f:73:96:d7:6b:c6:fb:84:6a:ae:68:ca: bb:62:3f:9a:5d:18:49:4a:cc:53:ba:16:d6:be:4f:4c:03:4c: f4:52:8c:3b -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIUMDJaaoeVcu8yABazH8oefZ2cP+YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkIzQjk3MzM0REEwNjk3ODE4NURBQzc2QTJGM0VBMzU4 NUU4MjMxRTAeFw0yNjA0MTcyMDEyNDBaFw0yNjA0MTgyMjEyNDBaMDMxMTAvBgNV BAMTKEExNjFENEEzOTk0NTgzN0VFOEQzODY3OTJGOTg3M0JEQkFFQUUzQkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnJu2XOZWvWSVrvT2XONLWXWEL ljI5Uj68V7rJZtO83l48eAjyWylRka2aITZya/MDyWp3JAD0ry0Gu8CNDWVl+ZIN PKSYXzzvjdkyWb8qEWYf0CxnhOBgzI4aBpSveVpgamsUEDudd68aegEpHxJvtori ONWZ7dfgxmE+w6mLkt5jiy0OnjQwstrw8FKMKNvUxYPtxvEUIdqMlSlWLeC9lmJW NvAq6PgF1MWQUXagZxGOzG8S/FKhaRi4qu3GMy6e+rBxZlZPoSgpWCfyIRdK4+60 +aohhZ+i+v1aNgoUZfmg7S0YCi+8jrdd5SLvohLbbks8h8joYks65WRnjOExAgMB AAGjggJ4MIICdDAdBgNVHQ4EFgQUoWHUo5lFg37o04Z5L5hzvbrq47owHwYDVR0j BBgwFoAUKzuXM02gaXgYXax2ovPqNYXoIx4wDgYDVR0PAQH/BAQDAgeAMIGPBgNV HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv cmVwby9ycGtpX2NhX2YxMTRjMWVhNzc4ODQ1MmNiZjM4YmU4NTRlYTgzNTlkLzAv MkIzQjk3MzM0REEwNjk3ODE4NURBQzc2QTJGM0VBMzU4NUU4MjMxRS5jcmwwgZ4G CCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5wYWFz LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQxYjUtODJh MC1mMGQwMmMwM2EyYzYvNy8yQjNCOTczMzREQTA2OTc4MTg1REFDNzZBMkYzRUEz NTg1RTgyMzFFLmNlcjCBmgYIKwYBBQUHAQsEgY0wgYowgYcGCCsGAQUFBzALhnty c3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQvcmVwby9ycGtpX2NhX2YxMTRj MWVhNzc4ODQ1MmNiZjM4YmU4NTRlYTgzNTlkLzAvMkIzQjk3MzM0REEwNjk3ODE4 NURBQzc2QTJGM0VBMzU4NUU4MjMxRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAFDYYll0COBDkOAVAO/4 NKUHyaYyt0dzxnQCLnpbPopB6HioIKFvn8aBTkmHIV6FyViOV/ey0EP0myKB4vgg 7v3MawCG+qSS9ewK0xIzgz5SY+SxtzLkJRkpbsa1uRN5VzqqQCQWTLhSUi6T6sZv pSaJ2fHZViTfIIaMflN7LMRgILwTpOuUmfh+En5wZGDYPRbQ+iK8Ft2vFgrJ5t7l SQg6M1XCyejXH1ykfPEKh62cARpg75MP0IcWiR/VMrcMixlZe1eluD7mN45st1Zr HacUAk7apHr+20EBM3qlSC9zltdrxvuEaq5oyrtiP5pdGElKzFO6Fta+T0wDTPRS jDs= -----END CERTIFICATE-----Generated at Sat Apr 18 00:03:11 2026 by rpki-client