$ rpki-client -vvvf rpki-repo.as207960.net/repo/rpki_ca_f114c1ea7788452cbf38be854ea8359d/0/2B3B97334DA06978185DAC76A2F3EA3585E8231E.mft File: 2B3B97334DA06978185DAC76A2F3EA3585E8231E.mft (raw, json) Hash identifier: +0Gv/adEUtv+SqikkTqaKy13i0tom+D946uKunXPb7Q= Subject key identifier: E8:61:B9:C5:82:1E:BC:34:99:76:25:08:A7:06:98:66:C5:A2:DB:5D Authority key identifier: 2B:3B:97:33:4D:A0:69:78:18:5D:AC:76:A2:F3:EA:35:85:E8:23:1E Certificate issuer: /CN=2B3B97334DA06978185DAC76A2F3EA3585E8231E Certificate serial: 74E6253DDB4118D6658AD045669B2CAC74BF788A Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/2B3B97334DA06978185DAC76A2F3EA3585E8231E.cer Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_f114c1ea7788452cbf38be854ea8359d/0/2B3B97334DA06978185DAC76A2F3EA3585E8231E.mft Manifest number: 017B Signing time: Mon 21 Sep 2026 11:40:35 +0000 Manifest this update: Mon 21 Sep 2026 11:35:35 +0000 Manifest next update: Tue 22 Sep 2026 12:30:35 +0000 Files and hashes: 1: 2B3B97334DA06978185DAC76A2F3EA3585E8231E.crl (hash: 43LymVb2jwHWfuAXCW8NcbA0ub3bHWazy7gj185qqKw=) 2: 326131313a663263303a666665303a3a2f34382d3438203d3e20323134373439.roa (hash: SsKZ08+rzpnXlHPVlF1X2ydZv//GE/sZxshtEoPOB40=) Validation: OK Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_f114c1ea7788452cbf38be854ea8359d/0/2B3B97334DA06978185DAC76A2F3EA3585E8231E.crl rsync://rpki-repo.as207960.net/repo/rpki_ca_f114c1ea7788452cbf38be854ea8359d/0/2B3B97334DA06978185DAC76A2F3EA3585E8231E.mft rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/2B3B97334DA06978185DAC76A2F3EA3585E8231E.cer rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 22 Sep 2026 12:30:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:e6:25:3d:db:41:18:d6:65:8a:d0:45:66:9b:2c:ac:74:bf:78:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2B3B97334DA06978185DAC76A2F3EA3585E8231E Validity Not Before: Sep 21 11:35:35 2026 GMT Not After : Sep 22 12:30:35 2026 GMT Subject: CN=E861B9C5821EBC3499762508A7069866C5A2DB5D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:72:b8:c0:cf:8f:16:85:7a:80:b7:09:77:c4: c4:26:01:2a:8a:09:09:9f:8c:25:a7:4a:12:a7:df: ba:96:46:06:1b:52:4f:3b:76:33:0f:94:38:5b:87: c8:c8:d1:7b:9f:72:36:af:96:50:0c:c5:28:f7:72: 85:de:12:ad:47:87:ef:1d:60:6b:39:06:50:d9:60: e7:85:c1:0a:19:fb:ec:f5:08:ef:99:ae:38:3c:00: a2:4a:d6:6f:dd:08:6b:97:f7:01:d7:17:ed:cd:dd: f0:8a:ed:63:df:f7:c2:80:b4:66:72:2b:a1:9f:be: 5e:de:e2:1c:9f:ac:72:c1:cb:c5:59:cb:35:cf:a3: 2c:6a:81:be:c0:f3:db:e9:34:c5:06:df:f9:e4:13: c9:4c:88:cd:74:36:89:c6:66:5e:8d:5d:87:23:98: fd:a2:9f:24:ba:07:e1:4f:54:6d:d1:c4:8b:19:30: da:a4:84:f8:29:4e:b2:77:0d:76:df:5c:3b:bd:75: 45:93:89:9b:ff:86:44:3e:f9:80:c6:d3:00:2b:8d: 02:bb:1f:8f:f1:a6:74:c9:70:f6:9c:d1:4b:ba:49: b7:62:7c:17:24:d4:20:ff:29:7d:e2:02:70:9a:8a: c9:31:ca:1c:37:60:23:ea:72:ac:7e:23:36:83:62: 8d:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:61:B9:C5:82:1E:BC:34:99:76:25:08:A7:06:98:66:C5:A2:DB:5D X509v3 Authority Key Identifier: keyid:2B:3B:97:33:4D:A0:69:78:18:5D:AC:76:A2:F3:EA:35:85:E8:23:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_f114c1ea7788452cbf38be854ea8359d/0/2B3B97334DA06978185DAC76A2F3EA3585E8231E.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/2B3B97334DA06978185DAC76A2F3EA3585E8231E.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_f114c1ea7788452cbf38be854ea8359d/0/2B3B97334DA06978185DAC76A2F3EA3585E8231E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:bb:01:fa:5d:86:bc:4b:e7:3b:68:b1:fe:d5:c9:a5:cf:39: a3:2e:56:b5:27:8c:da:16:f9:b1:56:17:ce:55:f9:41:0a:74: 06:d1:7d:ed:37:44:e1:86:f0:1b:61:fc:8a:4f:4c:78:31:1d: 24:a4:cd:cb:65:e3:28:8f:12:47:bf:04:48:02:3d:a0:9a:6b: 34:fc:94:98:c9:da:f0:8a:4b:92:78:57:29:4c:14:ec:09:de: 8d:ed:d0:fc:a8:16:72:3b:03:b5:c3:1a:12:eb:3b:f8:a6:02: 70:ed:13:10:f9:cf:f4:64:ec:b2:ae:8c:fe:22:1e:26:18:09: 68:7d:77:7a:12:81:ea:af:0e:a4:88:5c:f0:26:fe:79:86:f9: c6:db:09:d2:bd:4c:28:c6:3d:78:35:9c:f4:26:77:34:6a:c4: 3f:4e:c2:66:9f:8a:bd:47:5c:be:27:57:54:63:90:36:dd:0d: 0c:c1:f4:ae:5a:80:62:ed:de:af:e8:ed:cd:6c:5e:fc:94:a8: 2e:41:0a:8f:75:64:c6:cc:4b:cf:7b:74:77:44:a0:7c:0c:85: 5d:6e:a1:ab:1f:de:69:6b:c3:fc:bc:b9:fb:9f:4b:08:a2:85: cd:a6:7f:af:00:5a:53:25:aa:18:cc:fc:a8:73:96:1f:88:f0: a5:fc:be:7d -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIUdOYlPdtBGNZlitBFZpssrHS/eIowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkIzQjk3MzM0REEwNjk3ODE4NURBQzc2QTJGM0VBMzU4 NUU4MjMxRTAeFw0yNjA5MjExMTM1MzVaFw0yNjA5MjIxMjMwMzVaMDMxMTAvBgNV BAMTKEU4NjFCOUM1ODIxRUJDMzQ5OTc2MjUwOEE3MDY5ODY2QzVBMkRCNUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBcrjAz48WhXqAtwl3xMQmASqK CQmfjCWnShKn37qWRgYbUk87djMPlDhbh8jI0XufcjavllAMxSj3coXeEq1Hh+8d YGs5BlDZYOeFwQoZ++z1CO+Zrjg8AKJK1m/dCGuX9wHXF+3N3fCK7WPf98KAtGZy K6Gfvl7e4hyfrHLBy8VZyzXPoyxqgb7A89vpNMUG3/nkE8lMiM10NonGZl6NXYcj mP2inyS6B+FPVG3RxIsZMNqkhPgpTrJ3DXbfXDu9dUWTiZv/hkQ++YDG0wArjQK7 H4/xpnTJcPac0Uu6SbdifBck1CD/KX3iAnCaiskxyhw3YCPqcqx+IzaDYo1/AgMB AAGjggJ4MIICdDAdBgNVHQ4EFgQU6GG5xYIevDSZdiUIpwaYZsWi210wHwYDVR0j BBgwFoAUKzuXM02gaXgYXax2ovPqNYXoIx4wDgYDVR0PAQH/BAQDAgeAMIGPBgNV HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv cmVwby9ycGtpX2NhX2YxMTRjMWVhNzc4ODQ1MmNiZjM4YmU4NTRlYTgzNTlkLzAv MkIzQjk3MzM0REEwNjk3ODE4NURBQzc2QTJGM0VBMzU4NUU4MjMxRS5jcmwwgZ4G CCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5wYWFz LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQxYjUtODJh MC1mMGQwMmMwM2EyYzYvNy8yQjNCOTczMzREQTA2OTc4MTg1REFDNzZBMkYzRUEz NTg1RTgyMzFFLmNlcjCBmgYIKwYBBQUHAQsEgY0wgYowgYcGCCsGAQUFBzALhnty c3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQvcmVwby9ycGtpX2NhX2YxMTRj MWVhNzc4ODQ1MmNiZjM4YmU4NTRlYTgzNTlkLzAvMkIzQjk3MzM0REEwNjk3ODE4 NURBQzc2QTJGM0VBMzU4NUU4MjMxRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBACm7AfpdhrxL5ztosf7V yaXPOaMuVrUnjNoW+bFWF85V+UEKdAbRfe03ROGG8Bth/IpPTHgxHSSkzctl4yiP Eke/BEgCPaCaazT8lJjJ2vCKS5J4VylMFOwJ3o3t0PyoFnI7A7XDGhLrO/imAnDt ExD5z/Rk7LKujP4iHiYYCWh9d3oSgeqvDqSIXPAm/nmG+cbbCdK9TCjGPXg1nPQm dzRqxD9Owmafir1HXL4nV1RjkDbdDQzB9K5agGLt3q/o7c1sXvyUqC5BCo91ZMbM S897dHdEoHwMhV1uoasf3mlrw/y8ufufSwiihc2mf68AWlMlqhjM/Khzlh+I8KX8 vn0= -----END CERTIFICATE-----Generated at Tue Sep 22 00:21:40 2026 by rpki-client