$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_f114c1ea7788452cbf38be854ea8359d/0/2B3B97334DA06978185DAC76A2F3EA3585E8231E.mft File: 2B3B97334DA06978185DAC76A2F3EA3585E8231E.mft (raw, json) Hash identifier: LbYu9Lm0QEO5lA47iDSyl8EfMnZPPnlG06ThTCccJxE= Subject key identifier: B8:B1:15:83:1D:98:C8:BF:F5:B6:64:F4:28:C3:D4:B1:15:71:8F:7E Authority key identifier: 2B:3B:97:33:4D:A0:69:78:18:5D:AC:76:A2:F3:EA:35:85:E8:23:1E Certificate issuer: /CN=2B3B97334DA06978185DAC76A2F3EA3585E8231E Certificate serial: 25DB0A46F87137C490C310BD3FCBE34320857C66 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/2B3B97334DA06978185DAC76A2F3EA3585E8231E.cer Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_f114c1ea7788452cbf38be854ea8359d/0/2B3B97334DA06978185DAC76A2F3EA3585E8231E.mft Manifest number: 0144 Signing time: Tue 28 Jul 2026 19:19:47 +0000 Manifest this update: Tue 28 Jul 2026 19:14:47 +0000 Manifest next update: Wed 29 Jul 2026 21:16:47 +0000 Files and hashes: 1: 2B3B97334DA06978185DAC76A2F3EA3585E8231E.crl (hash: M01e2BQa67ZYp8tVDtFBUs18tb2cQdaZE5W2pmEjlws=) 2: 326131313a663263303a666665303a3a2f34382d3438203d3e20323134373439.roa (hash: SsKZ08+rzpnXlHPVlF1X2ydZv//GE/sZxshtEoPOB40=) Validation: OK Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_f114c1ea7788452cbf38be854ea8359d/0/2B3B97334DA06978185DAC76A2F3EA3585E8231E.crl rsync://rpki-repo.as207960.net/repo/rpki_ca_f114c1ea7788452cbf38be854ea8359d/0/2B3B97334DA06978185DAC76A2F3EA3585E8231E.mft rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/2B3B97334DA06978185DAC76A2F3EA3585E8231E.cer rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 29 Jul 2026 21:16:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:db:0a:46:f8:71:37:c4:90:c3:10:bd:3f:cb:e3:43:20:85:7c:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2B3B97334DA06978185DAC76A2F3EA3585E8231E Validity Not Before: Jul 28 19:14:47 2026 GMT Not After : Jul 29 21:16:47 2026 GMT Subject: CN=B8B115831D98C8BFF5B664F428C3D4B115718F7E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:15:5e:0f:ff:a2:15:e7:06:0f:e2:8c:83:20: cf:f3:a1:8f:b8:1f:c5:a9:b6:f9:67:53:5f:6e:24: 0f:1a:d7:ba:c5:2f:ad:9d:91:ea:f1:5f:81:10:d7: 76:ed:bb:21:72:f8:73:8e:35:45:4a:0e:94:16:3c: 5c:c2:94:12:8e:6d:69:4e:16:90:cf:0d:b4:5d:e7: be:5a:2b:9e:e7:ba:fa:d2:4f:15:30:ee:ba:99:97: 26:9a:05:9d:4d:19:17:bf:f9:a2:ae:ca:10:24:5d: e2:bc:d6:ce:31:1c:a9:03:dc:5c:65:7a:83:ea:76: 23:08:be:0b:71:df:e6:b2:da:30:75:01:8d:1e:e0: 46:a7:7a:90:94:49:c5:7c:a7:32:a0:4e:d6:80:57: db:12:d9:33:09:83:13:a3:54:41:ea:a6:a9:7b:f1: e7:aa:c8:ea:85:cf:46:d3:28:6e:87:ab:96:ed:e3: c6:56:44:12:1b:42:c2:6b:3b:7c:3a:b7:30:fe:05: bc:d3:8e:96:3e:de:15:ea:9e:41:55:74:2d:a5:fe: 06:a4:60:5f:ae:cd:11:82:6e:91:79:d5:da:02:02: 3a:0f:c1:c8:cc:a5:cf:04:22:a1:ac:e3:cd:63:dd: a2:21:00:1e:73:f3:17:f0:00:6a:e8:48:a7:34:9a: 1b:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:B1:15:83:1D:98:C8:BF:F5:B6:64:F4:28:C3:D4:B1:15:71:8F:7E X509v3 Authority Key Identifier: keyid:2B:3B:97:33:4D:A0:69:78:18:5D:AC:76:A2:F3:EA:35:85:E8:23:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_f114c1ea7788452cbf38be854ea8359d/0/2B3B97334DA06978185DAC76A2F3EA3585E8231E.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/2B3B97334DA06978185DAC76A2F3EA3585E8231E.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_f114c1ea7788452cbf38be854ea8359d/0/2B3B97334DA06978185DAC76A2F3EA3585E8231E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:35:00:aa:92:81:61:ac:a6:22:98:ae:04:d0:6e:b9:52:91: f7:55:b6:c4:34:44:1d:d7:e0:7a:e1:e7:e7:1d:cf:ef:15:8f: 44:73:ff:ec:e3:6d:84:c2:f4:ec:68:1e:9d:57:c0:51:de:83: 07:bd:fd:1b:63:6f:09:d4:26:0f:f6:6d:12:e7:7c:9b:75:8b: 3d:da:6e:9a:60:82:b9:19:ea:3b:ff:4f:e7:b9:e9:24:8b:4c: 1d:f6:9a:f1:ee:7e:33:5a:34:99:77:0a:99:30:dc:71:33:5d: 1d:01:d8:1a:0e:32:fe:7f:6d:6b:d9:23:fe:c2:e3:98:c8:44: 30:76:fa:90:a3:37:8a:7f:33:42:af:dd:f6:3f:9d:ea:83:de: 45:e7:20:08:57:04:b7:03:e5:1e:37:75:ae:31:67:02:0d:b7: c0:05:d2:06:8d:2d:d3:9b:ae:bf:14:64:c0:88:da:89:f2:0e: c9:1a:43:02:3a:6f:fd:b2:eb:e4:4c:c8:6c:ed:3d:86:5e:4c: 50:b6:7d:10:4d:ff:90:9f:f9:e8:59:a7:b4:e5:6b:ab:61:6b: 44:f4:ca:f9:bc:b9:89:28:e3:2a:1d:bd:79:92:f5:f1:fc:9f: 1d:e5:8b:7f:13:34:3f:91:3a:8d:15:9b:bd:1b:a3:3b:19:67: 13:43:0f:ed -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIUJdsKRvhxN8SQwxC9P8vjQyCFfGYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkIzQjk3MzM0REEwNjk3ODE4NURBQzc2QTJGM0VBMzU4 NUU4MjMxRTAeFw0yNjA3MjgxOTE0NDdaFw0yNjA3MjkyMTE2NDdaMDMxMTAvBgNV BAMTKEI4QjExNTgzMUQ5OEM4QkZGNUI2NjRGNDI4QzNENEIxMTU3MThGN0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/FV4P/6IV5wYP4oyDIM/zoY+4 H8WptvlnU19uJA8a17rFL62dkerxX4EQ13btuyFy+HOONUVKDpQWPFzClBKObWlO FpDPDbRd575aK57nuvrSTxUw7rqZlyaaBZ1NGRe/+aKuyhAkXeK81s4xHKkD3Fxl eoPqdiMIvgtx3+ay2jB1AY0e4EanepCUScV8pzKgTtaAV9sS2TMJgxOjVEHqpql7 8eeqyOqFz0bTKG6Hq5bt48ZWRBIbQsJrO3w6tzD+BbzTjpY+3hXqnkFVdC2l/gak YF+uzRGCbpF51doCAjoPwcjMpc8EIqGs481j3aIhAB5z8xfwAGroSKc0mhuxAgMB AAGjggJ4MIICdDAdBgNVHQ4EFgQUuLEVgx2YyL/1tmT0KMPUsRVxj34wHwYDVR0j BBgwFoAUKzuXM02gaXgYXax2ovPqNYXoIx4wDgYDVR0PAQH/BAQDAgeAMIGPBgNV HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv cmVwby9ycGtpX2NhX2YxMTRjMWVhNzc4ODQ1MmNiZjM4YmU4NTRlYTgzNTlkLzAv MkIzQjk3MzM0REEwNjk3ODE4NURBQzc2QTJGM0VBMzU4NUU4MjMxRS5jcmwwgZ4G CCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5wYWFz LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQxYjUtODJh MC1mMGQwMmMwM2EyYzYvNy8yQjNCOTczMzREQTA2OTc4MTg1REFDNzZBMkYzRUEz NTg1RTgyMzFFLmNlcjCBmgYIKwYBBQUHAQsEgY0wgYowgYcGCCsGAQUFBzALhnty c3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQvcmVwby9ycGtpX2NhX2YxMTRj MWVhNzc4ODQ1MmNiZjM4YmU4NTRlYTgzNTlkLzAvMkIzQjk3MzM0REEwNjk3ODE4 NURBQzc2QTJGM0VBMzU4NUU4MjMxRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAFE1AKqSgWGspiKYrgTQ brlSkfdVtsQ0RB3X4Hrh5+cdz+8Vj0Rz/+zjbYTC9OxoHp1XwFHegwe9/RtjbwnU Jg/2bRLnfJt1iz3abppggrkZ6jv/T+e56SSLTB32mvHufjNaNJl3Cpkw3HEzXR0B 2BoOMv5/bWvZI/7C45jIRDB2+pCjN4p/M0Kv3fY/neqD3kXnIAhXBLcD5R43da4x ZwINt8AF0gaNLdObrr8UZMCI2onyDskaQwI6b/2y6+RMyGztPYZeTFC2fRBN/5Cf +ehZp7Tla6tha0T0yvm8uYko4yodvXmS9fH8nx3li38TND+ROo0Vm70bozsZZxND D+0= -----END CERTIFICATE-----Generated at Wed Jul 29 06:23:22 2026 by rpki-client