$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_f114c1ea7788452cbf38be854ea8359d/2/281F5D393C912311D00F69CA42CC6D3FD11D7D52.mft File: 281F5D393C912311D00F69CA42CC6D3FD11D7D52.mft (raw, json) Hash identifier: KLkaiibaqpIC2ReCR411EcP/G2xIVMQ5HZFOV5o5Y4k= Subject key identifier: 74:7D:6B:68:0F:14:8C:FF:F6:1D:32:28:51:B5:C7:54:AC:32:CB:1E Authority key identifier: 28:1F:5D:39:3C:91:23:11:D0:0F:69:CA:42:CC:6D:3F:D1:1D:7D:52 Certificate issuer: /CN=281F5D393C912311D00F69CA42CC6D3FD11D7D52 Certificate serial: 5EC4673BB9998F0BFA055A8F6E8F5EC6B5C3B2A8 Authority info access: rsync://rrdp.as214749.net/repo/as214749-paw/1/281F5D393C912311D00F69CA42CC6D3FD11D7D52.cer Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_f114c1ea7788452cbf38be854ea8359d/2/281F5D393C912311D00F69CA42CC6D3FD11D7D52.mft Manifest number: 86 Signing time: Sat 13 Jun 2026 13:01:29 +0000 Manifest this update: Sat 13 Jun 2026 12:56:28 +0000 Manifest next update: Sun 14 Jun 2026 13:29:28 +0000 Files and hashes: 1: 326131313a663263303a666665303a3a2f34382d3438203d3e20323134373439.roa (hash: qwNG09yUfI2Z1oL7Swg14pL+g0Ex6NYiwi4RBuSwo9s=) 2: 281F5D393C912311D00F69CA42CC6D3FD11D7D52.crl (hash: GtBhR76v+j62+BGXH5jzxVIPmCAaJAMI4Hc4hSISgp4=) Validation: OK Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_f114c1ea7788452cbf38be854ea8359d/2/281F5D393C912311D00F69CA42CC6D3FD11D7D52.crl rsync://rpki-repo.as207960.net/repo/rpki_ca_f114c1ea7788452cbf38be854ea8359d/2/281F5D393C912311D00F69CA42CC6D3FD11D7D52.mft rsync://rrdp.as214749.net/repo/as214749-paw/1/281F5D393C912311D00F69CA42CC6D3FD11D7D52.cer rsync://rrdp.as214749.net/repo/as214749-paw/1/66BD0C10135E5DBF4913E2EE3F2DD9D358F9F51C.crl rsync://rrdp.as214749.net/repo/as214749-paw/1/66BD0C10135E5DBF4913E2EE3F2DD9D358F9F51C.mft rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/66BD0C10135E5DBF4913E2EE3F2DD9D358F9F51C.cer rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Jun 2026 08:43:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:c4:67:3b:b9:99:8f:0b:fa:05:5a:8f:6e:8f:5e:c6:b5:c3:b2:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=281F5D393C912311D00F69CA42CC6D3FD11D7D52 Validity Not Before: Jun 13 12:56:28 2026 GMT Not After : Jun 14 13:29:28 2026 GMT Subject: CN=747D6B680F148CFFF61D322851B5C754AC32CB1E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:5b:2c:f6:ff:a0:69:c2:d9:93:28:4d:ef:cc: 66:01:64:ed:14:b2:70:2a:2d:ed:e0:08:7b:7c:0e: d6:da:cf:e6:3f:c2:d3:a2:55:6a:db:14:63:02:a3: 60:86:9e:1e:8c:31:cd:5e:8d:ee:f4:b2:ab:86:81: f1:15:63:0a:fc:50:ec:b4:ad:73:f3:d3:77:a1:b8: 44:35:48:fd:1e:a4:3b:ee:b3:d0:96:95:7a:5f:e0: a9:ba:62:c9:8d:89:a6:f4:8a:bd:1a:9d:b7:bd:8d: 4e:dc:01:4c:1c:68:ff:b9:24:a7:93:54:06:58:97: 44:ef:9f:7b:87:e1:50:f7:7e:48:b2:69:d4:32:6f: 11:35:07:b0:b8:9e:55:d2:8d:86:37:fc:3b:9c:3e: 3b:61:d0:35:27:0e:01:87:22:7c:e5:6d:97:3a:94: 20:e2:31:60:0a:f8:93:73:43:e7:34:26:57:cc:7c: d2:de:f6:69:40:e7:56:41:d2:0e:2e:be:02:21:7b: 89:23:81:e7:a4:46:fb:e7:e6:ab:f5:61:4f:93:2e: b1:bb:39:b4:a0:1f:91:6f:b9:f3:54:c6:a4:0f:cf: cd:5b:8c:19:58:37:d7:29:e8:ea:69:82:78:4d:76: a9:54:f6:3b:a2:1b:c6:f0:2f:e9:bb:d6:03:9e:5e: ae:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:7D:6B:68:0F:14:8C:FF:F6:1D:32:28:51:B5:C7:54:AC:32:CB:1E X509v3 Authority Key Identifier: keyid:28:1F:5D:39:3C:91:23:11:D0:0F:69:CA:42:CC:6D:3F:D1:1D:7D:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_f114c1ea7788452cbf38be854ea8359d/2/281F5D393C912311D00F69CA42CC6D3FD11D7D52.crl Authority Information Access: CA Issuers - URI:rsync://rrdp.as214749.net/repo/as214749-paw/1/281F5D393C912311D00F69CA42CC6D3FD11D7D52.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_f114c1ea7788452cbf38be854ea8359d/2/281F5D393C912311D00F69CA42CC6D3FD11D7D52.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 96:d0:4d:68:eb:21:49:a7:08:78:46:02:71:38:9f:96:18:4c: 49:1a:67:bf:34:e8:6f:6c:3c:6e:9a:c5:8f:16:2a:0d:2e:7a: 2d:ff:8a:9c:1b:c3:7e:55:fd:da:7a:3a:ce:e8:d5:27:d4:cf: 1d:14:1a:a6:4a:25:32:fe:a6:1a:a8:dc:78:80:a1:f3:73:00: a8:80:b9:d1:d0:51:84:91:16:09:d0:f0:78:1f:22:e6:c0:21: 18:9f:e7:a0:79:bb:03:f5:51:fc:36:85:ac:f5:1b:25:0f:da: a9:72:98:10:bc:48:ef:f2:0f:92:bc:e3:47:70:fc:5f:a3:a3: 13:33:4b:02:22:10:7a:d6:de:9d:2d:61:14:7c:e6:7a:3d:d7: a3:04:91:70:dd:5d:32:d9:4e:b3:c0:70:6f:30:56:23:e3:93: dd:2b:3c:54:83:f4:bd:64:77:97:df:5a:62:b0:46:70:d6:d4: 40:4b:5f:a4:86:f2:3e:3a:22:74:6e:64:76:90:01:52:62:28: 79:88:8e:26:f8:a7:58:cb:a2:7d:27:60:c8:46:96:36:92:28: ca:39:63:cd:28:f7:b5:e4:95:31:10:5b:24:5e:f9:6f:0e:fc: fd:6e:72:36:54:32:43:5a:dc:68:4a:28:83:ff:e0:f5:75:ca: 23:0e:13:45 -----BEGIN CERTIFICATE----- MIIFRTCCBC2gAwIBAgIUXsRnO7mZjwv6BVqPbo9exrXDsqgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjgxRjVEMzkzQzkxMjMxMUQwMEY2OUNBNDJDQzZEM0ZE MTFEN0Q1MjAeFw0yNjA2MTMxMjU2MjhaFw0yNjA2MTQxMzI5MjhaMDMxMTAvBgNV BAMTKDc0N0Q2QjY4MEYxNDhDRkZGNjFEMzIyODUxQjVDNzU0QUMzMkNCMUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbWyz2/6BpwtmTKE3vzGYBZO0U snAqLe3gCHt8Dtbaz+Y/wtOiVWrbFGMCo2CGnh6MMc1eje70squGgfEVYwr8UOy0 rXPz03ehuEQ1SP0epDvus9CWlXpf4Km6YsmNiab0ir0anbe9jU7cAUwcaP+5JKeT VAZYl0Tvn3uH4VD3fkiyadQybxE1B7C4nlXSjYY3/DucPjth0DUnDgGHInzlbZc6 lCDiMWAK+JNzQ+c0JlfMfNLe9mlA51ZB0g4uvgIhe4kjgeekRvvn5qv1YU+TLrG7 ObSgH5FvufNUxqQPz81bjBlYN9cp6OppgnhNdqlU9juiG8bwL+m71gOeXq5BAgMB AAGjggJPMIICSzAdBgNVHQ4EFgQUdH1raA8UjP/2HTIoUbXHVKwyyx4wHwYDVR0j BBgwFoAUKB9dOTyRIxHQD2nKQsxtP9EdfVIwDgYDVR0PAQH/BAQDAgeAMIGPBgNV HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv cmVwby9ycGtpX2NhX2YxMTRjMWVhNzc4ODQ1MmNiZjM4YmU4NTRlYTgzNTlkLzIv MjgxRjVEMzkzQzkxMjMxMUQwMEY2OUNBNDJDQzZEM0ZEMTFEN0Q1Mi5jcmwwdgYI KwYBBQUHAQEEajBoMGYGCCsGAQUFBzAChlpyc3luYzovL3JyZHAuYXMyMTQ3NDku bmV0L3JlcG8vYXMyMTQ3NDktcGF3LzEvMjgxRjVEMzkzQzkxMjMxMUQwMEY2OUNB NDJDQzZEM0ZEMTFEN0Q1Mi5jZXIwgZoGCCsGAQUFBwELBIGNMIGKMIGHBggrBgEF BQcwC4Z7cnN5bmM6Ly9ycGtpLXJlcG8uYXMyMDc5NjAubmV0L3JlcG8vcnBraV9j YV9mMTE0YzFlYTc3ODg0NTJjYmYzOGJlODU0ZWE4MzU5ZC8yLzI4MUY1RDM5M0M5 MTIzMTFEMDBGNjlDQTQyQ0M2RDNGRDExRDdENTIubWZ0MBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAV BggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCW0E1o6yFJ pwh4RgJxOJ+WGExJGme/NOhvbDxumsWPFioNLnot/4qcG8N+Vf3aejrO6NUn1M8d FBqmSiUy/qYaqNx4gKHzcwCogLnR0FGEkRYJ0PB4HyLmwCEYn+egebsD9VH8NoWs 9RslD9qpcpgQvEjv8g+SvONHcPxfo6MTM0sCIhB61t6dLWEUfOZ6PdejBJFw3V0y 2U6zwHBvMFYj45PdKzxUg/S9ZHeX31pisEZw1tRAS1+khvI+OiJ0bmR2kAFSYih5 iI4m+KdYy6J9J2DIRpY2kijKOWPNKPe15JUxEFskXvlvDvz9bnI2VDJDWtxoSiiD /+D1dcojDhNF -----END CERTIFICATE-----Generated at Sat Jun 13 18:37:44 2026 by rpki-client