$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_f114c1ea7788452cbf38be854ea8359d/2/281F5D393C912311D00F69CA42CC6D3FD11D7D52.mft File: 281F5D393C912311D00F69CA42CC6D3FD11D7D52.mft (raw, json) Hash identifier: pQdVBZj4nEaeyWL3JgcIBQDRLErziiohfubWQQvtD2I= Subject key identifier: A4:DC:2C:14:07:26:C8:C2:EC:0E:72:C3:A7:22:30:53:76:09:5A:37 Authority key identifier: 28:1F:5D:39:3C:91:23:11:D0:0F:69:CA:42:CC:6D:3F:D1:1D:7D:52 Certificate issuer: /CN=281F5D393C912311D00F69CA42CC6D3FD11D7D52 Certificate serial: 3E035AFE1F542EBD004B9AC0E202B31DA025D253 Authority info access: rsync://rrdp.as214749.net/repo/as214749-paw/1/281F5D393C912311D00F69CA42CC6D3FD11D7D52.cer Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_f114c1ea7788452cbf38be854ea8359d/2/281F5D393C912311D00F69CA42CC6D3FD11D7D52.mft Manifest number: C2 Signing time: Tue 28 Jul 2026 14:27:41 +0000 Manifest this update: Tue 28 Jul 2026 14:22:41 +0000 Manifest next update: Wed 29 Jul 2026 14:34:41 +0000 Files and hashes: 1: 326131313a663263303a666665303a3a2f34382d3438203d3e20323134373439.roa (hash: qwNG09yUfI2Z1oL7Swg14pL+g0Ex6NYiwi4RBuSwo9s=) 2: 281F5D393C912311D00F69CA42CC6D3FD11D7D52.crl (hash: bMdybBH0EIPIfL1AnLFQ7COF4b3T+pHL2qG10mLYRUI=) Validation: OK Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_f114c1ea7788452cbf38be854ea8359d/2/281F5D393C912311D00F69CA42CC6D3FD11D7D52.crl rsync://rpki-repo.as207960.net/repo/rpki_ca_f114c1ea7788452cbf38be854ea8359d/2/281F5D393C912311D00F69CA42CC6D3FD11D7D52.mft rsync://rrdp.as214749.net/repo/as214749-paw/1/281F5D393C912311D00F69CA42CC6D3FD11D7D52.cer rsync://rrdp.as214749.net/repo/as214749-paw/1/66BD0C10135E5DBF4913E2EE3F2DD9D358F9F51C.crl rsync://rrdp.as214749.net/repo/as214749-paw/1/66BD0C10135E5DBF4913E2EE3F2DD9D358F9F51C.mft rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/66BD0C10135E5DBF4913E2EE3F2DD9D358F9F51C.cer rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 29 Jul 2026 14:34:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:03:5a:fe:1f:54:2e:bd:00:4b:9a:c0:e2:02:b3:1d:a0:25:d2:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=281F5D393C912311D00F69CA42CC6D3FD11D7D52 Validity Not Before: Jul 28 14:22:41 2026 GMT Not After : Jul 29 14:34:41 2026 GMT Subject: CN=A4DC2C140726C8C2EC0E72C3A722305376095A37 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:56:cd:7a:b4:8c:61:2b:3c:a3:4d:2b:5c:8b: 7e:96:3e:2d:a5:df:ba:85:c3:6b:02:ac:a4:5d:80: ea:84:73:d9:cb:ae:22:d4:fb:81:0a:fb:6c:82:a9: 03:a1:51:05:60:de:15:43:cc:b6:b8:3a:36:19:d2: c1:f3:09:52:d4:79:a0:74:b3:35:00:2a:3b:28:76: b9:87:84:c1:27:25:1c:1d:bf:f8:d0:9c:9a:ca:ef: b9:ee:61:3f:60:1a:0a:f7:bc:ea:63:4d:63:ec:4e: be:ef:29:2e:29:de:3f:f8:44:0d:20:eb:52:8c:74: 25:2a:36:82:49:71:04:2e:03:8a:16:80:3c:e9:de: 8e:46:ea:12:40:db:c7:04:6d:97:4d:4d:68:83:19: 74:2d:88:61:17:d4:61:41:78:ee:eb:54:3c:ec:a7: 4a:c3:70:14:f9:f2:7c:25:53:21:6f:60:e8:6b:1a: 76:46:83:54:cd:29:56:85:a4:18:e3:89:a7:b4:ee: ed:d1:ee:3b:7c:51:4c:9e:f1:58:f6:6c:66:1a:9a: 32:cd:25:3c:c3:b4:56:aa:3f:a6:1f:0b:d8:96:43: d3:08:64:29:35:14:01:5c:37:15:9f:f8:62:92:ed: b0:68:2a:11:e9:a9:e8:22:2b:8c:db:4e:91:fd:79: df:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:DC:2C:14:07:26:C8:C2:EC:0E:72:C3:A7:22:30:53:76:09:5A:37 X509v3 Authority Key Identifier: keyid:28:1F:5D:39:3C:91:23:11:D0:0F:69:CA:42:CC:6D:3F:D1:1D:7D:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_f114c1ea7788452cbf38be854ea8359d/2/281F5D393C912311D00F69CA42CC6D3FD11D7D52.crl Authority Information Access: CA Issuers - URI:rsync://rrdp.as214749.net/repo/as214749-paw/1/281F5D393C912311D00F69CA42CC6D3FD11D7D52.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_f114c1ea7788452cbf38be854ea8359d/2/281F5D393C912311D00F69CA42CC6D3FD11D7D52.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:d8:ef:45:95:38:d6:28:1c:26:27:3c:9d:47:2a:a9:73:e6: 51:de:72:21:1f:20:0d:e5:a0:7c:8d:7f:91:72:a7:f6:4c:e2: 79:4e:06:a4:fa:34:3f:17:c7:3f:e3:29:31:92:30:fc:5c:b5: b3:c2:2d:b1:bb:c9:56:99:15:e0:d7:6c:43:a3:a0:f7:35:1c: ff:60:26:9e:8a:6e:89:21:65:0c:98:c2:cc:ef:d6:b8:b8:78: 55:2b:75:c7:8c:cd:2c:11:01:42:bc:48:17:49:a5:ef:9b:fb: e1:c7:eb:33:03:23:57:a9:69:7e:1f:18:63:74:95:aa:4f:0d: 2f:19:6e:5e:ac:71:89:c2:b6:6c:b7:88:01:74:e6:9b:83:66: c0:08:c1:04:9d:59:46:a4:db:23:ab:a2:44:89:a7:2a:d3:31: d0:1c:ae:a7:c8:cc:df:83:82:5f:7a:da:40:07:ec:0d:1e:99: 5a:fc:7f:5b:dc:4e:de:d2:14:ac:af:dc:dc:6f:b3:5c:48:74: b9:18:23:93:86:47:76:ef:4b:74:0f:90:87:40:25:74:d7:ef: 20:ba:8f:84:ab:6c:76:5d:5c:89:0f:81:1a:2c:9e:99:76:09: 7f:55:c3:25:18:6e:e7:8d:43:63:70:4e:4c:ee:8d:f8:23:da: 24:15:1a:36 -----BEGIN CERTIFICATE----- MIIFRTCCBC2gAwIBAgIUPgNa/h9ULr0AS5rA4gKzHaAl0lMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjgxRjVEMzkzQzkxMjMxMUQwMEY2OUNBNDJDQzZEM0ZE MTFEN0Q1MjAeFw0yNjA3MjgxNDIyNDFaFw0yNjA3MjkxNDM0NDFaMDMxMTAvBgNV BAMTKEE0REMyQzE0MDcyNkM4QzJFQzBFNzJDM0E3MjIzMDUzNzYwOTVBMzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0Vs16tIxhKzyjTStci36WPi2l 37qFw2sCrKRdgOqEc9nLriLU+4EK+2yCqQOhUQVg3hVDzLa4OjYZ0sHzCVLUeaB0 szUAKjsodrmHhMEnJRwdv/jQnJrK77nuYT9gGgr3vOpjTWPsTr7vKS4p3j/4RA0g 61KMdCUqNoJJcQQuA4oWgDzp3o5G6hJA28cEbZdNTWiDGXQtiGEX1GFBeO7rVDzs p0rDcBT58nwlUyFvYOhrGnZGg1TNKVaFpBjjiae07u3R7jt8UUye8Vj2bGYamjLN JTzDtFaqP6YfC9iWQ9MIZCk1FAFcNxWf+GKS7bBoKhHpqegiK4zbTpH9ed8zAgMB AAGjggJPMIICSzAdBgNVHQ4EFgQUpNwsFAcmyMLsDnLDpyIwU3YJWjcwHwYDVR0j BBgwFoAUKB9dOTyRIxHQD2nKQsxtP9EdfVIwDgYDVR0PAQH/BAQDAgeAMIGPBgNV HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv cmVwby9ycGtpX2NhX2YxMTRjMWVhNzc4ODQ1MmNiZjM4YmU4NTRlYTgzNTlkLzIv MjgxRjVEMzkzQzkxMjMxMUQwMEY2OUNBNDJDQzZEM0ZEMTFEN0Q1Mi5jcmwwdgYI KwYBBQUHAQEEajBoMGYGCCsGAQUFBzAChlpyc3luYzovL3JyZHAuYXMyMTQ3NDku bmV0L3JlcG8vYXMyMTQ3NDktcGF3LzEvMjgxRjVEMzkzQzkxMjMxMUQwMEY2OUNB NDJDQzZEM0ZEMTFEN0Q1Mi5jZXIwgZoGCCsGAQUFBwELBIGNMIGKMIGHBggrBgEF BQcwC4Z7cnN5bmM6Ly9ycGtpLXJlcG8uYXMyMDc5NjAubmV0L3JlcG8vcnBraV9j YV9mMTE0YzFlYTc3ODg0NTJjYmYzOGJlODU0ZWE4MzU5ZC8yLzI4MUY1RDM5M0M5 MTIzMTFEMDBGNjlDQTQyQ0M2RDNGRDExRDdENTIubWZ0MBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAV BggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCR2O9FlTjW KBwmJzydRyqpc+ZR3nIhHyAN5aB8jX+Rcqf2TOJ5Tgak+jQ/F8c/4ykxkjD8XLWz wi2xu8lWmRXg12xDo6D3NRz/YCaeim6JIWUMmMLM79a4uHhVK3XHjM0sEQFCvEgX SaXvm/vhx+szAyNXqWl+HxhjdJWqTw0vGW5erHGJwrZst4gBdOabg2bACMEEnVlG pNsjq6JEiacq0zHQHK6nyMzfg4JfetpAB+wNHpla/H9b3E7e0hSsr9zcb7NcSHS5 GCOThkd270t0D5CHQCV01+8guo+Eq2x2XVyJD4EaLJ6Zdgl/VcMlGG7njUNjcE5M 7o34I9okFRo2 -----END CERTIFICATE-----Generated at Wed Jul 29 01:04:46 2026 by rpki-client