$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_f114c1ea7788452cbf38be854ea8359d/2/281F5D393C912311D00F69CA42CC6D3FD11D7D52.mft File: 281F5D393C912311D00F69CA42CC6D3FD11D7D52.mft (raw, json) Hash identifier: PSkr0hK1mAVhZJu0+rvjB7JCJ2/6Gy5h7yEzNDpGdgU= Subject key identifier: 26:A3:82:69:40:B1:4D:35:54:CF:68:90:A9:06:3D:A6:E3:CC:E8:26 Authority key identifier: 28:1F:5D:39:3C:91:23:11:D0:0F:69:CA:42:CC:6D:3F:D1:1D:7D:52 Certificate issuer: /CN=281F5D393C912311D00F69CA42CC6D3FD11D7D52 Certificate serial: 08FD6145DCA9C99529D686F5DBC9B8435A9A307C Authority info access: rsync://rrdp.as214749.net/repo/as214749-paw/1/281F5D393C912311D00F69CA42CC6D3FD11D7D52.cer Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_f114c1ea7788452cbf38be854ea8359d/2/281F5D393C912311D00F69CA42CC6D3FD11D7D52.mft Manifest number: 85 Signing time: Fri 12 Jun 2026 20:08:27 +0000 Manifest this update: Fri 12 Jun 2026 20:03:27 +0000 Manifest next update: Sat 13 Jun 2026 21:00:27 +0000 Files and hashes: 1: 281F5D393C912311D00F69CA42CC6D3FD11D7D52.crl (hash: AvGJBn6fRoHRPZ+mg7PHJTDXqPeE0citlSSpVJox/70=) 2: 326131313a663263303a666665303a3a2f34382d3438203d3e20323134373439.roa (hash: qwNG09yUfI2Z1oL7Swg14pL+g0Ex6NYiwi4RBuSwo9s=) Validation: OK Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_f114c1ea7788452cbf38be854ea8359d/2/281F5D393C912311D00F69CA42CC6D3FD11D7D52.crl rsync://rpki-repo.as207960.net/repo/rpki_ca_f114c1ea7788452cbf38be854ea8359d/2/281F5D393C912311D00F69CA42CC6D3FD11D7D52.mft rsync://rrdp.as214749.net/repo/as214749-paw/1/281F5D393C912311D00F69CA42CC6D3FD11D7D52.cer rsync://rrdp.as214749.net/repo/as214749-paw/1/66BD0C10135E5DBF4913E2EE3F2DD9D358F9F51C.crl rsync://rrdp.as214749.net/repo/as214749-paw/1/66BD0C10135E5DBF4913E2EE3F2DD9D358F9F51C.mft rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/66BD0C10135E5DBF4913E2EE3F2DD9D358F9F51C.cer rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 13 Jun 2026 20:58:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:fd:61:45:dc:a9:c9:95:29:d6:86:f5:db:c9:b8:43:5a:9a:30:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=281F5D393C912311D00F69CA42CC6D3FD11D7D52 Validity Not Before: Jun 12 20:03:27 2026 GMT Not After : Jun 13 21:00:27 2026 GMT Subject: CN=26A3826940B14D3554CF6890A9063DA6E3CCE826 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:3f:f2:b6:06:ba:ef:11:47:4a:68:1b:ca:bb: 07:b3:bd:3f:20:a8:fa:42:4f:98:1b:49:59:00:3f: 06:87:0d:67:fb:3b:e0:22:43:ee:c2:c5:9f:1e:f3: bc:c1:bc:13:c0:e2:3f:a1:55:17:65:1f:2c:a4:1e: 38:95:a2:20:51:c3:af:88:8e:08:e9:d8:de:05:a4: 0c:a7:12:b4:cf:d6:4d:92:fc:6b:04:65:89:28:68: fb:cd:af:92:0a:71:9f:8f:95:4e:bc:3e:f6:b7:05: f2:4f:0a:f5:77:7b:59:31:a5:72:0a:4d:ea:f0:d2: c5:6a:58:02:25:e0:a2:86:52:1b:cc:7f:eb:c9:a0: cb:ba:ae:3f:dc:d3:62:0c:5e:b1:3f:fa:8c:3e:56: ba:e3:eb:bb:e4:5a:71:e3:1c:a8:79:e2:63:65:49: 84:cc:04:22:a1:98:e3:01:e4:2e:52:78:b9:91:48: 52:d2:18:1f:7c:bf:a2:6c:08:19:13:13:90:79:ed: 62:47:e2:74:e1:df:4e:28:68:b3:e8:90:49:fb:33: fe:db:7c:90:d5:91:95:f9:c6:a4:f3:42:47:ef:17: 5e:d7:42:6c:6c:62:30:50:74:25:a0:eb:c1:9f:cb: 79:5c:7a:d6:35:3d:3b:bd:8a:81:65:7a:9e:7c:2b: e6:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:A3:82:69:40:B1:4D:35:54:CF:68:90:A9:06:3D:A6:E3:CC:E8:26 X509v3 Authority Key Identifier: keyid:28:1F:5D:39:3C:91:23:11:D0:0F:69:CA:42:CC:6D:3F:D1:1D:7D:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_f114c1ea7788452cbf38be854ea8359d/2/281F5D393C912311D00F69CA42CC6D3FD11D7D52.crl Authority Information Access: CA Issuers - URI:rsync://rrdp.as214749.net/repo/as214749-paw/1/281F5D393C912311D00F69CA42CC6D3FD11D7D52.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_f114c1ea7788452cbf38be854ea8359d/2/281F5D393C912311D00F69CA42CC6D3FD11D7D52.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8f:1b:a3:15:f2:12:55:12:4b:a8:3b:7a:94:ad:45:a9:1e:e8: bc:21:ca:c2:5c:db:3f:bc:47:f6:e8:a6:e6:63:c2:0e:de:34: 75:70:81:6e:d1:6e:71:71:b8:ac:0c:47:ea:1c:a2:d6:23:37: 91:56:6e:34:42:fa:6c:55:2d:b2:c8:51:2b:7e:e8:f5:74:ad: 7e:c1:e0:be:57:a5:f6:cf:94:9a:f1:e2:87:8f:51:90:7c:f1: 69:02:39:35:89:e7:72:16:fb:db:85:4a:e3:1a:33:e9:d2:05: c2:08:69:6a:5d:33:93:85:41:fa:4a:d7:d4:da:dc:9b:46:43: 00:25:c1:2d:47:d0:4d:4e:c3:8a:af:aa:70:65:53:7e:db:d5: 9c:0a:04:9d:97:73:15:a5:48:61:c9:00:a6:b2:04:b3:46:35: 11:68:2b:94:7e:8f:9b:0a:59:d6:0b:d3:5b:f5:e3:39:d2:46: ae:e4:6d:24:c9:e0:86:8d:9a:b4:ce:90:65:f4:85:bb:0a:14: 36:a3:dd:b4:a1:52:70:96:b7:85:59:a9:78:d4:b1:86:f4:f9: fd:19:50:6e:25:c8:36:66:51:a9:f9:00:c5:f2:94:4e:6b:1f: f5:ec:8a:ac:dd:14:27:e4:a2:a0:2b:01:51:e0:86:e7:26:e5: af:50:1e:5f -----BEGIN CERTIFICATE----- MIIFRTCCBC2gAwIBAgIUCP1hRdypyZUp1ob128m4Q1qaMHwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjgxRjVEMzkzQzkxMjMxMUQwMEY2OUNBNDJDQzZEM0ZE MTFEN0Q1MjAeFw0yNjA2MTIyMDAzMjdaFw0yNjA2MTMyMTAwMjdaMDMxMTAvBgNV BAMTKDI2QTM4MjY5NDBCMTREMzU1NENGNjg5MEE5MDYzREE2RTNDQ0U4MjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYP/K2BrrvEUdKaBvKuwezvT8g qPpCT5gbSVkAPwaHDWf7O+AiQ+7CxZ8e87zBvBPA4j+hVRdlHyykHjiVoiBRw6+I jgjp2N4FpAynErTP1k2S/GsEZYkoaPvNr5IKcZ+PlU68Pva3BfJPCvV3e1kxpXIK Terw0sVqWAIl4KKGUhvMf+vJoMu6rj/c02IMXrE/+ow+Vrrj67vkWnHjHKh54mNl SYTMBCKhmOMB5C5SeLmRSFLSGB98v6JsCBkTE5B57WJH4nTh304oaLPokEn7M/7b fJDVkZX5xqTzQkfvF17XQmxsYjBQdCWg68Gfy3lcetY1PTu9ioFlep58K+YLAgMB AAGjggJPMIICSzAdBgNVHQ4EFgQUJqOCaUCxTTVUz2iQqQY9puPM6CYwHwYDVR0j BBgwFoAUKB9dOTyRIxHQD2nKQsxtP9EdfVIwDgYDVR0PAQH/BAQDAgeAMIGPBgNV HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv cmVwby9ycGtpX2NhX2YxMTRjMWVhNzc4ODQ1MmNiZjM4YmU4NTRlYTgzNTlkLzIv MjgxRjVEMzkzQzkxMjMxMUQwMEY2OUNBNDJDQzZEM0ZEMTFEN0Q1Mi5jcmwwdgYI KwYBBQUHAQEEajBoMGYGCCsGAQUFBzAChlpyc3luYzovL3JyZHAuYXMyMTQ3NDku bmV0L3JlcG8vYXMyMTQ3NDktcGF3LzEvMjgxRjVEMzkzQzkxMjMxMUQwMEY2OUNB NDJDQzZEM0ZEMTFEN0Q1Mi5jZXIwgZoGCCsGAQUFBwELBIGNMIGKMIGHBggrBgEF BQcwC4Z7cnN5bmM6Ly9ycGtpLXJlcG8uYXMyMDc5NjAubmV0L3JlcG8vcnBraV9j YV9mMTE0YzFlYTc3ODg0NTJjYmYzOGJlODU0ZWE4MzU5ZC8yLzI4MUY1RDM5M0M5 MTIzMTFEMDBGNjlDQTQyQ0M2RDNGRDExRDdENTIubWZ0MBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAV BggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCPG6MV8hJV EkuoO3qUrUWpHui8IcrCXNs/vEf26KbmY8IO3jR1cIFu0W5xcbisDEfqHKLWIzeR Vm40QvpsVS2yyFErfuj1dK1+weC+V6X2z5Sa8eKHj1GQfPFpAjk1iedyFvvbhUrj GjPp0gXCCGlqXTOThUH6StfU2tybRkMAJcEtR9BNTsOKr6pwZVN+29WcCgSdl3MV pUhhyQCmsgSzRjURaCuUfo+bClnWC9Nb9eM50kau5G0kyeCGjZq0zpBl9IW7ChQ2 o920oVJwlreFWal41LGG9Pn9GVBuJcg2ZlGp+QDF8pROax/17Iqs3RQn5KKgKwFR 4IbnJuWvUB5f -----END CERTIFICATE-----Generated at Sat Jun 13 10:32:59 2026 by rpki-client