$ rpki-client -vvvf rpki-repo.as207960.net/repo/rpki_ca_f114c1ea7788452cbf38be854ea8359d/2/281F5D393C912311D00F69CA42CC6D3FD11D7D52.mft File: 281F5D393C912311D00F69CA42CC6D3FD11D7D52.mft (raw, json) Hash identifier: PJ0EpKiw5HsRXO0ZXHdsNYC6Drm9gkQmQjgKUyDLigg= Subject key identifier: F8:BA:A2:EA:D8:5E:26:78:E9:B1:7C:13:5C:AF:AA:16:1C:58:40:0D Authority key identifier: 28:1F:5D:39:3C:91:23:11:D0:0F:69:CA:42:CC:6D:3F:D1:1D:7D:52 Certificate issuer: /CN=281F5D393C912311D00F69CA42CC6D3FD11D7D52 Certificate serial: 070277FA08418375009F497F24EE4A5D4567D132 Authority info access: rsync://rrdp.as214749.net/repo/as214749-paw/1/281F5D393C912311D00F69CA42CC6D3FD11D7D52.cer Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_f114c1ea7788452cbf38be854ea8359d/2/281F5D393C912311D00F69CA42CC6D3FD11D7D52.mft Manifest number: FA Signing time: Mon 21 Sep 2026 14:01:28 +0000 Manifest this update: Mon 21 Sep 2026 13:56:28 +0000 Manifest next update: Tue 22 Sep 2026 15:38:28 +0000 Files and hashes: 1: 281F5D393C912311D00F69CA42CC6D3FD11D7D52.crl (hash: 7OCIqhDmb6fXRx3FOBL9/hyQX0bOyFv2cVbLixs6fo8=) 2: 326131313a663263303a666665303a3a2f34382d3438203d3e20323134373439.roa (hash: qwNG09yUfI2Z1oL7Swg14pL+g0Ex6NYiwi4RBuSwo9s=) Validation: OK Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_f114c1ea7788452cbf38be854ea8359d/2/281F5D393C912311D00F69CA42CC6D3FD11D7D52.crl rsync://rpki-repo.as207960.net/repo/rpki_ca_f114c1ea7788452cbf38be854ea8359d/2/281F5D393C912311D00F69CA42CC6D3FD11D7D52.mft rsync://rrdp.as214749.net/repo/as214749-paw/1/281F5D393C912311D00F69CA42CC6D3FD11D7D52.cer rsync://rrdp.as214749.net/repo/as214749-paw/1/66BD0C10135E5DBF4913E2EE3F2DD9D358F9F51C.crl rsync://rrdp.as214749.net/repo/as214749-paw/1/66BD0C10135E5DBF4913E2EE3F2DD9D358F9F51C.mft rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/66BD0C10135E5DBF4913E2EE3F2DD9D358F9F51C.cer rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 22 Sep 2026 01:16:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:02:77:fa:08:41:83:75:00:9f:49:7f:24:ee:4a:5d:45:67:d1:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=281F5D393C912311D00F69CA42CC6D3FD11D7D52 Validity Not Before: Sep 21 13:56:28 2026 GMT Not After : Sep 22 15:38:28 2026 GMT Subject: CN=F8BAA2EAD85E2678E9B17C135CAFAA161C58400D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:99:a0:99:3f:a9:b5:03:01:1e:0d:67:e4:86: 78:d5:50:74:00:a2:b5:fa:bb:ba:12:79:0c:71:f8: 10:aa:01:7f:39:53:82:bc:57:7e:bb:bf:f4:c4:dc: f7:70:26:0e:06:b0:80:59:99:88:00:3b:7c:01:85: bd:8b:b0:53:28:8c:ad:f8:35:49:ca:6c:eb:38:8d: 30:d2:c3:08:37:d2:7e:a7:2b:00:db:14:12:a2:c2: e3:cf:52:99:6a:9e:9d:09:d0:78:5a:70:a6:87:41: ca:52:a2:bb:9e:5d:9b:d9:9e:5f:7b:0a:01:be:17: c4:d3:69:89:d5:10:ea:2c:e4:57:32:ca:58:93:bd: 51:6a:ab:1d:b6:2e:c1:44:3f:81:dd:29:df:95:a8: 47:45:93:62:1f:3e:b6:22:b8:e7:b3:b1:78:5d:50: 09:ab:f6:44:16:12:6f:09:e1:57:5d:e0:40:40:c8: 48:31:12:65:a1:ef:1d:67:54:3c:31:fe:ab:0f:68: fe:09:3a:8b:61:39:00:88:0a:63:35:5e:90:3d:92: b9:f4:2a:9f:a6:87:46:1d:41:03:22:8e:5a:a3:90: 54:06:26:0f:54:4d:88:d6:c0:c9:aa:10:24:47:66: 27:ed:c3:9c:f6:39:06:d9:b9:af:c3:a5:a1:9d:21: 13:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:BA:A2:EA:D8:5E:26:78:E9:B1:7C:13:5C:AF:AA:16:1C:58:40:0D X509v3 Authority Key Identifier: keyid:28:1F:5D:39:3C:91:23:11:D0:0F:69:CA:42:CC:6D:3F:D1:1D:7D:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_f114c1ea7788452cbf38be854ea8359d/2/281F5D393C912311D00F69CA42CC6D3FD11D7D52.crl Authority Information Access: CA Issuers - URI:rsync://rrdp.as214749.net/repo/as214749-paw/1/281F5D393C912311D00F69CA42CC6D3FD11D7D52.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_f114c1ea7788452cbf38be854ea8359d/2/281F5D393C912311D00F69CA42CC6D3FD11D7D52.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b0:2e:51:f7:70:6b:b1:01:ca:fc:b7:c9:2b:89:2b:da:f0:43: 66:ec:65:e6:69:cc:a1:73:23:9b:42:07:44:84:ca:20:8b:97: 16:c7:5d:4e:64:87:ef:b6:90:bd:06:67:cd:d8:f9:fa:7b:4b: 7f:fd:a0:18:e0:07:c9:e7:84:34:b2:7b:43:18:4f:55:36:c9: 1c:7a:2a:c8:54:78:06:fe:a9:40:0b:9f:20:9f:da:cb:e0:b9: 70:58:d5:8c:13:16:1c:c7:98:26:76:6b:e1:8a:36:d6:5f:40: e7:12:b9:b1:de:d5:68:12:fb:5b:a8:f9:31:80:99:07:19:a8: 30:68:41:ea:13:89:a9:5d:35:90:82:36:f1:3f:b9:20:78:7c: 51:00:80:02:fb:1a:97:5f:3f:46:61:8d:6d:9f:c5:ed:99:8b: 1d:2d:29:b1:0b:d9:36:07:af:f6:18:1d:af:a0:c2:bd:83:52: a1:ab:96:2c:3c:f1:b6:e0:36:10:f5:b8:9c:57:e9:ec:0d:2f: b4:aa:21:59:42:37:50:8f:d5:88:8c:84:77:79:68:04:83:bd: 32:82:40:f4:ad:81:a9:ad:3c:a9:38:06:c2:25:36:bc:3e:f9: a5:83:22:62:b5:cd:85:03:b7:70:65:b6:d0:e0:cc:f9:fa:06: 78:ad:8a:3a -----BEGIN CERTIFICATE----- MIIFRTCCBC2gAwIBAgIUBwJ3+ghBg3UAn0l/JO5KXUVn0TIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjgxRjVEMzkzQzkxMjMxMUQwMEY2OUNBNDJDQzZEM0ZE MTFEN0Q1MjAeFw0yNjA5MjExMzU2MjhaFw0yNjA5MjIxNTM4MjhaMDMxMTAvBgNV BAMTKEY4QkFBMkVBRDg1RTI2NzhFOUIxN0MxMzVDQUZBQTE2MUM1ODQwMEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsmaCZP6m1AwEeDWfkhnjVUHQA orX6u7oSeQxx+BCqAX85U4K8V367v/TE3PdwJg4GsIBZmYgAO3wBhb2LsFMojK34 NUnKbOs4jTDSwwg30n6nKwDbFBKiwuPPUplqnp0J0HhacKaHQcpSorueXZvZnl97 CgG+F8TTaYnVEOos5FcyyliTvVFqqx22LsFEP4HdKd+VqEdFk2IfPrYiuOezsXhd UAmr9kQWEm8J4Vdd4EBAyEgxEmWh7x1nVDwx/qsPaP4JOothOQCICmM1XpA9krn0 Kp+mh0YdQQMijlqjkFQGJg9UTYjWwMmqECRHZiftw5z2OQbZua/DpaGdIRMlAgMB AAGjggJPMIICSzAdBgNVHQ4EFgQU+Lqi6theJnjpsXwTXK+qFhxYQA0wHwYDVR0j BBgwFoAUKB9dOTyRIxHQD2nKQsxtP9EdfVIwDgYDVR0PAQH/BAQDAgeAMIGPBgNV HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv cmVwby9ycGtpX2NhX2YxMTRjMWVhNzc4ODQ1MmNiZjM4YmU4NTRlYTgzNTlkLzIv MjgxRjVEMzkzQzkxMjMxMUQwMEY2OUNBNDJDQzZEM0ZEMTFEN0Q1Mi5jcmwwdgYI KwYBBQUHAQEEajBoMGYGCCsGAQUFBzAChlpyc3luYzovL3JyZHAuYXMyMTQ3NDku bmV0L3JlcG8vYXMyMTQ3NDktcGF3LzEvMjgxRjVEMzkzQzkxMjMxMUQwMEY2OUNB NDJDQzZEM0ZEMTFEN0Q1Mi5jZXIwgZoGCCsGAQUFBwELBIGNMIGKMIGHBggrBgEF BQcwC4Z7cnN5bmM6Ly9ycGtpLXJlcG8uYXMyMDc5NjAubmV0L3JlcG8vcnBraV9j YV9mMTE0YzFlYTc3ODg0NTJjYmYzOGJlODU0ZWE4MzU5ZC8yLzI4MUY1RDM5M0M5 MTIzMTFEMDBGNjlDQTQyQ0M2RDNGRDExRDdENTIubWZ0MBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAV BggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCwLlH3cGux Acr8t8kriSva8ENm7GXmacyhcyObQgdEhMogi5cWx11OZIfvtpC9BmfN2Pn6e0t/ /aAY4AfJ54Q0sntDGE9VNskceirIVHgG/qlAC58gn9rL4LlwWNWMExYcx5gmdmvh ijbWX0DnErmx3tVoEvtbqPkxgJkHGagwaEHqE4mpXTWQgjbxP7kgeHxRAIAC+xqX Xz9GYY1tn8XtmYsdLSmxC9k2B6/2GB2voMK9g1Khq5YsPPG24DYQ9bicV+nsDS+0 qiFZQjdQj9WIjIR3eWgEg70ygkD0rYGprTypOAbCJTa8PvmlgyJitc2FA7dwZbbQ 4Mz5+gZ4rYo6 -----END CERTIFICATE-----Generated at Mon Sep 21 18:19:55 2026 by rpki-client