$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_f114c1ea7788452cbf38be854ea8359d/2/281F5D393C912311D00F69CA42CC6D3FD11D7D52.mft File: 281F5D393C912311D00F69CA42CC6D3FD11D7D52.mft (raw, json) Hash identifier: T9GckvXDTE99YwX9ZQFy9koz4gXPs8Vm/JXd7X+N7Aw= Subject key identifier: 1B:DA:50:70:3C:21:CB:74:65:A7:F5:77:81:55:F4:C4:B2:CD:3B:F6 Authority key identifier: 28:1F:5D:39:3C:91:23:11:D0:0F:69:CA:42:CC:6D:3F:D1:1D:7D:52 Certificate issuer: /CN=281F5D393C912311D00F69CA42CC6D3FD11D7D52 Certificate serial: 5E705C2E175766EB9B15E9CDFD65B5DCD542932A Authority info access: rsync://rrdp.as214749.net/repo/as214749-paw/1/281F5D393C912311D00F69CA42CC6D3FD11D7D52.cer Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_f114c1ea7788452cbf38be854ea8359d/2/281F5D393C912311D00F69CA42CC6D3FD11D7D52.mft Manifest number: 3A Signing time: Fri 17 Apr 2026 18:00:09 +0000 Manifest this update: Fri 17 Apr 2026 17:55:07 +0000 Manifest next update: Sat 18 Apr 2026 19:54:07 +0000 Files and hashes: 1: 326131313a663263303a666665303a3a2f34382d3438203d3e20323134373439.roa (hash: qwNG09yUfI2Z1oL7Swg14pL+g0Ex6NYiwi4RBuSwo9s=) 2: 281F5D393C912311D00F69CA42CC6D3FD11D7D52.crl (hash: l1dtn9PVKmLgiZc4CkOeop3yKyPTFUtLHWqwgc1ufBw=) Validation: OK Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_f114c1ea7788452cbf38be854ea8359d/2/281F5D393C912311D00F69CA42CC6D3FD11D7D52.crl rsync://rpki-repo.as207960.net/repo/rpki_ca_f114c1ea7788452cbf38be854ea8359d/2/281F5D393C912311D00F69CA42CC6D3FD11D7D52.mft rsync://rrdp.as214749.net/repo/as214749-paw/1/281F5D393C912311D00F69CA42CC6D3FD11D7D52.cer rsync://rrdp.as214749.net/repo/as214749-paw/1/66BD0C10135E5DBF4913E2EE3F2DD9D358F9F51C.crl rsync://rrdp.as214749.net/repo/as214749-paw/1/66BD0C10135E5DBF4913E2EE3F2DD9D358F9F51C.mft rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/66BD0C10135E5DBF4913E2EE3F2DD9D358F9F51C.cer rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 18 Apr 2026 15:31:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:70:5c:2e:17:57:66:eb:9b:15:e9:cd:fd:65:b5:dc:d5:42:93:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=281F5D393C912311D00F69CA42CC6D3FD11D7D52 Validity Not Before: Apr 17 17:55:07 2026 GMT Not After : Apr 18 19:54:07 2026 GMT Subject: CN=1BDA50703C21CB7465A7F5778155F4C4B2CD3BF6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:03:61:e2:02:20:dc:44:3a:3a:97:81:ec:ee: b1:bc:45:46:08:3c:5f:10:e8:25:92:f9:ee:48:60: de:4e:e6:e5:be:14:be:36:b6:4c:57:0b:72:ec:d9: d1:10:91:13:13:d8:7c:3b:49:d0:ef:20:32:57:9a: 74:11:d6:b2:d4:c0:95:86:42:9f:d8:68:50:61:f9: b3:56:a3:ef:78:4a:ab:70:56:d4:f0:26:21:ca:13: 74:fd:e1:d8:fa:8e:7b:02:04:8b:18:f7:4e:e9:67: 44:18:c8:f5:a2:ad:b8:ac:25:22:54:65:2c:bc:19: b2:14:3d:31:b7:1b:b9:d2:07:e7:b3:13:f5:19:68: d2:1b:cc:18:53:d2:29:29:af:eb:ce:5d:a9:9f:a1: 37:ad:6c:d3:94:80:88:05:ad:8b:32:a6:c3:ea:be: 16:f3:07:b6:a2:0b:80:cd:8c:8a:f8:5a:2b:d8:1b: 60:2a:18:27:8e:bb:84:c9:59:cf:ec:1a:a9:14:1c: dc:ee:eb:29:b2:7e:33:44:59:f3:14:86:8d:e8:5a: 29:65:c5:c4:6a:1b:f9:66:6f:18:43:69:9b:8c:6e: 3f:1e:01:d8:df:b8:33:3b:b6:ea:d8:2e:16:38:c3: aa:d4:e8:fa:39:ef:f5:fc:08:9a:c8:a7:93:9c:a1: 50:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:DA:50:70:3C:21:CB:74:65:A7:F5:77:81:55:F4:C4:B2:CD:3B:F6 X509v3 Authority Key Identifier: keyid:28:1F:5D:39:3C:91:23:11:D0:0F:69:CA:42:CC:6D:3F:D1:1D:7D:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_f114c1ea7788452cbf38be854ea8359d/2/281F5D393C912311D00F69CA42CC6D3FD11D7D52.crl Authority Information Access: CA Issuers - URI:rsync://rrdp.as214749.net/repo/as214749-paw/1/281F5D393C912311D00F69CA42CC6D3FD11D7D52.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_f114c1ea7788452cbf38be854ea8359d/2/281F5D393C912311D00F69CA42CC6D3FD11D7D52.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:1d:70:5a:a0:62:e2:47:8e:58:a7:e3:84:e9:21:9f:6b:69: 27:32:f4:e2:23:a8:1c:eb:dc:ad:03:fe:29:04:69:f9:1c:85: 20:a8:3f:19:c0:5a:32:94:69:1c:25:10:f1:2d:28:05:8f:1d: 13:d3:fa:7b:55:04:d5:7f:24:a9:ff:33:c8:eb:6a:f4:7b:63: b0:8e:ce:dd:bc:b3:8c:99:a6:b1:e9:7e:c4:6f:14:19:cc:8c: b5:b7:f2:d5:5f:8b:7d:e7:de:8a:82:57:39:bc:1b:f2:28:6d: 26:b4:bd:01:94:0e:26:ef:63:16:8a:31:5d:55:af:dd:57:7d: 77:98:ce:12:dd:66:86:18:6b:47:57:83:e6:1f:1b:5f:a1:e7: 69:b7:bc:1e:73:bb:d3:e1:a5:34:43:39:7d:5b:f8:0d:6b:6d: 36:eb:83:e7:88:c0:6b:09:f7:9c:12:d2:ca:84:53:3b:27:02: ac:fc:b0:a6:45:0e:d4:53:89:9f:01:51:ef:25:a9:e9:65:e3: 47:dd:95:17:5b:6a:79:55:da:9e:41:62:0c:4d:a6:a5:a0:3c: bc:85:6e:f5:47:1c:c7:31:53:98:aa:21:76:4d:a5:90:b8:0d: c2:bc:d6:7f:df:33:bc:f3:dc:39:38:15:17:53:be:7f:65:c8: a1:24:fa:36 -----BEGIN CERTIFICATE----- MIIFRTCCBC2gAwIBAgIUXnBcLhdXZuubFenN/WW13NVCkyowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjgxRjVEMzkzQzkxMjMxMUQwMEY2OUNBNDJDQzZEM0ZE MTFEN0Q1MjAeFw0yNjA0MTcxNzU1MDdaFw0yNjA0MTgxOTU0MDdaMDMxMTAvBgNV BAMTKDFCREE1MDcwM0MyMUNCNzQ2NUE3RjU3NzgxNTVGNEM0QjJDRDNCRjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCUA2HiAiDcRDo6l4Hs7rG8RUYI PF8Q6CWS+e5IYN5O5uW+FL42tkxXC3Ls2dEQkRMT2Hw7SdDvIDJXmnQR1rLUwJWG Qp/YaFBh+bNWo+94SqtwVtTwJiHKE3T94dj6jnsCBIsY907pZ0QYyPWirbisJSJU ZSy8GbIUPTG3G7nSB+ezE/UZaNIbzBhT0ikpr+vOXamfoTetbNOUgIgFrYsypsPq vhbzB7aiC4DNjIr4WivYG2AqGCeOu4TJWc/sGqkUHNzu6ymyfjNEWfMUho3oWill xcRqG/lmbxhDaZuMbj8eAdjfuDM7turYLhY4w6rU6Po57/X8CJrIp5OcoVApAgMB AAGjggJPMIICSzAdBgNVHQ4EFgQUG9pQcDwhy3Rlp/V3gVX0xLLNO/YwHwYDVR0j BBgwFoAUKB9dOTyRIxHQD2nKQsxtP9EdfVIwDgYDVR0PAQH/BAQDAgeAMIGPBgNV HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv cmVwby9ycGtpX2NhX2YxMTRjMWVhNzc4ODQ1MmNiZjM4YmU4NTRlYTgzNTlkLzIv MjgxRjVEMzkzQzkxMjMxMUQwMEY2OUNBNDJDQzZEM0ZEMTFEN0Q1Mi5jcmwwdgYI KwYBBQUHAQEEajBoMGYGCCsGAQUFBzAChlpyc3luYzovL3JyZHAuYXMyMTQ3NDku bmV0L3JlcG8vYXMyMTQ3NDktcGF3LzEvMjgxRjVEMzkzQzkxMjMxMUQwMEY2OUNB NDJDQzZEM0ZEMTFEN0Q1Mi5jZXIwgZoGCCsGAQUFBwELBIGNMIGKMIGHBggrBgEF BQcwC4Z7cnN5bmM6Ly9ycGtpLXJlcG8uYXMyMDc5NjAubmV0L3JlcG8vcnBraV9j YV9mMTE0YzFlYTc3ODg0NTJjYmYzOGJlODU0ZWE4MzU5ZC8yLzI4MUY1RDM5M0M5 MTIzMTFEMDBGNjlDQTQyQ0M2RDNGRDExRDdENTIubWZ0MBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAV BggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCFHXBaoGLi R45Yp+OE6SGfa2knMvTiI6gc69ytA/4pBGn5HIUgqD8ZwFoylGkcJRDxLSgFjx0T 0/p7VQTVfySp/zPI62r0e2Owjs7dvLOMmaax6X7EbxQZzIy1t/LVX4t9596Kglc5 vBvyKG0mtL0BlA4m72MWijFdVa/dV313mM4S3WaGGGtHV4PmHxtfoedpt7wec7vT 4aU0Qzl9W/gNa20264PniMBrCfecEtLKhFM7JwKs/LCmRQ7UU4mfAVHvJanpZeNH 3ZUXW2p5VdqeQWIMTaaloDy8hW71RxzHMVOYqiF2TaWQuA3CvNZ/3zO889w5OBUX U75/ZcihJPo2 -----END CERTIFICATE-----Generated at Sat Apr 18 06:04:17 2026 by rpki-client