$ rpki-client -vvf rrdp.as214749.net/repo/as214749-paw/1/66BD0C10135E5DBF4913E2EE3F2DD9D358F9F51C.mft File: 66BD0C10135E5DBF4913E2EE3F2DD9D358F9F51C.mft (raw, json) Hash identifier: EN430d+nP+7Wz4HaC3DNPA+waQQi032U11y60PXK62A= Subject key identifier: 49:51:F8:66:D8:63:CA:EB:F1:F2:1B:52:29:6D:08:D9:8F:BE:6D:5A Authority key identifier: 66:BD:0C:10:13:5E:5D:BF:49:13:E2:EE:3F:2D:D9:D3:58:F9:F5:1C Certificate issuer: /CN=66BD0C10135E5DBF4913E2EE3F2DD9D358F9F51C Certificate serial: 7F2B06698D8A903666844FE3C826DB2F6E239543 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/66BD0C10135E5DBF4913E2EE3F2DD9D358F9F51C.cer Subject info access: rsync://rrdp.as214749.net/repo/as214749-paw/1/66BD0C10135E5DBF4913E2EE3F2DD9D358F9F51C.mft Manifest number: D7 Signing time: Tue 28 Jul 2026 05:54:51 +0000 Manifest this update: Tue 28 Jul 2026 05:49:51 +0000 Manifest next update: Wed 29 Jul 2026 07:23:51 +0000 Files and hashes: 1: 326131313a663263303a666665303a3a2f34382d3438203d3e20323134373439.roa (hash: eKfFEzgr+H6yF3j6egSuIVRG25C7FeWL17iAWbZC228=) 2: 281F5D393C912311D00F69CA42CC6D3FD11D7D52.cer (hash: ynXwUJN5JMWLP0eeAHCJKATWObgf6l2CFVROKgpYj7U=) 3: 66BD0C10135E5DBF4913E2EE3F2DD9D358F9F51C.crl (hash: adwx1KTgMl0OYNs5bgPR6VhZl6PsLQjxsVK/vb5svRk=) Validation: OK Signature path: rsync://rrdp.as214749.net/repo/as214749-paw/1/66BD0C10135E5DBF4913E2EE3F2DD9D358F9F51C.crl rsync://rrdp.as214749.net/repo/as214749-paw/1/66BD0C10135E5DBF4913E2EE3F2DD9D358F9F51C.mft rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/66BD0C10135E5DBF4913E2EE3F2DD9D358F9F51C.cer rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 29 Jul 2026 06:02:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:2b:06:69:8d:8a:90:36:66:84:4f:e3:c8:26:db:2f:6e:23:95:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66BD0C10135E5DBF4913E2EE3F2DD9D358F9F51C Validity Not Before: Jul 28 05:49:51 2026 GMT Not After : Jul 29 07:23:51 2026 GMT Subject: CN=4951F866D863CAEBF1F21B52296D08D98FBE6D5A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:84:64:59:50:bc:72:d2:90:3f:6b:e5:7d:1e: 18:5e:64:ee:84:8c:b4:f0:09:8f:3e:d0:47:19:63: 51:72:75:ad:1c:0c:cb:c7:35:32:17:00:a1:13:72: e9:ed:1e:8f:fa:bd:ce:c9:e7:d8:16:94:92:e0:be: 42:75:2a:be:3a:c2:c9:c4:39:8a:7e:4a:73:1d:c6: 53:4f:1d:16:1f:c1:37:b7:63:93:d6:a6:2b:b0:d1: b1:39:52:fd:39:53:8b:e8:11:71:be:29:cf:39:84: 82:53:12:2e:cd:a2:7b:d4:dd:59:1c:9b:76:1f:7a: 92:62:21:6f:62:cb:8c:f7:f5:31:19:b5:7a:f5:21: 3e:2d:e8:7c:ab:a9:63:23:98:74:1e:c1:ff:22:1f: 5a:2b:9e:77:e6:76:4b:28:83:f6:53:de:0b:96:bc: 1f:1c:6d:01:d3:69:db:4b:ce:d0:44:00:75:3d:2d: 14:0d:ef:ee:c3:04:8f:90:1e:3b:5b:bd:4f:47:02: 2f:ae:39:99:d1:cf:6e:38:b7:1e:cc:0b:64:da:0f: 1f:48:19:6f:e4:f1:35:9e:65:2e:06:5c:0d:69:fa: 6a:75:a2:1a:5b:d6:e4:fe:69:b0:c5:61:e0:60:88: c6:7b:aa:7b:91:cf:74:60:ca:cc:f5:b4:32:3f:d8: f7:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:51:F8:66:D8:63:CA:EB:F1:F2:1B:52:29:6D:08:D9:8F:BE:6D:5A X509v3 Authority Key Identifier: keyid:66:BD:0C:10:13:5E:5D:BF:49:13:E2:EE:3F:2D:D9:D3:58:F9:F5:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rrdp.as214749.net/repo/as214749-paw/1/66BD0C10135E5DBF4913E2EE3F2DD9D358F9F51C.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/66BD0C10135E5DBF4913E2EE3F2DD9D358F9F51C.cer Subject Information Access: Signed Object - URI:rsync://rrdp.as214749.net/repo/as214749-paw/1/66BD0C10135E5DBF4913E2EE3F2DD9D358F9F51C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 96:83:49:4c:b1:27:b4:ab:79:b9:71:49:2b:47:e8:3d:1d:f1: 7b:a1:ca:57:47:32:65:28:73:94:a6:54:77:af:22:75:45:f9: c2:8f:30:55:5e:cf:53:f5:13:6e:25:8f:2d:1f:d1:01:31:b7: c3:67:76:d9:f4:e0:df:87:a0:c2:14:d5:30:99:95:4c:85:c6: d3:cf:de:08:1f:3b:ec:4f:aa:a4:5e:d2:66:52:0d:80:78:6d: ac:04:a2:0d:2b:6d:de:15:0d:fa:0e:67:83:ac:e2:bf:06:2c: 45:e5:6e:36:16:ff:eb:16:69:82:49:ce:e7:0d:4e:0a:ea:18: 5f:a3:02:79:f6:47:8a:1d:0f:8f:e0:74:ba:1a:24:8b:6d:41: c6:46:ba:4c:22:f2:df:15:35:70:ea:fc:37:43:1d:46:bf:c6: 25:4f:4e:b6:dd:30:53:e4:d2:35:f9:4b:27:d6:54:b1:95:3e: 2e:48:51:9c:ea:c6:9c:d4:e8:b6:fa:8d:c8:26:4f:92:f6:85: e1:01:51:72:a5:31:a8:eb:36:b0:a8:6b:0e:69:91:6e:43:be: ed:fc:5f:bc:2e:42:ff:5c:fa:9c:a5:6a:92:52:36:da:8f:3e: 7f:90:9b:41:6f:de:0e:ad:56:df:a2:42:2d:9e:50:f4:3a:00: e9:a6:c4:10 -----BEGIN CERTIFICATE----- MIIFJDCCBAygAwIBAgIUfysGaY2KkDZmhE/jyCbbL24jlUMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjZCRDBDMTAxMzVFNURCRjQ5MTNFMkVFM0YyREQ5RDM1 OEY5RjUxQzAeFw0yNjA3MjgwNTQ5NTFaFw0yNjA3MjkwNzIzNTFaMDMxMTAvBgNV BAMTKDQ5NTFGODY2RDg2M0NBRUJGMUYyMUI1MjI5NkQwOEQ5OEZCRTZENUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCOhGRZULxy0pA/a+V9HhheZO6E jLTwCY8+0EcZY1Fyda0cDMvHNTIXAKETcuntHo/6vc7J59gWlJLgvkJ1Kr46wsnE OYp+SnMdxlNPHRYfwTe3Y5PWpiuw0bE5Uv05U4voEXG+Kc85hIJTEi7NonvU3Vkc m3YfepJiIW9iy4z39TEZtXr1IT4t6HyrqWMjmHQewf8iH1ornnfmdksog/ZT3guW vB8cbQHTadtLztBEAHU9LRQN7+7DBI+QHjtbvU9HAi+uOZnRz244tx7MC2TaDx9I GW/k8TWeZS4GXA1p+mp1ohpb1uT+abDFYeBgiMZ7qnuRz3Rgysz1tDI/2PedAgMB AAGjggIuMIICKjAdBgNVHQ4EFgQUSVH4Zthjyuvx8htSKW0I2Y++bVowHwYDVR0j BBgwFoAUZr0MEBNeXb9JE+LuPy3Z01j59RwwDgYDVR0PAQH/BAQDAgeAMGsGA1Ud HwRkMGIwYKBeoFyGWnJzeW5jOi8vcnJkcC5hczIxNDc0OS5uZXQvcmVwby9hczIx NDc0OS1wYXcvMS82NkJEMEMxMDEzNUU1REJGNDkxM0UyRUUzRjJERDlEMzU4RjlG NTFDLmNybDCBngYIKwYBBQUHAQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzov L3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2RkZTgzN2ZiLTYz OTAtNDFiNS04MmEwLWYwZDAyYzAzYTJjNi83LzY2QkQwQzEwMTM1RTVEQkY0OTEz RTJFRTNGMkREOUQzNThGOUY1MUMuY2VyMHYGCCsGAQUFBwELBGowaDBmBggrBgEF BQcwC4ZacnN5bmM6Ly9ycmRwLmFzMjE0NzQ5Lm5ldC9yZXBvL2FzMjE0NzQ5LXBh dy8xLzY2QkQwQzEwMTM1RTVEQkY0OTEzRTJFRTNGMkREOUQzNThGOUY1MUMubWZ0 MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYE AgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCWg0lMsSe0q3m5cUkrR+g9HfF7ocpXRzJlKHOUplR3ryJ1RfnCjzBV Xs9T9RNuJY8tH9EBMbfDZ3bZ9ODfh6DCFNUwmZVMhcbTz94IHzvsT6qkXtJmUg2A eG2sBKINK23eFQ36DmeDrOK/BixF5W42Fv/rFmmCSc7nDU4K6hhfowJ59keKHQ+P 4HS6GiSLbUHGRrpMIvLfFTVw6vw3Qx1Gv8YlT0623TBT5NI1+Usn1lSxlT4uSFGc 6sac1Oi2+o3IJk+S9oXhAVFypTGo6zawqGsOaZFuQ77t/F+8LkL/XPqcpWqSUjba jz5/kJtBb94OrVbfokItnlD0OgDppsQQ -----END CERTIFICATE-----Generated at Tue Jul 28 19:24:31 2026 by rpki-client