$ rpki-client -vvvf rrdp.as214749.net/repo/as214749-paw/1/66BD0C10135E5DBF4913E2EE3F2DD9D358F9F51C.mft File: 66BD0C10135E5DBF4913E2EE3F2DD9D358F9F51C.mft (raw, json) Hash identifier: V50MCu+SLKBbXe5cjTbqi3wrrWhtuM3SDI2fr3Qvin0= Subject key identifier: 1E:B2:E1:0D:88:08:3F:F2:0C:1D:15:7F:02:C9:3E:32:F9:A5:61:D8 Authority key identifier: 66:BD:0C:10:13:5E:5D:BF:49:13:E2:EE:3F:2D:D9:D3:58:F9:F5:1C Certificate issuer: /CN=66BD0C10135E5DBF4913E2EE3F2DD9D358F9F51C Certificate serial: 049BA5564D565B08B20062866B07F7A4823BDC44 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/66BD0C10135E5DBF4913E2EE3F2DD9D358F9F51C.cer Subject info access: rsync://rrdp.as214749.net/repo/as214749-paw/1/66BD0C10135E5DBF4913E2EE3F2DD9D358F9F51C.mft Manifest number: 0120 Signing time: Sun 20 Sep 2026 21:34:57 +0000 Manifest this update: Sun 20 Sep 2026 21:29:57 +0000 Manifest next update: Tue 22 Sep 2026 01:16:57 +0000 Files and hashes: 1: 66BD0C10135E5DBF4913E2EE3F2DD9D358F9F51C.crl (hash: JThFwrSkIJmYCXbkgq+hBVFZ9PapmuSrmqpGTCE1JDw=) 2: 281F5D393C912311D00F69CA42CC6D3FD11D7D52.cer (hash: ynXwUJN5JMWLP0eeAHCJKATWObgf6l2CFVROKgpYj7U=) 3: 326131313a663263303a666665303a3a2f34382d3438203d3e20323134373439.roa (hash: eKfFEzgr+H6yF3j6egSuIVRG25C7FeWL17iAWbZC228=) Validation: OK Signature path: rsync://rrdp.as214749.net/repo/as214749-paw/1/66BD0C10135E5DBF4913E2EE3F2DD9D358F9F51C.crl rsync://rrdp.as214749.net/repo/as214749-paw/1/66BD0C10135E5DBF4913E2EE3F2DD9D358F9F51C.mft rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/66BD0C10135E5DBF4913E2EE3F2DD9D358F9F51C.cer rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 21 Sep 2026 19:07:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:9b:a5:56:4d:56:5b:08:b2:00:62:86:6b:07:f7:a4:82:3b:dc:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66BD0C10135E5DBF4913E2EE3F2DD9D358F9F51C Validity Not Before: Sep 20 21:29:57 2026 GMT Not After : Sep 22 01:16:57 2026 GMT Subject: CN=1EB2E10D88083FF20C1D157F02C93E32F9A561D8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:97:87:34:d2:71:f3:6b:96:ff:4f:8b:e1:57: eb:0f:9b:8a:e7:a7:43:d5:5e:04:4b:f9:ac:18:fe: fd:ed:d7:fd:ba:1a:11:b6:c1:95:57:42:82:85:a4: 4c:06:f8:eb:9d:26:f7:74:95:58:de:f1:59:6f:58: c2:48:5f:c4:89:05:b3:8e:af:3e:19:8a:49:0e:ee: c4:25:b0:4c:4b:63:63:5f:3a:f3:0e:68:e3:83:48: 29:49:07:34:11:f0:15:97:b1:61:28:95:5a:3d:58: c0:7d:bd:05:c3:da:95:6f:8f:0e:86:c6:8c:c0:49: 65:67:99:9d:57:a9:4d:e7:95:40:a0:24:58:6e:21: c4:9c:34:2c:9a:44:1c:24:53:e9:bb:0b:61:ee:07: c1:64:53:07:f3:11:f5:6b:5b:6f:cf:84:ad:ea:78: 8b:dc:00:e4:c9:3c:6b:66:d4:93:40:17:af:67:af: ea:41:27:d4:01:00:17:51:ad:cb:cc:4b:81:25:b1: d8:5e:3b:3f:be:62:46:fb:55:c7:33:77:c3:df:c2: fb:91:cf:92:02:33:34:1a:6e:75:28:2c:f6:a6:c7: fc:da:8a:27:ac:0e:0f:22:bb:e5:9b:73:78:7e:28: 7e:1c:62:ab:07:4e:c1:ad:60:d2:25:4c:1c:4e:6f: b6:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:B2:E1:0D:88:08:3F:F2:0C:1D:15:7F:02:C9:3E:32:F9:A5:61:D8 X509v3 Authority Key Identifier: keyid:66:BD:0C:10:13:5E:5D:BF:49:13:E2:EE:3F:2D:D9:D3:58:F9:F5:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rrdp.as214749.net/repo/as214749-paw/1/66BD0C10135E5DBF4913E2EE3F2DD9D358F9F51C.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/66BD0C10135E5DBF4913E2EE3F2DD9D358F9F51C.cer Subject Information Access: Signed Object - URI:rsync://rrdp.as214749.net/repo/as214749-paw/1/66BD0C10135E5DBF4913E2EE3F2DD9D358F9F51C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:1b:c6:d0:e1:ea:0e:fa:e4:97:66:2a:f6:2e:d2:d4:4e:45: 0a:af:14:47:3c:fe:d6:f0:08:47:38:d7:8f:79:5f:1c:3a:3c: 5c:e7:d6:c7:06:78:72:94:83:2d:ff:b5:72:a4:35:3d:0f:eb: 4a:79:e4:bc:ff:34:0f:9f:cf:32:53:7c:4f:73:d7:40:55:eb: 88:f8:a9:e8:f5:31:c8:e6:f4:74:04:46:8b:a5:79:99:d9:a3: 0d:12:40:7c:b9:1d:46:7c:04:80:a9:53:ca:2e:84:79:5e:cc: aa:c3:eb:a1:35:18:ff:67:ce:30:97:6b:8a:8b:1d:94:7d:91: b6:c1:63:29:10:78:14:be:9b:30:3c:5e:02:fa:17:41:75:a0: 1e:b9:8e:bd:b4:6b:49:19:d7:d8:3b:db:e3:c3:e0:6a:aa:1e: 43:47:36:be:94:4e:91:be:64:6f:84:7b:d5:89:90:8b:d3:40: a5:b5:b6:1f:cf:53:81:a6:9e:97:d6:ac:11:5f:5b:fd:f4:a4: e2:20:39:fc:2f:52:53:ae:35:17:a8:b5:8c:a2:82:0e:c2:5f: ce:11:34:41:a5:c9:fa:7b:c9:94:b0:6e:d7:e7:a8:b2:44:23: d0:36:c7:6c:f8:aa:61:0f:69:45:11:7f:55:78:55:09:ef:77: 07:25:38:45 -----BEGIN CERTIFICATE----- MIIFJDCCBAygAwIBAgIUBJulVk1WWwiyAGKGawf3pII73EQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjZCRDBDMTAxMzVFNURCRjQ5MTNFMkVFM0YyREQ5RDM1 OEY5RjUxQzAeFw0yNjA5MjAyMTI5NTdaFw0yNjA5MjIwMTE2NTdaMDMxMTAvBgNV BAMTKDFFQjJFMTBEODgwODNGRjIwQzFEMTU3RjAyQzkzRTMyRjlBNTYxRDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKl4c00nHza5b/T4vhV+sPm4rn p0PVXgRL+awY/v3t1/26GhG2wZVXQoKFpEwG+OudJvd0lVje8VlvWMJIX8SJBbOO rz4ZikkO7sQlsExLY2NfOvMOaOODSClJBzQR8BWXsWEolVo9WMB9vQXD2pVvjw6G xozASWVnmZ1XqU3nlUCgJFhuIcScNCyaRBwkU+m7C2HuB8FkUwfzEfVrW2/PhK3q eIvcAOTJPGtm1JNAF69nr+pBJ9QBABdRrcvMS4ElsdheOz++Ykb7Vcczd8PfwvuR z5ICMzQabnUoLPamx/zaiiesDg8iu+Wbc3h+KH4cYqsHTsGtYNIlTBxOb7bPAgMB AAGjggIuMIICKjAdBgNVHQ4EFgQUHrLhDYgIP/IMHRV/Ask+MvmlYdgwHwYDVR0j BBgwFoAUZr0MEBNeXb9JE+LuPy3Z01j59RwwDgYDVR0PAQH/BAQDAgeAMGsGA1Ud HwRkMGIwYKBeoFyGWnJzeW5jOi8vcnJkcC5hczIxNDc0OS5uZXQvcmVwby9hczIx NDc0OS1wYXcvMS82NkJEMEMxMDEzNUU1REJGNDkxM0UyRUUzRjJERDlEMzU4RjlG NTFDLmNybDCBngYIKwYBBQUHAQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzov L3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2RkZTgzN2ZiLTYz OTAtNDFiNS04MmEwLWYwZDAyYzAzYTJjNi83LzY2QkQwQzEwMTM1RTVEQkY0OTEz RTJFRTNGMkREOUQzNThGOUY1MUMuY2VyMHYGCCsGAQUFBwELBGowaDBmBggrBgEF BQcwC4ZacnN5bmM6Ly9ycmRwLmFzMjE0NzQ5Lm5ldC9yZXBvL2FzMjE0NzQ5LXBh dy8xLzY2QkQwQzEwMTM1RTVEQkY0OTEzRTJFRTNGMkREOUQzNThGOUY1MUMubWZ0 MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYE AgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBtG8bQ4eoO+uSXZir2LtLUTkUKrxRHPP7W8AhHONePeV8cOjxc59bH BnhylIMt/7VypDU9D+tKeeS8/zQPn88yU3xPc9dAVeuI+Kno9THI5vR0BEaLpXmZ 2aMNEkB8uR1GfASAqVPKLoR5Xsyqw+uhNRj/Z84wl2uKix2UfZG2wWMpEHgUvpsw PF4C+hdBdaAeuY69tGtJGdfYO9vjw+Bqqh5DRza+lE6RvmRvhHvViZCL00CltbYf z1OBpp6X1qwRX1v99KTiIDn8L1JTrjUXqLWMooIOwl/OETRBpcn6e8mUsG7X56iy RCPQNsds+KphD2lFEX9VeFUJ73cHJThF -----END CERTIFICATE-----Generated at Mon Sep 21 09:49:31 2026 by rpki-client