$ rpki-client -vvf rrdp.as214749.net/repo/as214749-paw/1/66BD0C10135E5DBF4913E2EE3F2DD9D358F9F51C.mft File: 66BD0C10135E5DBF4913E2EE3F2DD9D358F9F51C.mft (raw, json) Hash identifier: yUBLGIBnD4G+G/wt25q7wtJvsklP0HqmIKyPQb98L+0= Subject key identifier: B4:CE:24:90:90:4C:9F:B3:3F:40:6C:B3:89:6E:D1:24:B7:6B:B3:FD Authority key identifier: 66:BD:0C:10:13:5E:5D:BF:49:13:E2:EE:3F:2D:D9:D3:58:F9:F5:1C Certificate issuer: /CN=66BD0C10135E5DBF4913E2EE3F2DD9D358F9F51C Certificate serial: 0F35628129FC600A0BE94899C8A4C504DCD9D4C5 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/66BD0C10135E5DBF4913E2EE3F2DD9D358F9F51C.cer Subject info access: rsync://rrdp.as214749.net/repo/as214749-paw/1/66BD0C10135E5DBF4913E2EE3F2DD9D358F9F51C.mft Manifest number: 4F Signing time: Fri 17 Apr 2026 12:29:19 +0000 Manifest this update: Fri 17 Apr 2026 12:24:19 +0000 Manifest next update: Sat 18 Apr 2026 15:31:19 +0000 Files and hashes: 1: 66BD0C10135E5DBF4913E2EE3F2DD9D358F9F51C.crl (hash: AcBmAja5p1oh/w7RVM03dl2AmyNfnqOplSYH7rQgJc8=) 2: 281F5D393C912311D00F69CA42CC6D3FD11D7D52.cer (hash: ynXwUJN5JMWLP0eeAHCJKATWObgf6l2CFVROKgpYj7U=) 3: 326131313a663263303a666665303a3a2f34382d3438203d3e20323134373439.roa (hash: eKfFEzgr+H6yF3j6egSuIVRG25C7FeWL17iAWbZC228=) Validation: OK Signature path: rsync://rrdp.as214749.net/repo/as214749-paw/1/66BD0C10135E5DBF4913E2EE3F2DD9D358F9F51C.crl rsync://rrdp.as214749.net/repo/as214749-paw/1/66BD0C10135E5DBF4913E2EE3F2DD9D358F9F51C.mft rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/66BD0C10135E5DBF4913E2EE3F2DD9D358F9F51C.cer rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 18 Apr 2026 15:31:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:35:62:81:29:fc:60:0a:0b:e9:48:99:c8:a4:c5:04:dc:d9:d4:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66BD0C10135E5DBF4913E2EE3F2DD9D358F9F51C Validity Not Before: Apr 17 12:24:19 2026 GMT Not After : Apr 18 15:31:19 2026 GMT Subject: CN=B4CE2490904C9FB33F406CB3896ED124B76BB3FD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:11:f9:84:97:df:56:06:5d:4d:97:53:c5:87: 9a:df:98:a8:c8:cb:eb:20:b6:e1:59:33:5b:7c:be: d5:fe:0d:44:50:98:68:65:30:b4:11:31:1e:62:c6: d6:73:33:2a:f8:0a:41:c7:34:77:5b:ed:f6:7c:50: 98:da:39:d6:ac:06:81:81:2e:de:37:d9:9e:40:9c: b6:e3:d4:1d:e9:d2:15:1f:6a:2d:b4:cc:74:cb:1d: cc:e1:14:34:41:a5:88:6c:ce:4f:d9:a8:7e:ff:e9: 13:5b:12:97:39:66:02:90:a9:0b:46:27:a8:99:dc: a6:87:b8:d6:f9:95:46:ff:aa:76:79:07:98:1f:88: a1:c7:fd:92:a9:57:c4:36:27:80:f8:47:0d:60:5b: 55:73:17:7f:ba:b7:91:94:6a:2f:a4:ae:93:06:e7: 77:34:98:28:31:21:29:94:f9:09:46:6d:bc:40:f7: 2b:21:d9:da:0c:13:e4:f1:50:91:c3:09:66:26:92: b2:f8:45:32:33:5c:07:bf:e0:ef:26:fa:11:a5:48: 75:68:99:d3:5d:a8:32:57:b6:59:88:25:6a:ae:01: 9b:fd:7c:f8:1f:13:b7:bf:ab:77:86:af:45:6b:50: 99:d9:8d:08:37:ee:7d:e1:08:06:65:12:e3:96:9e: 3a:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:CE:24:90:90:4C:9F:B3:3F:40:6C:B3:89:6E:D1:24:B7:6B:B3:FD X509v3 Authority Key Identifier: keyid:66:BD:0C:10:13:5E:5D:BF:49:13:E2:EE:3F:2D:D9:D3:58:F9:F5:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rrdp.as214749.net/repo/as214749-paw/1/66BD0C10135E5DBF4913E2EE3F2DD9D358F9F51C.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/66BD0C10135E5DBF4913E2EE3F2DD9D358F9F51C.cer Subject Information Access: Signed Object - URI:rsync://rrdp.as214749.net/repo/as214749-paw/1/66BD0C10135E5DBF4913E2EE3F2DD9D358F9F51C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a1:a5:e5:6b:62:17:45:a7:b9:ff:19:8f:69:4d:b6:4d:b0:31: 72:07:ec:f1:56:bb:ae:5b:3a:1f:60:95:4c:91:93:75:08:a3: c3:72:0c:3f:7f:55:5f:3a:16:6a:0f:1c:30:e8:33:b3:c2:24: c6:51:d9:70:75:e5:42:94:d2:8e:1c:95:6d:af:00:98:56:9d: da:be:3e:1a:54:63:97:8d:38:3c:d2:85:6d:17:a9:b1:83:20: b6:1e:86:98:98:95:50:54:68:4c:be:a1:45:6b:46:79:48:b7: d0:e2:e6:09:58:4b:2b:12:d5:5b:fe:84:d5:52:93:91:bd:17: ba:c1:74:e6:a9:b8:d9:e3:57:b1:8b:9e:60:db:90:04:32:06: 00:05:73:95:51:7b:be:f8:b7:1c:74:d9:1e:07:74:33:6e:19: 10:f8:b8:74:d2:47:58:9f:54:7d:c3:e2:d3:41:d9:c0:c5:d6: 91:2e:56:65:80:13:e5:f1:26:6e:a0:4f:6c:f1:2c:22:1e:55: e5:c8:e0:ac:f3:6f:f0:57:0a:51:b7:51:2c:b0:3b:81:cc:65: 6e:b5:fb:cd:9d:e3:8a:10:ce:23:cd:19:5f:0d:18:86:9c:1b: 88:cb:1a:07:85:f3:1c:62:ca:2d:9b:2d:27:a2:17:78:97:a0: bf:aa:3d:00 -----BEGIN CERTIFICATE----- MIIFJDCCBAygAwIBAgIUDzVigSn8YAoL6UiZyKTFBNzZ1MUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjZCRDBDMTAxMzVFNURCRjQ5MTNFMkVFM0YyREQ5RDM1 OEY5RjUxQzAeFw0yNjA0MTcxMjI0MTlaFw0yNjA0MTgxNTMxMTlaMDMxMTAvBgNV BAMTKEI0Q0UyNDkwOTA0QzlGQjMzRjQwNkNCMzg5NkVEMTI0Qjc2QkIzRkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDhEfmEl99WBl1Nl1PFh5rfmKjI y+sgtuFZM1t8vtX+DURQmGhlMLQRMR5ixtZzMyr4CkHHNHdb7fZ8UJjaOdasBoGB Lt432Z5AnLbj1B3p0hUfai20zHTLHczhFDRBpYhszk/ZqH7/6RNbEpc5ZgKQqQtG J6iZ3KaHuNb5lUb/qnZ5B5gfiKHH/ZKpV8Q2J4D4Rw1gW1VzF3+6t5GUai+krpMG 53c0mCgxISmU+QlGbbxA9ysh2doME+TxUJHDCWYmkrL4RTIzXAe/4O8m+hGlSHVo mdNdqDJXtlmIJWquAZv9fPgfE7e/q3eGr0VrUJnZjQg37n3hCAZlEuOWnjpNAgMB AAGjggIuMIICKjAdBgNVHQ4EFgQUtM4kkJBMn7M/QGyziW7RJLdrs/0wHwYDVR0j BBgwFoAUZr0MEBNeXb9JE+LuPy3Z01j59RwwDgYDVR0PAQH/BAQDAgeAMGsGA1Ud HwRkMGIwYKBeoFyGWnJzeW5jOi8vcnJkcC5hczIxNDc0OS5uZXQvcmVwby9hczIx NDc0OS1wYXcvMS82NkJEMEMxMDEzNUU1REJGNDkxM0UyRUUzRjJERDlEMzU4RjlG NTFDLmNybDCBngYIKwYBBQUHAQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzov L3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2RkZTgzN2ZiLTYz OTAtNDFiNS04MmEwLWYwZDAyYzAzYTJjNi83LzY2QkQwQzEwMTM1RTVEQkY0OTEz RTJFRTNGMkREOUQzNThGOUY1MUMuY2VyMHYGCCsGAQUFBwELBGowaDBmBggrBgEF BQcwC4ZacnN5bmM6Ly9ycmRwLmFzMjE0NzQ5Lm5ldC9yZXBvL2FzMjE0NzQ5LXBh dy8xLzY2QkQwQzEwMTM1RTVEQkY0OTEzRTJFRTNGMkREOUQzNThGOUY1MUMubWZ0 MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYE AgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQChpeVrYhdFp7n/GY9pTbZNsDFyB+zxVruuWzofYJVMkZN1CKPDcgw/ f1VfOhZqDxww6DOzwiTGUdlwdeVClNKOHJVtrwCYVp3avj4aVGOXjTg80oVtF6mx gyC2HoaYmJVQVGhMvqFFa0Z5SLfQ4uYJWEsrEtVb/oTVUpORvRe6wXTmqbjZ41ex i55g25AEMgYABXOVUXu++LccdNkeB3QzbhkQ+Lh00kdYn1R9w+LTQdnAxdaRLlZl gBPl8SZuoE9s8SwiHlXlyOCs82/wVwpRt1EssDuBzGVutfvNneOKEM4jzRlfDRiG nBuIyxoHhfMcYsotmy0nohd4l6C/qj0A -----END CERTIFICATE-----Generated at Sat Apr 18 03:00:51 2026 by rpki-client