
$ rpki-client -vvf rrdp.as214749.net/repo/as214749-paw/1/66BD0C10135E5DBF4913E2EE3F2DD9D358F9F51C.mft
File: 66BD0C10135E5DBF4913E2EE3F2DD9D358F9F51C.mft (raw, json)
Hash identifier: dMQGIhypOXtMLAVUo55V4PDFguhBBZWwSrPmK//2CKw=
Subject key identifier: C7:65:DD:95:63:2B:60:76:95:21:BC:07:B3:E2:B6:23:4F:FA:C0:80
Authority key identifier: 66:BD:0C:10:13:5E:5D:BF:49:13:E2:EE:3F:2D:D9:D3:58:F9:F5:1C
Certificate issuer: /CN=66BD0C10135E5DBF4913E2EE3F2DD9D358F9F51C
Certificate serial: 0862E48EC60CF8597E997EA5B5D45C780525321A
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/66BD0C10135E5DBF4913E2EE3F2DD9D358F9F51C.cer
Subject info access: rsync://rrdp.as214749.net/repo/as214749-paw/1/66BD0C10135E5DBF4913E2EE3F2DD9D358F9F51C.mft
Manifest number: 9B
Signing time: Fri 12 Jun 2026 18:34:25 +0000
Manifest this update: Fri 12 Jun 2026 18:29:25 +0000
Manifest next update: Sat 13 Jun 2026 21:31:25 +0000
Files and hashes: 1: 281F5D393C912311D00F69CA42CC6D3FD11D7D52.cer (hash: ynXwUJN5JMWLP0eeAHCJKATWObgf6l2CFVROKgpYj7U=)
2: 326131313a663263303a666665303a3a2f34382d3438203d3e20323134373439.roa (hash: eKfFEzgr+H6yF3j6egSuIVRG25C7FeWL17iAWbZC228=)
3: 66BD0C10135E5DBF4913E2EE3F2DD9D358F9F51C.crl (hash: D+Qx7YZFy6vILQnvhAIPyT3//giUbTQSQxvl89bvJ6s=)
Validation: OK
Signature path: rsync://rrdp.as214749.net/repo/as214749-paw/1/66BD0C10135E5DBF4913E2EE3F2DD9D358F9F51C.crl
rsync://rrdp.as214749.net/repo/as214749-paw/1/66BD0C10135E5DBF4913E2EE3F2DD9D358F9F51C.mft
rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/66BD0C10135E5DBF4913E2EE3F2DD9D358F9F51C.cer
rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl
rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft
rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 20:58:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:62:e4:8e:c6:0c:f8:59:7e:99:7e:a5:b5:d4:5c:78:05:25:32:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66BD0C10135E5DBF4913E2EE3F2DD9D358F9F51C
Validity
Not Before: Jun 12 18:29:25 2026 GMT
Not After : Jun 13 21:31:25 2026 GMT
Subject: CN=C765DD95632B60769521BC07B3E2B6234FFAC080
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:51:60:ba:6e:a1:db:5b:21:f4:dc:e6:c0:38:
a3:21:9b:5d:fd:e9:89:14:88:25:13:7c:8a:87:ef:
43:0a:47:d4:33:90:e8:65:5e:6a:99:47:b4:c1:68:
bc:86:ce:60:7f:e7:d4:c2:e9:62:02:c9:b2:11:97:
ec:df:26:d5:7e:0d:e2:f6:6b:80:e9:25:55:64:e3:
6f:d0:85:a8:10:82:43:42:c0:2b:54:8d:0a:1a:2f:
8e:62:30:ef:83:32:84:b0:17:ac:7b:5a:bb:cb:3f:
a4:8a:06:83:ac:aa:9f:3f:9a:da:6a:bc:fd:1c:22:
85:35:0d:c1:eb:f0:5b:67:1b:5e:36:7b:55:18:f5:
98:8d:5e:ab:31:26:c6:41:5e:52:d3:06:43:bf:27:
89:86:a7:25:82:ae:00:61:03:5a:af:4c:57:52:b4:
09:54:d0:a0:af:21:10:dc:a9:8e:e3:59:d7:37:c9:
06:6c:42:1e:a5:cb:c2:ab:a6:8e:c0:ae:17:c9:28:
fc:de:a0:15:4f:15:dc:bc:44:ef:d3:db:74:ff:af:
92:9d:77:e0:1d:53:a2:30:96:13:01:4e:90:e8:20:
95:8f:7b:80:43:19:e8:9b:61:44:89:7c:29:2e:38:
55:21:01:ce:7e:b6:db:26:48:a5:e2:65:41:07:65:
ac:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:65:DD:95:63:2B:60:76:95:21:BC:07:B3:E2:B6:23:4F:FA:C0:80
X509v3 Authority Key Identifier:
keyid:66:BD:0C:10:13:5E:5D:BF:49:13:E2:EE:3F:2D:D9:D3:58:F9:F5:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rrdp.as214749.net/repo/as214749-paw/1/66BD0C10135E5DBF4913E2EE3F2DD9D358F9F51C.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/66BD0C10135E5DBF4913E2EE3F2DD9D358F9F51C.cer
Subject Information Access:
Signed Object - URI:rsync://rrdp.as214749.net/repo/as214749-paw/1/66BD0C10135E5DBF4913E2EE3F2DD9D358F9F51C.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:d7:a5:bc:d1:a2:d2:21:31:36:95:8a:35:27:f9:76:5c:19:
af:54:4e:31:68:0c:5e:5a:44:63:ab:4c:b4:6c:18:54:6d:f9:
8b:e2:6e:36:4a:b9:0f:f5:69:a5:72:2a:45:6e:b9:27:3e:66:
66:f0:7f:dc:47:2a:a0:ad:67:27:19:d8:27:57:ba:0e:63:62:
16:f2:f8:08:bf:25:d8:ed:72:26:3b:33:81:c9:ed:2c:6a:f9:
40:d1:9d:03:57:00:9f:0d:6c:d4:51:0a:38:20:91:ee:83:c2:
7f:13:56:55:e2:91:a4:ba:8b:50:60:f7:58:f8:4b:bf:d8:dc:
24:f7:cd:3f:01:1d:d5:18:58:37:72:04:8b:4c:4d:4f:25:ff:
6c:2c:8a:c5:01:79:13:96:2f:40:a3:f3:28:21:ed:6d:a0:31:
34:be:a7:c1:95:23:27:20:2c:77:9e:5f:10:30:ee:88:2c:38:
38:68:97:82:0e:78:72:7c:e6:01:89:6b:49:99:d3:65:5c:38:
e7:07:2b:41:d6:84:11:20:4a:51:40:79:d3:07:9b:d3:05:6e:
c4:ab:2c:11:90:17:86:07:08:89:40:ab:2d:2f:f3:28:db:b7:
0d:e6:ad:8a:e3:3f:80:47:e7:3f:6e:b7:cb:a2:0c:20:dd:09:
29:bb:28:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:43:21 2026 by rpki-client