$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_25405c76c7a043c89ace167e9d2cf79c/0/3B86A4A45380C6D455CDE580DED1BC5612D0A578.mft File: 3B86A4A45380C6D455CDE580DED1BC5612D0A578.mft (raw, json) Hash identifier: EE1G9EdbX7JK9WCy2x71xnhgB4acrVZWFwdHxE9ENIs= Subject key identifier: 47:4F:4F:71:E3:C1:F4:7B:1B:F4:DA:22:F2:20:D7:1C:DA:7B:6B:DF Authority key identifier: 3B:86:A4:A4:53:80:C6:D4:55:CD:E5:80:DE:D1:BC:56:12:D0:A5:78 Certificate issuer: /CN=3B86A4A45380C6D455CDE580DED1BC5612D0A578 Certificate serial: 4F3EFCED6ECD9C1A10892883A33BFBC57E592892 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/3B86A4A45380C6D455CDE580DED1BC5612D0A578.cer Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_25405c76c7a043c89ace167e9d2cf79c/0/3B86A4A45380C6D455CDE580DED1BC5612D0A578.mft Manifest number: 0202 Signing time: Fri 25 Jul 2025 14:47:27 +0000 Manifest this update: Fri 25 Jul 2025 14:42:27 +0000 Manifest next update: Sat 26 Jul 2025 16:44:27 +0000 Files and hashes: 1: 3B86A4A45380C6D455CDE580DED1BC5612D0A578.crl (hash: zAE0SL9OlNY5TdDemyEBeCqn0FAKEp0m+wYKLjGHscA=) 2: 326131313a663263303a666664643a3a2f34382d3438203d3e20323135303639.roa (hash: pRpvcvkpUIjn6KDjm+Ywf0niLgvvVoNWrBKMV64s3Gs=) 3: 326131313a663263303a666664653a3a2f34382d3438203d3e20323135303639.roa (hash: scCBjh8HfhV3GwKDOrHZF1YXj718at6+uNm0y/KBmOw=) 4: 326131313a663263303a666664303a3a2f34382d3438203d3e20323135303639.roa (hash: onhCLB3gV3HdQhsHYazqCSyNdZ/2h865cbuFqj2YlvA=) 5: 326131313a663263303a666664343a3a2f34362d3436203d3e20323135303639.roa (hash: b4lO7qQITmIuTe+1DZpcfLD2H0yGfI8Xz4qwvBeBNzo=) 6: 326131313a663263303a666664313a3a2f34382d3438203d3e20323135303639.roa (hash: Kgbp0+Zk4p3tpOkyAtCJ3HEWdnZBbzm3NgMcGrByxQs=) 7: 326131313a663263303a666664633a3a2f34382d3438203d3e20323135303639.roa (hash: fW3/1bM6uuAVh4/BqcyWFGfZeggD1zO77SW4GWfaw4U=) Validation: OK Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_25405c76c7a043c89ace167e9d2cf79c/0/3B86A4A45380C6D455CDE580DED1BC5612D0A578.crl rsync://rpki-repo.as207960.net/repo/rpki_ca_25405c76c7a043c89ace167e9d2cf79c/0/3B86A4A45380C6D455CDE580DED1BC5612D0A578.mft rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/3B86A4A45380C6D455CDE580DED1BC5612D0A578.cer rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 26 Jul 2025 16:44:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:3e:fc:ed:6e:cd:9c:1a:10:89:28:83:a3:3b:fb:c5:7e:59:28:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3B86A4A45380C6D455CDE580DED1BC5612D0A578 Validity Not Before: Jul 25 14:42:27 2025 GMT Not After : Jul 26 16:44:27 2025 GMT Subject: CN=474F4F71E3C1F47B1BF4DA22F220D71CDA7B6BDF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:3b:88:af:3c:60:2e:f4:af:fb:8a:ec:bf:93: ac:27:de:2b:db:03:9a:40:ef:9c:2d:5b:55:40:29: 81:6b:e1:54:27:06:94:5c:f3:4d:02:9c:23:c6:17: 58:0c:69:d5:54:1f:5f:6c:a7:ac:a9:1c:8b:b9:ed: 26:61:b5:80:01:19:24:dd:73:d7:1c:a4:1a:3b:b0: a9:f2:0d:1f:d3:0e:e7:6c:8b:2a:07:d6:0d:9f:d2: 98:b7:2a:fe:51:3c:83:75:f7:4a:ca:16:9a:2b:80: a0:3a:8d:37:44:bb:14:37:88:f4:f3:0f:60:e8:b4: c6:09:84:e3:c7:0f:3f:f4:e3:91:9a:d5:e9:f5:f0: 11:a6:78:03:35:56:75:55:30:31:0c:25:2a:df:81: f5:28:af:fc:65:49:e6:74:7c:0b:25:12:b9:cb:3a: fa:99:2b:98:42:c7:b6:4d:94:b1:e0:99:99:da:50: 95:76:73:35:3d:56:b9:62:c1:86:77:a6:82:6e:6b: e3:a4:41:8e:8c:36:ee:bc:bb:56:4b:44:db:85:68: 91:e7:3c:48:70:85:cf:e2:ff:ec:87:33:23:61:7c: 1e:e0:4b:27:53:fa:68:a0:70:24:1b:1d:f3:e5:87: b0:d7:e4:fb:95:25:b4:15:4d:29:5d:65:8c:2a:81: 07:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:4F:4F:71:E3:C1:F4:7B:1B:F4:DA:22:F2:20:D7:1C:DA:7B:6B:DF X509v3 Authority Key Identifier: keyid:3B:86:A4:A4:53:80:C6:D4:55:CD:E5:80:DE:D1:BC:56:12:D0:A5:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_25405c76c7a043c89ace167e9d2cf79c/0/3B86A4A45380C6D455CDE580DED1BC5612D0A578.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/3B86A4A45380C6D455CDE580DED1BC5612D0A578.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_25405c76c7a043c89ace167e9d2cf79c/0/3B86A4A45380C6D455CDE580DED1BC5612D0A578.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:dc:41:0c:b9:ac:d5:1a:83:23:55:46:19:ab:71:a5:69:91: 7d:e5:f9:4c:35:9b:e4:53:f2:71:e4:5a:17:0d:9a:cc:3e:af: c0:14:b2:48:63:87:af:c2:04:24:41:79:3e:59:b3:d8:47:3a: ab:3c:a7:7d:43:b5:96:8e:a5:f4:8d:70:6b:fa:fb:97:8b:be: 03:d4:d6:c7:dc:9a:a7:bc:4f:42:c8:67:30:2b:39:02:5b:82: ef:b9:18:b1:d9:fe:a1:b1:92:93:0c:5c:92:ac:07:d4:fd:bd: 7f:a4:28:d9:3c:e2:12:09:f0:88:1b:83:6b:8d:ca:d8:43:37: 62:c3:06:37:52:58:60:65:8b:2e:e5:1c:5b:76:6a:1a:70:8d: 4e:6e:1d:ea:50:3b:77:5d:34:d1:ae:03:ab:f3:c4:b1:d8:2a: 5c:7d:eb:bc:c1:25:c8:35:3e:fb:3e:e9:0e:69:84:99:87:ce: af:64:25:bc:9a:6d:ca:e7:c7:cc:f1:9e:d7:fb:d0:82:b6:80: 34:ce:ec:f5:07:79:23:a8:f0:23:93:77:c0:b7:f2:81:c3:b7: 75:a5:8f:cf:ef:0a:5b:ee:5a:11:92:d6:69:d7:e2:35:67:f4: 5e:16:d4:4d:68:43:a5:73:15:7c:ec:e7:a9:03:56:74:fb:46: f7:0a:ef:ff -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIUTz787W7NnBoQiSiDozv7xX5ZKJIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0I4NkE0QTQ1MzgwQzZENDU1Q0RFNTgwREVEMUJDNTYx MkQwQTU3ODAeFw0yNTA3MjUxNDQyMjdaFw0yNTA3MjYxNjQ0MjdaMDMxMTAvBgNV BAMTKDQ3NEY0RjcxRTNDMUY0N0IxQkY0REEyMkYyMjBENzFDREE3QjZCREYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9O4ivPGAu9K/7iuy/k6wn3ivb A5pA75wtW1VAKYFr4VQnBpRc800CnCPGF1gMadVUH19sp6ypHIu57SZhtYABGSTd c9ccpBo7sKnyDR/TDudsiyoH1g2f0pi3Kv5RPIN190rKFporgKA6jTdEuxQ3iPTz D2DotMYJhOPHDz/045Ga1en18BGmeAM1VnVVMDEMJSrfgfUor/xlSeZ0fAslErnL OvqZK5hCx7ZNlLHgmZnaUJV2czU9VrliwYZ3poJua+OkQY6MNu68u1ZLRNuFaJHn PEhwhc/i/+yHMyNhfB7gSydT+migcCQbHfPlh7DX5PuVJbQVTSldZYwqgQf3AgMB AAGjggJ4MIICdDAdBgNVHQ4EFgQUR09PcePB9Hsb9Noi8iDXHNp7a98wHwYDVR0j BBgwFoAUO4akpFOAxtRVzeWA3tG8VhLQpXgwDgYDVR0PAQH/BAQDAgeAMIGPBgNV HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv cmVwby9ycGtpX2NhXzI1NDA1Yzc2YzdhMDQzYzg5YWNlMTY3ZTlkMmNmNzljLzAv M0I4NkE0QTQ1MzgwQzZENDU1Q0RFNTgwREVEMUJDNTYxMkQwQTU3OC5jcmwwgZ4G CCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5wYWFz LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQxYjUtODJh MC1mMGQwMmMwM2EyYzYvNy8zQjg2QTRBNDUzODBDNkQ0NTVDREU1ODBERUQxQkM1 NjEyRDBBNTc4LmNlcjCBmgYIKwYBBQUHAQsEgY0wgYowgYcGCCsGAQUFBzALhnty c3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQvcmVwby9ycGtpX2NhXzI1NDA1 Yzc2YzdhMDQzYzg5YWNlMTY3ZTlkMmNmNzljLzAvM0I4NkE0QTQ1MzgwQzZENDU1 Q0RFNTgwREVEMUJDNTYxMkQwQTU3OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAIvcQQy5rNUagyNVRhmr caVpkX3l+Uw1m+RT8nHkWhcNmsw+r8AUskhjh6/CBCRBeT5Zs9hHOqs8p31DtZaO pfSNcGv6+5eLvgPU1sfcmqe8T0LIZzArOQJbgu+5GLHZ/qGxkpMMXJKsB9T9vX+k KNk84hIJ8Igbg2uNythDN2LDBjdSWGBliy7lHFt2ahpwjU5uHepQO3ddNNGuA6vz xLHYKlx967zBJcg1Pvs+6Q5phJmHzq9kJbyabcrnx8zxntf70IK2gDTO7PUHeSOo 8COTd8C38oHDt3Wlj8/vClvuWhGS1mnX4jVn9F4W1E1oQ6VzFXzs56kDVnT7RvcK 7/8= -----END CERTIFICATE-----Generated at Sat Jul 26 06:42:52 2025 by rpki-client