$ rpki-client -vvvf rpki-repo.as207960.net/repo/rpki_ca_25405c76c7a043c89ace167e9d2cf79c/0/3B86A4A45380C6D455CDE580DED1BC5612D0A578.mft File: 3B86A4A45380C6D455CDE580DED1BC5612D0A578.mft (raw, json) Hash identifier: 9bKoVSLY2WwIPx8ZKDWeVTYYbkX943o+9G+AcNUOzvY= Subject key identifier: A6:51:2E:1A:3C:4C:D9:6B:D7:C4:E1:92:82:5A:56:B8:2F:7A:8D:F8 Authority key identifier: 3B:86:A4:A4:53:80:C6:D4:55:CD:E5:80:DE:D1:BC:56:12:D0:A5:78 Certificate issuer: /CN=3B86A4A45380C6D455CDE580DED1BC5612D0A578 Certificate serial: 1E599728C98DB8DFDABE35E75C12EB5DB38E6615 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/3B86A4A45380C6D455CDE580DED1BC5612D0A578.cer Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_25405c76c7a043c89ace167e9d2cf79c/0/3B86A4A45380C6D455CDE580DED1BC5612D0A578.mft Manifest number: 03DE Signing time: Thu 17 Sep 2026 13:47:13 +0000 Manifest this update: Thu 17 Sep 2026 13:42:13 +0000 Manifest next update: Fri 18 Sep 2026 17:13:13 +0000 Files and hashes: 1: 326131313a663263303a666664313a3a2f34382d3438203d3e20323135303639.roa (hash: AvPgJpOsI1TploqZ0/2ASRnaOVLSsJ7W3kE96A2TVTo=) 2: 326131313a663263303a666664343a3a2f34362d3436203d3e20323135303639.roa (hash: 8j902cWXOhTuCO690tGBwZ7dH1WqGBRJ8B21eNCGG6w=) 3: 326131313a663263303a666664303a3a2f34382d3438203d3e20323135303639.roa (hash: udhj+Cj6LdKS6F7VmXpps98C6UmzFOStEjpktiC8S+w=) 4: 326131313a663263303a666664643a3a2f34382d3438203d3e20323135303639.roa (hash: KSgTOOL8ZdXrf0lBxQkVAAr95/tmOBwkp7oTrpzhA3k=) 5: 3B86A4A45380C6D455CDE580DED1BC5612D0A578.crl (hash: BaTuka2qR0PXrpQsiL7A/6RioUiHjkHaneeL/Mczut8=) 6: 326131313a663263303a666664633a3a2f34382d3438203d3e20323135303639.roa (hash: vn32w0zGgfB0cVJZQUH0tGQAvf+HZ/StuvYLZuELll0=) 7: 326131313a663263303a666664653a3a2f34382d3438203d3e20323135303639.roa (hash: +Pw2Pz/niLR0OIvDdEcfjmpFskGwMua2flzbLEwL+Go=) Validation: OK Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_25405c76c7a043c89ace167e9d2cf79c/0/3B86A4A45380C6D455CDE580DED1BC5612D0A578.crl rsync://rpki-repo.as207960.net/repo/rpki_ca_25405c76c7a043c89ace167e9d2cf79c/0/3B86A4A45380C6D455CDE580DED1BC5612D0A578.mft rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/3B86A4A45380C6D455CDE580DED1BC5612D0A578.cer rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 18 Sep 2026 14:15:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:59:97:28:c9:8d:b8:df:da:be:35:e7:5c:12:eb:5d:b3:8e:66:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3B86A4A45380C6D455CDE580DED1BC5612D0A578 Validity Not Before: Sep 17 13:42:13 2026 GMT Not After : Sep 18 17:13:13 2026 GMT Subject: CN=A6512E1A3C4CD96BD7C4E192825A56B82F7A8DF8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:9b:8e:8d:75:37:79:53:42:08:8d:bc:2a:7e: d2:53:20:20:5a:50:18:7c:a4:fd:77:6c:44:19:84: 2c:ef:ff:ee:51:64:f8:06:e0:82:84:e9:98:4f:6c: a6:8a:ca:0a:5c:18:c1:02:9a:c8:2c:de:6a:c4:4c: e3:17:9d:98:c4:4e:3e:74:9c:32:c3:eb:ff:b2:82: 6f:c6:9e:9f:75:e7:b8:46:b4:ac:54:22:7d:0d:0a: 1a:1c:ae:fa:6d:3e:64:a4:f7:ff:36:d5:d1:bd:e8: a5:80:f3:70:b5:e5:94:97:b7:2a:e5:ab:31:18:cc: f3:1a:67:e2:dc:39:f5:89:d5:c8:ea:17:f3:86:81: 02:80:2d:57:60:7e:fe:92:6e:60:6d:05:5b:5f:ee: 1c:3a:08:7c:0e:4f:7d:b2:00:e6:29:e0:d9:13:a0: 87:f5:4d:27:41:65:f0:8a:e0:7c:c0:27:e5:11:8c: 7d:5a:cf:0d:a1:72:dc:5b:1c:e4:66:57:ab:ee:b2: 0c:5c:72:ef:15:be:1a:d2:de:13:5b:d7:16:e7:85: 67:5b:5b:b4:70:3f:07:2f:8c:6a:cc:6f:3a:a6:52: 79:2e:50:7c:3e:55:d2:39:e4:94:d3:4f:15:ac:01: c1:43:f0:52:2c:e2:64:2f:4e:6e:6c:37:df:8f:a4: 27:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:51:2E:1A:3C:4C:D9:6B:D7:C4:E1:92:82:5A:56:B8:2F:7A:8D:F8 X509v3 Authority Key Identifier: keyid:3B:86:A4:A4:53:80:C6:D4:55:CD:E5:80:DE:D1:BC:56:12:D0:A5:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_25405c76c7a043c89ace167e9d2cf79c/0/3B86A4A45380C6D455CDE580DED1BC5612D0A578.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/3B86A4A45380C6D455CDE580DED1BC5612D0A578.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_25405c76c7a043c89ace167e9d2cf79c/0/3B86A4A45380C6D455CDE580DED1BC5612D0A578.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:2e:61:d0:59:57:7c:34:fc:0f:e9:3e:11:40:28:76:16:52: 67:08:db:10:f9:6a:70:c2:7e:11:6b:a5:24:e6:e8:e8:d5:9e: 55:f2:79:ff:d4:2c:fa:82:a5:98:70:94:de:e3:03:9a:2f:93: ff:69:b0:7d:01:4d:d4:0e:23:18:fa:47:27:28:f9:3b:ee:2e: 6d:d0:0d:18:bc:97:ac:78:e6:bf:86:a8:3b:53:bd:95:37:e8: 55:47:5e:1d:72:b4:d4:3a:d7:c5:01:4b:8e:52:27:36:b3:69: 44:2c:cd:b6:1d:5c:a9:74:28:1d:2f:94:fe:b8:cb:ac:4d:31: a6:8c:6c:5e:95:5a:df:de:7d:5c:46:e6:3c:a3:6d:98:8d:c4: 0c:ae:c9:e0:92:80:f2:8a:cf:c9:74:ff:5e:af:6c:9c:80:ca: 27:70:5b:92:13:ef:80:5d:59:26:ac:2a:41:5d:23:ff:f1:d4: 89:d1:0e:92:52:45:4d:79:8a:63:71:66:b3:f0:ea:fb:85:22: 31:96:ff:04:00:d9:8f:31:be:66:1b:91:f7:fd:97:3d:7a:39: 99:25:01:98:99:18:d3:f1:91:12:5f:14:77:47:71:ba:9d:39: 0f:10:cc:8a:9f:c6:87:f6:fe:20:02:d4:8a:6d:0d:bc:c7:99: 11:be:c1:c1 -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIUHlmXKMmNuN/avjXnXBLrXbOOZhUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0I4NkE0QTQ1MzgwQzZENDU1Q0RFNTgwREVEMUJDNTYx MkQwQTU3ODAeFw0yNjA5MTcxMzQyMTNaFw0yNjA5MTgxNzEzMTNaMDMxMTAvBgNV BAMTKEE2NTEyRTFBM0M0Q0Q5NkJEN0M0RTE5MjgyNUE1NkI4MkY3QThERjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxm46NdTd5U0IIjbwqftJTICBa UBh8pP13bEQZhCzv/+5RZPgG4IKE6ZhPbKaKygpcGMECmsgs3mrETOMXnZjETj50 nDLD6/+ygm/Gnp9157hGtKxUIn0NChocrvptPmSk9/821dG96KWA83C15ZSXtyrl qzEYzPMaZ+LcOfWJ1cjqF/OGgQKALVdgfv6SbmBtBVtf7hw6CHwOT32yAOYp4NkT oIf1TSdBZfCK4HzAJ+URjH1azw2hctxbHORmV6vusgxccu8VvhrS3hNb1xbnhWdb W7RwPwcvjGrMbzqmUnkuUHw+VdI55JTTTxWsAcFD8FIs4mQvTm5sN9+PpCdLAgMB AAGjggJ4MIICdDAdBgNVHQ4EFgQUplEuGjxM2WvXxOGSglpWuC96jfgwHwYDVR0j BBgwFoAUO4akpFOAxtRVzeWA3tG8VhLQpXgwDgYDVR0PAQH/BAQDAgeAMIGPBgNV HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv cmVwby9ycGtpX2NhXzI1NDA1Yzc2YzdhMDQzYzg5YWNlMTY3ZTlkMmNmNzljLzAv M0I4NkE0QTQ1MzgwQzZENDU1Q0RFNTgwREVEMUJDNTYxMkQwQTU3OC5jcmwwgZ4G CCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5wYWFz LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQxYjUtODJh MC1mMGQwMmMwM2EyYzYvNy8zQjg2QTRBNDUzODBDNkQ0NTVDREU1ODBERUQxQkM1 NjEyRDBBNTc4LmNlcjCBmgYIKwYBBQUHAQsEgY0wgYowgYcGCCsGAQUFBzALhnty c3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQvcmVwby9ycGtpX2NhXzI1NDA1 Yzc2YzdhMDQzYzg5YWNlMTY3ZTlkMmNmNzljLzAvM0I4NkE0QTQ1MzgwQzZENDU1 Q0RFNTgwREVEMUJDNTYxMkQwQTU3OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAFsuYdBZV3w0/A/pPhFA KHYWUmcI2xD5anDCfhFrpSTm6OjVnlXyef/ULPqCpZhwlN7jA5ovk/9psH0BTdQO Ixj6Ryco+TvuLm3QDRi8l6x45r+GqDtTvZU36FVHXh1ytNQ618UBS45SJzazaUQs zbYdXKl0KB0vlP64y6xNMaaMbF6VWt/efVxG5jyjbZiNxAyuyeCSgPKKz8l0/16v bJyAyidwW5IT74BdWSasKkFdI//x1InRDpJSRU15imNxZrPw6vuFIjGW/wQA2Y8x vmYbkff9lz16OZklAZiZGNPxkRJfFHdHcbqdOQ8QzIqfxof2/iAC1IptDbzHmRG+ wcE= -----END CERTIFICATE-----Generated at Thu Sep 17 20:22:54 2026 by rpki-client