$ rpki-client -vvvf rpki-repo.as207960.net/repo/rpki_ca_67c5d4ad433e4cfc9086ea1f33f2d276/0/31586760843F668A816117EA02F6F30FE8F9C359.mft File: 31586760843F668A816117EA02F6F30FE8F9C359.mft (raw, json) Hash identifier: eNMVZPmoTExA7h4cG95qj9gBkaaTklM/ckj+SbGOFhs= Subject key identifier: 89:B3:79:2C:51:80:8C:74:17:FD:BC:33:82:29:66:4E:62:9D:BC:F1 Authority key identifier: 31:58:67:60:84:3F:66:8A:81:61:17:EA:02:F6:F3:0F:E8:F9:C3:59 Certificate issuer: /CN=31586760843F668A816117EA02F6F30FE8F9C359 Certificate serial: 32CC4A5E3ADEB0C8B9144E4E829D449BD695815B Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/31586760843F668A816117EA02F6F30FE8F9C359.cer Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_67c5d4ad433e4cfc9086ea1f33f2d276/0/31586760843F668A816117EA02F6F30FE8F9C359.mft Manifest number: 03DC Signing time: Thu 17 Sep 2026 16:07:55 +0000 Manifest this update: Thu 17 Sep 2026 16:02:55 +0000 Manifest next update: Fri 18 Sep 2026 19:07:55 +0000 Files and hashes: 1: 31586760843F668A816117EA02F6F30FE8F9C359.crl (hash: +jb46Qq4TjXFSckDYDqV3J5ESe5jZuzafJdEIigl4qs=) 2: 326131313a663263303a666638303a3a2f34382d3438203d3e20323134353738.roa (hash: BjKc9VMASsXPgZhYz/2yz7n3Gaf1Y9hvN7y8UGTtnR0=) Validation: OK Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_67c5d4ad433e4cfc9086ea1f33f2d276/0/31586760843F668A816117EA02F6F30FE8F9C359.crl rsync://rpki-repo.as207960.net/repo/rpki_ca_67c5d4ad433e4cfc9086ea1f33f2d276/0/31586760843F668A816117EA02F6F30FE8F9C359.mft rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/31586760843F668A816117EA02F6F30FE8F9C359.cer rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 18 Sep 2026 14:15:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:cc:4a:5e:3a:de:b0:c8:b9:14:4e:4e:82:9d:44:9b:d6:95:81:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=31586760843F668A816117EA02F6F30FE8F9C359 Validity Not Before: Sep 17 16:02:55 2026 GMT Not After : Sep 18 19:07:55 2026 GMT Subject: CN=89B3792C51808C7417FDBC338229664E629DBCF1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:fb:2e:5a:e0:f1:b7:9a:92:e9:f9:bb:eb:45: 61:94:c5:74:e3:da:f8:9d:8c:6d:b8:50:14:53:85: a4:12:bf:68:7a:d5:76:31:a0:bf:4a:a6:8e:0c:94: 1a:05:a0:af:f3:0f:cd:f7:f9:7d:18:25:06:c9:97: b2:64:8c:24:e8:d7:1c:02:2c:60:24:49:0e:25:49: d5:e7:94:aa:f9:56:6e:c2:3e:cc:88:8b:00:d7:cd: 18:b9:35:b8:8f:3a:eb:14:f7:3e:a1:2c:59:29:5b: f5:ef:76:54:ed:c9:a4:60:09:c5:60:21:81:73:7f: db:70:18:db:c9:7e:2c:ef:ee:b4:96:ee:8e:9a:61: 7c:33:f4:8a:61:7b:3f:c8:23:ea:22:00:8e:64:e2: bb:06:f1:b8:cf:f2:0d:a7:2f:4d:5f:4a:39:56:38: 72:ab:9b:85:27:55:43:c5:86:9c:c6:3f:d8:1f:05: 42:a8:e7:69:8e:22:d5:be:27:22:b9:bf:46:65:87: 5a:f1:b8:64:48:00:f9:f4:5f:ec:73:fb:c2:ab:d8: f7:34:49:98:e2:d8:b4:8b:c3:e3:4e:c7:e4:4d:91: c1:a5:f9:32:ef:6c:5f:80:49:f6:b8:b6:1c:06:85: 48:7b:fa:47:9b:eb:60:1d:7c:09:b3:76:f2:1d:69: 16:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:B3:79:2C:51:80:8C:74:17:FD:BC:33:82:29:66:4E:62:9D:BC:F1 X509v3 Authority Key Identifier: keyid:31:58:67:60:84:3F:66:8A:81:61:17:EA:02:F6:F3:0F:E8:F9:C3:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_67c5d4ad433e4cfc9086ea1f33f2d276/0/31586760843F668A816117EA02F6F30FE8F9C359.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/31586760843F668A816117EA02F6F30FE8F9C359.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_67c5d4ad433e4cfc9086ea1f33f2d276/0/31586760843F668A816117EA02F6F30FE8F9C359.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:51:64:cd:37:ba:1d:26:c4:54:13:75:10:af:f6:c6:8a:c1: e8:14:01:65:bf:e0:ab:a1:61:d2:0a:de:28:db:31:a2:a0:2d: 06:6a:21:bd:64:e6:c3:2b:c1:5c:45:4e:24:52:0d:7e:5b:6d: 0f:bc:c9:f7:5c:f9:1a:50:3d:a7:17:5b:70:61:05:e0:27:ca: 98:8a:c4:c9:2c:8d:df:0c:dd:4b:de:65:6f:4e:10:9c:29:5d: 80:83:06:68:69:ce:8b:82:eb:37:49:41:3f:66:1f:0f:83:82: 14:73:a7:aa:52:77:e9:9a:16:aa:9c:fc:27:2e:19:76:e2:7f: 81:ba:42:01:5d:9a:39:b8:92:d9:e3:58:62:84:7b:d5:0e:5e: 99:a5:9b:84:51:6d:e4:02:dd:82:91:0e:80:d6:2d:6f:16:ec: f5:2c:bd:e9:27:0e:42:10:77:fe:c3:0b:63:9b:64:43:ea:5a: 32:37:77:70:b1:69:f3:6c:c9:84:e8:5c:a8:17:45:a4:59:a0: 9f:f0:3f:63:2e:d8:8a:4b:1e:e1:d4:1d:bd:18:00:b3:28:e0: d7:f7:bd:25:ad:a9:24:1a:1e:85:0a:4a:12:1e:23:c6:ea:45: 1c:e7:90:b7:2d:b2:b2:58:26:fe:e5:4a:ac:54:3a:5e:ae:8c: 5e:23:0e:33 -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIUMsxKXjresMi5FE5Ogp1Em9aVgVswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzE1ODY3NjA4NDNGNjY4QTgxNjExN0VBMDJGNkYzMEZF OEY5QzM1OTAeFw0yNjA5MTcxNjAyNTVaFw0yNjA5MTgxOTA3NTVaMDMxMTAvBgNV BAMTKDg5QjM3OTJDNTE4MDhDNzQxN0ZEQkMzMzgyMjk2NjRFNjI5REJDRjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0+y5a4PG3mpLp+bvrRWGUxXTj 2vidjG24UBRThaQSv2h61XYxoL9Kpo4MlBoFoK/zD833+X0YJQbJl7JkjCTo1xwC LGAkSQ4lSdXnlKr5Vm7CPsyIiwDXzRi5NbiPOusU9z6hLFkpW/XvdlTtyaRgCcVg IYFzf9twGNvJfizv7rSW7o6aYXwz9Iphez/II+oiAI5k4rsG8bjP8g2nL01fSjlW OHKrm4UnVUPFhpzGP9gfBUKo52mOItW+JyK5v0Zlh1rxuGRIAPn0X+xz+8Kr2Pc0 SZji2LSLw+NOx+RNkcGl+TLvbF+ASfa4thwGhUh7+keb62AdfAmzdvIdaRYzAgMB AAGjggJ4MIICdDAdBgNVHQ4EFgQUibN5LFGAjHQX/bwzgilmTmKdvPEwHwYDVR0j BBgwFoAUMVhnYIQ/ZoqBYRfqAvbzD+j5w1kwDgYDVR0PAQH/BAQDAgeAMIGPBgNV HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv cmVwby9ycGtpX2NhXzY3YzVkNGFkNDMzZTRjZmM5MDg2ZWExZjMzZjJkMjc2LzAv MzE1ODY3NjA4NDNGNjY4QTgxNjExN0VBMDJGNkYzMEZFOEY5QzM1OS5jcmwwgZ4G CCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5wYWFz LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQxYjUtODJh MC1mMGQwMmMwM2EyYzYvNy8zMTU4Njc2MDg0M0Y2NjhBODE2MTE3RUEwMkY2RjMw RkU4RjlDMzU5LmNlcjCBmgYIKwYBBQUHAQsEgY0wgYowgYcGCCsGAQUFBzALhnty c3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQvcmVwby9ycGtpX2NhXzY3YzVk NGFkNDMzZTRjZmM5MDg2ZWExZjMzZjJkMjc2LzAvMzE1ODY3NjA4NDNGNjY4QTgx NjExN0VBMDJGNkYzMEZFOEY5QzM1OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAARRZM03uh0mxFQTdRCv 9saKwegUAWW/4KuhYdIK3ijbMaKgLQZqIb1k5sMrwVxFTiRSDX5bbQ+8yfdc+RpQ PacXW3BhBeAnypiKxMksjd8M3UveZW9OEJwpXYCDBmhpzouC6zdJQT9mHw+DghRz p6pSd+maFqqc/CcuGXbif4G6QgFdmjm4ktnjWGKEe9UOXpmlm4RRbeQC3YKRDoDW LW8W7PUsveknDkIQd/7DC2ObZEPqWjI3d3CxafNsyYToXKgXRaRZoJ/wP2Mu2IpL HuHUHb0YALMo4Nf3vSWtqSQaHoUKShIeI8bqRRznkLctsrJYJv7lSqxUOl6ujF4j DjM= -----END CERTIFICATE-----Generated at Thu Sep 17 23:45:52 2026 by rpki-client