$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_67c5d4ad433e4cfc9086ea1f33f2d276/0/31586760843F668A816117EA02F6F30FE8F9C359.mft File: 31586760843F668A816117EA02F6F30FE8F9C359.mft (raw, json) Hash identifier: YeoCL4W7wxzWtLC8W9ZG0u3i4H10XmOZHCploY99IAQ= Subject key identifier: 32:9B:9C:00:27:C7:12:B6:DF:5C:02:AF:02:5B:78:6C:F8:3C:DB:73 Authority key identifier: 31:58:67:60:84:3F:66:8A:81:61:17:EA:02:F6:F3:0F:E8:F9:C3:59 Certificate issuer: /CN=31586760843F668A816117EA02F6F30FE8F9C359 Certificate serial: 7202B359D39BAD6F331C5F473E508FDA74DB90F1 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/31586760843F668A816117EA02F6F30FE8F9C359.cer Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_67c5d4ad433e4cfc9086ea1f33f2d276/0/31586760843F668A816117EA02F6F30FE8F9C359.mft Manifest number: 02EA Signing time: Thu 26 Feb 2026 05:25:08 +0000 Manifest this update: Thu 26 Feb 2026 05:20:06 +0000 Manifest next update: Fri 27 Feb 2026 06:31:06 +0000 Files and hashes: 1: 326131313a663263303a666638303a3a2f34382d3438203d3e20323134353738.roa (hash: K6ERbHzYMOmGY8zVjajZjctj/rooDOMsKI1zpR886Vs=) 2: 31586760843F668A816117EA02F6F30FE8F9C359.crl (hash: a/NVvXQsupIXGueNvFUUvY158S0FurpqahHtgpWllrg=) Validation: OK Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_67c5d4ad433e4cfc9086ea1f33f2d276/0/31586760843F668A816117EA02F6F30FE8F9C359.crl rsync://rpki-repo.as207960.net/repo/rpki_ca_67c5d4ad433e4cfc9086ea1f33f2d276/0/31586760843F668A816117EA02F6F30FE8F9C359.mft rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/31586760843F668A816117EA02F6F30FE8F9C359.cer rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 27 Feb 2026 06:31:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:02:b3:59:d3:9b:ad:6f:33:1c:5f:47:3e:50:8f:da:74:db:90:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=31586760843F668A816117EA02F6F30FE8F9C359 Validity Not Before: Feb 26 05:20:06 2026 GMT Not After : Feb 27 06:31:06 2026 GMT Subject: CN=329B9C0027C712B6DF5C02AF025B786CF83CDB73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:bd:d8:ee:f7:90:fc:e4:18:44:ec:0d:ae:10: 8a:31:36:16:22:a7:8b:af:13:af:2b:7b:cc:a5:8d: 64:29:9a:12:d7:f8:75:fb:9b:f7:c1:38:e8:48:ac: ad:52:8a:79:3e:05:b0:4f:aa:96:e4:25:3b:4f:eb: be:37:2d:d9:9e:c7:85:02:70:4c:c5:4f:11:83:8d: 44:5f:9a:be:28:62:e3:d4:d7:b9:73:7a:bc:6c:e4: d1:4a:00:20:c9:88:30:77:68:7c:59:b7:4b:ae:5e: cc:47:01:ef:01:20:0c:bc:47:b1:e6:d7:81:a0:f6: bd:8b:a6:9c:c4:3c:75:84:fb:95:a9:db:b6:f7:a8: 0b:9c:a4:35:72:97:06:c8:fa:12:d7:7a:dc:6f:87: 09:83:5d:f9:79:d0:ab:a9:f5:10:ac:ef:fb:d5:cf: f7:74:6f:55:f9:e4:13:19:84:13:72:aa:38:30:08: 71:dc:c6:cd:40:d6:f3:9a:ce:b2:6b:a2:19:64:3b: f4:83:06:de:33:45:96:55:bf:66:14:d2:52:d7:ec: a2:b1:a3:56:0b:01:d5:4e:72:f0:f6:bc:f8:bc:4c: 80:60:64:a5:b5:3d:a8:31:95:7d:38:87:5d:af:06: f9:0c:60:ad:78:d9:2f:cb:b0:0c:8f:99:d3:1c:65: 4a:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:9B:9C:00:27:C7:12:B6:DF:5C:02:AF:02:5B:78:6C:F8:3C:DB:73 X509v3 Authority Key Identifier: keyid:31:58:67:60:84:3F:66:8A:81:61:17:EA:02:F6:F3:0F:E8:F9:C3:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_67c5d4ad433e4cfc9086ea1f33f2d276/0/31586760843F668A816117EA02F6F30FE8F9C359.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/31586760843F668A816117EA02F6F30FE8F9C359.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_67c5d4ad433e4cfc9086ea1f33f2d276/0/31586760843F668A816117EA02F6F30FE8F9C359.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:d3:d8:3c:69:3e:47:03:02:4e:32:6e:0f:2c:eb:9b:30:39: 0a:1d:2a:21:df:0b:cd:c4:71:20:d9:42:aa:f2:61:aa:69:84: f9:00:b8:81:aa:db:86:39:b5:13:d5:57:f1:17:f9:e1:ec:e0: 87:ee:ff:ce:10:9e:74:b0:9b:b0:24:4f:18:48:8d:a9:62:9a: 39:1d:37:b8:ba:6d:0e:11:f8:a8:e4:08:70:6d:21:a5:e4:bb: 56:d9:7b:06:04:26:7f:2b:b2:a4:6e:fd:67:6d:1a:c8:ca:8c: 24:43:5b:1b:7f:c3:bb:35:c7:ac:2a:8d:95:f4:b9:10:9c:4d: 0c:bb:d0:59:54:52:92:1b:58:c6:5c:4b:ef:11:a4:fa:3c:29: af:af:84:36:57:98:59:ba:6a:5b:d1:4c:d2:2b:44:de:70:38: 40:88:f7:aa:1a:83:5b:13:80:86:46:4e:2e:88:2e:3a:c2:36: aa:ab:35:fc:4a:a7:d1:79:05:2d:14:45:8f:c1:96:34:23:1e: a7:3b:a2:b0:a7:8e:f5:e6:82:06:b8:c7:40:a9:f7:34:5c:b9: 71:3a:1c:3a:17:27:0f:6f:6c:f4:49:f7:4a:ee:72:5d:50:7d: 8d:1c:48:01:85:d0:01:f9:cb:38:b3:c5:35:3e:46:7a:05:0c: d2:e6:69:55 -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIUcgKzWdObrW8zHF9HPlCP2nTbkPEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzE1ODY3NjA4NDNGNjY4QTgxNjExN0VBMDJGNkYzMEZF OEY5QzM1OTAeFw0yNjAyMjYwNTIwMDZaFw0yNjAyMjcwNjMxMDZaMDMxMTAvBgNV BAMTKDMyOUI5QzAwMjdDNzEyQjZERjVDMDJBRjAyNUI3ODZDRjgzQ0RCNzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClvdju95D85BhE7A2uEIoxNhYi p4uvE68re8yljWQpmhLX+HX7m/fBOOhIrK1Sink+BbBPqpbkJTtP6743Ldmex4UC cEzFTxGDjURfmr4oYuPU17lzerxs5NFKACDJiDB3aHxZt0uuXsxHAe8BIAy8R7Hm 14Gg9r2LppzEPHWE+5Wp27b3qAucpDVylwbI+hLXetxvhwmDXfl50Kup9RCs7/vV z/d0b1X55BMZhBNyqjgwCHHcxs1A1vOazrJrohlkO/SDBt4zRZZVv2YU0lLX7KKx o1YLAdVOcvD2vPi8TIBgZKW1PagxlX04h12vBvkMYK142S/LsAyPmdMcZUqLAgMB AAGjggJ4MIICdDAdBgNVHQ4EFgQUMpucACfHErbfXAKvAlt4bPg823MwHwYDVR0j BBgwFoAUMVhnYIQ/ZoqBYRfqAvbzD+j5w1kwDgYDVR0PAQH/BAQDAgeAMIGPBgNV HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv cmVwby9ycGtpX2NhXzY3YzVkNGFkNDMzZTRjZmM5MDg2ZWExZjMzZjJkMjc2LzAv MzE1ODY3NjA4NDNGNjY4QTgxNjExN0VBMDJGNkYzMEZFOEY5QzM1OS5jcmwwgZ4G CCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5wYWFz LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQxYjUtODJh MC1mMGQwMmMwM2EyYzYvNy8zMTU4Njc2MDg0M0Y2NjhBODE2MTE3RUEwMkY2RjMw RkU4RjlDMzU5LmNlcjCBmgYIKwYBBQUHAQsEgY0wgYowgYcGCCsGAQUFBzALhnty c3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQvcmVwby9ycGtpX2NhXzY3YzVk NGFkNDMzZTRjZmM5MDg2ZWExZjMzZjJkMjc2LzAvMzE1ODY3NjA4NDNGNjY4QTgx NjExN0VBMDJGNkYzMEZFOEY5QzM1OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAA3T2DxpPkcDAk4ybg8s 65swOQodKiHfC83EcSDZQqryYapphPkAuIGq24Y5tRPVV/EX+eHs4Ifu/84QnnSw m7AkTxhIjalimjkdN7i6bQ4R+KjkCHBtIaXku1bZewYEJn8rsqRu/WdtGsjKjCRD Wxt/w7s1x6wqjZX0uRCcTQy70FlUUpIbWMZcS+8RpPo8Ka+vhDZXmFm6alvRTNIr RN5wOECI96oag1sTgIZGTi6ILjrCNqqrNfxKp9F5BS0URY/BljQjHqc7orCnjvXm gga4x0Cp9zRcuXE6HDoXJw9vbPRJ90rucl1QfY0cSAGF0AH5yzizxTU+RnoFDNLm aVU= -----END CERTIFICATE-----Generated at Thu Feb 26 15:01:28 2026 by rpki-client