$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_a8405eb53de446a994d21f3c27ea3f98/0/AF5AEE5AC3835DADFF52DCE6BE76F9832BC3D439.mft File: AF5AEE5AC3835DADFF52DCE6BE76F9832BC3D439.mft (raw, json) Hash identifier: iBL6/UHrJMCV0YY/E348qv01KQWdzvZ4P1R+ekalQLw= Subject key identifier: 8E:15:12:C4:86:54:4F:61:73:81:1F:B9:6A:3E:93:83:86:47:AB:46 Authority key identifier: AF:5A:EE:5A:C3:83:5D:AD:FF:52:DC:E6:BE:76:F9:83:2B:C3:D4:39 Certificate issuer: /CN=AF5AEE5AC3835DADFF52DCE6BE76F9832BC3D439 Certificate serial: 6783BDE5EDBC4416BB2004C145C41DE42A3EB0AE Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/AF5AEE5AC3835DADFF52DCE6BE76F9832BC3D439.cer Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_a8405eb53de446a994d21f3c27ea3f98/0/AF5AEE5AC3835DADFF52DCE6BE76F9832BC3D439.mft Manifest number: 03A9 Signing time: Wed 29 Jul 2026 14:43:57 +0000 Manifest this update: Wed 29 Jul 2026 14:38:56 +0000 Manifest next update: Thu 30 Jul 2026 18:24:56 +0000 Files and hashes: 1: AF5AEE5AC3835DADFF52DCE6BE76F9832BC3D439.crl (hash: y7tkZUoRvBKOthKluKqUsyI2cmvYtfRk4syrSkLriXA=) 2: 326131313a663263303a666663633a3a2f34382d3438203d3e20323135373638.roa (hash: Kk1bQIf9LRxj6c8BCVTFj/J0x7No1PMyTUzJXHrtFfg=) Validation: OK Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_a8405eb53de446a994d21f3c27ea3f98/0/AF5AEE5AC3835DADFF52DCE6BE76F9832BC3D439.crl rsync://rpki-repo.as207960.net/repo/rpki_ca_a8405eb53de446a994d21f3c27ea3f98/0/AF5AEE5AC3835DADFF52DCE6BE76F9832BC3D439.mft rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/AF5AEE5AC3835DADFF52DCE6BE76F9832BC3D439.cer rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 30 Jul 2026 18:24:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:83:bd:e5:ed:bc:44:16:bb:20:04:c1:45:c4:1d:e4:2a:3e:b0:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AF5AEE5AC3835DADFF52DCE6BE76F9832BC3D439 Validity Not Before: Jul 29 14:38:56 2026 GMT Not After : Jul 30 18:24:56 2026 GMT Subject: CN=8E1512C486544F6173811FB96A3E93838647AB46 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:12:dd:24:04:6e:a9:a1:f2:6d:8d:8d:62:7c: f5:67:13:c5:78:59:97:4d:3b:e4:21:12:1c:1e:35: 82:a6:cf:08:09:55:f1:a4:44:02:0c:d4:9b:40:ac: 24:a6:ae:fa:23:93:da:00:17:4c:7f:fe:1e:bb:1a: e3:b2:6f:7a:25:9c:b2:a7:a1:dd:5d:0f:ad:38:11: df:2c:76:20:5a:76:84:16:95:b1:d9:86:bf:16:bf: 15:33:e9:02:dd:d6:33:e4:24:62:87:03:12:37:29: bb:5f:cd:3e:36:34:b8:2f:04:aa:bf:23:64:ff:6c: d2:67:6b:7a:0e:a3:1e:e9:4b:28:47:41:35:a6:47: 26:33:d0:2b:e9:20:92:5d:5f:b1:d7:cb:26:f2:cd: 0b:8c:4b:a3:08:08:22:f3:0b:ef:6c:9a:92:58:10: f5:72:cc:32:16:29:1f:10:d9:ad:cf:89:bd:ee:a5: 1e:ed:0d:80:6a:1d:49:3a:a3:40:e6:cd:d8:8e:e5: 5c:32:52:30:20:49:e9:75:78:b2:ca:d3:3a:ba:15: 96:35:9d:ff:50:c0:34:56:c7:48:ae:2a:5b:b6:8a: ce:6d:bd:76:ad:07:94:df:47:8f:fa:6e:77:8d:d0: 87:bd:58:99:1f:f9:c8:4b:88:aa:67:63:de:b9:f2: be:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:15:12:C4:86:54:4F:61:73:81:1F:B9:6A:3E:93:83:86:47:AB:46 X509v3 Authority Key Identifier: keyid:AF:5A:EE:5A:C3:83:5D:AD:FF:52:DC:E6:BE:76:F9:83:2B:C3:D4:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_a8405eb53de446a994d21f3c27ea3f98/0/AF5AEE5AC3835DADFF52DCE6BE76F9832BC3D439.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/AF5AEE5AC3835DADFF52DCE6BE76F9832BC3D439.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_a8405eb53de446a994d21f3c27ea3f98/0/AF5AEE5AC3835DADFF52DCE6BE76F9832BC3D439.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9d:75:4e:c6:49:f7:30:ce:e0:48:ee:17:c1:1e:80:31:7d:e6: 12:55:83:66:87:90:c5:a8:8a:8c:94:eb:3e:68:5a:72:e3:17: 33:fc:c5:a0:3e:30:78:2d:a4:c3:7b:e0:c5:bd:b3:3d:5a:62: fa:8e:37:73:ea:e9:bc:75:39:64:03:b1:26:4f:48:be:6e:8a: bb:67:5c:bb:b4:c4:61:40:e6:13:a7:62:8c:53:d3:59:b9:ac: 7b:02:4e:17:89:ba:08:9c:45:77:65:fc:79:93:50:a9:b4:ac: 80:5b:b9:99:8b:20:93:8d:27:75:ec:da:51:40:29:e8:35:04: bb:6d:d3:c6:fc:aa:d8:28:cc:41:19:af:84:a6:70:09:1c:f5: 39:59:44:e7:43:48:50:0a:33:4c:4f:cf:8e:0d:1d:1e:ac:f9: 43:8c:59:61:92:12:f6:19:a8:4b:24:06:94:db:e0:61:17:a2: a4:11:4c:63:97:9c:cb:19:2e:25:76:e2:3c:0e:fd:20:c2:a0: 5e:af:dd:0e:8e:e8:d1:0c:a0:f1:9d:4b:e2:10:2b:06:b4:1b: 3a:92:cb:0d:55:94:e9:33:7c:dd:8d:14:88:69:f2:07:b0:ef: 18:1a:b7:66:20:de:b3:1f:38:62:b2:a0:54:3b:83:10:bd:7f: 46:81:28:b8 -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIUZ4O95e28RBa7IATBRcQd5Co+sK4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUY1QUVFNUFDMzgzNURBREZGNTJEQ0U2QkU3NkY5ODMy QkMzRDQzOTAeFw0yNjA3MjkxNDM4NTZaFw0yNjA3MzAxODI0NTZaMDMxMTAvBgNV BAMTKDhFMTUxMkM0ODY1NDRGNjE3MzgxMUZCOTZBM0U5MzgzODY0N0FCNDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXEt0kBG6pofJtjY1ifPVnE8V4 WZdNO+QhEhweNYKmzwgJVfGkRAIM1JtArCSmrvojk9oAF0x//h67GuOyb3olnLKn od1dD604Ed8sdiBadoQWlbHZhr8WvxUz6QLd1jPkJGKHAxI3KbtfzT42NLgvBKq/ I2T/bNJna3oOox7pSyhHQTWmRyYz0CvpIJJdX7HXyybyzQuMS6MICCLzC+9smpJY EPVyzDIWKR8Q2a3Pib3upR7tDYBqHUk6o0DmzdiO5VwyUjAgSel1eLLK0zq6FZY1 nf9QwDRWx0iuKlu2is5tvXatB5TfR4/6bneN0Ie9WJkf+chLiKpnY9658r7JAgMB AAGjggJ4MIICdDAdBgNVHQ4EFgQUjhUSxIZUT2FzgR+5aj6Tg4ZHq0YwHwYDVR0j BBgwFoAUr1ruWsODXa3/Utzmvnb5gyvD1DkwDgYDVR0PAQH/BAQDAgeAMIGPBgNV HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv cmVwby9ycGtpX2NhX2E4NDA1ZWI1M2RlNDQ2YTk5NGQyMWYzYzI3ZWEzZjk4LzAv QUY1QUVFNUFDMzgzNURBREZGNTJEQ0U2QkU3NkY5ODMyQkMzRDQzOS5jcmwwgZ4G CCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5wYWFz LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQxYjUtODJh MC1mMGQwMmMwM2EyYzYvNy9BRjVBRUU1QUMzODM1REFERkY1MkRDRTZCRTc2Rjk4 MzJCQzNENDM5LmNlcjCBmgYIKwYBBQUHAQsEgY0wgYowgYcGCCsGAQUFBzALhnty c3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQvcmVwby9ycGtpX2NhX2E4NDA1 ZWI1M2RlNDQ2YTk5NGQyMWYzYzI3ZWEzZjk4LzAvQUY1QUVFNUFDMzgzNURBREZG NTJEQ0U2QkU3NkY5ODMyQkMzRDQzOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAJ11TsZJ9zDO4EjuF8Ee gDF95hJVg2aHkMWoioyU6z5oWnLjFzP8xaA+MHgtpMN74MW9sz1aYvqON3Pq6bx1 OWQDsSZPSL5uirtnXLu0xGFA5hOnYoxT01m5rHsCTheJugicRXdl/HmTUKm0rIBb uZmLIJONJ3Xs2lFAKeg1BLtt08b8qtgozEEZr4SmcAkc9TlZROdDSFAKM0xPz44N HR6s+UOMWWGSEvYZqEskBpTb4GEXoqQRTGOXnMsZLiV24jwO/SDCoF6v3Q6O6NEM oPGdS+IQKwa0GzqSyw1VlOkzfN2NFIhp8gew7xgat2Yg3rMfOGKyoFQ7gxC9f0aB KLg= -----END CERTIFICATE-----Generated at Thu Jul 30 07:05:15 2026 by rpki-client