$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_a8405eb53de446a994d21f3c27ea3f98/0/AF5AEE5AC3835DADFF52DCE6BE76F9832BC3D439.mft File: AF5AEE5AC3835DADFF52DCE6BE76F9832BC3D439.mft (raw, json) Hash identifier: c6Xnnyuttl2Hrv4HG06gKYQ+totQXD9ty6zfIbfknkg= Subject key identifier: 4E:3F:57:FB:88:2E:F6:E8:D4:F0:11:DB:04:D3:3D:58:A6:26:2F:27 Authority key identifier: AF:5A:EE:5A:C3:83:5D:AD:FF:52:DC:E6:BE:76:F9:83:2B:C3:D4:39 Certificate issuer: /CN=AF5AEE5AC3835DADFF52DCE6BE76F9832BC3D439 Certificate serial: 0C1DB83237F5656978AF0CA930E4ECE49AB90A89 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/AF5AEE5AC3835DADFF52DCE6BE76F9832BC3D439.cer Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_a8405eb53de446a994d21f3c27ea3f98/0/AF5AEE5AC3835DADFF52DCE6BE76F9832BC3D439.mft Manifest number: 02F2 Signing time: Fri 13 Mar 2026 15:02:12 +0000 Manifest this update: Fri 13 Mar 2026 14:57:09 +0000 Manifest next update: Sat 14 Mar 2026 15:20:09 +0000 Files and hashes: 1: AF5AEE5AC3835DADFF52DCE6BE76F9832BC3D439.crl (hash: hePsEKGHjjdWlzx/M4QNBKMNg1IH3rplCcFW1QxJ71Y=) 2: 326131313a663263303a666663633a3a2f34382d3438203d3e20323135373638.roa (hash: 40KX5Azg+QOWUNYOrdl6IsWrdX+iJJgcObJYGtl3Q6w=) Validation: OK Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_a8405eb53de446a994d21f3c27ea3f98/0/AF5AEE5AC3835DADFF52DCE6BE76F9832BC3D439.crl rsync://rpki-repo.as207960.net/repo/rpki_ca_a8405eb53de446a994d21f3c27ea3f98/0/AF5AEE5AC3835DADFF52DCE6BE76F9832BC3D439.mft rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/AF5AEE5AC3835DADFF52DCE6BE76F9832BC3D439.cer rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 14 Mar 2026 12:25:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:1d:b8:32:37:f5:65:69:78:af:0c:a9:30:e4:ec:e4:9a:b9:0a:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AF5AEE5AC3835DADFF52DCE6BE76F9832BC3D439 Validity Not Before: Mar 13 14:57:09 2026 GMT Not After : Mar 14 15:20:09 2026 GMT Subject: CN=4E3F57FB882EF6E8D4F011DB04D33D58A6262F27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:e3:99:18:7c:72:50:95:04:c7:2d:05:fb:90: fc:b0:66:a3:a3:3e:23:57:41:bb:f6:27:64:d4:4d: 6f:fe:a9:ad:bd:5d:3a:f2:8f:33:44:d5:d8:1b:fe: d7:b7:fc:e1:dc:d3:2a:b1:fa:d2:bd:41:31:d6:c3: 40:dc:59:e0:e4:3a:d8:9d:88:55:bf:69:63:ba:8f: 03:f5:84:2a:85:50:c1:89:4c:4c:b2:5e:47:bf:11: c0:6e:26:7f:cd:67:6c:40:16:4f:f2:00:ec:65:f5: c7:3e:f3:6b:ed:53:42:37:c8:00:7f:e3:a7:c6:ab: 84:b1:1a:48:0d:09:6a:1c:29:e8:92:6e:d3:ab:c7: ba:64:90:c2:2f:60:23:60:88:a0:9f:10:07:c4:79: 55:ea:53:56:70:5d:55:9f:e4:af:9e:86:e0:24:9f: 27:67:18:d1:e6:b5:59:e4:3e:1b:f6:33:91:9a:da: 70:e3:a1:fb:c6:b6:68:2f:0b:f1:30:b0:9a:76:3c: 03:e1:7f:51:fb:73:77:b9:bc:4e:88:f0:a2:7d:f5: 7a:c9:ab:09:0b:a6:a6:32:cf:45:55:49:f2:56:a9: 92:15:63:13:30:e8:b9:71:62:43:0b:f5:d2:b9:30: 91:27:4c:d5:f2:22:57:5c:5f:e2:ac:a4:b8:bc:51: 8f:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:3F:57:FB:88:2E:F6:E8:D4:F0:11:DB:04:D3:3D:58:A6:26:2F:27 X509v3 Authority Key Identifier: keyid:AF:5A:EE:5A:C3:83:5D:AD:FF:52:DC:E6:BE:76:F9:83:2B:C3:D4:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_a8405eb53de446a994d21f3c27ea3f98/0/AF5AEE5AC3835DADFF52DCE6BE76F9832BC3D439.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/AF5AEE5AC3835DADFF52DCE6BE76F9832BC3D439.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_a8405eb53de446a994d21f3c27ea3f98/0/AF5AEE5AC3835DADFF52DCE6BE76F9832BC3D439.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b7:e6:12:20:59:fd:d2:5c:50:11:40:e2:9b:b0:59:03:5f:5b: 0a:8a:dc:85:0d:07:29:6e:22:84:14:fd:ba:5e:6a:3f:f8:00: d8:8a:0a:10:11:c4:60:42:fd:8e:4d:fa:8e:10:a1:b2:71:89: f8:b5:5d:af:2d:ab:a8:79:e6:d6:03:cb:f8:ad:4c:3e:e6:c7: 1b:f9:33:7c:66:f5:6f:01:d1:45:32:63:c6:0e:53:fb:70:d8: 82:38:83:ad:06:b8:e2:c9:e1:f4:f1:b2:3f:4d:76:b9:ad:94: 12:d1:86:40:cd:ab:11:75:7f:e5:7f:01:6d:06:0e:30:a8:64: dd:c0:45:53:b8:56:5e:27:94:54:99:3a:07:de:f3:72:d9:8b: c7:ff:9f:c0:e4:b3:3a:90:e1:d0:f6:9f:d5:ce:ed:0c:ce:d9: 12:63:72:42:7e:c9:9c:09:36:cc:5e:be:b0:06:bc:92:15:b1: 49:be:25:18:5c:66:02:77:bd:4c:d8:89:16:e0:92:56:e5:56: 12:23:23:0c:da:8a:2e:eb:9d:ce:fa:b7:e4:59:93:27:9a:c2: c7:48:6e:6a:61:47:5e:cf:73:94:e9:bf:b5:9c:d3:7b:41:e0: 83:29:fa:ab:b7:f6:2d:c3:72:35:95:9e:73:6a:1e:f7:77:0c: 93:3f:64:d8 -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIUDB24Mjf1ZWl4rwypMOTs5Jq5CokwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUY1QUVFNUFDMzgzNURBREZGNTJEQ0U2QkU3NkY5ODMy QkMzRDQzOTAeFw0yNjAzMTMxNDU3MDlaFw0yNjAzMTQxNTIwMDlaMDMxMTAvBgNV BAMTKDRFM0Y1N0ZCODgyRUY2RThENEYwMTFEQjA0RDMzRDU4QTYyNjJGMjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDH45kYfHJQlQTHLQX7kPywZqOj PiNXQbv2J2TUTW/+qa29XTryjzNE1dgb/te3/OHc0yqx+tK9QTHWw0DcWeDkOtid iFW/aWO6jwP1hCqFUMGJTEyyXke/EcBuJn/NZ2xAFk/yAOxl9cc+82vtU0I3yAB/ 46fGq4SxGkgNCWocKeiSbtOrx7pkkMIvYCNgiKCfEAfEeVXqU1ZwXVWf5K+ehuAk nydnGNHmtVnkPhv2M5Ga2nDjofvGtmgvC/EwsJp2PAPhf1H7c3e5vE6I8KJ99XrJ qwkLpqYyz0VVSfJWqZIVYxMw6LlxYkML9dK5MJEnTNXyIldcX+KspLi8UY+zAgMB AAGjggJ4MIICdDAdBgNVHQ4EFgQUTj9X+4gu9ujU8BHbBNM9WKYmLycwHwYDVR0j BBgwFoAUr1ruWsODXa3/Utzmvnb5gyvD1DkwDgYDVR0PAQH/BAQDAgeAMIGPBgNV HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv cmVwby9ycGtpX2NhX2E4NDA1ZWI1M2RlNDQ2YTk5NGQyMWYzYzI3ZWEzZjk4LzAv QUY1QUVFNUFDMzgzNURBREZGNTJEQ0U2QkU3NkY5ODMyQkMzRDQzOS5jcmwwgZ4G CCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5wYWFz LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQxYjUtODJh MC1mMGQwMmMwM2EyYzYvNy9BRjVBRUU1QUMzODM1REFERkY1MkRDRTZCRTc2Rjk4 MzJCQzNENDM5LmNlcjCBmgYIKwYBBQUHAQsEgY0wgYowgYcGCCsGAQUFBzALhnty c3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQvcmVwby9ycGtpX2NhX2E4NDA1 ZWI1M2RlNDQ2YTk5NGQyMWYzYzI3ZWEzZjk4LzAvQUY1QUVFNUFDMzgzNURBREZG NTJEQ0U2QkU3NkY5ODMyQkMzRDQzOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBALfmEiBZ/dJcUBFA4puw WQNfWwqK3IUNByluIoQU/bpeaj/4ANiKChARxGBC/Y5N+o4QobJxifi1Xa8tq6h5 5tYDy/itTD7mxxv5M3xm9W8B0UUyY8YOU/tw2II4g60GuOLJ4fTxsj9NdrmtlBLR hkDNqxF1f+V/AW0GDjCoZN3ARVO4Vl4nlFSZOgfe83LZi8f/n8DkszqQ4dD2n9XO 7QzO2RJjckJ+yZwJNsxevrAGvJIVsUm+JRhcZgJ3vUzYiRbgklblVhIjIwzaii7r nc76t+RZkyeawsdIbmphR17Pc5Tpv7Wc03tB4IMp+qu39i3DcjWVnnNqHvd3DJM/ ZNg= -----END CERTIFICATE-----Generated at Sat Mar 14 05:39:56 2026 by rpki-client