$ rpki-client -vvvf rpki-repo.as207960.net/repo/rpki_ca_a8405eb53de446a994d21f3c27ea3f98/0/AF5AEE5AC3835DADFF52DCE6BE76F9832BC3D439.mft File: AF5AEE5AC3835DADFF52DCE6BE76F9832BC3D439.mft (raw, json) Hash identifier: bXhMN3ICQTNNtyPecHBy16zL3p7i6GfVE8G2BvwEL5A= Subject key identifier: 37:30:83:23:96:0A:6F:25:6B:E3:B8:58:78:65:95:1E:AB:58:A4:09 Authority key identifier: AF:5A:EE:5A:C3:83:5D:AD:FF:52:DC:E6:BE:76:F9:83:2B:C3:D4:39 Certificate issuer: /CN=AF5AEE5AC3835DADFF52DCE6BE76F9832BC3D439 Certificate serial: 49C07A53577E7E1829964A5BC53F48335F2210B3 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/AF5AEE5AC3835DADFF52DCE6BE76F9832BC3D439.cer Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_a8405eb53de446a994d21f3c27ea3f98/0/AF5AEE5AC3835DADFF52DCE6BE76F9832BC3D439.mft Manifest number: 03DA Signing time: Thu 17 Sep 2026 16:18:00 +0000 Manifest this update: Thu 17 Sep 2026 16:13:00 +0000 Manifest next update: Fri 18 Sep 2026 17:39:00 +0000 Files and hashes: 1: AF5AEE5AC3835DADFF52DCE6BE76F9832BC3D439.crl (hash: ew+1X0sl6hzr762CzV00tTiZxDA59EaTes+vmss9UB8=) 2: 326131313a663263303a666663633a3a2f34382d3438203d3e20323135373638.roa (hash: Kk1bQIf9LRxj6c8BCVTFj/J0x7No1PMyTUzJXHrtFfg=) Validation: OK Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_a8405eb53de446a994d21f3c27ea3f98/0/AF5AEE5AC3835DADFF52DCE6BE76F9832BC3D439.crl rsync://rpki-repo.as207960.net/repo/rpki_ca_a8405eb53de446a994d21f3c27ea3f98/0/AF5AEE5AC3835DADFF52DCE6BE76F9832BC3D439.mft rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/AF5AEE5AC3835DADFF52DCE6BE76F9832BC3D439.cer rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 18 Sep 2026 14:15:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:c0:7a:53:57:7e:7e:18:29:96:4a:5b:c5:3f:48:33:5f:22:10:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AF5AEE5AC3835DADFF52DCE6BE76F9832BC3D439 Validity Not Before: Sep 17 16:13:00 2026 GMT Not After : Sep 18 17:39:00 2026 GMT Subject: CN=37308323960A6F256BE3B8587865951EAB58A409 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:3d:44:ff:d3:ff:67:37:73:0e:d5:bd:46:d5: 84:15:32:77:33:6f:cf:b5:7a:16:2f:df:4e:c6:93: 15:69:b0:14:e7:92:a4:d0:d3:1a:96:88:51:08:6c: 77:90:35:c1:08:e4:51:16:c9:ed:fc:a0:c7:f8:15: 07:b3:82:00:cf:71:d0:5d:d3:9c:64:68:14:c2:9c: ce:bd:76:53:74:aa:84:26:1b:77:cd:c4:2c:75:40: cd:f0:b4:b5:94:29:44:d0:e6:0c:6a:cf:31:c0:d2: a7:11:16:5f:bc:3e:f0:65:c2:13:e6:94:58:47:46: 16:6d:b3:13:12:24:51:7c:0e:12:89:aa:97:72:e5: 60:38:7c:6e:4a:50:13:3d:b8:5e:7d:7d:67:5e:97: d1:f1:ba:67:1a:b9:ea:3e:52:c9:55:67:f3:0c:89: 26:79:c4:ec:60:7f:b1:fe:46:24:77:58:71:e4:4e: 1f:49:07:d8:64:9f:32:29:20:91:35:83:fc:02:9a: a9:0d:52:1f:8d:0a:9f:aa:9f:f2:48:ad:8a:21:07: 51:e3:5a:32:7d:f3:03:2d:94:52:ce:5e:05:0e:19: 94:ba:3b:4f:55:c4:ea:fd:85:59:48:c2:f9:ee:79: e4:0f:46:52:ae:77:b5:8d:05:91:ad:22:e7:9f:73: e4:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:30:83:23:96:0A:6F:25:6B:E3:B8:58:78:65:95:1E:AB:58:A4:09 X509v3 Authority Key Identifier: keyid:AF:5A:EE:5A:C3:83:5D:AD:FF:52:DC:E6:BE:76:F9:83:2B:C3:D4:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_a8405eb53de446a994d21f3c27ea3f98/0/AF5AEE5AC3835DADFF52DCE6BE76F9832BC3D439.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/AF5AEE5AC3835DADFF52DCE6BE76F9832BC3D439.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_a8405eb53de446a994d21f3c27ea3f98/0/AF5AEE5AC3835DADFF52DCE6BE76F9832BC3D439.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:0c:10:c0:80:f7:41:92:f3:b1:71:0f:a7:72:1b:45:c1:f9: 1b:8a:65:0b:52:ee:d4:1e:73:52:d8:f5:16:99:85:26:08:03: 48:2b:03:87:5b:27:6b:f8:21:8d:f2:30:80:af:fc:5a:4a:0e: e1:72:2a:72:86:cd:e8:6e:4a:df:98:25:ac:4a:71:65:55:0d: 0b:d0:df:fa:ca:b9:3e:da:93:13:68:20:dc:d8:3c:96:96:cf: f5:21:e8:96:63:b5:74:ff:7e:1e:50:2a:cd:b1:4b:f7:f1:f7: 02:e2:56:3e:57:2f:23:79:e3:09:00:55:0a:9b:27:5d:4b:c1: 81:fa:b3:4b:6e:fb:aa:3e:b9:42:88:b8:48:04:8b:d2:ff:9e: cc:ca:39:1e:70:26:cd:ac:05:f4:c7:c0:ed:40:69:90:0e:96: c8:30:0f:e2:c8:db:df:87:d1:a0:a4:11:8b:88:75:e9:0c:7c: e9:03:24:25:ab:95:2a:c5:fc:db:a2:43:54:43:08:7a:3f:ce: 86:01:b2:2f:0c:d6:6d:43:64:dd:82:7a:cb:8d:d1:cf:20:48: 62:e7:58:97:9b:27:83:18:41:7e:99:ac:48:6e:29:00:0a:c1: aa:c8:61:1d:f4:b3:48:9e:e9:0d:ec:80:7c:bc:68:09:f1:86: 90:67:6f:0d -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIUScB6U1d+fhgplkpbxT9IM18iELMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUY1QUVFNUFDMzgzNURBREZGNTJEQ0U2QkU3NkY5ODMy QkMzRDQzOTAeFw0yNjA5MTcxNjEzMDBaFw0yNjA5MTgxNzM5MDBaMDMxMTAvBgNV BAMTKDM3MzA4MzIzOTYwQTZGMjU2QkUzQjg1ODc4NjU5NTFFQUI1OEE0MDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3PUT/0/9nN3MO1b1G1YQVMncz b8+1ehYv307GkxVpsBTnkqTQ0xqWiFEIbHeQNcEI5FEWye38oMf4FQezggDPcdBd 05xkaBTCnM69dlN0qoQmG3fNxCx1QM3wtLWUKUTQ5gxqzzHA0qcRFl+8PvBlwhPm lFhHRhZtsxMSJFF8DhKJqpdy5WA4fG5KUBM9uF59fWdel9Hxumcaueo+UslVZ/MM iSZ5xOxgf7H+RiR3WHHkTh9JB9hknzIpIJE1g/wCmqkNUh+NCp+qn/JIrYohB1Hj WjJ98wMtlFLOXgUOGZS6O09VxOr9hVlIwvnueeQPRlKud7WNBZGtIuefc+QlAgMB AAGjggJ4MIICdDAdBgNVHQ4EFgQUNzCDI5YKbyVr47hYeGWVHqtYpAkwHwYDVR0j BBgwFoAUr1ruWsODXa3/Utzmvnb5gyvD1DkwDgYDVR0PAQH/BAQDAgeAMIGPBgNV HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv cmVwby9ycGtpX2NhX2E4NDA1ZWI1M2RlNDQ2YTk5NGQyMWYzYzI3ZWEzZjk4LzAv QUY1QUVFNUFDMzgzNURBREZGNTJEQ0U2QkU3NkY5ODMyQkMzRDQzOS5jcmwwgZ4G CCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5wYWFz LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQxYjUtODJh MC1mMGQwMmMwM2EyYzYvNy9BRjVBRUU1QUMzODM1REFERkY1MkRDRTZCRTc2Rjk4 MzJCQzNENDM5LmNlcjCBmgYIKwYBBQUHAQsEgY0wgYowgYcGCCsGAQUFBzALhnty c3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQvcmVwby9ycGtpX2NhX2E4NDA1 ZWI1M2RlNDQ2YTk5NGQyMWYzYzI3ZWEzZjk4LzAvQUY1QUVFNUFDMzgzNURBREZG NTJEQ0U2QkU3NkY5ODMyQkMzRDQzOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAC4MEMCA90GS87FxD6dy G0XB+RuKZQtS7tQec1LY9RaZhSYIA0grA4dbJ2v4IY3yMICv/FpKDuFyKnKGzehu St+YJaxKcWVVDQvQ3/rKuT7akxNoINzYPJaWz/Uh6JZjtXT/fh5QKs2xS/fx9wLi Vj5XLyN54wkAVQqbJ11LwYH6s0tu+6o+uUKIuEgEi9L/nszKOR5wJs2sBfTHwO1A aZAOlsgwD+LI29+H0aCkEYuIdekMfOkDJCWrlSrF/NuiQ1RDCHo/zoYBsi8M1m1D ZN2CesuN0c8gSGLnWJebJ4MYQX6ZrEhuKQAKwarIYR30s0ie6Q3sgHy8aAnxhpBn bw0= -----END CERTIFICATE-----Generated at Thu Sep 17 21:32:00 2026 by rpki-client