$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_a8405eb53de446a994d21f3c27ea3f98/0/AF5AEE5AC3835DADFF52DCE6BE76F9832BC3D439.mft File: AF5AEE5AC3835DADFF52DCE6BE76F9832BC3D439.mft (raw, json) Hash identifier: +7RWyD2ZeuT+MZNtrhopcuLIrhA8W/F/Ho2Yrh3I2pQ= Subject key identifier: D0:96:D6:1B:F3:2A:B6:9D:61:09:9A:7E:B6:9D:7A:4D:AC:FE:0B:F4 Authority key identifier: AF:5A:EE:5A:C3:83:5D:AD:FF:52:DC:E6:BE:76:F9:83:2B:C3:D4:39 Certificate issuer: /CN=AF5AEE5AC3835DADFF52DCE6BE76F9832BC3D439 Certificate serial: 25E525531DD6F59AAE5CD9EEF684153633001811 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/AF5AEE5AC3835DADFF52DCE6BE76F9832BC3D439.cer Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_a8405eb53de446a994d21f3c27ea3f98/0/AF5AEE5AC3835DADFF52DCE6BE76F9832BC3D439.mft Manifest number: 036E Signing time: Sun 14 Jun 2026 23:52:58 +0000 Manifest this update: Sun 14 Jun 2026 23:47:58 +0000 Manifest next update: Tue 16 Jun 2026 03:11:58 +0000 Files and hashes: 1: 326131313a663263303a666663633a3a2f34382d3438203d3e20323135373638.roa (hash: Kk1bQIf9LRxj6c8BCVTFj/J0x7No1PMyTUzJXHrtFfg=) 2: AF5AEE5AC3835DADFF52DCE6BE76F9832BC3D439.crl (hash: yAtzr+mRApJEyAashKUgbsnW+fu54Jjf60c1irY5beY=) Validation: OK Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_a8405eb53de446a994d21f3c27ea3f98/0/AF5AEE5AC3835DADFF52DCE6BE76F9832BC3D439.crl rsync://rpki-repo.as207960.net/repo/rpki_ca_a8405eb53de446a994d21f3c27ea3f98/0/AF5AEE5AC3835DADFF52DCE6BE76F9832BC3D439.mft rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/AF5AEE5AC3835DADFF52DCE6BE76F9832BC3D439.cer rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Jun 2026 22:00:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:e5:25:53:1d:d6:f5:9a:ae:5c:d9:ee:f6:84:15:36:33:00:18:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AF5AEE5AC3835DADFF52DCE6BE76F9832BC3D439 Validity Not Before: Jun 14 23:47:58 2026 GMT Not After : Jun 16 03:11:58 2026 GMT Subject: CN=D096D61BF32AB69D61099A7EB69D7A4DACFE0BF4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:8e:61:d5:c4:e8:af:28:16:81:60:54:8d:28: 54:15:bc:a9:0c:f7:c9:dc:b8:97:51:c6:a5:c8:6b: 52:7f:43:79:42:81:9c:12:7c:9b:d7:6c:12:52:d8: fc:95:61:59:d9:fc:2a:0e:2b:8c:75:ae:d6:28:e0: a2:7a:ce:c1:36:10:d6:11:53:e5:9d:fc:40:2d:2f: a8:39:c8:82:61:77:ab:74:9a:fe:fb:8e:bd:16:1c: aa:3e:9c:51:93:c4:a2:a4:1b:bc:d7:2d:3b:83:bb: b0:38:19:92:4a:ad:40:45:e1:cd:ca:9c:a2:cf:7c: 24:4d:19:19:b4:20:51:39:0a:ea:78:df:5d:f3:e1: 39:5c:1d:72:12:24:10:21:30:c1:d1:fb:02:8e:75: 04:c4:5b:8e:10:e4:2e:9a:56:28:1c:55:14:d3:c6: 32:b6:3f:20:37:27:79:83:7c:01:71:16:35:af:fb: c3:c4:cd:3b:93:1e:ab:2e:e9:f0:a3:8c:16:cd:48: f1:03:cd:07:35:97:86:2f:cd:f7:bd:67:24:e0:7e: ea:2d:43:ed:12:b3:b7:fd:c9:43:16:07:b6:33:b6: ac:e4:d8:2a:92:e4:f8:bb:f5:6c:c6:b9:13:d3:f4: 77:36:b4:9d:22:65:ce:98:e0:50:40:db:f8:e7:5b: de:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:96:D6:1B:F3:2A:B6:9D:61:09:9A:7E:B6:9D:7A:4D:AC:FE:0B:F4 X509v3 Authority Key Identifier: keyid:AF:5A:EE:5A:C3:83:5D:AD:FF:52:DC:E6:BE:76:F9:83:2B:C3:D4:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_a8405eb53de446a994d21f3c27ea3f98/0/AF5AEE5AC3835DADFF52DCE6BE76F9832BC3D439.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/AF5AEE5AC3835DADFF52DCE6BE76F9832BC3D439.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_a8405eb53de446a994d21f3c27ea3f98/0/AF5AEE5AC3835DADFF52DCE6BE76F9832BC3D439.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 14:65:c9:1a:c9:7c:06:49:3e:6b:e3:3d:ce:c2:94:bf:84:fd: a6:49:42:d5:4a:5e:bf:63:99:9e:fe:b7:b0:98:12:d8:37:b4: f5:11:2e:3f:2a:b1:d3:34:9e:55:db:6b:44:5c:0b:4f:ee:42: 92:d8:ef:60:f1:4c:74:24:12:16:de:52:d0:43:e1:18:d7:91: 22:83:f3:35:49:27:5f:d0:38:79:39:6e:2d:5b:56:e6:e4:46: 52:75:2c:ab:4a:80:82:01:c4:83:21:76:76:04:3e:37:b9:2e: 03:71:1b:ee:98:15:0f:f7:ca:19:bc:c5:67:52:1b:14:93:c4: cd:6d:c0:40:aa:2b:d4:5f:46:49:60:8d:ed:13:cf:e8:8b:04: 72:ef:f2:74:d0:56:05:7d:9d:24:2a:59:09:41:f3:ce:57:d1: 89:98:ba:63:61:57:7e:23:44:53:7f:94:e1:fc:a1:73:c8:aa: ea:c2:12:f6:93:b8:ee:82:a4:e8:6a:ec:77:2a:df:22:c4:24: f3:8a:e9:03:c5:84:36:23:6b:ae:38:a7:69:09:34:05:59:bd: 01:94:2f:ce:c0:1a:9d:41:56:49:b5:b9:3f:62:72:d3:96:33: a1:89:53:78:f3:05:75:e5:c5:40:12:dc:c8:ca:8b:92:e2:95: 70:1f:a1:12 -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIUJeUlUx3W9ZquXNnu9oQVNjMAGBEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUY1QUVFNUFDMzgzNURBREZGNTJEQ0U2QkU3NkY5ODMy QkMzRDQzOTAeFw0yNjA2MTQyMzQ3NThaFw0yNjA2MTYwMzExNThaMDMxMTAvBgNV BAMTKEQwOTZENjFCRjMyQUI2OUQ2MTA5OUE3RUI2OUQ3QTREQUNGRTBCRjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1jmHVxOivKBaBYFSNKFQVvKkM 98ncuJdRxqXIa1J/Q3lCgZwSfJvXbBJS2PyVYVnZ/CoOK4x1rtYo4KJ6zsE2ENYR U+Wd/EAtL6g5yIJhd6t0mv77jr0WHKo+nFGTxKKkG7zXLTuDu7A4GZJKrUBF4c3K nKLPfCRNGRm0IFE5Cup4313z4TlcHXISJBAhMMHR+wKOdQTEW44Q5C6aVigcVRTT xjK2PyA3J3mDfAFxFjWv+8PEzTuTHqsu6fCjjBbNSPEDzQc1l4Yvzfe9ZyTgfuot Q+0Ss7f9yUMWB7Yztqzk2CqS5Pi79WzGuRPT9Hc2tJ0iZc6Y4FBA2/jnW953AgMB AAGjggJ4MIICdDAdBgNVHQ4EFgQU0JbWG/Mqtp1hCZp+tp16Taz+C/QwHwYDVR0j BBgwFoAUr1ruWsODXa3/Utzmvnb5gyvD1DkwDgYDVR0PAQH/BAQDAgeAMIGPBgNV HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv cmVwby9ycGtpX2NhX2E4NDA1ZWI1M2RlNDQ2YTk5NGQyMWYzYzI3ZWEzZjk4LzAv QUY1QUVFNUFDMzgzNURBREZGNTJEQ0U2QkU3NkY5ODMyQkMzRDQzOS5jcmwwgZ4G CCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5wYWFz LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQxYjUtODJh MC1mMGQwMmMwM2EyYzYvNy9BRjVBRUU1QUMzODM1REFERkY1MkRDRTZCRTc2Rjk4 MzJCQzNENDM5LmNlcjCBmgYIKwYBBQUHAQsEgY0wgYowgYcGCCsGAQUFBzALhnty c3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQvcmVwby9ycGtpX2NhX2E4NDA1 ZWI1M2RlNDQ2YTk5NGQyMWYzYzI3ZWEzZjk4LzAvQUY1QUVFNUFDMzgzNURBREZG NTJEQ0U2QkU3NkY5ODMyQkMzRDQzOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBABRlyRrJfAZJPmvjPc7C lL+E/aZJQtVKXr9jmZ7+t7CYEtg3tPURLj8qsdM0nlXba0RcC0/uQpLY72DxTHQk EhbeUtBD4RjXkSKD8zVJJ1/QOHk5bi1bVubkRlJ1LKtKgIIBxIMhdnYEPje5LgNx G+6YFQ/3yhm8xWdSGxSTxM1twECqK9RfRklgje0Tz+iLBHLv8nTQVgV9nSQqWQlB 885X0YmYumNhV34jRFN/lOH8oXPIqurCEvaTuO6CpOhq7Hcq3yLEJPOK6QPFhDYj a644p2kJNAVZvQGUL87AGp1BVkm1uT9ictOWM6GJU3jzBXXlxUAS3MjKi5LilXAf oRI= -----END CERTIFICATE-----Generated at Mon Jun 15 06:06:41 2026 by rpki-client