$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_a8405eb53de446a994d21f3c27ea3f98/0/AF5AEE5AC3835DADFF52DCE6BE76F9832BC3D439.mft File: AF5AEE5AC3835DADFF52DCE6BE76F9832BC3D439.mft (raw, json) Hash identifier: atrhjSjGMdU55d+p7HVyGflOSFHGAVvlUB+SOCey768= Subject key identifier: 42:F5:52:D0:E6:57:B3:4E:0D:DD:DF:1E:B3:B2:31:01:68:19:DF:BC Authority key identifier: AF:5A:EE:5A:C3:83:5D:AD:FF:52:DC:E6:BE:76:F9:83:2B:C3:D4:39 Certificate issuer: /CN=AF5AEE5AC3835DADFF52DCE6BE76F9832BC3D439 Certificate serial: 45D5E518EE86183987E10D1BD02B5D3834CCB3E7 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/AF5AEE5AC3835DADFF52DCE6BE76F9832BC3D439.cer Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_a8405eb53de446a994d21f3c27ea3f98/0/AF5AEE5AC3835DADFF52DCE6BE76F9832BC3D439.mft Manifest number: 0330 Signing time: Wed 29 Apr 2026 23:37:08 +0000 Manifest this update: Wed 29 Apr 2026 23:32:08 +0000 Manifest next update: Fri 01 May 2026 03:25:08 +0000 Files and hashes: 1: AF5AEE5AC3835DADFF52DCE6BE76F9832BC3D439.crl (hash: arLTRBJAerEnCsdkTZv+gPiUYyLa3/2SNETiA4Ehziw=) 2: 326131313a663263303a666663633a3a2f34382d3438203d3e20323135373638.roa (hash: 40KX5Azg+QOWUNYOrdl6IsWrdX+iJJgcObJYGtl3Q6w=) Validation: OK Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_a8405eb53de446a994d21f3c27ea3f98/0/AF5AEE5AC3835DADFF52DCE6BE76F9832BC3D439.crl rsync://rpki-repo.as207960.net/repo/rpki_ca_a8405eb53de446a994d21f3c27ea3f98/0/AF5AEE5AC3835DADFF52DCE6BE76F9832BC3D439.mft rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/AF5AEE5AC3835DADFF52DCE6BE76F9832BC3D439.cer rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 01 May 2026 03:25:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:d5:e5:18:ee:86:18:39:87:e1:0d:1b:d0:2b:5d:38:34:cc:b3:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AF5AEE5AC3835DADFF52DCE6BE76F9832BC3D439 Validity Not Before: Apr 29 23:32:08 2026 GMT Not After : May 1 03:25:08 2026 GMT Subject: CN=42F552D0E657B34E0DDDDF1EB3B231016819DFBC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:94:8e:57:f6:64:a1:33:fe:0f:54:ee:2a:68: 88:65:ce:4a:ce:bc:2e:d3:b0:5a:45:fa:63:ae:b3: 1a:c6:e1:82:ee:c5:db:c6:94:31:18:57:df:09:76: e7:62:fa:c3:66:f4:92:31:94:da:79:07:0e:ae:6f: 41:d8:e8:be:75:a9:ef:ee:31:b7:a0:78:fe:4c:c7: f1:e5:70:dc:32:ea:d2:a9:f6:9e:b1:f9:fe:ba:5d: 4a:bb:64:06:66:05:0d:88:46:34:80:f2:96:62:d3: 7a:f3:13:56:bf:99:e3:c6:18:52:a8:ca:ff:6f:b8: 2a:7c:dd:35:cb:09:36:e5:a3:2b:b6:57:9a:8a:d6: b4:8e:e0:ca:c1:27:1a:de:6a:2f:b2:e7:99:97:ae: f3:03:34:8b:f7:22:db:81:c0:d8:3d:97:71:9e:dc: 3c:a4:30:f7:ba:b0:f2:1f:7a:12:9d:c6:b2:8e:5f: e0:d4:d9:03:d2:49:5b:ef:22:50:9a:01:17:fc:64: 36:6a:ea:33:07:12:93:ad:4b:ca:f1:f5:7b:b4:d8: c7:1f:cb:8f:72:35:9c:55:0d:90:4d:e1:cc:54:68: d7:8a:2c:3f:0a:6a:20:9e:93:e2:16:f3:84:e7:f0: 80:af:78:54:4e:13:8f:87:ae:66:7d:dc:26:2e:3d: ad:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:F5:52:D0:E6:57:B3:4E:0D:DD:DF:1E:B3:B2:31:01:68:19:DF:BC X509v3 Authority Key Identifier: keyid:AF:5A:EE:5A:C3:83:5D:AD:FF:52:DC:E6:BE:76:F9:83:2B:C3:D4:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_a8405eb53de446a994d21f3c27ea3f98/0/AF5AEE5AC3835DADFF52DCE6BE76F9832BC3D439.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/AF5AEE5AC3835DADFF52DCE6BE76F9832BC3D439.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_a8405eb53de446a994d21f3c27ea3f98/0/AF5AEE5AC3835DADFF52DCE6BE76F9832BC3D439.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:e2:89:2e:d3:9c:b0:06:59:dc:0c:a3:4b:86:56:3f:df:32: cb:7a:55:3d:e6:97:28:a0:06:0b:26:fc:c3:d5:1c:fc:18:ec: 22:e6:f8:e5:85:22:5d:69:97:f5:b5:41:ed:2f:6e:d8:9a:d1: f9:c5:fa:43:28:5c:57:99:14:cb:93:a8:32:33:12:43:00:ed: 5b:22:92:9b:29:eb:77:0b:fc:f1:e7:74:ac:bd:79:75:2c:54: 38:39:24:da:54:ab:7b:5c:2b:be:4d:56:6f:c4:fd:f4:ed:a1: e9:70:df:43:10:89:c1:53:d3:fe:a2:19:ed:b0:2e:5d:02:3f: 2e:62:8b:fc:16:8e:9d:da:74:bd:06:c2:59:08:9b:0a:25:90: b9:3d:b7:07:c7:c2:91:17:7a:d1:18:00:c5:9b:1c:e9:c2:c6: f9:96:c8:9b:f1:3b:e2:a5:96:da:fb:a8:ca:c4:e8:e8:f5:79: 36:5f:17:93:7c:30:ba:86:f0:2c:2f:51:b7:2e:64:54:c5:b5: e8:20:99:e9:0d:14:68:64:62:27:02:7b:d0:a8:7f:3a:d3:1f: dc:29:64:d3:39:48:c1:a9:ca:63:54:21:f5:ff:b8:ad:de:c5: 81:21:ce:de:85:39:f2:5f:41:bd:cf:05:6c:6d:73:4a:6c:3c: 0d:70:ed:ad -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIURdXlGO6GGDmH4Q0b0CtdODTMs+cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUY1QUVFNUFDMzgzNURBREZGNTJEQ0U2QkU3NkY5ODMy QkMzRDQzOTAeFw0yNjA0MjkyMzMyMDhaFw0yNjA1MDEwMzI1MDhaMDMxMTAvBgNV BAMTKDQyRjU1MkQwRTY1N0IzNEUwREREREYxRUIzQjIzMTAxNjgxOURGQkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDxlI5X9mShM/4PVO4qaIhlzkrO vC7TsFpF+mOusxrG4YLuxdvGlDEYV98Jdudi+sNm9JIxlNp5Bw6ub0HY6L51qe/u MbegeP5Mx/HlcNwy6tKp9p6x+f66XUq7ZAZmBQ2IRjSA8pZi03rzE1a/mePGGFKo yv9vuCp83TXLCTbloyu2V5qK1rSO4MrBJxreai+y55mXrvMDNIv3ItuBwNg9l3Ge 3DykMPe6sPIfehKdxrKOX+DU2QPSSVvvIlCaARf8ZDZq6jMHEpOtS8rx9Xu02Mcf y49yNZxVDZBN4cxUaNeKLD8KaiCek+IW84Tn8ICveFROE4+HrmZ93CYuPa25AgMB AAGjggJ4MIICdDAdBgNVHQ4EFgQUQvVS0OZXs04N3d8es7IxAWgZ37wwHwYDVR0j BBgwFoAUr1ruWsODXa3/Utzmvnb5gyvD1DkwDgYDVR0PAQH/BAQDAgeAMIGPBgNV HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv cmVwby9ycGtpX2NhX2E4NDA1ZWI1M2RlNDQ2YTk5NGQyMWYzYzI3ZWEzZjk4LzAv QUY1QUVFNUFDMzgzNURBREZGNTJEQ0U2QkU3NkY5ODMyQkMzRDQzOS5jcmwwgZ4G CCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5wYWFz LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQxYjUtODJh MC1mMGQwMmMwM2EyYzYvNy9BRjVBRUU1QUMzODM1REFERkY1MkRDRTZCRTc2Rjk4 MzJCQzNENDM5LmNlcjCBmgYIKwYBBQUHAQsEgY0wgYowgYcGCCsGAQUFBzALhnty c3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQvcmVwby9ycGtpX2NhX2E4NDA1 ZWI1M2RlNDQ2YTk5NGQyMWYzYzI3ZWEzZjk4LzAvQUY1QUVFNUFDMzgzNURBREZG NTJEQ0U2QkU3NkY5ODMyQkMzRDQzOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBADXiiS7TnLAGWdwMo0uG Vj/fMst6VT3mlyigBgsm/MPVHPwY7CLm+OWFIl1pl/W1Qe0vbtia0fnF+kMoXFeZ FMuTqDIzEkMA7Vsikpsp63cL/PHndKy9eXUsVDg5JNpUq3tcK75NVm/E/fTtoelw 30MQicFT0/6iGe2wLl0CPy5ii/wWjp3adL0GwlkImwolkLk9twfHwpEXetEYAMWb HOnCxvmWyJvxO+Klltr7qMrE6Oj1eTZfF5N8MLqG8CwvUbcuZFTFteggmekNFGhk YicCe9CofzrTH9wpZNM5SMGpymNUIfX/uK3exYEhzt6FOfJfQb3PBWxtc0psPA1w 7a0= -----END CERTIFICATE-----Generated at Thu Apr 30 14:54:32 2026 by rpki-client