$ rpki-client -vvvf rpki-repo.as207960.net/repo/rpki_ca_cf8a4e16b3584a11b911bb04d7e0a43f/0/3FF2982D4C8AE10F3F4EABDC8163F1D209271824.mft File: 3FF2982D4C8AE10F3F4EABDC8163F1D209271824.mft (raw, json) Hash identifier: JRVy8C8M5i5QUsO9hlX+geTQ4JVgx+uTiMtLE/cbp/k= Subject key identifier: ED:11:E0:7F:D1:01:FA:19:CE:7D:22:67:A0:22:B1:F6:CD:9E:6C:3F Authority key identifier: 3F:F2:98:2D:4C:8A:E1:0F:3F:4E:AB:DC:81:63:F1:D2:09:27:18:24 Certificate issuer: /CN=3FF2982D4C8AE10F3F4EABDC8163F1D209271824 Certificate serial: 297A77ED1C3E107429F295ED7ECC4F69BD7BBEB9 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/3FF2982D4C8AE10F3F4EABDC8163F1D209271824.cer Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_cf8a4e16b3584a11b911bb04d7e0a43f/0/3FF2982D4C8AE10F3F4EABDC8163F1D209271824.mft Manifest number: AC Signing time: Thu 17 Sep 2026 17:28:18 +0000 Manifest this update: Thu 17 Sep 2026 17:23:18 +0000 Manifest next update: Fri 18 Sep 2026 17:38:18 +0000 Files and hashes: 1: 3FF2982D4C8AE10F3F4EABDC8163F1D209271824.crl (hash: lLN/ZxC3VZBeBnaD10mNMOLl055cL6bb+d9g/LobZaQ=) 2: 326131313a663263303a666665333a3a2f34382d3438203d3e20323131333730.roa (hash: v6P7lVcBcrvneKUvz62ZdwKzn3zDH59Qve86pHfHkj8=) Validation: OK Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_cf8a4e16b3584a11b911bb04d7e0a43f/0/3FF2982D4C8AE10F3F4EABDC8163F1D209271824.crl rsync://rpki-repo.as207960.net/repo/rpki_ca_cf8a4e16b3584a11b911bb04d7e0a43f/0/3FF2982D4C8AE10F3F4EABDC8163F1D209271824.mft rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/3FF2982D4C8AE10F3F4EABDC8163F1D209271824.cer rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 18 Sep 2026 14:15:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:7a:77:ed:1c:3e:10:74:29:f2:95:ed:7e:cc:4f:69:bd:7b:be:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3FF2982D4C8AE10F3F4EABDC8163F1D209271824 Validity Not Before: Sep 17 17:23:18 2026 GMT Not After : Sep 18 17:38:18 2026 GMT Subject: CN=ED11E07FD101FA19CE7D2267A022B1F6CD9E6C3F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:87:bb:1d:a2:a8:54:09:20:9d:55:8b:fe:65: bb:df:0e:7a:67:3e:9b:47:f0:62:03:34:fd:23:4f: 76:c2:df:75:54:b1:52:b0:7c:9d:f7:5c:5e:91:41: 56:2f:b3:0b:3f:3a:55:d3:de:ff:da:ae:90:22:46: 31:9f:96:eb:8e:76:71:4b:b9:6d:ae:b2:6a:cd:14: a4:cc:1f:41:04:3c:6c:d2:17:5f:df:96:25:d9:76: a4:e2:6f:6c:96:96:2d:0b:0b:c8:31:89:13:33:e3: 89:9e:3a:7d:be:47:54:61:1f:1c:50:dc:a5:9c:de: 37:e7:fa:58:8a:c0:32:43:9b:cb:8d:89:07:e4:5d: c5:6f:a7:b5:06:ee:ef:28:4c:fe:74:8f:94:3a:5c: ce:8a:66:e9:f3:46:f4:e8:a6:fd:1d:39:d8:18:a5: 79:07:7a:da:05:a7:36:68:cb:2f:c6:b4:6a:65:68: c2:bd:44:91:02:1d:3c:83:53:05:0f:d6:78:99:40: 30:69:84:0d:5e:a4:92:ad:0c:1d:44:8b:70:58:aa: cd:69:49:dc:85:b4:0f:69:01:38:bf:ea:ac:dc:48: a3:0e:b5:3f:51:a3:c3:6e:0f:4a:43:e5:f8:8d:33: 67:3c:86:77:a2:ac:36:7e:08:2a:35:60:31:97:c3: bf:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:11:E0:7F:D1:01:FA:19:CE:7D:22:67:A0:22:B1:F6:CD:9E:6C:3F X509v3 Authority Key Identifier: keyid:3F:F2:98:2D:4C:8A:E1:0F:3F:4E:AB:DC:81:63:F1:D2:09:27:18:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_cf8a4e16b3584a11b911bb04d7e0a43f/0/3FF2982D4C8AE10F3F4EABDC8163F1D209271824.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/3FF2982D4C8AE10F3F4EABDC8163F1D209271824.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_cf8a4e16b3584a11b911bb04d7e0a43f/0/3FF2982D4C8AE10F3F4EABDC8163F1D209271824.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:d6:a0:f1:f9:fd:95:30:13:f7:9e:3c:8b:b1:fb:5b:39:12: a0:d7:37:93:de:e3:fd:e4:f9:1f:2f:1b:63:b9:94:12:4a:f1: a6:c6:d8:b6:9f:07:70:2a:a1:d4:59:b3:36:12:71:2f:48:bf: be:2b:f7:fd:db:23:7a:ec:51:27:c3:42:60:41:df:1c:f8:c3: b5:2b:2f:59:4b:ea:01:ff:f6:85:82:67:ea:1c:7b:58:d6:a1: 73:b2:c0:eb:6a:4d:2d:b1:16:9e:74:71:9e:56:06:01:9c:52: ee:8c:33:11:f0:83:fa:6d:4a:48:72:47:92:c0:1b:1c:b2:1b: 18:a7:40:02:7f:1d:5b:b1:1e:c5:6e:1f:62:90:94:f6:b1:15: 94:f9:d2:bb:8f:5a:27:ba:28:c6:2c:94:9c:48:1c:ac:c0:ec: 88:dc:ac:84:88:e0:1b:9d:84:27:b7:a7:e1:09:8c:b5:f3:fc: be:e5:51:70:38:da:71:0b:97:32:ff:11:33:95:40:ad:23:63: 49:c7:14:a7:fa:41:bd:19:f3:95:b3:ed:4d:12:cb:2b:10:e1: f9:d1:07:81:db:3c:fa:46:92:0a:68:dc:bb:ff:09:1f:c4:c1: 07:2a:25:b1:4a:7e:bb:5e:46:c9:87:3b:93:d8:1f:f5:a8:b9: 91:47:f8:a1 -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIUKXp37Rw+EHQp8pXtfsxPab17vrkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0ZGMjk4MkQ0QzhBRTEwRjNGNEVBQkRDODE2M0YxRDIw OTI3MTgyNDAeFw0yNjA5MTcxNzIzMThaFw0yNjA5MTgxNzM4MThaMDMxMTAvBgNV BAMTKEVEMTFFMDdGRDEwMUZBMTlDRTdEMjI2N0EwMjJCMUY2Q0Q5RTZDM0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjh7sdoqhUCSCdVYv+ZbvfDnpn PptH8GIDNP0jT3bC33VUsVKwfJ33XF6RQVYvsws/OlXT3v/arpAiRjGfluuOdnFL uW2usmrNFKTMH0EEPGzSF1/fliXZdqTib2yWli0LC8gxiRMz44meOn2+R1RhHxxQ 3KWc3jfn+liKwDJDm8uNiQfkXcVvp7UG7u8oTP50j5Q6XM6KZunzRvTopv0dOdgY pXkHetoFpzZoyy/GtGplaMK9RJECHTyDUwUP1niZQDBphA1epJKtDB1Ei3BYqs1p SdyFtA9pATi/6qzcSKMOtT9Ro8NuD0pD5fiNM2c8hneirDZ+CCo1YDGXw7+DAgMB AAGjggJ4MIICdDAdBgNVHQ4EFgQU7RHgf9EB+hnOfSJnoCKx9s2ebD8wHwYDVR0j BBgwFoAUP/KYLUyK4Q8/TqvcgWPx0gknGCQwDgYDVR0PAQH/BAQDAgeAMIGPBgNV HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv cmVwby9ycGtpX2NhX2NmOGE0ZTE2YjM1ODRhMTFiOTExYmIwNGQ3ZTBhNDNmLzAv M0ZGMjk4MkQ0QzhBRTEwRjNGNEVBQkRDODE2M0YxRDIwOTI3MTgyNC5jcmwwgZ4G CCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5wYWFz LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQxYjUtODJh MC1mMGQwMmMwM2EyYzYvNy8zRkYyOTgyRDRDOEFFMTBGM0Y0RUFCREM4MTYzRjFE MjA5MjcxODI0LmNlcjCBmgYIKwYBBQUHAQsEgY0wgYowgYcGCCsGAQUFBzALhnty c3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQvcmVwby9ycGtpX2NhX2NmOGE0 ZTE2YjM1ODRhMTFiOTExYmIwNGQ3ZTBhNDNmLzAvM0ZGMjk4MkQ0QzhBRTEwRjNG NEVBQkRDODE2M0YxRDIwOTI3MTgyNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAF3WoPH5/ZUwE/eePIux +1s5EqDXN5Pe4/3k+R8vG2O5lBJK8abG2LafB3AqodRZszYScS9Iv74r9/3bI3rs USfDQmBB3xz4w7UrL1lL6gH/9oWCZ+oce1jWoXOywOtqTS2xFp50cZ5WBgGcUu6M MxHwg/ptSkhyR5LAGxyyGxinQAJ/HVuxHsVuH2KQlPaxFZT50ruPWie6KMYslJxI HKzA7IjcrISI4BudhCe3p+EJjLXz/L7lUXA42nELlzL/ETOVQK0jY0nHFKf6Qb0Z 85Wz7U0SyysQ4fnRB4HbPPpGkgpo3Lv/CR/EwQcqJbFKfrteRsmHO5PYH/WouZFH +KE= -----END CERTIFICATE-----Generated at Fri Sep 18 00:28:33 2026 by rpki-client