$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_cf8a4e16b3584a11b911bb04d7e0a43f/0/3FF2982D4C8AE10F3F4EABDC8163F1D209271824.mft File: 3FF2982D4C8AE10F3F4EABDC8163F1D209271824.mft (raw, json) Hash identifier: 3mwQsryFPx3gnOdsHRxOME6US8nnNRuRzPYRQDmRArg= Subject key identifier: 24:3B:A2:78:1B:63:44:BB:67:8E:18:57:CC:AE:9E:A6:0A:F1:39:48 Authority key identifier: 3F:F2:98:2D:4C:8A:E1:0F:3F:4E:AB:DC:81:63:F1:D2:09:27:18:24 Certificate issuer: /CN=3FF2982D4C8AE10F3F4EABDC8163F1D209271824 Certificate serial: 2D5523C6D939D7BD62835278C50FBB76C590F7AB Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/3FF2982D4C8AE10F3F4EABDC8163F1D209271824.cer Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_cf8a4e16b3584a11b911bb04d7e0a43f/0/3FF2982D4C8AE10F3F4EABDC8163F1D209271824.mft Manifest number: 03 Signing time: Thu 30 Apr 2026 03:52:52 +0000 Manifest this update: Thu 30 Apr 2026 03:47:52 +0000 Manifest next update: Fri 01 May 2026 06:10:52 +0000 Files and hashes: 1: 3FF2982D4C8AE10F3F4EABDC8163F1D209271824.crl (hash: FhnJMsRl4ljJwcIqQGd4ut666Cd9OX1/kZxS+nOaftA=) Validation: OK Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_cf8a4e16b3584a11b911bb04d7e0a43f/0/3FF2982D4C8AE10F3F4EABDC8163F1D209271824.crl rsync://rpki-repo.as207960.net/repo/rpki_ca_cf8a4e16b3584a11b911bb04d7e0a43f/0/3FF2982D4C8AE10F3F4EABDC8163F1D209271824.mft rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/3FF2982D4C8AE10F3F4EABDC8163F1D209271824.cer rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 01 May 2026 06:10:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:55:23:c6:d9:39:d7:bd:62:83:52:78:c5:0f:bb:76:c5:90:f7:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3FF2982D4C8AE10F3F4EABDC8163F1D209271824 Validity Not Before: Apr 30 03:47:52 2026 GMT Not After : May 1 06:10:52 2026 GMT Subject: CN=243BA2781B6344BB678E1857CCAE9EA60AF13948 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:cc:4d:8a:09:77:a3:73:e2:fc:ef:e7:90:1b: a6:54:d8:8e:c5:f6:f3:6b:10:ab:f3:c9:dc:c8:0b: 02:6b:02:2c:ca:1a:98:81:83:c4:db:70:f9:98:41: 7a:78:22:15:29:8d:16:2b:c4:19:7a:4d:3c:22:d6: 66:ff:4e:05:79:cb:97:33:8c:6e:39:70:c5:74:6f: cb:02:c0:d6:77:f3:b5:1d:a0:bd:ec:6a:d0:94:3a: 68:63:1a:40:8b:6c:4d:dc:0f:95:f0:c4:29:2b:3d: 64:44:89:98:60:f3:1e:4b:09:83:19:14:b7:68:d5: 09:94:d3:bb:f6:a5:b9:54:85:3a:4c:f4:1f:a9:f5: 2d:ed:01:07:4d:af:90:6e:33:3e:a4:74:be:1b:6c: f9:cd:0b:d5:7a:cc:a9:8c:a0:4a:7d:0e:13:be:a6: 2b:75:e1:18:e9:7d:2b:f9:dc:f4:ed:47:b2:46:96: 99:1a:15:b8:fd:4f:49:1f:da:6f:43:79:52:54:df: 69:3f:31:99:d8:56:73:70:0b:25:e8:03:ef:c7:05: 56:25:2d:e0:ed:08:5b:84:b9:f6:fa:74:ff:b9:ec: 5e:a6:4d:9e:77:78:34:99:c6:c9:e2:01:fd:47:98: 49:3c:69:b8:01:00:32:14:ee:5b:fb:a8:38:b8:42: 85:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:3B:A2:78:1B:63:44:BB:67:8E:18:57:CC:AE:9E:A6:0A:F1:39:48 X509v3 Authority Key Identifier: keyid:3F:F2:98:2D:4C:8A:E1:0F:3F:4E:AB:DC:81:63:F1:D2:09:27:18:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_cf8a4e16b3584a11b911bb04d7e0a43f/0/3FF2982D4C8AE10F3F4EABDC8163F1D209271824.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/3FF2982D4C8AE10F3F4EABDC8163F1D209271824.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_cf8a4e16b3584a11b911bb04d7e0a43f/0/3FF2982D4C8AE10F3F4EABDC8163F1D209271824.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:6e:e9:71:9a:aa:19:3c:4e:4e:e9:b5:c1:71:73:8c:bc:2a: 8e:6a:37:b2:08:a3:3e:89:1b:d6:02:02:7f:70:1e:02:f1:ae: bc:45:38:d6:90:68:8a:6a:31:b5:31:ca:1b:5b:57:fe:89:74: a4:a6:06:d7:cd:fe:d3:18:b4:71:cd:92:66:42:6d:f3:2a:cd: 30:d9:b6:af:a4:ea:0b:18:56:f4:ba:81:94:f0:65:ef:9b:84: 00:ec:17:f7:15:63:c7:17:e4:68:96:31:31:c5:d3:14:d6:85: b5:b6:cf:ae:88:9d:22:60:f5:39:87:eb:01:94:88:18:5e:3f: 51:e2:b1:bc:9c:b3:7d:f0:f0:1a:54:c5:8a:1c:ec:ab:ae:b1: 1c:88:24:b7:9d:1d:cd:b1:3f:6d:32:61:7c:41:d4:0f:eb:b0: 04:87:7b:e2:c8:83:ff:35:56:aa:ce:f2:99:7a:8b:25:df:15: e7:7f:4d:86:ab:57:af:f4:44:75:bf:33:d0:11:35:73:66:29: ab:02:cf:74:38:c2:51:9c:c9:a0:69:f1:0f:14:a6:f8:bc:2e: 51:5b:48:1d:84:fa:8d:1e:f9:c4:2b:ad:a4:8b:97:67:ad:1f: 8c:a9:9e:58:7c:85:53:78:2a:dd:b1:2d:c6:23:05:c2:21:f6: b6:b7:cf:79 -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIULVUjxtk5171ig1J4xQ+7dsWQ96swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0ZGMjk4MkQ0QzhBRTEwRjNGNEVBQkRDODE2M0YxRDIw OTI3MTgyNDAeFw0yNjA0MzAwMzQ3NTJaFw0yNjA1MDEwNjEwNTJaMDMxMTAvBgNV BAMTKDI0M0JBMjc4MUI2MzQ0QkI2NzhFMTg1N0NDQUU5RUE2MEFGMTM5NDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFzE2KCXejc+L87+eQG6ZU2I7F 9vNrEKvzydzICwJrAizKGpiBg8TbcPmYQXp4IhUpjRYrxBl6TTwi1mb/TgV5y5cz jG45cMV0b8sCwNZ387UdoL3satCUOmhjGkCLbE3cD5XwxCkrPWREiZhg8x5LCYMZ FLdo1QmU07v2pblUhTpM9B+p9S3tAQdNr5BuMz6kdL4bbPnNC9V6zKmMoEp9DhO+ pit14RjpfSv53PTtR7JGlpkaFbj9T0kf2m9DeVJU32k/MZnYVnNwCyXoA+/HBVYl LeDtCFuEufb6dP+57F6mTZ53eDSZxsniAf1HmEk8abgBADIU7lv7qDi4QoU5AgMB AAGjggJ4MIICdDAdBgNVHQ4EFgQUJDuieBtjRLtnjhhXzK6epgrxOUgwHwYDVR0j BBgwFoAUP/KYLUyK4Q8/TqvcgWPx0gknGCQwDgYDVR0PAQH/BAQDAgeAMIGPBgNV HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv cmVwby9ycGtpX2NhX2NmOGE0ZTE2YjM1ODRhMTFiOTExYmIwNGQ3ZTBhNDNmLzAv M0ZGMjk4MkQ0QzhBRTEwRjNGNEVBQkRDODE2M0YxRDIwOTI3MTgyNC5jcmwwgZ4G CCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5wYWFz LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQxYjUtODJh MC1mMGQwMmMwM2EyYzYvNy8zRkYyOTgyRDRDOEFFMTBGM0Y0RUFCREM4MTYzRjFE MjA5MjcxODI0LmNlcjCBmgYIKwYBBQUHAQsEgY0wgYowgYcGCCsGAQUFBzALhnty c3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQvcmVwby9ycGtpX2NhX2NmOGE0 ZTE2YjM1ODRhMTFiOTExYmIwNGQ3ZTBhNDNmLzAvM0ZGMjk4MkQ0QzhBRTEwRjNG NEVBQkRDODE2M0YxRDIwOTI3MTgyNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAERu6XGaqhk8Tk7ptcFx c4y8Ko5qN7IIoz6JG9YCAn9wHgLxrrxFONaQaIpqMbUxyhtbV/6JdKSmBtfN/tMY tHHNkmZCbfMqzTDZtq+k6gsYVvS6gZTwZe+bhADsF/cVY8cX5GiWMTHF0xTWhbW2 z66InSJg9TmH6wGUiBheP1Hisbycs33w8BpUxYoc7KuusRyIJLedHc2xP20yYXxB 1A/rsASHe+LIg/81VqrO8pl6iyXfFed/TYarV6/0RHW/M9ARNXNmKasCz3Q4wlGc yaBp8Q8Upvi8LlFbSB2E+o0e+cQrraSLl2etH4ypnlh8hVN4Kt2xLcYjBcIh9ra3 z3k= -----END CERTIFICATE-----Generated at Thu Apr 30 14:46:48 2026 by rpki-client