$ rpki-client -vvvf rpki-repo.as207960.net/repo/rpki_ca_f114c1ea7788452cbf38be854ea8359d/0/2B3B97334DA06978185DAC76A2F3EA3585E8231E.mft File: 2B3B97334DA06978185DAC76A2F3EA3585E8231E.mft (raw, json) Hash identifier: 0xD46fSMjm1NhD2mcBJqU5zJRDdESuJ1j91Kn3NJB7s= Subject key identifier: D9:AF:B6:63:EE:F5:85:25:F2:42:C5:04:87:B7:80:EB:9C:CE:50:00 Authority key identifier: 2B:3B:97:33:4D:A0:69:78:18:5D:AC:76:A2:F3:EA:35:85:E8:23:1E Certificate issuer: /CN=2B3B97334DA06978185DAC76A2F3EA3585E8231E Certificate serial: 5FD44A6648F58C8500B8F46C90008F4434C12175 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/2B3B97334DA06978185DAC76A2F3EA3585E8231E.cer Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_f114c1ea7788452cbf38be854ea8359d/0/2B3B97334DA06978185DAC76A2F3EA3585E8231E.mft Manifest number: 01AC Signing time: Tue 27 Oct 2026 20:23:52 +0000 Manifest this update: Tue 27 Oct 2026 20:18:51 +0000 Manifest next update: Wed 28 Oct 2026 21:54:51 +0000 Files and hashes: 1: 2B3B97334DA06978185DAC76A2F3EA3585E8231E.crl (hash: /TYZvwTE7LBeHZdsePzirDczoo5ThVh06CTxfzXiaSM=) 2: 326131313a663263303a666665303a3a2f34382d3438203d3e20323134373439.roa (hash: SsKZ08+rzpnXlHPVlF1X2ydZv//GE/sZxshtEoPOB40=) Validation: OK Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_f114c1ea7788452cbf38be854ea8359d/0/2B3B97334DA06978185DAC76A2F3EA3585E8231E.crl rsync://rpki-repo.as207960.net/repo/rpki_ca_f114c1ea7788452cbf38be854ea8359d/0/2B3B97334DA06978185DAC76A2F3EA3585E8231E.mft rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/2B3B97334DA06978185DAC76A2F3EA3585E8231E.cer rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Oct 2026 21:54:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:d4:4a:66:48:f5:8c:85:00:b8:f4:6c:90:00:8f:44:34:c1:21:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2B3B97334DA06978185DAC76A2F3EA3585E8231E Validity Not Before: Oct 27 20:18:51 2026 GMT Not After : Oct 28 21:54:51 2026 GMT Subject: CN=D9AFB663EEF58525F242C50487B780EB9CCE5000 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:da:93:fa:6f:52:e2:13:20:65:fb:d5:0b:ee: 93:f8:13:3b:64:01:c5:d2:48:ae:7f:cc:0c:01:77: dc:87:b3:1e:cb:86:25:6f:76:6f:2a:bd:83:43:db: 18:61:10:96:2e:3e:48:6e:6b:af:e7:80:69:be:ab: ac:04:88:43:e1:76:e4:88:68:6b:93:6f:a8:2a:8e: 22:9c:50:b0:20:de:4d:e2:d2:8d:45:ea:b1:d0:d8: e7:40:4e:29:12:7f:0e:a6:4b:e8:3a:de:6f:25:95: 53:f2:07:a4:50:30:e2:29:6f:4e:59:28:99:e3:f8: 40:89:9f:27:a5:96:e0:b9:29:8c:6f:f3:31:76:a6: 90:b5:80:42:af:c5:ff:46:64:e8:e3:66:b0:fe:06: a4:8c:1f:0c:b3:d3:44:0b:93:18:5f:6d:d4:78:37: de:1f:73:96:61:37:20:07:13:17:46:75:68:93:28: 48:7b:ec:f2:a7:b5:10:08:e2:8f:4f:b5:c1:23:a7: 30:18:66:03:99:67:57:bb:e7:64:6a:f0:8b:4b:56: f5:af:ba:6d:51:22:c0:e9:1d:20:7d:2f:cc:ad:26: 04:11:fa:3f:96:5b:45:7e:05:22:cb:0d:76:b5:e0: f1:f0:05:94:63:f2:6e:26:10:3e:f4:ce:3d:2c:00: ce:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:AF:B6:63:EE:F5:85:25:F2:42:C5:04:87:B7:80:EB:9C:CE:50:00 X509v3 Authority Key Identifier: keyid:2B:3B:97:33:4D:A0:69:78:18:5D:AC:76:A2:F3:EA:35:85:E8:23:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_f114c1ea7788452cbf38be854ea8359d/0/2B3B97334DA06978185DAC76A2F3EA3585E8231E.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/2B3B97334DA06978185DAC76A2F3EA3585E8231E.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_f114c1ea7788452cbf38be854ea8359d/0/2B3B97334DA06978185DAC76A2F3EA3585E8231E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:15:17:2c:fe:ca:ea:52:4e:62:03:84:49:1f:46:62:86:ff: 92:74:5f:d0:5c:c5:c1:f0:de:2e:66:0c:ab:0e:f7:d9:8e:f4: 6b:0d:a4:fa:6f:30:b3:7d:e9:2c:dc:c4:a5:f5:d4:ef:51:52: 6d:b2:a1:3d:cb:bc:e5:52:3f:5a:d8:2c:2d:91:03:65:45:9b: 98:8b:84:33:3b:e8:cd:0b:b7:ec:34:8e:2f:6e:46:82:87:ad: 81:80:6a:c2:22:af:76:d1:12:e9:83:b4:78:35:72:29:fe:f4: 2a:8a:08:16:fe:94:0f:85:79:60:8c:9e:d7:e8:a4:49:7d:01: b9:e8:54:a5:4c:d9:0c:15:f9:75:d7:28:aa:9c:01:b6:0b:00: 62:b0:98:df:fa:0a:48:23:00:2b:46:26:1e:4c:cb:ab:c5:1a: af:8a:09:93:c3:f4:16:99:e6:23:9f:fa:8b:bf:27:d2:6e:1a: aa:96:0f:e5:5c:c1:5c:65:19:94:f7:5c:fc:69:6b:bf:23:3a: 5f:bb:66:ea:56:2c:33:b6:23:04:c5:22:ca:de:e3:bd:da:14: d5:b8:93:c2:8a:e3:5f:1b:4c:fb:d8:53:e1:f6:00:2a:b8:b8: 36:79:70:8e:e3:c3:8c:7c:05:39:26:35:65:c0:04:62:22:1f: 65:ba:0f:45 -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIUX9RKZkj1jIUAuPRskACPRDTBIXUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkIzQjk3MzM0REEwNjk3ODE4NURBQzc2QTJGM0VBMzU4 NUU4MjMxRTAeFw0yNjEwMjcyMDE4NTFaFw0yNjEwMjgyMTU0NTFaMDMxMTAvBgNV BAMTKEQ5QUZCNjYzRUVGNTg1MjVGMjQyQzUwNDg3Qjc4MEVCOUNDRTUwMDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCM2pP6b1LiEyBl+9UL7pP4Eztk AcXSSK5/zAwBd9yHsx7LhiVvdm8qvYND2xhhEJYuPkhua6/ngGm+q6wEiEPhduSI aGuTb6gqjiKcULAg3k3i0o1F6rHQ2OdATikSfw6mS+g63m8llVPyB6RQMOIpb05Z KJnj+ECJnyelluC5KYxv8zF2ppC1gEKvxf9GZOjjZrD+BqSMHwyz00QLkxhfbdR4 N94fc5ZhNyAHExdGdWiTKEh77PKntRAI4o9PtcEjpzAYZgOZZ1e752Rq8ItLVvWv um1RIsDpHSB9L8ytJgQR+j+WW0V+BSLLDXa14PHwBZRj8m4mED70zj0sAM5dAgMB AAGjggJ4MIICdDAdBgNVHQ4EFgQU2a+2Y+71hSXyQsUEh7eA65zOUAAwHwYDVR0j BBgwFoAUKzuXM02gaXgYXax2ovPqNYXoIx4wDgYDVR0PAQH/BAQDAgeAMIGPBgNV HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv cmVwby9ycGtpX2NhX2YxMTRjMWVhNzc4ODQ1MmNiZjM4YmU4NTRlYTgzNTlkLzAv MkIzQjk3MzM0REEwNjk3ODE4NURBQzc2QTJGM0VBMzU4NUU4MjMxRS5jcmwwgZ4G CCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5wYWFz LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQxYjUtODJh MC1mMGQwMmMwM2EyYzYvNy8yQjNCOTczMzREQTA2OTc4MTg1REFDNzZBMkYzRUEz NTg1RTgyMzFFLmNlcjCBmgYIKwYBBQUHAQsEgY0wgYowgYcGCCsGAQUFBzALhnty c3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQvcmVwby9ycGtpX2NhX2YxMTRj MWVhNzc4ODQ1MmNiZjM4YmU4NTRlYTgzNTlkLzAvMkIzQjk3MzM0REEwNjk3ODE4 NURBQzc2QTJGM0VBMzU4NUU4MjMxRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBABEVFyz+yupSTmIDhEkf RmKG/5J0X9BcxcHw3i5mDKsO99mO9GsNpPpvMLN96SzcxKX11O9RUm2yoT3LvOVS P1rYLC2RA2VFm5iLhDM76M0Lt+w0ji9uRoKHrYGAasIir3bREumDtHg1cin+9CqK CBb+lA+FeWCMntfopEl9AbnoVKVM2QwV+XXXKKqcAbYLAGKwmN/6CkgjACtGJh5M y6vFGq+KCZPD9BaZ5iOf+ou/J9JuGqqWD+VcwVxlGZT3XPxpa78jOl+7ZupWLDO2 IwTFIsre473aFNW4k8KK418bTPvYU+H2ACq4uDZ5cI7jw4x8BTkmNWXABGIiH2W6 D0U= -----END CERTIFICATE-----Generated at Wed Oct 28 11:38:31 2026 by rpki-client