$ rpki-client -vvvf rpki-repo.as207960.net/repo/rpki_ca_f114c1ea7788452cbf38be854ea8359d/0/2B3B97334DA06978185DAC76A2F3EA3585E8231E.mft File: 2B3B97334DA06978185DAC76A2F3EA3585E8231E.mft (raw, json) Hash identifier: OdZsYBhGZ0AXlj653Pe6HK1JnJZOrIbwE+kWhdxcM98= Subject key identifier: 4A:37:D0:B5:A8:B9:95:AF:86:81:20:19:84:5A:B2:1E:D1:FB:BC:F0 Authority key identifier: 2B:3B:97:33:4D:A0:69:78:18:5D:AC:76:A2:F3:EA:35:85:E8:23:1E Certificate issuer: /CN=2B3B97334DA06978185DAC76A2F3EA3585E8231E Certificate serial: 0DFF23C6F68D8FEC4CC0CE2F639C720A554B638F Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/2B3B97334DA06978185DAC76A2F3EA3585E8231E.cer Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_f114c1ea7788452cbf38be854ea8359d/0/2B3B97334DA06978185DAC76A2F3EA3585E8231E.mft Manifest number: 016B Signing time: Wed 26 Aug 2026 21:37:27 +0000 Manifest this update: Wed 26 Aug 2026 21:32:27 +0000 Manifest next update: Thu 27 Aug 2026 23:58:27 +0000 Files and hashes: 1: 2B3B97334DA06978185DAC76A2F3EA3585E8231E.crl (hash: M8KvpfIEWgt/IB45dZaYQO4G5dzqGowMcAv1H2h//RM=) 2: 326131313a663263303a666665303a3a2f34382d3438203d3e20323134373439.roa (hash: SsKZ08+rzpnXlHPVlF1X2ydZv//GE/sZxshtEoPOB40=) Validation: OK Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_f114c1ea7788452cbf38be854ea8359d/0/2B3B97334DA06978185DAC76A2F3EA3585E8231E.crl rsync://rpki-repo.as207960.net/repo/rpki_ca_f114c1ea7788452cbf38be854ea8359d/0/2B3B97334DA06978185DAC76A2F3EA3585E8231E.mft rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/2B3B97334DA06978185DAC76A2F3EA3585E8231E.cer rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 27 Aug 2026 14:25:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:ff:23:c6:f6:8d:8f:ec:4c:c0:ce:2f:63:9c:72:0a:55:4b:63:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2B3B97334DA06978185DAC76A2F3EA3585E8231E Validity Not Before: Aug 26 21:32:27 2026 GMT Not After : Aug 27 23:58:27 2026 GMT Subject: CN=4A37D0B5A8B995AF86812019845AB21ED1FBBCF0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:06:2e:10:93:d9:20:2a:d0:8c:e5:c7:8e:58: 9e:8a:31:a9:e4:f3:28:9c:32:04:e5:2c:60:55:9d: 8a:ab:4d:6c:b6:79:4b:c0:36:9e:1d:6e:2d:f2:33: bd:4b:c7:21:d2:b4:25:a4:f6:e0:54:d8:bd:1f:d1: bf:4b:bb:fc:3b:f1:62:2c:0c:3b:4d:70:37:11:63: 98:93:85:0e:f3:cc:f2:fd:e4:8c:a3:6b:dc:d9:a1: 16:c7:1f:31:2e:c2:a1:59:00:1c:2b:c9:d9:9b:da: 0f:66:d7:fd:be:bf:59:9b:62:ae:01:6e:2c:d5:ce: 20:77:5f:e1:c7:22:57:62:8e:be:bf:1a:74:84:39: b1:67:4d:ca:f3:0d:cf:bf:57:ae:9a:fb:38:0b:64: bc:f1:c5:55:89:81:03:31:4f:c7:db:e4:91:67:4e: 88:f9:6c:00:42:16:16:3c:2f:cc:c7:0a:ed:65:41: 47:2c:d8:f3:6b:46:06:28:65:0e:38:fd:de:23:e7: 55:74:b4:d2:30:6a:1c:27:c0:ec:8c:81:a9:4e:67: a3:c8:d5:22:55:a6:5a:02:9e:c0:05:11:3f:3b:e5: 52:37:da:e5:90:65:14:51:33:23:b1:24:b1:62:75: 41:ae:0f:1c:6a:0c:65:f5:88:12:cc:80:71:4e:c9: 6a:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:37:D0:B5:A8:B9:95:AF:86:81:20:19:84:5A:B2:1E:D1:FB:BC:F0 X509v3 Authority Key Identifier: keyid:2B:3B:97:33:4D:A0:69:78:18:5D:AC:76:A2:F3:EA:35:85:E8:23:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_f114c1ea7788452cbf38be854ea8359d/0/2B3B97334DA06978185DAC76A2F3EA3585E8231E.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/2B3B97334DA06978185DAC76A2F3EA3585E8231E.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_f114c1ea7788452cbf38be854ea8359d/0/2B3B97334DA06978185DAC76A2F3EA3585E8231E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:c6:7e:b5:4e:79:ff:00:65:a9:90:ad:dd:55:55:84:41:fa: ff:95:4a:b4:fe:fd:59:5a:99:40:4c:5a:cd:30:46:6c:78:15: 45:8b:da:8b:e0:10:f6:d1:c7:d6:e6:3c:79:ef:7f:9a:57:81: 59:55:f0:dc:9f:56:da:e9:59:98:cd:0c:3e:13:79:21:67:39: 09:74:0b:48:94:1e:ff:31:2f:e5:6c:79:68:db:91:e8:a8:c8: dd:d6:fb:bd:a6:3f:b3:51:6d:31:f3:cb:6c:7a:d6:87:39:3f: 6f:71:a5:54:7e:18:5d:41:bf:70:29:25:2e:af:26:2a:98:c4: 9b:38:3d:31:fc:f1:9d:a7:32:b1:06:a2:8b:20:49:12:ee:1c: a6:fb:98:c3:4f:8f:5e:f8:67:0b:96:d7:9d:8c:14:df:6f:69: 7b:76:9d:82:45:ff:0e:fe:b8:f3:d1:1c:2a:a3:76:ec:6e:2c: f6:47:20:e3:9e:61:00:ca:6a:9f:de:26:2e:7a:13:3f:41:83: 10:32:a5:99:8e:d4:cb:a7:52:f7:41:13:47:f3:68:9b:f2:8e: 5c:f5:8a:e4:ca:43:1d:96:68:45:37:00:4f:7a:4d:57:09:1f: 00:9c:34:ba:58:ad:e6:30:df:c7:1e:5f:b8:31:01:d0:be:16: 39:ee:0e:e5 -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIUDf8jxvaNj+xMwM4vY5xyClVLY48wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkIzQjk3MzM0REEwNjk3ODE4NURBQzc2QTJGM0VBMzU4 NUU4MjMxRTAeFw0yNjA4MjYyMTMyMjdaFw0yNjA4MjcyMzU4MjdaMDMxMTAvBgNV BAMTKDRBMzdEMEI1QThCOTk1QUY4NjgxMjAxOTg0NUFCMjFFRDFGQkJDRjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdBi4Qk9kgKtCM5ceOWJ6KMank 8yicMgTlLGBVnYqrTWy2eUvANp4dbi3yM71LxyHStCWk9uBU2L0f0b9Lu/w78WIs DDtNcDcRY5iThQ7zzPL95Iyja9zZoRbHHzEuwqFZABwrydmb2g9m1/2+v1mbYq4B bizVziB3X+HHIldijr6/GnSEObFnTcrzDc+/V66a+zgLZLzxxVWJgQMxT8fb5JFn Toj5bABCFhY8L8zHCu1lQUcs2PNrRgYoZQ44/d4j51V0tNIwahwnwOyMgalOZ6PI 1SJVploCnsAFET875VI32uWQZRRRMyOxJLFidUGuDxxqDGX1iBLMgHFOyWrBAgMB AAGjggJ4MIICdDAdBgNVHQ4EFgQUSjfQtai5la+GgSAZhFqyHtH7vPAwHwYDVR0j BBgwFoAUKzuXM02gaXgYXax2ovPqNYXoIx4wDgYDVR0PAQH/BAQDAgeAMIGPBgNV HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv cmVwby9ycGtpX2NhX2YxMTRjMWVhNzc4ODQ1MmNiZjM4YmU4NTRlYTgzNTlkLzAv MkIzQjk3MzM0REEwNjk3ODE4NURBQzc2QTJGM0VBMzU4NUU4MjMxRS5jcmwwgZ4G CCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5wYWFz LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQxYjUtODJh MC1mMGQwMmMwM2EyYzYvNy8yQjNCOTczMzREQTA2OTc4MTg1REFDNzZBMkYzRUEz NTg1RTgyMzFFLmNlcjCBmgYIKwYBBQUHAQsEgY0wgYowgYcGCCsGAQUFBzALhnty c3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQvcmVwby9ycGtpX2NhX2YxMTRj MWVhNzc4ODQ1MmNiZjM4YmU4NTRlYTgzNTlkLzAvMkIzQjk3MzM0REEwNjk3ODE4 NURBQzc2QTJGM0VBMzU4NUU4MjMxRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAFLGfrVOef8AZamQrd1V VYRB+v+VSrT+/VlamUBMWs0wRmx4FUWL2ovgEPbRx9bmPHnvf5pXgVlV8NyfVtrp WZjNDD4TeSFnOQl0C0iUHv8xL+VseWjbkeioyN3W+72mP7NRbTHzy2x61oc5P29x pVR+GF1Bv3ApJS6vJiqYxJs4PTH88Z2nMrEGoosgSRLuHKb7mMNPj174ZwuW152M FN9vaXt2nYJF/w7+uPPRHCqjduxuLPZHIOOeYQDKap/eJi56Ez9BgxAypZmO1Mun UvdBE0fzaJvyjlz1iuTKQx2WaEU3AE96TVcJHwCcNLpYreYw38ceX7gxAdC+Fjnu DuU= -----END CERTIFICATE-----Generated at Thu Aug 27 06:21:45 2026 by rpki-client