$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_f114c1ea7788452cbf38be854ea8359d/0/2B3B97334DA06978185DAC76A2F3EA3585E8231E.mft File: 2B3B97334DA06978185DAC76A2F3EA3585E8231E.mft (raw, json) Hash identifier: eI9U0Elwn/Ah3373rps8Mv0g2v1QuWc9lCMqpIr8nJQ= Subject key identifier: B5:78:92:BE:EF:FA:EF:93:7C:E3:8C:1A:C6:7D:C9:4B:34:15:B0:F6 Authority key identifier: 2B:3B:97:33:4D:A0:69:78:18:5D:AC:76:A2:F3:EA:35:85:E8:23:1E Certificate issuer: /CN=2B3B97334DA06978185DAC76A2F3EA3585E8231E Certificate serial: 45D94E9F3E5B97CDA16003821EF6D0A3114E72D6 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/2B3B97334DA06978185DAC76A2F3EA3585E8231E.cer Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_f114c1ea7788452cbf38be854ea8359d/0/2B3B97334DA06978185DAC76A2F3EA3585E8231E.mft Manifest number: 010A Signing time: Sun 14 Jun 2026 13:36:17 +0000 Manifest this update: Sun 14 Jun 2026 13:31:17 +0000 Manifest next update: Mon 15 Jun 2026 13:48:17 +0000 Files and hashes: 1: 326131313a663263303a666665303a3a2f34382d3438203d3e20323134373439.roa (hash: SsKZ08+rzpnXlHPVlF1X2ydZv//GE/sZxshtEoPOB40=) 2: 2B3B97334DA06978185DAC76A2F3EA3585E8231E.crl (hash: VA7/bIA05sFmK+yOlaIVCih3qkmDdYCrQU05+7SUOuU=) Validation: OK Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_f114c1ea7788452cbf38be854ea8359d/0/2B3B97334DA06978185DAC76A2F3EA3585E8231E.crl rsync://rpki-repo.as207960.net/repo/rpki_ca_f114c1ea7788452cbf38be854ea8359d/0/2B3B97334DA06978185DAC76A2F3EA3585E8231E.mft rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/2B3B97334DA06978185DAC76A2F3EA3585E8231E.cer rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Jun 2026 13:48:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:d9:4e:9f:3e:5b:97:cd:a1:60:03:82:1e:f6:d0:a3:11:4e:72:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2B3B97334DA06978185DAC76A2F3EA3585E8231E Validity Not Before: Jun 14 13:31:17 2026 GMT Not After : Jun 15 13:48:17 2026 GMT Subject: CN=B57892BEEFFAEF937CE38C1AC67DC94B3415B0F6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:46:4c:8c:4a:9d:58:ae:35:c6:21:7f:62:b0: 28:9c:de:a4:4c:05:fb:be:01:da:2f:82:cf:c7:6d: ff:c6:34:e9:01:b1:4d:22:9c:5c:6b:6a:5c:65:d6: 8e:ac:04:4d:1d:7b:75:a4:cc:be:b1:e6:b0:14:cf: d9:6f:1e:fb:9b:88:bb:1c:7c:76:34:a1:0d:61:a2: 46:04:b2:1c:08:4f:e8:9c:66:43:d1:11:e8:c4:64: b4:6b:7e:9c:59:29:47:db:21:8f:a4:88:d8:1e:f1: 34:76:a8:3f:90:a5:7b:8c:78:73:30:bf:07:e0:51: 4f:c5:69:3b:05:46:c9:32:a3:ee:1c:2e:d9:6d:5b: ba:81:1b:d6:98:b8:0c:79:82:3c:4a:f2:d3:86:77: d9:62:b5:1b:2c:5d:4a:47:f9:61:2f:d8:7d:de:61: 8c:27:f2:3d:45:16:26:42:89:7d:10:3e:f3:9a:08: ad:91:58:fb:8e:78:cb:de:d3:c7:05:da:0d:63:ed: 63:23:73:7b:31:94:0d:0c:ce:a0:9e:ae:b0:33:b0: 9a:e7:a5:b6:e0:f9:b4:a9:4b:c8:c8:f0:c0:0a:01: ed:af:f9:ee:2d:5c:09:03:e4:44:3a:89:0f:2a:4e: 3d:76:b4:23:46:dd:b0:14:c8:b1:e5:44:75:a2:e7: 32:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:78:92:BE:EF:FA:EF:93:7C:E3:8C:1A:C6:7D:C9:4B:34:15:B0:F6 X509v3 Authority Key Identifier: keyid:2B:3B:97:33:4D:A0:69:78:18:5D:AC:76:A2:F3:EA:35:85:E8:23:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_f114c1ea7788452cbf38be854ea8359d/0/2B3B97334DA06978185DAC76A2F3EA3585E8231E.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/2B3B97334DA06978185DAC76A2F3EA3585E8231E.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_f114c1ea7788452cbf38be854ea8359d/0/2B3B97334DA06978185DAC76A2F3EA3585E8231E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:e7:40:e6:74:08:8d:36:8f:46:50:e0:0c:1a:61:c3:88:d4: 89:36:2d:77:1b:80:8e:76:21:84:10:a1:f8:bf:2f:d9:4e:aa: ec:de:3c:60:7e:d5:f5:50:54:f2:a2:6f:f2:f9:0e:91:54:1e: bc:27:ce:2a:8f:c5:eb:b3:ea:7f:20:90:ce:1b:41:91:79:54: 7e:c8:b8:1d:ac:95:03:e7:db:88:60:d6:53:54:70:b3:0d:6a: 45:7f:0f:28:98:3b:ed:21:e8:11:04:61:12:39:15:27:93:a8: 81:22:7b:54:2c:91:e6:41:27:35:2e:d8:81:80:72:ba:94:c6: 9e:a9:3d:0a:3c:8e:b3:3d:9e:7d:14:31:2e:e2:61:4a:42:c1: 87:93:21:29:52:44:4d:62:aa:5d:fe:1a:65:08:5b:53:65:c6: 40:8b:14:41:4e:07:a9:aa:b9:95:ca:12:73:b8:e4:52:57:62: 6f:f4:ce:87:03:72:df:a0:11:ff:9f:c1:70:99:07:f8:f3:16: c4:c7:31:6b:03:67:80:f0:41:cd:85:12:8c:6a:55:80:dc:9c: 02:5a:7a:2f:9b:2e:50:b3:56:85:59:b3:27:30:de:97:ea:12: fe:10:e4:2b:dd:73:ff:7c:c3:ab:a8:0d:85:2e:ed:73:e2:cd: d7:56:15:86 -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIURdlOnz5bl82hYAOCHvbQoxFOctYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkIzQjk3MzM0REEwNjk3ODE4NURBQzc2QTJGM0VBMzU4 NUU4MjMxRTAeFw0yNjA2MTQxMzMxMTdaFw0yNjA2MTUxMzQ4MTdaMDMxMTAvBgNV BAMTKEI1Nzg5MkJFRUZGQUVGOTM3Q0UzOEMxQUM2N0RDOTRCMzQxNUIwRjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8RkyMSp1YrjXGIX9isCic3qRM Bfu+Adovgs/Hbf/GNOkBsU0inFxralxl1o6sBE0de3WkzL6x5rAUz9lvHvubiLsc fHY0oQ1hokYEshwIT+icZkPREejEZLRrfpxZKUfbIY+kiNge8TR2qD+QpXuMeHMw vwfgUU/FaTsFRskyo+4cLtltW7qBG9aYuAx5gjxK8tOGd9litRssXUpH+WEv2H3e YYwn8j1FFiZCiX0QPvOaCK2RWPuOeMve08cF2g1j7WMjc3sxlA0MzqCerrAzsJrn pbbg+bSpS8jI8MAKAe2v+e4tXAkD5EQ6iQ8qTj12tCNG3bAUyLHlRHWi5zLlAgMB AAGjggJ4MIICdDAdBgNVHQ4EFgQUtXiSvu/675N844waxn3JSzQVsPYwHwYDVR0j BBgwFoAUKzuXM02gaXgYXax2ovPqNYXoIx4wDgYDVR0PAQH/BAQDAgeAMIGPBgNV HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv cmVwby9ycGtpX2NhX2YxMTRjMWVhNzc4ODQ1MmNiZjM4YmU4NTRlYTgzNTlkLzAv MkIzQjk3MzM0REEwNjk3ODE4NURBQzc2QTJGM0VBMzU4NUU4MjMxRS5jcmwwgZ4G CCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5wYWFz LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQxYjUtODJh MC1mMGQwMmMwM2EyYzYvNy8yQjNCOTczMzREQTA2OTc4MTg1REFDNzZBMkYzRUEz NTg1RTgyMzFFLmNlcjCBmgYIKwYBBQUHAQsEgY0wgYowgYcGCCsGAQUFBzALhnty c3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQvcmVwby9ycGtpX2NhX2YxMTRj MWVhNzc4ODQ1MmNiZjM4YmU4NTRlYTgzNTlkLzAvMkIzQjk3MzM0REEwNjk3ODE4 NURBQzc2QTJGM0VBMzU4NUU4MjMxRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAGjnQOZ0CI02j0ZQ4Awa YcOI1Ik2LXcbgI52IYQQofi/L9lOquzePGB+1fVQVPKib/L5DpFUHrwnziqPxeuz 6n8gkM4bQZF5VH7IuB2slQPn24hg1lNUcLMNakV/DyiYO+0h6BEEYRI5FSeTqIEi e1QskeZBJzUu2IGAcrqUxp6pPQo8jrM9nn0UMS7iYUpCwYeTISlSRE1iql3+GmUI W1NlxkCLFEFOB6mquZXKEnO45FJXYm/0zocDct+gEf+fwXCZB/jzFsTHMWsDZ4Dw Qc2FEoxqVYDcnAJaei+bLlCzVoVZsycw3pfqEv4Q5Cvdc/98w6uoDYUu7XPizddW FYY= -----END CERTIFICATE-----Generated at Mon Jun 15 06:24:20 2026 by rpki-client