$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_f114c1ea7788452cbf38be854ea8359d/0/2B3B97334DA06978185DAC76A2F3EA3585E8231E.mft File: 2B3B97334DA06978185DAC76A2F3EA3585E8231E.mft (raw, json) Hash identifier: dpIH48sdC6NeDiq6vk9OLCw6yC5Wf4EO6BSFJA1Pqbg= Subject key identifier: D3:93:15:44:EC:CC:96:FD:4A:5D:E4:A7:0E:68:7F:F3:00:AE:44:B5 Authority key identifier: 2B:3B:97:33:4D:A0:69:78:18:5D:AC:76:A2:F3:EA:35:85:E8:23:1E Certificate issuer: /CN=2B3B97334DA06978185DAC76A2F3EA3585E8231E Certificate serial: 424CE4F8513CE20DF31DA4A3C3C73A8397F98123 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/2B3B97334DA06978185DAC76A2F3EA3585E8231E.cer Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_f114c1ea7788452cbf38be854ea8359d/0/2B3B97334DA06978185DAC76A2F3EA3585E8231E.mft Manifest number: CD Signing time: Thu 30 Apr 2026 01:22:26 +0000 Manifest this update: Thu 30 Apr 2026 01:17:26 +0000 Manifest next update: Fri 01 May 2026 03:37:26 +0000 Files and hashes: 1: 2B3B97334DA06978185DAC76A2F3EA3585E8231E.crl (hash: 2CeQtCe80uuZ1Fr8oOl29miThmXm8p6d161uoQHtSKI=) 2: 326131313a663263303a666665303a3a2f34382d3438203d3e20323134373439.roa (hash: SsKZ08+rzpnXlHPVlF1X2ydZv//GE/sZxshtEoPOB40=) Validation: OK Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_f114c1ea7788452cbf38be854ea8359d/0/2B3B97334DA06978185DAC76A2F3EA3585E8231E.crl rsync://rpki-repo.as207960.net/repo/rpki_ca_f114c1ea7788452cbf38be854ea8359d/0/2B3B97334DA06978185DAC76A2F3EA3585E8231E.mft rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/2B3B97334DA06978185DAC76A2F3EA3585E8231E.cer rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 01 May 2026 03:37:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:4c:e4:f8:51:3c:e2:0d:f3:1d:a4:a3:c3:c7:3a:83:97:f9:81:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2B3B97334DA06978185DAC76A2F3EA3585E8231E Validity Not Before: Apr 30 01:17:26 2026 GMT Not After : May 1 03:37:26 2026 GMT Subject: CN=D3931544ECCC96FD4A5DE4A70E687FF300AE44B5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:92:e1:15:5b:45:45:fe:be:a7:a2:ce:a0:5d: 83:c6:46:65:c3:96:0f:9b:02:f8:72:60:67:3f:ef: 2e:41:d1:39:21:94:74:fe:75:53:cd:0c:9a:7e:c6: c6:c4:04:e7:9f:d1:f8:4f:b5:83:bc:d6:56:90:d0: ab:ea:00:ac:98:73:3e:76:a1:4f:c1:92:79:fa:d1: 06:09:f1:87:b9:f2:cc:76:74:df:98:27:92:e8:95: 49:15:ef:d9:f9:5b:5f:26:36:e6:c8:9f:8f:3d:d3: 68:d9:d5:7c:d8:48:3d:4d:b5:b1:52:ad:e0:95:76: 82:eb:ff:7e:44:ab:4e:40:d4:3c:a9:3a:28:af:2e: dd:cb:4a:74:f9:2e:eb:e8:52:00:44:2e:98:99:94: 1e:45:e4:89:d7:4c:63:2a:ef:1f:d5:a3:92:ed:ea: 1e:cc:19:44:f5:f3:f4:9b:ee:ee:f0:7c:ba:c5:3d: 7e:e7:54:41:2b:f7:98:2d:1f:05:d4:f6:2f:37:6e: 53:86:60:ee:4d:e2:0f:a5:0d:fd:f8:64:3a:e5:33: 81:9b:3d:bf:26:08:29:7f:5d:b2:a3:d9:9f:6f:d5: 19:00:01:d9:e1:59:89:42:dc:1a:44:17:d8:da:40: c6:d9:f2:36:a9:20:03:7e:10:0d:3c:1a:d9:c6:ba: 82:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:93:15:44:EC:CC:96:FD:4A:5D:E4:A7:0E:68:7F:F3:00:AE:44:B5 X509v3 Authority Key Identifier: keyid:2B:3B:97:33:4D:A0:69:78:18:5D:AC:76:A2:F3:EA:35:85:E8:23:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_f114c1ea7788452cbf38be854ea8359d/0/2B3B97334DA06978185DAC76A2F3EA3585E8231E.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/2B3B97334DA06978185DAC76A2F3EA3585E8231E.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_f114c1ea7788452cbf38be854ea8359d/0/2B3B97334DA06978185DAC76A2F3EA3585E8231E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:13:97:89:38:b3:f8:43:98:bb:fe:35:96:04:95:02:1a:45: 47:9b:17:d9:a8:f8:54:a0:9a:d2:98:13:f2:ef:56:44:85:6f: 32:7f:4f:15:0e:aa:03:90:43:4c:02:e8:24:a4:8b:21:e4:1f: d6:cf:cf:17:0b:89:b1:ef:dd:d1:5c:31:79:59:e9:46:13:f3: 93:bc:e8:a6:1e:a0:6b:d5:7a:cd:a8:9c:68:41:8d:bf:12:e0: cf:61:cf:43:5a:92:29:07:5e:91:bf:77:1f:74:e2:f5:ff:0b: b9:20:3c:39:ad:a1:bc:02:45:67:24:f0:56:76:33:88:1e:ab: 67:02:d6:55:b9:9f:b8:af:40:19:69:6c:34:a8:39:bc:d3:2d: ca:62:26:c7:36:ef:ad:a3:ec:b4:c0:e4:6d:9c:d9:a1:26:28: f1:77:d6:d9:52:13:92:1a:0a:f4:c0:2e:b6:22:af:62:60:fc: 0c:d0:04:a7:17:b6:8e:cc:61:1a:dc:6c:1f:e0:5e:85:33:c2: fd:42:e9:2f:e7:f9:bd:aa:e0:a4:1a:23:5d:e9:a0:d5:86:b3: 17:aa:82:79:98:d4:bb:2f:a0:a5:37:91:a2:e4:9b:df:ae:a7: ea:fe:69:bb:b9:6b:87:9d:68:27:7d:87:a9:98:a0:10:71:59: dc:cd:57:ab -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIUQkzk+FE84g3zHaSjw8c6g5f5gSMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkIzQjk3MzM0REEwNjk3ODE4NURBQzc2QTJGM0VBMzU4 NUU4MjMxRTAeFw0yNjA0MzAwMTE3MjZaFw0yNjA1MDEwMzM3MjZaMDMxMTAvBgNV BAMTKEQzOTMxNTQ0RUNDQzk2RkQ0QTVERTRBNzBFNjg3RkYzMDBBRTQ0QjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCikuEVW0VF/r6nos6gXYPGRmXD lg+bAvhyYGc/7y5B0TkhlHT+dVPNDJp+xsbEBOef0fhPtYO81laQ0KvqAKyYcz52 oU/Bknn60QYJ8Ye58sx2dN+YJ5LolUkV79n5W18mNubIn48902jZ1XzYSD1NtbFS reCVdoLr/35Eq05A1DypOiivLt3LSnT5LuvoUgBELpiZlB5F5InXTGMq7x/Vo5Lt 6h7MGUT18/Sb7u7wfLrFPX7nVEEr95gtHwXU9i83blOGYO5N4g+lDf34ZDrlM4Gb Pb8mCCl/XbKj2Z9v1RkAAdnhWYlC3BpEF9jaQMbZ8japIAN+EA08GtnGuoIJAgMB AAGjggJ4MIICdDAdBgNVHQ4EFgQU05MVROzMlv1KXeSnDmh/8wCuRLUwHwYDVR0j BBgwFoAUKzuXM02gaXgYXax2ovPqNYXoIx4wDgYDVR0PAQH/BAQDAgeAMIGPBgNV HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv cmVwby9ycGtpX2NhX2YxMTRjMWVhNzc4ODQ1MmNiZjM4YmU4NTRlYTgzNTlkLzAv MkIzQjk3MzM0REEwNjk3ODE4NURBQzc2QTJGM0VBMzU4NUU4MjMxRS5jcmwwgZ4G CCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5wYWFz LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQxYjUtODJh MC1mMGQwMmMwM2EyYzYvNy8yQjNCOTczMzREQTA2OTc4MTg1REFDNzZBMkYzRUEz NTg1RTgyMzFFLmNlcjCBmgYIKwYBBQUHAQsEgY0wgYowgYcGCCsGAQUFBzALhnty c3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQvcmVwby9ycGtpX2NhX2YxMTRj MWVhNzc4ODQ1MmNiZjM4YmU4NTRlYTgzNTlkLzAvMkIzQjk3MzM0REEwNjk3ODE4 NURBQzc2QTJGM0VBMzU4NUU4MjMxRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAE0Tl4k4s/hDmLv+NZYE lQIaRUebF9mo+FSgmtKYE/LvVkSFbzJ/TxUOqgOQQ0wC6CSkiyHkH9bPzxcLibHv 3dFcMXlZ6UYT85O86KYeoGvVes2onGhBjb8S4M9hz0NakikHXpG/dx904vX/C7kg PDmtobwCRWck8FZ2M4geq2cC1lW5n7ivQBlpbDSoObzTLcpiJsc2762j7LTA5G2c 2aEmKPF31tlSE5IaCvTALrYir2Jg/AzQBKcXto7MYRrcbB/gXoUzwv1C6S/n+b2q 4KQaI13poNWGsxeqgnmY1LsvoKU3kaLkm9+up+r+abu5a4edaCd9h6mYoBBxWdzN V6s= -----END CERTIFICATE-----Generated at Thu Apr 30 13:48:24 2026 by rpki-client