$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_f114c1ea7788452cbf38be854ea8359d/0/2B3B97334DA06978185DAC76A2F3EA3585E8231E.mft File: 2B3B97334DA06978185DAC76A2F3EA3585E8231E.mft (raw, json) Hash identifier: ndmHWpOOVeowOjkLnqqJTM+QXqfI0wIV1lsT2MbG9nQ= Subject key identifier: 17:B5:35:DF:02:73:40:86:1D:F1:3F:CB:BF:FA:3B:61:EA:DD:9A:98 Authority key identifier: 2B:3B:97:33:4D:A0:69:78:18:5D:AC:76:A2:F3:EA:35:85:E8:23:1E Certificate issuer: /CN=2B3B97334DA06978185DAC76A2F3EA3585E8231E Certificate serial: 02029066CC95C80E1DC5B0A87E38E6CBA0147956 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/2B3B97334DA06978185DAC76A2F3EA3585E8231E.cer Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_f114c1ea7788452cbf38be854ea8359d/0/2B3B97334DA06978185DAC76A2F3EA3585E8231E.mft Manifest number: 8F Signing time: Fri 13 Mar 2026 10:31:38 +0000 Manifest this update: Fri 13 Mar 2026 10:26:35 +0000 Manifest next update: Sat 14 Mar 2026 13:50:35 +0000 Files and hashes: 1: 326131313a663263303a666665303a3a2f34382d3438203d3e20323134373439.roa (hash: SsKZ08+rzpnXlHPVlF1X2ydZv//GE/sZxshtEoPOB40=) 2: 2B3B97334DA06978185DAC76A2F3EA3585E8231E.crl (hash: D309Vx8UE75bqAJHZ5exUG/AcD1EorQN0LA57RIExIk=) Validation: OK Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_f114c1ea7788452cbf38be854ea8359d/0/2B3B97334DA06978185DAC76A2F3EA3585E8231E.crl rsync://rpki-repo.as207960.net/repo/rpki_ca_f114c1ea7788452cbf38be854ea8359d/0/2B3B97334DA06978185DAC76A2F3EA3585E8231E.mft rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/2B3B97334DA06978185DAC76A2F3EA3585E8231E.cer rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 14 Mar 2026 12:25:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:02:90:66:cc:95:c8:0e:1d:c5:b0:a8:7e:38:e6:cb:a0:14:79:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2B3B97334DA06978185DAC76A2F3EA3585E8231E Validity Not Before: Mar 13 10:26:35 2026 GMT Not After : Mar 14 13:50:35 2026 GMT Subject: CN=17B535DF027340861DF13FCBBFFA3B61EADD9A98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:02:72:78:3f:12:ba:46:6f:27:de:ca:34:bf: ed:35:aa:d1:ad:95:fe:54:cc:ff:e2:c4:fc:83:68: e1:75:9a:11:0d:41:7e:31:d2:7a:09:54:77:32:c4: 84:81:93:93:b9:60:4a:1a:6b:89:bd:69:c8:82:97: 9e:83:8f:0c:69:ed:1e:5b:ee:96:60:ae:3d:23:97: 4c:fb:2c:48:25:35:77:e9:68:57:f7:b4:53:a0:9d: 73:5e:0d:82:e8:db:4f:d4:7f:70:5a:c9:37:c5:11: 87:1e:83:1f:84:db:7c:ca:d1:59:36:cd:6c:97:23: 3a:18:98:25:18:01:b6:9e:60:42:0e:56:ca:b7:c6: b9:89:fb:dd:df:22:65:e0:8f:6b:41:5c:2c:49:45: 88:32:c0:07:b6:cd:c8:74:58:3c:64:5c:6b:e2:7d: c3:13:06:9f:e4:13:80:b6:49:35:ff:54:cf:1f:d4: c0:c9:df:3e:b7:c1:70:2c:19:fd:b6:b1:23:9d:0c: dc:0a:28:e1:6a:70:1f:c0:6b:bc:80:51:ba:6e:f4: 5a:dc:db:90:c8:cb:d4:ba:cd:3f:59:f8:3c:ff:0b: 3c:73:cb:37:e2:95:d3:42:0f:0b:87:6e:3c:a6:17: db:81:cb:5a:67:55:97:ce:c4:3c:ab:62:0d:a9:fa: ab:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:B5:35:DF:02:73:40:86:1D:F1:3F:CB:BF:FA:3B:61:EA:DD:9A:98 X509v3 Authority Key Identifier: keyid:2B:3B:97:33:4D:A0:69:78:18:5D:AC:76:A2:F3:EA:35:85:E8:23:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_f114c1ea7788452cbf38be854ea8359d/0/2B3B97334DA06978185DAC76A2F3EA3585E8231E.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/2B3B97334DA06978185DAC76A2F3EA3585E8231E.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_f114c1ea7788452cbf38be854ea8359d/0/2B3B97334DA06978185DAC76A2F3EA3585E8231E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:80:36:42:29:0a:38:48:a5:f8:74:e6:0a:5f:f7:76:a6:c3: 94:5c:2f:48:6e:89:ae:6d:d0:82:0a:39:31:57:6e:35:36:88: c2:b6:15:26:4b:37:30:b1:8f:4d:11:cd:92:02:69:97:f9:37: fd:60:6a:8a:aa:ac:48:a2:9c:7d:08:36:71:2d:4f:ca:98:34: 50:8e:fc:9e:09:80:7d:88:9a:7d:63:ec:ae:a2:dc:2d:26:7f: a9:e1:ab:29:2a:87:54:9c:ad:f9:ba:58:1f:46:0d:53:67:b6: 88:d3:d1:8d:b6:10:27:43:cf:8d:d7:0c:8e:e8:ff:4c:ef:d7: 8c:fd:7c:9e:74:5a:3a:dd:d4:5b:7f:59:e6:4b:4c:17:35:7a: 1f:fe:ef:b3:f9:18:d3:65:e0:fa:ae:a2:13:47:82:05:fc:b5: 66:fc:4f:56:b6:dd:ea:76:78:25:20:c7:9c:50:5e:dc:87:7f: e4:1b:51:d7:55:e6:bf:9b:a5:4e:0b:f3:11:86:e8:f0:7b:41: 85:80:66:7b:56:f3:48:30:5a:6c:ff:94:de:50:f5:2b:2f:34: 56:6f:e8:1e:a6:b8:d6:f2:d4:cf:ab:6f:52:fd:5b:9f:dd:71: 38:18:9f:b2:7f:23:37:6c:f7:0d:c1:1b:a4:52:b8:bc:48:71: dd:7c:78:26 -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIUAgKQZsyVyA4dxbCofjjmy6AUeVYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkIzQjk3MzM0REEwNjk3ODE4NURBQzc2QTJGM0VBMzU4 NUU4MjMxRTAeFw0yNjAzMTMxMDI2MzVaFw0yNjAzMTQxMzUwMzVaMDMxMTAvBgNV BAMTKDE3QjUzNURGMDI3MzQwODYxREYxM0ZDQkJGRkEzQjYxRUFERDlBOTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCAnJ4PxK6Rm8n3so0v+01qtGt lf5UzP/ixPyDaOF1mhENQX4x0noJVHcyxISBk5O5YEoaa4m9aciCl56Djwxp7R5b 7pZgrj0jl0z7LEglNXfpaFf3tFOgnXNeDYLo20/Uf3BayTfFEYcegx+E23zK0Vk2 zWyXIzoYmCUYAbaeYEIOVsq3xrmJ+93fImXgj2tBXCxJRYgywAe2zch0WDxkXGvi fcMTBp/kE4C2STX/VM8f1MDJ3z63wXAsGf22sSOdDNwKKOFqcB/Aa7yAUbpu9Frc 25DIy9S6zT9Z+Dz/CzxzyzfildNCDwuHbjymF9uBy1pnVZfOxDyrYg2p+qsJAgMB AAGjggJ4MIICdDAdBgNVHQ4EFgQUF7U13wJzQIYd8T/Lv/o7YerdmpgwHwYDVR0j BBgwFoAUKzuXM02gaXgYXax2ovPqNYXoIx4wDgYDVR0PAQH/BAQDAgeAMIGPBgNV HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv cmVwby9ycGtpX2NhX2YxMTRjMWVhNzc4ODQ1MmNiZjM4YmU4NTRlYTgzNTlkLzAv MkIzQjk3MzM0REEwNjk3ODE4NURBQzc2QTJGM0VBMzU4NUU4MjMxRS5jcmwwgZ4G CCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5wYWFz LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQxYjUtODJh MC1mMGQwMmMwM2EyYzYvNy8yQjNCOTczMzREQTA2OTc4MTg1REFDNzZBMkYzRUEz NTg1RTgyMzFFLmNlcjCBmgYIKwYBBQUHAQsEgY0wgYowgYcGCCsGAQUFBzALhnty c3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQvcmVwby9ycGtpX2NhX2YxMTRj MWVhNzc4ODQ1MmNiZjM4YmU4NTRlYTgzNTlkLzAvMkIzQjk3MzM0REEwNjk3ODE4 NURBQzc2QTJGM0VBMzU4NUU4MjMxRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAGSANkIpCjhIpfh05gpf 93amw5RcL0huia5t0IIKOTFXbjU2iMK2FSZLNzCxj00RzZICaZf5N/1gaoqqrEii nH0INnEtT8qYNFCO/J4JgH2Imn1j7K6i3C0mf6nhqykqh1Scrfm6WB9GDVNntojT 0Y22ECdDz43XDI7o/0zv14z9fJ50Wjrd1Ft/WeZLTBc1eh/+77P5GNNl4PquohNH ggX8tWb8T1a23ep2eCUgx5xQXtyHf+QbUddV5r+bpU4L8xGG6PB7QYWAZntW80gw Wmz/lN5Q9SsvNFZv6B6muNby1M+rb1L9W5/dcTgYn7J/Izds9w3BG6RSuLxIcd18 eCY= -----END CERTIFICATE-----Generated at Sat Mar 14 05:42:48 2026 by rpki-client