$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_f114c1ea7788452cbf38be854ea8359d/2/281F5D393C912311D00F69CA42CC6D3FD11D7D52.mft File: 281F5D393C912311D00F69CA42CC6D3FD11D7D52.mft (raw, json) Hash identifier: dwgX63a6F2bwLVaWnOkvWBxk78ce2nN+T+F/TLa1VyE= Subject key identifier: 1D:7F:3F:B0:E9:77:5B:38:39:BA:55:3A:CC:69:26:73:26:1E:E7:23 Authority key identifier: 28:1F:5D:39:3C:91:23:11:D0:0F:69:CA:42:CC:6D:3F:D1:1D:7D:52 Certificate issuer: /CN=281F5D393C912311D00F69CA42CC6D3FD11D7D52 Certificate serial: 32B7591E6A3778F88D87DF47788367D5034717B7 Authority info access: rsync://rrdp.as214749.net/repo/as214749-paw/1/281F5D393C912311D00F69CA42CC6D3FD11D7D52.cer Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_f114c1ea7788452cbf38be854ea8359d/2/281F5D393C912311D00F69CA42CC6D3FD11D7D52.mft Manifest number: 4B Signing time: Thu 30 Apr 2026 05:43:03 +0000 Manifest this update: Thu 30 Apr 2026 05:38:03 +0000 Manifest next update: Fri 01 May 2026 06:50:03 +0000 Files and hashes: 1: 281F5D393C912311D00F69CA42CC6D3FD11D7D52.crl (hash: NrEdaPC9tVllDWzSTu8cdnEi5+x72ciMZD4N3J5iQj8=) 2: 326131313a663263303a666665303a3a2f34382d3438203d3e20323134373439.roa (hash: qwNG09yUfI2Z1oL7Swg14pL+g0Ex6NYiwi4RBuSwo9s=) Validation: OK Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_f114c1ea7788452cbf38be854ea8359d/2/281F5D393C912311D00F69CA42CC6D3FD11D7D52.crl rsync://rpki-repo.as207960.net/repo/rpki_ca_f114c1ea7788452cbf38be854ea8359d/2/281F5D393C912311D00F69CA42CC6D3FD11D7D52.mft rsync://rrdp.as214749.net/repo/as214749-paw/1/281F5D393C912311D00F69CA42CC6D3FD11D7D52.cer rsync://rrdp.as214749.net/repo/as214749-paw/1/66BD0C10135E5DBF4913E2EE3F2DD9D358F9F51C.crl rsync://rrdp.as214749.net/repo/as214749-paw/1/66BD0C10135E5DBF4913E2EE3F2DD9D358F9F51C.mft rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/66BD0C10135E5DBF4913E2EE3F2DD9D358F9F51C.cer rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 01 May 2026 06:50:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:b7:59:1e:6a:37:78:f8:8d:87:df:47:78:83:67:d5:03:47:17:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=281F5D393C912311D00F69CA42CC6D3FD11D7D52 Validity Not Before: Apr 30 05:38:03 2026 GMT Not After : May 1 06:50:03 2026 GMT Subject: CN=1D7F3FB0E9775B3839BA553ACC692673261EE723 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:aa:ed:b7:9f:34:d5:ff:3c:c2:bb:05:7b:80: 8f:3e:c4:3a:0b:c6:5f:10:26:86:76:8d:58:d9:d6: 5e:f9:1d:f4:6d:69:fc:73:84:3a:0b:c8:78:bf:40: be:c3:6c:e6:86:12:94:bf:e0:5c:15:35:c4:98:2c: 4e:58:33:12:01:4c:db:14:cc:4e:e4:7c:60:4a:6d: 3a:ba:4a:6a:bf:e8:88:3d:2b:6a:d3:01:2f:6b:20: 90:6b:5b:ca:cc:ab:cb:b2:9f:25:61:75:15:88:82: 07:8a:35:e0:aa:cb:4c:ad:95:dc:d0:06:99:7c:d9: dd:32:41:3d:bc:aa:36:e1:d2:75:cd:2b:f7:51:54: af:71:59:0e:aa:04:96:98:b2:bf:ea:66:8e:cb:d8: d0:38:e1:a0:32:f1:d8:f1:c1:67:66:fc:5e:5c:9f: f8:c9:dc:33:b5:a3:44:e0:2f:04:35:c0:b6:2a:61: 8d:f3:b2:be:11:00:5a:da:16:c8:5c:01:97:58:96: 10:71:3c:df:dd:a1:ed:4e:32:7a:5f:59:7d:cb:33: 72:b2:e4:7f:f2:59:3b:fe:06:8d:ee:e1:5a:24:b7: 80:10:1e:c6:7a:ee:bb:8b:61:1f:ed:6a:e9:fd:02: 82:19:9a:12:14:06:a4:7d:be:9a:84:ee:17:53:05: 53:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:7F:3F:B0:E9:77:5B:38:39:BA:55:3A:CC:69:26:73:26:1E:E7:23 X509v3 Authority Key Identifier: keyid:28:1F:5D:39:3C:91:23:11:D0:0F:69:CA:42:CC:6D:3F:D1:1D:7D:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_f114c1ea7788452cbf38be854ea8359d/2/281F5D393C912311D00F69CA42CC6D3FD11D7D52.crl Authority Information Access: CA Issuers - URI:rsync://rrdp.as214749.net/repo/as214749-paw/1/281F5D393C912311D00F69CA42CC6D3FD11D7D52.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_f114c1ea7788452cbf38be854ea8359d/2/281F5D393C912311D00F69CA42CC6D3FD11D7D52.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:d0:cf:c6:18:90:58:0d:8e:42:00:7a:cb:ef:75:f6:5b:12: fa:aa:ee:62:39:7d:3c:17:b7:ef:e9:06:c4:ce:1a:3a:ff:2a: 93:b2:77:f7:3e:d4:b5:5d:2a:4b:55:c7:34:10:02:1b:a4:0f: 98:52:be:2f:7a:01:f1:d4:98:1a:ce:72:d0:3b:60:5b:fe:96: b3:35:48:45:c5:5e:1c:20:e2:66:1a:d6:c8:86:4c:c5:80:70: 97:ce:ff:95:fe:0b:68:41:aa:df:91:1a:c4:60:17:ec:eb:7c: d1:e3:58:82:aa:35:17:0c:88:d0:b9:54:84:e5:2e:9f:71:80: 94:7a:a7:83:4a:6e:69:d0:b5:a1:7b:e9:ad:17:08:05:34:7b: d4:69:7e:ef:fa:d8:a9:00:c9:7d:29:ae:b6:8b:f5:a3:52:ef: 57:bc:63:3d:1f:96:3f:3b:bb:8f:7d:94:7f:97:72:0b:0e:59: 6b:94:14:3e:bb:73:a9:8c:33:6e:27:0e:01:f0:f2:4c:b0:99: 1a:ee:cf:8a:e2:70:32:65:7e:f1:d4:a6:5e:ab:f3:01:02:38: 15:b5:4c:36:96:24:0c:c4:3c:ea:17:21:32:88:44:54:5d:f8: d6:84:41:e9:81:03:0c:42:f5:71:e2:17:f4:01:ad:6d:4a:6c: 34:b4:6e:80 -----BEGIN CERTIFICATE----- MIIFRTCCBC2gAwIBAgIUMrdZHmo3ePiNh99HeINn1QNHF7cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjgxRjVEMzkzQzkxMjMxMUQwMEY2OUNBNDJDQzZEM0ZE MTFEN0Q1MjAeFw0yNjA0MzAwNTM4MDNaFw0yNjA1MDEwNjUwMDNaMDMxMTAvBgNV BAMTKDFEN0YzRkIwRTk3NzVCMzgzOUJBNTUzQUNDNjkyNjczMjYxRUU3MjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCPqu23nzTV/zzCuwV7gI8+xDoL xl8QJoZ2jVjZ1l75HfRtafxzhDoLyHi/QL7DbOaGEpS/4FwVNcSYLE5YMxIBTNsU zE7kfGBKbTq6Smq/6Ig9K2rTAS9rIJBrW8rMq8uynyVhdRWIggeKNeCqy0ytldzQ Bpl82d0yQT28qjbh0nXNK/dRVK9xWQ6qBJaYsr/qZo7L2NA44aAy8djxwWdm/F5c n/jJ3DO1o0TgLwQ1wLYqYY3zsr4RAFraFshcAZdYlhBxPN/doe1OMnpfWX3LM3Ky 5H/yWTv+Bo3u4Vokt4AQHsZ67ruLYR/taun9AoIZmhIUBqR9vpqE7hdTBVP3AgMB AAGjggJPMIICSzAdBgNVHQ4EFgQUHX8/sOl3Wzg5ulU6zGkmcyYe5yMwHwYDVR0j BBgwFoAUKB9dOTyRIxHQD2nKQsxtP9EdfVIwDgYDVR0PAQH/BAQDAgeAMIGPBgNV HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv cmVwby9ycGtpX2NhX2YxMTRjMWVhNzc4ODQ1MmNiZjM4YmU4NTRlYTgzNTlkLzIv MjgxRjVEMzkzQzkxMjMxMUQwMEY2OUNBNDJDQzZEM0ZEMTFEN0Q1Mi5jcmwwdgYI KwYBBQUHAQEEajBoMGYGCCsGAQUFBzAChlpyc3luYzovL3JyZHAuYXMyMTQ3NDku bmV0L3JlcG8vYXMyMTQ3NDktcGF3LzEvMjgxRjVEMzkzQzkxMjMxMUQwMEY2OUNB NDJDQzZEM0ZEMTFEN0Q1Mi5jZXIwgZoGCCsGAQUFBwELBIGNMIGKMIGHBggrBgEF BQcwC4Z7cnN5bmM6Ly9ycGtpLXJlcG8uYXMyMDc5NjAubmV0L3JlcG8vcnBraV9j YV9mMTE0YzFlYTc3ODg0NTJjYmYzOGJlODU0ZWE4MzU5ZC8yLzI4MUY1RDM5M0M5 MTIzMTFEMDBGNjlDQTQyQ0M2RDNGRDExRDdENTIubWZ0MBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAV BggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQA/0M/GGJBY DY5CAHrL73X2WxL6qu5iOX08F7fv6QbEzho6/yqTsnf3PtS1XSpLVcc0EAIbpA+Y Ur4vegHx1JgaznLQO2Bb/pazNUhFxV4cIOJmGtbIhkzFgHCXzv+V/gtoQarfkRrE YBfs63zR41iCqjUXDIjQuVSE5S6fcYCUeqeDSm5p0LWhe+mtFwgFNHvUaX7v+tip AMl9Ka62i/WjUu9XvGM9H5Y/O7uPfZR/l3ILDllrlBQ+u3OpjDNuJw4B8PJMsJka 7s+K4nAyZX7x1KZeq/MBAjgVtUw2liQMxDzqFyEyiERUXfjWhEHpgQMMQvVx4hf0 Aa1tSmw0tG6A -----END CERTIFICATE-----Generated at Thu Apr 30 13:47:38 2026 by rpki-client