$ rpki-client -vvvf rpki-repo.as207960.net/repo/rpki_ca_f114c1ea7788452cbf38be854ea8359d/2/281F5D393C912311D00F69CA42CC6D3FD11D7D52.mft File: 281F5D393C912311D00F69CA42CC6D3FD11D7D52.mft (raw, json) Hash identifier: GuuvIUFHmd6RIlylfLkZWcjtFJ88fFGzFDLrWrjrr08= Subject key identifier: FC:EF:43:CA:66:F0:C3:21:50:ED:0C:39:28:F4:F8:3B:21:DA:7F:8B Authority key identifier: 28:1F:5D:39:3C:91:23:11:D0:0F:69:CA:42:CC:6D:3F:D1:1D:7D:52 Certificate issuer: /CN=281F5D393C912311D00F69CA42CC6D3FD11D7D52 Certificate serial: 21BA2C0E9BBFC29C83C2DD15F02CC7A29D4FEA72 Authority info access: rsync://rrdp.as214749.net/repo/as214749-paw/1/281F5D393C912311D00F69CA42CC6D3FD11D7D52.cer Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_f114c1ea7788452cbf38be854ea8359d/2/281F5D393C912311D00F69CA42CC6D3FD11D7D52.mft Manifest number: F5 Signing time: Thu 17 Sep 2026 17:23:17 +0000 Manifest this update: Thu 17 Sep 2026 17:18:17 +0000 Manifest next update: Fri 18 Sep 2026 20:34:17 +0000 Files and hashes: 1: 281F5D393C912311D00F69CA42CC6D3FD11D7D52.crl (hash: Q2aiyTp/vXwSLebxji0LEecGY6Q9ro78VY+14rpFddQ=) 2: 326131313a663263303a666665303a3a2f34382d3438203d3e20323134373439.roa (hash: qwNG09yUfI2Z1oL7Swg14pL+g0Ex6NYiwi4RBuSwo9s=) Validation: OK Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_f114c1ea7788452cbf38be854ea8359d/2/281F5D393C912311D00F69CA42CC6D3FD11D7D52.crl rsync://rpki-repo.as207960.net/repo/rpki_ca_f114c1ea7788452cbf38be854ea8359d/2/281F5D393C912311D00F69CA42CC6D3FD11D7D52.mft rsync://rrdp.as214749.net/repo/as214749-paw/1/281F5D393C912311D00F69CA42CC6D3FD11D7D52.cer rsync://rrdp.as214749.net/repo/as214749-paw/1/66BD0C10135E5DBF4913E2EE3F2DD9D358F9F51C.crl rsync://rrdp.as214749.net/repo/as214749-paw/1/66BD0C10135E5DBF4913E2EE3F2DD9D358F9F51C.mft rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/66BD0C10135E5DBF4913E2EE3F2DD9D358F9F51C.cer rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 18 Sep 2026 16:34:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:ba:2c:0e:9b:bf:c2:9c:83:c2:dd:15:f0:2c:c7:a2:9d:4f:ea:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=281F5D393C912311D00F69CA42CC6D3FD11D7D52 Validity Not Before: Sep 17 17:18:17 2026 GMT Not After : Sep 18 20:34:17 2026 GMT Subject: CN=FCEF43CA66F0C32150ED0C3928F4F83B21DA7F8B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:0f:e9:ae:14:af:57:4e:2a:b4:76:dd:38:d9: e6:de:2d:e5:93:3f:50:08:ff:c9:4f:41:29:66:5f: 6b:2f:bd:5a:e8:a8:4e:62:4b:5b:96:77:54:5d:09: da:5c:b0:f1:26:c3:a7:99:d5:27:f2:08:00:2f:cc: c9:6b:ce:3c:72:0b:59:97:36:62:13:aa:2d:33:cd: 17:2a:dc:8d:14:4f:a5:e7:81:00:52:d8:3b:e2:c8: 85:92:13:62:dd:e9:34:9a:d4:86:f4:ac:7b:85:d8: 18:b2:34:f0:41:af:ef:e5:02:18:c5:04:b5:47:0b: 48:6f:7d:e3:54:43:7b:84:97:69:aa:c8:31:7e:19: 8e:41:43:f9:8f:31:49:19:0a:a9:cb:14:0f:a2:10: 67:7f:3e:d4:b4:9b:9a:8c:56:eb:4c:9a:05:5e:f2: 81:49:55:0f:66:7e:71:fd:6e:e4:53:ec:24:24:bb: 1e:07:77:a7:15:1e:d2:9b:3f:9e:61:d8:13:04:17: 5f:d2:88:a3:90:89:ea:09:a8:41:8a:e0:1d:ed:75: 53:67:b7:43:dd:88:de:bc:19:bb:a2:55:6c:e1:35: c6:48:4e:97:61:4a:5c:49:44:f1:f8:76:f6:f9:84: d5:3d:3e:5a:d7:e2:09:17:29:60:d5:4c:f1:47:51: 17:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:EF:43:CA:66:F0:C3:21:50:ED:0C:39:28:F4:F8:3B:21:DA:7F:8B X509v3 Authority Key Identifier: keyid:28:1F:5D:39:3C:91:23:11:D0:0F:69:CA:42:CC:6D:3F:D1:1D:7D:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_f114c1ea7788452cbf38be854ea8359d/2/281F5D393C912311D00F69CA42CC6D3FD11D7D52.crl Authority Information Access: CA Issuers - URI:rsync://rrdp.as214749.net/repo/as214749-paw/1/281F5D393C912311D00F69CA42CC6D3FD11D7D52.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_f114c1ea7788452cbf38be854ea8359d/2/281F5D393C912311D00F69CA42CC6D3FD11D7D52.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:d2:a8:7d:3e:f3:40:ee:25:d2:9a:6c:61:79:04:2e:43:c2: b9:c9:04:f2:f6:31:1e:d5:14:45:43:63:29:c8:52:fb:af:de: 03:7e:9a:ef:a6:0d:3a:74:39:60:2d:23:f4:ce:43:ea:88:7c: f6:ea:ad:dd:4b:68:45:52:60:0e:25:64:66:b2:be:f2:85:51: 56:f6:56:41:47:28:5b:46:1a:dd:fa:c7:fb:69:3c:5e:ac:e0: 11:b9:a8:24:2f:f1:fd:1e:8a:8e:79:ca:b6:9c:d4:a6:f4:8b: 7b:6d:bd:0a:62:35:f0:b0:e7:01:2d:ff:db:ce:ac:92:90:f4: b8:59:de:52:c4:91:30:1b:ad:9c:bf:ee:c8:b1:e6:36:9a:26: 5e:bb:5b:ce:89:f5:29:e9:a5:ef:cb:22:b5:27:76:37:b6:7e: ef:cb:02:20:99:75:20:09:11:56:f9:ed:da:a6:96:60:b0:ff: 20:5a:17:17:90:57:2d:54:02:2f:00:3e:67:74:fa:52:f8:e1: dd:44:79:e9:0c:da:67:3e:7a:5e:87:32:fe:4e:0f:ca:2d:67: f9:6f:12:20:b3:3d:a3:4b:63:75:f8:2c:4e:f4:60:e6:16:2f: 54:59:fd:ca:f4:ac:9f:35:87:01:a7:18:dd:e2:89:6b:dd:dc: a5:db:78:12 -----BEGIN CERTIFICATE----- MIIFRTCCBC2gAwIBAgIUIbosDpu/wpyDwt0V8CzHop1P6nIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjgxRjVEMzkzQzkxMjMxMUQwMEY2OUNBNDJDQzZEM0ZE MTFEN0Q1MjAeFw0yNjA5MTcxNzE4MTdaFw0yNjA5MTgyMDM0MTdaMDMxMTAvBgNV BAMTKEZDRUY0M0NBNjZGMEMzMjE1MEVEMEMzOTI4RjRGODNCMjFEQTdGOEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkD+muFK9XTiq0dt042ebeLeWT P1AI/8lPQSlmX2svvVroqE5iS1uWd1RdCdpcsPEmw6eZ1SfyCAAvzMlrzjxyC1mX NmITqi0zzRcq3I0UT6XngQBS2DviyIWSE2Ld6TSa1Ib0rHuF2BiyNPBBr+/lAhjF BLVHC0hvfeNUQ3uEl2mqyDF+GY5BQ/mPMUkZCqnLFA+iEGd/PtS0m5qMVutMmgVe 8oFJVQ9mfnH9buRT7CQkux4Hd6cVHtKbP55h2BMEF1/SiKOQieoJqEGK4B3tdVNn t0PdiN68GbuiVWzhNcZITpdhSlxJRPH4dvb5hNU9PlrX4gkXKWDVTPFHURcDAgMB AAGjggJPMIICSzAdBgNVHQ4EFgQU/O9DymbwwyFQ7Qw5KPT4OyHaf4swHwYDVR0j BBgwFoAUKB9dOTyRIxHQD2nKQsxtP9EdfVIwDgYDVR0PAQH/BAQDAgeAMIGPBgNV HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv cmVwby9ycGtpX2NhX2YxMTRjMWVhNzc4ODQ1MmNiZjM4YmU4NTRlYTgzNTlkLzIv MjgxRjVEMzkzQzkxMjMxMUQwMEY2OUNBNDJDQzZEM0ZEMTFEN0Q1Mi5jcmwwdgYI KwYBBQUHAQEEajBoMGYGCCsGAQUFBzAChlpyc3luYzovL3JyZHAuYXMyMTQ3NDku bmV0L3JlcG8vYXMyMTQ3NDktcGF3LzEvMjgxRjVEMzkzQzkxMjMxMUQwMEY2OUNB NDJDQzZEM0ZEMTFEN0Q1Mi5jZXIwgZoGCCsGAQUFBwELBIGNMIGKMIGHBggrBgEF BQcwC4Z7cnN5bmM6Ly9ycGtpLXJlcG8uYXMyMDc5NjAubmV0L3JlcG8vcnBraV9j YV9mMTE0YzFlYTc3ODg0NTJjYmYzOGJlODU0ZWE4MzU5ZC8yLzI4MUY1RDM5M0M5 MTIzMTFEMDBGNjlDQTQyQ0M2RDNGRDExRDdENTIubWZ0MBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAV BggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAX0qh9PvNA 7iXSmmxheQQuQ8K5yQTy9jEe1RRFQ2MpyFL7r94Dfprvpg06dDlgLSP0zkPqiHz2 6q3dS2hFUmAOJWRmsr7yhVFW9lZBRyhbRhrd+sf7aTxerOARuagkL/H9HoqOecq2 nNSm9It7bb0KYjXwsOcBLf/bzqySkPS4Wd5SxJEwG62cv+7IseY2miZeu1vOifUp 6aXvyyK1J3Y3tn7vywIgmXUgCRFW+e3appZgsP8gWhcXkFctVAIvAD5ndPpS+OHd RHnpDNpnPnpehzL+Tg/KLWf5bxIgsz2jS2N1+CxO9GDmFi9UWf3K9KyfNYcBpxjd 4olr3dyl23gS -----END CERTIFICATE-----Generated at Fri Sep 18 01:11:03 2026 by rpki-client