$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_f114c1ea7788452cbf38be854ea8359d/2/281F5D393C912311D00F69CA42CC6D3FD11D7D52.mft File: 281F5D393C912311D00F69CA42CC6D3FD11D7D52.mft (raw, json) Hash identifier: SCLWRIgTcWsF9VCV8CEgyespGQmvgF0FDuDQgRyZJ5g= Subject key identifier: 1C:12:66:62:71:C6:C9:98:D8:95:38:FD:28:36:95:1C:3B:78:D5:8C Authority key identifier: 28:1F:5D:39:3C:91:23:11:D0:0F:69:CA:42:CC:6D:3F:D1:1D:7D:52 Certificate issuer: /CN=281F5D393C912311D00F69CA42CC6D3FD11D7D52 Certificate serial: 208F38B29A4765DFEFBE3D8C55447C4E747431D2 Authority info access: rsync://rrdp.as214749.net/repo/as214749-paw/1/281F5D393C912311D00F69CA42CC6D3FD11D7D52.cer Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_f114c1ea7788452cbf38be854ea8359d/2/281F5D393C912311D00F69CA42CC6D3FD11D7D52.mft Manifest number: 88 Signing time: Sun 14 Jun 2026 23:22:53 +0000 Manifest this update: Sun 14 Jun 2026 23:17:52 +0000 Manifest next update: Tue 16 Jun 2026 03:21:52 +0000 Files and hashes: 1: 281F5D393C912311D00F69CA42CC6D3FD11D7D52.crl (hash: q0FF+07Cn6YHRsTbnF3tVz6Piphv5+gbPapDM8k9VRE=) 2: 326131313a663263303a666665303a3a2f34382d3438203d3e20323134373439.roa (hash: qwNG09yUfI2Z1oL7Swg14pL+g0Ex6NYiwi4RBuSwo9s=) Validation: OK Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_f114c1ea7788452cbf38be854ea8359d/2/281F5D393C912311D00F69CA42CC6D3FD11D7D52.crl rsync://rpki-repo.as207960.net/repo/rpki_ca_f114c1ea7788452cbf38be854ea8359d/2/281F5D393C912311D00F69CA42CC6D3FD11D7D52.mft rsync://rrdp.as214749.net/repo/as214749-paw/1/281F5D393C912311D00F69CA42CC6D3FD11D7D52.cer rsync://rrdp.as214749.net/repo/as214749-paw/1/66BD0C10135E5DBF4913E2EE3F2DD9D358F9F51C.crl rsync://rrdp.as214749.net/repo/as214749-paw/1/66BD0C10135E5DBF4913E2EE3F2DD9D358F9F51C.mft rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/66BD0C10135E5DBF4913E2EE3F2DD9D358F9F51C.cer rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Jun 2026 02:14:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:8f:38:b2:9a:47:65:df:ef:be:3d:8c:55:44:7c:4e:74:74:31:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=281F5D393C912311D00F69CA42CC6D3FD11D7D52 Validity Not Before: Jun 14 23:17:52 2026 GMT Not After : Jun 16 03:21:52 2026 GMT Subject: CN=1C12666271C6C998D89538FD2836951C3B78D58C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:d6:80:39:2c:7f:b7:a6:35:38:8d:dc:89:22: ae:89:19:2a:13:f4:52:7c:4f:0f:96:54:97:f1:c8: ae:22:77:52:d3:d9:c0:b6:54:9b:ac:16:15:01:03: bf:1a:d2:c0:40:f5:96:8f:24:24:7f:f4:aa:d9:86: 8a:5a:fb:64:c9:f3:fe:d4:7c:0b:0e:8e:3b:d9:0f: 7d:51:9b:92:84:1a:bd:a2:e6:64:30:41:d2:d6:74: ae:c3:14:6d:58:c3:85:d4:57:e8:14:c5:21:45:ee: a1:07:cb:90:5e:b1:a3:81:57:a1:f2:51:4e:df:fa: 31:8d:c6:66:8a:9b:0f:c8:4b:a9:32:47:1e:4e:81: a5:37:4c:b3:fa:24:47:a0:7c:42:7c:07:99:3c:24: af:a5:71:ff:07:7b:8d:a4:73:a4:9d:46:9a:df:e1: 51:36:04:77:86:a7:a1:a1:1a:1c:2d:0e:a1:0c:59: 05:4e:1c:71:79:cb:f3:58:7b:53:ad:6a:64:b1:01: 7c:60:04:76:c1:2b:c4:b3:f3:99:1d:fc:ec:52:d9: 6f:f3:36:7f:0f:5c:5b:b8:05:6f:b4:17:93:5a:0c: 1e:44:cf:84:3f:8f:cf:bd:00:74:33:8d:20:3d:68: 9c:4c:08:b9:3c:1f:16:1e:8d:c3:96:c8:e1:9f:49: 07:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:12:66:62:71:C6:C9:98:D8:95:38:FD:28:36:95:1C:3B:78:D5:8C X509v3 Authority Key Identifier: keyid:28:1F:5D:39:3C:91:23:11:D0:0F:69:CA:42:CC:6D:3F:D1:1D:7D:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_f114c1ea7788452cbf38be854ea8359d/2/281F5D393C912311D00F69CA42CC6D3FD11D7D52.crl Authority Information Access: CA Issuers - URI:rsync://rrdp.as214749.net/repo/as214749-paw/1/281F5D393C912311D00F69CA42CC6D3FD11D7D52.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_f114c1ea7788452cbf38be854ea8359d/2/281F5D393C912311D00F69CA42CC6D3FD11D7D52.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9f:81:18:4a:f1:3d:c7:1f:67:6f:cf:84:18:59:76:f2:95:49: 95:bd:3f:4f:15:55:a2:94:29:40:0f:df:e2:cd:62:34:0e:b8: 42:10:56:7f:43:54:e2:0a:85:5f:59:e7:4b:1a:d5:9c:e4:6a: 07:b7:34:a1:5d:44:20:2e:d6:f4:73:5e:4f:eb:77:ad:8b:dd: 1a:40:59:0f:b4:87:83:3b:81:f7:c0:32:ca:3f:94:27:f3:96: 08:97:6f:9b:68:40:c1:fd:22:f5:06:df:81:18:9c:ef:4b:fe: 28:21:7f:fa:c3:2d:b0:f6:29:61:1b:68:bf:2e:14:a1:fd:3e: 00:e3:76:25:8d:0f:7f:28:55:16:93:a0:b2:d0:6e:f1:8c:09: 65:b8:54:4c:ee:6f:59:28:ad:13:47:25:41:1f:e5:7a:08:80: a9:64:e7:6e:4e:65:7d:9b:a6:98:c5:fa:aa:68:99:53:a3:ff: 93:29:21:60:2c:c8:b1:af:ae:27:11:43:01:e5:14:4f:77:5e: 3a:14:00:e2:b4:4b:08:2f:e5:7a:8f:ee:1c:18:c3:1a:f4:9e: 8b:34:15:47:99:38:b8:a5:ab:ce:f1:9e:76:05:d6:9d:3c:35: 89:e8:8d:a9:39:b3:dd:86:17:0b:ea:58:ca:aa:c3:b1:3e:80: 36:2d:9b:7c -----BEGIN CERTIFICATE----- MIIFRTCCBC2gAwIBAgIUII84sppHZd/vvj2MVUR8TnR0MdIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjgxRjVEMzkzQzkxMjMxMUQwMEY2OUNBNDJDQzZEM0ZE MTFEN0Q1MjAeFw0yNjA2MTQyMzE3NTJaFw0yNjA2MTYwMzIxNTJaMDMxMTAvBgNV BAMTKDFDMTI2NjYyNzFDNkM5OThEODk1MzhGRDI4MzY5NTFDM0I3OEQ1OEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDH1oA5LH+3pjU4jdyJIq6JGSoT 9FJ8Tw+WVJfxyK4id1LT2cC2VJusFhUBA78a0sBA9ZaPJCR/9KrZhopa+2TJ8/7U fAsOjjvZD31Rm5KEGr2i5mQwQdLWdK7DFG1Yw4XUV+gUxSFF7qEHy5BesaOBV6Hy UU7f+jGNxmaKmw/IS6kyRx5OgaU3TLP6JEegfEJ8B5k8JK+lcf8He42kc6SdRprf 4VE2BHeGp6GhGhwtDqEMWQVOHHF5y/NYe1OtamSxAXxgBHbBK8Sz85kd/OxS2W/z Nn8PXFu4BW+0F5NaDB5Ez4Q/j8+9AHQzjSA9aJxMCLk8HxYejcOWyOGfSQcpAgMB AAGjggJPMIICSzAdBgNVHQ4EFgQUHBJmYnHGyZjYlTj9KDaVHDt41YwwHwYDVR0j BBgwFoAUKB9dOTyRIxHQD2nKQsxtP9EdfVIwDgYDVR0PAQH/BAQDAgeAMIGPBgNV HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv cmVwby9ycGtpX2NhX2YxMTRjMWVhNzc4ODQ1MmNiZjM4YmU4NTRlYTgzNTlkLzIv MjgxRjVEMzkzQzkxMjMxMUQwMEY2OUNBNDJDQzZEM0ZEMTFEN0Q1Mi5jcmwwdgYI KwYBBQUHAQEEajBoMGYGCCsGAQUFBzAChlpyc3luYzovL3JyZHAuYXMyMTQ3NDku bmV0L3JlcG8vYXMyMTQ3NDktcGF3LzEvMjgxRjVEMzkzQzkxMjMxMUQwMEY2OUNB NDJDQzZEM0ZEMTFEN0Q1Mi5jZXIwgZoGCCsGAQUFBwELBIGNMIGKMIGHBggrBgEF BQcwC4Z7cnN5bmM6Ly9ycGtpLXJlcG8uYXMyMDc5NjAubmV0L3JlcG8vcnBraV9j YV9mMTE0YzFlYTc3ODg0NTJjYmYzOGJlODU0ZWE4MzU5ZC8yLzI4MUY1RDM5M0M5 MTIzMTFEMDBGNjlDQTQyQ0M2RDNGRDExRDdENTIubWZ0MBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAV BggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCfgRhK8T3H H2dvz4QYWXbylUmVvT9PFVWilClAD9/izWI0DrhCEFZ/Q1TiCoVfWedLGtWc5GoH tzShXUQgLtb0c15P63eti90aQFkPtIeDO4H3wDLKP5Qn85YIl2+baEDB/SL1Bt+B GJzvS/4oIX/6wy2w9ilhG2i/LhSh/T4A43YljQ9/KFUWk6Cy0G7xjAlluFRM7m9Z KK0TRyVBH+V6CICpZOduTmV9m6aYxfqqaJlTo/+TKSFgLMixr64nEUMB5RRPd146 FADitEsIL+V6j+4cGMMa9J6LNBVHmTi4pavO8Z52BdadPDWJ6I2pObPdhhcL6ljK qsOxPoA2LZt8 -----END CERTIFICATE-----Generated at Mon Jun 15 09:48:53 2026 by rpki-client