$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_f114c1ea7788452cbf38be854ea8359d/2/281F5D393C912311D00F69CA42CC6D3FD11D7D52.mft File: 281F5D393C912311D00F69CA42CC6D3FD11D7D52.mft (raw, json) Hash identifier: 3dqtBUhOEDp/H5v60XAyGhQQhB2K2Y9zntD707HM2Zw= Subject key identifier: B5:2D:8B:7C:28:6F:F2:64:98:79:E2:73:07:E7:E7:E3:83:29:EA:7B Authority key identifier: 28:1F:5D:39:3C:91:23:11:D0:0F:69:CA:42:CC:6D:3F:D1:1D:7D:52 Certificate issuer: /CN=281F5D393C912311D00F69CA42CC6D3FD11D7D52 Certificate serial: 075CD592F44F693F6AE801A1882CAF8F42074A73 Authority info access: rsync://rrdp.as214749.net/repo/as214749-paw/1/281F5D393C912311D00F69CA42CC6D3FD11D7D52.cer Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_f114c1ea7788452cbf38be854ea8359d/2/281F5D393C912311D00F69CA42CC6D3FD11D7D52.mft Manifest number: 0C Signing time: Fri 13 Mar 2026 19:13:00 +0000 Manifest this update: Fri 13 Mar 2026 19:07:58 +0000 Manifest next update: Sat 14 Mar 2026 21:43:58 +0000 Files and hashes: 1: 326131313a663263303a666665303a3a2f34382d3438203d3e20323134373439.roa (hash: qwNG09yUfI2Z1oL7Swg14pL+g0Ex6NYiwi4RBuSwo9s=) 2: 281F5D393C912311D00F69CA42CC6D3FD11D7D52.crl (hash: 0cmM3421BOnoxDSa1x0xRMEY9ryFPdS3jy5v/wM3z6A=) Validation: OK Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_f114c1ea7788452cbf38be854ea8359d/2/281F5D393C912311D00F69CA42CC6D3FD11D7D52.crl rsync://rpki-repo.as207960.net/repo/rpki_ca_f114c1ea7788452cbf38be854ea8359d/2/281F5D393C912311D00F69CA42CC6D3FD11D7D52.mft rsync://rrdp.as214749.net/repo/as214749-paw/1/281F5D393C912311D00F69CA42CC6D3FD11D7D52.cer rsync://rrdp.as214749.net/repo/as214749-paw/1/66BD0C10135E5DBF4913E2EE3F2DD9D358F9F51C.crl rsync://rrdp.as214749.net/repo/as214749-paw/1/66BD0C10135E5DBF4913E2EE3F2DD9D358F9F51C.mft rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/66BD0C10135E5DBF4913E2EE3F2DD9D358F9F51C.cer rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 14 Mar 2026 18:53:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:5c:d5:92:f4:4f:69:3f:6a:e8:01:a1:88:2c:af:8f:42:07:4a:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=281F5D393C912311D00F69CA42CC6D3FD11D7D52 Validity Not Before: Mar 13 19:07:58 2026 GMT Not After : Mar 14 21:43:58 2026 GMT Subject: CN=B52D8B7C286FF2649879E27307E7E7E38329EA7B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:62:29:bf:04:0e:72:9c:25:a6:e5:5a:60:df: 57:7a:de:d3:c4:27:d0:0a:be:6c:00:e9:03:43:93: 66:14:e8:c7:bd:8b:06:1e:a5:f5:04:2c:5f:9b:34: d0:d0:76:db:a1:65:05:cb:af:b8:ae:3b:aa:62:08: c5:40:b5:8c:84:8a:fd:33:11:1d:fc:50:b4:73:8b: a1:1f:49:76:7c:fd:b1:cc:b0:0d:dd:d7:4e:65:f1: e1:4f:ff:e9:f1:ee:68:0b:08:64:1b:68:be:29:60: dd:e0:e3:15:94:cc:4b:e6:d6:87:2a:44:77:de:89: 08:dd:a1:15:bc:f3:a1:2a:90:ea:52:01:57:7a:44: a5:fb:68:ae:ce:5c:a1:a9:63:13:96:a8:02:89:8e: 6f:5b:be:c3:dd:92:22:8d:d0:af:a5:23:51:6b:fc: 05:0f:f5:ee:94:1f:fa:d7:5f:65:d4:10:6e:fc:aa: a5:18:ce:a0:15:35:f8:af:20:e8:7e:80:8a:f5:01: 0e:63:fa:f5:a7:0f:03:84:b3:58:84:17:5f:b8:58: 5a:56:c8:2d:2b:6a:3d:d0:25:25:e9:45:03:62:89: 1b:59:a0:e3:43:3f:17:b1:b4:6c:fd:c5:87:72:d9: 2b:f1:80:ba:99:ab:76:6f:64:52:c0:cb:9b:10:79: c9:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:2D:8B:7C:28:6F:F2:64:98:79:E2:73:07:E7:E7:E3:83:29:EA:7B X509v3 Authority Key Identifier: keyid:28:1F:5D:39:3C:91:23:11:D0:0F:69:CA:42:CC:6D:3F:D1:1D:7D:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_f114c1ea7788452cbf38be854ea8359d/2/281F5D393C912311D00F69CA42CC6D3FD11D7D52.crl Authority Information Access: CA Issuers - URI:rsync://rrdp.as214749.net/repo/as214749-paw/1/281F5D393C912311D00F69CA42CC6D3FD11D7D52.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_f114c1ea7788452cbf38be854ea8359d/2/281F5D393C912311D00F69CA42CC6D3FD11D7D52.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:49:e4:d5:c4:8f:ab:0f:3d:f7:71:f6:d2:8a:78:f4:0d:85: 53:77:b4:58:36:02:1a:56:b9:42:46:f3:21:3c:d5:8c:98:a8: 22:b0:fd:aa:91:5a:4b:f6:01:1a:6a:cf:98:60:f4:e7:80:a8: 56:71:f7:8f:f4:81:10:34:14:66:fc:ba:23:33:10:83:0c:e1: dd:2d:26:56:af:d4:ae:23:b3:4d:10:ff:2e:8f:ce:ea:9d:bd: f0:ef:1c:7b:f4:8d:cb:27:6d:bd:78:e0:31:45:c3:ff:af:3c: 7c:9e:15:12:7e:73:a3:07:a5:88:ec:f2:16:eb:a7:85:78:b6: 22:cf:4c:3d:46:1e:7b:e9:c8:6d:75:ae:84:db:7e:6f:f1:c0: 0d:8b:eb:c6:4c:c6:5d:6c:ff:5b:b1:aa:12:b2:20:bc:57:d1: e1:e4:e8:50:3a:d5:48:79:50:5f:3e:52:fd:3a:a4:67:45:1b: 63:de:d9:ed:4a:fa:0a:aa:c4:42:1d:19:69:c8:46:cc:86:e2: 2f:b8:64:c4:e0:cb:62:cc:17:4e:24:17:20:91:c8:ac:24:5d: 14:5a:34:9d:52:03:17:45:d5:6a:2d:a4:df:3a:e0:ec:ee:fd: 47:2a:aa:48:77:d4:89:5c:93:84:6a:04:21:cb:d9:a2:61:00: 90:61:80:06 -----BEGIN CERTIFICATE----- MIIFRTCCBC2gAwIBAgIUB1zVkvRPaT9q6AGhiCyvj0IHSnMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjgxRjVEMzkzQzkxMjMxMUQwMEY2OUNBNDJDQzZEM0ZE MTFEN0Q1MjAeFw0yNjAzMTMxOTA3NThaFw0yNjAzMTQyMTQzNThaMDMxMTAvBgNV BAMTKEI1MkQ4QjdDMjg2RkYyNjQ5ODc5RTI3MzA3RTdFN0UzODMyOUVBN0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7Yim/BA5ynCWm5Vpg31d63tPE J9AKvmwA6QNDk2YU6Me9iwYepfUELF+bNNDQdtuhZQXLr7iuO6piCMVAtYyEiv0z ER38ULRzi6EfSXZ8/bHMsA3d105l8eFP/+nx7mgLCGQbaL4pYN3g4xWUzEvm1ocq RHfeiQjdoRW886EqkOpSAVd6RKX7aK7OXKGpYxOWqAKJjm9bvsPdkiKN0K+lI1Fr /AUP9e6UH/rXX2XUEG78qqUYzqAVNfivIOh+gIr1AQ5j+vWnDwOEs1iEF1+4WFpW yC0raj3QJSXpRQNiiRtZoONDPxextGz9xYdy2SvxgLqZq3ZvZFLAy5sQecldAgMB AAGjggJPMIICSzAdBgNVHQ4EFgQUtS2LfChv8mSYeeJzB+fn44Mp6nswHwYDVR0j BBgwFoAUKB9dOTyRIxHQD2nKQsxtP9EdfVIwDgYDVR0PAQH/BAQDAgeAMIGPBgNV HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv cmVwby9ycGtpX2NhX2YxMTRjMWVhNzc4ODQ1MmNiZjM4YmU4NTRlYTgzNTlkLzIv MjgxRjVEMzkzQzkxMjMxMUQwMEY2OUNBNDJDQzZEM0ZEMTFEN0Q1Mi5jcmwwdgYI KwYBBQUHAQEEajBoMGYGCCsGAQUFBzAChlpyc3luYzovL3JyZHAuYXMyMTQ3NDku bmV0L3JlcG8vYXMyMTQ3NDktcGF3LzEvMjgxRjVEMzkzQzkxMjMxMUQwMEY2OUNB NDJDQzZEM0ZEMTFEN0Q1Mi5jZXIwgZoGCCsGAQUFBwELBIGNMIGKMIGHBggrBgEF BQcwC4Z7cnN5bmM6Ly9ycGtpLXJlcG8uYXMyMDc5NjAubmV0L3JlcG8vcnBraV9j YV9mMTE0YzFlYTc3ODg0NTJjYmYzOGJlODU0ZWE4MzU5ZC8yLzI4MUY1RDM5M0M5 MTIzMTFEMDBGNjlDQTQyQ0M2RDNGRDExRDdENTIubWZ0MBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAV BggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQB1SeTVxI+r Dz33cfbSinj0DYVTd7RYNgIaVrlCRvMhPNWMmKgisP2qkVpL9gEaas+YYPTngKhW cfeP9IEQNBRm/LojMxCDDOHdLSZWr9SuI7NNEP8uj87qnb3w7xx79I3LJ229eOAx RcP/rzx8nhUSfnOjB6WI7PIW66eFeLYiz0w9Rh576chtda6E235v8cANi+vGTMZd bP9bsaoSsiC8V9Hh5OhQOtVIeVBfPlL9OqRnRRtj3tntSvoKqsRCHRlpyEbMhuIv uGTE4MtizBdOJBcgkcisJF0UWjSdUgMXRdVqLaTfOuDs7v1HKqpId9SJXJOEagQh y9miYQCQYYAG -----END CERTIFICATE-----Generated at Sat Mar 14 07:56:13 2026 by rpki-client