$ rpki-client -vvf rrdp.as214749.net/repo/as214749-paw/1/66BD0C10135E5DBF4913E2EE3F2DD9D358F9F51C.mft File: 66BD0C10135E5DBF4913E2EE3F2DD9D358F9F51C.mft (raw, json) Hash identifier: 4FnVaASo8mnMoxH2hTjZ2mPk0AZYWXx9u314oUApoVg= Subject key identifier: 3B:BB:20:8E:9D:C7:01:2E:4D:23:E5:A2:BC:46:47:D7:AD:8F:4C:60 Authority key identifier: 66:BD:0C:10:13:5E:5D:BF:49:13:E2:EE:3F:2D:D9:D3:58:F9:F5:1C Certificate issuer: /CN=66BD0C10135E5DBF4913E2EE3F2DD9D358F9F51C Certificate serial: 454E3D826D64B3DB97BAE7C27BB48EEFCFD1EF08 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/66BD0C10135E5DBF4913E2EE3F2DD9D358F9F51C.cer Subject info access: rsync://rrdp.as214749.net/repo/as214749-paw/1/66BD0C10135E5DBF4913E2EE3F2DD9D358F9F51C.mft Manifest number: D9 Signing time: Wed 29 Jul 2026 18:34:51 +0000 Manifest this update: Wed 29 Jul 2026 18:29:51 +0000 Manifest next update: Thu 30 Jul 2026 21:49:51 +0000 Files and hashes: 1: 326131313a663263303a666665303a3a2f34382d3438203d3e20323134373439.roa (hash: eKfFEzgr+H6yF3j6egSuIVRG25C7FeWL17iAWbZC228=) 2: 281F5D393C912311D00F69CA42CC6D3FD11D7D52.cer (hash: ynXwUJN5JMWLP0eeAHCJKATWObgf6l2CFVROKgpYj7U=) 3: 66BD0C10135E5DBF4913E2EE3F2DD9D358F9F51C.crl (hash: Fdv+hyr+49wnHQKcJgNorR6u9bTkocu+nihtVu8nlg8=) Validation: OK Signature path: rsync://rrdp.as214749.net/repo/as214749-paw/1/66BD0C10135E5DBF4913E2EE3F2DD9D358F9F51C.crl rsync://rrdp.as214749.net/repo/as214749-paw/1/66BD0C10135E5DBF4913E2EE3F2DD9D358F9F51C.mft rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/66BD0C10135E5DBF4913E2EE3F2DD9D358F9F51C.cer rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 30 Jul 2026 20:52:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:4e:3d:82:6d:64:b3:db:97:ba:e7:c2:7b:b4:8e:ef:cf:d1:ef:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66BD0C10135E5DBF4913E2EE3F2DD9D358F9F51C Validity Not Before: Jul 29 18:29:51 2026 GMT Not After : Jul 30 21:49:51 2026 GMT Subject: CN=3BBB208E9DC7012E4D23E5A2BC4647D7AD8F4C60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:53:4f:b6:dd:56:39:b5:92:9e:d6:2e:82:7f: 3c:c2:52:d6:9b:b0:86:ad:7d:5e:46:43:62:cf:50: 80:0a:80:5e:a2:ad:7c:6f:de:1d:05:cc:f5:b0:bf: bf:2d:14:93:cd:8b:60:3d:5d:08:bb:da:49:4e:e8: 55:4c:cf:82:96:78:1c:cf:c2:23:a1:52:c2:b6:25: 95:87:aa:4e:7e:0d:c6:2b:bd:15:69:27:a4:9f:84: 6d:0b:42:98:c8:bd:c5:06:b0:98:b1:b8:79:d8:6a: ce:eb:5b:91:10:7e:d8:4e:41:ca:09:4c:8d:18:01: dd:21:7d:a2:63:a9:2f:fa:2d:99:04:ea:11:9d:a2: 6c:e5:61:2e:2f:14:b5:20:88:ea:dc:e4:60:2e:1b: a0:9b:37:e2:b7:f5:8b:70:e7:7d:a9:29:f5:54:64: 87:84:8b:96:30:3e:fc:35:14:2f:ff:4f:4f:49:91: d1:85:18:6e:92:37:3b:0f:28:94:08:88:a3:8f:4f: be:56:7b:94:f3:df:ee:f4:c4:91:51:6e:35:fd:78: 5c:7c:8a:c6:78:4e:6b:60:20:eb:c7:37:5e:81:38: 3f:fc:aa:37:ca:5a:a8:19:5c:f5:60:0c:a3:75:7b: 7a:41:80:e1:f1:25:ff:7f:e4:24:5d:44:31:a0:21: d5:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:BB:20:8E:9D:C7:01:2E:4D:23:E5:A2:BC:46:47:D7:AD:8F:4C:60 X509v3 Authority Key Identifier: keyid:66:BD:0C:10:13:5E:5D:BF:49:13:E2:EE:3F:2D:D9:D3:58:F9:F5:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rrdp.as214749.net/repo/as214749-paw/1/66BD0C10135E5DBF4913E2EE3F2DD9D358F9F51C.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/66BD0C10135E5DBF4913E2EE3F2DD9D358F9F51C.cer Subject Information Access: Signed Object - URI:rsync://rrdp.as214749.net/repo/as214749-paw/1/66BD0C10135E5DBF4913E2EE3F2DD9D358F9F51C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:08:cd:fe:89:6a:34:94:86:79:41:2b:2c:ee:b1:a6:d4:d8: b9:4a:4a:a5:ff:71:79:dc:e6:61:6e:ea:58:e5:d5:a6:9d:85: 16:2c:a0:50:75:e1:c0:37:4c:81:2e:72:6a:25:fc:5c:2b:49: 54:6a:4f:eb:f3:f6:fb:d2:aa:41:66:11:85:7f:98:44:7f:b6: d0:95:d7:14:03:3f:81:c9:9a:a5:d0:dc:07:d5:9c:fc:c3:f6: c2:58:ab:cd:93:5b:53:1d:e9:65:3d:ff:63:05:94:f1:b3:86: 8b:5d:11:92:6e:c1:9b:44:86:0b:ef:b6:12:77:a7:9d:fb:c6: 24:c4:8d:a3:86:d1:eb:73:28:c8:70:85:a0:29:12:a3:a7:8b: 3d:aa:23:45:6c:45:80:91:65:9d:38:e3:02:36:17:be:ed:cc: 0e:1b:eb:34:80:6f:5d:cf:5e:73:cb:f2:b3:ca:bf:56:32:d1: 0b:b6:2a:f8:bc:26:ba:ee:21:64:ea:d2:df:e9:9f:fa:4f:54: cd:a8:9e:b1:01:29:b4:b7:6d:fe:6f:b1:25:4b:48:46:bf:49: 18:cf:7f:c2:39:38:1a:d2:65:26:8d:f3:b1:ae:0b:11:33:39: ac:f8:27:7d:c4:e6:3a:0f:06:61:f2:d2:39:2c:6b:6e:f3:db: 28:89:17:8d -----BEGIN CERTIFICATE----- MIIFJDCCBAygAwIBAgIURU49gm1ks9uXuufCe7SO78/R7wgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjZCRDBDMTAxMzVFNURCRjQ5MTNFMkVFM0YyREQ5RDM1 OEY5RjUxQzAeFw0yNjA3MjkxODI5NTFaFw0yNjA3MzAyMTQ5NTFaMDMxMTAvBgNV BAMTKDNCQkIyMDhFOURDNzAxMkU0RDIzRTVBMkJDNDY0N0Q3QUQ4RjRDNjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzU0+23VY5tZKe1i6CfzzCUtab sIatfV5GQ2LPUIAKgF6irXxv3h0FzPWwv78tFJPNi2A9XQi72klO6FVMz4KWeBzP wiOhUsK2JZWHqk5+DcYrvRVpJ6SfhG0LQpjIvcUGsJixuHnYas7rW5EQfthOQcoJ TI0YAd0hfaJjqS/6LZkE6hGdomzlYS4vFLUgiOrc5GAuG6CbN+K39Ytw532pKfVU ZIeEi5YwPvw1FC//T09JkdGFGG6SNzsPKJQIiKOPT75We5Tz3+70xJFRbjX9eFx8 isZ4TmtgIOvHN16BOD/8qjfKWqgZXPVgDKN1e3pBgOHxJf9/5CRdRDGgIdWbAgMB AAGjggIuMIICKjAdBgNVHQ4EFgQUO7sgjp3HAS5NI+WivEZH162PTGAwHwYDVR0j BBgwFoAUZr0MEBNeXb9JE+LuPy3Z01j59RwwDgYDVR0PAQH/BAQDAgeAMGsGA1Ud HwRkMGIwYKBeoFyGWnJzeW5jOi8vcnJkcC5hczIxNDc0OS5uZXQvcmVwby9hczIx NDc0OS1wYXcvMS82NkJEMEMxMDEzNUU1REJGNDkxM0UyRUUzRjJERDlEMzU4RjlG NTFDLmNybDCBngYIKwYBBQUHAQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzov L3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2RkZTgzN2ZiLTYz OTAtNDFiNS04MmEwLWYwZDAyYzAzYTJjNi83LzY2QkQwQzEwMTM1RTVEQkY0OTEz RTJFRTNGMkREOUQzNThGOUY1MUMuY2VyMHYGCCsGAQUFBwELBGowaDBmBggrBgEF BQcwC4ZacnN5bmM6Ly9ycmRwLmFzMjE0NzQ5Lm5ldC9yZXBvL2FzMjE0NzQ5LXBh dy8xLzY2QkQwQzEwMTM1RTVEQkY0OTEzRTJFRTNGMkREOUQzNThGOUY1MUMubWZ0 MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYE AgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBbCM3+iWo0lIZ5QSss7rGm1Ni5Skql/3F53OZhbupY5dWmnYUWLKBQ deHAN0yBLnJqJfxcK0lUak/r8/b70qpBZhGFf5hEf7bQldcUAz+ByZql0NwH1Zz8 w/bCWKvNk1tTHellPf9jBZTxs4aLXRGSbsGbRIYL77YSd6ed+8YkxI2jhtHrcyjI cIWgKRKjp4s9qiNFbEWAkWWdOOMCNhe+7cwOG+s0gG9dz15zy/Kzyr9WMtELtir4 vCa67iFk6tLf6Z/6T1TNqJ6xASm0t23+b7ElS0hGv0kYz3/COTga0mUmjfOxrgsR Mzms+Cd9xOY6DwZh8tI5LGtu89soiReN -----END CERTIFICATE-----Generated at Thu Jul 30 07:04:53 2026 by rpki-client