
$ rpki-client -vvf rrdp.as214749.net/repo/as214749-paw/1/66BD0C10135E5DBF4913E2EE3F2DD9D358F9F51C.mft
File: 66BD0C10135E5DBF4913E2EE3F2DD9D358F9F51C.mft (raw, json)
Hash identifier: Z77iICqSM34w0yOmPo/Q9WU8Nw3YawHjSC0l+ppSpIg=
Subject key identifier: 8D:04:59:E3:AF:EC:26:02:66:D7:95:44:AB:86:2C:D3:0A:10:D9:73
Authority key identifier: 66:BD:0C:10:13:5E:5D:BF:49:13:E2:EE:3F:2D:D9:D3:58:F9:F5:1C
Certificate issuer: /CN=66BD0C10135E5DBF4913E2EE3F2DD9D358F9F51C
Certificate serial: 4FEC3BC67E6B5892A49EC6E8FDE9FEAE2D0166DC
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/66BD0C10135E5DBF4913E2EE3F2DD9D358F9F51C.cer
Subject info access: rsync://rrdp.as214749.net/repo/as214749-paw/1/66BD0C10135E5DBF4913E2EE3F2DD9D358F9F51C.mft
Manifest number: 60
Signing time: Thu 30 Apr 2026 04:34:19 +0000
Manifest this update: Thu 30 Apr 2026 04:29:19 +0000
Manifest next update: Fri 01 May 2026 07:49:19 +0000
Files and hashes: 1: 281F5D393C912311D00F69CA42CC6D3FD11D7D52.cer (hash: ynXwUJN5JMWLP0eeAHCJKATWObgf6l2CFVROKgpYj7U=)
2: 326131313a663263303a666665303a3a2f34382d3438203d3e20323134373439.roa (hash: eKfFEzgr+H6yF3j6egSuIVRG25C7FeWL17iAWbZC228=)
3: 66BD0C10135E5DBF4913E2EE3F2DD9D358F9F51C.crl (hash: M7pRmImI5CZHnOPNAroxVZNPfTrO6ktHZN4b04RnRNA=)
Validation: OK
Signature path: rsync://rrdp.as214749.net/repo/as214749-paw/1/66BD0C10135E5DBF4913E2EE3F2DD9D358F9F51C.crl
rsync://rrdp.as214749.net/repo/as214749-paw/1/66BD0C10135E5DBF4913E2EE3F2DD9D358F9F51C.mft
rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/66BD0C10135E5DBF4913E2EE3F2DD9D358F9F51C.cer
rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl
rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft
rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 01 May 2026 07:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4f:ec:3b:c6:7e:6b:58:92:a4:9e:c6:e8:fd:e9:fe:ae:2d:01:66:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66BD0C10135E5DBF4913E2EE3F2DD9D358F9F51C
Validity
Not Before: Apr 30 04:29:19 2026 GMT
Not After : May 1 07:49:19 2026 GMT
Subject: CN=8D0459E3AFEC260266D79544AB862CD30A10D973
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:ac:5b:6a:44:9e:4d:19:33:56:a9:c3:ff:e4:
0a:c7:e1:5b:97:c2:2e:c0:c4:e4:dc:8e:28:bd:0d:
03:02:d2:0f:d7:5a:22:5a:d2:19:ef:66:4d:42:c1:
0b:8e:09:e4:b5:c3:d0:9e:ba:7f:ca:80:2d:69:e3:
42:0b:73:73:8f:e6:69:ff:a3:48:53:28:dc:7a:8a:
28:1c:55:0c:4d:13:00:97:29:74:d1:e9:df:9a:b5:
a8:8c:61:97:d2:72:02:36:64:a8:e8:e6:6c:3b:bb:
a3:d0:e4:85:ea:2c:8d:0f:bc:17:27:d2:d0:20:fd:
7f:d6:c0:e3:79:4c:26:eb:84:fb:f5:66:63:4e:f9:
a2:89:52:04:ff:f0:76:aa:fd:63:7a:b6:70:fd:df:
18:91:18:d4:a7:7c:a8:6f:0e:c5:b2:20:0b:59:d2:
36:d2:ff:b2:7a:11:1b:80:03:e1:20:a1:39:51:ac:
d3:c7:66:bc:71:d8:97:6c:84:e5:df:53:ec:a7:9b:
13:d9:7b:57:f4:81:93:51:78:5f:f5:c4:5a:8f:33:
45:ee:c1:03:35:c3:e0:62:3f:c5:eb:1f:a4:69:a9:
88:74:56:83:40:41:89:02:95:49:47:ad:ac:58:95:
a7:48:7c:36:24:29:1e:2c:11:78:84:5c:5e:19:ad:
5e:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:04:59:E3:AF:EC:26:02:66:D7:95:44:AB:86:2C:D3:0A:10:D9:73
X509v3 Authority Key Identifier:
keyid:66:BD:0C:10:13:5E:5D:BF:49:13:E2:EE:3F:2D:D9:D3:58:F9:F5:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rrdp.as214749.net/repo/as214749-paw/1/66BD0C10135E5DBF4913E2EE3F2DD9D358F9F51C.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/66BD0C10135E5DBF4913E2EE3F2DD9D358F9F51C.cer
Subject Information Access:
Signed Object - URI:rsync://rrdp.as214749.net/repo/as214749-paw/1/66BD0C10135E5DBF4913E2EE3F2DD9D358F9F51C.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:11:82:c5:97:00:3c:ad:a0:f3:5b:c6:e9:83:8d:8e:44:12:
3c:59:38:23:a2:ea:71:94:5d:eb:50:72:da:cb:a4:4b:ac:4a:
75:71:47:9a:2e:fc:fa:81:4a:4d:00:9e:96:8f:26:e5:5d:50:
96:d7:0b:d2:aa:87:38:ac:15:f3:e6:48:ff:3c:6a:0b:1c:a2:
e3:66:ff:e7:ea:fc:4b:7d:4e:e2:77:db:b2:e0:bf:60:a1:8f:
f1:d7:d5:b8:54:94:42:06:96:d5:a2:e9:af:cf:c3:8e:90:89:
00:3d:0e:14:3d:5b:d7:81:ad:88:76:f0:fd:e3:2e:f0:9b:e7:
7d:19:fc:c4:b1:32:6a:2d:d4:5c:6d:54:8a:c7:54:0f:e9:c6:
04:fa:e6:2d:39:7c:a6:1f:ca:18:40:f1:6c:9f:73:f9:b9:d9:
02:1e:2a:97:49:f1:bd:e4:df:ec:16:33:8b:b8:cc:91:7e:01:
40:28:7c:6a:e6:e0:fd:33:fb:fb:1b:53:ab:0b:26:db:10:fa:
83:98:5d:6f:a5:a0:3c:db:84:92:06:15:1a:39:f1:17:58:22:
69:05:18:44:b4:ba:ed:0f:8a:7e:6d:5e:45:12:95:33:97:4f:
b3:39:74:24:75:e6:51:42:b8:64:fc:2f:34:58:77:45:c3:0b:
38:66:f2:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 30 13:45:29 2026 by rpki-client