$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_3db8163f69224798ac2c463c0bca4d6b/0/16589CDE5DC3339CE7BBD4BB1C7C14647497C956.mft File: 16589CDE5DC3339CE7BBD4BB1C7C14647497C956.mft (raw, json) Hash identifier: i44TLmih7JaQVKyZ3YbO3n4/MdARggqHWbjWCsdJ+GE= Subject key identifier: 19:2B:10:C7:33:9C:61:27:BF:BA:E6:9E:4E:AA:21:24:C7:8F:DE:60 Authority key identifier: 16:58:9C:DE:5D:C3:33:9C:E7:BB:D4:BB:1C:7C:14:64:74:97:C9:56 Certificate issuer: /CN=16589CDE5DC3339CE7BBD4BB1C7C14647497C956 Certificate serial: 0771F03739AEF0436CBDAFDE5F0C7CD81298AD48 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/16589CDE5DC3339CE7BBD4BB1C7C14647497C956.cer Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_3db8163f69224798ac2c463c0bca4d6b/0/16589CDE5DC3339CE7BBD4BB1C7C14647497C956.mft Manifest number: 0202 Signing time: Sat 26 Jul 2025 16:24:30 +0000 Manifest this update: Sat 26 Jul 2025 16:19:30 +0000 Manifest next update: Sun 27 Jul 2025 20:16:30 +0000 Files and hashes: 1: 16589CDE5DC3339CE7BBD4BB1C7C14647497C956.crl (hash: 3qPQaRHIBsy7kEz6QmrbUMRh3W9iqLdXBD2/69EbphU=) 2: 326131313a663263303a666666623a3a2f34382d3438203d3e20323033313035.roa (hash: oR5xdewUw9CCHlEGMS0Z24xgtiBxrNN/CytrFhUuC90=) Validation: OK Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_3db8163f69224798ac2c463c0bca4d6b/0/16589CDE5DC3339CE7BBD4BB1C7C14647497C956.crl rsync://rpki-repo.as207960.net/repo/rpki_ca_3db8163f69224798ac2c463c0bca4d6b/0/16589CDE5DC3339CE7BBD4BB1C7C14647497C956.mft rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/16589CDE5DC3339CE7BBD4BB1C7C14647497C956.cer rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 27 Jul 2025 18:50:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:71:f0:37:39:ae:f0:43:6c:bd:af:de:5f:0c:7c:d8:12:98:ad:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=16589CDE5DC3339CE7BBD4BB1C7C14647497C956 Validity Not Before: Jul 26 16:19:30 2025 GMT Not After : Jul 27 20:16:30 2025 GMT Subject: CN=192B10C7339C6127BFBAE69E4EAA2124C78FDE60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:a8:2c:f5:1c:1d:ce:48:1d:6e:00:a1:60:7d: b1:f2:45:09:fc:45:c5:45:93:e4:7f:f2:42:95:9b: 98:bd:12:f8:5d:e7:3c:9a:46:df:40:73:c3:bc:3c: 75:4a:b8:a8:c4:35:7d:ad:64:48:27:61:04:e7:63: ef:ce:11:0c:51:3c:8a:8c:03:bd:a5:87:b2:e7:77: 63:bf:3b:92:4d:cf:e0:0b:61:89:d0:32:8b:0c:c5: b4:02:3f:84:78:92:64:ea:eb:82:96:6e:bb:14:06: ef:8b:96:0a:87:3d:f7:04:5e:9b:5e:e3:a0:99:d8: b8:a3:97:bf:ed:ad:9d:22:bb:79:72:83:7b:09:d3: 68:68:cf:f6:76:c1:f5:bc:25:e3:12:f7:7f:a6:1b: 19:34:ee:d8:c8:8b:2b:14:f8:bc:b7:a0:3a:b3:d2: 36:0f:8a:57:84:a6:4b:55:0a:77:43:3c:44:5d:25: c1:44:fa:31:f8:b2:15:1c:c2:0b:85:d1:66:64:98: bf:db:d6:59:77:da:e3:a8:d6:2f:f5:dc:5f:6c:17: 05:01:b8:0e:ef:d7:5a:49:e7:3e:fd:cc:69:ca:5e: 7b:93:c3:e8:3c:3c:b7:b9:e9:58:65:b7:03:e0:6d: 4b:98:bc:c0:37:74:c2:b7:13:dc:6b:06:20:c4:9e: 12:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:2B:10:C7:33:9C:61:27:BF:BA:E6:9E:4E:AA:21:24:C7:8F:DE:60 X509v3 Authority Key Identifier: keyid:16:58:9C:DE:5D:C3:33:9C:E7:BB:D4:BB:1C:7C:14:64:74:97:C9:56 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_3db8163f69224798ac2c463c0bca4d6b/0/16589CDE5DC3339CE7BBD4BB1C7C14647497C956.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/16589CDE5DC3339CE7BBD4BB1C7C14647497C956.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_3db8163f69224798ac2c463c0bca4d6b/0/16589CDE5DC3339CE7BBD4BB1C7C14647497C956.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 93:c5:f6:64:b6:f2:46:05:08:35:be:7c:68:96:5a:62:c3:ce: 7e:2c:46:c0:11:f7:e7:d1:e5:61:cf:85:cb:02:c6:06:f3:51: 49:c8:d9:a4:bf:de:fb:eb:c1:0c:ab:24:32:ba:b2:1c:57:0d: d5:6d:1e:f6:8f:2d:92:da:b2:f3:24:1e:7a:82:41:e8:21:13: f1:38:bd:72:02:e6:a7:25:c5:1f:4b:6e:8e:ae:b0:f0:90:ee: 66:20:73:f1:c7:56:10:4f:cb:c1:e1:52:40:fa:09:14:ce:f3: a1:2c:ac:41:7c:db:fb:61:41:51:85:e2:80:e5:63:67:9f:36: d5:33:76:c9:3d:ea:d5:e4:e8:88:78:0c:09:e4:93:31:60:1e: 13:16:10:e3:a6:92:30:a5:63:6e:4a:79:61:45:80:21:45:d0: 94:51:56:13:8c:7a:df:a6:3d:f0:a8:c3:59:51:26:6e:5d:1b: 32:77:cb:82:f9:1f:ba:ee:7d:a0:8c:d2:6b:16:21:5b:cc:ee: 3a:1d:8d:e2:01:b2:a2:58:10:d3:58:fe:62:d6:54:f9:d2:64: 9c:be:26:6c:5e:e9:29:c7:a8:c6:ee:19:38:13:0c:f7:56:ee: 6d:da:10:46:07:92:42:7f:5f:b7:b1:98:58:3c:4e:61:01:9a: b0:c3:b0:c8 -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIUB3HwNzmu8ENsva/eXwx82BKYrUgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTY1ODlDREU1REMzMzM5Q0U3QkJENEJCMUM3QzE0NjQ3 NDk3Qzk1NjAeFw0yNTA3MjYxNjE5MzBaFw0yNTA3MjcyMDE2MzBaMDMxMTAvBgNV BAMTKDE5MkIxMEM3MzM5QzYxMjdCRkJBRTY5RTRFQUEyMTI0Qzc4RkRFNjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6qCz1HB3OSB1uAKFgfbHyRQn8 RcVFk+R/8kKVm5i9Evhd5zyaRt9Ac8O8PHVKuKjENX2tZEgnYQTnY+/OEQxRPIqM A72lh7Lnd2O/O5JNz+ALYYnQMosMxbQCP4R4kmTq64KWbrsUBu+LlgqHPfcEXpte 46CZ2Lijl7/trZ0iu3lyg3sJ02hoz/Z2wfW8JeMS93+mGxk07tjIiysU+Ly3oDqz 0jYPileEpktVCndDPERdJcFE+jH4shUcwguF0WZkmL/b1ll32uOo1i/13F9sFwUB uA7v11pJ5z79zGnKXnuTw+g8PLe56VhltwPgbUuYvMA3dMK3E9xrBiDEnhLFAgMB AAGjggJ4MIICdDAdBgNVHQ4EFgQUGSsQxzOcYSe/uuaeTqohJMeP3mAwHwYDVR0j BBgwFoAUFlic3l3DM5znu9S7HHwUZHSXyVYwDgYDVR0PAQH/BAQDAgeAMIGPBgNV HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv cmVwby9ycGtpX2NhXzNkYjgxNjNmNjkyMjQ3OThhYzJjNDYzYzBiY2E0ZDZiLzAv MTY1ODlDREU1REMzMzM5Q0U3QkJENEJCMUM3QzE0NjQ3NDk3Qzk1Ni5jcmwwgZ4G CCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5wYWFz LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQxYjUtODJh MC1mMGQwMmMwM2EyYzYvNy8xNjU4OUNERTVEQzMzMzlDRTdCQkQ0QkIxQzdDMTQ2 NDc0OTdDOTU2LmNlcjCBmgYIKwYBBQUHAQsEgY0wgYowgYcGCCsGAQUFBzALhnty c3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQvcmVwby9ycGtpX2NhXzNkYjgx NjNmNjkyMjQ3OThhYzJjNDYzYzBiY2E0ZDZiLzAvMTY1ODlDREU1REMzMzM5Q0U3 QkJENEJCMUM3QzE0NjQ3NDk3Qzk1Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAJPF9mS28kYFCDW+fGiW WmLDzn4sRsAR9+fR5WHPhcsCxgbzUUnI2aS/3vvrwQyrJDK6shxXDdVtHvaPLZLa svMkHnqCQeghE/E4vXIC5qclxR9Lbo6usPCQ7mYgc/HHVhBPy8HhUkD6CRTO86Es rEF82/thQVGF4oDlY2efNtUzdsk96tXk6Ih4DAnkkzFgHhMWEOOmkjClY25KeWFF gCFF0JRRVhOMet+mPfCow1lRJm5dGzJ3y4L5H7rufaCM0msWIVvM7jodjeIBsqJY ENNY/mLWVPnSZJy+Jmxe6SnHqMbuGTgTDPdW7m3aEEYHkkJ/X7exmFg8TmEBmrDD sMg= -----END CERTIFICATE-----Generated at Sun Jul 27 10:40:58 2025 by rpki-client