$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_9f297e7e1f534033aaf93ce1e3b46ffc/0/16821FD22FFB74E3D7FAC3AA03BE6D00145B9A3E.mft File: 16821FD22FFB74E3D7FAC3AA03BE6D00145B9A3E.mft (raw, json) Hash identifier: to9UiMjr3ZkMnBWGo7A6m+ZjEKbcK8a27uPvw1Soilc= Subject key identifier: 86:49:2F:C5:97:15:FF:7E:8A:24:C3:F5:71:3D:B1:33:9A:BC:03:A3 Authority key identifier: 16:82:1F:D2:2F:FB:74:E3:D7:FA:C3:AA:03:BE:6D:00:14:5B:9A:3E Certificate issuer: /CN=16821FD22FFB74E3D7FAC3AA03BE6D00145B9A3E Certificate serial: 5FE363B94E035D6463816512458E9E2D70DD1472 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/16821FD22FFB74E3D7FAC3AA03BE6D00145B9A3E.cer Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_9f297e7e1f534033aaf93ce1e3b46ffc/0/16821FD22FFB74E3D7FAC3AA03BE6D00145B9A3E.mft Manifest number: 01F4 Signing time: Sun 20 Jul 2025 14:49:44 +0000 Manifest this update: Sun 20 Jul 2025 14:44:44 +0000 Manifest next update: Mon 21 Jul 2025 18:09:44 +0000 Files and hashes: 1: 16821FD22FFB74E3D7FAC3AA03BE6D00145B9A3E.crl (hash: 8OdOlohrhrijJ4nktl25S2nbLuuQSK/ppUSf/eOxNzk=) Validation: OK Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_9f297e7e1f534033aaf93ce1e3b46ffc/0/16821FD22FFB74E3D7FAC3AA03BE6D00145B9A3E.crl rsync://rpki-repo.as207960.net/repo/rpki_ca_9f297e7e1f534033aaf93ce1e3b46ffc/0/16821FD22FFB74E3D7FAC3AA03BE6D00145B9A3E.mft rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/16821FD22FFB74E3D7FAC3AA03BE6D00145B9A3E.cer rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 21 Jul 2025 18:09:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:e3:63:b9:4e:03:5d:64:63:81:65:12:45:8e:9e:2d:70:dd:14:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=16821FD22FFB74E3D7FAC3AA03BE6D00145B9A3E Validity Not Before: Jul 20 14:44:44 2025 GMT Not After : Jul 21 18:09:44 2025 GMT Subject: CN=86492FC59715FF7E8A24C3F5713DB1339ABC03A3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:98:ce:4b:76:ff:3e:3a:8d:10:2f:85:c1:92: a7:41:8c:63:42:ef:79:6f:f9:1b:8f:69:63:1c:e8: 98:55:bf:aa:c7:a1:a5:f8:62:7e:3b:32:ff:46:f4: cf:25:66:ed:4c:ed:ac:8a:07:b2:52:1b:62:7f:fc: 73:9d:22:d7:1b:1b:92:60:82:fd:8e:20:c3:2f:7a: 41:a0:e5:b9:1e:02:a4:77:3a:c7:e5:88:2f:e5:ff: 7d:58:8f:79:f3:83:99:bb:6d:3b:21:17:53:bf:c3: 36:23:27:81:cb:10:6a:4c:0c:a9:ba:ba:75:fc:b7: ef:5c:6c:48:35:70:32:4c:8b:9c:54:f6:9d:25:89: ae:5d:79:f9:2b:ac:a9:3e:81:81:58:81:c8:bf:db: c6:ab:de:fd:eb:5b:b8:8e:b9:e4:9a:bd:b8:9b:ee: a1:ff:b2:cb:4c:fd:03:c2:44:e4:a4:ad:44:82:5e: 99:a8:b6:70:2b:e9:c6:a2:23:d9:63:89:11:cc:39: 01:b8:4d:42:ae:e8:b8:19:ea:62:39:ee:c0:f9:15: bb:97:a3:ae:b0:25:e4:fb:13:2c:a6:db:9a:85:cf: 73:de:07:2d:69:3d:f8:26:4b:dd:5b:8b:60:98:8d: 7c:97:34:b3:bc:af:0f:98:0c:9a:ca:06:9d:f6:a3: b0:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:49:2F:C5:97:15:FF:7E:8A:24:C3:F5:71:3D:B1:33:9A:BC:03:A3 X509v3 Authority Key Identifier: keyid:16:82:1F:D2:2F:FB:74:E3:D7:FA:C3:AA:03:BE:6D:00:14:5B:9A:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_9f297e7e1f534033aaf93ce1e3b46ffc/0/16821FD22FFB74E3D7FAC3AA03BE6D00145B9A3E.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/16821FD22FFB74E3D7FAC3AA03BE6D00145B9A3E.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_9f297e7e1f534033aaf93ce1e3b46ffc/0/16821FD22FFB74E3D7FAC3AA03BE6D00145B9A3E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:1d:0a:b1:a7:43:15:fd:27:d8:02:65:ce:69:1b:5c:e1:76: 10:13:78:4d:48:8e:1b:5e:0f:3b:29:f1:fc:f2:97:b2:f6:b7: 66:94:9a:c8:a8:90:f6:42:23:79:b1:4c:ac:0a:67:77:ce:96: 1b:88:4f:da:60:c9:b8:12:92:16:44:8a:b8:89:d5:a5:2a:9d: 4f:94:bb:c4:73:6a:65:d8:31:be:12:c1:ac:55:57:b8:65:b3: c3:f9:76:9d:31:fb:bc:0b:7c:8b:5c:2a:82:18:4c:1a:6d:da: 2b:e3:49:38:29:4d:02:62:e8:d8:5c:59:2a:44:da:80:63:2e: 85:39:76:70:09:28:34:82:09:1a:65:59:3b:42:28:d9:45:5a: 42:b6:1e:0e:d1:12:a5:76:b7:25:1c:08:2b:a1:e8:46:fe:1a: 3d:84:e6:3a:56:2f:b0:e8:12:79:36:49:fe:e5:23:08:6f:28: 87:5c:47:85:76:b3:f6:32:8f:23:06:51:92:69:f6:b8:04:b8: c2:c9:44:ac:3c:72:a3:54:c2:36:99:0a:43:db:f8:66:5b:ae: 1a:1d:3e:a8:84:f7:ec:c1:c7:5e:2e:cc:8e:fd:db:7d:d0:99: f4:53:20:64:aa:3e:f0:f7:30:22:00:38:f2:0c:60:0c:39:7f: 43:73:65:73 -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIUX+NjuU4DXWRjgWUSRY6eLXDdFHIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTY4MjFGRDIyRkZCNzRFM0Q3RkFDM0FBMDNCRTZEMDAx NDVCOUEzRTAeFw0yNTA3MjAxNDQ0NDRaFw0yNTA3MjExODA5NDRaMDMxMTAvBgNV BAMTKDg2NDkyRkM1OTcxNUZGN0U4QTI0QzNGNTcxM0RCMTMzOUFCQzAzQTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSmM5Ldv8+Oo0QL4XBkqdBjGNC 73lv+RuPaWMc6JhVv6rHoaX4Yn47Mv9G9M8lZu1M7ayKB7JSG2J//HOdItcbG5Jg gv2OIMMvekGg5bkeAqR3OsfliC/l/31Yj3nzg5m7bTshF1O/wzYjJ4HLEGpMDKm6 unX8t+9cbEg1cDJMi5xU9p0lia5defkrrKk+gYFYgci/28ar3v3rW7iOueSavbib 7qH/sstM/QPCROSkrUSCXpmotnAr6caiI9ljiRHMOQG4TUKu6LgZ6mI57sD5FbuX o66wJeT7Eyym25qFz3PeBy1pPfgmS91bi2CYjXyXNLO8rw+YDJrKBp32o7BhAgMB AAGjggJ4MIICdDAdBgNVHQ4EFgQUhkkvxZcV/36KJMP1cT2xM5q8A6MwHwYDVR0j BBgwFoAUFoIf0i/7dOPX+sOqA75tABRbmj4wDgYDVR0PAQH/BAQDAgeAMIGPBgNV HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv cmVwby9ycGtpX2NhXzlmMjk3ZTdlMWY1MzQwMzNhYWY5M2NlMWUzYjQ2ZmZjLzAv MTY4MjFGRDIyRkZCNzRFM0Q3RkFDM0FBMDNCRTZEMDAxNDVCOUEzRS5jcmwwgZ4G CCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5wYWFz LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQxYjUtODJh MC1mMGQwMmMwM2EyYzYvNy8xNjgyMUZEMjJGRkI3NEUzRDdGQUMzQUEwM0JFNkQw MDE0NUI5QTNFLmNlcjCBmgYIKwYBBQUHAQsEgY0wgYowgYcGCCsGAQUFBzALhnty c3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQvcmVwby9ycGtpX2NhXzlmMjk3 ZTdlMWY1MzQwMzNhYWY5M2NlMWUzYjQ2ZmZjLzAvMTY4MjFGRDIyRkZCNzRFM0Q3 RkFDM0FBMDNCRTZEMDAxNDVCOUEzRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBABgdCrGnQxX9J9gCZc5p G1zhdhATeE1IjhteDzsp8fzyl7L2t2aUmsiokPZCI3mxTKwKZ3fOlhuIT9pgybgS khZEiriJ1aUqnU+Uu8RzamXYMb4SwaxVV7hls8P5dp0x+7wLfItcKoIYTBpt2ivj STgpTQJi6NhcWSpE2oBjLoU5dnAJKDSCCRplWTtCKNlFWkK2Hg7REqV2tyUcCCuh 6Eb+Gj2E5jpWL7DoEnk2Sf7lIwhvKIdcR4V2s/YyjyMGUZJp9rgEuMLJRKw8cqNU wjaZCkPb+GZbrhodPqiE9+zBx14uzI79233QmfRTIGSqPvD3MCIAOPIMYAw5f0Nz ZXM= -----END CERTIFICATE-----Generated at Mon Jul 21 10:31:53 2025 by rpki-client