$ rpki-client -vvvf rpki-repo.as207960.net/repo/rpki_ca_3db8163f69224798ac2c463c0bca4d6b/0/16589CDE5DC3339CE7BBD4BB1C7C14647497C956.mft File: 16589CDE5DC3339CE7BBD4BB1C7C14647497C956.mft (raw, json) Hash identifier: MyT19KLed1ADbtYkxFsOP3OWLztPU7yNh1ZVSnhqjEk= Subject key identifier: 1D:05:96:B3:D9:7C:62:ED:17:FD:D5:F9:3A:DE:8A:6B:25:45:F4:95 Authority key identifier: 16:58:9C:DE:5D:C3:33:9C:E7:BB:D4:BB:1C:7C:14:64:74:97:C9:56 Certificate issuer: /CN=16589CDE5DC3339CE7BBD4BB1C7C14647497C956 Certificate serial: 646D1815D5AC006941DD4D52AA06FBA954610371 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/16589CDE5DC3339CE7BBD4BB1C7C14647497C956.cer Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_3db8163f69224798ac2c463c0bca4d6b/0/16589CDE5DC3339CE7BBD4BB1C7C14647497C956.mft Manifest number: 03E0 Signing time: Fri 18 Sep 2026 20:30:30 +0000 Manifest this update: Fri 18 Sep 2026 20:25:28 +0000 Manifest next update: Sat 19 Sep 2026 23:27:28 +0000 Files and hashes: 1: 16589CDE5DC3339CE7BBD4BB1C7C14647497C956.crl (hash: dkidijTYVqfGUWJCUeofpS6GLNxcpQXYQRzymB6ffkY=) 2: 326131313a663263303a666666623a3a2f34382d3438203d3e20323033313035.roa (hash: c6cC288Nt+6ZLopbJZfrPCqS0RtJOJx9nVbb4es7uak=) Validation: OK Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_3db8163f69224798ac2c463c0bca4d6b/0/16589CDE5DC3339CE7BBD4BB1C7C14647497C956.crl rsync://rpki-repo.as207960.net/repo/rpki_ca_3db8163f69224798ac2c463c0bca4d6b/0/16589CDE5DC3339CE7BBD4BB1C7C14647497C956.mft rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/16589CDE5DC3339CE7BBD4BB1C7C14647497C956.cer rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 19 Sep 2026 23:27:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:6d:18:15:d5:ac:00:69:41:dd:4d:52:aa:06:fb:a9:54:61:03:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=16589CDE5DC3339CE7BBD4BB1C7C14647497C956 Validity Not Before: Sep 18 20:25:28 2026 GMT Not After : Sep 19 23:27:28 2026 GMT Subject: CN=1D0596B3D97C62ED17FDD5F93ADE8A6B2545F495 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:44:39:08:f3:e0:dd:c0:08:62:4a:7a:13:62: 04:7a:fc:5b:64:91:75:c9:f2:88:94:af:5f:16:63: b2:a6:3b:23:21:2d:20:6b:7d:56:c7:de:2f:7b:c0: 76:72:1d:3a:29:8a:f4:12:35:fa:61:82:0a:86:bc: 0b:59:ca:ec:c1:e2:fd:31:11:bf:d3:20:48:32:46: 11:40:66:e8:06:23:07:70:c4:0c:d7:dd:5f:05:d0: e0:af:f3:c8:5e:ab:e0:7f:c2:bf:14:84:ad:41:ba: 33:21:d6:0c:71:cd:2d:ce:89:e2:60:42:0b:7f:1e: 2d:9a:71:d3:97:ba:9f:bd:b1:aa:79:da:0e:e1:c9: f4:f3:b9:98:85:f4:07:05:b0:6e:2f:26:46:6b:eb: f6:09:c3:ec:71:0d:53:89:07:46:e4:32:2b:b4:cf: c0:f0:d7:51:12:82:b5:4c:78:24:1c:ce:b5:d8:02: b2:37:97:04:ae:47:17:cd:15:2c:c1:65:a6:a8:f7: 99:02:83:25:44:a7:fb:de:67:51:bd:9d:b7:28:3d: f6:7a:9a:55:a8:6f:ea:bd:57:00:cd:1e:8f:bf:07: fc:c7:8b:44:09:f3:73:84:f4:98:78:33:44:cd:9b: 1a:0b:7c:60:2d:24:32:6e:dc:8b:8d:35:35:18:1d: 66:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:05:96:B3:D9:7C:62:ED:17:FD:D5:F9:3A:DE:8A:6B:25:45:F4:95 X509v3 Authority Key Identifier: keyid:16:58:9C:DE:5D:C3:33:9C:E7:BB:D4:BB:1C:7C:14:64:74:97:C9:56 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_3db8163f69224798ac2c463c0bca4d6b/0/16589CDE5DC3339CE7BBD4BB1C7C14647497C956.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/16589CDE5DC3339CE7BBD4BB1C7C14647497C956.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_3db8163f69224798ac2c463c0bca4d6b/0/16589CDE5DC3339CE7BBD4BB1C7C14647497C956.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:2e:b4:2d:84:5f:0e:75:0c:99:b6:ee:26:a8:bf:80:8f:17: 56:82:ba:ce:97:3d:06:d1:bc:e0:fe:85:25:69:2a:96:1a:42: 81:5d:27:cb:4a:e5:69:18:d0:c5:d6:7b:44:ba:f6:7f:28:5a: 36:61:fc:bc:d9:20:ba:66:f6:30:88:a3:c9:93:ef:7f:30:93: 5b:8d:83:27:eb:ef:6a:d8:c9:f0:a9:9d:51:76:96:7b:6e:38: 02:70:c1:60:a7:72:e1:e4:40:70:33:a9:63:19:8c:da:71:21: 46:a8:40:2c:cb:17:d6:32:66:83:06:78:09:f7:d4:bf:81:a9: 5f:05:27:77:b6:3e:8d:87:f0:04:3b:f0:c9:b6:78:6f:63:91: 12:55:18:8d:37:35:25:0b:7b:6e:4d:e8:5e:6d:6c:8e:15:28: b7:a3:de:33:86:3c:33:e7:bb:6a:50:23:55:92:b5:c2:11:14: 8d:ce:05:bc:bc:16:e8:e9:a6:3d:4d:17:90:8b:b0:99:47:7d: 68:bd:a2:ac:d0:b4:31:12:ed:57:11:c9:e4:47:93:15:17:22: 5b:f0:e3:5f:ed:f3:84:8a:cc:1b:fa:f3:7f:5d:b2:18:bb:11: 8a:f5:c4:4b:85:e4:31:1c:6d:a4:d4:9f:d5:c3:14:f8:8b:8a: cf:57:b0:5a -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIUZG0YFdWsAGlB3U1Sqgb7qVRhA3EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTY1ODlDREU1REMzMzM5Q0U3QkJENEJCMUM3QzE0NjQ3 NDk3Qzk1NjAeFw0yNjA5MTgyMDI1MjhaFw0yNjA5MTkyMzI3MjhaMDMxMTAvBgNV BAMTKDFEMDU5NkIzRDk3QzYyRUQxN0ZERDVGOTNBREU4QTZCMjU0NUY0OTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1RDkI8+DdwAhiSnoTYgR6/Ftk kXXJ8oiUr18WY7KmOyMhLSBrfVbH3i97wHZyHTopivQSNfphggqGvAtZyuzB4v0x Eb/TIEgyRhFAZugGIwdwxAzX3V8F0OCv88heq+B/wr8UhK1BujMh1gxxzS3OieJg Qgt/Hi2acdOXup+9sap52g7hyfTzuZiF9AcFsG4vJkZr6/YJw+xxDVOJB0bkMiu0 z8Dw11ESgrVMeCQczrXYArI3lwSuRxfNFSzBZaao95kCgyVEp/veZ1G9nbcoPfZ6 mlWob+q9VwDNHo+/B/zHi0QJ83OE9Jh4M0TNmxoLfGAtJDJu3IuNNTUYHWbxAgMB AAGjggJ4MIICdDAdBgNVHQ4EFgQUHQWWs9l8Yu0X/dX5Ot6KayVF9JUwHwYDVR0j BBgwFoAUFlic3l3DM5znu9S7HHwUZHSXyVYwDgYDVR0PAQH/BAQDAgeAMIGPBgNV HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv cmVwby9ycGtpX2NhXzNkYjgxNjNmNjkyMjQ3OThhYzJjNDYzYzBiY2E0ZDZiLzAv MTY1ODlDREU1REMzMzM5Q0U3QkJENEJCMUM3QzE0NjQ3NDk3Qzk1Ni5jcmwwgZ4G CCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5wYWFz LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQxYjUtODJh MC1mMGQwMmMwM2EyYzYvNy8xNjU4OUNERTVEQzMzMzlDRTdCQkQ0QkIxQzdDMTQ2 NDc0OTdDOTU2LmNlcjCBmgYIKwYBBQUHAQsEgY0wgYowgYcGCCsGAQUFBzALhnty c3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQvcmVwby9ycGtpX2NhXzNkYjgx NjNmNjkyMjQ3OThhYzJjNDYzYzBiY2E0ZDZiLzAvMTY1ODlDREU1REMzMzM5Q0U3 QkJENEJCMUM3QzE0NjQ3NDk3Qzk1Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAEIutC2EXw51DJm27iao v4CPF1aCus6XPQbRvOD+hSVpKpYaQoFdJ8tK5WkY0MXWe0S69n8oWjZh/LzZILpm 9jCIo8mT738wk1uNgyfr72rYyfCpnVF2lntuOAJwwWCncuHkQHAzqWMZjNpxIUao QCzLF9YyZoMGeAn31L+BqV8FJ3e2Po2H8AQ78Mm2eG9jkRJVGI03NSULe25N6F5t bI4VKLej3jOGPDPnu2pQI1WStcIRFI3OBby8Fujppj1NF5CLsJlHfWi9oqzQtDES 7VcRyeRHkxUXIlvw41/t84SKzBv6839dshi7EYr1xEuF5DEcbaTUn9XDFPiLis9X sFo= -----END CERTIFICATE-----Generated at Sat Sep 19 06:08:13 2026 by rpki-client