$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_3db8163f69224798ac2c463c0bca4d6b/0/16589CDE5DC3339CE7BBD4BB1C7C14647497C956.mft File: 16589CDE5DC3339CE7BBD4BB1C7C14647497C956.mft (raw, json) Hash identifier: ktSPWAYj9IqGL9Mk5NkD9lguVVC/KOETV28iOyDV+Gg= Subject key identifier: 16:95:F4:BD:D1:65:26:D0:4E:2F:E1:4B:45:CF:56:46:77:97:55:FE Authority key identifier: 16:58:9C:DE:5D:C3:33:9C:E7:BB:D4:BB:1C:7C:14:64:74:97:C9:56 Certificate issuer: /CN=16589CDE5DC3339CE7BBD4BB1C7C14647497C956 Certificate serial: 50A56E99508450692AFCAA3147D99028E43672E9 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/16589CDE5DC3339CE7BBD4BB1C7C14647497C956.cer Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_3db8163f69224798ac2c463c0bca4d6b/0/16589CDE5DC3339CE7BBD4BB1C7C14647497C956.mft Manifest number: 0334 Signing time: Thu 30 Apr 2026 05:38:02 +0000 Manifest this update: Thu 30 Apr 2026 05:33:02 +0000 Manifest next update: Fri 01 May 2026 08:19:02 +0000 Files and hashes: 1: 326131313a663263303a666666623a3a2f34382d3438203d3e20323033313035.roa (hash: oR5xdewUw9CCHlEGMS0Z24xgtiBxrNN/CytrFhUuC90=) 2: 16589CDE5DC3339CE7BBD4BB1C7C14647497C956.crl (hash: oVarDZ3vn0X1q241iq76m/dRRFP+T0V/0VtuVIQBSs0=) Validation: OK Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_3db8163f69224798ac2c463c0bca4d6b/0/16589CDE5DC3339CE7BBD4BB1C7C14647497C956.crl rsync://rpki-repo.as207960.net/repo/rpki_ca_3db8163f69224798ac2c463c0bca4d6b/0/16589CDE5DC3339CE7BBD4BB1C7C14647497C956.mft rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/16589CDE5DC3339CE7BBD4BB1C7C14647497C956.cer rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 01 May 2026 08:19:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:a5:6e:99:50:84:50:69:2a:fc:aa:31:47:d9:90:28:e4:36:72:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=16589CDE5DC3339CE7BBD4BB1C7C14647497C956 Validity Not Before: Apr 30 05:33:02 2026 GMT Not After : May 1 08:19:02 2026 GMT Subject: CN=1695F4BDD16526D04E2FE14B45CF5646779755FE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:10:be:50:05:16:7c:f7:48:5e:3c:47:cd:75: dc:88:f8:6a:ad:2b:66:a3:3a:33:70:e8:43:20:76: 38:09:eb:38:44:37:84:01:fa:28:56:00:5b:d2:cc: 64:d1:5c:c2:cc:55:85:4b:25:1e:99:84:2f:57:c1: a4:f7:ad:40:2f:7e:4f:92:c7:25:c5:b3:f1:c0:b9: e0:71:d0:a8:7f:61:88:5a:ea:b7:f7:d5:68:df:92: e2:9f:73:bf:d9:47:8e:0d:06:1c:1f:2d:91:f6:7f: 51:81:bd:6d:6f:78:c2:b3:c8:8f:a3:95:14:22:26: d1:3a:59:e2:23:e5:fc:7e:14:8e:58:2a:c1:2f:66: eb:7b:77:f8:fe:59:8e:4c:eb:bf:4d:0a:69:3a:17: 18:fd:52:02:5c:e3:64:30:0c:5a:f5:09:eb:70:c1: ea:4a:e3:4c:fb:5b:b2:7f:80:07:b8:1f:d5:7e:77: 3c:c2:99:76:9e:4d:45:ab:6b:da:18:0a:8b:61:5a: 9f:88:60:aa:e0:6b:91:a9:89:a4:d1:96:0c:ec:1e: 87:b6:5f:a5:22:07:cc:d6:29:b0:36:47:64:fc:70: 3c:10:71:21:e6:d3:28:e9:df:2d:1e:fc:b0:95:23: ce:dc:62:b1:b7:f9:a3:c6:41:aa:e0:75:a5:50:ed: e0:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:95:F4:BD:D1:65:26:D0:4E:2F:E1:4B:45:CF:56:46:77:97:55:FE X509v3 Authority Key Identifier: keyid:16:58:9C:DE:5D:C3:33:9C:E7:BB:D4:BB:1C:7C:14:64:74:97:C9:56 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_3db8163f69224798ac2c463c0bca4d6b/0/16589CDE5DC3339CE7BBD4BB1C7C14647497C956.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/16589CDE5DC3339CE7BBD4BB1C7C14647497C956.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_3db8163f69224798ac2c463c0bca4d6b/0/16589CDE5DC3339CE7BBD4BB1C7C14647497C956.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:3a:88:60:9c:af:0a:fa:b8:ef:8f:f9:4b:cb:a0:1c:2f:3a: c5:aa:f3:c5:47:1d:3b:70:92:87:09:69:10:d1:df:fc:58:a6: e9:b7:f3:c6:5f:07:1f:a9:fd:4b:d5:1e:dc:12:cc:3b:2a:3a: 59:29:35:63:e2:6e:70:f0:1a:57:b1:7b:56:2e:e1:f9:88:4a: 03:98:25:f2:e1:ca:9f:6f:2e:d5:eb:7a:7e:44:ef:4d:db:b5: 54:58:33:03:87:7a:51:b6:3a:28:52:d7:87:e8:33:98:af:a1: 33:8b:f1:35:4f:0d:f7:08:ec:c2:d0:76:06:56:13:be:ea:f0: 04:7d:1a:e4:c3:c5:c7:17:dd:1a:a9:43:f6:15:56:ec:4c:eb: 5e:8c:7a:45:42:cb:59:43:44:74:8d:08:00:ea:cc:3e:01:cd: 38:c4:38:35:26:26:e3:76:12:77:33:e7:36:b9:6e:4a:d4:89: 41:9c:7f:62:97:01:a8:e8:45:e5:8c:3c:d9:28:a9:46:fc:92: 56:8f:09:b7:17:e6:ea:5b:47:65:3a:e8:76:5c:1e:1d:a6:e9: fc:12:11:04:b1:77:2f:0a:bd:e0:d9:b4:d2:8b:8a:71:e6:c2: fe:97:9a:2f:2f:6a:3d:4f:0d:92:33:d9:9e:9a:7f:bc:ca:0e: a5:6d:86:d7 -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIUUKVumVCEUGkq/KoxR9mQKOQ2cukwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTY1ODlDREU1REMzMzM5Q0U3QkJENEJCMUM3QzE0NjQ3 NDk3Qzk1NjAeFw0yNjA0MzAwNTMzMDJaFw0yNjA1MDEwODE5MDJaMDMxMTAvBgNV BAMTKDE2OTVGNEJERDE2NTI2RDA0RTJGRTE0QjQ1Q0Y1NjQ2Nzc5NzU1RkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuEL5QBRZ890hePEfNddyI+Gqt K2ajOjNw6EMgdjgJ6zhEN4QB+ihWAFvSzGTRXMLMVYVLJR6ZhC9XwaT3rUAvfk+S xyXFs/HAueBx0Kh/YYha6rf31WjfkuKfc7/ZR44NBhwfLZH2f1GBvW1veMKzyI+j lRQiJtE6WeIj5fx+FI5YKsEvZut7d/j+WY5M679NCmk6Fxj9UgJc42QwDFr1Cetw wepK40z7W7J/gAe4H9V+dzzCmXaeTUWra9oYCothWp+IYKrga5GpiaTRlgzsHoe2 X6UiB8zWKbA2R2T8cDwQcSHm0yjp3y0e/LCVI87cYrG3+aPGQargdaVQ7eC1AgMB AAGjggJ4MIICdDAdBgNVHQ4EFgQUFpX0vdFlJtBOL+FLRc9WRneXVf4wHwYDVR0j BBgwFoAUFlic3l3DM5znu9S7HHwUZHSXyVYwDgYDVR0PAQH/BAQDAgeAMIGPBgNV HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv cmVwby9ycGtpX2NhXzNkYjgxNjNmNjkyMjQ3OThhYzJjNDYzYzBiY2E0ZDZiLzAv MTY1ODlDREU1REMzMzM5Q0U3QkJENEJCMUM3QzE0NjQ3NDk3Qzk1Ni5jcmwwgZ4G CCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5wYWFz LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQxYjUtODJh MC1mMGQwMmMwM2EyYzYvNy8xNjU4OUNERTVEQzMzMzlDRTdCQkQ0QkIxQzdDMTQ2 NDc0OTdDOTU2LmNlcjCBmgYIKwYBBQUHAQsEgY0wgYowgYcGCCsGAQUFBzALhnty c3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQvcmVwby9ycGtpX2NhXzNkYjgx NjNmNjkyMjQ3OThhYzJjNDYzYzBiY2E0ZDZiLzAvMTY1ODlDREU1REMzMzM5Q0U3 QkJENEJCMUM3QzE0NjQ3NDk3Qzk1Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAFc6iGCcrwr6uO+P+UvL oBwvOsWq88VHHTtwkocJaRDR3/xYpum388ZfBx+p/UvVHtwSzDsqOlkpNWPibnDw Glexe1Yu4fmISgOYJfLhyp9vLtXren5E703btVRYMwOHelG2OihS14foM5ivoTOL 8TVPDfcI7MLQdgZWE77q8AR9GuTDxccX3RqpQ/YVVuxM616MekVCy1lDRHSNCADq zD4BzTjEODUmJuN2Encz5za5bkrUiUGcf2KXAajoReWMPNkoqUb8klaPCbcX5upb R2U66HZcHh2m6fwSEQSxdy8KveDZtNKLinHmwv6Xmi8vaj1PDZIz2Z6af7zKDqVt htc= -----END CERTIFICATE-----Generated at Thu Apr 30 14:54:22 2026 by rpki-client