$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_3db8163f69224798ac2c463c0bca4d6b/0/16589CDE5DC3339CE7BBD4BB1C7C14647497C956.mft File: 16589CDE5DC3339CE7BBD4BB1C7C14647497C956.mft (raw, json) Hash identifier: Vq4FD+4a4Q7V7pIDlkslIIQOcuy6GmvufwNsr/mR+O8= Subject key identifier: A0:20:66:71:EB:26:47:10:33:09:84:CD:D1:01:AB:06:3B:E9:01:EF Authority key identifier: 16:58:9C:DE:5D:C3:33:9C:E7:BB:D4:BB:1C:7C:14:64:74:97:C9:56 Certificate issuer: /CN=16589CDE5DC3339CE7BBD4BB1C7C14647497C956 Certificate serial: 7A4F80A6BC9AE798DB48E2C46C48F96AC14AC358 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/16589CDE5DC3339CE7BBD4BB1C7C14647497C956.cer Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_3db8163f69224798ac2c463c0bca4d6b/0/16589CDE5DC3339CE7BBD4BB1C7C14647497C956.mft Manifest number: 0263 Signing time: Mon 27 Oct 2025 00:51:47 +0000 Manifest this update: Mon 27 Oct 2025 00:46:47 +0000 Manifest next update: Tue 28 Oct 2025 01:58:47 +0000 Files and hashes: 1: 326131313a663263303a666666623a3a2f34382d3438203d3e20323033313035.roa (hash: oR5xdewUw9CCHlEGMS0Z24xgtiBxrNN/CytrFhUuC90=) 2: 16589CDE5DC3339CE7BBD4BB1C7C14647497C956.crl (hash: QnnS3WQLsjXwkj7n9/1kKHxGFfcH5OqUobCMiSLP1YU=) Validation: OK Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_3db8163f69224798ac2c463c0bca4d6b/0/16589CDE5DC3339CE7BBD4BB1C7C14647497C956.crl rsync://rpki-repo.as207960.net/repo/rpki_ca_3db8163f69224798ac2c463c0bca4d6b/0/16589CDE5DC3339CE7BBD4BB1C7C14647497C956.mft rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/16589CDE5DC3339CE7BBD4BB1C7C14647497C956.cer rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 28 Oct 2025 01:58:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:4f:80:a6:bc:9a:e7:98:db:48:e2:c4:6c:48:f9:6a:c1:4a:c3:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=16589CDE5DC3339CE7BBD4BB1C7C14647497C956 Validity Not Before: Oct 27 00:46:47 2025 GMT Not After : Oct 28 01:58:47 2025 GMT Subject: CN=A0206671EB264710330984CDD101AB063BE901EF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:fe:52:e3:b4:f5:79:88:7d:71:c0:10:46:49: 42:b9:7c:ef:4c:3b:f5:c5:5e:db:67:9e:ad:b1:f1: 8f:c7:78:fd:fe:8b:c8:29:d5:f0:21:bb:05:4b:f5: de:88:e4:c2:d1:4e:4f:2a:7e:94:77:2d:e4:ad:09: 49:10:ed:b8:ef:33:9b:e0:cb:e6:72:31:dd:ef:d2: e6:e0:60:5e:23:3f:57:b0:36:ec:7a:1a:cf:4a:9f: 4b:79:ff:4b:93:37:08:92:08:17:0b:85:08:c7:e1: 9e:cc:f2:e7:6d:1f:18:7e:f6:0f:56:9f:b3:96:30: cc:ca:8f:ae:fb:d8:a5:e2:b9:ac:35:fc:db:f5:b6: c8:8d:cc:46:4e:f7:3a:6d:8d:ba:c4:2d:9b:5e:59: c6:7a:4f:fc:51:e3:7c:72:43:55:d7:39:48:5d:1c: 9d:8a:6a:7d:07:47:22:4e:4e:92:70:2f:44:c4:b7: 54:38:fd:c8:f3:38:e0:e5:22:0e:8f:43:80:23:08: f1:2b:d2:78:a6:cb:b7:75:55:e5:5d:31:88:26:23: e7:0d:dd:40:cd:52:ee:d9:e6:45:5f:9f:d7:68:0f: 85:f5:94:d7:70:04:04:1d:71:ff:f7:7e:81:9b:de: 3e:75:35:5c:b9:9f:00:1c:3e:da:34:2a:64:ef:51: ff:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:20:66:71:EB:26:47:10:33:09:84:CD:D1:01:AB:06:3B:E9:01:EF X509v3 Authority Key Identifier: keyid:16:58:9C:DE:5D:C3:33:9C:E7:BB:D4:BB:1C:7C:14:64:74:97:C9:56 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_3db8163f69224798ac2c463c0bca4d6b/0/16589CDE5DC3339CE7BBD4BB1C7C14647497C956.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/16589CDE5DC3339CE7BBD4BB1C7C14647497C956.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_3db8163f69224798ac2c463c0bca4d6b/0/16589CDE5DC3339CE7BBD4BB1C7C14647497C956.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b2:ee:30:39:1f:5d:11:b0:a9:3c:dc:38:13:ce:1a:95:08:7d: 74:0d:fb:06:1a:25:1d:ed:16:8d:5c:6a:da:c8:aa:48:9b:a5: 2d:fc:d9:a2:f6:ac:4c:de:56:b6:2a:48:d6:ee:16:fc:02:35: 72:13:b5:f1:e1:a2:23:28:75:03:16:18:55:a0:0b:9a:f6:92: 23:8b:6f:b4:d0:6e:96:fc:aa:01:be:18:81:5f:a9:69:d6:d6: cf:bc:63:07:48:1c:db:dd:83:17:7e:4a:f3:bf:1c:47:32:d6: 32:cc:c8:06:83:1a:d3:b3:fe:3c:d5:c3:da:19:97:e0:8c:8e: 13:7c:9a:c0:77:27:70:93:a4:b6:e7:2e:43:7a:66:04:1f:f0: e8:88:56:d7:42:9b:ed:22:ac:cb:51:9e:89:d4:e4:39:4c:53: af:76:ba:55:b7:09:fe:d9:75:90:e2:22:26:f7:5f:15:cd:7d: 7b:f3:17:f2:00:34:aa:42:c9:f9:b8:1c:d0:ff:ff:67:a8:eb: 78:58:2a:5a:ea:70:f2:1f:97:a4:a7:31:0a:52:d1:ca:7a:f1: 7b:a2:c3:8a:8a:40:cc:cb:1b:cc:b6:4e:24:6b:b0:26:59:bd: 82:61:47:cc:e3:96:e4:31:2e:9c:cf:6a:cc:38:76:87:69:03: 68:90:6c:e3 -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIUek+Aprya55jbSOLEbEj5asFKw1gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTY1ODlDREU1REMzMzM5Q0U3QkJENEJCMUM3QzE0NjQ3 NDk3Qzk1NjAeFw0yNTEwMjcwMDQ2NDdaFw0yNTEwMjgwMTU4NDdaMDMxMTAvBgNV BAMTKEEwMjA2NjcxRUIyNjQ3MTAzMzA5ODRDREQxMDFBQjA2M0JFOTAxRUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDR/lLjtPV5iH1xwBBGSUK5fO9M O/XFXttnnq2x8Y/HeP3+i8gp1fAhuwVL9d6I5MLRTk8qfpR3LeStCUkQ7bjvM5vg y+ZyMd3v0ubgYF4jP1ewNux6Gs9Kn0t5/0uTNwiSCBcLhQjH4Z7M8udtHxh+9g9W n7OWMMzKj6772KXiuaw1/Nv1tsiNzEZO9zptjbrELZteWcZ6T/xR43xyQ1XXOUhd HJ2Kan0HRyJOTpJwL0TEt1Q4/cjzOODlIg6PQ4AjCPEr0nimy7d1VeVdMYgmI+cN 3UDNUu7Z5kVfn9doD4X1lNdwBAQdcf/3foGb3j51NVy5nwAcPto0KmTvUf9XAgMB AAGjggJ4MIICdDAdBgNVHQ4EFgQUoCBmcesmRxAzCYTN0QGrBjvpAe8wHwYDVR0j BBgwFoAUFlic3l3DM5znu9S7HHwUZHSXyVYwDgYDVR0PAQH/BAQDAgeAMIGPBgNV HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv cmVwby9ycGtpX2NhXzNkYjgxNjNmNjkyMjQ3OThhYzJjNDYzYzBiY2E0ZDZiLzAv MTY1ODlDREU1REMzMzM5Q0U3QkJENEJCMUM3QzE0NjQ3NDk3Qzk1Ni5jcmwwgZ4G CCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5wYWFz LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQxYjUtODJh MC1mMGQwMmMwM2EyYzYvNy8xNjU4OUNERTVEQzMzMzlDRTdCQkQ0QkIxQzdDMTQ2 NDc0OTdDOTU2LmNlcjCBmgYIKwYBBQUHAQsEgY0wgYowgYcGCCsGAQUFBzALhnty c3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQvcmVwby9ycGtpX2NhXzNkYjgx NjNmNjkyMjQ3OThhYzJjNDYzYzBiY2E0ZDZiLzAvMTY1ODlDREU1REMzMzM5Q0U3 QkJENEJCMUM3QzE0NjQ3NDk3Qzk1Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBALLuMDkfXRGwqTzcOBPO GpUIfXQN+wYaJR3tFo1catrIqkibpS382aL2rEzeVrYqSNbuFvwCNXITtfHhoiMo dQMWGFWgC5r2kiOLb7TQbpb8qgG+GIFfqWnW1s+8YwdIHNvdgxd+SvO/HEcy1jLM yAaDGtOz/jzVw9oZl+CMjhN8msB3J3CTpLbnLkN6ZgQf8OiIVtdCm+0irMtRnonU 5DlMU692ulW3Cf7ZdZDiIib3XxXNfXvzF/IANKpCyfm4HND//2eo63hYKlrqcPIf l6SnMQpS0cp68Xuiw4qKQMzLG8y2TiRrsCZZvYJhR8zjluQxLpzPasw4dodpA2iQ bOM= -----END CERTIFICATE-----Generated at Mon Oct 27 15:19:40 2025 by rpki-client