$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_3db8163f69224798ac2c463c0bca4d6b/0/16589CDE5DC3339CE7BBD4BB1C7C14647497C956.mft File: 16589CDE5DC3339CE7BBD4BB1C7C14647497C956.mft (raw, json) Hash identifier: RzWW6slczxw0D613cw5Z+FVz2p7ZY0AYcwY2HrpjkS0= Subject key identifier: 49:15:86:5A:5B:3E:19:92:3E:D1:3E:D5:EF:FD:61:25:A6:47:32:A7 Authority key identifier: 16:58:9C:DE:5D:C3:33:9C:E7:BB:D4:BB:1C:7C:14:64:74:97:C9:56 Certificate issuer: /CN=16589CDE5DC3339CE7BBD4BB1C7C14647497C956 Certificate serial: 44FAFB018698A16BD26EC0EA9700FB3437C3CAFC Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/16589CDE5DC3339CE7BBD4BB1C7C14647497C956.cer Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_3db8163f69224798ac2c463c0bca4d6b/0/16589CDE5DC3339CE7BBD4BB1C7C14647497C956.mft Manifest number: 02F5 Signing time: Fri 13 Mar 2026 09:12:36 +0000 Manifest this update: Fri 13 Mar 2026 09:07:33 +0000 Manifest next update: Sat 14 Mar 2026 12:33:33 +0000 Files and hashes: 1: 326131313a663263303a666666623a3a2f34382d3438203d3e20323033313035.roa (hash: oR5xdewUw9CCHlEGMS0Z24xgtiBxrNN/CytrFhUuC90=) 2: 16589CDE5DC3339CE7BBD4BB1C7C14647497C956.crl (hash: LY57XErd3/qIcYoqe6P7T0zeVoOWv8lpMqmCjYEzhUY=) Validation: OK Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_3db8163f69224798ac2c463c0bca4d6b/0/16589CDE5DC3339CE7BBD4BB1C7C14647497C956.crl rsync://rpki-repo.as207960.net/repo/rpki_ca_3db8163f69224798ac2c463c0bca4d6b/0/16589CDE5DC3339CE7BBD4BB1C7C14647497C956.mft rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/16589CDE5DC3339CE7BBD4BB1C7C14647497C956.cer rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 14 Mar 2026 12:25:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:fa:fb:01:86:98:a1:6b:d2:6e:c0:ea:97:00:fb:34:37:c3:ca:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=16589CDE5DC3339CE7BBD4BB1C7C14647497C956 Validity Not Before: Mar 13 09:07:33 2026 GMT Not After : Mar 14 12:33:33 2026 GMT Subject: CN=4915865A5B3E19923ED13ED5EFFD6125A64732A7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:bf:3f:c4:c6:5d:97:c4:31:98:ba:a2:78:ec: c9:4c:57:5c:24:f1:4c:77:58:7c:c3:4d:07:47:c6: 2e:d1:d8:37:2e:ca:8d:61:e1:b3:d2:49:92:de:ac: e1:98:55:c3:48:06:d6:a2:f6:c4:b4:2d:9a:42:8a: 43:84:62:71:17:af:27:67:f0:29:8a:8e:a2:d3:63: c7:49:68:4b:15:27:92:0e:c7:f0:03:75:19:54:2f: fd:6c:35:fe:d2:0e:92:ab:e1:39:dd:ca:9d:f9:a0: 01:31:f4:87:30:29:ac:8c:7b:c9:55:52:38:5a:1d: 02:d9:61:fd:43:03:67:ec:7c:84:f5:24:b7:4b:35: 1e:8a:80:69:9b:97:36:fd:ae:21:3e:cf:85:f1:41: 5a:75:36:7c:e2:40:2a:e9:82:fd:8c:b1:6e:f2:9e: 53:a3:5c:7a:bc:5e:5a:8d:90:a6:90:13:46:aa:5c: e9:cb:37:34:f0:37:19:e1:5c:2e:14:ef:53:0d:3c: 01:ea:61:59:c6:24:d6:be:f9:58:d8:49:5c:5a:9f: 59:9e:32:d3:08:bf:b8:2f:c6:aa:f6:d6:20:b3:a0: 65:3d:30:bf:09:a3:c4:40:49:21:cd:52:8b:a0:75: d7:cd:70:10:a1:bc:60:c0:a5:64:51:c8:7e:07:48: 57:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:15:86:5A:5B:3E:19:92:3E:D1:3E:D5:EF:FD:61:25:A6:47:32:A7 X509v3 Authority Key Identifier: keyid:16:58:9C:DE:5D:C3:33:9C:E7:BB:D4:BB:1C:7C:14:64:74:97:C9:56 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_3db8163f69224798ac2c463c0bca4d6b/0/16589CDE5DC3339CE7BBD4BB1C7C14647497C956.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/16589CDE5DC3339CE7BBD4BB1C7C14647497C956.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_3db8163f69224798ac2c463c0bca4d6b/0/16589CDE5DC3339CE7BBD4BB1C7C14647497C956.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:d7:80:48:d7:1a:b6:0e:33:d1:5f:ce:c9:8d:27:e4:a4:b7: 78:e2:84:f2:0f:4e:0c:4a:c3:1a:57:80:a7:ce:7b:30:9c:fd: 86:ca:7a:b0:1d:37:0e:86:02:50:74:52:40:e0:d0:0f:a4:b5: 00:e1:6a:69:71:25:f0:2c:7c:8b:dc:4f:95:a7:88:3d:2c:4a: dd:f9:32:fb:54:02:e5:b6:e6:60:e6:cc:d7:52:d8:a1:be:0c: 09:ab:a1:f6:17:7e:43:e2:50:fe:71:50:06:12:e5:63:8c:b2: 87:8b:f7:7b:99:61:23:a8:f8:e1:4f:67:5d:34:87:de:cf:90: e7:89:54:be:71:2a:fc:61:07:b5:f1:98:ac:cf:6b:2b:5d:d6: b6:69:be:27:bd:2f:2b:ac:df:e7:0e:2e:e0:b3:b4:4e:5d:8f: 53:c0:48:bd:b1:59:47:c7:a6:45:ee:9b:4e:78:62:f2:e6:2d: c5:69:11:9a:d4:c2:59:b9:bd:6f:60:37:0e:41:4e:09:70:0f: b0:26:78:2a:d1:7f:af:7b:77:c1:b2:1f:0c:5d:81:99:db:41: bf:23:51:c9:58:74:31:cf:32:64:14:a7:12:00:99:c1:2a:50: 5f:a3:8b:ff:a9:69:c4:50:9d:19:be:dc:20:5b:db:b2:80:4e: 8e:6b:8f:e4 -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIURPr7AYaYoWvSbsDqlwD7NDfDyvwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTY1ODlDREU1REMzMzM5Q0U3QkJENEJCMUM3QzE0NjQ3 NDk3Qzk1NjAeFw0yNjAzMTMwOTA3MzNaFw0yNjAzMTQxMjMzMzNaMDMxMTAvBgNV BAMTKDQ5MTU4NjVBNUIzRTE5OTIzRUQxM0VENUVGRkQ2MTI1QTY0NzMyQTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbvz/Exl2XxDGYuqJ47MlMV1wk 8Ux3WHzDTQdHxi7R2Dcuyo1h4bPSSZLerOGYVcNIBtai9sS0LZpCikOEYnEXrydn 8CmKjqLTY8dJaEsVJ5IOx/ADdRlUL/1sNf7SDpKr4Tndyp35oAEx9IcwKayMe8lV UjhaHQLZYf1DA2fsfIT1JLdLNR6KgGmblzb9riE+z4XxQVp1NnziQCrpgv2MsW7y nlOjXHq8XlqNkKaQE0aqXOnLNzTwNxnhXC4U71MNPAHqYVnGJNa++VjYSVxan1me MtMIv7gvxqr21iCzoGU9ML8Jo8RASSHNUougddfNcBChvGDApWRRyH4HSFeNAgMB AAGjggJ4MIICdDAdBgNVHQ4EFgQUSRWGWls+GZI+0T7V7/1hJaZHMqcwHwYDVR0j BBgwFoAUFlic3l3DM5znu9S7HHwUZHSXyVYwDgYDVR0PAQH/BAQDAgeAMIGPBgNV HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv cmVwby9ycGtpX2NhXzNkYjgxNjNmNjkyMjQ3OThhYzJjNDYzYzBiY2E0ZDZiLzAv MTY1ODlDREU1REMzMzM5Q0U3QkJENEJCMUM3QzE0NjQ3NDk3Qzk1Ni5jcmwwgZ4G CCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5wYWFz LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQxYjUtODJh MC1mMGQwMmMwM2EyYzYvNy8xNjU4OUNERTVEQzMzMzlDRTdCQkQ0QkIxQzdDMTQ2 NDc0OTdDOTU2LmNlcjCBmgYIKwYBBQUHAQsEgY0wgYowgYcGCCsGAQUFBzALhnty c3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQvcmVwby9ycGtpX2NhXzNkYjgx NjNmNjkyMjQ3OThhYzJjNDYzYzBiY2E0ZDZiLzAvMTY1ODlDREU1REMzMzM5Q0U3 QkJENEJCMUM3QzE0NjQ3NDk3Qzk1Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBADHXgEjXGrYOM9FfzsmN J+Skt3jihPIPTgxKwxpXgKfOezCc/YbKerAdNw6GAlB0UkDg0A+ktQDhamlxJfAs fIvcT5WniD0sSt35MvtUAuW25mDmzNdS2KG+DAmrofYXfkPiUP5xUAYS5WOMsoeL 93uZYSOo+OFPZ100h97PkOeJVL5xKvxhB7XxmKzPaytd1rZpvie9Lyus3+cOLuCz tE5dj1PASL2xWUfHpkXum054YvLmLcVpEZrUwlm5vW9gNw5BTglwD7AmeCrRf697 d8GyHwxdgZnbQb8jUclYdDHPMmQUpxIAmcEqUF+ji/+pacRQnRm+3CBb27KATo5r j+Q= -----END CERTIFICATE-----Generated at Sat Mar 14 05:42:41 2026 by rpki-client