$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_9f297e7e1f534033aaf93ce1e3b46ffc/0/16821FD22FFB74E3D7FAC3AA03BE6D00145B9A3E.mft File: 16821FD22FFB74E3D7FAC3AA03BE6D00145B9A3E.mft (raw, json) Hash identifier: IcyE0QctNAr+sEMcgSI2o3MnjJ7TWiGp0p2tuBU1mYw= Subject key identifier: BD:A8:D9:53:D7:F9:58:EB:7C:66:37:93:BB:CA:C2:77:D9:66:6A:89 Authority key identifier: 16:82:1F:D2:2F:FB:74:E3:D7:FA:C3:AA:03:BE:6D:00:14:5B:9A:3E Certificate issuer: /CN=16821FD22FFB74E3D7FAC3AA03BE6D00145B9A3E Certificate serial: 34A266552C54307C5606F08F59013CC7DF4562D8 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/16821FD22FFB74E3D7FAC3AA03BE6D00145B9A3E.cer Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_9f297e7e1f534033aaf93ce1e3b46ffc/0/16821FD22FFB74E3D7FAC3AA03BE6D00145B9A3E.mft Manifest number: 025C Signing time: Mon 27 Oct 2025 01:41:51 +0000 Manifest this update: Mon 27 Oct 2025 01:36:51 +0000 Manifest next update: Tue 28 Oct 2025 04:26:51 +0000 Files and hashes: 1: 16821FD22FFB74E3D7FAC3AA03BE6D00145B9A3E.crl (hash: VWguJwhofP2Ma+6Bzg5mokj4Vb6GatS5WSOBs46Z9BM=) Validation: OK Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_9f297e7e1f534033aaf93ce1e3b46ffc/0/16821FD22FFB74E3D7FAC3AA03BE6D00145B9A3E.crl rsync://rpki-repo.as207960.net/repo/rpki_ca_9f297e7e1f534033aaf93ce1e3b46ffc/0/16821FD22FFB74E3D7FAC3AA03BE6D00145B9A3E.mft rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/16821FD22FFB74E3D7FAC3AA03BE6D00145B9A3E.cer rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 28 Oct 2025 02:00:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:a2:66:55:2c:54:30:7c:56:06:f0:8f:59:01:3c:c7:df:45:62:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=16821FD22FFB74E3D7FAC3AA03BE6D00145B9A3E Validity Not Before: Oct 27 01:36:51 2025 GMT Not After : Oct 28 04:26:51 2025 GMT Subject: CN=BDA8D953D7F958EB7C663793BBCAC277D9666A89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:0f:e9:79:bc:02:7b:14:65:05:15:af:f2:57: 94:98:36:d9:cf:0e:31:04:b6:a0:c3:33:31:40:e6: a7:58:40:79:11:3c:ca:79:65:64:86:0d:63:9d:65: 4f:c1:5e:13:10:1b:47:69:89:7a:77:59:62:e7:af: 8a:03:f8:dc:2d:11:5d:2d:a1:19:e8:2f:39:07:26: e4:24:46:09:25:bb:d5:6a:b1:06:f1:1b:60:80:90: d2:d7:32:52:f0:30:30:4a:85:11:f0:05:1a:f4:b2: f3:1d:4c:36:a6:fd:fa:f1:90:8b:a8:d7:6b:64:f8: dc:15:1e:ef:c4:5e:21:29:fc:86:d6:e1:00:37:00: 59:0d:57:75:dc:db:a0:4c:0a:01:c8:8b:87:60:1f: f1:01:b9:d0:1b:00:3c:37:e0:60:aa:8a:b5:d5:91: 67:d1:89:9a:80:56:15:70:77:1e:7f:c9:f0:de:fe: 4e:ab:dc:5f:42:e0:cb:6b:e6:0f:97:e8:ca:90:5a: 7e:65:3b:33:17:ee:e1:21:74:6b:69:18:4f:8e:48: 04:80:20:1e:f8:39:0f:75:bc:69:3d:ef:53:c3:fe: 16:a6:c6:2b:f2:88:f6:f2:64:07:c4:43:99:dc:d1: 07:b6:3c:6b:6e:2d:ec:77:fe:3a:ae:62:cf:40:14: 5e:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:A8:D9:53:D7:F9:58:EB:7C:66:37:93:BB:CA:C2:77:D9:66:6A:89 X509v3 Authority Key Identifier: keyid:16:82:1F:D2:2F:FB:74:E3:D7:FA:C3:AA:03:BE:6D:00:14:5B:9A:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_9f297e7e1f534033aaf93ce1e3b46ffc/0/16821FD22FFB74E3D7FAC3AA03BE6D00145B9A3E.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/16821FD22FFB74E3D7FAC3AA03BE6D00145B9A3E.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_9f297e7e1f534033aaf93ce1e3b46ffc/0/16821FD22FFB74E3D7FAC3AA03BE6D00145B9A3E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:7c:28:3f:ac:fd:ce:aa:ec:da:fb:7e:76:bc:88:7d:a1:6f: 74:a8:70:f2:b7:c9:e9:8b:b6:62:d8:24:54:09:94:ac:e6:1f: 1e:51:be:b2:55:af:79:11:5f:96:0c:09:c2:c6:62:fc:f1:fc: 14:96:ed:e0:66:79:3d:b4:86:47:8a:0b:d1:cf:e0:6b:c8:8a: f0:b2:99:50:7f:34:98:34:4c:c5:be:f0:c9:1f:c2:b6:a1:85: e6:4d:5a:58:55:49:a8:76:1e:08:4f:0e:12:0f:e4:ff:09:49: 39:8d:be:ca:e7:56:a8:de:22:e8:6f:2f:b0:b5:72:6b:34:3f: 4f:5b:17:f1:29:01:e5:09:14:48:29:74:53:d8:43:37:ff:b7: c2:60:31:93:4a:5b:28:a6:3a:d7:ad:64:7c:7f:cd:b6:3f:38: d4:85:1b:9a:b1:5d:2e:6a:94:26:0f:d6:70:3e:c5:1a:67:99: 3a:d7:4d:12:91:47:4e:8c:0d:4a:85:1f:db:80:ab:71:05:5a: 3c:d4:f9:a9:ba:53:87:85:14:ae:4e:74:64:5b:8a:a4:38:70: 0d:e8:79:84:f0:87:a1:53:78:ae:99:0a:29:70:05:25:47:c0: 80:a6:52:32:6d:2c:85:7f:e7:cd:8b:f8:0a:41:0c:cd:c7:4c: ef:cc:f9:e0 -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIUNKJmVSxUMHxWBvCPWQE8x99FYtgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTY4MjFGRDIyRkZCNzRFM0Q3RkFDM0FBMDNCRTZEMDAx NDVCOUEzRTAeFw0yNTEwMjcwMTM2NTFaFw0yNTEwMjgwNDI2NTFaMDMxMTAvBgNV BAMTKEJEQThEOTUzRDdGOTU4RUI3QzY2Mzc5M0JCQ0FDMjc3RDk2NjZBODkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwD+l5vAJ7FGUFFa/yV5SYNtnP DjEEtqDDMzFA5qdYQHkRPMp5ZWSGDWOdZU/BXhMQG0dpiXp3WWLnr4oD+NwtEV0t oRnoLzkHJuQkRgklu9VqsQbxG2CAkNLXMlLwMDBKhRHwBRr0svMdTDam/frxkIuo 12tk+NwVHu/EXiEp/IbW4QA3AFkNV3Xc26BMCgHIi4dgH/EBudAbADw34GCqirXV kWfRiZqAVhVwdx5/yfDe/k6r3F9C4Mtr5g+X6MqQWn5lOzMX7uEhdGtpGE+OSASA IB74OQ91vGk971PD/hamxivyiPbyZAfEQ5nc0Qe2PGtuLex3/jquYs9AFF6XAgMB AAGjggJ4MIICdDAdBgNVHQ4EFgQUvajZU9f5WOt8ZjeTu8rCd9lmaokwHwYDVR0j BBgwFoAUFoIf0i/7dOPX+sOqA75tABRbmj4wDgYDVR0PAQH/BAQDAgeAMIGPBgNV HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv cmVwby9ycGtpX2NhXzlmMjk3ZTdlMWY1MzQwMzNhYWY5M2NlMWUzYjQ2ZmZjLzAv MTY4MjFGRDIyRkZCNzRFM0Q3RkFDM0FBMDNCRTZEMDAxNDVCOUEzRS5jcmwwgZ4G CCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5wYWFz LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQxYjUtODJh MC1mMGQwMmMwM2EyYzYvNy8xNjgyMUZEMjJGRkI3NEUzRDdGQUMzQUEwM0JFNkQw MDE0NUI5QTNFLmNlcjCBmgYIKwYBBQUHAQsEgY0wgYowgYcGCCsGAQUFBzALhnty c3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQvcmVwby9ycGtpX2NhXzlmMjk3 ZTdlMWY1MzQwMzNhYWY5M2NlMWUzYjQ2ZmZjLzAvMTY4MjFGRDIyRkZCNzRFM0Q3 RkFDM0FBMDNCRTZEMDAxNDVCOUEzRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAFV8KD+s/c6q7Nr7fna8 iH2hb3SocPK3yemLtmLYJFQJlKzmHx5RvrJVr3kRX5YMCcLGYvzx/BSW7eBmeT20 hkeKC9HP4GvIivCymVB/NJg0TMW+8MkfwrahheZNWlhVSah2HghPDhIP5P8JSTmN vsrnVqjeIuhvL7C1cms0P09bF/EpAeUJFEgpdFPYQzf/t8JgMZNKWyimOtetZHx/ zbY/ONSFG5qxXS5qlCYP1nA+xRpnmTrXTRKRR06MDUqFH9uAq3EFWjzU+am6U4eF FK5OdGRbiqQ4cA3oeYTwh6FTeK6ZCilwBSVHwICmUjJtLIV/582L+ApBDM3HTO/M +eA= -----END CERTIFICATE-----Generated at Mon Oct 27 15:41:16 2025 by rpki-client