$ rpki-client -vvvf rpki-repo.as207960.net/repo/rpki_ca_9f297e7e1f534033aaf93ce1e3b46ffc/0/16821FD22FFB74E3D7FAC3AA03BE6D00145B9A3E.mft File: 16821FD22FFB74E3D7FAC3AA03BE6D00145B9A3E.mft (raw, json) Hash identifier: Nno6akOF0Zi4RXLC+cWzp89kiSh6TIvZd1/hKaibFRs= Subject key identifier: A5:28:5C:F4:CE:61:83:AA:7E:D1:C7:B7:87:36:29:1D:58:9E:55:F2 Authority key identifier: 16:82:1F:D2:2F:FB:74:E3:D7:FA:C3:AA:03:BE:6D:00:14:5B:9A:3E Certificate issuer: /CN=16821FD22FFB74E3D7FAC3AA03BE6D00145B9A3E Certificate serial: 5ADD785CE4EBA73B08B3670AB32F2E8A6B30B7C6 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/16821FD22FFB74E3D7FAC3AA03BE6D00145B9A3E.cer Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_9f297e7e1f534033aaf93ce1e3b46ffc/0/16821FD22FFB74E3D7FAC3AA03BE6D00145B9A3E.mft Manifest number: 03D8 Signing time: Thu 17 Sep 2026 15:12:36 +0000 Manifest this update: Thu 17 Sep 2026 15:07:36 +0000 Manifest next update: Fri 18 Sep 2026 19:11:36 +0000 Files and hashes: 1: 16821FD22FFB74E3D7FAC3AA03BE6D00145B9A3E.crl (hash: Y8/OQE0VNRRQrxtvE5IS7co40MUOKC1eKn5/hoYXuCc=) Validation: OK Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_9f297e7e1f534033aaf93ce1e3b46ffc/0/16821FD22FFB74E3D7FAC3AA03BE6D00145B9A3E.crl rsync://rpki-repo.as207960.net/repo/rpki_ca_9f297e7e1f534033aaf93ce1e3b46ffc/0/16821FD22FFB74E3D7FAC3AA03BE6D00145B9A3E.mft rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/16821FD22FFB74E3D7FAC3AA03BE6D00145B9A3E.cer rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 18 Sep 2026 14:15:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:dd:78:5c:e4:eb:a7:3b:08:b3:67:0a:b3:2f:2e:8a:6b:30:b7:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=16821FD22FFB74E3D7FAC3AA03BE6D00145B9A3E Validity Not Before: Sep 17 15:07:36 2026 GMT Not After : Sep 18 19:11:36 2026 GMT Subject: CN=A5285CF4CE6183AA7ED1C7B78736291D589E55F2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:14:54:59:e9:e2:2e:9e:a4:d8:13:74:6a:fa: 88:a4:bb:45:30:16:72:8f:08:be:be:e3:7d:2d:8b: c8:b1:bb:c7:12:46:1d:68:bd:fa:be:de:de:19:92: a8:ba:f9:db:04:be:4b:9e:9e:b6:1d:ee:ab:84:cb: c0:23:28:a1:7b:28:fb:91:3e:61:48:c6:84:79:00: 3c:6c:73:f8:37:12:61:44:ec:36:47:e9:19:b4:2f: 7b:fd:7a:6c:26:1b:2e:78:68:a6:b0:cc:fc:b2:2e: e8:92:4b:e5:46:08:c8:90:10:64:cc:8f:42:af:fe: 3c:24:ab:ce:1a:04:4a:c5:c5:41:6c:9a:dc:4a:b0: 2c:dd:f1:51:e5:cd:1f:c5:2b:17:19:c9:0a:40:38: fa:37:7c:ba:e6:3d:2b:f7:ee:36:9c:af:5f:e9:a4: 1c:91:c4:65:13:fc:b7:67:62:1f:0b:33:e3:7b:96: 5e:59:10:08:7f:cb:be:e2:48:5b:78:b1:9a:1d:89: d9:b8:90:75:20:58:11:fd:fe:d7:2e:04:1b:7e:a0: 25:9a:e2:af:d5:74:bc:d2:50:a4:2f:15:b3:0a:e7: 05:4a:7e:d4:2f:da:33:22:a7:cb:9f:87:e6:4e:fc: 94:d7:50:99:85:c4:00:d8:f2:90:28:c9:bf:76:36: 2c:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:28:5C:F4:CE:61:83:AA:7E:D1:C7:B7:87:36:29:1D:58:9E:55:F2 X509v3 Authority Key Identifier: keyid:16:82:1F:D2:2F:FB:74:E3:D7:FA:C3:AA:03:BE:6D:00:14:5B:9A:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_9f297e7e1f534033aaf93ce1e3b46ffc/0/16821FD22FFB74E3D7FAC3AA03BE6D00145B9A3E.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/16821FD22FFB74E3D7FAC3AA03BE6D00145B9A3E.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_9f297e7e1f534033aaf93ce1e3b46ffc/0/16821FD22FFB74E3D7FAC3AA03BE6D00145B9A3E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a9:cb:1f:9f:d2:9d:f8:a6:c6:84:5f:a8:63:32:0f:8d:08:0e: 16:24:f7:83:73:1b:82:4f:89:61:75:97:fc:3b:3e:a1:7a:f4: a9:f9:04:9e:6f:28:0f:7b:f0:8f:b6:c1:b7:96:0e:1c:4d:57: 9b:50:53:fa:84:d2:bd:8f:d5:af:47:8e:d4:64:25:85:6a:9b: d2:6f:a0:f3:08:e6:ab:a8:b5:f1:9f:47:4a:35:18:ff:80:c0: b7:9c:7d:98:8f:0f:c2:e5:8a:3d:59:ba:70:b2:65:fe:f2:e3: 70:11:53:14:a0:e9:f2:96:00:00:22:76:9a:9a:5b:83:ea:71: b5:ee:9b:2e:9c:9f:e1:6e:21:95:0d:98:ec:2c:16:1c:c1:0f: 00:fa:d5:84:55:38:2a:62:43:ca:e0:63:94:bc:ae:fa:b3:06: 8f:55:b0:77:47:f7:04:21:4b:54:33:fe:ca:9c:a3:1b:30:29: 5c:c5:40:cc:4c:60:f6:c5:6c:ab:5b:2d:c3:52:ca:0a:3d:92: e1:70:a4:84:e7:a9:d3:38:3c:a5:c1:a5:81:5f:03:b1:ee:72: 7e:aa:69:09:9e:c7:d5:bc:bc:b7:aa:6f:07:4a:ae:f8:b6:aa: 6e:eb:06:57:0a:b6:71:4b:74:f5:88:67:8a:94:53:1b:ad:2f: 8d:33:72:00 -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIUWt14XOTrpzsIs2cKsy8uimswt8YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTY4MjFGRDIyRkZCNzRFM0Q3RkFDM0FBMDNCRTZEMDAx NDVCOUEzRTAeFw0yNjA5MTcxNTA3MzZaFw0yNjA5MTgxOTExMzZaMDMxMTAvBgNV BAMTKEE1Mjg1Q0Y0Q0U2MTgzQUE3RUQxQzdCNzg3MzYyOTFENTg5RTU1RjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIFFRZ6eIunqTYE3Rq+oiku0Uw FnKPCL6+430ti8ixu8cSRh1ovfq+3t4Zkqi6+dsEvkuenrYd7quEy8AjKKF7KPuR PmFIxoR5ADxsc/g3EmFE7DZH6Rm0L3v9emwmGy54aKawzPyyLuiSS+VGCMiQEGTM j0Kv/jwkq84aBErFxUFsmtxKsCzd8VHlzR/FKxcZyQpAOPo3fLrmPSv37jacr1/p pByRxGUT/LdnYh8LM+N7ll5ZEAh/y77iSFt4sZodidm4kHUgWBH9/tcuBBt+oCWa 4q/VdLzSUKQvFbMK5wVKftQv2jMip8ufh+ZO/JTXUJmFxADY8pAoyb92NiyLAgMB AAGjggJ4MIICdDAdBgNVHQ4EFgQUpShc9M5hg6p+0ce3hzYpHVieVfIwHwYDVR0j BBgwFoAUFoIf0i/7dOPX+sOqA75tABRbmj4wDgYDVR0PAQH/BAQDAgeAMIGPBgNV HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv cmVwby9ycGtpX2NhXzlmMjk3ZTdlMWY1MzQwMzNhYWY5M2NlMWUzYjQ2ZmZjLzAv MTY4MjFGRDIyRkZCNzRFM0Q3RkFDM0FBMDNCRTZEMDAxNDVCOUEzRS5jcmwwgZ4G CCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5wYWFz LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQxYjUtODJh MC1mMGQwMmMwM2EyYzYvNy8xNjgyMUZEMjJGRkI3NEUzRDdGQUMzQUEwM0JFNkQw MDE0NUI5QTNFLmNlcjCBmgYIKwYBBQUHAQsEgY0wgYowgYcGCCsGAQUFBzALhnty c3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQvcmVwby9ycGtpX2NhXzlmMjk3 ZTdlMWY1MzQwMzNhYWY5M2NlMWUzYjQ2ZmZjLzAvMTY4MjFGRDIyRkZCNzRFM0Q3 RkFDM0FBMDNCRTZEMDAxNDVCOUEzRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAKnLH5/SnfimxoRfqGMy D40IDhYk94NzG4JPiWF1l/w7PqF69Kn5BJ5vKA978I+2wbeWDhxNV5tQU/qE0r2P 1a9HjtRkJYVqm9JvoPMI5quotfGfR0o1GP+AwLecfZiPD8Llij1ZunCyZf7y43AR UxSg6fKWAAAidpqaW4PqcbXumy6cn+FuIZUNmOwsFhzBDwD61YRVOCpiQ8rgY5S8 rvqzBo9VsHdH9wQhS1Qz/sqcoxswKVzFQMxMYPbFbKtbLcNSygo9kuFwpITnqdM4 PKXBpYFfA7Hucn6qaQmex9W8vLeqbwdKrvi2qm7rBlcKtnFLdPWIZ4qUUxutL40z cgA= -----END CERTIFICATE-----Generated at Fri Sep 18 00:24:00 2026 by rpki-client