$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_9f297e7e1f534033aaf93ce1e3b46ffc/0/16821FD22FFB74E3D7FAC3AA03BE6D00145B9A3E.mft File: 16821FD22FFB74E3D7FAC3AA03BE6D00145B9A3E.mft (raw, json) Hash identifier: G75Xv3mVMNBtkrORBN8ggd+RGod44rh6SHZnZj0KCSU= Subject key identifier: 52:48:96:E0:9B:8F:82:97:69:23:76:E6:2A:DC:AD:33:6A:25:AF:FB Authority key identifier: 16:82:1F:D2:2F:FB:74:E3:D7:FA:C3:AA:03:BE:6D:00:14:5B:9A:3E Certificate issuer: /CN=16821FD22FFB74E3D7FAC3AA03BE6D00145B9A3E Certificate serial: 062CE2D70F9D724D45481B8D771E8845A0D3095C Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/16821FD22FFB74E3D7FAC3AA03BE6D00145B9A3E.cer Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_9f297e7e1f534033aaf93ce1e3b46ffc/0/16821FD22FFB74E3D7FAC3AA03BE6D00145B9A3E.mft Manifest number: 01B9 Signing time: Thu 05 Jun 2025 22:02:53 +0000 Manifest this update: Thu 05 Jun 2025 21:57:50 +0000 Manifest next update: Sat 07 Jun 2025 01:44:50 +0000 Files and hashes: 1: 16821FD22FFB74E3D7FAC3AA03BE6D00145B9A3E.crl (hash: BKcK6am2OL4PszXnB0SDnJDhAZyZcVYLYmKy8zTN+AM=) Validation: OK Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_9f297e7e1f534033aaf93ce1e3b46ffc/0/16821FD22FFB74E3D7FAC3AA03BE6D00145B9A3E.crl rsync://rpki-repo.as207960.net/repo/rpki_ca_9f297e7e1f534033aaf93ce1e3b46ffc/0/16821FD22FFB74E3D7FAC3AA03BE6D00145B9A3E.mft rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/16821FD22FFB74E3D7FAC3AA03BE6D00145B9A3E.cer rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 06 Jun 2025 20:42:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:2c:e2:d7:0f:9d:72:4d:45:48:1b:8d:77:1e:88:45:a0:d3:09:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=16821FD22FFB74E3D7FAC3AA03BE6D00145B9A3E Validity Not Before: Jun 5 21:57:50 2025 GMT Not After : Jun 7 01:44:50 2025 GMT Subject: CN=524896E09B8F8297692376E62ADCAD336A25AFFB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:60:74:9c:00:50:bb:1f:d1:14:51:71:ee:ae: 0b:c5:d8:6f:33:f0:97:ef:5b:73:0b:f8:3c:2a:da: 98:68:4e:a0:df:c6:f3:41:ef:91:cf:ac:60:66:84: 88:c6:94:24:e9:86:83:e3:c2:97:1b:32:fb:be:87: 39:1a:d0:2b:b8:b5:af:8b:c9:6b:34:80:f6:83:cb: cd:98:b9:86:d0:a2:a3:bb:73:69:f4:71:9a:b9:07: d3:6f:ef:3f:6c:ca:76:32:11:4e:5d:df:3e:94:04: 7c:65:5f:d1:5a:65:28:11:cd:12:30:42:68:cb:5b: 76:f0:8b:eb:61:38:00:9d:e1:57:c7:a5:2e:cb:18: 90:0e:ce:6d:0f:aa:ac:79:b0:89:71:e9:d6:60:b5: 69:5a:81:96:a8:af:b6:1d:d9:f6:56:fe:78:81:e5: eb:80:ab:2b:c2:6e:57:80:82:2e:8e:52:9b:da:07: b2:3f:04:95:68:3a:30:f4:23:b6:dc:7f:27:35:68: d7:14:8e:86:f3:f2:d2:52:b6:61:28:5f:ed:3a:86: 56:1d:3f:00:09:9d:27:6e:68:b7:cf:bc:88:b6:1b: d6:5e:73:24:cd:65:1a:f1:90:9e:90:06:0c:d1:1f: 16:cf:30:66:e4:26:9e:78:df:4e:4e:fe:d1:81:45: 4b:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:48:96:E0:9B:8F:82:97:69:23:76:E6:2A:DC:AD:33:6A:25:AF:FB X509v3 Authority Key Identifier: keyid:16:82:1F:D2:2F:FB:74:E3:D7:FA:C3:AA:03:BE:6D:00:14:5B:9A:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_9f297e7e1f534033aaf93ce1e3b46ffc/0/16821FD22FFB74E3D7FAC3AA03BE6D00145B9A3E.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/16821FD22FFB74E3D7FAC3AA03BE6D00145B9A3E.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_9f297e7e1f534033aaf93ce1e3b46ffc/0/16821FD22FFB74E3D7FAC3AA03BE6D00145B9A3E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 98:d7:1d:e1:ec:ec:4a:f8:7f:46:13:88:27:83:e7:80:ac:53: 88:53:1f:67:02:94:3e:28:60:f7:29:f0:73:64:aa:7e:fb:cf: 71:e9:2a:ee:e4:f4:77:b6:62:1b:b3:62:22:4a:4e:8c:b3:60: 95:67:ae:07:ff:f9:7b:31:14:20:b9:0b:68:5b:fd:00:48:ad: f1:60:af:42:a3:d2:33:87:82:49:fa:c5:2f:47:ed:0e:f0:25: 1c:f8:0b:04:a4:17:cc:ed:2a:0c:57:6a:08:43:96:5a:40:e9: 2d:52:33:47:b9:3e:e7:3e:28:2a:4d:6b:33:1a:19:68:c1:16: ac:a2:4a:75:39:46:29:2b:c1:be:f9:7a:1d:59:c8:fe:00:92: 32:81:03:d6:0e:39:d9:d1:e4:d0:8b:61:cf:af:da:b7:93:d3: 9c:f2:d1:3f:29:de:97:c1:52:41:96:7a:f4:96:f3:01:c7:9d: d3:39:b8:d4:04:48:b2:c3:b8:a1:b1:65:2f:d6:cb:da:6b:a2: ef:dd:c7:86:59:8d:0f:6a:46:1a:be:b8:dc:47:fb:26:05:a8: db:bd:ed:53:1a:13:f5:63:61:3a:59:fb:89:47:01:07:8e:ab: d9:64:23:9a:52:d2:15:2f:5c:7c:c3:6f:42:33:e2:c0:f5:1a: 95:ae:0e:b7 -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIUBizi1w+dck1FSBuNdx6IRaDTCVwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTY4MjFGRDIyRkZCNzRFM0Q3RkFDM0FBMDNCRTZEMDAx NDVCOUEzRTAeFw0yNTA2MDUyMTU3NTBaFw0yNTA2MDcwMTQ0NTBaMDMxMTAvBgNV BAMTKDUyNDg5NkUwOUI4RjgyOTc2OTIzNzZFNjJBRENBRDMzNkEyNUFGRkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCKYHScAFC7H9EUUXHurgvF2G8z 8JfvW3ML+Dwq2phoTqDfxvNB75HPrGBmhIjGlCTphoPjwpcbMvu+hzka0Cu4ta+L yWs0gPaDy82YuYbQoqO7c2n0cZq5B9Nv7z9synYyEU5d3z6UBHxlX9FaZSgRzRIw QmjLW3bwi+thOACd4VfHpS7LGJAOzm0Pqqx5sIlx6dZgtWlagZaor7Yd2fZW/niB 5euAqyvCbleAgi6OUpvaB7I/BJVoOjD0I7bcfyc1aNcUjobz8tJStmEoX+06hlYd PwAJnSduaLfPvIi2G9ZecyTNZRrxkJ6QBgzRHxbPMGbkJp54305O/tGBRUvPAgMB AAGjggJ4MIICdDAdBgNVHQ4EFgQUUkiW4JuPgpdpI3bmKtytM2olr/swHwYDVR0j BBgwFoAUFoIf0i/7dOPX+sOqA75tABRbmj4wDgYDVR0PAQH/BAQDAgeAMIGPBgNV HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv cmVwby9ycGtpX2NhXzlmMjk3ZTdlMWY1MzQwMzNhYWY5M2NlMWUzYjQ2ZmZjLzAv MTY4MjFGRDIyRkZCNzRFM0Q3RkFDM0FBMDNCRTZEMDAxNDVCOUEzRS5jcmwwgZ4G CCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5wYWFz LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQxYjUtODJh MC1mMGQwMmMwM2EyYzYvNy8xNjgyMUZEMjJGRkI3NEUzRDdGQUMzQUEwM0JFNkQw MDE0NUI5QTNFLmNlcjCBmgYIKwYBBQUHAQsEgY0wgYowgYcGCCsGAQUFBzALhnty c3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQvcmVwby9ycGtpX2NhXzlmMjk3 ZTdlMWY1MzQwMzNhYWY5M2NlMWUzYjQ2ZmZjLzAvMTY4MjFGRDIyRkZCNzRFM0Q3 RkFDM0FBMDNCRTZEMDAxNDVCOUEzRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAJjXHeHs7Er4f0YTiCeD 54CsU4hTH2cClD4oYPcp8HNkqn77z3HpKu7k9He2YhuzYiJKToyzYJVnrgf/+Xsx FCC5C2hb/QBIrfFgr0Kj0jOHgkn6xS9H7Q7wJRz4CwSkF8ztKgxXaghDllpA6S1S M0e5Puc+KCpNazMaGWjBFqyiSnU5Rikrwb75eh1ZyP4AkjKBA9YOOdnR5NCLYc+v 2reT05zy0T8p3pfBUkGWevSW8wHHndM5uNQESLLDuKGxZS/Wy9prou/dx4ZZjQ9q Rhq+uNxH+yYFqNu97VMaE/VjYTpZ+4lHAQeOq9lkI5pS0hUvXHzDb0Iz4sD1GpWu Drc= -----END CERTIFICATE-----Generated at Fri Jun 6 06:15:40 2025 by rpki-client