$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_9f297e7e1f534033aaf93ce1e3b46ffc/0/16821FD22FFB74E3D7FAC3AA03BE6D00145B9A3E.mft File: 16821FD22FFB74E3D7FAC3AA03BE6D00145B9A3E.mft (raw, json) Hash identifier: KLvTK6Wku9fNzcYTRBSDKUyJG9m0Qr/BsG1C1BV9KSk= Subject key identifier: 1B:54:C8:6B:45:74:9A:D5:3A:7F:AA:59:C5:E3:C6:6C:11:9F:D6:FD Authority key identifier: 16:82:1F:D2:2F:FB:74:E3:D7:FA:C3:AA:03:BE:6D:00:14:5B:9A:3E Certificate issuer: /CN=16821FD22FFB74E3D7FAC3AA03BE6D00145B9A3E Certificate serial: 7F1CA4F557513BF8039674DDBB71A3C0DA1FBD89 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/16821FD22FFB74E3D7FAC3AA03BE6D00145B9A3E.cer Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_9f297e7e1f534033aaf93ce1e3b46ffc/0/16821FD22FFB74E3D7FAC3AA03BE6D00145B9A3E.mft Manifest number: 032E Signing time: Wed 29 Apr 2026 22:26:59 +0000 Manifest this update: Wed 29 Apr 2026 22:21:58 +0000 Manifest next update: Thu 30 Apr 2026 22:29:58 +0000 Files and hashes: 1: 16821FD22FFB74E3D7FAC3AA03BE6D00145B9A3E.crl (hash: 1tsBWGLF3s9rqyJT33pI6mMeSVFl/9zxWHNJ/GhsM84=) Validation: OK Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_9f297e7e1f534033aaf93ce1e3b46ffc/0/16821FD22FFB74E3D7FAC3AA03BE6D00145B9A3E.crl rsync://rpki-repo.as207960.net/repo/rpki_ca_9f297e7e1f534033aaf93ce1e3b46ffc/0/16821FD22FFB74E3D7FAC3AA03BE6D00145B9A3E.mft rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/16821FD22FFB74E3D7FAC3AA03BE6D00145B9A3E.cer rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 30 Apr 2026 22:29:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:1c:a4:f5:57:51:3b:f8:03:96:74:dd:bb:71:a3:c0:da:1f:bd:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=16821FD22FFB74E3D7FAC3AA03BE6D00145B9A3E Validity Not Before: Apr 29 22:21:58 2026 GMT Not After : Apr 30 22:29:58 2026 GMT Subject: CN=1B54C86B45749AD53A7FAA59C5E3C66C119FD6FD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:c4:2c:f5:43:5d:8e:9b:c5:9a:a0:90:ca:a5: 8f:6d:9a:80:e0:79:b1:46:d5:92:38:2f:a9:82:fd: 00:87:40:3b:8e:2f:99:c4:22:5b:3b:5c:a3:d3:d1: 47:80:46:cb:c1:df:01:51:d3:25:df:92:57:53:04: 85:29:77:ab:fe:49:93:fa:98:35:20:22:da:fd:bb: b3:8c:23:1d:ed:55:4a:32:b7:07:c2:d9:f6:fe:7a: 56:d8:e4:c8:1e:5c:18:ea:25:0a:66:2f:e4:52:b0: eb:58:3d:92:c2:63:2e:1c:94:d8:77:24:a5:52:de: f1:e7:1e:53:b5:84:54:72:35:15:14:61:29:e3:dd: 29:d4:15:56:c5:b9:73:ee:4c:29:5f:4d:eb:86:18: 15:6b:8f:ec:fa:90:ae:99:fe:fc:5d:35:6f:9c:fa: 9d:14:75:7a:a5:92:a3:e4:06:41:98:5e:0c:3e:42: 75:cf:86:d4:96:39:f3:2d:56:e3:2f:79:40:bd:5a: b7:1a:b5:58:86:f5:89:c8:ea:33:43:0a:b8:32:ab: e6:c9:c6:db:a2:5a:f6:19:7b:cd:85:fe:78:6a:43: 02:58:ef:eb:98:1a:77:ed:c4:13:fe:4c:6e:27:09: b3:a7:0c:31:b4:2b:22:21:85:2a:e3:08:43:bd:65: cf:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:54:C8:6B:45:74:9A:D5:3A:7F:AA:59:C5:E3:C6:6C:11:9F:D6:FD X509v3 Authority Key Identifier: keyid:16:82:1F:D2:2F:FB:74:E3:D7:FA:C3:AA:03:BE:6D:00:14:5B:9A:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_9f297e7e1f534033aaf93ce1e3b46ffc/0/16821FD22FFB74E3D7FAC3AA03BE6D00145B9A3E.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/16821FD22FFB74E3D7FAC3AA03BE6D00145B9A3E.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_9f297e7e1f534033aaf93ce1e3b46ffc/0/16821FD22FFB74E3D7FAC3AA03BE6D00145B9A3E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c8:51:5d:5a:db:b7:17:e3:22:93:ba:d1:12:3a:69:c8:ab:ca: 02:0b:cc:30:31:9c:ed:18:5b:f7:96:df:4c:54:09:f3:c4:19: 73:82:3d:c8:01:04:dd:db:a6:72:81:89:d7:5b:6c:ca:f6:b2: b5:c6:d4:e8:59:75:0a:3d:a6:9e:b2:bb:90:8c:70:a2:2b:6b: 7e:fb:58:81:62:b5:b3:27:fb:39:7c:aa:df:65:6c:dd:bb:07: 43:ff:77:13:7a:78:ce:c8:9f:30:b4:67:4f:a0:19:fd:7c:30: f5:9b:9e:2c:19:a2:eb:77:09:43:75:7b:4a:5e:e5:91:a0:2d: 44:e9:e8:5e:b5:8e:54:85:46:d8:eb:be:ba:a3:bb:81:7d:7c: e1:d0:f1:4d:0e:2e:f3:67:1c:c0:a9:6d:67:f6:96:3d:ba:80: 65:1d:d2:e2:a4:0c:cd:d1:92:8c:c6:67:b8:e5:f8:e2:05:e5: d4:0d:96:b8:bb:66:d8:a1:19:8d:60:25:54:87:c8:40:95:86: 10:db:67:e3:29:c5:1a:54:dc:7d:77:f5:e3:78:0a:37:1e:dd: 92:b9:b0:df:a3:65:6f:c9:5b:46:e3:14:ed:7c:68:1d:49:2f: 64:2e:20:01:2a:ce:cf:1d:fb:a3:1c:77:b1:71:82:e3:1b:15: d8:90:65:58 -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIUfxyk9VdRO/gDlnTdu3GjwNofvYkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTY4MjFGRDIyRkZCNzRFM0Q3RkFDM0FBMDNCRTZEMDAx NDVCOUEzRTAeFw0yNjA0MjkyMjIxNThaFw0yNjA0MzAyMjI5NThaMDMxMTAvBgNV BAMTKDFCNTRDODZCNDU3NDlBRDUzQTdGQUE1OUM1RTNDNjZDMTE5RkQ2RkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXxCz1Q12Om8WaoJDKpY9tmoDg ebFG1ZI4L6mC/QCHQDuOL5nEIls7XKPT0UeARsvB3wFR0yXfkldTBIUpd6v+SZP6 mDUgItr9u7OMIx3tVUoytwfC2fb+elbY5MgeXBjqJQpmL+RSsOtYPZLCYy4clNh3 JKVS3vHnHlO1hFRyNRUUYSnj3SnUFVbFuXPuTClfTeuGGBVrj+z6kK6Z/vxdNW+c +p0UdXqlkqPkBkGYXgw+QnXPhtSWOfMtVuMveUC9WrcatViG9YnI6jNDCrgyq+bJ xtuiWvYZe82F/nhqQwJY7+uYGnftxBP+TG4nCbOnDDG0KyIhhSrjCEO9Zc8lAgMB AAGjggJ4MIICdDAdBgNVHQ4EFgQUG1TIa0V0mtU6f6pZxePGbBGf1v0wHwYDVR0j BBgwFoAUFoIf0i/7dOPX+sOqA75tABRbmj4wDgYDVR0PAQH/BAQDAgeAMIGPBgNV HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv cmVwby9ycGtpX2NhXzlmMjk3ZTdlMWY1MzQwMzNhYWY5M2NlMWUzYjQ2ZmZjLzAv MTY4MjFGRDIyRkZCNzRFM0Q3RkFDM0FBMDNCRTZEMDAxNDVCOUEzRS5jcmwwgZ4G CCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5wYWFz LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQxYjUtODJh MC1mMGQwMmMwM2EyYzYvNy8xNjgyMUZEMjJGRkI3NEUzRDdGQUMzQUEwM0JFNkQw MDE0NUI5QTNFLmNlcjCBmgYIKwYBBQUHAQsEgY0wgYowgYcGCCsGAQUFBzALhnty c3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQvcmVwby9ycGtpX2NhXzlmMjk3 ZTdlMWY1MzQwMzNhYWY5M2NlMWUzYjQ2ZmZjLzAvMTY4MjFGRDIyRkZCNzRFM0Q3 RkFDM0FBMDNCRTZEMDAxNDVCOUEzRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAMhRXVrbtxfjIpO60RI6 acirygILzDAxnO0YW/eW30xUCfPEGXOCPcgBBN3bpnKBiddbbMr2srXG1OhZdQo9 pp6yu5CMcKIra377WIFitbMn+zl8qt9lbN27B0P/dxN6eM7InzC0Z0+gGf18MPWb niwZout3CUN1e0pe5ZGgLUTp6F61jlSFRtjrvrqju4F9fOHQ8U0OLvNnHMCpbWf2 lj26gGUd0uKkDM3RkozGZ7jl+OIF5dQNlri7ZtihGY1gJVSHyECVhhDbZ+MpxRpU 3H139eN4Cjce3ZK5sN+jZW/JW0bjFO18aB1JL2QuIAEqzs8d+6Mcd7FxguMbFdiQ ZVg= -----END CERTIFICATE-----Generated at Thu Apr 30 15:16:28 2026 by rpki-client