$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_9f297e7e1f534033aaf93ce1e3b46ffc/0/16821FD22FFB74E3D7FAC3AA03BE6D00145B9A3E.mft File: 16821FD22FFB74E3D7FAC3AA03BE6D00145B9A3E.mft (raw, json) Hash identifier: H8wzkxac/q+qPmyVn4d5/f61LzpBAXr8ROhaSfj50Q8= Subject key identifier: 5C:8A:CD:5C:FF:E4:48:C1:54:D6:A3:2F:C7:B3:61:0C:63:B1:5F:52 Authority key identifier: 16:82:1F:D2:2F:FB:74:E3:D7:FA:C3:AA:03:BE:6D:00:14:5B:9A:3E Certificate issuer: /CN=16821FD22FFB74E3D7FAC3AA03BE6D00145B9A3E Certificate serial: 259D68A812966AB4CE3FF0743FAD049928E8F4E7 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/16821FD22FFB74E3D7FAC3AA03BE6D00145B9A3E.cer Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_9f297e7e1f534033aaf93ce1e3b46ffc/0/16821FD22FFB74E3D7FAC3AA03BE6D00145B9A3E.mft Manifest number: 036B Signing time: Sun 14 Jun 2026 17:36:54 +0000 Manifest this update: Sun 14 Jun 2026 17:31:53 +0000 Manifest next update: Mon 15 Jun 2026 18:43:53 +0000 Files and hashes: 1: 16821FD22FFB74E3D7FAC3AA03BE6D00145B9A3E.crl (hash: kRSUUZIupT+DoH7Pu/fy1HyviO7nswysOp9bz/B1+n4=) Validation: OK Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_9f297e7e1f534033aaf93ce1e3b46ffc/0/16821FD22FFB74E3D7FAC3AA03BE6D00145B9A3E.crl rsync://rpki-repo.as207960.net/repo/rpki_ca_9f297e7e1f534033aaf93ce1e3b46ffc/0/16821FD22FFB74E3D7FAC3AA03BE6D00145B9A3E.mft rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/16821FD22FFB74E3D7FAC3AA03BE6D00145B9A3E.cer rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Jun 2026 18:43:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:9d:68:a8:12:96:6a:b4:ce:3f:f0:74:3f:ad:04:99:28:e8:f4:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=16821FD22FFB74E3D7FAC3AA03BE6D00145B9A3E Validity Not Before: Jun 14 17:31:53 2026 GMT Not After : Jun 15 18:43:53 2026 GMT Subject: CN=5C8ACD5CFFE448C154D6A32FC7B3610C63B15F52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:5f:ba:10:7e:dc:8e:a0:f8:b2:26:d3:3c:9f: 8f:7f:1c:21:b8:71:c3:2b:ec:df:c8:3d:a5:a8:a0: 1f:5b:ea:e6:44:71:63:88:dc:ca:ca:8a:7f:d2:62: e0:eb:11:c1:cd:79:f9:72:45:4b:c9:7f:50:d1:a7: 60:0f:b2:20:61:0b:e8:e0:cb:3b:69:26:45:78:b2: 15:1c:9b:94:ab:74:e8:d9:af:81:67:e2:44:87:80: 6c:8f:80:a7:5e:ee:b3:48:40:a9:67:66:98:2e:5b: 52:f8:12:05:c4:de:dd:1f:fc:b1:78:ac:56:78:eb: 1a:08:2b:2b:9f:3a:86:e8:73:c4:39:a2:64:eb:8c: 7e:6a:36:9c:13:00:d9:ef:fd:bd:a4:92:33:0c:58: f2:96:1d:bf:52:fe:2d:ba:57:73:fa:db:fb:35:55: 84:db:02:ab:2a:18:7a:90:46:90:27:96:7f:ef:b3: 2d:c5:a9:92:da:ad:e8:12:f3:42:3d:f1:b9:b6:5a: f9:b9:5b:2b:61:9f:a6:dd:79:2a:2a:0b:83:78:66: 89:fe:d9:7e:a7:25:3e:a4:9f:44:56:15:8d:ec:30: 5f:b0:35:90:3a:d2:f0:4b:dd:15:5c:21:d3:2d:3e: c9:cb:fd:cf:d4:e7:f7:c3:b3:e0:99:d4:b5:75:8a: 33:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:8A:CD:5C:FF:E4:48:C1:54:D6:A3:2F:C7:B3:61:0C:63:B1:5F:52 X509v3 Authority Key Identifier: keyid:16:82:1F:D2:2F:FB:74:E3:D7:FA:C3:AA:03:BE:6D:00:14:5B:9A:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_9f297e7e1f534033aaf93ce1e3b46ffc/0/16821FD22FFB74E3D7FAC3AA03BE6D00145B9A3E.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/16821FD22FFB74E3D7FAC3AA03BE6D00145B9A3E.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_9f297e7e1f534033aaf93ce1e3b46ffc/0/16821FD22FFB74E3D7FAC3AA03BE6D00145B9A3E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:5e:90:0a:03:82:c8:fb:c5:2f:30:2d:29:a8:4f:a9:30:44: c4:d1:b0:3d:b1:c5:ce:3c:3f:55:01:44:47:48:71:40:34:f2: 9f:97:b3:66:d0:43:82:e4:1b:7d:e2:6d:00:db:ef:e9:c0:bc: 25:e8:69:0d:68:1d:c4:71:05:06:c3:e4:b9:3d:8d:5b:a9:a7: 5c:1a:ff:72:58:ac:ae:f9:83:7f:c4:fc:13:36:40:4b:4d:fd: 04:81:3a:cc:89:6e:e7:15:61:51:b7:e6:8d:b6:08:78:35:0c: c8:28:93:91:bd:1f:a3:80:bb:60:11:d9:90:5b:3c:28:d7:c1: f6:cd:77:a4:41:b6:17:4b:4f:32:36:2b:21:b2:8a:f3:a0:9c: 45:c1:1f:b9:45:a6:8e:a6:fd:16:76:a3:53:27:c4:5f:04:d1: 94:e0:c6:82:17:b0:57:b3:d8:de:72:79:34:72:75:ad:dc:f5: 4e:b3:34:cf:5a:6c:bc:5f:fc:b6:60:b1:2a:1b:e4:e0:c3:67: 8f:c0:41:1d:8c:05:b6:b9:e7:ae:40:2c:cf:e4:ab:85:d3:a9: 78:78:4c:ca:8b:5e:ba:b5:a4:92:3c:8f:56:67:e3:9e:53:b0: f9:17:0b:45:b9:40:df:7e:c3:86:87:8b:bb:19:08:27:87:c6: b0:c4:16:8b -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIUJZ1oqBKWarTOP/B0P60EmSjo9OcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTY4MjFGRDIyRkZCNzRFM0Q3RkFDM0FBMDNCRTZEMDAx NDVCOUEzRTAeFw0yNjA2MTQxNzMxNTNaFw0yNjA2MTUxODQzNTNaMDMxMTAvBgNV BAMTKDVDOEFDRDVDRkZFNDQ4QzE1NEQ2QTMyRkM3QjM2MTBDNjNCMTVGNTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyX7oQftyOoPiyJtM8n49/HCG4 ccMr7N/IPaWooB9b6uZEcWOI3MrKin/SYuDrEcHNeflyRUvJf1DRp2APsiBhC+jg yztpJkV4shUcm5SrdOjZr4Fn4kSHgGyPgKde7rNIQKlnZpguW1L4EgXE3t0f/LF4 rFZ46xoIKyufOoboc8Q5omTrjH5qNpwTANnv/b2kkjMMWPKWHb9S/i26V3P62/s1 VYTbAqsqGHqQRpAnln/vsy3FqZLaregS80I98bm2Wvm5Wythn6bdeSoqC4N4Zon+ 2X6nJT6kn0RWFY3sMF+wNZA60vBL3RVcIdMtPsnL/c/U5/fDs+CZ1LV1ijP1AgMB AAGjggJ4MIICdDAdBgNVHQ4EFgQUXIrNXP/kSMFU1qMvx7NhDGOxX1IwHwYDVR0j BBgwFoAUFoIf0i/7dOPX+sOqA75tABRbmj4wDgYDVR0PAQH/BAQDAgeAMIGPBgNV HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv cmVwby9ycGtpX2NhXzlmMjk3ZTdlMWY1MzQwMzNhYWY5M2NlMWUzYjQ2ZmZjLzAv MTY4MjFGRDIyRkZCNzRFM0Q3RkFDM0FBMDNCRTZEMDAxNDVCOUEzRS5jcmwwgZ4G CCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5wYWFz LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQxYjUtODJh MC1mMGQwMmMwM2EyYzYvNy8xNjgyMUZEMjJGRkI3NEUzRDdGQUMzQUEwM0JFNkQw MDE0NUI5QTNFLmNlcjCBmgYIKwYBBQUHAQsEgY0wgYowgYcGCCsGAQUFBzALhnty c3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQvcmVwby9ycGtpX2NhXzlmMjk3 ZTdlMWY1MzQwMzNhYWY5M2NlMWUzYjQ2ZmZjLzAvMTY4MjFGRDIyRkZCNzRFM0Q3 RkFDM0FBMDNCRTZEMDAxNDVCOUEzRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAIFekAoDgsj7xS8wLSmo T6kwRMTRsD2xxc48P1UBREdIcUA08p+Xs2bQQ4LkG33ibQDb7+nAvCXoaQ1oHcRx BQbD5Lk9jVupp1wa/3JYrK75g3/E/BM2QEtN/QSBOsyJbucVYVG35o22CHg1DMgo k5G9H6OAu2AR2ZBbPCjXwfbNd6RBthdLTzI2KyGyivOgnEXBH7lFpo6m/RZ2o1Mn xF8E0ZTgxoIXsFez2N5yeTRyda3c9U6zNM9abLxf/LZgsSob5ODDZ4/AQR2MBba5 565ALM/kq4XTqXh4TMqLXrq1pJI8j1Zn455TsPkXC0W5QN9+w4aHi7sZCCeHxrDE Fos= -----END CERTIFICATE-----Generated at Mon Jun 15 06:29:09 2026 by rpki-client