$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_9f297e7e1f534033aaf93ce1e3b46ffc/0/16821FD22FFB74E3D7FAC3AA03BE6D00145B9A3E.mft File: 16821FD22FFB74E3D7FAC3AA03BE6D00145B9A3E.mft (raw, json) Hash identifier: ijXOBzMOnuUYPBpZ/GbtavqzdVkdz8O/9o3Ny7pbuB8= Subject key identifier: 39:84:85:05:47:92:03:42:95:CD:5D:33:24:6E:66:47:93:17:F0:65 Authority key identifier: 16:82:1F:D2:2F:FB:74:E3:D7:FA:C3:AA:03:BE:6D:00:14:5B:9A:3E Certificate issuer: /CN=16821FD22FFB74E3D7FAC3AA03BE6D00145B9A3E Certificate serial: 44FA14DC49A02A10760F91FEC60644A6129CB45D Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/16821FD22FFB74E3D7FAC3AA03BE6D00145B9A3E.cer Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_9f297e7e1f534033aaf93ce1e3b46ffc/0/16821FD22FFB74E3D7FAC3AA03BE6D00145B9A3E.mft Manifest number: 02F0 Signing time: Sat 14 Mar 2026 02:36:12 +0000 Manifest this update: Sat 14 Mar 2026 02:31:09 +0000 Manifest next update: Sun 15 Mar 2026 03:08:09 +0000 Files and hashes: 1: 16821FD22FFB74E3D7FAC3AA03BE6D00145B9A3E.crl (hash: u54I3DeJqyA7NVkKjn7aO7xeZ6Yhx3fF1d0p8DpF+LM=) Validation: OK Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_9f297e7e1f534033aaf93ce1e3b46ffc/0/16821FD22FFB74E3D7FAC3AA03BE6D00145B9A3E.crl rsync://rpki-repo.as207960.net/repo/rpki_ca_9f297e7e1f534033aaf93ce1e3b46ffc/0/16821FD22FFB74E3D7FAC3AA03BE6D00145B9A3E.mft rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/16821FD22FFB74E3D7FAC3AA03BE6D00145B9A3E.cer rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 14 Mar 2026 12:25:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:fa:14:dc:49:a0:2a:10:76:0f:91:fe:c6:06:44:a6:12:9c:b4:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=16821FD22FFB74E3D7FAC3AA03BE6D00145B9A3E Validity Not Before: Mar 14 02:31:09 2026 GMT Not After : Mar 15 03:08:09 2026 GMT Subject: CN=398485054792034295CD5D33246E66479317F065 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:e7:bc:35:a0:0d:25:39:96:02:57:a0:b3:6c: 60:a2:f9:85:0f:b8:ab:53:d7:25:9c:a4:92:be:b3: 8c:66:bc:c1:5b:13:07:ff:59:42:87:cb:82:59:76: 3c:c4:74:1d:39:45:dd:5c:1a:46:19:40:a6:97:61: f4:14:9c:fa:bb:68:08:52:b7:c7:e6:39:c0:9c:f2: 65:ba:7c:e0:7c:28:d6:1b:71:84:47:21:5f:26:6e: d1:bf:4f:ed:32:0f:24:5e:e4:a1:72:96:0d:9e:92: 47:e2:d1:2c:15:48:fb:19:5a:8f:94:02:0a:b9:f6: f2:e5:00:81:02:54:10:4c:d4:21:42:5e:1a:f5:a2: 4d:96:35:ed:b7:1e:79:39:a7:5f:c1:f1:31:22:fd: 3d:b4:6b:ff:fe:10:6d:0e:f0:3d:14:bc:09:17:c7: 52:2b:7d:f2:47:65:f2:fa:0a:62:ef:34:a4:c4:90: 60:ed:e0:aa:6d:af:f7:d2:5b:5b:73:f8:94:5e:4e: b2:92:aa:77:97:4d:6e:f7:84:e9:9c:24:6e:46:44: 5b:46:92:35:85:f8:bf:59:b6:b6:6a:ba:57:51:59: b3:d3:d2:66:e2:29:72:53:01:69:d6:da:5a:f9:97: 5a:e5:ec:a9:9b:ad:fb:9f:8c:83:b8:41:56:c6:b5: 39:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:84:85:05:47:92:03:42:95:CD:5D:33:24:6E:66:47:93:17:F0:65 X509v3 Authority Key Identifier: keyid:16:82:1F:D2:2F:FB:74:E3:D7:FA:C3:AA:03:BE:6D:00:14:5B:9A:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_9f297e7e1f534033aaf93ce1e3b46ffc/0/16821FD22FFB74E3D7FAC3AA03BE6D00145B9A3E.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/16821FD22FFB74E3D7FAC3AA03BE6D00145B9A3E.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_9f297e7e1f534033aaf93ce1e3b46ffc/0/16821FD22FFB74E3D7FAC3AA03BE6D00145B9A3E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:24:76:89:d5:4a:30:d2:1b:2e:4e:96:fd:99:0c:f9:e5:94: e5:b4:0c:99:e1:b6:b8:18:c8:64:d5:33:1f:ef:b6:7f:bd:91: d2:95:9f:d8:fd:cc:1a:89:b9:8a:f5:d1:6a:ed:e4:ca:9d:2b: a8:7d:6f:2a:e3:12:01:6c:03:e4:b6:f9:c8:4f:04:31:fa:48: 3e:11:0b:ba:2d:27:5a:e4:8c:ab:5c:78:bb:3d:ae:16:97:b8: 1b:aa:ef:7a:4b:a0:e6:b3:4f:fe:d4:c0:fe:67:a9:ee:7f:0f: cb:3d:0d:9f:20:18:bb:c8:29:8f:88:ee:ce:31:1f:9f:77:d8: 33:09:fe:33:b6:ff:16:08:64:17:0a:35:09:46:e6:56:9a:db: 3c:ca:1c:7f:e0:7e:13:78:7d:29:ac:02:a3:1c:31:8c:b5:ca: a2:81:2a:66:33:ca:bc:03:80:36:8b:9a:11:b5:37:4c:d9:da: 04:0f:9d:ad:c3:0a:99:7b:09:a9:42:0a:1b:e0:65:1c:2b:6a: aa:b3:fb:66:58:13:91:94:d7:02:1d:fa:13:ab:b4:29:e2:b7: dc:93:ff:94:5e:c3:42:d1:74:61:82:89:e9:1a:cf:a1:75:7e: 59:43:d6:ad:5a:83:94:49:a3:9d:59:a1:55:de:84:3e:50:cb: 34:40:7e:e2 -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIURPoU3EmgKhB2D5H+xgZEphKctF0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTY4MjFGRDIyRkZCNzRFM0Q3RkFDM0FBMDNCRTZEMDAx NDVCOUEzRTAeFw0yNjAzMTQwMjMxMDlaFw0yNjAzMTUwMzA4MDlaMDMxMTAvBgNV BAMTKDM5ODQ4NTA1NDc5MjAzNDI5NUNENUQzMzI0NkU2NjQ3OTMxN0YwNjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDD57w1oA0lOZYCV6CzbGCi+YUP uKtT1yWcpJK+s4xmvMFbEwf/WUKHy4JZdjzEdB05Rd1cGkYZQKaXYfQUnPq7aAhS t8fmOcCc8mW6fOB8KNYbcYRHIV8mbtG/T+0yDyRe5KFylg2ekkfi0SwVSPsZWo+U Agq59vLlAIECVBBM1CFCXhr1ok2WNe23Hnk5p1/B8TEi/T20a//+EG0O8D0UvAkX x1IrffJHZfL6CmLvNKTEkGDt4Kptr/fSW1tz+JReTrKSqneXTW73hOmcJG5GRFtG kjWF+L9ZtrZquldRWbPT0mbiKXJTAWnW2lr5l1rl7KmbrfufjIO4QVbGtTnBAgMB AAGjggJ4MIICdDAdBgNVHQ4EFgQUOYSFBUeSA0KVzV0zJG5mR5MX8GUwHwYDVR0j BBgwFoAUFoIf0i/7dOPX+sOqA75tABRbmj4wDgYDVR0PAQH/BAQDAgeAMIGPBgNV HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv cmVwby9ycGtpX2NhXzlmMjk3ZTdlMWY1MzQwMzNhYWY5M2NlMWUzYjQ2ZmZjLzAv MTY4MjFGRDIyRkZCNzRFM0Q3RkFDM0FBMDNCRTZEMDAxNDVCOUEzRS5jcmwwgZ4G CCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5wYWFz LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQxYjUtODJh MC1mMGQwMmMwM2EyYzYvNy8xNjgyMUZEMjJGRkI3NEUzRDdGQUMzQUEwM0JFNkQw MDE0NUI5QTNFLmNlcjCBmgYIKwYBBQUHAQsEgY0wgYowgYcGCCsGAQUFBzALhnty c3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQvcmVwby9ycGtpX2NhXzlmMjk3 ZTdlMWY1MzQwMzNhYWY5M2NlMWUzYjQ2ZmZjLzAvMTY4MjFGRDIyRkZCNzRFM0Q3 RkFDM0FBMDNCRTZEMDAxNDVCOUEzRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAEMkdonVSjDSGy5Olv2Z DPnllOW0DJnhtrgYyGTVMx/vtn+9kdKVn9j9zBqJuYr10Wrt5MqdK6h9byrjEgFs A+S2+chPBDH6SD4RC7otJ1rkjKtceLs9rhaXuBuq73pLoOazT/7UwP5nqe5/D8s9 DZ8gGLvIKY+I7s4xH5932DMJ/jO2/xYIZBcKNQlG5laa2zzKHH/gfhN4fSmsAqMc MYy1yqKBKmYzyrwDgDaLmhG1N0zZ2gQPna3DCpl7CalCChvgZRwraqqz+2ZYE5GU 1wId+hOrtCnit9yT/5Rew0LRdGGCiekaz6F1fllD1q1ag5RJo51ZoVXehD5QyzRA fuI= -----END CERTIFICATE-----Generated at Sat Mar 14 05:41:04 2026 by rpki-client