$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_3db8163f69224798ac2c463c0bca4d6b/0/16589CDE5DC3339CE7BBD4BB1C7C14647497C956.mft File: 16589CDE5DC3339CE7BBD4BB1C7C14647497C956.mft (raw, json) Hash identifier: 9t0W9oVPSqTywfxQgyFYHcUrYPLAOAlzt/WIqHaU2Aw= Subject key identifier: 46:F2:7C:D5:68:E0:14:38:31:7A:AA:AB:C6:7C:4E:50:C6:B0:30:BC Authority key identifier: 16:58:9C:DE:5D:C3:33:9C:E7:BB:D4:BB:1C:7C:14:64:74:97:C9:56 Certificate issuer: /CN=16589CDE5DC3339CE7BBD4BB1C7C14647497C956 Certificate serial: 3DB2DAD5435F6A38644B3783D93B554241AA2BA7 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/16589CDE5DC3339CE7BBD4BB1C7C14647497C956.cer Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_3db8163f69224798ac2c463c0bca4d6b/0/16589CDE5DC3339CE7BBD4BB1C7C14647497C956.mft Manifest number: 026F Signing time: Tue 04 Nov 2025 23:39:30 +0000 Manifest this update: Tue 04 Nov 2025 23:34:30 +0000 Manifest next update: Thu 06 Nov 2025 03:36:30 +0000 Files and hashes: 1: 326131313a663263303a666666623a3a2f34382d3438203d3e20323033313035.roa (hash: oR5xdewUw9CCHlEGMS0Z24xgtiBxrNN/CytrFhUuC90=) 2: 16589CDE5DC3339CE7BBD4BB1C7C14647497C956.crl (hash: ZaO8wG0eyDTJ3KEQ0yOtoePfoNznK8S0LtQTv7lM1xw=) Validation: OK Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_3db8163f69224798ac2c463c0bca4d6b/0/16589CDE5DC3339CE7BBD4BB1C7C14647497C956.crl rsync://rpki-repo.as207960.net/repo/rpki_ca_3db8163f69224798ac2c463c0bca4d6b/0/16589CDE5DC3339CE7BBD4BB1C7C14647497C956.mft rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/16589CDE5DC3339CE7BBD4BB1C7C14647497C956.cer rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 05 Nov 2025 22:37:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:b2:da:d5:43:5f:6a:38:64:4b:37:83:d9:3b:55:42:41:aa:2b:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=16589CDE5DC3339CE7BBD4BB1C7C14647497C956 Validity Not Before: Nov 4 23:34:30 2025 GMT Not After : Nov 6 03:36:30 2025 GMT Subject: CN=46F27CD568E01438317AAAABC67C4E50C6B030BC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:6d:bf:9f:4d:ca:bf:38:1a:fe:e5:ef:c7:cd: da:fc:bf:bf:ee:3b:56:de:5a:e8:13:54:b3:c7:1e: 1d:40:9e:c2:82:65:eb:61:cb:b3:05:6c:5f:1f:c5: 3f:5d:ef:20:f1:0e:19:fb:01:d2:62:0a:27:0e:91: a4:7f:80:61:00:29:53:ac:6c:67:46:f5:44:6b:cb: 2f:d5:4f:b7:e0:7c:17:22:ea:06:a7:02:5f:6d:ea: d6:d1:c1:d8:f6:9a:20:42:a3:d3:32:66:6a:79:72: 66:0a:5d:27:be:00:9f:66:e5:2b:e0:e2:eb:c2:88: d2:0a:da:98:7d:de:6b:db:8d:dd:e0:dc:ed:d5:db: 00:4f:1b:c2:d5:10:fc:34:14:fc:de:f0:6a:11:80: 83:7d:bb:57:b1:fa:bc:e5:8b:57:1a:ac:a4:b0:cc: 2e:9a:6e:73:9f:e0:0f:9f:1c:42:ea:16:0e:6d:39: e7:93:fc:45:d8:73:4e:1a:a9:10:39:4b:d8:7b:b5: 20:1c:62:b5:da:1b:3e:bd:b8:ca:b4:1a:db:aa:83: fc:33:36:09:20:b5:24:16:ee:ae:e3:b7:9b:3f:d4: 2a:a5:34:36:f3:b4:ad:89:a6:11:7d:4d:d8:9e:82: 91:5e:7c:2f:87:36:b7:d6:da:0b:36:67:b3:13:a5: 07:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:F2:7C:D5:68:E0:14:38:31:7A:AA:AB:C6:7C:4E:50:C6:B0:30:BC X509v3 Authority Key Identifier: keyid:16:58:9C:DE:5D:C3:33:9C:E7:BB:D4:BB:1C:7C:14:64:74:97:C9:56 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_3db8163f69224798ac2c463c0bca4d6b/0/16589CDE5DC3339CE7BBD4BB1C7C14647497C956.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/16589CDE5DC3339CE7BBD4BB1C7C14647497C956.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_3db8163f69224798ac2c463c0bca4d6b/0/16589CDE5DC3339CE7BBD4BB1C7C14647497C956.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:6d:e0:3a:f8:e7:4a:6d:72:9f:77:6c:7b:04:4b:1a:4a:a9: 50:96:96:78:76:55:aa:fb:7a:4d:2e:b7:40:ec:d7:de:c4:f4: 03:58:04:b5:41:84:c8:c6:d5:0e:00:a0:1f:54:8d:c4:b2:a3: 6a:36:ca:8e:85:0c:d4:bd:d1:46:9c:f2:62:79:bd:ce:a3:dc: 8f:46:7c:62:fd:66:0e:20:dc:57:37:37:f7:45:da:05:2a:7f: f5:74:16:4a:2d:5b:78:7a:27:0a:b8:fb:ab:92:50:a4:11:52: 8c:7a:56:cd:d9:5d:ce:33:85:51:98:a9:2d:9b:88:27:4a:01: f9:b9:fc:eb:f0:4e:fe:9b:3d:e7:9a:df:d0:b9:a9:f3:59:f9: 1c:d9:75:21:ad:38:33:14:43:42:c0:d0:73:af:9e:3f:55:8d: b5:54:75:7e:ad:17:ff:55:49:eb:94:2e:47:c5:53:29:f9:16: c0:43:d6:41:96:64:b4:96:98:90:53:fd:0c:a5:c8:ab:3e:63: aa:f9:24:17:51:f2:7d:32:98:6e:3a:3d:8b:84:99:9e:eb:c0: c8:24:22:3e:20:17:6d:20:71:45:a5:66:de:36:06:1c:4c:79: 6a:16:fe:5a:3e:e4:e0:1b:94:e9:4b:a0:61:a1:70:99:d6:b5: ea:66:e8:19 -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIUPbLa1UNfajhkSzeD2TtVQkGqK6cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTY1ODlDREU1REMzMzM5Q0U3QkJENEJCMUM3QzE0NjQ3 NDk3Qzk1NjAeFw0yNTExMDQyMzM0MzBaFw0yNTExMDYwMzM2MzBaMDMxMTAvBgNV BAMTKDQ2RjI3Q0Q1NjhFMDE0MzgzMTdBQUFBQkM2N0M0RTUwQzZCMDMwQkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+bb+fTcq/OBr+5e/Hzdr8v7/u O1beWugTVLPHHh1AnsKCZethy7MFbF8fxT9d7yDxDhn7AdJiCicOkaR/gGEAKVOs bGdG9URryy/VT7fgfBci6ganAl9t6tbRwdj2miBCo9MyZmp5cmYKXSe+AJ9m5Svg 4uvCiNIK2ph93mvbjd3g3O3V2wBPG8LVEPw0FPze8GoRgIN9u1ex+rzli1carKSw zC6abnOf4A+fHELqFg5tOeeT/EXYc04aqRA5S9h7tSAcYrXaGz69uMq0Gtuqg/wz NgkgtSQW7q7jt5s/1CqlNDbztK2JphF9TdiegpFefC+HNrfW2gs2Z7MTpQdRAgMB AAGjggJ4MIICdDAdBgNVHQ4EFgQURvJ81WjgFDgxeqqrxnxOUMawMLwwHwYDVR0j BBgwFoAUFlic3l3DM5znu9S7HHwUZHSXyVYwDgYDVR0PAQH/BAQDAgeAMIGPBgNV HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv cmVwby9ycGtpX2NhXzNkYjgxNjNmNjkyMjQ3OThhYzJjNDYzYzBiY2E0ZDZiLzAv MTY1ODlDREU1REMzMzM5Q0U3QkJENEJCMUM3QzE0NjQ3NDk3Qzk1Ni5jcmwwgZ4G CCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5wYWFz LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQxYjUtODJh MC1mMGQwMmMwM2EyYzYvNy8xNjU4OUNERTVEQzMzMzlDRTdCQkQ0QkIxQzdDMTQ2 NDc0OTdDOTU2LmNlcjCBmgYIKwYBBQUHAQsEgY0wgYowgYcGCCsGAQUFBzALhnty c3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQvcmVwby9ycGtpX2NhXzNkYjgx NjNmNjkyMjQ3OThhYzJjNDYzYzBiY2E0ZDZiLzAvMTY1ODlDREU1REMzMzM5Q0U3 QkJENEJCMUM3QzE0NjQ3NDk3Qzk1Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAIht4Dr450ptcp93bHsE SxpKqVCWlnh2Var7ek0ut0Ds197E9ANYBLVBhMjG1Q4AoB9UjcSyo2o2yo6FDNS9 0Uac8mJ5vc6j3I9GfGL9Zg4g3Fc3N/dF2gUqf/V0FkotW3h6Jwq4+6uSUKQRUox6 Vs3ZXc4zhVGYqS2biCdKAfm5/OvwTv6bPeea39C5qfNZ+RzZdSGtODMUQ0LA0HOv nj9VjbVUdX6tF/9VSeuULkfFUyn5FsBD1kGWZLSWmJBT/QylyKs+Y6r5JBdR8n0y mG46PYuEmZ7rwMgkIj4gF20gcUWlZt42BhxMeWoW/lo+5OAblOlLoGGhcJnWtepm 6Bk= -----END CERTIFICATE-----Generated at Wed Nov 5 08:02:56 2025 by rpki-client