$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_3db8163f69224798ac2c463c0bca4d6b/0/16589CDE5DC3339CE7BBD4BB1C7C14647497C956.mft File: 16589CDE5DC3339CE7BBD4BB1C7C14647497C956.mft (raw, json) Hash identifier: 86RF3HnTzxp1jjgvt6dmmOjjS+Xw0Ky897bnX3jWJB0= Subject key identifier: 99:14:26:48:23:2D:CA:46:AA:C5:3F:EA:05:BF:63:E3:70:26:53:6C Authority key identifier: 16:58:9C:DE:5D:C3:33:9C:E7:BB:D4:BB:1C:7C:14:64:74:97:C9:56 Certificate issuer: /CN=16589CDE5DC3339CE7BBD4BB1C7C14647497C956 Certificate serial: 77AFBA2180E2D291B4FFC38802C37116D7FAE2D3 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/16589CDE5DC3339CE7BBD4BB1C7C14647497C956.cer Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_3db8163f69224798ac2c463c0bca4d6b/0/16589CDE5DC3339CE7BBD4BB1C7C14647497C956.mft Manifest number: 018C Signing time: Wed 30 Apr 2025 11:37:53 +0000 Manifest this update: Wed 30 Apr 2025 11:32:51 +0000 Manifest next update: Thu 01 May 2025 12:21:51 +0000 Files and hashes: 1: 16589CDE5DC3339CE7BBD4BB1C7C14647497C956.crl (hash: cf/bRbqz7W9IaEbEtnhUlFjQuWsUJLPLZdcDTXae3as=) 2: 326131313a663263303a666666623a3a2f34382d3438203d3e20323033313035.roa (hash: CRdzdHWSYcmiZSUenz1Z8qs+SDNJcoSUoxr755stLH4=) Validation: OK Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_3db8163f69224798ac2c463c0bca4d6b/0/16589CDE5DC3339CE7BBD4BB1C7C14647497C956.crl rsync://rpki-repo.as207960.net/repo/rpki_ca_3db8163f69224798ac2c463c0bca4d6b/0/16589CDE5DC3339CE7BBD4BB1C7C14647497C956.mft rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/16589CDE5DC3339CE7BBD4BB1C7C14647497C956.cer rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 01 May 2025 12:21:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:af:ba:21:80:e2:d2:91:b4:ff:c3:88:02:c3:71:16:d7:fa:e2:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=16589CDE5DC3339CE7BBD4BB1C7C14647497C956 Validity Not Before: Apr 30 11:32:51 2025 GMT Not After : May 1 12:21:51 2025 GMT Subject: CN=99142648232DCA46AAC53FEA05BF63E37026536C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:48:61:9e:a1:f4:a0:3b:8a:bd:86:eb:b3:87: 07:65:e0:f8:6b:c1:68:cd:97:23:22:f5:05:70:c7: 93:a5:a8:0e:52:72:a9:3e:ed:db:d8:de:a9:e6:1f: c0:69:ee:57:29:50:f7:3a:f4:18:9d:fc:c0:03:62: 07:a6:07:15:fe:30:a7:01:cb:0d:9b:9c:58:1b:7d: 2e:3c:36:4e:90:88:b3:c2:87:73:27:00:3d:54:60: fd:b9:06:eb:e9:6c:0e:78:e6:39:f3:3b:73:ae:cf: bc:1c:b6:3e:62:79:07:ee:33:1e:fd:dd:ba:c3:69: b6:2b:78:c4:03:a0:07:39:33:36:bf:7d:cc:ee:ed: a1:f2:e3:f7:4b:d5:26:43:10:bd:aa:39:1e:89:3b: 76:2e:e8:86:2f:0f:00:01:3d:08:85:cc:cd:ef:63: 00:78:f9:18:34:03:fc:23:65:9e:ab:cb:16:54:00: 0a:99:14:36:fe:89:a9:81:f2:0e:ae:85:12:b5:0e: 34:3f:be:cb:8b:62:3e:a7:b3:24:62:86:b6:5e:72: b9:ad:c1:4c:2d:14:59:21:a8:99:53:36:bc:cd:78: f1:06:f1:d6:37:b2:b6:a0:c5:d6:3d:42:fb:0e:ab: ff:b2:3e:3f:e5:5b:b2:6e:57:02:fa:29:1b:45:ec: cf:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:14:26:48:23:2D:CA:46:AA:C5:3F:EA:05:BF:63:E3:70:26:53:6C X509v3 Authority Key Identifier: keyid:16:58:9C:DE:5D:C3:33:9C:E7:BB:D4:BB:1C:7C:14:64:74:97:C9:56 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_3db8163f69224798ac2c463c0bca4d6b/0/16589CDE5DC3339CE7BBD4BB1C7C14647497C956.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/16589CDE5DC3339CE7BBD4BB1C7C14647497C956.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_3db8163f69224798ac2c463c0bca4d6b/0/16589CDE5DC3339CE7BBD4BB1C7C14647497C956.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d9:22:aa:f7:41:12:8c:2b:cd:3a:e8:82:88:a5:c5:a8:f5:87: 3c:94:77:de:78:a1:18:c7:b7:cb:bd:78:64:fa:f4:f6:3a:d2: 8f:94:21:1c:9d:f1:f3:77:c4:cc:e3:10:e5:a4:48:04:7a:67: 4a:57:75:c9:ed:ab:16:e1:87:0b:b0:fe:b2:b7:99:28:dc:ee: 74:36:fc:a3:f6:40:cd:61:c1:a3:33:f5:2b:e4:6d:94:73:cb: d1:59:d8:bb:e6:d6:e6:d2:2e:b1:77:8c:15:a0:6d:b0:95:05: d6:1b:de:ca:56:a3:df:8b:ee:a0:26:d2:f8:00:63:d4:96:30: cf:88:74:12:7c:04:52:cd:bd:1c:9f:12:4c:2c:0b:b1:09:7b: a8:79:a2:d5:29:b0:6e:58:f3:49:6f:c8:cc:e8:d3:64:85:b2: 03:d8:46:80:20:5c:ca:9c:5b:46:46:70:03:b3:89:ac:4b:9d: 5a:31:96:7d:6d:2d:bb:64:39:b0:9c:63:e6:f7:9b:45:5e:69: 1d:af:21:9c:d6:af:0d:64:8d:a2:3b:f7:df:f9:1b:ce:66:5c: 0e:44:19:98:51:40:48:20:7c:6d:e7:12:99:ae:13:1b:1a:d6: 26:ea:15:cb:b0:ee:ec:9c:d6:be:fa:b6:8b:e0:24:50:47:42: ed:d3:b7:ae -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIUd6+6IYDi0pG0/8OIAsNxFtf64tMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTY1ODlDREU1REMzMzM5Q0U3QkJENEJCMUM3QzE0NjQ3 NDk3Qzk1NjAeFw0yNTA0MzAxMTMyNTFaFw0yNTA1MDExMjIxNTFaMDMxMTAvBgNV BAMTKDk5MTQyNjQ4MjMyRENBNDZBQUM1M0ZFQTA1QkY2M0UzNzAyNjUzNkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgSGGeofSgO4q9huuzhwdl4Phr wWjNlyMi9QVwx5OlqA5Scqk+7dvY3qnmH8Bp7lcpUPc69Bid/MADYgemBxX+MKcB yw2bnFgbfS48Nk6QiLPCh3MnAD1UYP25BuvpbA545jnzO3Ouz7wctj5ieQfuMx79 3brDabYreMQDoAc5Mza/fczu7aHy4/dL1SZDEL2qOR6JO3Yu6IYvDwABPQiFzM3v YwB4+Rg0A/wjZZ6ryxZUAAqZFDb+iamB8g6uhRK1DjQ/vsuLYj6nsyRihrZecrmt wUwtFFkhqJlTNrzNePEG8dY3sragxdY9QvsOq/+yPj/lW7JuVwL6KRtF7M8lAgMB AAGjggJ4MIICdDAdBgNVHQ4EFgQUmRQmSCMtykaqxT/qBb9j43AmU2wwHwYDVR0j BBgwFoAUFlic3l3DM5znu9S7HHwUZHSXyVYwDgYDVR0PAQH/BAQDAgeAMIGPBgNV HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv cmVwby9ycGtpX2NhXzNkYjgxNjNmNjkyMjQ3OThhYzJjNDYzYzBiY2E0ZDZiLzAv MTY1ODlDREU1REMzMzM5Q0U3QkJENEJCMUM3QzE0NjQ3NDk3Qzk1Ni5jcmwwgZ4G CCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5wYWFz LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQxYjUtODJh MC1mMGQwMmMwM2EyYzYvNy8xNjU4OUNERTVEQzMzMzlDRTdCQkQ0QkIxQzdDMTQ2 NDc0OTdDOTU2LmNlcjCBmgYIKwYBBQUHAQsEgY0wgYowgYcGCCsGAQUFBzALhnty c3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQvcmVwby9ycGtpX2NhXzNkYjgx NjNmNjkyMjQ3OThhYzJjNDYzYzBiY2E0ZDZiLzAvMTY1ODlDREU1REMzMzM5Q0U3 QkJENEJCMUM3QzE0NjQ3NDk3Qzk1Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBANkiqvdBEowrzTrogoil xaj1hzyUd954oRjHt8u9eGT69PY60o+UIRyd8fN3xMzjEOWkSAR6Z0pXdcntqxbh hwuw/rK3mSjc7nQ2/KP2QM1hwaMz9SvkbZRzy9FZ2Lvm1ubSLrF3jBWgbbCVBdYb 3spWo9+L7qAm0vgAY9SWMM+IdBJ8BFLNvRyfEkwsC7EJe6h5otUpsG5Y80lvyMzo 02SFsgPYRoAgXMqcW0ZGcAOziaxLnVoxln1tLbtkObCcY+b3m0VeaR2vIZzWrw1k jaI799/5G85mXA5EGZhRQEggfG3nEpmuExsa1ibqFcuw7uyc1r76tovgJFBHQu3T t64= -----END CERTIFICATE-----Generated at Wed Apr 30 19:20:48 2025 by rpki-client