$ rpki-client -vvvf rpki-repo.as207960.net/repo/rpki_ca_3db8163f69224798ac2c463c0bca4d6b/0/16589CDE5DC3339CE7BBD4BB1C7C14647497C956.mft File: 16589CDE5DC3339CE7BBD4BB1C7C14647497C956.mft (raw, json) Hash identifier: ll963n01mRJPDVzCkZ3g1x6QT1WRKUPxvHbqRcsOsU8= Subject key identifier: 60:04:68:46:FB:06:82:5C:F2:88:45:7B:20:FD:3A:E5:79:E4:0B:5F Authority key identifier: 16:58:9C:DE:5D:C3:33:9C:E7:BB:D4:BB:1C:7C:14:64:74:97:C9:56 Certificate issuer: /CN=16589CDE5DC3339CE7BBD4BB1C7C14647497C956 Certificate serial: 0FCA80B83A507EE7E80E02E20A1C9B98C70E8C8E Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/16589CDE5DC3339CE7BBD4BB1C7C14647497C956.cer Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_3db8163f69224798ac2c463c0bca4d6b/0/16589CDE5DC3339CE7BBD4BB1C7C14647497C956.mft Manifest number: 0409 Signing time: Mon 19 Oct 2026 17:38:02 +0000 Manifest this update: Mon 19 Oct 2026 17:33:00 +0000 Manifest next update: Tue 20 Oct 2026 19:52:00 +0000 Files and hashes: 1: 16589CDE5DC3339CE7BBD4BB1C7C14647497C956.crl (hash: sD+aftonwRyJ2ameo7HJAefdAZ4xa5Qo7MM+/pACme0=) 2: 326131313a663263303a666666623a3a2f34382d3438203d3e20323033313035.roa (hash: c6cC288Nt+6ZLopbJZfrPCqS0RtJOJx9nVbb4es7uak=) Validation: OK Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_3db8163f69224798ac2c463c0bca4d6b/0/16589CDE5DC3339CE7BBD4BB1C7C14647497C956.crl rsync://rpki-repo.as207960.net/repo/rpki_ca_3db8163f69224798ac2c463c0bca4d6b/0/16589CDE5DC3339CE7BBD4BB1C7C14647497C956.mft rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/16589CDE5DC3339CE7BBD4BB1C7C14647497C956.cer rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Oct 2026 15:19:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:ca:80:b8:3a:50:7e:e7:e8:0e:02:e2:0a:1c:9b:98:c7:0e:8c:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=16589CDE5DC3339CE7BBD4BB1C7C14647497C956 Validity Not Before: Oct 19 17:33:00 2026 GMT Not After : Oct 20 19:52:00 2026 GMT Subject: CN=60046846FB06825CF288457B20FD3AE579E40B5F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:76:6e:c4:c3:36:72:7e:b7:3c:2d:c4:7d:c8: 6b:39:59:b7:8f:62:2d:94:f3:49:02:47:76:88:73: 20:96:4b:d5:6c:bc:84:fe:34:8a:dc:05:55:2a:ff: 81:bf:c2:e7:d1:71:f5:b2:d1:8a:fb:d6:cb:a3:b9: c1:29:1d:32:1f:72:5c:0f:eb:a7:29:53:fa:66:fe: 62:a4:ce:5a:6c:a2:a1:20:4e:5c:30:91:cc:45:bb: 67:c7:fd:ae:aa:8e:a0:01:f2:95:a5:c0:df:ef:f3: 39:2a:d2:0a:91:73:1e:24:c5:24:2f:71:13:24:56: 2f:09:b6:2a:c7:3d:ee:b3:be:65:0f:71:d5:1c:76: f2:27:e8:68:cc:7b:6b:9d:b3:cd:1f:e8:78:6f:f6: 21:1a:7a:b7:c5:36:21:26:6b:1f:1c:30:af:5a:2f: 0a:4d:3b:c9:0c:d1:d5:60:89:e0:40:cc:eb:91:71: 75:4b:12:2a:8c:30:aa:ab:7a:64:da:00:e1:8b:af: 6f:fa:75:37:bc:e3:98:57:d9:ab:39:3f:7b:2a:52: 73:29:6f:77:d1:b4:ff:ab:af:45:31:2f:41:32:62: 02:a8:2a:5c:70:89:03:a8:be:bf:ab:38:e8:32:9c: f6:28:33:97:69:fa:1c:04:6d:1d:df:1d:78:25:0a: 19:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:04:68:46:FB:06:82:5C:F2:88:45:7B:20:FD:3A:E5:79:E4:0B:5F X509v3 Authority Key Identifier: keyid:16:58:9C:DE:5D:C3:33:9C:E7:BB:D4:BB:1C:7C:14:64:74:97:C9:56 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_3db8163f69224798ac2c463c0bca4d6b/0/16589CDE5DC3339CE7BBD4BB1C7C14647497C956.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/16589CDE5DC3339CE7BBD4BB1C7C14647497C956.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_3db8163f69224798ac2c463c0bca4d6b/0/16589CDE5DC3339CE7BBD4BB1C7C14647497C956.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2d:b3:0e:9e:5e:02:66:dc:ac:83:d8:5d:1b:61:00:66:f3:3d: 97:30:16:14:ee:c9:8b:48:12:b9:c0:6d:25:67:94:ab:17:cf: e3:83:91:91:2c:8a:0b:ab:23:a3:59:4d:f7:5a:93:36:d8:e0: a6:0b:28:98:0b:81:2a:11:e8:1f:97:65:04:69:69:0c:f3:fb: f2:18:ec:13:14:43:66:6e:96:cb:78:6f:62:d7:71:ab:52:82: 51:d7:e1:8e:bf:43:89:43:60:ac:dd:a9:0c:34:92:f5:fc:8e: 4a:31:3b:94:f7:6a:7b:4f:84:02:fb:ed:0e:84:3f:38:ef:ad: 18:f4:35:d4:fd:2d:e7:42:71:3a:76:7b:4a:28:5b:b0:a2:8b: 79:ff:86:5b:86:0e:54:01:c7:fd:96:94:35:3a:83:01:20:92: 34:80:ff:d4:72:3d:b0:29:0e:d5:42:3d:55:68:c2:7a:83:0a: f0:e7:64:20:d8:80:5f:cf:ba:4f:9d:da:2d:8b:df:c2:f8:de: 06:59:f7:0f:ed:9a:9d:b6:bc:ee:63:3b:0e:93:81:e2:f7:6c: d9:7d:cb:25:c9:5b:d7:e0:1b:1a:94:b1:7d:b3:d5:33:06:5a: 1f:72:07:08:81:72:e9:c2:98:17:b0:31:55:63:f0:da:11:46: d2:55:6d:f1 -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIUD8qAuDpQfufoDgLiChybmMcOjI4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTY1ODlDREU1REMzMzM5Q0U3QkJENEJCMUM3QzE0NjQ3 NDk3Qzk1NjAeFw0yNjEwMTkxNzMzMDBaFw0yNjEwMjAxOTUyMDBaMDMxMTAvBgNV BAMTKDYwMDQ2ODQ2RkIwNjgyNUNGMjg4NDU3QjIwRkQzQUU1NzlFNDBCNUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFdm7EwzZyfrc8LcR9yGs5WbeP Yi2U80kCR3aIcyCWS9VsvIT+NIrcBVUq/4G/wufRcfWy0Yr71sujucEpHTIfclwP 66cpU/pm/mKkzlpsoqEgTlwwkcxFu2fH/a6qjqAB8pWlwN/v8zkq0gqRcx4kxSQv cRMkVi8JtirHPe6zvmUPcdUcdvIn6GjMe2uds80f6Hhv9iEaerfFNiEmax8cMK9a LwpNO8kM0dVgieBAzOuRcXVLEiqMMKqremTaAOGLr2/6dTe845hX2as5P3sqUnMp b3fRtP+rr0UxL0EyYgKoKlxwiQOovr+rOOgynPYoM5dp+hwEbR3fHXglChlZAgMB AAGjggJ4MIICdDAdBgNVHQ4EFgQUYARoRvsGglzyiEV7IP065XnkC18wHwYDVR0j BBgwFoAUFlic3l3DM5znu9S7HHwUZHSXyVYwDgYDVR0PAQH/BAQDAgeAMIGPBgNV HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv cmVwby9ycGtpX2NhXzNkYjgxNjNmNjkyMjQ3OThhYzJjNDYzYzBiY2E0ZDZiLzAv MTY1ODlDREU1REMzMzM5Q0U3QkJENEJCMUM3QzE0NjQ3NDk3Qzk1Ni5jcmwwgZ4G CCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5wYWFz LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQxYjUtODJh MC1mMGQwMmMwM2EyYzYvNy8xNjU4OUNERTVEQzMzMzlDRTdCQkQ0QkIxQzdDMTQ2 NDc0OTdDOTU2LmNlcjCBmgYIKwYBBQUHAQsEgY0wgYowgYcGCCsGAQUFBzALhnty c3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQvcmVwby9ycGtpX2NhXzNkYjgx NjNmNjkyMjQ3OThhYzJjNDYzYzBiY2E0ZDZiLzAvMTY1ODlDREU1REMzMzM5Q0U3 QkJENEJCMUM3QzE0NjQ3NDk3Qzk1Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAC2zDp5eAmbcrIPYXRth AGbzPZcwFhTuyYtIErnAbSVnlKsXz+ODkZEsigurI6NZTfdakzbY4KYLKJgLgSoR 6B+XZQRpaQzz+/IY7BMUQ2Zulst4b2LXcatSglHX4Y6/Q4lDYKzdqQw0kvX8jkox O5T3antPhAL77Q6EPzjvrRj0NdT9LedCcTp2e0ooW7Cii3n/hluGDlQBx/2WlDU6 gwEgkjSA/9RyPbApDtVCPVVownqDCvDnZCDYgF/Puk+d2i2L38L43gZZ9w/tmp22 vO5jOw6TgeL3bNl9yyXJW9fgGxqUsX2z1TMGWh9yBwiBcunCmBewMVVj8NoRRtJV bfE= -----END CERTIFICATE-----Generated at Tue Oct 20 04:23:49 2026 by rpki-client