$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_3db8163f69224798ac2c463c0bca4d6b/0/16589CDE5DC3339CE7BBD4BB1C7C14647497C956.mft File: 16589CDE5DC3339CE7BBD4BB1C7C14647497C956.mft (raw, json) Hash identifier: d5k3OYqKgfeuiZpHqfqy6kk2X2U0vm3M7WgAB42FzP4= Subject key identifier: 34:06:F2:66:01:36:8E:7F:C0:9A:D8:AA:20:E7:48:BC:3E:AC:E0:18 Authority key identifier: 16:58:9C:DE:5D:C3:33:9C:E7:BB:D4:BB:1C:7C:14:64:74:97:C9:56 Certificate issuer: /CN=16589CDE5DC3339CE7BBD4BB1C7C14647497C956 Certificate serial: 5FD173BD9721CF06012E70E8ADE441D3523E829A Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/16589CDE5DC3339CE7BBD4BB1C7C14647497C956.cer Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_3db8163f69224798ac2c463c0bca4d6b/0/16589CDE5DC3339CE7BBD4BB1C7C14647497C956.mft Manifest number: 01CD Signing time: Tue 17 Jun 2025 12:15:58 +0000 Manifest this update: Tue 17 Jun 2025 12:10:58 +0000 Manifest next update: Wed 18 Jun 2025 14:40:58 +0000 Files and hashes: 1: 16589CDE5DC3339CE7BBD4BB1C7C14647497C956.crl (hash: IyaTvGySpRbKEm9o+MQ7kAM28dDHrRVn+/jLJHdbm80=) 2: 326131313a663263303a666666623a3a2f34382d3438203d3e20323033313035.roa (hash: oR5xdewUw9CCHlEGMS0Z24xgtiBxrNN/CytrFhUuC90=) Validation: OK Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_3db8163f69224798ac2c463c0bca4d6b/0/16589CDE5DC3339CE7BBD4BB1C7C14647497C956.crl rsync://rpki-repo.as207960.net/repo/rpki_ca_3db8163f69224798ac2c463c0bca4d6b/0/16589CDE5DC3339CE7BBD4BB1C7C14647497C956.mft rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/16589CDE5DC3339CE7BBD4BB1C7C14647497C956.cer rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 18 Jun 2025 10:26:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:d1:73:bd:97:21:cf:06:01:2e:70:e8:ad:e4:41:d3:52:3e:82:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=16589CDE5DC3339CE7BBD4BB1C7C14647497C956 Validity Not Before: Jun 17 12:10:58 2025 GMT Not After : Jun 18 14:40:58 2025 GMT Subject: CN=3406F26601368E7FC09AD8AA20E748BC3EACE018 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:75:64:e1:5a:56:73:3d:22:1d:7b:e8:bf:c4: 77:1c:d3:f3:2e:1c:b6:15:15:e7:b7:06:4f:4e:d4: b8:e0:35:22:25:6b:da:a9:9c:a7:83:dd:c1:91:58: d0:82:17:16:1a:d9:c4:b8:d1:3c:5c:42:42:e5:7f: a6:a1:46:bc:ac:8f:48:4d:3b:0b:9b:26:88:3b:4c: 3a:93:5c:c7:4c:5e:dd:7e:65:b3:d9:be:2a:fb:9c: db:4e:21:06:17:a0:96:df:66:7f:32:6b:7a:1b:94: b4:57:d2:9b:c2:1c:a7:c4:53:33:88:2f:4a:c3:90: b2:3e:00:1f:af:27:8f:ae:6b:a9:3b:5d:57:38:8a: f1:4f:9c:f7:7d:e8:9c:93:8e:d0:d8:cb:68:d3:5c: c8:c2:d8:7f:5f:6c:f6:44:d7:56:d1:1a:ab:04:ac: ed:2a:df:d3:21:73:18:ff:eb:05:81:c5:f7:b9:ce: de:b1:b2:ae:e7:da:a4:63:0e:ec:14:40:d1:1d:16: d1:3b:44:39:c6:a2:2a:27:ac:f3:36:e2:07:03:af: 38:fd:53:a9:2c:26:ed:9a:d6:11:c4:32:1e:1e:d3: 83:a2:21:c9:8e:aa:4c:31:57:ac:74:53:40:69:1d: 5a:02:c0:eb:a8:26:a1:57:7b:f2:aa:93:7e:48:65: 6f:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:06:F2:66:01:36:8E:7F:C0:9A:D8:AA:20:E7:48:BC:3E:AC:E0:18 X509v3 Authority Key Identifier: keyid:16:58:9C:DE:5D:C3:33:9C:E7:BB:D4:BB:1C:7C:14:64:74:97:C9:56 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_3db8163f69224798ac2c463c0bca4d6b/0/16589CDE5DC3339CE7BBD4BB1C7C14647497C956.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/16589CDE5DC3339CE7BBD4BB1C7C14647497C956.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_3db8163f69224798ac2c463c0bca4d6b/0/16589CDE5DC3339CE7BBD4BB1C7C14647497C956.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:99:98:63:e2:83:78:0b:6f:5f:9e:3b:07:77:d1:7c:3c:5a: d0:32:a7:63:79:7a:20:c9:98:cc:8a:9b:7a:c0:2e:e4:a0:a9: 8d:4d:6d:74:36:a8:a0:ff:f0:6f:d6:1a:b9:f7:ae:77:2e:18: 0c:62:3d:f7:1c:da:2d:e3:b2:7f:85:50:4c:14:c2:d6:88:13: d7:76:bf:bf:b7:25:1c:0c:69:b3:d6:30:4a:e4:51:25:40:1d: 13:2c:f0:95:ed:db:e0:ec:8f:76:83:20:ff:56:52:08:c7:34: a1:23:6c:5c:22:c0:f8:ca:93:94:be:36:ba:78:da:8d:81:05: 64:f3:7c:c0:84:90:3b:e2:2a:b0:b7:c6:a7:a0:24:0b:cf:7e: 17:b4:36:c4:66:df:3d:5d:ba:04:63:31:4c:94:d4:ba:72:45: f1:ec:83:c4:d7:f2:48:fb:ea:2b:4b:a6:ee:6b:fc:53:bf:1d: 4c:37:99:2f:fb:58:04:d0:2f:c1:0d:37:e5:7f:c8:ed:7b:b6: 9a:70:ad:b5:7c:bc:52:5f:cf:02:5f:16:44:16:24:0a:37:cf: f6:6e:03:01:8d:03:90:22:b6:28:e5:62:0d:68:1f:a4:3b:1a: 19:7c:20:29:e4:3c:92:bd:ff:c7:d3:d4:cb:f9:29:3c:b2:12: 64:39:f2:4d -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIUX9FzvZchzwYBLnDoreRB01I+gpowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTY1ODlDREU1REMzMzM5Q0U3QkJENEJCMUM3QzE0NjQ3 NDk3Qzk1NjAeFw0yNTA2MTcxMjEwNThaFw0yNTA2MTgxNDQwNThaMDMxMTAvBgNV BAMTKDM0MDZGMjY2MDEzNjhFN0ZDMDlBRDhBQTIwRTc0OEJDM0VBQ0UwMTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCMdWThWlZzPSIde+i/xHcc0/Mu HLYVFee3Bk9O1LjgNSIla9qpnKeD3cGRWNCCFxYa2cS40TxcQkLlf6ahRrysj0hN OwubJog7TDqTXMdMXt1+ZbPZvir7nNtOIQYXoJbfZn8ya3oblLRX0pvCHKfEUzOI L0rDkLI+AB+vJ4+ua6k7XVc4ivFPnPd96JyTjtDYy2jTXMjC2H9fbPZE11bRGqsE rO0q39Mhcxj/6wWBxfe5zt6xsq7n2qRjDuwUQNEdFtE7RDnGoionrPM24gcDrzj9 U6ksJu2a1hHEMh4e04OiIcmOqkwxV6x0U0BpHVoCwOuoJqFXe/Kqk35IZW9XAgMB AAGjggJ4MIICdDAdBgNVHQ4EFgQUNAbyZgE2jn/AmtiqIOdIvD6s4BgwHwYDVR0j BBgwFoAUFlic3l3DM5znu9S7HHwUZHSXyVYwDgYDVR0PAQH/BAQDAgeAMIGPBgNV HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv cmVwby9ycGtpX2NhXzNkYjgxNjNmNjkyMjQ3OThhYzJjNDYzYzBiY2E0ZDZiLzAv MTY1ODlDREU1REMzMzM5Q0U3QkJENEJCMUM3QzE0NjQ3NDk3Qzk1Ni5jcmwwgZ4G CCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5wYWFz LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQxYjUtODJh MC1mMGQwMmMwM2EyYzYvNy8xNjU4OUNERTVEQzMzMzlDRTdCQkQ0QkIxQzdDMTQ2 NDc0OTdDOTU2LmNlcjCBmgYIKwYBBQUHAQsEgY0wgYowgYcGCCsGAQUFBzALhnty c3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQvcmVwby9ycGtpX2NhXzNkYjgx NjNmNjkyMjQ3OThhYzJjNDYzYzBiY2E0ZDZiLzAvMTY1ODlDREU1REMzMzM5Q0U3 QkJENEJCMUM3QzE0NjQ3NDk3Qzk1Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAIeZmGPig3gLb1+eOwd3 0Xw8WtAyp2N5eiDJmMyKm3rALuSgqY1NbXQ2qKD/8G/WGrn3rncuGAxiPfcc2i3j sn+FUEwUwtaIE9d2v7+3JRwMabPWMErkUSVAHRMs8JXt2+Dsj3aDIP9WUgjHNKEj bFwiwPjKk5S+Nrp42o2BBWTzfMCEkDviKrC3xqegJAvPfhe0NsRm3z1dugRjMUyU 1LpyRfHsg8TX8kj76itLpu5r/FO/HUw3mS/7WATQL8ENN+V/yO17tppwrbV8vFJf zwJfFkQWJAo3z/ZuAwGNA5AitijlYg1oH6Q7Ghl8ICnkPJK9/8fT1Mv5KTyyEmQ5 8k0= -----END CERTIFICATE-----Generated at Wed Jun 18 01:46:30 2025 by rpki-client