$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_3db8163f69224798ac2c463c0bca4d6b/0/16589CDE5DC3339CE7BBD4BB1C7C14647497C956.mft File: 16589CDE5DC3339CE7BBD4BB1C7C14647497C956.mft (raw, json) Hash identifier: wWWNPYVKTipH5GqXQLeB2RZOVz/3VWJf6RDh8UEr8Ss= Subject key identifier: 35:D7:E8:12:22:91:82:C4:DD:0B:06:48:D4:CE:D6:28:DC:FC:8E:60 Authority key identifier: 16:58:9C:DE:5D:C3:33:9C:E7:BB:D4:BB:1C:7C:14:64:74:97:C9:56 Certificate issuer: /CN=16589CDE5DC3339CE7BBD4BB1C7C14647497C956 Certificate serial: 3E1AD9408F0C3C6BC4AAF29C66127F99F17AF87D Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/16589CDE5DC3339CE7BBD4BB1C7C14647497C956.cer Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_3db8163f69224798ac2c463c0bca4d6b/0/16589CDE5DC3339CE7BBD4BB1C7C14647497C956.mft Manifest number: 0213 Signing time: Fri 08 Aug 2025 13:56:45 +0000 Manifest this update: Fri 08 Aug 2025 13:51:45 +0000 Manifest next update: Sat 09 Aug 2025 13:58:45 +0000 Files and hashes: 1: 16589CDE5DC3339CE7BBD4BB1C7C14647497C956.crl (hash: HlO+BiKj6/C3ES5yQkoOMZAWyrnOsO7rjPUlTv4z3J8=) 2: 326131313a663263303a666666623a3a2f34382d3438203d3e20323033313035.roa (hash: oR5xdewUw9CCHlEGMS0Z24xgtiBxrNN/CytrFhUuC90=) Validation: OK Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_3db8163f69224798ac2c463c0bca4d6b/0/16589CDE5DC3339CE7BBD4BB1C7C14647497C956.crl rsync://rpki-repo.as207960.net/repo/rpki_ca_3db8163f69224798ac2c463c0bca4d6b/0/16589CDE5DC3339CE7BBD4BB1C7C14647497C956.mft rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/16589CDE5DC3339CE7BBD4BB1C7C14647497C956.cer rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 09 Aug 2025 11:00:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:1a:d9:40:8f:0c:3c:6b:c4:aa:f2:9c:66:12:7f:99:f1:7a:f8:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=16589CDE5DC3339CE7BBD4BB1C7C14647497C956 Validity Not Before: Aug 8 13:51:45 2025 GMT Not After : Aug 9 13:58:45 2025 GMT Subject: CN=35D7E812229182C4DD0B0648D4CED628DCFC8E60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:3f:ca:66:72:b9:e2:01:73:cf:b8:36:fa:dd: d3:47:31:58:9d:3e:56:30:0a:7a:fe:96:50:31:14: 40:bb:f5:7d:b2:41:76:19:7e:73:44:2d:45:fd:70: 96:3d:9f:75:b9:c6:6b:a4:a4:34:68:e6:f4:0c:0b: d3:b1:11:79:1b:90:2c:e5:db:5f:4c:02:82:71:41: 5b:82:8d:4d:27:4d:ec:5c:e7:4e:97:33:a2:2a:46: a8:81:a1:3e:34:00:9f:81:cc:9a:28:eb:cd:1f:5e: c2:14:ed:9d:fa:91:3b:60:1a:18:c7:69:e6:00:02: 4b:7b:d2:61:1f:de:8c:62:25:c7:31:6f:2e:f1:52: 51:7c:91:74:e7:ea:ef:a7:7a:a9:2d:cd:c4:94:b9: bc:b0:a8:36:3d:2a:8f:fc:0b:07:09:0f:51:ee:6d: 91:48:5c:cf:54:4a:21:d2:79:c0:25:b3:09:8e:24: 99:12:3e:a5:d8:44:c1:3c:bd:2d:39:4c:66:ed:48: 79:69:57:22:3e:a0:8d:a2:f1:22:83:dd:0c:0f:94: 51:8d:6b:72:58:2b:3b:41:33:82:28:fe:23:56:01: 3e:3d:90:39:c5:ab:5b:e8:08:c5:23:fd:82:5d:ee: 14:89:56:36:5f:22:01:54:d0:19:78:66:11:01:40: 8f:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:D7:E8:12:22:91:82:C4:DD:0B:06:48:D4:CE:D6:28:DC:FC:8E:60 X509v3 Authority Key Identifier: keyid:16:58:9C:DE:5D:C3:33:9C:E7:BB:D4:BB:1C:7C:14:64:74:97:C9:56 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_3db8163f69224798ac2c463c0bca4d6b/0/16589CDE5DC3339CE7BBD4BB1C7C14647497C956.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/16589CDE5DC3339CE7BBD4BB1C7C14647497C956.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_3db8163f69224798ac2c463c0bca4d6b/0/16589CDE5DC3339CE7BBD4BB1C7C14647497C956.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b2:79:15:2c:ac:ac:6b:0c:57:01:fd:51:c4:29:30:c7:09:01: 92:6a:04:3e:e8:e2:24:ac:dd:32:8e:7f:f5:95:31:1d:80:25: 12:ce:03:28:8c:53:f7:2b:ef:a2:4a:9b:0b:96:ba:2a:93:ed: f8:e3:82:f5:13:20:ae:5a:3e:f9:c4:d4:77:46:b7:39:ca:8e: b8:5d:c9:5d:c0:db:3a:40:34:90:62:b3:d9:8f:62:b4:e7:2a: 42:bb:aa:49:04:22:9b:13:68:b2:45:ee:ca:b7:d6:3f:b5:75: b6:d2:ee:c4:b4:49:a3:17:6b:38:30:6f:89:d6:8a:73:84:d7: 2f:76:6c:77:af:85:58:30:8d:8e:2a:12:3a:b3:4d:0f:a5:51: 2b:74:11:14:49:5c:0f:24:55:63:1d:a3:ae:d8:ec:9e:b8:d1: 8e:f3:20:89:0c:b2:5f:48:d4:47:56:ef:ba:00:95:58:2e:f5: 49:a4:40:b6:26:7e:47:06:0a:65:9c:10:d6:0e:7e:75:a4:7a: ea:1c:ba:5c:fd:bc:9d:fb:e9:71:28:a9:ef:eb:a4:d3:73:b0: 0d:60:2e:75:9e:8e:75:91:e3:e2:07:5a:d9:70:50:f3:91:f4: 27:d5:c9:a9:3b:f8:c8:ea:cb:44:87:14:8e:6a:48:c6:4e:21: 58:d0:fc:af -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIUPhrZQI8MPGvEqvKcZhJ/mfF6+H0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTY1ODlDREU1REMzMzM5Q0U3QkJENEJCMUM3QzE0NjQ3 NDk3Qzk1NjAeFw0yNTA4MDgxMzUxNDVaFw0yNTA4MDkxMzU4NDVaMDMxMTAvBgNV BAMTKDM1RDdFODEyMjI5MTgyQzRERDBCMDY0OEQ0Q0VENjI4RENGQzhFNjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzP8pmcrniAXPPuDb63dNHMVid PlYwCnr+llAxFEC79X2yQXYZfnNELUX9cJY9n3W5xmukpDRo5vQMC9OxEXkbkCzl 219MAoJxQVuCjU0nTexc506XM6IqRqiBoT40AJ+BzJoo680fXsIU7Z36kTtgGhjH aeYAAkt70mEf3oxiJccxby7xUlF8kXTn6u+neqktzcSUubywqDY9Ko/8CwcJD1Hu bZFIXM9USiHSecAlswmOJJkSPqXYRME8vS05TGbtSHlpVyI+oI2i8SKD3QwPlFGN a3JYKztBM4Io/iNWAT49kDnFq1voCMUj/YJd7hSJVjZfIgFU0Bl4ZhEBQI8XAgMB AAGjggJ4MIICdDAdBgNVHQ4EFgQUNdfoEiKRgsTdCwZI1M7WKNz8jmAwHwYDVR0j BBgwFoAUFlic3l3DM5znu9S7HHwUZHSXyVYwDgYDVR0PAQH/BAQDAgeAMIGPBgNV HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv cmVwby9ycGtpX2NhXzNkYjgxNjNmNjkyMjQ3OThhYzJjNDYzYzBiY2E0ZDZiLzAv MTY1ODlDREU1REMzMzM5Q0U3QkJENEJCMUM3QzE0NjQ3NDk3Qzk1Ni5jcmwwgZ4G CCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5wYWFz LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQxYjUtODJh MC1mMGQwMmMwM2EyYzYvNy8xNjU4OUNERTVEQzMzMzlDRTdCQkQ0QkIxQzdDMTQ2 NDc0OTdDOTU2LmNlcjCBmgYIKwYBBQUHAQsEgY0wgYowgYcGCCsGAQUFBzALhnty c3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQvcmVwby9ycGtpX2NhXzNkYjgx NjNmNjkyMjQ3OThhYzJjNDYzYzBiY2E0ZDZiLzAvMTY1ODlDREU1REMzMzM5Q0U3 QkJENEJCMUM3QzE0NjQ3NDk3Qzk1Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBALJ5FSysrGsMVwH9UcQp MMcJAZJqBD7o4iSs3TKOf/WVMR2AJRLOAyiMU/cr76JKmwuWuiqT7fjjgvUTIK5a PvnE1HdGtznKjrhdyV3A2zpANJBis9mPYrTnKkK7qkkEIpsTaLJF7sq31j+1dbbS 7sS0SaMXazgwb4nWinOE1y92bHevhVgwjY4qEjqzTQ+lUSt0ERRJXA8kVWMdo67Y 7J640Y7zIIkMsl9I1EdW77oAlVgu9UmkQLYmfkcGCmWcENYOfnWkeuoculz9vJ37 6XEoqe/rpNNzsA1gLnWejnWR4+IHWtlwUPOR9CfVyak7+Mjqy0SHFI5qSMZOIVjQ /K8= -----END CERTIFICATE-----Generated at Fri Aug 8 20:57:16 2025 by rpki-client