$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_3db8163f69224798ac2c463c0bca4d6b/0/16589CDE5DC3339CE7BBD4BB1C7C14647497C956.mft File: 16589CDE5DC3339CE7BBD4BB1C7C14647497C956.mft (raw, json) Hash identifier: BlM85Y2sjE+Qsc+4p9qGXZAfA36v42EFIbJpgcILySE= Subject key identifier: AE:DC:D6:2B:98:1C:1D:6D:6A:1D:A9:A1:EA:D7:B2:64:B7:75:7E:36 Authority key identifier: 16:58:9C:DE:5D:C3:33:9C:E7:BB:D4:BB:1C:7C:14:64:74:97:C9:56 Certificate issuer: /CN=16589CDE5DC3339CE7BBD4BB1C7C14647497C956 Certificate serial: 7C74E642E6FB8537B094D4D53D3FA5AE945423E7 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/16589CDE5DC3339CE7BBD4BB1C7C14647497C956.cer Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_3db8163f69224798ac2c463c0bca4d6b/0/16589CDE5DC3339CE7BBD4BB1C7C14647497C956.mft Manifest number: 03AD Signing time: Wed 29 Jul 2026 09:36:17 +0000 Manifest this update: Wed 29 Jul 2026 09:31:17 +0000 Manifest next update: Thu 30 Jul 2026 12:55:17 +0000 Files and hashes: 1: 16589CDE5DC3339CE7BBD4BB1C7C14647497C956.crl (hash: MQTfDvvrsBS8G5Yuoj538x2CrgBnalKakKU4eXg0OuA=) 2: 326131313a663263303a666666623a3a2f34382d3438203d3e20323033313035.roa (hash: c6cC288Nt+6ZLopbJZfrPCqS0RtJOJx9nVbb4es7uak=) Validation: OK Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_3db8163f69224798ac2c463c0bca4d6b/0/16589CDE5DC3339CE7BBD4BB1C7C14647497C956.crl rsync://rpki-repo.as207960.net/repo/rpki_ca_3db8163f69224798ac2c463c0bca4d6b/0/16589CDE5DC3339CE7BBD4BB1C7C14647497C956.mft rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/16589CDE5DC3339CE7BBD4BB1C7C14647497C956.cer rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 30 Jul 2026 01:13:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:74:e6:42:e6:fb:85:37:b0:94:d4:d5:3d:3f:a5:ae:94:54:23:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=16589CDE5DC3339CE7BBD4BB1C7C14647497C956 Validity Not Before: Jul 29 09:31:17 2026 GMT Not After : Jul 30 12:55:17 2026 GMT Subject: CN=AEDCD62B981C1D6D6A1DA9A1EAD7B264B7757E36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:39:ba:d7:58:80:96:5c:66:26:31:d6:26:02: 76:f7:13:6b:f6:5d:9e:c5:6f:14:2d:45:c6:6c:e1: 6e:70:0e:54:e8:08:0a:b6:1c:de:bb:01:e7:68:97: e2:d9:a2:de:bf:13:0b:a3:2c:66:2a:7d:df:4d:2a: 95:d4:5f:c5:ee:c8:9f:4e:18:58:96:9f:74:c4:f4: de:7d:59:33:1e:4d:08:df:47:14:db:b2:0b:89:94: 34:69:2b:da:34:70:dd:7b:42:dd:aa:4a:c4:4f:0c: da:94:03:4f:db:aa:21:8f:6c:dc:31:46:85:e0:cb: a5:0f:a4:98:5e:98:91:9d:d2:1e:b1:2e:84:21:8f: 6f:49:99:cf:77:5d:7d:8f:82:b7:d1:47:63:ca:de: 46:93:c9:37:57:93:5c:84:19:0e:eb:a9:70:58:b4: f8:00:02:4b:9c:4a:93:1b:5b:8f:bb:81:49:83:7e: 2a:bb:c8:2b:68:f4:3b:89:20:7e:0d:6a:11:c6:0d: e4:8d:23:fc:22:13:6c:40:53:49:81:72:8f:7c:9d: 5e:5b:84:08:01:1c:67:cb:9a:37:0e:88:7a:77:a3: 3d:bd:ac:98:d1:ec:88:f8:00:cb:e9:b5:18:9a:6a: 32:d6:23:a4:80:10:e1:a3:7b:5a:5c:18:06:7f:60: d4:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:DC:D6:2B:98:1C:1D:6D:6A:1D:A9:A1:EA:D7:B2:64:B7:75:7E:36 X509v3 Authority Key Identifier: keyid:16:58:9C:DE:5D:C3:33:9C:E7:BB:D4:BB:1C:7C:14:64:74:97:C9:56 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_3db8163f69224798ac2c463c0bca4d6b/0/16589CDE5DC3339CE7BBD4BB1C7C14647497C956.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/16589CDE5DC3339CE7BBD4BB1C7C14647497C956.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_3db8163f69224798ac2c463c0bca4d6b/0/16589CDE5DC3339CE7BBD4BB1C7C14647497C956.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:70:cf:6f:3d:40:7c:84:00:c7:ec:24:73:b0:85:c5:3e:d4: 34:90:f9:69:3c:2a:b2:69:bd:08:4a:17:ef:f7:79:e5:23:75: 16:09:8c:ec:3b:d1:d3:ea:22:13:1c:24:86:52:e8:c1:cf:68: eb:a4:e0:40:87:dc:c8:d8:9e:aa:0f:3b:4a:c7:dd:c7:67:5e: 57:17:8d:07:ca:58:4a:d7:55:70:19:46:9c:35:85:74:49:8a: 95:65:48:70:fd:a4:bc:dd:43:2a:7c:2e:17:99:38:c8:54:45: ee:30:83:10:0d:02:f7:c2:bb:d5:af:8b:86:62:1a:1f:25:f4: f4:35:13:04:04:9d:43:bf:0c:af:88:79:56:86:42:cd:ce:1f: dc:2f:1f:51:86:5d:e5:34:43:f7:d8:8a:bb:ea:62:15:7c:ba: d7:6e:13:31:fc:dc:e3:be:5d:b4:38:fe:7e:fb:a0:3b:c2:21: d0:5e:59:bc:cb:0e:3d:51:e0:ff:c7:96:d9:5a:ad:35:06:70: 01:56:4b:d9:0f:b5:b2:23:7e:1b:49:7f:93:6c:47:bc:86:6c: 11:e3:57:5e:52:af:d5:f1:fe:82:62:c7:eb:42:d5:73:a7:9d: 4a:e3:ee:b1:6f:9e:3c:dd:66:7f:1e:0e:c7:ac:a1:7c:04:84: 8a:7a:ee:ca -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIUfHTmQub7hTewlNTVPT+lrpRUI+cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTY1ODlDREU1REMzMzM5Q0U3QkJENEJCMUM3QzE0NjQ3 NDk3Qzk1NjAeFw0yNjA3MjkwOTMxMTdaFw0yNjA3MzAxMjU1MTdaMDMxMTAvBgNV BAMTKEFFRENENjJCOTgxQzFENkQ2QTFEQTlBMUVBRDdCMjY0Qjc3NTdFMzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8ObrXWICWXGYmMdYmAnb3E2v2 XZ7FbxQtRcZs4W5wDlToCAq2HN67Aedol+LZot6/EwujLGYqfd9NKpXUX8XuyJ9O GFiWn3TE9N59WTMeTQjfRxTbsguJlDRpK9o0cN17Qt2qSsRPDNqUA0/bqiGPbNwx RoXgy6UPpJhemJGd0h6xLoQhj29Jmc93XX2PgrfRR2PK3kaTyTdXk1yEGQ7rqXBY tPgAAkucSpMbW4+7gUmDfiq7yCto9DuJIH4NahHGDeSNI/wiE2xAU0mBco98nV5b hAgBHGfLmjcOiHp3oz29rJjR7Ij4AMvptRiaajLWI6SAEOGje1pcGAZ/YNSfAgMB AAGjggJ4MIICdDAdBgNVHQ4EFgQUrtzWK5gcHW1qHamh6teyZLd1fjYwHwYDVR0j BBgwFoAUFlic3l3DM5znu9S7HHwUZHSXyVYwDgYDVR0PAQH/BAQDAgeAMIGPBgNV HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv cmVwby9ycGtpX2NhXzNkYjgxNjNmNjkyMjQ3OThhYzJjNDYzYzBiY2E0ZDZiLzAv MTY1ODlDREU1REMzMzM5Q0U3QkJENEJCMUM3QzE0NjQ3NDk3Qzk1Ni5jcmwwgZ4G CCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5wYWFz LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQxYjUtODJh MC1mMGQwMmMwM2EyYzYvNy8xNjU4OUNERTVEQzMzMzlDRTdCQkQ0QkIxQzdDMTQ2 NDc0OTdDOTU2LmNlcjCBmgYIKwYBBQUHAQsEgY0wgYowgYcGCCsGAQUFBzALhnty c3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQvcmVwby9ycGtpX2NhXzNkYjgx NjNmNjkyMjQ3OThhYzJjNDYzYzBiY2E0ZDZiLzAvMTY1ODlDREU1REMzMzM5Q0U3 QkJENEJCMUM3QzE0NjQ3NDk3Qzk1Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBACVwz289QHyEAMfsJHOw hcU+1DSQ+Wk8KrJpvQhKF+/3eeUjdRYJjOw70dPqIhMcJIZS6MHPaOuk4ECH3MjY nqoPO0rH3cdnXlcXjQfKWErXVXAZRpw1hXRJipVlSHD9pLzdQyp8LheZOMhURe4w gxANAvfCu9Wvi4ZiGh8l9PQ1EwQEnUO/DK+IeVaGQs3OH9wvH1GGXeU0Q/fYirvq YhV8utduEzH83OO+XbQ4/n77oDvCIdBeWbzLDj1R4P/HltlarTUGcAFWS9kPtbIj fhtJf5NsR7yGbBHjV15Sr9Xx/oJix+tC1XOnnUrj7rFvnjzdZn8eDsesoXwEhIp6 7so= -----END CERTIFICATE-----Generated at Wed Jul 29 11:04:14 2026 by rpki-client