$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_3db8163f69224798ac2c463c0bca4d6b/0/16589CDE5DC3339CE7BBD4BB1C7C14647497C956.mft File: 16589CDE5DC3339CE7BBD4BB1C7C14647497C956.mft (raw, json) Hash identifier: ZH8GPyMQ3Zb0KJ39EcxPWAb3faQxJMj62HXBHOW0Amg= Subject key identifier: AF:CD:0D:D4:D9:E5:68:1C:0A:70:EE:D2:38:D8:25:AC:23:F7:0C:95 Authority key identifier: 16:58:9C:DE:5D:C3:33:9C:E7:BB:D4:BB:1C:7C:14:64:74:97:C9:56 Certificate issuer: /CN=16589CDE5DC3339CE7BBD4BB1C7C14647497C956 Certificate serial: 1F528D321DD726F84FF6DDA38D770610B70655C6 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/16589CDE5DC3339CE7BBD4BB1C7C14647497C956.cer Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_3db8163f69224798ac2c463c0bca4d6b/0/16589CDE5DC3339CE7BBD4BB1C7C14647497C956.mft Manifest number: 0323 Signing time: Fri 17 Apr 2026 19:03:15 +0000 Manifest this update: Fri 17 Apr 2026 18:58:13 +0000 Manifest next update: Sat 18 Apr 2026 19:49:13 +0000 Files and hashes: 1: 16589CDE5DC3339CE7BBD4BB1C7C14647497C956.crl (hash: QqBQz9UdX0mOV57mvmhyALeRg4cLfykWPjT6gB8sI6w=) 2: 326131313a663263303a666666623a3a2f34382d3438203d3e20323033313035.roa (hash: oR5xdewUw9CCHlEGMS0Z24xgtiBxrNN/CytrFhUuC90=) Validation: OK Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_3db8163f69224798ac2c463c0bca4d6b/0/16589CDE5DC3339CE7BBD4BB1C7C14647497C956.crl rsync://rpki-repo.as207960.net/repo/rpki_ca_3db8163f69224798ac2c463c0bca4d6b/0/16589CDE5DC3339CE7BBD4BB1C7C14647497C956.mft rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/16589CDE5DC3339CE7BBD4BB1C7C14647497C956.cer rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 18 Apr 2026 19:49:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:52:8d:32:1d:d7:26:f8:4f:f6:dd:a3:8d:77:06:10:b7:06:55:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=16589CDE5DC3339CE7BBD4BB1C7C14647497C956 Validity Not Before: Apr 17 18:58:13 2026 GMT Not After : Apr 18 19:49:13 2026 GMT Subject: CN=AFCD0DD4D9E5681C0A70EED238D825AC23F70C95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:02:44:a2:4a:61:33:73:18:51:48:2a:a1:a7: e0:a6:6f:8c:ad:87:d2:c0:27:f1:4f:b8:8d:d3:06: 4e:74:cf:a8:fc:0f:13:5e:b3:ff:59:c1:c5:74:c9: 85:10:04:a3:52:ae:78:17:0e:03:d9:f8:3a:61:af: c6:6c:f4:bb:ee:11:59:5c:52:a3:c6:8f:6e:1f:32: 30:c5:ee:d2:6d:de:64:09:15:eb:9a:c3:e5:65:b0: 0c:11:10:4c:36:5c:ac:45:7c:c7:4c:a2:75:46:2a: 62:e7:74:94:07:f7:bc:f9:ad:6a:5b:0a:e6:c4:a6: 63:43:04:a0:e8:c1:5a:e4:c2:69:6b:f0:c8:a3:48: 84:34:2b:a0:c7:a9:1e:ec:3c:b2:13:5f:b4:4e:1b: 8e:0a:eb:64:8a:05:ab:a6:7e:89:e1:88:05:ad:89: e8:e7:98:d2:9a:d5:46:12:06:9d:91:b1:d1:fb:04: 4f:0b:0a:78:e0:ab:01:63:39:f2:22:b8:09:6f:c5: c0:dd:8d:34:fc:6c:9c:4e:c4:60:39:1e:a6:1b:8b: e0:53:91:ca:ce:aa:5d:a7:3a:cf:a9:4b:33:79:f1: 51:eb:aa:5a:e4:4a:7f:98:0b:1a:d6:95:14:33:f4: 83:05:5d:17:d1:2e:54:11:cb:ef:99:f9:29:e3:1d: 6c:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:CD:0D:D4:D9:E5:68:1C:0A:70:EE:D2:38:D8:25:AC:23:F7:0C:95 X509v3 Authority Key Identifier: keyid:16:58:9C:DE:5D:C3:33:9C:E7:BB:D4:BB:1C:7C:14:64:74:97:C9:56 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_3db8163f69224798ac2c463c0bca4d6b/0/16589CDE5DC3339CE7BBD4BB1C7C14647497C956.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/16589CDE5DC3339CE7BBD4BB1C7C14647497C956.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_3db8163f69224798ac2c463c0bca4d6b/0/16589CDE5DC3339CE7BBD4BB1C7C14647497C956.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ab:2e:d6:77:97:2d:2f:31:e8:68:b8:67:3d:9a:6c:d9:64:d0: 93:36:29:85:31:d4:b0:22:95:41:7f:92:14:5c:46:fb:0e:8e: 03:31:f3:4d:b5:75:46:68:de:e0:c3:93:2a:a4:ee:e5:89:82: 35:c4:62:3a:28:5a:8c:e0:a0:11:4e:81:37:9b:12:55:98:0a: ed:bb:1b:b2:6b:02:64:34:a6:ed:1d:5f:59:05:a3:1c:d1:32: 43:34:04:8c:e7:dd:9e:f8:86:6c:97:19:2e:7d:0e:ac:5a:32: 70:3f:2a:11:0e:d2:96:6c:03:54:ee:c5:3e:9d:62:00:22:7e: 0f:8c:bd:14:9d:4a:06:23:a6:97:7e:b6:e7:28:63:c9:49:47: 59:99:4e:87:15:73:4a:de:22:0c:46:79:a5:59:50:97:93:a7: d5:30:23:92:f1:e6:18:61:f8:f0:73:8f:1f:2f:5d:7c:69:8a: d8:a8:c5:e5:2e:e5:22:db:01:3f:d8:50:47:89:c9:43:e0:31: 13:af:e2:45:5b:1c:59:07:9f:bf:53:14:fa:2e:8a:20:bb:5c: 5b:2f:91:28:63:63:e2:f4:7f:6a:19:2b:61:f0:46:c7:04:43: 83:0b:f0:fe:cc:04:2d:fa:6b:93:71:43:2a:07:e7:e5:9e:6b: 9f:5f:1b:06 -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIUH1KNMh3XJvhP9t2jjXcGELcGVcYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTY1ODlDREU1REMzMzM5Q0U3QkJENEJCMUM3QzE0NjQ3 NDk3Qzk1NjAeFw0yNjA0MTcxODU4MTNaFw0yNjA0MTgxOTQ5MTNaMDMxMTAvBgNV BAMTKEFGQ0QwREQ0RDlFNTY4MUMwQTcwRUVEMjM4RDgyNUFDMjNGNzBDOTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdAkSiSmEzcxhRSCqhp+Cmb4yt h9LAJ/FPuI3TBk50z6j8DxNes/9ZwcV0yYUQBKNSrngXDgPZ+Dphr8Zs9LvuEVlc UqPGj24fMjDF7tJt3mQJFeuaw+VlsAwREEw2XKxFfMdMonVGKmLndJQH97z5rWpb CubEpmNDBKDowVrkwmlr8MijSIQ0K6DHqR7sPLITX7ROG44K62SKBaumfonhiAWt iejnmNKa1UYSBp2RsdH7BE8LCnjgqwFjOfIiuAlvxcDdjTT8bJxOxGA5HqYbi+BT kcrOql2nOs+pSzN58VHrqlrkSn+YCxrWlRQz9IMFXRfRLlQRy++Z+SnjHWwbAgMB AAGjggJ4MIICdDAdBgNVHQ4EFgQUr80N1NnlaBwKcO7SONglrCP3DJUwHwYDVR0j BBgwFoAUFlic3l3DM5znu9S7HHwUZHSXyVYwDgYDVR0PAQH/BAQDAgeAMIGPBgNV HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv cmVwby9ycGtpX2NhXzNkYjgxNjNmNjkyMjQ3OThhYzJjNDYzYzBiY2E0ZDZiLzAv MTY1ODlDREU1REMzMzM5Q0U3QkJENEJCMUM3QzE0NjQ3NDk3Qzk1Ni5jcmwwgZ4G CCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5wYWFz LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQxYjUtODJh MC1mMGQwMmMwM2EyYzYvNy8xNjU4OUNERTVEQzMzMzlDRTdCQkQ0QkIxQzdDMTQ2 NDc0OTdDOTU2LmNlcjCBmgYIKwYBBQUHAQsEgY0wgYowgYcGCCsGAQUFBzALhnty c3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQvcmVwby9ycGtpX2NhXzNkYjgx NjNmNjkyMjQ3OThhYzJjNDYzYzBiY2E0ZDZiLzAvMTY1ODlDREU1REMzMzM5Q0U3 QkJENEJCMUM3QzE0NjQ3NDk3Qzk1Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAKsu1neXLS8x6Gi4Zz2a bNlk0JM2KYUx1LAilUF/khRcRvsOjgMx8021dUZo3uDDkyqk7uWJgjXEYjooWozg oBFOgTebElWYCu27G7JrAmQ0pu0dX1kFoxzRMkM0BIzn3Z74hmyXGS59DqxaMnA/ KhEO0pZsA1TuxT6dYgAifg+MvRSdSgYjppd+tucoY8lJR1mZTocVc0reIgxGeaVZ UJeTp9UwI5Lx5hhh+PBzjx8vXXxpitioxeUu5SLbAT/YUEeJyUPgMROv4kVbHFkH n79TFPouiiC7XFsvkShjY+L0f2oZK2HwRscEQ4ML8P7MBC36a5NxQyoH5+Wea59f GwY= -----END CERTIFICATE-----Generated at Sat Apr 18 03:32:11 2026 by rpki-client