$ rpki-client -vvvf rpki-repo.as207960.net/repo/rpki_ca_9f297e7e1f534033aaf93ce1e3b46ffc/0/16821FD22FFB74E3D7FAC3AA03BE6D00145B9A3E.mft File: 16821FD22FFB74E3D7FAC3AA03BE6D00145B9A3E.mft (raw, json) Hash identifier: QdimLQbFH6CdDeRFce8rA4BEBWqPaZEYXlUQHiI7yUg= Subject key identifier: 07:EC:56:6F:50:C8:DC:1C:E2:83:4C:42:D0:D3:4C:75:F8:31:72:A6 Authority key identifier: 16:82:1F:D2:2F:FB:74:E3:D7:FA:C3:AA:03:BE:6D:00:14:5B:9A:3E Certificate issuer: /CN=16821FD22FFB74E3D7FAC3AA03BE6D00145B9A3E Certificate serial: 35BE5C2F2C5B86887D1B5DEE805203A640D18067 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/16821FD22FFB74E3D7FAC3AA03BE6D00145B9A3E.cer Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_9f297e7e1f534033aaf93ce1e3b46ffc/0/16821FD22FFB74E3D7FAC3AA03BE6D00145B9A3E.mft Manifest number: 03FA Signing time: Tue 13 Oct 2026 14:21:38 +0000 Manifest this update: Tue 13 Oct 2026 14:16:36 +0000 Manifest next update: Wed 14 Oct 2026 16:43:36 +0000 Files and hashes: 1: 16821FD22FFB74E3D7FAC3AA03BE6D00145B9A3E.crl (hash: Z+augMfHbjJ1FNbRP2nJDvKN1UWberIBGFhSKo/EZq0=) Validation: OK Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_9f297e7e1f534033aaf93ce1e3b46ffc/0/16821FD22FFB74E3D7FAC3AA03BE6D00145B9A3E.crl rsync://rpki-repo.as207960.net/repo/rpki_ca_9f297e7e1f534033aaf93ce1e3b46ffc/0/16821FD22FFB74E3D7FAC3AA03BE6D00145B9A3E.mft rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/16821FD22FFB74E3D7FAC3AA03BE6D00145B9A3E.cer rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 14 Oct 2026 14:02:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:be:5c:2f:2c:5b:86:88:7d:1b:5d:ee:80:52:03:a6:40:d1:80:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=16821FD22FFB74E3D7FAC3AA03BE6D00145B9A3E Validity Not Before: Oct 13 14:16:36 2026 GMT Not After : Oct 14 16:43:36 2026 GMT Subject: CN=07EC566F50C8DC1CE2834C42D0D34C75F83172A6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:1f:2f:89:76:b9:ad:23:74:7e:13:b2:20:7d: 68:4f:7e:d2:09:5d:c3:78:96:da:1f:19:b3:24:08: 00:08:21:86:27:fe:e2:5d:69:14:e0:f4:21:5b:cd: 0b:25:3a:7e:79:2d:3b:6a:a3:17:d7:25:1b:d3:c6: 93:43:b1:12:2e:fa:7b:2e:8c:48:b3:63:25:d5:76: 0e:fa:2f:75:51:86:50:4f:36:64:2b:7b:b8:ae:a6: e4:06:f6:c4:c3:e8:8c:8a:dd:22:81:43:16:15:6c: fa:f3:cf:61:cf:b5:4d:89:33:c7:f3:a5:bf:53:b0: b2:95:ef:05:bb:ea:5d:b9:d6:c0:80:aa:34:e8:de: dc:b6:c9:60:e0:8d:fc:03:fd:9d:a6:e8:80:b8:92: 19:12:4b:2a:6a:e9:35:ac:59:f0:12:37:11:7a:42: 7e:05:5e:ba:52:5d:46:01:22:09:b5:49:1c:e8:f0: f2:e9:b8:a8:e5:aa:7c:6c:6b:21:53:f5:ee:49:d6: fe:c0:5e:68:17:2b:65:f8:85:4e:7c:c9:02:b3:be: 7f:11:d0:e9:e4:f4:3b:ec:d6:cb:3e:ae:65:39:ae: 92:5d:52:16:0a:15:8c:74:b9:b9:aa:79:4a:6b:87: f7:de:a3:38:5d:a0:12:58:13:a6:df:7a:ce:6e:93: ab:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:EC:56:6F:50:C8:DC:1C:E2:83:4C:42:D0:D3:4C:75:F8:31:72:A6 X509v3 Authority Key Identifier: keyid:16:82:1F:D2:2F:FB:74:E3:D7:FA:C3:AA:03:BE:6D:00:14:5B:9A:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_9f297e7e1f534033aaf93ce1e3b46ffc/0/16821FD22FFB74E3D7FAC3AA03BE6D00145B9A3E.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/16821FD22FFB74E3D7FAC3AA03BE6D00145B9A3E.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_9f297e7e1f534033aaf93ce1e3b46ffc/0/16821FD22FFB74E3D7FAC3AA03BE6D00145B9A3E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c0:54:a3:1e:34:90:92:d2:27:d5:7e:31:46:2e:cb:ca:48:55: 4f:68:54:7f:34:57:71:c5:ac:52:ab:d2:21:38:9d:25:2d:00: 84:7d:9d:c3:de:4c:d2:0b:f2:a2:c6:44:cd:a1:03:64:34:ea: b0:46:d5:c0:ea:a9:38:f0:90:2a:46:5d:d0:0a:a5:cf:0b:d8: 4f:c7:85:b0:ea:a4:41:21:b3:da:d5:05:68:7d:4a:a3:a6:8c: d2:1b:10:be:a9:a3:e8:c1:57:78:c5:e8:f8:27:d5:85:05:49: 0e:76:30:ff:e3:af:b1:89:94:bf:c0:01:38:c7:2a:ef:9c:65: 8f:d9:18:29:48:e4:d4:96:09:70:c5:ca:b4:bc:f6:e1:74:f8: 0c:ce:18:ae:1b:b9:b2:23:dc:32:44:1d:8a:f5:f4:95:75:04: 08:d1:40:3d:b1:f1:98:d8:86:17:78:9e:e7:f1:f1:8c:44:e1: 94:a2:38:57:81:c9:00:ab:fe:a0:61:65:30:d7:38:1c:e9:af: 65:03:fe:f5:4c:f7:c7:88:d0:76:ba:69:df:68:d3:00:c0:18: ca:54:ca:72:65:b9:c0:c7:9a:e0:8e:e1:c9:56:fe:82:99:ad: a2:9e:92:9e:e2:30:e9:07:ad:34:6d:ef:4a:89:e0:50:56:f9: 9d:8e:82:8e -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIUNb5cLyxbhoh9G13ugFIDpkDRgGcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTY4MjFGRDIyRkZCNzRFM0Q3RkFDM0FBMDNCRTZEMDAx NDVCOUEzRTAeFw0yNjEwMTMxNDE2MzZaFw0yNjEwMTQxNjQzMzZaMDMxMTAvBgNV BAMTKDA3RUM1NjZGNTBDOERDMUNFMjgzNEM0MkQwRDM0Qzc1RjgzMTcyQTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjHy+JdrmtI3R+E7IgfWhPftIJ XcN4ltofGbMkCAAIIYYn/uJdaRTg9CFbzQslOn55LTtqoxfXJRvTxpNDsRIu+nsu jEizYyXVdg76L3VRhlBPNmQre7iupuQG9sTD6IyK3SKBQxYVbPrzz2HPtU2JM8fz pb9TsLKV7wW76l251sCAqjTo3ty2yWDgjfwD/Z2m6IC4khkSSypq6TWsWfASNxF6 Qn4FXrpSXUYBIgm1SRzo8PLpuKjlqnxsayFT9e5J1v7AXmgXK2X4hU58yQKzvn8R 0Onk9Dvs1ss+rmU5rpJdUhYKFYx0ubmqeUprh/feozhdoBJYE6bfes5uk6shAgMB AAGjggJ4MIICdDAdBgNVHQ4EFgQUB+xWb1DI3Bzig0xC0NNMdfgxcqYwHwYDVR0j BBgwFoAUFoIf0i/7dOPX+sOqA75tABRbmj4wDgYDVR0PAQH/BAQDAgeAMIGPBgNV HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv cmVwby9ycGtpX2NhXzlmMjk3ZTdlMWY1MzQwMzNhYWY5M2NlMWUzYjQ2ZmZjLzAv MTY4MjFGRDIyRkZCNzRFM0Q3RkFDM0FBMDNCRTZEMDAxNDVCOUEzRS5jcmwwgZ4G CCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5wYWFz LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQxYjUtODJh MC1mMGQwMmMwM2EyYzYvNy8xNjgyMUZEMjJGRkI3NEUzRDdGQUMzQUEwM0JFNkQw MDE0NUI5QTNFLmNlcjCBmgYIKwYBBQUHAQsEgY0wgYowgYcGCCsGAQUFBzALhnty c3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQvcmVwby9ycGtpX2NhXzlmMjk3 ZTdlMWY1MzQwMzNhYWY5M2NlMWUzYjQ2ZmZjLzAvMTY4MjFGRDIyRkZCNzRFM0Q3 RkFDM0FBMDNCRTZEMDAxNDVCOUEzRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAMBUox40kJLSJ9V+MUYu y8pIVU9oVH80V3HFrFKr0iE4nSUtAIR9ncPeTNIL8qLGRM2hA2Q06rBG1cDqqTjw kCpGXdAKpc8L2E/HhbDqpEEhs9rVBWh9SqOmjNIbEL6po+jBV3jF6Pgn1YUFSQ52 MP/jr7GJlL/AATjHKu+cZY/ZGClI5NSWCXDFyrS89uF0+AzOGK4bubIj3DJEHYr1 9JV1BAjRQD2x8ZjYhhd4nufx8YxE4ZSiOFeByQCr/qBhZTDXOBzpr2UD/vVM98eI 0Ha6ad9o0wDAGMpUynJlucDHmuCO4clW/oKZraKekp7iMOkHrTRt70qJ4FBW+Z2O go4= -----END CERTIFICATE-----Generated at Tue Oct 13 17:57:29 2026 by rpki-client