$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_9f297e7e1f534033aaf93ce1e3b46ffc/0/16821FD22FFB74E3D7FAC3AA03BE6D00145B9A3E.mft File: 16821FD22FFB74E3D7FAC3AA03BE6D00145B9A3E.mft (raw, json) Hash identifier: wWJh6fS6ElpfPNRPpn82Hr4FD7VwQ3pBlPEX3C606DU= Subject key identifier: 83:9E:3A:2D:E7:CB:38:24:4F:4A:43:4C:30:CD:8A:5E:9A:DF:87:23 Authority key identifier: 16:82:1F:D2:2F:FB:74:E3:D7:FA:C3:AA:03:BE:6D:00:14:5B:9A:3E Certificate issuer: /CN=16821FD22FFB74E3D7FAC3AA03BE6D00145B9A3E Certificate serial: 4C8FEC0E467A0DB05C77ECB9EA675B378DCA3DE5 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/16821FD22FFB74E3D7FAC3AA03BE6D00145B9A3E.cer Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_9f297e7e1f534033aaf93ce1e3b46ffc/0/16821FD22FFB74E3D7FAC3AA03BE6D00145B9A3E.mft Manifest number: 0268 Signing time: Wed 05 Nov 2025 01:59:32 +0000 Manifest this update: Wed 05 Nov 2025 01:54:32 +0000 Manifest next update: Thu 06 Nov 2025 04:24:32 +0000 Files and hashes: 1: 16821FD22FFB74E3D7FAC3AA03BE6D00145B9A3E.crl (hash: 8FOos59Mc9arb8C5O7hCf2VFnrjT7PkPboTHVyhaWpk=) Validation: OK Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_9f297e7e1f534033aaf93ce1e3b46ffc/0/16821FD22FFB74E3D7FAC3AA03BE6D00145B9A3E.crl rsync://rpki-repo.as207960.net/repo/rpki_ca_9f297e7e1f534033aaf93ce1e3b46ffc/0/16821FD22FFB74E3D7FAC3AA03BE6D00145B9A3E.mft rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/16821FD22FFB74E3D7FAC3AA03BE6D00145B9A3E.cer rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 06 Nov 2025 04:24:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:8f:ec:0e:46:7a:0d:b0:5c:77:ec:b9:ea:67:5b:37:8d:ca:3d:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=16821FD22FFB74E3D7FAC3AA03BE6D00145B9A3E Validity Not Before: Nov 5 01:54:32 2025 GMT Not After : Nov 6 04:24:32 2025 GMT Subject: CN=839E3A2DE7CB38244F4A434C30CD8A5E9ADF8723 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:53:5a:d4:39:52:df:f0:d4:f6:e4:b0:f9:6b: 7e:6e:e2:8f:d1:15:03:a7:b3:bd:fc:12:07:c0:52: b2:e9:62:c1:69:06:8f:87:85:3d:01:c2:fc:d7:0f: 47:09:18:af:49:77:7b:0a:c9:3b:9e:0e:12:cb:03: 1e:df:7e:b1:4d:2d:83:c7:02:bd:1a:c4:c5:56:e8: 2f:ea:35:f1:d1:ca:ed:6b:97:ba:4e:f2:70:38:cb: a3:f8:77:46:68:8d:76:35:ad:e2:fb:22:4a:c9:d1: ec:74:06:5b:9c:70:c3:07:5e:8b:d0:a6:b1:14:07: 9a:a7:34:aa:7e:b7:ee:e9:9c:85:14:c5:4d:bf:e5: d1:69:f4:d8:f6:a2:0a:b5:84:7a:5d:49:5f:36:f5: 57:55:ad:46:7e:37:1c:34:f9:2a:66:3b:90:15:0f: a6:90:55:d4:3f:a5:b0:26:19:f8:b7:8b:a6:0b:ee: 5a:e6:19:16:3c:d4:1f:e7:12:be:25:88:3c:cf:e3: 34:a2:b2:28:1e:dd:a7:f3:6a:4c:c1:8b:d9:c9:a0: dc:f5:8f:74:3d:eb:f4:43:01:1c:be:9a:dc:06:cf: e7:69:60:78:b7:8c:b0:14:af:a9:00:87:b5:e7:dd: 01:4b:5a:91:69:ff:e7:8c:fd:89:df:77:2f:90:d6: 49:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:9E:3A:2D:E7:CB:38:24:4F:4A:43:4C:30:CD:8A:5E:9A:DF:87:23 X509v3 Authority Key Identifier: keyid:16:82:1F:D2:2F:FB:74:E3:D7:FA:C3:AA:03:BE:6D:00:14:5B:9A:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_9f297e7e1f534033aaf93ce1e3b46ffc/0/16821FD22FFB74E3D7FAC3AA03BE6D00145B9A3E.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/16821FD22FFB74E3D7FAC3AA03BE6D00145B9A3E.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_9f297e7e1f534033aaf93ce1e3b46ffc/0/16821FD22FFB74E3D7FAC3AA03BE6D00145B9A3E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:48:c4:ce:f8:77:f7:75:9c:1f:55:83:12:9a:52:72:91:d3: ed:b1:2e:fb:fe:77:57:7f:22:4c:43:57:78:bd:ce:c0:12:26: 9e:e7:fa:5b:8b:71:46:04:f2:da:20:e7:43:6d:a2:84:16:b3: 50:fc:a9:c2:0d:ec:b1:39:87:3d:0c:7d:de:60:81:d7:93:0a: 30:4d:bd:e5:76:d0:64:b1:b2:e9:e1:3f:69:41:b3:8f:56:3d: 73:59:ce:4a:6a:ad:d3:a6:e6:44:f8:e1:6c:b3:9f:f6:f3:8f: 4d:35:d4:35:8a:b1:bc:e5:99:d6:15:db:42:99:60:c8:d6:17: e6:08:9e:9f:c0:76:5f:50:10:53:28:0b:00:7a:93:61:fc:91: 36:aa:0b:b2:b9:70:fb:d0:78:d3:d3:eb:8e:5c:bb:6f:1a:fe: dd:a5:46:ec:b3:7c:77:43:64:e9:fb:bd:6b:d6:e9:09:46:88: 45:ec:40:ab:02:c0:8a:c4:a1:cf:26:db:c2:d2:9d:4e:d5:20: 5e:ac:8f:0e:d8:0f:11:71:ce:bc:bd:c5:69:9e:e2:ae:c4:aa: 80:a1:41:3e:7f:fb:f1:c4:25:38:0a:62:16:73:d4:b0:45:9e: c9:1d:68:0b:4c:41:d3:3e:56:10:e0:1c:43:be:85:31:e1:84: 52:ef:1c:8c -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIUTI/sDkZ6DbBcd+y56mdbN43KPeUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTY4MjFGRDIyRkZCNzRFM0Q3RkFDM0FBMDNCRTZEMDAx NDVCOUEzRTAeFw0yNTExMDUwMTU0MzJaFw0yNTExMDYwNDI0MzJaMDMxMTAvBgNV BAMTKDgzOUUzQTJERTdDQjM4MjQ0RjRBNDM0QzMwQ0Q4QTVFOUFERjg3MjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOU1rUOVLf8NT25LD5a35u4o/R FQOns738EgfAUrLpYsFpBo+HhT0BwvzXD0cJGK9Jd3sKyTueDhLLAx7ffrFNLYPH Ar0axMVW6C/qNfHRyu1rl7pO8nA4y6P4d0ZojXY1reL7IkrJ0ex0BluccMMHXovQ prEUB5qnNKp+t+7pnIUUxU2/5dFp9Nj2ogq1hHpdSV829VdVrUZ+Nxw0+SpmO5AV D6aQVdQ/pbAmGfi3i6YL7lrmGRY81B/nEr4liDzP4zSisige3afzakzBi9nJoNz1 j3Q96/RDARy+mtwGz+dpYHi3jLAUr6kAh7Xn3QFLWpFp/+eM/Ynfdy+Q1knhAgMB AAGjggJ4MIICdDAdBgNVHQ4EFgQUg546LefLOCRPSkNMMM2KXprfhyMwHwYDVR0j BBgwFoAUFoIf0i/7dOPX+sOqA75tABRbmj4wDgYDVR0PAQH/BAQDAgeAMIGPBgNV HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv cmVwby9ycGtpX2NhXzlmMjk3ZTdlMWY1MzQwMzNhYWY5M2NlMWUzYjQ2ZmZjLzAv MTY4MjFGRDIyRkZCNzRFM0Q3RkFDM0FBMDNCRTZEMDAxNDVCOUEzRS5jcmwwgZ4G CCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5wYWFz LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQxYjUtODJh MC1mMGQwMmMwM2EyYzYvNy8xNjgyMUZEMjJGRkI3NEUzRDdGQUMzQUEwM0JFNkQw MDE0NUI5QTNFLmNlcjCBmgYIKwYBBQUHAQsEgY0wgYowgYcGCCsGAQUFBzALhnty c3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQvcmVwby9ycGtpX2NhXzlmMjk3 ZTdlMWY1MzQwMzNhYWY5M2NlMWUzYjQ2ZmZjLzAvMTY4MjFGRDIyRkZCNzRFM0Q3 RkFDM0FBMDNCRTZEMDAxNDVCOUEzRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAHVIxM74d/d1nB9VgxKa UnKR0+2xLvv+d1d/IkxDV3i9zsASJp7n+luLcUYE8tog50NtooQWs1D8qcIN7LE5 hz0Mfd5ggdeTCjBNveV20GSxsunhP2lBs49WPXNZzkpqrdOm5kT44Wyzn/bzj001 1DWKsbzlmdYV20KZYMjWF+YInp/Adl9QEFMoCwB6k2H8kTaqC7K5cPvQeNPT645c u28a/t2lRuyzfHdDZOn7vWvW6QlGiEXsQKsCwIrEoc8m28LSnU7VIF6sjw7YDxFx zry9xWme4q7EqoChQT5/+/HEJTgKYhZz1LBFnskdaAtMQdM+VhDgHEO+hTHhhFLv HIw= -----END CERTIFICATE-----Generated at Thu Nov 6 00:23:20 2025 by rpki-client