$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_9f297e7e1f534033aaf93ce1e3b46ffc/0/16821FD22FFB74E3D7FAC3AA03BE6D00145B9A3E.mft File: 16821FD22FFB74E3D7FAC3AA03BE6D00145B9A3E.mft (raw, json) Hash identifier: Y14PCvEdavYyvDm8SNeTtn5NRUICmH0/O7N//q3Ztk8= Subject key identifier: 90:F3:CC:4B:56:8A:0D:32:B5:11:C4:EE:BB:A0:66:38:47:C0:BD:2F Authority key identifier: 16:82:1F:D2:2F:FB:74:E3:D7:FA:C3:AA:03:BE:6D:00:14:5B:9A:3E Certificate issuer: /CN=16821FD22FFB74E3D7FAC3AA03BE6D00145B9A3E Certificate serial: 43D1E70A2B6E781968E788DF77A42CBB5556B980 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/16821FD22FFB74E3D7FAC3AA03BE6D00145B9A3E.cer Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_9f297e7e1f534033aaf93ce1e3b46ffc/0/16821FD22FFB74E3D7FAC3AA03BE6D00145B9A3E.mft Manifest number: 01C5 Signing time: Sun 15 Jun 2025 06:51:28 +0000 Manifest this update: Sun 15 Jun 2025 06:46:26 +0000 Manifest next update: Mon 16 Jun 2025 09:22:26 +0000 Files and hashes: 1: 16821FD22FFB74E3D7FAC3AA03BE6D00145B9A3E.crl (hash: k9GGu8Lr/IEMZvx1+ep2Yhliehkz3tSrFNiyff91ILU=) Validation: OK Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_9f297e7e1f534033aaf93ce1e3b46ffc/0/16821FD22FFB74E3D7FAC3AA03BE6D00145B9A3E.crl rsync://rpki-repo.as207960.net/repo/rpki_ca_9f297e7e1f534033aaf93ce1e3b46ffc/0/16821FD22FFB74E3D7FAC3AA03BE6D00145B9A3E.mft rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/16821FD22FFB74E3D7FAC3AA03BE6D00145B9A3E.cer rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 16 Jun 2025 08:41:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:d1:e7:0a:2b:6e:78:19:68:e7:88:df:77:a4:2c:bb:55:56:b9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=16821FD22FFB74E3D7FAC3AA03BE6D00145B9A3E Validity Not Before: Jun 15 06:46:26 2025 GMT Not After : Jun 16 09:22:26 2025 GMT Subject: CN=90F3CC4B568A0D32B511C4EEBBA0663847C0BD2F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:1f:5b:7d:3b:bc:58:7d:70:db:e1:74:ed:1e: ce:f4:df:4b:a2:09:db:be:d4:4b:ab:b3:1b:aa:d4: 5d:a6:03:04:88:13:24:6f:c2:08:a5:30:ba:2d:96: 2f:75:af:8c:1e:a6:ee:9a:96:9b:d2:61:d9:cc:30: 98:f2:d1:2d:02:c8:6c:bb:e3:7e:88:0a:ca:68:44: 38:b0:a0:f9:18:59:89:2e:a0:86:be:04:14:2b:85: 5f:45:2b:3d:cb:c6:57:0c:a8:d6:ba:a2:6d:42:4c: f4:5f:9d:48:3d:b7:1c:de:c7:d5:5b:00:cd:99:78: b2:7a:ba:19:24:ae:f6:74:24:6a:7a:41:ba:84:dd: 53:1d:f1:31:98:ff:69:dc:5e:67:cf:47:e4:8b:b4: 78:c0:55:af:e5:2a:07:88:9a:ba:32:0e:a3:8e:94: b2:c0:61:5f:fd:ac:cf:a3:06:ce:b7:96:12:29:45: b3:98:3a:9a:8c:c0:6e:75:8a:48:a1:43:73:63:da: 27:06:e3:e8:e8:b7:bb:12:1c:a7:c4:93:b3:6e:fd: 83:7a:5a:77:7c:c7:0b:91:b0:ab:03:60:09:eb:58: 22:3d:2d:ed:96:56:8b:79:65:06:2d:66:4f:7c:36: 39:f6:8c:84:41:dd:e7:f0:57:33:0c:b4:27:01:cb: ac:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:F3:CC:4B:56:8A:0D:32:B5:11:C4:EE:BB:A0:66:38:47:C0:BD:2F X509v3 Authority Key Identifier: keyid:16:82:1F:D2:2F:FB:74:E3:D7:FA:C3:AA:03:BE:6D:00:14:5B:9A:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_9f297e7e1f534033aaf93ce1e3b46ffc/0/16821FD22FFB74E3D7FAC3AA03BE6D00145B9A3E.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/16821FD22FFB74E3D7FAC3AA03BE6D00145B9A3E.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_9f297e7e1f534033aaf93ce1e3b46ffc/0/16821FD22FFB74E3D7FAC3AA03BE6D00145B9A3E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b6:fd:06:a4:27:60:2e:6a:66:3c:fe:f5:82:fa:86:48:65:93: 16:03:55:55:61:0f:d8:40:c6:93:b6:23:29:2d:fc:8e:88:d9: 5d:10:cc:30:f8:11:22:37:db:9c:3f:d1:54:d7:d4:7f:d5:aa: 78:4d:60:51:ed:7e:39:aa:2a:1e:df:2d:7e:81:df:50:0d:18: 01:67:04:8d:81:d3:22:ba:98:ad:62:57:81:a6:72:e5:68:39: 7a:e0:f1:07:68:23:17:2a:b5:f9:c0:ae:ac:b7:1d:e3:dc:47: d9:75:f0:22:64:21:f7:2f:d6:f3:57:53:e6:f8:04:b2:c2:9e: 29:31:e1:2d:d9:2c:2a:20:70:5b:39:22:33:ab:fb:60:dd:f1: 9b:eb:2e:2b:9d:93:f3:88:09:69:71:a5:cb:9b:57:7d:99:c7: 1a:b3:db:ad:ef:23:38:28:ca:39:e1:a3:c6:f2:bf:5c:f6:57: 35:8b:fd:fa:03:11:69:fa:d5:60:6c:81:f4:36:83:c3:13:03: 8d:31:5d:03:c2:b7:6c:ce:49:5d:ea:d2:3a:42:89:b9:c2:c5: 70:5f:62:6b:c1:a3:32:5e:ba:82:e0:c6:a0:4a:fb:c0:7f:a6: e8:ca:7a:57:6c:9f:72:5b:d8:2e:bf:e9:46:8c:0c:a6:94:95: cb:b6:27:c6 -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIUQ9HnCitueBlo54jfd6Qsu1VWuYAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTY4MjFGRDIyRkZCNzRFM0Q3RkFDM0FBMDNCRTZEMDAx NDVCOUEzRTAeFw0yNTA2MTUwNjQ2MjZaFw0yNTA2MTYwOTIyMjZaMDMxMTAvBgNV BAMTKDkwRjNDQzRCNTY4QTBEMzJCNTExQzRFRUJCQTA2NjM4NDdDMEJEMkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCH1t9O7xYfXDb4XTtHs7030ui Cdu+1Eursxuq1F2mAwSIEyRvwgilMLotli91r4wepu6alpvSYdnMMJjy0S0CyGy7 436ICspoRDiwoPkYWYkuoIa+BBQrhV9FKz3LxlcMqNa6om1CTPRfnUg9txzex9Vb AM2ZeLJ6uhkkrvZ0JGp6QbqE3VMd8TGY/2ncXmfPR+SLtHjAVa/lKgeImroyDqOO lLLAYV/9rM+jBs63lhIpRbOYOpqMwG51ikihQ3Nj2icG4+jot7sSHKfEk7Nu/YN6 Wnd8xwuRsKsDYAnrWCI9Le2WVot5ZQYtZk98Njn2jIRB3efwVzMMtCcBy6wNAgMB AAGjggJ4MIICdDAdBgNVHQ4EFgQUkPPMS1aKDTK1EcTuu6BmOEfAvS8wHwYDVR0j BBgwFoAUFoIf0i/7dOPX+sOqA75tABRbmj4wDgYDVR0PAQH/BAQDAgeAMIGPBgNV HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv cmVwby9ycGtpX2NhXzlmMjk3ZTdlMWY1MzQwMzNhYWY5M2NlMWUzYjQ2ZmZjLzAv MTY4MjFGRDIyRkZCNzRFM0Q3RkFDM0FBMDNCRTZEMDAxNDVCOUEzRS5jcmwwgZ4G CCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5wYWFz LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQxYjUtODJh MC1mMGQwMmMwM2EyYzYvNy8xNjgyMUZEMjJGRkI3NEUzRDdGQUMzQUEwM0JFNkQw MDE0NUI5QTNFLmNlcjCBmgYIKwYBBQUHAQsEgY0wgYowgYcGCCsGAQUFBzALhnty c3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQvcmVwby9ycGtpX2NhXzlmMjk3 ZTdlMWY1MzQwMzNhYWY5M2NlMWUzYjQ2ZmZjLzAvMTY4MjFGRDIyRkZCNzRFM0Q3 RkFDM0FBMDNCRTZEMDAxNDVCOUEzRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBALb9BqQnYC5qZjz+9YL6 hkhlkxYDVVVhD9hAxpO2Iykt/I6I2V0QzDD4ESI325w/0VTX1H/VqnhNYFHtfjmq Kh7fLX6B31ANGAFnBI2B0yK6mK1iV4GmcuVoOXrg8QdoIxcqtfnArqy3HePcR9l1 8CJkIfcv1vNXU+b4BLLCnikx4S3ZLCogcFs5IjOr+2Dd8ZvrLiudk/OICWlxpcub V32Zxxqz263vIzgoyjnho8byv1z2VzWL/foDEWn61WBsgfQ2g8MTA40xXQPCt2zO SV3q0jpCibnCxXBfYmvBozJeuoLgxqBK+8B/pujKeldsn3Jb2C6/6UaMDKaUlcu2 J8Y= -----END CERTIFICATE-----Generated at Mon Jun 16 00:03:00 2025 by rpki-client