$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_9f297e7e1f534033aaf93ce1e3b46ffc/0/16821FD22FFB74E3D7FAC3AA03BE6D00145B9A3E.mft File: 16821FD22FFB74E3D7FAC3AA03BE6D00145B9A3E.mft (raw, json) Hash identifier: a5df3zhmainw6DcVuKlEnsyKppxLsc4jGmRxN6KGYwE= Subject key identifier: E3:CB:FB:51:D8:19:43:A5:B7:50:8D:B0:C3:68:5B:D0:4C:96:CB:8E Authority key identifier: 16:82:1F:D2:2F:FB:74:E3:D7:FA:C3:AA:03:BE:6D:00:14:5B:9A:3E Certificate issuer: /CN=16821FD22FFB74E3D7FAC3AA03BE6D00145B9A3E Certificate serial: 3B10CB9A19EC3F52AAD9FD9A75B4155EAE87DC90 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/16821FD22FFB74E3D7FAC3AA03BE6D00145B9A3E.cer Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_9f297e7e1f534033aaf93ce1e3b46ffc/0/16821FD22FFB74E3D7FAC3AA03BE6D00145B9A3E.mft Manifest number: 0187 Signing time: Mon 28 Apr 2025 16:52:21 +0000 Manifest this update: Mon 28 Apr 2025 16:47:19 +0000 Manifest next update: Tue 29 Apr 2025 19:17:19 +0000 Files and hashes: 1: 16821FD22FFB74E3D7FAC3AA03BE6D00145B9A3E.crl (hash: cwwMQkrcqpuBB8HwiQswKVwHHmzKxtED2t2eMEsEbko=) Validation: OK Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_9f297e7e1f534033aaf93ce1e3b46ffc/0/16821FD22FFB74E3D7FAC3AA03BE6D00145B9A3E.crl rsync://rpki-repo.as207960.net/repo/rpki_ca_9f297e7e1f534033aaf93ce1e3b46ffc/0/16821FD22FFB74E3D7FAC3AA03BE6D00145B9A3E.mft rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/16821FD22FFB74E3D7FAC3AA03BE6D00145B9A3E.cer rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 29 Apr 2025 15:01:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:10:cb:9a:19:ec:3f:52:aa:d9:fd:9a:75:b4:15:5e:ae:87:dc:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=16821FD22FFB74E3D7FAC3AA03BE6D00145B9A3E Validity Not Before: Apr 28 16:47:19 2025 GMT Not After : Apr 29 19:17:19 2025 GMT Subject: CN=E3CBFB51D81943A5B7508DB0C3685BD04C96CB8E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:26:66:d2:52:fd:6a:c9:e7:a5:a6:5e:69:60: 8f:d9:56:3c:81:bd:37:79:09:c1:8e:06:9e:a5:fc: 22:20:74:59:89:5d:cb:35:02:98:cc:ee:d3:5e:3f: c2:d3:cb:17:6e:d5:fb:24:41:bc:85:f7:56:55:ce: d2:c2:67:44:4a:0d:18:83:b6:91:36:b5:8f:09:b1: 87:ca:8c:b9:25:e3:7e:e2:c7:a5:db:b4:0d:b2:6b: e5:b9:e4:4f:73:e6:b5:15:99:9b:5d:41:92:9b:ca: 7e:c1:22:b3:ad:34:c4:a2:73:94:3e:0a:dc:9d:67: d3:08:25:17:f8:3c:bd:ba:6a:e3:e7:42:49:bb:fe: 17:7f:91:db:d5:f6:ae:55:61:1a:30:4a:94:6e:15: 32:92:29:2a:34:6f:d7:39:e5:ea:be:75:15:66:39: 9d:65:12:28:db:c4:93:6b:92:b7:e3:09:43:fa:0b: ea:49:a8:9b:35:f8:36:44:f3:69:2b:83:45:cd:2f: 7b:dc:de:89:34:dc:52:95:8f:50:d4:7e:32:11:2d: 10:02:bd:2f:5f:07:5c:b2:ca:5f:9d:c8:d2:0d:be: af:e4:e7:21:1a:21:52:3c:46:f7:34:36:08:18:b5: c7:01:41:1f:7e:d6:8d:5a:a7:99:7f:2b:17:ac:c4: c2:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:CB:FB:51:D8:19:43:A5:B7:50:8D:B0:C3:68:5B:D0:4C:96:CB:8E X509v3 Authority Key Identifier: keyid:16:82:1F:D2:2F:FB:74:E3:D7:FA:C3:AA:03:BE:6D:00:14:5B:9A:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_9f297e7e1f534033aaf93ce1e3b46ffc/0/16821FD22FFB74E3D7FAC3AA03BE6D00145B9A3E.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/16821FD22FFB74E3D7FAC3AA03BE6D00145B9A3E.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_9f297e7e1f534033aaf93ce1e3b46ffc/0/16821FD22FFB74E3D7FAC3AA03BE6D00145B9A3E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:30:22:1e:dd:1b:94:76:bf:aa:f6:18:7e:92:05:2d:0f:d2: ce:bb:25:cb:af:0e:3d:22:a1:f7:a2:78:3f:36:75:e3:fe:1a: ff:3a:3d:ec:1a:ab:e4:6f:5a:9d:21:5c:f5:1b:b5:7a:ad:ca: da:d2:4f:ea:80:8b:0f:d7:8c:ee:86:cb:e9:d9:62:30:e2:6f: 05:c8:93:20:16:84:17:ab:38:4e:08:4e:9b:9b:7b:b0:82:ba: 76:f5:fd:42:15:c3:68:19:e7:f7:b3:d3:8f:4e:88:40:42:4f: 94:d7:48:12:76:4e:80:55:1c:5f:33:6d:21:6e:d8:55:94:72: ee:3d:80:20:05:2d:69:f1:7a:6f:d6:f2:d4:03:26:f4:c9:13: 2f:d9:c1:30:ae:99:58:98:cb:8b:6f:69:a5:60:bf:cf:0f:6c: d8:62:25:27:cb:6e:58:88:28:24:df:1e:4e:c4:f4:e7:93:af: c6:84:4a:41:a8:a4:6c:46:83:f0:33:95:49:3f:af:52:95:13: 60:57:ba:12:6f:85:f1:2d:bd:98:f3:19:22:42:a4:3c:7b:bc: 76:e6:08:1f:8b:cd:8c:ba:a5:7e:86:96:c9:fd:71:69:b2:ac: 3f:15:03:79:5b:16:35:57:86:71:9d:d8:90:8b:8a:a6:66:f7: bf:37:23:8c -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIUOxDLmhnsP1Kq2f2adbQVXq6H3JAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTY4MjFGRDIyRkZCNzRFM0Q3RkFDM0FBMDNCRTZEMDAx NDVCOUEzRTAeFw0yNTA0MjgxNjQ3MTlaFw0yNTA0MjkxOTE3MTlaMDMxMTAvBgNV BAMTKEUzQ0JGQjUxRDgxOTQzQTVCNzUwOERCMEMzNjg1QkQwNEM5NkNCOEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCIJmbSUv1qyeelpl5pYI/ZVjyB vTd5CcGOBp6l/CIgdFmJXcs1ApjM7tNeP8LTyxdu1fskQbyF91ZVztLCZ0RKDRiD tpE2tY8JsYfKjLkl437ix6XbtA2ya+W55E9z5rUVmZtdQZKbyn7BIrOtNMSic5Q+ CtydZ9MIJRf4PL26auPnQkm7/hd/kdvV9q5VYRowSpRuFTKSKSo0b9c55eq+dRVm OZ1lEijbxJNrkrfjCUP6C+pJqJs1+DZE82krg0XNL3vc3ok03FKVj1DUfjIRLRAC vS9fB1yyyl+dyNINvq/k5yEaIVI8Rvc0NggYtccBQR9+1o1ap5l/KxesxMIZAgMB AAGjggJ4MIICdDAdBgNVHQ4EFgQU48v7UdgZQ6W3UI2ww2hb0EyWy44wHwYDVR0j BBgwFoAUFoIf0i/7dOPX+sOqA75tABRbmj4wDgYDVR0PAQH/BAQDAgeAMIGPBgNV HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv cmVwby9ycGtpX2NhXzlmMjk3ZTdlMWY1MzQwMzNhYWY5M2NlMWUzYjQ2ZmZjLzAv MTY4MjFGRDIyRkZCNzRFM0Q3RkFDM0FBMDNCRTZEMDAxNDVCOUEzRS5jcmwwgZ4G CCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5wYWFz LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQxYjUtODJh MC1mMGQwMmMwM2EyYzYvNy8xNjgyMUZEMjJGRkI3NEUzRDdGQUMzQUEwM0JFNkQw MDE0NUI5QTNFLmNlcjCBmgYIKwYBBQUHAQsEgY0wgYowgYcGCCsGAQUFBzALhnty c3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQvcmVwby9ycGtpX2NhXzlmMjk3 ZTdlMWY1MzQwMzNhYWY5M2NlMWUzYjQ2ZmZjLzAvMTY4MjFGRDIyRkZCNzRFM0Q3 RkFDM0FBMDNCRTZEMDAxNDVCOUEzRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAD4wIh7dG5R2v6r2GH6S BS0P0s67JcuvDj0iofeieD82deP+Gv86Pewaq+RvWp0hXPUbtXqtytrST+qAiw/X jO6Gy+nZYjDibwXIkyAWhBerOE4ITpube7CCunb1/UIVw2gZ5/ez049OiEBCT5TX SBJ2ToBVHF8zbSFu2FWUcu49gCAFLWnxem/W8tQDJvTJEy/ZwTCumViYy4tvaaVg v88PbNhiJSfLbliIKCTfHk7E9OeTr8aESkGopGxGg/AzlUk/r1KVE2BXuhJvhfEt vZjzGSJCpDx7vHbmCB+LzYy6pX6Glsn9cWmyrD8VA3lbFjVXhnGd2JCLiqZm9783 I4w= -----END CERTIFICATE-----Generated at Mon Apr 28 22:47:30 2025 by rpki-client