$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_9f297e7e1f534033aaf93ce1e3b46ffc/0/16821FD22FFB74E3D7FAC3AA03BE6D00145B9A3E.mft File: 16821FD22FFB74E3D7FAC3AA03BE6D00145B9A3E.mft (raw, json) Hash identifier: CPzIAL2wjmCkVOqAWyAmzZAYk7iSva/mJhLWF3OyB8U= Subject key identifier: 15:B9:92:2F:23:27:2D:83:5B:F0:18:D2:68:4B:3B:DA:49:29:09:7D Authority key identifier: 16:82:1F:D2:2F:FB:74:E3:D7:FA:C3:AA:03:BE:6D:00:14:5B:9A:3E Certificate issuer: /CN=16821FD22FFB74E3D7FAC3AA03BE6D00145B9A3E Certificate serial: 4CA1C0394893AE393C31EF8DC4BB3DA3EA704666 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/16821FD22FFB74E3D7FAC3AA03BE6D00145B9A3E.cer Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_9f297e7e1f534033aaf93ce1e3b46ffc/0/16821FD22FFB74E3D7FAC3AA03BE6D00145B9A3E.mft Manifest number: 0207 Signing time: Mon 04 Aug 2025 07:00:39 +0000 Manifest this update: Mon 04 Aug 2025 06:55:39 +0000 Manifest next update: Tue 05 Aug 2025 08:51:39 +0000 Files and hashes: 1: 16821FD22FFB74E3D7FAC3AA03BE6D00145B9A3E.crl (hash: j3GmkP0ohbQnfol1l4LE6mkqrfqwqcGl0NuescYyspE=) Validation: OK Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_9f297e7e1f534033aaf93ce1e3b46ffc/0/16821FD22FFB74E3D7FAC3AA03BE6D00145B9A3E.crl rsync://rpki-repo.as207960.net/repo/rpki_ca_9f297e7e1f534033aaf93ce1e3b46ffc/0/16821FD22FFB74E3D7FAC3AA03BE6D00145B9A3E.mft rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/16821FD22FFB74E3D7FAC3AA03BE6D00145B9A3E.cer rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 05 Aug 2025 02:33:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:a1:c0:39:48:93:ae:39:3c:31:ef:8d:c4:bb:3d:a3:ea:70:46:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=16821FD22FFB74E3D7FAC3AA03BE6D00145B9A3E Validity Not Before: Aug 4 06:55:39 2025 GMT Not After : Aug 5 08:51:39 2025 GMT Subject: CN=15B9922F23272D835BF018D2684B3BDA4929097D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:be:60:ba:f8:27:fc:63:39:59:11:8f:6d:62: 5d:a4:e0:13:15:6d:31:56:46:0a:31:26:9a:e4:fc: c0:83:9b:de:9c:ce:3e:ae:9b:cb:cd:ba:54:8c:4d: ad:a6:d1:89:e4:37:dc:c5:4c:cf:19:9b:f5:3a:dd: e7:ca:14:c3:4b:df:16:65:2e:e5:0c:fe:a8:ad:0c: 35:59:22:b7:71:38:cf:ee:a0:f6:7d:ed:c6:12:b0: 1c:1b:14:ec:6a:05:15:d3:22:d9:3a:b6:44:14:67: c8:4c:87:a4:e8:aa:2f:3b:79:21:e9:14:e9:88:17: 99:aa:e7:9e:75:42:8c:55:d5:d0:00:c4:80:30:67: e6:8f:90:72:c4:1f:85:2f:7e:79:52:03:43:ab:6f: 4a:64:20:63:5f:e8:fb:d3:35:28:4e:1d:d8:ca:30: fe:d3:40:23:05:69:d0:ce:08:15:80:c0:92:1d:d4: 5a:a6:c4:37:ef:b4:24:74:33:bf:7a:38:66:23:39: 97:f2:ef:df:c7:6d:d2:6e:e7:54:c6:10:39:76:78: 1a:d0:78:d5:81:2a:82:5c:18:93:bd:4c:61:01:2e: a2:c9:74:54:b1:da:79:64:e1:99:6a:c7:6d:f4:bc: fb:5a:d6:46:81:1c:2c:d0:05:86:9c:82:e8:6c:a5: 25:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:B9:92:2F:23:27:2D:83:5B:F0:18:D2:68:4B:3B:DA:49:29:09:7D X509v3 Authority Key Identifier: keyid:16:82:1F:D2:2F:FB:74:E3:D7:FA:C3:AA:03:BE:6D:00:14:5B:9A:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_9f297e7e1f534033aaf93ce1e3b46ffc/0/16821FD22FFB74E3D7FAC3AA03BE6D00145B9A3E.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/16821FD22FFB74E3D7FAC3AA03BE6D00145B9A3E.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_9f297e7e1f534033aaf93ce1e3b46ffc/0/16821FD22FFB74E3D7FAC3AA03BE6D00145B9A3E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2d:88:d5:0d:c0:fb:69:3d:26:89:88:37:1f:ca:90:f3:d4:15: e1:cb:62:94:b2:26:1d:bd:44:0d:85:e7:86:34:63:40:e0:4e: c3:fd:f6:39:07:cb:4f:70:b9:17:ea:dc:05:93:fa:fe:02:0a: 8b:bb:ea:1a:8d:4b:7d:ee:a0:c4:40:92:61:9c:75:48:50:d8: e2:40:1b:d2:37:69:99:d8:40:2a:14:93:f6:71:b9:04:33:db: f3:94:97:4d:e3:52:fb:65:d8:6a:8b:13:52:e7:f0:f8:4a:25: 5a:5f:60:34:94:c5:de:a6:88:53:80:ff:57:52:fe:98:2a:93: a5:9c:36:25:42:ef:45:bc:38:e1:ea:17:42:bd:ef:44:5b:56: 00:53:49:b5:7f:5f:e1:d5:72:e3:e6:9c:e4:06:3e:1a:68:56: 1b:85:05:0a:17:7a:90:f7:fa:3f:66:ae:80:94:5d:8f:89:43: ee:a5:65:ba:bb:2f:a4:69:cc:16:ca:f8:51:98:21:e3:1e:2a: 15:a1:6d:81:01:e2:6c:7c:1e:c3:b9:ea:f3:57:c8:09:65:20: 2a:07:6d:71:b0:a0:6c:95:91:85:b1:2b:f6:af:91:05:b1:4c: 7e:53:f1:97:0b:d6:6b:5c:eb:bc:04:81:64:9f:3b:c3:92:10: 8c:cd:be:25 -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIUTKHAOUiTrjk8Me+NxLs9o+pwRmYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTY4MjFGRDIyRkZCNzRFM0Q3RkFDM0FBMDNCRTZEMDAx NDVCOUEzRTAeFw0yNTA4MDQwNjU1MzlaFw0yNTA4MDUwODUxMzlaMDMxMTAvBgNV BAMTKDE1Qjk5MjJGMjMyNzJEODM1QkYwMThEMjY4NEIzQkRBNDkyOTA5N0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqvmC6+Cf8YzlZEY9tYl2k4BMV bTFWRgoxJprk/MCDm96czj6um8vNulSMTa2m0YnkN9zFTM8Zm/U63efKFMNL3xZl LuUM/qitDDVZIrdxOM/uoPZ97cYSsBwbFOxqBRXTItk6tkQUZ8hMh6Toqi87eSHp FOmIF5mq5551QoxV1dAAxIAwZ+aPkHLEH4UvfnlSA0Orb0pkIGNf6PvTNShOHdjK MP7TQCMFadDOCBWAwJId1FqmxDfvtCR0M796OGYjOZfy79/HbdJu51TGEDl2eBrQ eNWBKoJcGJO9TGEBLqLJdFSx2nlk4Zlqx230vPta1kaBHCzQBYacguhspSWzAgMB AAGjggJ4MIICdDAdBgNVHQ4EFgQUFbmSLyMnLYNb8BjSaEs72kkpCX0wHwYDVR0j BBgwFoAUFoIf0i/7dOPX+sOqA75tABRbmj4wDgYDVR0PAQH/BAQDAgeAMIGPBgNV HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv cmVwby9ycGtpX2NhXzlmMjk3ZTdlMWY1MzQwMzNhYWY5M2NlMWUzYjQ2ZmZjLzAv MTY4MjFGRDIyRkZCNzRFM0Q3RkFDM0FBMDNCRTZEMDAxNDVCOUEzRS5jcmwwgZ4G CCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5wYWFz LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQxYjUtODJh MC1mMGQwMmMwM2EyYzYvNy8xNjgyMUZEMjJGRkI3NEUzRDdGQUMzQUEwM0JFNkQw MDE0NUI5QTNFLmNlcjCBmgYIKwYBBQUHAQsEgY0wgYowgYcGCCsGAQUFBzALhnty c3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQvcmVwby9ycGtpX2NhXzlmMjk3 ZTdlMWY1MzQwMzNhYWY5M2NlMWUzYjQ2ZmZjLzAvMTY4MjFGRDIyRkZCNzRFM0Q3 RkFDM0FBMDNCRTZEMDAxNDVCOUEzRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAC2I1Q3A+2k9JomINx/K kPPUFeHLYpSyJh29RA2F54Y0Y0DgTsP99jkHy09wuRfq3AWT+v4CCou76hqNS33u oMRAkmGcdUhQ2OJAG9I3aZnYQCoUk/ZxuQQz2/OUl03jUvtl2GqLE1Ln8PhKJVpf YDSUxd6miFOA/1dS/pgqk6WcNiVC70W8OOHqF0K970RbVgBTSbV/X+HVcuPmnOQG PhpoVhuFBQoXepD3+j9mroCUXY+JQ+6lZbq7L6RpzBbK+FGYIeMeKhWhbYEB4mx8 HsO56vNXyAllICoHbXGwoGyVkYWxK/avkQWxTH5T8ZcL1mtc67wEgWSfO8OSEIzN viU= -----END CERTIFICATE-----Generated at Mon Aug 4 18:14:19 2025 by rpki-client