$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_9f297e7e1f534033aaf93ce1e3b46ffc/0/16821FD22FFB74E3D7FAC3AA03BE6D00145B9A3E.mft File: 16821FD22FFB74E3D7FAC3AA03BE6D00145B9A3E.mft (raw, json) Hash identifier: 3b/jgsDZJ6rxa8EL7uV7H3K48MzSIjlNVoMjqIXhoi4= Subject key identifier: 42:B5:74:6D:F7:6B:23:6B:01:C4:2C:24:6E:46:6F:36:66:8B:E3:D1 Authority key identifier: 16:82:1F:D2:2F:FB:74:E3:D7:FA:C3:AA:03:BE:6D:00:14:5B:9A:3E Certificate issuer: /CN=16821FD22FFB74E3D7FAC3AA03BE6D00145B9A3E Certificate serial: 6601397C2165E2D445C78FBAC321CDDD7F6DAAE3 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/16821FD22FFB74E3D7FAC3AA03BE6D00145B9A3E.cer Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_9f297e7e1f534033aaf93ce1e3b46ffc/0/16821FD22FFB74E3D7FAC3AA03BE6D00145B9A3E.mft Manifest number: 031E Signing time: Fri 17 Apr 2026 15:16:25 +0000 Manifest this update: Fri 17 Apr 2026 15:11:22 +0000 Manifest next update: Sat 18 Apr 2026 16:50:22 +0000 Files and hashes: 1: 16821FD22FFB74E3D7FAC3AA03BE6D00145B9A3E.crl (hash: kblDvlbTzqkau9xcmXQgORC3UKpmEhht6zH6+qdcRc0=) Validation: OK Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_9f297e7e1f534033aaf93ce1e3b46ffc/0/16821FD22FFB74E3D7FAC3AA03BE6D00145B9A3E.crl rsync://rpki-repo.as207960.net/repo/rpki_ca_9f297e7e1f534033aaf93ce1e3b46ffc/0/16821FD22FFB74E3D7FAC3AA03BE6D00145B9A3E.mft rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/16821FD22FFB74E3D7FAC3AA03BE6D00145B9A3E.cer rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 18 Apr 2026 16:50:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:01:39:7c:21:65:e2:d4:45:c7:8f:ba:c3:21:cd:dd:7f:6d:aa:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=16821FD22FFB74E3D7FAC3AA03BE6D00145B9A3E Validity Not Before: Apr 17 15:11:22 2026 GMT Not After : Apr 18 16:50:22 2026 GMT Subject: CN=42B5746DF76B236B01C42C246E466F36668BE3D1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:ef:c8:ab:d8:f4:cd:d5:1e:94:da:16:82:20: 46:9f:6e:a9:56:3a:2f:87:ed:b3:92:91:c3:14:36: 9d:cd:40:b4:55:9c:be:47:7d:5e:ae:4e:58:14:43: 4d:92:d7:d5:6a:7b:38:45:eb:27:96:85:62:ed:50: 0c:12:4b:23:96:27:92:2e:6c:60:e2:41:a6:38:fd: 5c:5d:52:db:fb:a0:da:c7:f1:c0:ac:33:32:66:03: 23:b3:f1:01:6d:b4:1a:5d:3e:47:d4:73:74:de:80: 52:6a:77:a5:80:7d:cb:a2:b5:1b:17:0e:fc:d6:2c: bb:54:81:4c:21:92:d8:00:f3:8d:57:8d:35:f2:08: 7c:ce:7d:e2:e4:58:a3:52:16:a5:7a:ca:69:0e:c3: 95:6e:75:a0:84:b4:64:2a:66:a8:9e:64:34:ef:79: 97:82:cb:82:61:e2:84:67:40:1b:f5:bb:9c:b2:43: b1:e3:9c:ae:cd:7a:f9:cc:b4:2d:86:23:4d:22:3a: 54:a4:7d:04:4d:d0:4b:06:18:6e:14:4d:46:cb:9e: 2e:c0:16:ae:52:80:79:66:98:18:34:bb:bc:4a:38: aa:75:da:9c:b2:98:b4:47:cf:20:2a:17:78:9a:9d: e1:06:c6:f7:7f:39:72:79:43:a6:42:6f:87:f7:73: b4:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:B5:74:6D:F7:6B:23:6B:01:C4:2C:24:6E:46:6F:36:66:8B:E3:D1 X509v3 Authority Key Identifier: keyid:16:82:1F:D2:2F:FB:74:E3:D7:FA:C3:AA:03:BE:6D:00:14:5B:9A:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_9f297e7e1f534033aaf93ce1e3b46ffc/0/16821FD22FFB74E3D7FAC3AA03BE6D00145B9A3E.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/16821FD22FFB74E3D7FAC3AA03BE6D00145B9A3E.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_9f297e7e1f534033aaf93ce1e3b46ffc/0/16821FD22FFB74E3D7FAC3AA03BE6D00145B9A3E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 96:df:79:86:ff:7c:38:52:17:26:33:d5:29:58:28:d4:ec:ed: bc:21:55:d1:7a:b3:91:d3:2c:63:79:23:40:99:35:20:76:8d: 60:5d:86:ad:d1:df:9c:e8:a0:27:0a:5d:d3:7f:ed:f0:39:5e: d4:4b:ef:46:03:81:09:9a:c9:b7:34:4e:b5:55:de:c5:dc:06: 65:2e:f6:9e:83:7f:87:11:e9:51:53:56:a5:4b:5a:d6:a3:3e: 01:a7:e7:7b:af:24:0d:f2:e0:28:e6:e1:b2:d9:f3:fb:0f:5f: 64:bb:ff:5b:d3:27:60:a1:de:20:a5:5a:f9:86:25:33:6e:7a: f3:28:cf:63:da:db:58:32:c4:c2:ce:e5:c8:e1:de:6a:f7:ad: de:d4:65:e7:c3:bb:52:98:01:1c:52:19:c2:ad:85:29:1d:db: ca:20:88:55:1a:f8:1a:09:48:2c:bd:9b:15:4f:7c:fa:81:1b: 1d:2a:af:b4:ee:ad:97:b2:c3:8b:57:cd:36:ec:d0:7e:4a:d9: be:52:a5:b7:89:d0:57:88:5b:4e:53:6b:18:a5:de:93:3d:24: 78:a9:5b:87:c0:a5:bf:f4:42:a7:01:31:44:7e:cc:aa:a0:c5: da:64:ba:a0:f2:74:eb:0b:67:c4:ad:fb:ed:54:f2:61:8e:06: 00:4f:ae:7e -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIUZgE5fCFl4tRFx4+6wyHN3X9tquMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTY4MjFGRDIyRkZCNzRFM0Q3RkFDM0FBMDNCRTZEMDAx NDVCOUEzRTAeFw0yNjA0MTcxNTExMjJaFw0yNjA0MTgxNjUwMjJaMDMxMTAvBgNV BAMTKDQyQjU3NDZERjc2QjIzNkIwMUM0MkMyNDZFNDY2RjM2NjY4QkUzRDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC678ir2PTN1R6U2haCIEafbqlW Oi+H7bOSkcMUNp3NQLRVnL5HfV6uTlgUQ02S19VqezhF6yeWhWLtUAwSSyOWJ5Iu bGDiQaY4/VxdUtv7oNrH8cCsMzJmAyOz8QFttBpdPkfUc3TegFJqd6WAfcuitRsX DvzWLLtUgUwhktgA841XjTXyCHzOfeLkWKNSFqV6ymkOw5VudaCEtGQqZqieZDTv eZeCy4Jh4oRnQBv1u5yyQ7HjnK7NevnMtC2GI00iOlSkfQRN0EsGGG4UTUbLni7A Fq5SgHlmmBg0u7xKOKp12pyymLRHzyAqF3ianeEGxvd/OXJ5Q6ZCb4f3c7QlAgMB AAGjggJ4MIICdDAdBgNVHQ4EFgQUQrV0bfdrI2sBxCwkbkZvNmaL49EwHwYDVR0j BBgwFoAUFoIf0i/7dOPX+sOqA75tABRbmj4wDgYDVR0PAQH/BAQDAgeAMIGPBgNV HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv cmVwby9ycGtpX2NhXzlmMjk3ZTdlMWY1MzQwMzNhYWY5M2NlMWUzYjQ2ZmZjLzAv MTY4MjFGRDIyRkZCNzRFM0Q3RkFDM0FBMDNCRTZEMDAxNDVCOUEzRS5jcmwwgZ4G CCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5wYWFz LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQxYjUtODJh MC1mMGQwMmMwM2EyYzYvNy8xNjgyMUZEMjJGRkI3NEUzRDdGQUMzQUEwM0JFNkQw MDE0NUI5QTNFLmNlcjCBmgYIKwYBBQUHAQsEgY0wgYowgYcGCCsGAQUFBzALhnty c3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQvcmVwby9ycGtpX2NhXzlmMjk3 ZTdlMWY1MzQwMzNhYWY5M2NlMWUzYjQ2ZmZjLzAvMTY4MjFGRDIyRkZCNzRFM0Q3 RkFDM0FBMDNCRTZEMDAxNDVCOUEzRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAJbfeYb/fDhSFyYz1SlY KNTs7bwhVdF6s5HTLGN5I0CZNSB2jWBdhq3R35zooCcKXdN/7fA5XtRL70YDgQma ybc0TrVV3sXcBmUu9p6Df4cR6VFTVqVLWtajPgGn53uvJA3y4Cjm4bLZ8/sPX2S7 /1vTJ2Ch3iClWvmGJTNuevMoz2Pa21gyxMLO5cjh3mr3rd7UZefDu1KYARxSGcKt hSkd28ogiFUa+BoJSCy9mxVPfPqBGx0qr7TurZeyw4tXzTbs0H5K2b5SpbeJ0FeI W05Taxil3pM9JHipW4fApb/0QqcBMUR+zKqgxdpkuqDydOsLZ8St++1U8mGOBgBP rn4= -----END CERTIFICATE-----Generated at Sat Apr 18 04:40:39 2026 by rpki-client