$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_3db8163f69224798ac2c463c0bca4d6b/0/16589CDE5DC3339CE7BBD4BB1C7C14647497C956.mft File: 16589CDE5DC3339CE7BBD4BB1C7C14647497C956.mft (raw, json) Hash identifier: FTWQ3O8jrRjuSEDY0pFxtDFs4775M2+s+hedq7Z5Fkc= Subject key identifier: 1D:9C:19:37:5D:2A:A3:67:54:91:23:D0:F9:03:ED:E8:2E:02:E1:B2 Authority key identifier: 16:58:9C:DE:5D:C3:33:9C:E7:BB:D4:BB:1C:7C:14:64:74:97:C9:56 Certificate issuer: /CN=16589CDE5DC3339CE7BBD4BB1C7C14647497C956 Certificate serial: 4BCAF4282FEDCD8446C20F0BBE0C706D83E1E013 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/16589CDE5DC3339CE7BBD4BB1C7C14647497C956.cer Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_3db8163f69224798ac2c463c0bca4d6b/0/16589CDE5DC3339CE7BBD4BB1C7C14647497C956.mft Manifest number: 019B Signing time: Sun 11 May 2025 10:39:16 +0000 Manifest this update: Sun 11 May 2025 10:34:14 +0000 Manifest next update: Mon 12 May 2025 13:59:14 +0000 Files and hashes: 1: 326131313a663263303a666666623a3a2f34382d3438203d3e20323033313035.roa (hash: CRdzdHWSYcmiZSUenz1Z8qs+SDNJcoSUoxr755stLH4=) 2: 16589CDE5DC3339CE7BBD4BB1C7C14647497C956.crl (hash: lZXci+RUjGhSf/9eMCZBP1ej2aAukUgKjeghbVun9UM=) Validation: OK Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_3db8163f69224798ac2c463c0bca4d6b/0/16589CDE5DC3339CE7BBD4BB1C7C14647497C956.crl rsync://rpki-repo.as207960.net/repo/rpki_ca_3db8163f69224798ac2c463c0bca4d6b/0/16589CDE5DC3339CE7BBD4BB1C7C14647497C956.mft rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/16589CDE5DC3339CE7BBD4BB1C7C14647497C956.cer rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 May 2025 13:59:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:ca:f4:28:2f:ed:cd:84:46:c2:0f:0b:be:0c:70:6d:83:e1:e0:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=16589CDE5DC3339CE7BBD4BB1C7C14647497C956 Validity Not Before: May 11 10:34:14 2025 GMT Not After : May 12 13:59:14 2025 GMT Subject: CN=1D9C19375D2AA367549123D0F903EDE82E02E1B2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:c9:a9:1a:a0:3d:4c:d3:13:84:68:87:39:4e: 9e:3e:a4:94:0e:7c:7b:9e:c1:1b:76:af:48:89:a3: 5c:eb:45:21:0d:9d:89:22:84:54:48:42:31:56:c1: de:65:39:ea:98:8f:e3:51:68:9a:4b:3a:0a:7b:ed: 0b:b4:bc:32:8a:a1:9a:c0:42:ec:15:e2:bf:66:c8: ad:19:76:c3:0c:5c:cc:5f:dd:58:13:c7:d1:b2:3d: cb:77:0f:fa:d4:25:e8:dc:61:3d:ba:ec:c2:48:c6: ef:5c:34:df:53:87:97:4d:72:ee:8b:f3:4e:35:88: da:b1:f0:28:0c:ef:1a:61:9b:71:ad:2c:32:11:1b: a3:59:06:a1:17:ce:9e:88:f7:1e:8f:76:ec:db:62: 19:b2:fd:1b:fc:bd:3b:4e:87:ef:f4:22:6d:03:c8: 34:45:9f:94:23:41:be:98:a1:6d:ad:df:b6:54:bf: 81:d4:54:14:de:42:25:22:43:36:85:38:fa:25:df: 40:84:4c:a1:cf:58:64:da:9c:be:c9:f0:1c:94:18: 22:8d:91:9c:3d:42:80:e5:55:5c:89:33:34:c0:b4: 86:75:5c:82:0f:b9:11:6a:5a:17:a0:3e:91:66:05: 3c:a0:dc:1d:69:42:11:fa:0e:6b:d0:6c:1d:dd:7d: 90:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:9C:19:37:5D:2A:A3:67:54:91:23:D0:F9:03:ED:E8:2E:02:E1:B2 X509v3 Authority Key Identifier: keyid:16:58:9C:DE:5D:C3:33:9C:E7:BB:D4:BB:1C:7C:14:64:74:97:C9:56 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_3db8163f69224798ac2c463c0bca4d6b/0/16589CDE5DC3339CE7BBD4BB1C7C14647497C956.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/16589CDE5DC3339CE7BBD4BB1C7C14647497C956.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_3db8163f69224798ac2c463c0bca4d6b/0/16589CDE5DC3339CE7BBD4BB1C7C14647497C956.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:da:32:47:81:25:db:49:15:37:32:45:3d:01:2c:2b:be:68: 0b:49:1b:ca:2c:dc:19:c5:1e:ff:09:6e:61:30:f7:73:73:1f: 82:1f:1b:bd:a6:a4:13:e8:92:aa:f2:ce:78:27:7a:85:cb:55: 76:8d:3b:9d:d3:6e:bd:5d:de:7d:3e:1e:c2:d5:1f:c6:07:0f: 24:ff:63:74:6f:ac:36:a4:3d:25:d3:a2:87:79:71:2d:21:ff: 91:17:dc:7b:ad:e9:26:76:87:9c:72:51:95:95:f7:cd:52:80: 02:5c:ad:a3:4d:2a:17:78:0e:4f:ec:00:d2:01:74:48:bc:15: 74:3b:ff:c2:23:ee:2a:96:d5:1b:5a:74:52:3a:e9:d1:ed:a3: 5a:f1:14:3e:cb:90:bd:01:83:51:5d:3c:42:fa:7a:35:0e:4f: 11:f7:f2:6a:0b:29:8e:49:39:eb:ba:e1:67:aa:4b:25:cf:85: e3:10:d3:19:b6:bb:d5:b7:32:cb:a5:e0:d8:7d:8d:dd:92:32: ea:6b:34:24:e1:1a:b0:4c:5f:cf:57:cb:8f:62:4c:1d:dc:52: 1e:a4:e6:5c:c2:da:0b:d1:bf:d0:64:21:6f:6c:78:f6:9d:22: 04:89:fc:6e:52:c1:64:bf:50:e8:25:f3:2e:c7:03:48:0f:fc: 7f:62:b6:58 -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIUS8r0KC/tzYRGwg8LvgxwbYPh4BMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTY1ODlDREU1REMzMzM5Q0U3QkJENEJCMUM3QzE0NjQ3 NDk3Qzk1NjAeFw0yNTA1MTExMDM0MTRaFw0yNTA1MTIxMzU5MTRaMDMxMTAvBgNV BAMTKDFEOUMxOTM3NUQyQUEzNjc1NDkxMjNEMEY5MDNFREU4MkUwMkUxQjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0yakaoD1M0xOEaIc5Tp4+pJQO fHuewRt2r0iJo1zrRSENnYkihFRIQjFWwd5lOeqYj+NRaJpLOgp77Qu0vDKKoZrA QuwV4r9myK0ZdsMMXMxf3VgTx9GyPct3D/rUJejcYT267MJIxu9cNN9Th5dNcu6L 8041iNqx8CgM7xphm3GtLDIRG6NZBqEXzp6I9x6PduzbYhmy/Rv8vTtOh+/0Im0D yDRFn5QjQb6YoW2t37ZUv4HUVBTeQiUiQzaFOPol30CETKHPWGTanL7J8ByUGCKN kZw9QoDlVVyJMzTAtIZ1XIIPuRFqWhegPpFmBTyg3B1pQhH6DmvQbB3dfZBJAgMB AAGjggJ4MIICdDAdBgNVHQ4EFgQUHZwZN10qo2dUkSPQ+QPt6C4C4bIwHwYDVR0j BBgwFoAUFlic3l3DM5znu9S7HHwUZHSXyVYwDgYDVR0PAQH/BAQDAgeAMIGPBgNV HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv cmVwby9ycGtpX2NhXzNkYjgxNjNmNjkyMjQ3OThhYzJjNDYzYzBiY2E0ZDZiLzAv MTY1ODlDREU1REMzMzM5Q0U3QkJENEJCMUM3QzE0NjQ3NDk3Qzk1Ni5jcmwwgZ4G CCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5wYWFz LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQxYjUtODJh MC1mMGQwMmMwM2EyYzYvNy8xNjU4OUNERTVEQzMzMzlDRTdCQkQ0QkIxQzdDMTQ2 NDc0OTdDOTU2LmNlcjCBmgYIKwYBBQUHAQsEgY0wgYowgYcGCCsGAQUFBzALhnty c3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQvcmVwby9ycGtpX2NhXzNkYjgx NjNmNjkyMjQ3OThhYzJjNDYzYzBiY2E0ZDZiLzAvMTY1ODlDREU1REMzMzM5Q0U3 QkJENEJCMUM3QzE0NjQ3NDk3Qzk1Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAAXaMkeBJdtJFTcyRT0B LCu+aAtJG8os3BnFHv8JbmEw93NzH4IfG72mpBPokqryzngneoXLVXaNO53Tbr1d 3n0+HsLVH8YHDyT/Y3RvrDakPSXTood5cS0h/5EX3Hut6SZ2h5xyUZWV981SgAJc raNNKhd4Dk/sANIBdEi8FXQ7/8Ij7iqW1RtadFI66dHto1rxFD7LkL0Bg1FdPEL6 ejUOTxH38moLKY5JOeu64WeqSyXPheMQ0xm2u9W3Msul4Nh9jd2SMuprNCThGrBM X89Xy49iTB3cUh6k5lzC2gvRv9BkIW9sePadIgSJ/G5SwWS/UOgl8y7HA0gP/H9i tlg= -----END CERTIFICATE-----Generated at Mon May 12 04:20:20 2025 by rpki-client