$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_3db8163f69224798ac2c463c0bca4d6b/0/16589CDE5DC3339CE7BBD4BB1C7C14647497C956.mft File: 16589CDE5DC3339CE7BBD4BB1C7C14647497C956.mft (raw, json) Hash identifier: Mq2PzBbfQWFHdWm8cQcOzeNXD9ZyJVSJcrmsAtfS2yc= Subject key identifier: 1D:E5:A6:9B:4E:A6:D5:52:AE:4E:30:F2:77:23:74:9C:B9:72:90:C3 Authority key identifier: 16:58:9C:DE:5D:C3:33:9C:E7:BB:D4:BB:1C:7C:14:64:74:97:C9:56 Certificate issuer: /CN=16589CDE5DC3339CE7BBD4BB1C7C14647497C956 Certificate serial: 2694F3B9CBE8D5FED11159D04733F58C93DA3641 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/16589CDE5DC3339CE7BBD4BB1C7C14647497C956.cer Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_3db8163f69224798ac2c463c0bca4d6b/0/16589CDE5DC3339CE7BBD4BB1C7C14647497C956.mft Manifest number: 0306 Signing time: Thu 26 Mar 2026 05:05:44 +0000 Manifest this update: Thu 26 Mar 2026 05:00:42 +0000 Manifest next update: Fri 27 Mar 2026 08:42:42 +0000 Files and hashes: 1: 16589CDE5DC3339CE7BBD4BB1C7C14647497C956.crl (hash: xGwjoxBm86Z6IBjrzP9z35WjtXoMZQ+PmrLOt/JthsI=) 2: 326131313a663263303a666666623a3a2f34382d3438203d3e20323033313035.roa (hash: oR5xdewUw9CCHlEGMS0Z24xgtiBxrNN/CytrFhUuC90=) Validation: OK Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_3db8163f69224798ac2c463c0bca4d6b/0/16589CDE5DC3339CE7BBD4BB1C7C14647497C956.crl rsync://rpki-repo.as207960.net/repo/rpki_ca_3db8163f69224798ac2c463c0bca4d6b/0/16589CDE5DC3339CE7BBD4BB1C7C14647497C956.mft rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/16589CDE5DC3339CE7BBD4BB1C7C14647497C956.cer rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 27 Mar 2026 08:23:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:94:f3:b9:cb:e8:d5:fe:d1:11:59:d0:47:33:f5:8c:93:da:36:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=16589CDE5DC3339CE7BBD4BB1C7C14647497C956 Validity Not Before: Mar 26 05:00:42 2026 GMT Not After : Mar 27 08:42:42 2026 GMT Subject: CN=1DE5A69B4EA6D552AE4E30F27723749CB97290C3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:c3:22:fd:5e:12:0e:41:0c:2e:07:15:c2:fb: 70:e4:29:23:72:02:77:ae:10:93:fb:3c:05:a0:bd: 63:87:aa:27:3b:1b:0d:cb:4c:39:11:49:0a:16:c1: b2:85:9f:ae:34:c0:a0:29:84:6c:d9:64:95:bb:08: 04:ae:48:e0:7f:b4:c0:2c:f2:b6:c6:24:36:47:6d: b8:0c:49:4b:97:4c:3f:6b:c3:9d:15:cf:fa:12:ea: 74:67:04:35:42:a5:41:17:aa:85:39:d6:87:f4:61: 4d:af:39:59:d7:b3:2e:1a:38:fe:3b:90:b3:37:12: 3f:f1:4b:7b:e0:7c:ef:a9:d5:13:3b:18:79:e7:66: 56:0e:2e:b2:7b:31:0e:ea:9c:a6:e3:70:82:b9:40: 1a:d2:28:69:c4:f0:7c:97:e8:54:c5:ff:98:0b:3a: 20:a0:89:49:34:33:4f:af:45:56:22:ce:79:9e:da: ca:d0:be:d0:64:42:32:43:2d:3e:92:6a:42:b4:db: ef:3a:26:ec:9f:9c:0c:e0:b8:29:57:f2:eb:ca:1d: e2:9b:73:40:2c:12:4b:2c:c3:90:6a:b5:e6:d6:13: 13:f6:d0:45:57:59:d8:a9:3d:23:e7:94:10:e3:6f: 24:19:a7:95:30:20:64:09:39:aa:d1:8a:e0:c1:bd: 47:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:E5:A6:9B:4E:A6:D5:52:AE:4E:30:F2:77:23:74:9C:B9:72:90:C3 X509v3 Authority Key Identifier: keyid:16:58:9C:DE:5D:C3:33:9C:E7:BB:D4:BB:1C:7C:14:64:74:97:C9:56 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_3db8163f69224798ac2c463c0bca4d6b/0/16589CDE5DC3339CE7BBD4BB1C7C14647497C956.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/16589CDE5DC3339CE7BBD4BB1C7C14647497C956.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_3db8163f69224798ac2c463c0bca4d6b/0/16589CDE5DC3339CE7BBD4BB1C7C14647497C956.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:0a:84:9f:eb:58:01:bc:cf:d9:84:9c:3d:a8:a8:97:04:90: c2:06:8b:dc:43:aa:f0:d2:35:b7:2d:45:c4:64:66:8a:0a:f0: bf:c8:f4:c4:87:ea:38:e5:01:d2:a1:15:f9:bd:f4:ec:24:45: 81:8a:d4:83:b6:86:9c:f7:b1:ec:04:43:28:6d:4e:f4:d4:09: bb:b8:ea:77:93:c1:9d:41:fc:4d:5e:46:22:8b:dd:a2:5d:b3: bb:4b:94:6e:e2:9d:54:c8:3e:06:bf:fb:56:f5:c8:91:72:1c: 8f:ac:27:b3:a7:97:fd:52:7c:37:02:be:f4:25:23:37:49:5b: ed:7e:b5:93:90:de:b4:22:e3:48:9e:e5:1c:4e:ac:d9:cb:0b: 75:5b:19:72:80:e9:9e:81:d9:75:8d:77:9a:4f:13:8a:88:00: 40:50:53:55:2e:79:72:5e:54:3a:66:25:2f:d0:b7:b3:a2:a4: 93:a7:01:4d:15:e1:74:9e:2b:b4:f4:77:17:78:0e:99:d3:59: 37:1e:2f:d9:6c:f7:0a:75:9b:fc:f7:a2:00:96:a3:4e:92:dc: 85:7e:44:00:a8:00:0a:d8:f2:d8:63:6b:44:02:c9:87:69:f2: e8:00:9e:fd:a3:7b:97:55:c2:78:44:6e:01:fd:c2:d5:80:4e: ca:d7:b7:fe -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIUJpTzucvo1f7REVnQRzP1jJPaNkEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTY1ODlDREU1REMzMzM5Q0U3QkJENEJCMUM3QzE0NjQ3 NDk3Qzk1NjAeFw0yNjAzMjYwNTAwNDJaFw0yNjAzMjcwODQyNDJaMDMxMTAvBgNV BAMTKDFERTVBNjlCNEVBNkQ1NTJBRTRFMzBGMjc3MjM3NDlDQjk3MjkwQzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPwyL9XhIOQQwuBxXC+3DkKSNy AneuEJP7PAWgvWOHqic7Gw3LTDkRSQoWwbKFn640wKAphGzZZJW7CASuSOB/tMAs 8rbGJDZHbbgMSUuXTD9rw50Vz/oS6nRnBDVCpUEXqoU51of0YU2vOVnXsy4aOP47 kLM3Ej/xS3vgfO+p1RM7GHnnZlYOLrJ7MQ7qnKbjcIK5QBrSKGnE8HyX6FTF/5gL OiCgiUk0M0+vRVYiznme2srQvtBkQjJDLT6SakK02+86JuyfnAzguClX8uvKHeKb c0AsEkssw5BqtebWExP20EVXWdipPSPnlBDjbyQZp5UwIGQJOarRiuDBvUevAgMB AAGjggJ4MIICdDAdBgNVHQ4EFgQUHeWmm06m1VKuTjDydyN0nLlykMMwHwYDVR0j BBgwFoAUFlic3l3DM5znu9S7HHwUZHSXyVYwDgYDVR0PAQH/BAQDAgeAMIGPBgNV HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv cmVwby9ycGtpX2NhXzNkYjgxNjNmNjkyMjQ3OThhYzJjNDYzYzBiY2E0ZDZiLzAv MTY1ODlDREU1REMzMzM5Q0U3QkJENEJCMUM3QzE0NjQ3NDk3Qzk1Ni5jcmwwgZ4G CCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5wYWFz LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQxYjUtODJh MC1mMGQwMmMwM2EyYzYvNy8xNjU4OUNERTVEQzMzMzlDRTdCQkQ0QkIxQzdDMTQ2 NDc0OTdDOTU2LmNlcjCBmgYIKwYBBQUHAQsEgY0wgYowgYcGCCsGAQUFBzALhnty c3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQvcmVwby9ycGtpX2NhXzNkYjgx NjNmNjkyMjQ3OThhYzJjNDYzYzBiY2E0ZDZiLzAvMTY1ODlDREU1REMzMzM5Q0U3 QkJENEJCMUM3QzE0NjQ3NDk3Qzk1Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBADEKhJ/rWAG8z9mEnD2o qJcEkMIGi9xDqvDSNbctRcRkZooK8L/I9MSH6jjlAdKhFfm99OwkRYGK1IO2hpz3 sewEQyhtTvTUCbu46neTwZ1B/E1eRiKL3aJds7tLlG7inVTIPga/+1b1yJFyHI+s J7Onl/1SfDcCvvQlIzdJW+1+tZOQ3rQi40ie5RxOrNnLC3VbGXKA6Z6B2XWNd5pP E4qIAEBQU1UueXJeVDpmJS/Qt7OipJOnAU0V4XSeK7T0dxd4DpnTWTceL9ls9wp1 m/z3ogCWo06S3IV+RACoAArY8thja0QCyYdp8ugAnv2je5dVwnhEbgH9wtWATsrX t/4= -----END CERTIFICATE-----Generated at Thu Mar 26 21:19:17 2026 by rpki-client