$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_3db8163f69224798ac2c463c0bca4d6b/0/16589CDE5DC3339CE7BBD4BB1C7C14647497C956.mft File: 16589CDE5DC3339CE7BBD4BB1C7C14647497C956.mft (raw, json) Hash identifier: q9QRNzFi9zIHgz4FSOiuK3a61dTq/ngVGBN9QgN6N1A= Subject key identifier: 90:13:6B:7B:BE:76:D5:FC:5B:33:8E:34:81:06:41:3E:43:E3:77:7C Authority key identifier: 16:58:9C:DE:5D:C3:33:9C:E7:BB:D4:BB:1C:7C:14:64:74:97:C9:56 Certificate issuer: /CN=16589CDE5DC3339CE7BBD4BB1C7C14647497C956 Certificate serial: 582C0C9B4FA9F55157AD3D09269FE558A1B6878B Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/16589CDE5DC3339CE7BBD4BB1C7C14647497C956.cer Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_3db8163f69224798ac2c463c0bca4d6b/0/16589CDE5DC3339CE7BBD4BB1C7C14647497C956.mft Manifest number: 03A6 Signing time: Fri 24 Jul 2026 02:41:14 +0000 Manifest this update: Fri 24 Jul 2026 02:36:14 +0000 Manifest next update: Sat 25 Jul 2026 04:50:14 +0000 Files and hashes: 1: 326131313a663263303a666666623a3a2f34382d3438203d3e20323033313035.roa (hash: c6cC288Nt+6ZLopbJZfrPCqS0RtJOJx9nVbb4es7uak=) 2: 16589CDE5DC3339CE7BBD4BB1C7C14647497C956.crl (hash: 8QeN8z5JArrxrM8027vMBmsMV+pi8XQCLLz+lulUX9Y=) Validation: OK Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_3db8163f69224798ac2c463c0bca4d6b/0/16589CDE5DC3339CE7BBD4BB1C7C14647497C956.crl rsync://rpki-repo.as207960.net/repo/rpki_ca_3db8163f69224798ac2c463c0bca4d6b/0/16589CDE5DC3339CE7BBD4BB1C7C14647497C956.mft rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/16589CDE5DC3339CE7BBD4BB1C7C14647497C956.cer rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 25 Jul 2026 04:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:2c:0c:9b:4f:a9:f5:51:57:ad:3d:09:26:9f:e5:58:a1:b6:87:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=16589CDE5DC3339CE7BBD4BB1C7C14647497C956 Validity Not Before: Jul 24 02:36:14 2026 GMT Not After : Jul 25 04:50:14 2026 GMT Subject: CN=90136B7BBE76D5FC5B338E348106413E43E3777C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:13:8e:82:75:e5:2b:6a:a3:f5:18:4e:5a:b2: e3:a7:d5:0c:3d:8c:3b:56:c7:d9:83:e4:45:72:22: 74:06:b5:58:00:dd:38:57:2f:16:46:e1:6d:ba:22: 30:25:5c:fb:d8:b4:2e:a6:71:ae:01:f0:c7:43:31: cf:95:e8:4d:27:96:57:40:ae:a9:05:a7:da:17:63: a1:95:71:d9:71:c3:7e:57:72:bb:1c:ea:69:c5:03: be:df:52:ea:db:5f:ca:6d:be:80:6c:ed:6d:53:ab: a6:04:83:b9:72:9c:7f:af:6e:13:57:ab:40:73:07: 8d:01:ae:38:b2:b7:3d:a6:23:d3:f4:2e:b3:a2:83: 40:bb:7a:ad:74:b4:1e:81:40:34:80:49:9f:7b:b5: 1d:77:21:23:c7:4f:32:03:e0:5e:cc:3c:4e:73:39: 14:e2:e7:42:dc:c6:ba:02:9e:dc:13:8d:a8:8f:e7: b9:18:b8:e3:a6:79:3f:ad:81:2d:7b:17:e3:9e:6d: be:49:f9:6d:be:fb:ce:bb:91:1c:92:2c:0d:3c:ea: e7:73:fd:df:bc:95:5d:39:3d:4b:24:c4:5f:c8:a0: f7:ad:0e:7b:dc:68:5b:a0:dc:c7:12:b3:2e:93:19: 1f:24:30:13:aa:f8:6f:8b:57:a7:48:5c:a5:38:bc: d8:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:13:6B:7B:BE:76:D5:FC:5B:33:8E:34:81:06:41:3E:43:E3:77:7C X509v3 Authority Key Identifier: keyid:16:58:9C:DE:5D:C3:33:9C:E7:BB:D4:BB:1C:7C:14:64:74:97:C9:56 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_3db8163f69224798ac2c463c0bca4d6b/0/16589CDE5DC3339CE7BBD4BB1C7C14647497C956.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/16589CDE5DC3339CE7BBD4BB1C7C14647497C956.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_3db8163f69224798ac2c463c0bca4d6b/0/16589CDE5DC3339CE7BBD4BB1C7C14647497C956.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:f6:d5:e9:68:f9:c6:fd:fb:aa:38:b6:5d:80:1b:39:32:cf: e7:6a:ac:e9:c8:aa:ec:da:0f:b9:b7:73:2c:62:2f:ba:a1:53: a3:9e:79:a2:a7:8d:df:2e:e8:ea:31:5f:b9:44:31:61:26:b6: 79:da:10:26:bd:74:f7:c0:c9:4a:ed:45:ef:2a:b3:7f:cd:54: 13:67:19:b8:95:9e:4b:a0:da:9d:78:de:bb:b8:6f:64:de:fa: 52:12:0e:8b:d3:a2:ba:41:b0:e7:18:58:25:eb:a0:bb:82:68: ec:77:a8:2a:d3:6e:85:98:1a:00:9b:5d:f2:e0:8a:0d:e8:a5: 0e:27:8a:0f:f3:11:3b:f8:7f:b8:1a:b2:be:1a:c8:fb:64:76: 5c:4b:f5:7b:d8:0b:ba:d7:18:17:d6:82:d0:df:31:f3:4e:6b: 64:ad:b5:8e:2b:ae:19:5b:17:e5:0e:00:3e:57:52:d7:2e:d2: 2e:99:f7:a0:53:ab:66:8d:fe:ec:38:c9:61:0b:02:94:55:cc: de:af:e7:5d:3f:6f:6f:7b:95:dc:f8:36:42:7e:4b:64:ba:23: 76:d9:b1:c7:e1:c2:ed:fd:e8:f8:51:db:76:4b:0c:1f:7f:70: bc:31:b9:8e:49:d9:ae:37:c6:cc:02:4b:41:bd:cc:e9:01:23: d1:1d:cf:3b -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIUWCwMm0+p9VFXrT0JJp/lWKG2h4swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTY1ODlDREU1REMzMzM5Q0U3QkJENEJCMUM3QzE0NjQ3 NDk3Qzk1NjAeFw0yNjA3MjQwMjM2MTRaFw0yNjA3MjUwNDUwMTRaMDMxMTAvBgNV BAMTKDkwMTM2QjdCQkU3NkQ1RkM1QjMzOEUzNDgxMDY0MTNFNDNFMzc3N0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIE46CdeUraqP1GE5asuOn1Qw9 jDtWx9mD5EVyInQGtVgA3ThXLxZG4W26IjAlXPvYtC6mca4B8MdDMc+V6E0nlldA rqkFp9oXY6GVcdlxw35Xcrsc6mnFA77fUurbX8ptvoBs7W1Tq6YEg7lynH+vbhNX q0BzB40Brjiytz2mI9P0LrOig0C7eq10tB6BQDSASZ97tR13ISPHTzID4F7MPE5z ORTi50LcxroCntwTjaiP57kYuOOmeT+tgS17F+Oebb5J+W2++867kRySLA086udz /d+8lV05PUskxF/IoPetDnvcaFug3McSsy6TGR8kMBOq+G+LV6dIXKU4vNhxAgMB AAGjggJ4MIICdDAdBgNVHQ4EFgQUkBNre7521fxbM440gQZBPkPjd3wwHwYDVR0j BBgwFoAUFlic3l3DM5znu9S7HHwUZHSXyVYwDgYDVR0PAQH/BAQDAgeAMIGPBgNV HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv cmVwby9ycGtpX2NhXzNkYjgxNjNmNjkyMjQ3OThhYzJjNDYzYzBiY2E0ZDZiLzAv MTY1ODlDREU1REMzMzM5Q0U3QkJENEJCMUM3QzE0NjQ3NDk3Qzk1Ni5jcmwwgZ4G CCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5wYWFz LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQxYjUtODJh MC1mMGQwMmMwM2EyYzYvNy8xNjU4OUNERTVEQzMzMzlDRTdCQkQ0QkIxQzdDMTQ2 NDc0OTdDOTU2LmNlcjCBmgYIKwYBBQUHAQsEgY0wgYowgYcGCCsGAQUFBzALhnty c3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQvcmVwby9ycGtpX2NhXzNkYjgx NjNmNjkyMjQ3OThhYzJjNDYzYzBiY2E0ZDZiLzAvMTY1ODlDREU1REMzMzM5Q0U3 QkJENEJCMUM3QzE0NjQ3NDk3Qzk1Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAAr21elo+cb9+6o4tl2A Gzkyz+dqrOnIquzaD7m3cyxiL7qhU6OeeaKnjd8u6OoxX7lEMWEmtnnaECa9dPfA yUrtRe8qs3/NVBNnGbiVnkug2p143ru4b2Te+lISDovTorpBsOcYWCXroLuCaOx3 qCrTboWYGgCbXfLgig3opQ4nig/zETv4f7gasr4ayPtkdlxL9XvYC7rXGBfWgtDf MfNOa2SttY4rrhlbF+UOAD5XUtcu0i6Z96BTq2aN/uw4yWELApRVzN6v510/b297 ldz4NkJ+S2S6I3bZscfhwu396PhR23ZLDB9/cLwxuY5J2a43xswCS0G9zOkBI9Ed zzs= -----END CERTIFICATE-----Generated at Fri Jul 24 17:17:46 2026 by rpki-client