$ rpki-client -vvvf rpki-repo.as207960.net/repo/rpki_ca_3db8163f69224798ac2c463c0bca4d6b/0/16589CDE5DC3339CE7BBD4BB1C7C14647497C956.mft File: 16589CDE5DC3339CE7BBD4BB1C7C14647497C956.mft (raw, json) Hash identifier: ZPYW0QZuvCDdYdg5hhJfiYZZBBj8t78bNVi7aERgTvk= Subject key identifier: 6D:60:CD:EC:27:D5:C7:5E:A3:70:6E:83:81:74:6A:A9:9B:33:34:8F Authority key identifier: 16:58:9C:DE:5D:C3:33:9C:E7:BB:D4:BB:1C:7C:14:64:74:97:C9:56 Certificate issuer: /CN=16589CDE5DC3339CE7BBD4BB1C7C14647497C956 Certificate serial: 4B4A7289D0773CCF052D5B5D7D08ACE6DC08F836 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/16589CDE5DC3339CE7BBD4BB1C7C14647497C956.cer Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_3db8163f69224798ac2c463c0bca4d6b/0/16589CDE5DC3339CE7BBD4BB1C7C14647497C956.mft Manifest number: 0404 Signing time: Thu 15 Oct 2026 22:14:35 +0000 Manifest this update: Thu 15 Oct 2026 22:09:34 +0000 Manifest next update: Fri 16 Oct 2026 23:30:34 +0000 Files and hashes: 1: 326131313a663263303a666666623a3a2f34382d3438203d3e20323033313035.roa (hash: c6cC288Nt+6ZLopbJZfrPCqS0RtJOJx9nVbb4es7uak=) 2: 16589CDE5DC3339CE7BBD4BB1C7C14647497C956.crl (hash: xglNICtF87QpXbP+jBo35DZIIHTw/VaWq0VFxKNIaIU=) Validation: OK Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_3db8163f69224798ac2c463c0bca4d6b/0/16589CDE5DC3339CE7BBD4BB1C7C14647497C956.crl rsync://rpki-repo.as207960.net/repo/rpki_ca_3db8163f69224798ac2c463c0bca4d6b/0/16589CDE5DC3339CE7BBD4BB1C7C14647497C956.mft rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/16589CDE5DC3339CE7BBD4BB1C7C14647497C956.cer rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 16 Oct 2026 20:58:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:4a:72:89:d0:77:3c:cf:05:2d:5b:5d:7d:08:ac:e6:dc:08:f8:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=16589CDE5DC3339CE7BBD4BB1C7C14647497C956 Validity Not Before: Oct 15 22:09:34 2026 GMT Not After : Oct 16 23:30:34 2026 GMT Subject: CN=6D60CDEC27D5C75EA3706E8381746AA99B33348F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:03:f0:0d:be:58:6d:ff:b2:e2:20:a6:47:85: bb:9f:ed:eb:cd:9d:a9:52:84:42:d8:90:9d:ba:c7: c3:cc:81:ef:71:2f:e7:20:5f:ae:a9:94:30:b3:66: 93:5d:73:fd:4e:aa:d5:13:6e:b8:6b:b6:20:f0:90: 2c:ec:a7:05:8d:87:e1:13:ce:80:a1:12:bf:1a:1d: a8:33:ca:81:12:8c:2b:ca:52:1a:1a:a9:83:5e:b8: bd:6b:3e:3b:64:71:c8:24:d0:24:8a:28:41:0e:51: dd:98:16:90:c1:f0:63:8d:cc:48:e5:d2:e9:04:c6: 7b:74:a6:1f:c6:01:2f:1a:de:cf:c7:e1:ca:ad:9b: f4:da:b9:3c:e9:07:f5:49:04:68:21:7d:cb:de:48: ba:32:66:f0:56:47:07:a6:fa:47:ab:28:e8:77:f1: a4:99:dc:a4:ff:dd:1d:72:84:0b:83:84:37:e3:9a: a3:c4:24:c0:28:7a:4a:4b:d8:41:0b:a7:12:a0:d3: 4f:d0:21:a8:9f:74:8a:4f:fd:2f:99:ae:2c:e9:c8: b1:3d:9c:e2:d7:08:b0:d6:d0:fb:d7:62:88:a5:4f: 24:2b:ad:e2:1b:3d:f5:e1:ac:d5:86:4b:91:e8:4c: a2:71:34:68:8d:63:93:62:d2:e6:38:30:79:ab:e7: 43:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:60:CD:EC:27:D5:C7:5E:A3:70:6E:83:81:74:6A:A9:9B:33:34:8F X509v3 Authority Key Identifier: keyid:16:58:9C:DE:5D:C3:33:9C:E7:BB:D4:BB:1C:7C:14:64:74:97:C9:56 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_3db8163f69224798ac2c463c0bca4d6b/0/16589CDE5DC3339CE7BBD4BB1C7C14647497C956.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/16589CDE5DC3339CE7BBD4BB1C7C14647497C956.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_3db8163f69224798ac2c463c0bca4d6b/0/16589CDE5DC3339CE7BBD4BB1C7C14647497C956.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:bb:46:a3:25:38:c6:57:a8:fd:32:e8:b5:67:2e:4b:cd:3f: dc:13:ee:9c:18:d4:2c:f1:67:34:49:0b:ac:95:b5:4b:6f:53: e2:f8:36:93:a3:8d:a9:33:b7:20:dc:89:56:a5:3b:b7:d8:80: f4:0f:b2:e9:ed:28:f7:7a:06:3c:0d:b9:9b:b7:62:99:85:72: 23:3c:b9:3c:01:50:64:37:f1:80:1f:ca:0b:91:b4:92:65:3a: 35:a1:5f:35:40:86:12:37:c5:6e:6d:77:d6:f2:56:17:bf:20: d3:c8:ca:a2:f6:2a:e8:9d:e2:38:ce:a4:0a:bf:22:3f:fb:1e: 36:75:4c:01:a6:b1:ac:6b:4c:62:51:56:de:b9:6c:0a:d0:31: df:a7:f2:ca:cb:4f:cc:19:b8:57:60:e3:76:df:43:d4:54:58: eb:da:47:ee:7c:8c:2d:7d:79:3a:7e:fa:86:ad:3a:f7:ef:fa: 3a:87:4a:98:f6:e6:1e:39:3a:d9:f6:36:dd:a0:64:41:b0:3f: 6e:2a:1c:f2:ff:6f:4f:56:55:25:0b:1b:9b:a4:eb:2d:db:8a: 14:d8:c0:53:42:b2:34:4e:de:ab:8d:06:af:99:13:8c:df:4c: 4c:d8:5b:cf:30:bc:36:3f:03:41:3e:92:2e:07:e2:7e:7d:70: ee:27:f2:a6 -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIUS0pyidB3PM8FLVtdfQis5twI+DYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTY1ODlDREU1REMzMzM5Q0U3QkJENEJCMUM3QzE0NjQ3 NDk3Qzk1NjAeFw0yNjEwMTUyMjA5MzRaFw0yNjEwMTYyMzMwMzRaMDMxMTAvBgNV BAMTKDZENjBDREVDMjdENUM3NUVBMzcwNkU4MzgxNzQ2QUE5OUIzMzM0OEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZA/ANvlht/7LiIKZHhbuf7evN nalShELYkJ26x8PMge9xL+cgX66plDCzZpNdc/1OqtUTbrhrtiDwkCzspwWNh+ET zoChEr8aHagzyoESjCvKUhoaqYNeuL1rPjtkccgk0CSKKEEOUd2YFpDB8GONzEjl 0ukExnt0ph/GAS8a3s/H4cqtm/TauTzpB/VJBGghfcveSLoyZvBWRwem+kerKOh3 8aSZ3KT/3R1yhAuDhDfjmqPEJMAoekpL2EELpxKg00/QIaifdIpP/S+ZrizpyLE9 nOLXCLDW0PvXYoilTyQrreIbPfXhrNWGS5HoTKJxNGiNY5Ni0uY4MHmr50MbAgMB AAGjggJ4MIICdDAdBgNVHQ4EFgQUbWDN7CfVx16jcG6DgXRqqZszNI8wHwYDVR0j BBgwFoAUFlic3l3DM5znu9S7HHwUZHSXyVYwDgYDVR0PAQH/BAQDAgeAMIGPBgNV HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv cmVwby9ycGtpX2NhXzNkYjgxNjNmNjkyMjQ3OThhYzJjNDYzYzBiY2E0ZDZiLzAv MTY1ODlDREU1REMzMzM5Q0U3QkJENEJCMUM3QzE0NjQ3NDk3Qzk1Ni5jcmwwgZ4G CCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5wYWFz LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQxYjUtODJh MC1mMGQwMmMwM2EyYzYvNy8xNjU4OUNERTVEQzMzMzlDRTdCQkQ0QkIxQzdDMTQ2 NDc0OTdDOTU2LmNlcjCBmgYIKwYBBQUHAQsEgY0wgYowgYcGCCsGAQUFBzALhnty c3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQvcmVwby9ycGtpX2NhXzNkYjgx NjNmNjkyMjQ3OThhYzJjNDYzYzBiY2E0ZDZiLzAvMTY1ODlDREU1REMzMzM5Q0U3 QkJENEJCMUM3QzE0NjQ3NDk3Qzk1Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBADa7RqMlOMZXqP0y6LVn LkvNP9wT7pwY1CzxZzRJC6yVtUtvU+L4NpOjjakztyDciValO7fYgPQPsuntKPd6 BjwNuZu3YpmFciM8uTwBUGQ38YAfyguRtJJlOjWhXzVAhhI3xW5td9byVhe/INPI yqL2Kuid4jjOpAq/Ij/7HjZ1TAGmsaxrTGJRVt65bArQMd+n8srLT8wZuFdg43bf Q9RUWOvaR+58jC19eTp++oatOvfv+jqHSpj25h45Otn2Nt2gZEGwP24qHPL/b09W VSULG5uk6y3bihTYwFNCsjRO3quNBq+ZE4zfTEzYW88wvDY/A0E+ki4H4n59cO4n 8qY= -----END CERTIFICATE-----Generated at Fri Oct 16 10:57:08 2026 by rpki-client