$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_3db8163f69224798ac2c463c0bca4d6b/0/16589CDE5DC3339CE7BBD4BB1C7C14647497C956.mft File: 16589CDE5DC3339CE7BBD4BB1C7C14647497C956.mft (raw, json) Hash identifier: +tzAxXg1YMNK8KehwrY2rwE3rcgQTVOXb5EQYb2OviQ= Subject key identifier: 5D:7C:11:24:89:A4:BC:46:19:33:8C:72:F1:A3:95:A3:25:BC:3B:63 Authority key identifier: 16:58:9C:DE:5D:C3:33:9C:E7:BB:D4:BB:1C:7C:14:64:74:97:C9:56 Certificate issuer: /CN=16589CDE5DC3339CE7BBD4BB1C7C14647497C956 Certificate serial: 1D767FC0EFBCDC799C64719762271B5F7A2219F5 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/16589CDE5DC3339CE7BBD4BB1C7C14647497C956.cer Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_3db8163f69224798ac2c463c0bca4d6b/0/16589CDE5DC3339CE7BBD4BB1C7C14647497C956.mft Manifest number: 025A Signing time: Mon 20 Oct 2025 06:11:35 +0000 Manifest this update: Mon 20 Oct 2025 06:06:35 +0000 Manifest next update: Tue 21 Oct 2025 08:51:35 +0000 Files and hashes: 1: 16589CDE5DC3339CE7BBD4BB1C7C14647497C956.crl (hash: ydt6pDFEqnsnXSwwNlBBE5b9/c9QDg1Z86AoCgcT7B8=) 2: 326131313a663263303a666666623a3a2f34382d3438203d3e20323033313035.roa (hash: oR5xdewUw9CCHlEGMS0Z24xgtiBxrNN/CytrFhUuC90=) Validation: OK Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_3db8163f69224798ac2c463c0bca4d6b/0/16589CDE5DC3339CE7BBD4BB1C7C14647497C956.crl rsync://rpki-repo.as207960.net/repo/rpki_ca_3db8163f69224798ac2c463c0bca4d6b/0/16589CDE5DC3339CE7BBD4BB1C7C14647497C956.mft rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/16589CDE5DC3339CE7BBD4BB1C7C14647497C956.cer rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 21 Oct 2025 00:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:76:7f:c0:ef:bc:dc:79:9c:64:71:97:62:27:1b:5f:7a:22:19:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=16589CDE5DC3339CE7BBD4BB1C7C14647497C956 Validity Not Before: Oct 20 06:06:35 2025 GMT Not After : Oct 21 08:51:35 2025 GMT Subject: CN=5D7C112489A4BC4619338C72F1A395A325BC3B63 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:c5:51:52:a9:bb:61:0a:10:43:3d:bb:68:a7: 81:b5:0e:af:1b:24:f2:ae:88:b2:01:85:7c:38:54: b8:85:ed:84:e9:1a:74:2c:34:ae:93:b8:80:87:dd: 9e:60:4e:3e:39:b1:2c:cb:3e:3d:cd:39:4b:f4:2f: 21:c9:3d:3f:ad:c3:13:bf:e5:45:bb:ff:13:1e:18: 23:64:b7:19:86:60:59:10:fb:0d:b1:bd:a0:5c:5a: ad:ac:9a:79:ef:42:cf:28:71:2d:f6:2d:17:42:1e: 1d:fd:8b:e9:ec:99:ef:cc:5f:0a:2b:db:eb:33:aa: 06:7e:3b:35:9b:eb:41:84:b2:c4:16:a2:db:fb:43: 29:3b:51:15:ca:31:5f:e3:7a:4b:2d:ad:85:7e:9c: 41:ef:7f:2f:4b:4b:13:b8:eb:2e:7b:03:2f:2e:ac: af:f8:d9:51:64:05:29:f9:51:11:64:7b:c3:0a:61: 80:22:f8:7a:b8:28:34:30:e8:dd:90:11:3e:aa:52: fd:84:c8:dc:e9:85:93:49:eb:80:80:aa:43:82:7e: ed:c3:8e:17:69:2d:d6:2a:ce:2c:79:49:a3:82:47: e9:01:bb:86:20:05:d4:2b:1c:95:2c:7e:3f:94:1a: d1:40:89:b7:2f:de:c9:3c:34:b7:6d:f5:74:53:18: 58:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:7C:11:24:89:A4:BC:46:19:33:8C:72:F1:A3:95:A3:25:BC:3B:63 X509v3 Authority Key Identifier: keyid:16:58:9C:DE:5D:C3:33:9C:E7:BB:D4:BB:1C:7C:14:64:74:97:C9:56 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_3db8163f69224798ac2c463c0bca4d6b/0/16589CDE5DC3339CE7BBD4BB1C7C14647497C956.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/16589CDE5DC3339CE7BBD4BB1C7C14647497C956.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_3db8163f69224798ac2c463c0bca4d6b/0/16589CDE5DC3339CE7BBD4BB1C7C14647497C956.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:a6:b8:17:58:ec:f2:32:23:b0:12:82:05:08:e9:58:72:74: c6:b3:bc:c2:3b:8c:fb:f3:6f:f0:d8:3d:ba:02:bd:6e:7b:ea: 74:ed:e1:28:9d:1e:40:7f:b3:80:3f:4c:d9:a2:c3:ae:d1:c5: d9:b8:36:f5:c6:b9:8f:36:b9:cb:ed:ae:51:cf:45:24:52:5f: c1:02:a0:a3:ac:47:28:a5:4a:be:64:50:7a:f6:e2:6d:51:98: ee:a9:38:82:0b:b8:94:9e:f5:48:88:7f:6c:09:84:ef:2a:8d: ce:4c:72:bf:43:a2:c2:88:6c:0f:08:d2:54:c6:9b:24:a9:d8: 74:85:3f:99:46:2c:c7:2b:88:f2:ab:7d:2e:57:71:16:73:e2: 83:32:b6:93:cb:cb:a1:94:fb:8b:0d:d2:37:c5:27:6e:8e:63: f2:0d:1b:3c:ac:f0:5f:ef:4d:dc:ec:c5:e9:8d:9a:69:90:2d: 0d:34:8e:c9:91:66:7f:40:0f:0a:5d:fc:7d:7c:05:44:00:e9: ba:34:b6:56:fc:6c:d3:fa:66:e2:23:f6:6f:7f:8d:ca:e5:d4: 8d:78:1f:48:94:80:3f:e5:c6:d7:af:98:9d:99:10:88:0b:8d: f9:d0:4f:5d:c3:9a:49:a2:ba:22:42:91:84:36:9d:1c:5b:d6: 01:03:5e:15 -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIUHXZ/wO+83HmcZHGXYicbX3oiGfUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTY1ODlDREU1REMzMzM5Q0U3QkJENEJCMUM3QzE0NjQ3 NDk3Qzk1NjAeFw0yNTEwMjAwNjA2MzVaFw0yNTEwMjEwODUxMzVaMDMxMTAvBgNV BAMTKDVEN0MxMTI0ODlBNEJDNDYxOTMzOEM3MkYxQTM5NUEzMjVCQzNCNjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpxVFSqbthChBDPbtop4G1Dq8b JPKuiLIBhXw4VLiF7YTpGnQsNK6TuICH3Z5gTj45sSzLPj3NOUv0LyHJPT+twxO/ 5UW7/xMeGCNktxmGYFkQ+w2xvaBcWq2smnnvQs8ocS32LRdCHh39i+nsme/MXwor 2+szqgZ+OzWb60GEssQWotv7Qyk7URXKMV/jekstrYV+nEHvfy9LSxO46y57Ay8u rK/42VFkBSn5URFke8MKYYAi+Hq4KDQw6N2QET6qUv2EyNzphZNJ64CAqkOCfu3D jhdpLdYqzix5SaOCR+kBu4YgBdQrHJUsfj+UGtFAibcv3sk8NLdt9XRTGFgLAgMB AAGjggJ4MIICdDAdBgNVHQ4EFgQUXXwRJImkvEYZM4xy8aOVoyW8O2MwHwYDVR0j BBgwFoAUFlic3l3DM5znu9S7HHwUZHSXyVYwDgYDVR0PAQH/BAQDAgeAMIGPBgNV HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv cmVwby9ycGtpX2NhXzNkYjgxNjNmNjkyMjQ3OThhYzJjNDYzYzBiY2E0ZDZiLzAv MTY1ODlDREU1REMzMzM5Q0U3QkJENEJCMUM3QzE0NjQ3NDk3Qzk1Ni5jcmwwgZ4G CCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5wYWFz LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQxYjUtODJh MC1mMGQwMmMwM2EyYzYvNy8xNjU4OUNERTVEQzMzMzlDRTdCQkQ0QkIxQzdDMTQ2 NDc0OTdDOTU2LmNlcjCBmgYIKwYBBQUHAQsEgY0wgYowgYcGCCsGAQUFBzALhnty c3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQvcmVwby9ycGtpX2NhXzNkYjgx NjNmNjkyMjQ3OThhYzJjNDYzYzBiY2E0ZDZiLzAvMTY1ODlDREU1REMzMzM5Q0U3 QkJENEJCMUM3QzE0NjQ3NDk3Qzk1Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAAamuBdY7PIyI7ASggUI 6VhydMazvMI7jPvzb/DYPboCvW576nTt4SidHkB/s4A/TNmiw67Rxdm4NvXGuY82 ucvtrlHPRSRSX8ECoKOsRyilSr5kUHr24m1RmO6pOIILuJSe9UiIf2wJhO8qjc5M cr9DosKIbA8I0lTGmySp2HSFP5lGLMcriPKrfS5XcRZz4oMytpPLy6GU+4sN0jfF J26OY/INGzys8F/vTdzsxemNmmmQLQ00jsmRZn9ADwpd/H18BUQA6bo0tlb8bNP6 ZuIj9m9/jcrl1I14H0iUgD/lxtevmJ2ZEIgLjfnQT13DmkmiuiJCkYQ2nRxb1gED XhU= -----END CERTIFICATE-----Generated at Mon Oct 20 08:37:23 2025 by rpki-client