$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_9f297e7e1f534033aaf93ce1e3b46ffc/0/16821FD22FFB74E3D7FAC3AA03BE6D00145B9A3E.mft File: 16821FD22FFB74E3D7FAC3AA03BE6D00145B9A3E.mft (raw, json) Hash identifier: qsoNyXyfZ/I6tIX11ELyF/+glpr0yZNJx+gmRZ1Q8uI= Subject key identifier: 88:95:BE:4E:72:28:0D:60:EB:C6:FA:8A:B8:90:DB:B2:2F:58:CF:A0 Authority key identifier: 16:82:1F:D2:2F:FB:74:E3:D7:FA:C3:AA:03:BE:6D:00:14:5B:9A:3E Certificate issuer: /CN=16821FD22FFB74E3D7FAC3AA03BE6D00145B9A3E Certificate serial: 3E446939218E21DF95F8CBE71BC7102863AB38F8 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/16821FD22FFB74E3D7FAC3AA03BE6D00145B9A3E.cer Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_9f297e7e1f534033aaf93ce1e3b46ffc/0/16821FD22FFB74E3D7FAC3AA03BE6D00145B9A3E.mft Manifest number: 033F Signing time: Wed 13 May 2026 02:13:30 +0000 Manifest this update: Wed 13 May 2026 02:08:30 +0000 Manifest next update: Thu 14 May 2026 02:38:30 +0000 Files and hashes: 1: 16821FD22FFB74E3D7FAC3AA03BE6D00145B9A3E.crl (hash: EdtZ57CK5gMU7RjTtXROLldrBeq29t9YqYj4DBW9vWY=) Validation: OK Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_9f297e7e1f534033aaf93ce1e3b46ffc/0/16821FD22FFB74E3D7FAC3AA03BE6D00145B9A3E.crl rsync://rpki-repo.as207960.net/repo/rpki_ca_9f297e7e1f534033aaf93ce1e3b46ffc/0/16821FD22FFB74E3D7FAC3AA03BE6D00145B9A3E.mft rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/16821FD22FFB74E3D7FAC3AA03BE6D00145B9A3E.cer rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 14 May 2026 00:34:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:44:69:39:21:8e:21:df:95:f8:cb:e7:1b:c7:10:28:63:ab:38:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=16821FD22FFB74E3D7FAC3AA03BE6D00145B9A3E Validity Not Before: May 13 02:08:30 2026 GMT Not After : May 14 02:38:30 2026 GMT Subject: CN=8895BE4E72280D60EBC6FA8AB890DBB22F58CFA0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:b8:61:05:9d:f6:fd:81:f4:6b:2b:8e:0c:1f: 40:1a:d3:4f:a4:53:22:81:61:a9:93:42:a8:2b:58: 9d:bf:7b:74:6e:bf:19:19:58:ce:75:73:85:72:f7: 58:0f:ff:be:b8:11:1c:ab:b1:f0:60:37:db:e5:57: 1f:b8:dc:f6:da:b7:d3:0c:4e:eb:86:00:b5:d1:7e: 02:3f:25:dc:f0:fd:c5:ed:64:08:02:cc:c6:d1:f3: 9d:3a:a0:e7:8a:df:d6:9e:e5:50:9b:04:bb:09:1b: 3b:d6:1e:ae:26:9e:5c:9f:a7:8f:bf:cd:20:a7:a8: 86:63:23:82:b0:4c:b5:39:95:96:d6:79:bf:95:99: a5:1d:64:0b:c4:1b:07:5a:6f:37:d8:40:e9:4b:ca: 6c:2e:ab:b1:5f:60:90:74:d4:a2:56:73:b0:c5:de: 87:4e:a0:a7:77:04:11:53:42:2e:ab:a7:5f:c3:e9: 50:7c:1e:d0:30:f8:32:2a:47:a9:90:9b:d1:0e:03: 7c:10:fa:55:4a:65:36:ed:c9:85:a4:ff:89:09:6f: 85:a0:d5:7a:83:4f:26:d9:d9:c7:c5:08:3b:fb:2f: 02:09:54:0e:40:a1:d1:11:90:1a:68:fa:65:9f:31: 40:e7:b9:a7:12:f3:55:44:87:78:b9:ed:12:fe:44: 76:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:95:BE:4E:72:28:0D:60:EB:C6:FA:8A:B8:90:DB:B2:2F:58:CF:A0 X509v3 Authority Key Identifier: keyid:16:82:1F:D2:2F:FB:74:E3:D7:FA:C3:AA:03:BE:6D:00:14:5B:9A:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_9f297e7e1f534033aaf93ce1e3b46ffc/0/16821FD22FFB74E3D7FAC3AA03BE6D00145B9A3E.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/16821FD22FFB74E3D7FAC3AA03BE6D00145B9A3E.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_9f297e7e1f534033aaf93ce1e3b46ffc/0/16821FD22FFB74E3D7FAC3AA03BE6D00145B9A3E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:62:3a:31:20:03:b9:00:53:87:5d:1c:f6:94:6e:3d:45:4b: 04:29:5f:4c:40:40:b2:9a:ef:fd:e3:86:d2:f4:f4:3c:bd:a0: 97:22:f3:d3:5d:7c:24:62:87:65:c3:f8:94:d2:5c:75:bc:cb: 48:f2:50:d8:24:e8:ea:2d:8b:15:ad:6a:d3:f8:d2:7d:15:c5: c8:28:07:01:68:cd:79:2f:ff:87:02:95:c9:f9:99:87:9d:d2: 55:02:6f:dc:3a:0d:79:dc:58:75:88:08:0a:0d:a0:fb:6a:77: 37:4f:d0:74:a5:27:10:7b:9e:f8:36:6c:c7:0b:fc:e3:1a:f4: 97:d1:46:e8:85:f7:13:05:b6:b8:7c:2b:db:68:2a:ff:b0:6f: 69:e9:be:ad:69:fb:c3:f4:a0:a3:a2:58:8f:ee:e8:2c:9a:13: 71:0f:a7:a1:e7:e6:05:88:bd:9f:3b:27:71:29:6e:ad:48:f9: 80:68:9b:bf:a3:f1:5b:7e:22:1f:4a:ce:75:41:09:2d:f6:85: 5b:7e:cf:4e:e4:ff:00:67:33:5a:63:1b:2b:a6:c2:57:b8:1f: bd:98:fb:c8:24:ff:c3:a1:dd:bc:96:c3:39:66:ea:06:b3:4c: 23:49:eb:eb:42:9d:42:6d:3f:94:78:e6:07:e5:27:77:9c:02: 28:33:15:d4 -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIUPkRpOSGOId+V+MvnG8cQKGOrOPgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTY4MjFGRDIyRkZCNzRFM0Q3RkFDM0FBMDNCRTZEMDAx NDVCOUEzRTAeFw0yNjA1MTMwMjA4MzBaFw0yNjA1MTQwMjM4MzBaMDMxMTAvBgNV BAMTKDg4OTVCRTRFNzIyODBENjBFQkM2RkE4QUI4OTBEQkIyMkY1OENGQTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCcuGEFnfb9gfRrK44MH0Aa00+k UyKBYamTQqgrWJ2/e3RuvxkZWM51c4Vy91gP/764ERyrsfBgN9vlVx+43Pbat9MM TuuGALXRfgI/Jdzw/cXtZAgCzMbR8506oOeK39ae5VCbBLsJGzvWHq4mnlyfp4+/ zSCnqIZjI4KwTLU5lZbWeb+VmaUdZAvEGwdabzfYQOlLymwuq7FfYJB01KJWc7DF 3odOoKd3BBFTQi6rp1/D6VB8HtAw+DIqR6mQm9EOA3wQ+lVKZTbtyYWk/4kJb4Wg 1XqDTybZ2cfFCDv7LwIJVA5AodERkBpo+mWfMUDnuacS81VEh3i57RL+RHafAgMB AAGjggJ4MIICdDAdBgNVHQ4EFgQUiJW+TnIoDWDrxvqKuJDbsi9Yz6AwHwYDVR0j BBgwFoAUFoIf0i/7dOPX+sOqA75tABRbmj4wDgYDVR0PAQH/BAQDAgeAMIGPBgNV HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv cmVwby9ycGtpX2NhXzlmMjk3ZTdlMWY1MzQwMzNhYWY5M2NlMWUzYjQ2ZmZjLzAv MTY4MjFGRDIyRkZCNzRFM0Q3RkFDM0FBMDNCRTZEMDAxNDVCOUEzRS5jcmwwgZ4G CCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5wYWFz LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQxYjUtODJh MC1mMGQwMmMwM2EyYzYvNy8xNjgyMUZEMjJGRkI3NEUzRDdGQUMzQUEwM0JFNkQw MDE0NUI5QTNFLmNlcjCBmgYIKwYBBQUHAQsEgY0wgYowgYcGCCsGAQUFBzALhnty c3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQvcmVwby9ycGtpX2NhXzlmMjk3 ZTdlMWY1MzQwMzNhYWY5M2NlMWUzYjQ2ZmZjLzAvMTY4MjFGRDIyRkZCNzRFM0Q3 RkFDM0FBMDNCRTZEMDAxNDVCOUEzRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAEJiOjEgA7kAU4ddHPaU bj1FSwQpX0xAQLKa7/3jhtL09Dy9oJci89NdfCRih2XD+JTSXHW8y0jyUNgk6Oot ixWtatP40n0VxcgoBwFozXkv/4cClcn5mYed0lUCb9w6DXncWHWICAoNoPtqdzdP 0HSlJxB7nvg2bMcL/OMa9JfRRuiF9xMFtrh8K9toKv+wb2npvq1p+8P0oKOiWI/u 6CyaE3EPp6Hn5gWIvZ87J3Epbq1I+YBom7+j8Vt+Ih9KznVBCS32hVt+z07k/wBn M1pjGyumwle4H72Y+8gk/8Oh3byWwzlm6gazTCNJ6+tCnUJtP5R45gflJ3ecAigz FdQ= -----END CERTIFICATE-----Generated at Wed May 13 11:26:54 2026 by rpki-client