$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_9f297e7e1f534033aaf93ce1e3b46ffc/0/16821FD22FFB74E3D7FAC3AA03BE6D00145B9A3E.mft File: 16821FD22FFB74E3D7FAC3AA03BE6D00145B9A3E.mft (raw, json) Hash identifier: LHvZIoXkYgZxlvHXW3hpqtluosKcHVZaFuKgRo251MU= Subject key identifier: E3:A1:45:35:0C:92:92:57:6A:F1:55:1B:C6:8A:CE:D1:CB:62:37:A1 Authority key identifier: 16:82:1F:D2:2F:FB:74:E3:D7:FA:C3:AA:03:BE:6D:00:14:5B:9A:3E Certificate issuer: /CN=16821FD22FFB74E3D7FAC3AA03BE6D00145B9A3E Certificate serial: 4007302FF460CC6A6BBD1BB1754D6FB489DC4F3C Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/16821FD22FFB74E3D7FAC3AA03BE6D00145B9A3E.cer Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_9f297e7e1f534033aaf93ce1e3b46ffc/0/16821FD22FFB74E3D7FAC3AA03BE6D00145B9A3E.mft Manifest number: 0253 Signing time: Mon 20 Oct 2025 04:41:25 +0000 Manifest this update: Mon 20 Oct 2025 04:36:25 +0000 Manifest next update: Tue 21 Oct 2025 06:29:25 +0000 Files and hashes: 1: 16821FD22FFB74E3D7FAC3AA03BE6D00145B9A3E.crl (hash: vafmeooCMNisQuS7mBafWu+Qd2I08rWRp+9weP1SljI=) Validation: OK Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_9f297e7e1f534033aaf93ce1e3b46ffc/0/16821FD22FFB74E3D7FAC3AA03BE6D00145B9A3E.crl rsync://rpki-repo.as207960.net/repo/rpki_ca_9f297e7e1f534033aaf93ce1e3b46ffc/0/16821FD22FFB74E3D7FAC3AA03BE6D00145B9A3E.mft rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/16821FD22FFB74E3D7FAC3AA03BE6D00145B9A3E.cer rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 21 Oct 2025 00:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:07:30:2f:f4:60:cc:6a:6b:bd:1b:b1:75:4d:6f:b4:89:dc:4f:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=16821FD22FFB74E3D7FAC3AA03BE6D00145B9A3E Validity Not Before: Oct 20 04:36:25 2025 GMT Not After : Oct 21 06:29:25 2025 GMT Subject: CN=E3A145350C9292576AF1551BC68ACED1CB6237A1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:c1:8b:81:46:9e:29:91:a4:5b:e7:6b:16:14: a3:a0:07:4f:1f:c3:9a:5b:49:8f:46:fb:e0:e7:e0: e1:f9:7c:6c:9d:53:1b:c2:9c:5c:b3:8d:5a:8d:95: ad:d4:bb:14:70:77:82:f9:80:20:c1:f0:3b:38:1e: cf:5f:84:ca:5c:c5:83:99:16:16:59:c3:60:43:a7: 86:16:50:d1:bf:bf:f2:86:2a:de:c7:2d:e1:8a:2f: 34:a7:9f:76:89:e8:29:6e:14:b1:2c:9d:48:b9:94: d8:d7:10:5b:01:c7:4c:27:8e:66:b5:ff:63:61:b3: 72:9e:21:e1:78:bb:a0:ce:ae:8e:bd:3c:08:f2:5e: 89:0d:d5:cf:64:08:2e:f6:78:2a:9e:f1:87:88:ca: 92:ac:56:bd:30:26:e3:7b:92:f4:b6:30:26:e9:0d: a4:f1:3b:56:a6:9f:2c:be:15:97:a3:bf:b6:52:67: 4c:2d:21:c2:1e:58:d6:34:eb:02:ac:5a:63:37:39: d7:fb:58:72:ea:1c:d4:ca:19:2b:e2:0d:b1:22:2a: 59:3a:68:a5:8a:a8:07:cf:90:3c:e2:ce:6d:cf:5d: 36:8c:90:6c:b4:dc:cc:7d:19:4c:8e:f2:d8:24:7d: 6e:a4:91:3c:05:15:f2:39:23:10:1d:26:66:66:ba: 9d:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:A1:45:35:0C:92:92:57:6A:F1:55:1B:C6:8A:CE:D1:CB:62:37:A1 X509v3 Authority Key Identifier: keyid:16:82:1F:D2:2F:FB:74:E3:D7:FA:C3:AA:03:BE:6D:00:14:5B:9A:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_9f297e7e1f534033aaf93ce1e3b46ffc/0/16821FD22FFB74E3D7FAC3AA03BE6D00145B9A3E.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/16821FD22FFB74E3D7FAC3AA03BE6D00145B9A3E.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_9f297e7e1f534033aaf93ce1e3b46ffc/0/16821FD22FFB74E3D7FAC3AA03BE6D00145B9A3E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:76:27:fb:ae:10:8d:d5:e8:0b:00:0d:32:ed:ab:01:67:53: 32:00:b7:af:7a:8e:29:f6:29:b7:c9:8a:89:e1:13:33:96:bf: 51:b4:d4:2e:19:aa:7c:ed:55:bc:77:50:dd:f1:a1:3a:e4:47: 7d:8c:e0:45:31:d0:de:6c:74:ce:9f:9e:79:bf:c1:65:a6:a4: 86:e5:47:97:dc:d7:40:d1:35:cb:60:42:e4:3d:79:30:23:e0: ee:6c:9c:17:08:f4:e9:9c:b8:1f:4c:5b:0e:3e:f6:3f:4b:6b: d3:c3:71:ca:6f:c9:6b:75:7e:88:fc:6a:17:0a:ca:bc:df:12: ce:9e:6c:41:68:dd:58:d7:ba:f3:54:33:84:2f:4d:15:98:34: 1c:00:69:05:ac:63:6c:1d:cf:0a:3e:f4:21:c1:d0:13:83:01: b5:74:aa:f5:d4:28:26:4e:bc:e6:99:b2:81:4e:e3:84:77:04: 50:c6:28:d7:5d:f0:a6:49:97:9a:dc:93:ef:e1:da:29:04:be: 64:5a:f3:55:59:26:95:2f:99:9d:6f:a4:c2:0a:95:cf:f6:df: 06:90:14:70:38:2f:11:eb:35:66:e6:fd:b2:c0:dc:bc:2d:35: d4:65:b4:28:79:65:c3:a0:10:75:cd:c1:45:63:6c:f1:43:f8: c6:55:67:7b -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIUQAcwL/RgzGprvRuxdU1vtIncTzwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTY4MjFGRDIyRkZCNzRFM0Q3RkFDM0FBMDNCRTZEMDAx NDVCOUEzRTAeFw0yNTEwMjAwNDM2MjVaFw0yNTEwMjEwNjI5MjVaMDMxMTAvBgNV BAMTKEUzQTE0NTM1MEM5MjkyNTc2QUYxNTUxQkM2OEFDRUQxQ0I2MjM3QTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqwYuBRp4pkaRb52sWFKOgB08f w5pbSY9G++Dn4OH5fGydUxvCnFyzjVqNla3UuxRwd4L5gCDB8Ds4Hs9fhMpcxYOZ FhZZw2BDp4YWUNG/v/KGKt7HLeGKLzSnn3aJ6CluFLEsnUi5lNjXEFsBx0wnjma1 /2Nhs3KeIeF4u6DOro69PAjyXokN1c9kCC72eCqe8YeIypKsVr0wJuN7kvS2MCbp DaTxO1amnyy+FZejv7ZSZ0wtIcIeWNY06wKsWmM3Odf7WHLqHNTKGSviDbEiKlk6 aKWKqAfPkDzizm3PXTaMkGy03Mx9GUyO8tgkfW6kkTwFFfI5IxAdJmZmup0rAgMB AAGjggJ4MIICdDAdBgNVHQ4EFgQU46FFNQySkldq8VUbxorO0ctiN6EwHwYDVR0j BBgwFoAUFoIf0i/7dOPX+sOqA75tABRbmj4wDgYDVR0PAQH/BAQDAgeAMIGPBgNV HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv cmVwby9ycGtpX2NhXzlmMjk3ZTdlMWY1MzQwMzNhYWY5M2NlMWUzYjQ2ZmZjLzAv MTY4MjFGRDIyRkZCNzRFM0Q3RkFDM0FBMDNCRTZEMDAxNDVCOUEzRS5jcmwwgZ4G CCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5wYWFz LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQxYjUtODJh MC1mMGQwMmMwM2EyYzYvNy8xNjgyMUZEMjJGRkI3NEUzRDdGQUMzQUEwM0JFNkQw MDE0NUI5QTNFLmNlcjCBmgYIKwYBBQUHAQsEgY0wgYowgYcGCCsGAQUFBzALhnty c3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQvcmVwby9ycGtpX2NhXzlmMjk3 ZTdlMWY1MzQwMzNhYWY5M2NlMWUzYjQ2ZmZjLzAvMTY4MjFGRDIyRkZCNzRFM0Q3 RkFDM0FBMDNCRTZEMDAxNDVCOUEzRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAFx2J/uuEI3V6AsADTLt qwFnUzIAt696jin2KbfJionhEzOWv1G01C4ZqnztVbx3UN3xoTrkR32M4EUx0N5s dM6fnnm/wWWmpIblR5fc10DRNctgQuQ9eTAj4O5snBcI9OmcuB9MWw4+9j9La9PD ccpvyWt1foj8ahcKyrzfEs6ebEFo3VjXuvNUM4QvTRWYNBwAaQWsY2wdzwo+9CHB 0BODAbV0qvXUKCZOvOaZsoFO44R3BFDGKNdd8KZJl5rck+/h2ikEvmRa81VZJpUv mZ1vpMIKlc/23waQFHA4LxHrNWbm/bLA3LwtNdRltCh5ZcOgEHXNwUVjbPFD+MZV Z3s= -----END CERTIFICATE-----Generated at Mon Oct 20 09:49:36 2025 by rpki-client