$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_9f297e7e1f534033aaf93ce1e3b46ffc/0/16821FD22FFB74E3D7FAC3AA03BE6D00145B9A3E.mft File: 16821FD22FFB74E3D7FAC3AA03BE6D00145B9A3E.mft (raw, json) Hash identifier: eiXI5EVTnLprKFKfogz/353hYN/If3INiEdnCU9aBV4= Subject key identifier: 25:DC:CD:F9:97:CA:ED:49:36:4D:B5:12:CF:79:1E:29:B5:3B:45:E0 Authority key identifier: 16:82:1F:D2:2F:FB:74:E3:D7:FA:C3:AA:03:BE:6D:00:14:5B:9A:3E Certificate issuer: /CN=16821FD22FFB74E3D7FAC3AA03BE6D00145B9A3E Certificate serial: 0E1F435531EB1B788BE556050C9BEEDBFC8AC631 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/16821FD22FFB74E3D7FAC3AA03BE6D00145B9A3E.cer Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_9f297e7e1f534033aaf93ce1e3b46ffc/0/16821FD22FFB74E3D7FAC3AA03BE6D00145B9A3E.mft Manifest number: 0196 Signing time: Sat 10 May 2025 07:45:00 +0000 Manifest this update: Sat 10 May 2025 07:39:57 +0000 Manifest next update: Sun 11 May 2025 08:17:57 +0000 Files and hashes: 1: 16821FD22FFB74E3D7FAC3AA03BE6D00145B9A3E.crl (hash: 7jGDDVRxPaBHurMT1ZAhzrOhro97QwOfAGyA5Vda8cI=) Validation: OK Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_9f297e7e1f534033aaf93ce1e3b46ffc/0/16821FD22FFB74E3D7FAC3AA03BE6D00145B9A3E.crl rsync://rpki-repo.as207960.net/repo/rpki_ca_9f297e7e1f534033aaf93ce1e3b46ffc/0/16821FD22FFB74E3D7FAC3AA03BE6D00145B9A3E.mft rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/16821FD22FFB74E3D7FAC3AA03BE6D00145B9A3E.cer rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 11 May 2025 04:00:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:1f:43:55:31:eb:1b:78:8b:e5:56:05:0c:9b:ee:db:fc:8a:c6:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=16821FD22FFB74E3D7FAC3AA03BE6D00145B9A3E Validity Not Before: May 10 07:39:57 2025 GMT Not After : May 11 08:17:57 2025 GMT Subject: CN=25DCCDF997CAED49364DB512CF791E29B53B45E0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:5d:4b:02:68:82:bb:b7:e1:b3:f0:99:f8:70: 60:d4:88:33:76:57:80:01:6d:fb:48:21:59:00:fd: d7:b5:47:9a:c2:56:9c:72:b2:00:17:58:29:20:3d: d3:b9:a7:f0:54:3f:8c:29:2d:10:1d:bd:3f:2c:7e: f0:62:88:e4:ba:e7:d8:8f:56:17:4d:03:a1:bb:bd: 3b:a9:63:a6:bb:11:51:d3:6b:26:89:e5:44:6d:29: cb:53:c0:ba:56:45:b2:98:3b:68:34:5a:19:85:78: cd:ac:9f:80:2e:ee:57:96:6d:4f:c6:6a:a9:24:54: 88:10:24:10:f9:9b:64:8b:3b:74:dd:fd:c8:b5:22: c5:c6:f5:38:65:b1:a3:34:f1:1a:e9:20:54:cf:dc: b7:64:84:95:fa:1d:6e:ff:0f:e4:5b:cf:d9:e0:86: 71:33:9b:f6:55:c4:f7:da:1c:98:f0:28:8a:cb:15: 71:bc:d9:97:98:46:77:d7:f1:3d:0b:67:aa:5a:2d: 72:c1:70:c4:b2:4a:46:d1:70:da:fc:7b:2e:fc:b7: 3f:d8:12:72:19:d4:1b:8a:3d:fe:2c:f3:f6:97:c8: bc:86:4c:df:0e:2f:af:08:be:ad:42:14:60:13:9b: 55:b6:19:0a:7f:79:6c:3e:8d:e0:06:e0:d3:f6:78: 40:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:DC:CD:F9:97:CA:ED:49:36:4D:B5:12:CF:79:1E:29:B5:3B:45:E0 X509v3 Authority Key Identifier: keyid:16:82:1F:D2:2F:FB:74:E3:D7:FA:C3:AA:03:BE:6D:00:14:5B:9A:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_9f297e7e1f534033aaf93ce1e3b46ffc/0/16821FD22FFB74E3D7FAC3AA03BE6D00145B9A3E.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/16821FD22FFB74E3D7FAC3AA03BE6D00145B9A3E.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_9f297e7e1f534033aaf93ce1e3b46ffc/0/16821FD22FFB74E3D7FAC3AA03BE6D00145B9A3E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:12:e3:5f:8c:74:03:b0:d2:d1:24:83:94:5f:5f:57:7c:cd: 90:8e:8f:37:ed:88:3b:1f:e2:06:d8:d7:be:13:7a:d1:02:44: 1b:ae:bc:cc:69:66:ee:ed:89:fd:3d:a4:20:32:7c:18:90:08: 5a:ef:ad:ac:69:ea:14:33:55:7e:8a:fd:51:a3:21:1d:cc:3a: b5:91:e7:11:64:6d:07:a3:4a:6b:ac:12:e7:e5:ce:c4:c7:d7: 3e:d5:ef:5d:89:c3:28:a7:d3:05:de:4a:ba:5c:ed:e9:a5:22: 84:22:a8:6d:fe:f3:fc:b0:d1:bf:ce:1b:6b:f9:59:1e:91:eb: e4:6a:58:e8:4b:74:b9:ca:01:23:98:ab:84:85:99:cd:87:41: e8:f4:f5:91:80:3f:5f:a4:c2:25:24:56:ed:6f:b6:2a:a7:e5: 36:28:7a:d6:b0:0c:95:78:a6:92:4a:82:7f:af:9f:50:14:b6: 51:29:13:7d:e6:f2:9d:5c:c8:c4:9c:6a:42:04:d8:e6:1c:51: a4:ee:24:84:b4:a6:2a:2e:2b:c6:0a:24:45:36:8d:fd:df:28: f7:67:2e:08:d0:0c:f9:40:f8:bb:f0:bd:62:c0:82:96:d4:9f: e8:43:6e:1d:c2:b5:7c:ac:9f:e9:93:66:d3:bd:59:cb:eb:45: 69:55:5c:b3 -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIUDh9DVTHrG3iL5VYFDJvu2/yKxjEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTY4MjFGRDIyRkZCNzRFM0Q3RkFDM0FBMDNCRTZEMDAx NDVCOUEzRTAeFw0yNTA1MTAwNzM5NTdaFw0yNTA1MTEwODE3NTdaMDMxMTAvBgNV BAMTKDI1RENDREY5OTdDQUVENDkzNjREQjUxMkNGNzkxRTI5QjUzQjQ1RTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2XUsCaIK7t+Gz8Jn4cGDUiDN2 V4ABbftIIVkA/de1R5rCVpxysgAXWCkgPdO5p/BUP4wpLRAdvT8sfvBiiOS659iP VhdNA6G7vTupY6a7EVHTayaJ5URtKctTwLpWRbKYO2g0WhmFeM2sn4Au7leWbU/G aqkkVIgQJBD5m2SLO3Td/ci1IsXG9ThlsaM08RrpIFTP3LdkhJX6HW7/D+Rbz9ng hnEzm/ZVxPfaHJjwKIrLFXG82ZeYRnfX8T0LZ6paLXLBcMSySkbRcNr8ey78tz/Y EnIZ1BuKPf4s8/aXyLyGTN8OL68Ivq1CFGATm1W2GQp/eWw+jeAG4NP2eEArAgMB AAGjggJ4MIICdDAdBgNVHQ4EFgQUJdzN+ZfK7Uk2TbUSz3keKbU7ReAwHwYDVR0j BBgwFoAUFoIf0i/7dOPX+sOqA75tABRbmj4wDgYDVR0PAQH/BAQDAgeAMIGPBgNV HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv cmVwby9ycGtpX2NhXzlmMjk3ZTdlMWY1MzQwMzNhYWY5M2NlMWUzYjQ2ZmZjLzAv MTY4MjFGRDIyRkZCNzRFM0Q3RkFDM0FBMDNCRTZEMDAxNDVCOUEzRS5jcmwwgZ4G CCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5wYWFz LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQxYjUtODJh MC1mMGQwMmMwM2EyYzYvNy8xNjgyMUZEMjJGRkI3NEUzRDdGQUMzQUEwM0JFNkQw MDE0NUI5QTNFLmNlcjCBmgYIKwYBBQUHAQsEgY0wgYowgYcGCCsGAQUFBzALhnty c3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQvcmVwby9ycGtpX2NhXzlmMjk3 ZTdlMWY1MzQwMzNhYWY5M2NlMWUzYjQ2ZmZjLzAvMTY4MjFGRDIyRkZCNzRFM0Q3 RkFDM0FBMDNCRTZEMDAxNDVCOUEzRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAHUS41+MdAOw0tEkg5Rf X1d8zZCOjzftiDsf4gbY174TetECRBuuvMxpZu7tif09pCAyfBiQCFrvraxp6hQz VX6K/VGjIR3MOrWR5xFkbQejSmusEuflzsTH1z7V712Jwyin0wXeSrpc7emlIoQi qG3+8/yw0b/OG2v5WR6R6+RqWOhLdLnKASOYq4SFmc2HQej09ZGAP1+kwiUkVu1v tiqn5TYoetawDJV4ppJKgn+vn1AUtlEpE33m8p1cyMScakIE2OYcUaTuJIS0piou K8YKJEU2jf3fKPdnLgjQDPlA+LvwvWLAgpbUn+hDbh3CtXysn+mTZtO9WcvrRWlV XLM= -----END CERTIFICATE-----Generated at Sat May 10 14:05:15 2025 by rpki-client