$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_9f297e7e1f534033aaf93ce1e3b46ffc/0/16821FD22FFB74E3D7FAC3AA03BE6D00145B9A3E.mft File: 16821FD22FFB74E3D7FAC3AA03BE6D00145B9A3E.mft (raw, json) Hash identifier: q5vuh7vAMWeaUstUKJCCvW179123Mfq/xBifpkhKKMY= Subject key identifier: B9:4E:A0:75:E0:06:3A:E3:25:B6:AA:35:12:2A:D1:48:20:3E:1B:25 Authority key identifier: 16:82:1F:D2:2F:FB:74:E3:D7:FA:C3:AA:03:BE:6D:00:14:5B:9A:3E Certificate issuer: /CN=16821FD22FFB74E3D7FAC3AA03BE6D00145B9A3E Certificate serial: 3302DC743E0FD2367A70017D2290178C8159BE39 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/16821FD22FFB74E3D7FAC3AA03BE6D00145B9A3E.cer Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_9f297e7e1f534033aaf93ce1e3b46ffc/0/16821FD22FFB74E3D7FAC3AA03BE6D00145B9A3E.mft Manifest number: 03A0 Signing time: Fri 24 Jul 2026 09:19:39 +0000 Manifest this update: Fri 24 Jul 2026 09:14:39 +0000 Manifest next update: Sat 25 Jul 2026 12:12:39 +0000 Files and hashes: 1: 16821FD22FFB74E3D7FAC3AA03BE6D00145B9A3E.crl (hash: s4FmRctNJWRvDxhdvNJBMznhj6K7ThSS/SoK7ZgeGCo=) Validation: OK Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_9f297e7e1f534033aaf93ce1e3b46ffc/0/16821FD22FFB74E3D7FAC3AA03BE6D00145B9A3E.crl rsync://rpki-repo.as207960.net/repo/rpki_ca_9f297e7e1f534033aaf93ce1e3b46ffc/0/16821FD22FFB74E3D7FAC3AA03BE6D00145B9A3E.mft rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/16821FD22FFB74E3D7FAC3AA03BE6D00145B9A3E.cer rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 25 Jul 2026 08:00:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:02:dc:74:3e:0f:d2:36:7a:70:01:7d:22:90:17:8c:81:59:be:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=16821FD22FFB74E3D7FAC3AA03BE6D00145B9A3E Validity Not Before: Jul 24 09:14:39 2026 GMT Not After : Jul 25 12:12:39 2026 GMT Subject: CN=B94EA075E0063AE325B6AA35122AD148203E1B25 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:1f:cd:56:9b:5a:76:90:40:36:1d:6a:b3:95: de:ab:31:86:87:84:2f:39:e0:ee:8c:77:fd:d7:25: ba:5d:a6:89:d1:f3:a4:d4:2d:2c:3b:ba:56:e4:30: 0c:88:31:0d:8b:5d:d1:48:05:90:80:ca:c8:b4:8d: ef:67:ed:06:03:8a:3e:f4:65:39:8a:03:61:72:57: 70:fe:1d:58:72:c5:65:b4:2e:e4:40:92:ac:c7:dd: 0f:d4:7f:db:20:86:d7:e5:45:d8:84:ae:65:44:6b: dc:41:96:eb:8e:f1:07:7a:27:d0:a4:e2:30:99:5a: cb:f1:cd:76:5e:90:3d:f9:0b:2e:fc:57:f8:80:c3: 95:2d:a1:40:e1:17:64:bb:a2:0a:18:92:92:65:9b: bf:50:09:05:9c:0b:18:82:a7:6e:7c:4f:91:fe:4d: be:b0:5c:11:08:5b:d7:43:e3:cb:0a:fd:bf:ad:f9: 5b:96:32:86:f4:9e:f2:ea:6f:c9:fc:00:89:e8:8d: 2d:1d:ba:25:8d:7b:60:15:11:12:cf:89:9b:da:ae: 1e:18:cb:e7:a4:6f:3d:62:c1:bf:51:7f:91:29:a6: fc:82:7e:e3:33:55:21:9c:5b:6f:c4:59:ba:1a:04: 80:13:17:9f:c2:f9:ef:c4:af:5f:df:5b:cf:e5:4b: 3b:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:4E:A0:75:E0:06:3A:E3:25:B6:AA:35:12:2A:D1:48:20:3E:1B:25 X509v3 Authority Key Identifier: keyid:16:82:1F:D2:2F:FB:74:E3:D7:FA:C3:AA:03:BE:6D:00:14:5B:9A:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_9f297e7e1f534033aaf93ce1e3b46ffc/0/16821FD22FFB74E3D7FAC3AA03BE6D00145B9A3E.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/16821FD22FFB74E3D7FAC3AA03BE6D00145B9A3E.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_9f297e7e1f534033aaf93ce1e3b46ffc/0/16821FD22FFB74E3D7FAC3AA03BE6D00145B9A3E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b7:11:1f:f0:79:d3:dc:d5:72:9b:a1:45:b1:cb:9f:53:e0:38: 5a:f3:42:69:e9:89:99:ff:72:9b:de:70:3e:b9:2e:30:d8:1f: fb:6d:8b:ce:ee:aa:68:ec:e8:3c:16:dd:6d:cb:e2:24:d3:70: 5d:f9:8e:d2:b7:6e:0e:19:a2:20:06:26:ae:8d:5a:39:20:2a: e2:ab:46:89:79:27:2b:27:80:83:a7:da:47:65:e3:6a:2b:a5: b2:ee:06:da:69:9c:e0:c6:70:41:f5:f4:da:54:7e:b5:67:95: 6d:39:c8:28:4c:e4:e1:8d:65:22:43:81:ea:fb:b6:bb:85:c1: cc:6a:85:ab:f4:4f:c0:f3:1a:f2:60:77:c2:40:2d:c1:ee:7a: 4b:20:55:de:b3:6d:a2:16:cb:58:97:bc:b6:75:14:56:9c:08: 7f:8d:1a:8f:18:2f:7f:90:f7:11:d5:85:0b:31:da:e0:87:a8: 14:09:de:9b:ae:8f:24:15:92:c5:40:ce:ca:c9:8a:99:5b:7e: e7:6b:c7:8d:fc:db:a2:af:60:f0:40:ba:4f:d5:ac:62:aa:4e: 49:a1:c4:c7:16:b0:33:22:ab:0f:82:b6:32:92:49:07:9c:64: 61:c9:e4:f9:86:ce:a0:82:92:14:af:0e:b6:f8:2c:86:d1:cb: 82:34:b9:a8 -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIUMwLcdD4P0jZ6cAF9IpAXjIFZvjkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTY4MjFGRDIyRkZCNzRFM0Q3RkFDM0FBMDNCRTZEMDAx NDVCOUEzRTAeFw0yNjA3MjQwOTE0MzlaFw0yNjA3MjUxMjEyMzlaMDMxMTAvBgNV BAMTKEI5NEVBMDc1RTAwNjNBRTMyNUI2QUEzNTEyMkFEMTQ4MjAzRTFCMjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHH81Wm1p2kEA2HWqzld6rMYaH hC854O6Md/3XJbpdponR86TULSw7ulbkMAyIMQ2LXdFIBZCAysi0je9n7QYDij70 ZTmKA2FyV3D+HVhyxWW0LuRAkqzH3Q/Uf9sghtflRdiErmVEa9xBluuO8Qd6J9Ck 4jCZWsvxzXZekD35Cy78V/iAw5UtoUDhF2S7ogoYkpJlm79QCQWcCxiCp258T5H+ Tb6wXBEIW9dD48sK/b+t+VuWMob0nvLqb8n8AInojS0duiWNe2AVERLPiZvarh4Y y+ekbz1iwb9Rf5EppvyCfuMzVSGcW2/EWboaBIATF5/C+e/Er1/fW8/lSzvNAgMB AAGjggJ4MIICdDAdBgNVHQ4EFgQUuU6gdeAGOuMltqo1EirRSCA+GyUwHwYDVR0j BBgwFoAUFoIf0i/7dOPX+sOqA75tABRbmj4wDgYDVR0PAQH/BAQDAgeAMIGPBgNV HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv cmVwby9ycGtpX2NhXzlmMjk3ZTdlMWY1MzQwMzNhYWY5M2NlMWUzYjQ2ZmZjLzAv MTY4MjFGRDIyRkZCNzRFM0Q3RkFDM0FBMDNCRTZEMDAxNDVCOUEzRS5jcmwwgZ4G CCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5wYWFz LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQxYjUtODJh MC1mMGQwMmMwM2EyYzYvNy8xNjgyMUZEMjJGRkI3NEUzRDdGQUMzQUEwM0JFNkQw MDE0NUI5QTNFLmNlcjCBmgYIKwYBBQUHAQsEgY0wgYowgYcGCCsGAQUFBzALhnty c3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQvcmVwby9ycGtpX2NhXzlmMjk3 ZTdlMWY1MzQwMzNhYWY5M2NlMWUzYjQ2ZmZjLzAvMTY4MjFGRDIyRkZCNzRFM0Q3 RkFDM0FBMDNCRTZEMDAxNDVCOUEzRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBALcRH/B509zVcpuhRbHL n1PgOFrzQmnpiZn/cpvecD65LjDYH/tti87uqmjs6DwW3W3L4iTTcF35jtK3bg4Z oiAGJq6NWjkgKuKrRol5JysngIOn2kdl42orpbLuBtppnODGcEH19NpUfrVnlW05 yChM5OGNZSJDger7truFwcxqhav0T8DzGvJgd8JALcHueksgVd6zbaIWy1iXvLZ1 FFacCH+NGo8YL3+Q9xHVhQsx2uCHqBQJ3puujyQVksVAzsrJiplbfudrx43826Kv YPBAuk/VrGKqTkmhxMcWsDMiqw+CtjKSSQecZGHJ5PmGzqCCkhSvDrb4LIbRy4I0 uag= -----END CERTIFICATE-----Generated at Fri Jul 24 11:42:09 2026 by rpki-client