$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_9f297e7e1f534033aaf93ce1e3b46ffc/0/16821FD22FFB74E3D7FAC3AA03BE6D00145B9A3E.mft File: 16821FD22FFB74E3D7FAC3AA03BE6D00145B9A3E.mft (raw, json) Hash identifier: wSOerOn+R/dZfqyurSHC9kpGd7xxTZPO82bucYCxZ7E= Subject key identifier: 05:98:1C:B6:F5:63:61:C7:83:BF:53:51:B6:92:7E:95:12:86:C9:64 Authority key identifier: 16:82:1F:D2:2F:FB:74:E3:D7:FA:C3:AA:03:BE:6D:00:14:5B:9A:3E Certificate issuer: /CN=16821FD22FFB74E3D7FAC3AA03BE6D00145B9A3E Certificate serial: 2E00CD8DC1C0EFAA872C73614CE6E6C27FD0B597 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/16821FD22FFB74E3D7FAC3AA03BE6D00145B9A3E.cer Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_9f297e7e1f534033aaf93ce1e3b46ffc/0/16821FD22FFB74E3D7FAC3AA03BE6D00145B9A3E.mft Manifest number: 01D7 Signing time: Sun 29 Jun 2025 01:36:10 +0000 Manifest this update: Sun 29 Jun 2025 01:31:10 +0000 Manifest next update: Mon 30 Jun 2025 03:39:10 +0000 Files and hashes: 1: 16821FD22FFB74E3D7FAC3AA03BE6D00145B9A3E.crl (hash: VwyrT0BlkU9+2+T+A2McE0hEwauUslRlBE7gYtDjWd4=) Validation: OK Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_9f297e7e1f534033aaf93ce1e3b46ffc/0/16821FD22FFB74E3D7FAC3AA03BE6D00145B9A3E.crl rsync://rpki-repo.as207960.net/repo/rpki_ca_9f297e7e1f534033aaf93ce1e3b46ffc/0/16821FD22FFB74E3D7FAC3AA03BE6D00145B9A3E.mft rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/16821FD22FFB74E3D7FAC3AA03BE6D00145B9A3E.cer rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 29 Jun 2025 18:35:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:00:cd:8d:c1:c0:ef:aa:87:2c:73:61:4c:e6:e6:c2:7f:d0:b5:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=16821FD22FFB74E3D7FAC3AA03BE6D00145B9A3E Validity Not Before: Jun 29 01:31:10 2025 GMT Not After : Jun 30 03:39:10 2025 GMT Subject: CN=05981CB6F56361C783BF5351B6927E951286C964 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:ac:cb:ca:2c:e0:6b:28:ed:12:eb:f5:38:9f: 2d:83:a4:fc:ee:65:1c:3f:d7:28:4f:57:d5:98:3e: a0:40:82:da:d5:75:90:16:03:57:fa:d3:09:33:1a: 71:11:1d:bf:87:5a:89:42:a7:1f:66:83:42:14:c3: ef:67:91:1f:14:71:93:b2:e5:54:49:1e:e6:51:ed: f1:4d:ee:5b:c7:eb:7e:79:55:95:ba:68:0a:8a:3f: d7:af:2e:32:fb:ea:2b:60:be:02:36:a1:2e:53:c7: 0d:37:08:3c:d9:94:73:3d:b3:1c:3d:fe:8c:6f:48: 76:76:b8:dc:75:8d:41:51:62:bf:0e:0e:13:76:5e: 62:6f:7a:02:78:66:b9:3a:32:51:94:7e:26:b1:2c: c2:c7:77:2a:75:be:44:f6:92:d4:4f:71:f7:1d:70: 1f:20:af:d0:eb:db:12:d6:ee:4e:dc:18:5d:88:5c: 71:c7:f6:bf:93:36:86:ad:ec:2e:e2:27:09:79:45: a7:97:35:d5:0b:27:94:73:56:75:17:92:57:82:24: 04:75:c1:e1:35:11:83:00:56:32:fb:a1:06:d8:e7: b4:3d:22:5b:ae:10:58:bf:16:bd:46:07:71:2d:b3: d5:0d:61:28:d9:79:e0:f1:6c:0e:d0:93:7e:fb:74: ba:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:98:1C:B6:F5:63:61:C7:83:BF:53:51:B6:92:7E:95:12:86:C9:64 X509v3 Authority Key Identifier: keyid:16:82:1F:D2:2F:FB:74:E3:D7:FA:C3:AA:03:BE:6D:00:14:5B:9A:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_9f297e7e1f534033aaf93ce1e3b46ffc/0/16821FD22FFB74E3D7FAC3AA03BE6D00145B9A3E.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/16821FD22FFB74E3D7FAC3AA03BE6D00145B9A3E.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_9f297e7e1f534033aaf93ce1e3b46ffc/0/16821FD22FFB74E3D7FAC3AA03BE6D00145B9A3E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a5:9c:ef:c7:b4:7d:ee:28:09:f1:51:4f:64:bd:42:5e:80:69: 05:e5:9e:20:d5:07:60:4d:2b:59:06:30:2d:25:36:b7:e2:9e: 4a:84:0b:c5:a6:22:32:03:7f:48:67:b1:c8:c5:b7:4c:82:66: 1a:7c:6d:69:90:15:2a:22:28:8d:7c:8f:a8:55:91:bd:de:7f: f8:01:cf:38:32:39:d0:3d:d0:b8:f4:1d:72:5e:c0:ab:a4:10: 9c:00:e3:fb:78:20:a5:96:62:c7:f9:f7:be:9f:a9:cf:c9:d1: 35:13:d0:83:8a:4b:47:73:20:ed:51:b4:3a:ac:b5:68:3e:bc: 6b:59:f7:6b:cd:a5:af:15:fb:05:b5:5e:bb:93:c2:b9:9d:e6: 1a:4b:13:bf:be:5a:e9:9c:6f:5f:ba:21:94:ca:2a:5b:db:ed: 2d:b0:9c:20:1f:ff:4e:2d:02:25:46:7a:f6:ff:1f:36:ca:96: dc:2a:4c:a7:51:d3:a7:c6:2e:d7:36:ca:78:dd:87:90:75:f6: 01:ca:d1:c0:b6:38:a0:a9:2e:72:21:3e:61:e7:9b:33:08:89: 2e:fb:89:1e:c4:ff:2f:f9:93:46:cd:aa:bb:24:73:f6:14:a9: 3b:d3:ce:ae:41:2b:bb:71:9c:60:1b:5b:55:cc:e9:e8:0c:26: bb:c7:a1:b2 -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIULgDNjcHA76qHLHNhTObmwn/QtZcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTY4MjFGRDIyRkZCNzRFM0Q3RkFDM0FBMDNCRTZEMDAx NDVCOUEzRTAeFw0yNTA2MjkwMTMxMTBaFw0yNTA2MzAwMzM5MTBaMDMxMTAvBgNV BAMTKDA1OTgxQ0I2RjU2MzYxQzc4M0JGNTM1MUI2OTI3RTk1MTI4NkM5NjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKrMvKLOBrKO0S6/U4ny2DpPzu ZRw/1yhPV9WYPqBAgtrVdZAWA1f60wkzGnERHb+HWolCpx9mg0IUw+9nkR8UcZOy 5VRJHuZR7fFN7lvH6355VZW6aAqKP9evLjL76itgvgI2oS5Txw03CDzZlHM9sxw9 /oxvSHZ2uNx1jUFRYr8ODhN2XmJvegJ4Zrk6MlGUfiaxLMLHdyp1vkT2ktRPcfcd cB8gr9Dr2xLW7k7cGF2IXHHH9r+TNoat7C7iJwl5RaeXNdULJ5RzVnUXkleCJAR1 weE1EYMAVjL7oQbY57Q9IluuEFi/Fr1GB3Ets9UNYSjZeeDxbA7Qk377dLo3AgMB AAGjggJ4MIICdDAdBgNVHQ4EFgQUBZgctvVjYceDv1NRtpJ+lRKGyWQwHwYDVR0j BBgwFoAUFoIf0i/7dOPX+sOqA75tABRbmj4wDgYDVR0PAQH/BAQDAgeAMIGPBgNV HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv cmVwby9ycGtpX2NhXzlmMjk3ZTdlMWY1MzQwMzNhYWY5M2NlMWUzYjQ2ZmZjLzAv MTY4MjFGRDIyRkZCNzRFM0Q3RkFDM0FBMDNCRTZEMDAxNDVCOUEzRS5jcmwwgZ4G CCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5wYWFz LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQxYjUtODJh MC1mMGQwMmMwM2EyYzYvNy8xNjgyMUZEMjJGRkI3NEUzRDdGQUMzQUEwM0JFNkQw MDE0NUI5QTNFLmNlcjCBmgYIKwYBBQUHAQsEgY0wgYowgYcGCCsGAQUFBzALhnty c3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQvcmVwby9ycGtpX2NhXzlmMjk3 ZTdlMWY1MzQwMzNhYWY5M2NlMWUzYjQ2ZmZjLzAvMTY4MjFGRDIyRkZCNzRFM0Q3 RkFDM0FBMDNCRTZEMDAxNDVCOUEzRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAKWc78e0fe4oCfFRT2S9 Ql6AaQXlniDVB2BNK1kGMC0lNrfinkqEC8WmIjIDf0hnscjFt0yCZhp8bWmQFSoi KI18j6hVkb3ef/gBzzgyOdA90Lj0HXJewKukEJwA4/t4IKWWYsf5976fqc/J0TUT 0IOKS0dzIO1RtDqstWg+vGtZ92vNpa8V+wW1XruTwrmd5hpLE7++Wumcb1+6IZTK Klvb7S2wnCAf/04tAiVGevb/HzbKltwqTKdR06fGLtc2ynjdh5B19gHK0cC2OKCp LnIhPmHnmzMIiS77iR7E/y/5k0bNqrskc/YUqTvTzq5BK7txnGAbW1XM6egMJrvH obI= -----END CERTIFICATE-----Generated at Sun Jun 29 05:26:00 2025 by rpki-client