$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_9f297e7e1f534033aaf93ce1e3b46ffc/0/16821FD22FFB74E3D7FAC3AA03BE6D00145B9A3E.mft File: 16821FD22FFB74E3D7FAC3AA03BE6D00145B9A3E.mft (raw, json) Hash identifier: tRNN2WNNV0KV/zRqD0vhJpyhpLDW1QDAHpE6S6ma7i4= Subject key identifier: CC:C6:B1:90:4C:65:1A:40:05:CB:C7:96:29:CD:59:02:94:0B:CB:BF Authority key identifier: 16:82:1F:D2:2F:FB:74:E3:D7:FA:C3:AA:03:BE:6D:00:14:5B:9A:3E Certificate issuer: /CN=16821FD22FFB74E3D7FAC3AA03BE6D00145B9A3E Certificate serial: 477C72AE21325C81A6B2DF4C5BE08623B247C3C0 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/16821FD22FFB74E3D7FAC3AA03BE6D00145B9A3E.cer Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_9f297e7e1f534033aaf93ce1e3b46ffc/0/16821FD22FFB74E3D7FAC3AA03BE6D00145B9A3E.mft Manifest number: 0301 Signing time: Thu 26 Mar 2026 10:31:51 +0000 Manifest this update: Thu 26 Mar 2026 10:26:49 +0000 Manifest next update: Fri 27 Mar 2026 12:44:49 +0000 Files and hashes: 1: 16821FD22FFB74E3D7FAC3AA03BE6D00145B9A3E.crl (hash: REjZSw6gWCkrSAp87d4eOXgEt3JhMp8S61m7gonEhCc=) Validation: OK Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_9f297e7e1f534033aaf93ce1e3b46ffc/0/16821FD22FFB74E3D7FAC3AA03BE6D00145B9A3E.crl rsync://rpki-repo.as207960.net/repo/rpki_ca_9f297e7e1f534033aaf93ce1e3b46ffc/0/16821FD22FFB74E3D7FAC3AA03BE6D00145B9A3E.mft rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/16821FD22FFB74E3D7FAC3AA03BE6D00145B9A3E.cer rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 27 Mar 2026 08:23:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:7c:72:ae:21:32:5c:81:a6:b2:df:4c:5b:e0:86:23:b2:47:c3:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=16821FD22FFB74E3D7FAC3AA03BE6D00145B9A3E Validity Not Before: Mar 26 10:26:49 2026 GMT Not After : Mar 27 12:44:49 2026 GMT Subject: CN=CCC6B1904C651A4005CBC79629CD5902940BCBBF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:a1:52:90:2b:62:24:c4:14:3c:b7:e7:5b:d8: 2e:f5:34:0c:c5:1d:9f:78:f4:53:44:df:f0:65:51: a2:cd:fd:71:62:2a:3b:d3:e5:ee:6c:fa:82:45:22: 36:97:fb:ee:ac:06:ba:a4:aa:30:a2:ad:1f:df:41: e8:7e:c9:ae:70:80:94:c9:a2:f7:9d:83:ca:59:9c: 19:78:bf:28:52:70:8b:9c:56:20:75:92:9a:37:59: ba:60:27:e6:33:a2:b4:8c:dd:d8:df:80:6e:58:cb: 56:58:12:3c:c0:a9:bf:17:2c:e3:3d:0b:3c:93:09: 29:27:46:80:fa:e2:a6:ad:05:8e:b0:f0:b6:ab:93: 90:a7:2b:66:d2:7c:f2:89:a1:15:f8:f7:46:fd:b5: 21:10:4d:e5:1b:4e:9a:cc:5b:6d:c5:9c:a9:f2:73: 34:95:9b:32:f4:0a:66:52:2f:6e:83:ad:ee:de:c5: dc:3b:7a:7e:60:20:c9:b2:43:70:81:df:16:e4:da: bb:52:74:f8:2c:33:87:e8:60:97:18:04:2c:b2:08: 3d:fd:d2:e3:c8:d0:5c:4b:7a:8f:5f:12:d8:44:b9: 57:2a:b3:6a:21:67:08:23:87:36:43:b3:20:cd:9a: 5a:c7:dc:14:60:29:94:f2:bb:ba:f8:90:90:db:61: 90:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:C6:B1:90:4C:65:1A:40:05:CB:C7:96:29:CD:59:02:94:0B:CB:BF X509v3 Authority Key Identifier: keyid:16:82:1F:D2:2F:FB:74:E3:D7:FA:C3:AA:03:BE:6D:00:14:5B:9A:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_9f297e7e1f534033aaf93ce1e3b46ffc/0/16821FD22FFB74E3D7FAC3AA03BE6D00145B9A3E.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/16821FD22FFB74E3D7FAC3AA03BE6D00145B9A3E.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_9f297e7e1f534033aaf93ce1e3b46ffc/0/16821FD22FFB74E3D7FAC3AA03BE6D00145B9A3E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:25:79:07:44:c5:68:ef:bd:b6:ab:c8:39:dd:58:eb:03:5e: 18:77:fb:9a:b2:0a:6f:8c:ec:b7:40:d4:39:24:c8:1e:17:eb: 6c:15:2d:80:27:9f:b3:37:fa:94:a6:f2:0a:9d:76:64:e0:c0: 28:dd:94:ac:01:b4:5c:16:8c:d0:6f:d7:41:6f:bc:bc:68:fe: 8e:cc:2c:51:22:8e:99:1e:a9:b7:03:e5:35:19:c7:16:35:03: dc:29:9d:0f:48:ed:f5:84:4d:4c:34:46:15:fd:0b:a3:1a:ca: a6:20:b6:08:b2:7c:a5:61:9e:76:87:ea:b7:22:cd:d7:f2:06: 87:c3:53:9a:3d:16:10:c1:93:c1:f7:11:ab:29:30:fb:b1:56: 58:07:1d:67:f5:d8:62:e8:84:74:2e:2c:02:57:12:27:6b:8f: e4:2c:9d:da:ec:a9:4d:7b:3c:fb:7c:bb:9f:f1:d5:ed:d5:db: fb:44:11:d0:1d:da:0e:da:2a:05:01:de:fa:fc:fa:53:90:95: eb:bf:c6:dc:26:e7:c3:a0:e9:0e:d1:13:55:09:9d:53:cd:12: b6:a3:7a:79:69:1c:49:ad:ff:ff:50:a4:c1:b9:2a:81:4a:6e: 49:3e:a1:b2:75:78:b3:d7:4f:a6:4f:60:18:9f:05:83:13:93: 24:d0:4d:35 -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIUR3xyriEyXIGmst9MW+CGI7JHw8AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTY4MjFGRDIyRkZCNzRFM0Q3RkFDM0FBMDNCRTZEMDAx NDVCOUEzRTAeFw0yNjAzMjYxMDI2NDlaFw0yNjAzMjcxMjQ0NDlaMDMxMTAvBgNV BAMTKENDQzZCMTkwNEM2NTFBNDAwNUNCQzc5NjI5Q0Q1OTAyOTQwQkNCQkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6oVKQK2IkxBQ8t+db2C71NAzF HZ949FNE3/BlUaLN/XFiKjvT5e5s+oJFIjaX++6sBrqkqjCirR/fQeh+ya5wgJTJ ovedg8pZnBl4vyhScIucViB1kpo3WbpgJ+YzorSM3djfgG5Yy1ZYEjzAqb8XLOM9 CzyTCSknRoD64qatBY6w8Lark5CnK2bSfPKJoRX490b9tSEQTeUbTprMW23FnKny czSVmzL0CmZSL26Dre7exdw7en5gIMmyQ3CB3xbk2rtSdPgsM4foYJcYBCyyCD39 0uPI0FxLeo9fEthEuVcqs2ohZwgjhzZDsyDNmlrH3BRgKZTyu7r4kJDbYZBfAgMB AAGjggJ4MIICdDAdBgNVHQ4EFgQUzMaxkExlGkAFy8eWKc1ZApQLy78wHwYDVR0j BBgwFoAUFoIf0i/7dOPX+sOqA75tABRbmj4wDgYDVR0PAQH/BAQDAgeAMIGPBgNV HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv cmVwby9ycGtpX2NhXzlmMjk3ZTdlMWY1MzQwMzNhYWY5M2NlMWUzYjQ2ZmZjLzAv MTY4MjFGRDIyRkZCNzRFM0Q3RkFDM0FBMDNCRTZEMDAxNDVCOUEzRS5jcmwwgZ4G CCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5wYWFz LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQxYjUtODJh MC1mMGQwMmMwM2EyYzYvNy8xNjgyMUZEMjJGRkI3NEUzRDdGQUMzQUEwM0JFNkQw MDE0NUI5QTNFLmNlcjCBmgYIKwYBBQUHAQsEgY0wgYowgYcGCCsGAQUFBzALhnty c3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQvcmVwby9ycGtpX2NhXzlmMjk3 ZTdlMWY1MzQwMzNhYWY5M2NlMWUzYjQ2ZmZjLzAvMTY4MjFGRDIyRkZCNzRFM0Q3 RkFDM0FBMDNCRTZEMDAxNDVCOUEzRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAB0leQdExWjvvbaryDnd WOsDXhh3+5qyCm+M7LdA1DkkyB4X62wVLYAnn7M3+pSm8gqddmTgwCjdlKwBtFwW jNBv10FvvLxo/o7MLFEijpkeqbcD5TUZxxY1A9wpnQ9I7fWETUw0RhX9C6MayqYg tgiyfKVhnnaH6rcizdfyBofDU5o9FhDBk8H3EaspMPuxVlgHHWf12GLohHQuLAJX Eidrj+QsndrsqU17PPt8u5/x1e3V2/tEEdAd2g7aKgUB3vr8+lOQleu/xtwm58Og 6Q7RE1UJnVPNErajenlpHEmt//9QpMG5KoFKbkk+obJ1eLPXT6ZPYBifBYMTkyTQ TTU= -----END CERTIFICATE-----Generated at Thu Mar 26 21:38:24 2026 by rpki-client