$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_973e7a98a71b49ffbb22b76ed5f129e2/0/4BA4511F4B81C565CED3E70B3020FBD0ED05562F.mft File: 4BA4511F4B81C565CED3E70B3020FBD0ED05562F.mft (raw, json) Hash identifier: EaFeaJULPWZ7x9XIgfjtnnu+90+N2rdOVdjbOnA6k3k= Subject key identifier: 80:A4:00:CB:9C:60:35:BB:4A:6D:3F:DA:8C:88:88:B6:3F:33:B8:A2 Authority key identifier: 4B:A4:51:1F:4B:81:C5:65:CE:D3:E7:0B:30:20:FB:D0:ED:05:56:2F Certificate issuer: /CN=4BA4511F4B81C565CED3E70B3020FBD0ED05562F Certificate serial: 6ED4C70D149D47B41CA7C31B5AB1EF059839DE1C Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/4BA4511F4B81C565CED3E70B3020FBD0ED05562F.cer Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_973e7a98a71b49ffbb22b76ed5f129e2/0/4BA4511F4B81C565CED3E70B3020FBD0ED05562F.mft Manifest number: 034C Signing time: Wed 13 May 2026 04:19:06 +0000 Manifest this update: Wed 13 May 2026 04:14:06 +0000 Manifest next update: Thu 14 May 2026 07:38:06 +0000 Files and hashes: 1: 4BA4511F4B81C565CED3E70B3020FBD0ED05562F.crl (hash: C9fPnBiNXsdJ0RaOEjFkb0+Td1iutzIDkIDAy/pjwQw=) Validation: OK Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_973e7a98a71b49ffbb22b76ed5f129e2/0/4BA4511F4B81C565CED3E70B3020FBD0ED05562F.crl rsync://rpki-repo.as207960.net/repo/rpki_ca_973e7a98a71b49ffbb22b76ed5f129e2/0/4BA4511F4B81C565CED3E70B3020FBD0ED05562F.mft rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/4BA4511F4B81C565CED3E70B3020FBD0ED05562F.cer rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 13 May 2026 23:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:d4:c7:0d:14:9d:47:b4:1c:a7:c3:1b:5a:b1:ef:05:98:39:de:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4BA4511F4B81C565CED3E70B3020FBD0ED05562F Validity Not Before: May 13 04:14:06 2026 GMT Not After : May 14 07:38:06 2026 GMT Subject: CN=80A400CB9C6035BB4A6D3FDA8C8888B63F33B8A2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:9e:82:f8:4b:7c:74:53:ae:0b:4d:7e:21:a9: e6:3c:b4:72:c1:5b:82:c2:76:28:2c:4b:b8:4f:13: 59:ee:93:f7:98:65:3e:c9:a0:63:3a:4a:2e:70:f1: c2:3f:dc:f2:a3:b0:9a:21:98:ff:d5:3d:de:bb:22: 32:29:84:22:31:01:2a:e1:53:a7:3d:f5:b2:8f:b2: da:72:d7:38:5f:66:b1:f9:8b:67:e9:c2:26:4f:59: b8:18:d2:aa:5e:9e:d8:0b:14:15:40:b3:58:ed:0f: 5f:15:8e:45:2c:7e:19:7e:a3:ed:24:eb:71:9f:92: 6c:c7:8b:65:a3:31:2a:1d:5c:b0:6d:a1:06:0e:2b: d9:c6:8c:25:72:25:7f:25:9f:d1:30:77:8d:fc:9d: 14:67:22:d3:58:a2:84:8f:36:45:b1:e2:d7:83:be: 92:16:73:a4:4a:3c:98:21:7b:08:d9:ab:ed:6f:27: 9d:a4:9b:10:8c:bd:d5:46:d7:bc:e2:fe:a4:2d:d8: bc:c6:76:55:f2:cc:27:55:ad:01:0b:0b:b4:50:0c: 6d:02:76:d6:20:12:8d:af:6d:a0:29:3a:67:30:6d: 48:b1:9a:a6:2f:8e:a3:11:96:90:1b:a8:44:d0:0c: ec:31:d5:12:d0:f8:68:69:1c:fe:a7:60:a0:da:66: 1f:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:A4:00:CB:9C:60:35:BB:4A:6D:3F:DA:8C:88:88:B6:3F:33:B8:A2 X509v3 Authority Key Identifier: keyid:4B:A4:51:1F:4B:81:C5:65:CE:D3:E7:0B:30:20:FB:D0:ED:05:56:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_973e7a98a71b49ffbb22b76ed5f129e2/0/4BA4511F4B81C565CED3E70B3020FBD0ED05562F.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/4BA4511F4B81C565CED3E70B3020FBD0ED05562F.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_973e7a98a71b49ffbb22b76ed5f129e2/0/4BA4511F4B81C565CED3E70B3020FBD0ED05562F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:fd:88:78:3a:04:17:29:03:d9:1a:6e:d7:fc:48:b0:eb:4d: 83:60:05:ec:3f:68:7a:d4:bd:fd:ab:27:37:c1:ec:5f:fd:ec: 99:c3:e4:a3:17:7d:3c:d8:3c:b3:33:ab:a0:98:f3:53:35:12: a5:e6:f0:88:74:67:33:7f:56:8d:3b:16:bc:ea:f3:d0:19:21: 9a:83:05:6c:6f:8a:3e:6e:4e:5d:cd:a9:09:50:15:e7:31:11: 40:8c:b2:d1:3f:2f:11:96:27:4a:62:52:af:02:3c:25:ad:b3: a0:3e:c3:d4:db:d7:41:c4:2e:64:86:36:ed:04:32:09:18:d2: 3c:05:30:70:51:b8:88:a2:5c:23:9c:7b:63:18:04:40:37:8a: c0:6b:8a:62:6e:6d:a0:f1:cc:84:4d:b8:fe:72:e4:f6:0a:a4: ed:af:cf:5d:77:de:bd:4a:2d:c8:10:55:dc:35:5d:d8:b5:b5: 06:33:73:d6:a9:ab:ea:14:82:0a:50:db:bd:41:63:da:4a:9f: 67:60:1f:e6:d1:33:6f:62:80:6e:02:96:c7:b9:19:d2:59:0d: 91:d0:95:53:4d:54:7a:fc:af:72:4a:ce:a0:5f:51:fd:76:89: cf:e9:74:65:77:4e:af:b2:99:72:b5:67:7c:6b:1d:7d:bf:7a: 14:7f:5d:f3 -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIUbtTHDRSdR7Qcp8MbWrHvBZg53hwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEJBNDUxMUY0QjgxQzU2NUNFRDNFNzBCMzAyMEZCRDBF RDA1NTYyRjAeFw0yNjA1MTMwNDE0MDZaFw0yNjA1MTQwNzM4MDZaMDMxMTAvBgNV BAMTKDgwQTQwMENCOUM2MDM1QkI0QTZEM0ZEQThDODg4OEI2M0YzM0I4QTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgnoL4S3x0U64LTX4hqeY8tHLB W4LCdigsS7hPE1nuk/eYZT7JoGM6Si5w8cI/3PKjsJohmP/VPd67IjIphCIxASrh U6c99bKPstpy1zhfZrH5i2fpwiZPWbgY0qpentgLFBVAs1jtD18VjkUsfhl+o+0k 63GfkmzHi2WjMSodXLBtoQYOK9nGjCVyJX8ln9Ewd438nRRnItNYooSPNkWx4teD vpIWc6RKPJghewjZq+1vJ52kmxCMvdVG17zi/qQt2LzGdlXyzCdVrQELC7RQDG0C dtYgEo2vbaApOmcwbUixmqYvjqMRlpAbqETQDOwx1RLQ+GhpHP6nYKDaZh9ZAgMB AAGjggJ4MIICdDAdBgNVHQ4EFgQUgKQAy5xgNbtKbT/ajIiItj8zuKIwHwYDVR0j BBgwFoAUS6RRH0uBxWXO0+cLMCD70O0FVi8wDgYDVR0PAQH/BAQDAgeAMIGPBgNV HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv cmVwby9ycGtpX2NhXzk3M2U3YTk4YTcxYjQ5ZmZiYjIyYjc2ZWQ1ZjEyOWUyLzAv NEJBNDUxMUY0QjgxQzU2NUNFRDNFNzBCMzAyMEZCRDBFRDA1NTYyRi5jcmwwgZ4G CCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5wYWFz LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQxYjUtODJh MC1mMGQwMmMwM2EyYzYvNy80QkE0NTExRjRCODFDNTY1Q0VEM0U3MEIzMDIwRkJE MEVEMDU1NjJGLmNlcjCBmgYIKwYBBQUHAQsEgY0wgYowgYcGCCsGAQUFBzALhnty c3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQvcmVwby9ycGtpX2NhXzk3M2U3 YTk4YTcxYjQ5ZmZiYjIyYjc2ZWQ1ZjEyOWUyLzAvNEJBNDUxMUY0QjgxQzU2NUNF RDNFNzBCMzAyMEZCRDBFRDA1NTYyRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAFj9iHg6BBcpA9kabtf8 SLDrTYNgBew/aHrUvf2rJzfB7F/97JnD5KMXfTzYPLMzq6CY81M1EqXm8Ih0ZzN/ Vo07Frzq89AZIZqDBWxvij5uTl3NqQlQFecxEUCMstE/LxGWJ0piUq8CPCWts6A+ w9Tb10HELmSGNu0EMgkY0jwFMHBRuIiiXCOce2MYBEA3isBrimJubaDxzIRNuP5y 5PYKpO2vz1133r1KLcgQVdw1Xdi1tQYzc9apq+oUggpQ271BY9pKn2dgH+bRM29i gG4Clse5GdJZDZHQlVNNVHr8r3JKzqBfUf12ic/pdGV3Tq+ymXK1Z3xrHX2/ehR/ XfM= -----END CERTIFICATE-----Generated at Wed May 13 09:35:19 2026 by rpki-client