$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_973e7a98a71b49ffbb22b76ed5f129e2/0/4BA4511F4B81C565CED3E70B3020FBD0ED05562F.mft File: 4BA4511F4B81C565CED3E70B3020FBD0ED05562F.mft (raw, json) Hash identifier: ReqCIbQIw/uM7ke/PRw5i+2CGuwgH51QO4S2w+zHR5w= Subject key identifier: 30:4C:67:47:F3:17:A3:FD:93:6C:93:3F:97:E4:41:61:8C:49:FB:01 Authority key identifier: 4B:A4:51:1F:4B:81:C5:65:CE:D3:E7:0B:30:20:FB:D0:ED:05:56:2F Certificate issuer: /CN=4BA4511F4B81C565CED3E70B3020FBD0ED05562F Certificate serial: 4FC99D9926DA4806AA7B4EA793433C2E719527BD Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/4BA4511F4B81C565CED3E70B3020FBD0ED05562F.cer Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_973e7a98a71b49ffbb22b76ed5f129e2/0/4BA4511F4B81C565CED3E70B3020FBD0ED05562F.mft Manifest number: 030C Signing time: Wed 25 Mar 2026 20:29:13 +0000 Manifest this update: Wed 25 Mar 2026 20:24:11 +0000 Manifest next update: Thu 26 Mar 2026 21:57:11 +0000 Files and hashes: 1: 4BA4511F4B81C565CED3E70B3020FBD0ED05562F.crl (hash: xOo7YN1+3+e/urXchji/laASYCqcsDW56vYRp0qlmzs=) Validation: OK Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_973e7a98a71b49ffbb22b76ed5f129e2/0/4BA4511F4B81C565CED3E70B3020FBD0ED05562F.crl rsync://rpki-repo.as207960.net/repo/rpki_ca_973e7a98a71b49ffbb22b76ed5f129e2/0/4BA4511F4B81C565CED3E70B3020FBD0ED05562F.mft rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/4BA4511F4B81C565CED3E70B3020FBD0ED05562F.cer rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 26 Mar 2026 21:57:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:c9:9d:99:26:da:48:06:aa:7b:4e:a7:93:43:3c:2e:71:95:27:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4BA4511F4B81C565CED3E70B3020FBD0ED05562F Validity Not Before: Mar 25 20:24:11 2026 GMT Not After : Mar 26 21:57:11 2026 GMT Subject: CN=304C6747F317A3FD936C933F97E441618C49FB01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:f2:2b:1e:63:3c:3a:b3:0a:0f:ce:f5:05:a2: ff:dc:4a:b1:08:07:08:d8:9f:3a:95:c0:d1:6e:29: 97:64:1f:60:97:99:df:17:df:0f:b8:3f:42:99:9c: 0a:70:c2:dc:30:2e:ca:30:e1:a3:3c:73:d0:b2:df: ed:bf:27:66:13:cd:8c:c5:c0:30:44:0e:ea:45:78: 99:04:1e:6c:5d:0d:fc:5a:29:94:9b:07:da:36:76: 8b:22:dc:7c:b6:aa:db:94:a7:88:c9:81:62:0b:49: f4:e2:19:51:27:63:f0:5e:c3:df:8c:0c:be:c9:e9: 65:60:2d:a5:44:e1:46:1e:44:58:eb:ac:35:fb:f1: 3b:12:e6:15:7f:d4:77:17:ba:85:bc:a5:ab:ac:c2: 8b:93:b3:85:63:a3:48:91:9e:80:86:20:6b:98:9b: 90:59:77:9b:0d:a8:86:77:ee:5a:79:24:c9:4e:8d: b4:e0:e4:98:ed:92:af:42:ff:2a:d8:2a:99:60:cb: 03:ae:a7:3c:86:e1:f6:fa:11:13:bd:38:db:50:43: 92:ec:b0:a2:ea:d7:70:f7:05:fe:23:10:6f:bd:be: aa:95:dd:64:cd:ab:51:c6:b8:d1:04:3a:13:a5:e1: 27:96:9f:94:25:68:46:02:42:fb:04:f2:9c:73:1b: ec:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:4C:67:47:F3:17:A3:FD:93:6C:93:3F:97:E4:41:61:8C:49:FB:01 X509v3 Authority Key Identifier: keyid:4B:A4:51:1F:4B:81:C5:65:CE:D3:E7:0B:30:20:FB:D0:ED:05:56:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_973e7a98a71b49ffbb22b76ed5f129e2/0/4BA4511F4B81C565CED3E70B3020FBD0ED05562F.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/4BA4511F4B81C565CED3E70B3020FBD0ED05562F.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_973e7a98a71b49ffbb22b76ed5f129e2/0/4BA4511F4B81C565CED3E70B3020FBD0ED05562F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:83:ac:e9:ea:6b:2f:a3:5c:51:ae:c6:e3:a3:7b:d9:a7:6a: cf:7a:73:6e:1b:da:45:8e:d0:e8:e1:c2:c0:a5:98:42:9c:ab: 3b:e7:d8:68:92:5a:ec:12:21:af:0e:55:0d:02:d4:0f:21:42: af:b4:14:7a:21:11:71:c8:75:65:48:39:02:bd:cc:62:3c:5d: d9:80:da:00:49:40:9c:34:2c:af:73:91:19:7e:18:4a:91:5b: a8:d3:fc:68:c9:aa:7e:7e:1b:df:03:85:5e:db:83:33:4c:7f: 94:28:9b:47:48:6d:bd:75:54:b7:09:c3:83:59:34:50:5c:d7: da:0e:ed:e5:e9:98:18:98:1a:da:23:d6:ee:6b:60:06:81:4d: e8:c8:9b:13:b8:7a:f4:64:92:e8:d8:f2:30:8e:90:be:5b:b0: ca:98:b8:42:3e:a7:83:3e:cf:12:4c:c4:0a:87:0a:68:83:b4: 66:2c:ed:be:85:aa:87:ff:21:6a:a1:6a:ea:71:47:65:29:1c: e6:e3:aa:41:b3:6c:09:77:fc:d0:6a:ec:33:81:35:15:18:50: 82:a3:f4:c3:c6:15:be:be:bc:60:8b:db:91:9a:3e:52:5d:f5: fb:ac:88:f4:ad:e3:0a:75:91:56:8e:50:27:79:aa:a7:82:1b: 26:0f:d3:a2 -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIUT8mdmSbaSAaqe06nk0M8LnGVJ70wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEJBNDUxMUY0QjgxQzU2NUNFRDNFNzBCMzAyMEZCRDBF RDA1NTYyRjAeFw0yNjAzMjUyMDI0MTFaFw0yNjAzMjYyMTU3MTFaMDMxMTAvBgNV BAMTKDMwNEM2NzQ3RjMxN0EzRkQ5MzZDOTMzRjk3RTQ0MTYxOEM0OUZCMDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCy8iseYzw6swoPzvUFov/cSrEI BwjYnzqVwNFuKZdkH2CXmd8X3w+4P0KZnApwwtwwLsow4aM8c9Cy3+2/J2YTzYzF wDBEDupFeJkEHmxdDfxaKZSbB9o2dosi3Hy2qtuUp4jJgWILSfTiGVEnY/Bew9+M DL7J6WVgLaVE4UYeRFjrrDX78TsS5hV/1HcXuoW8pauswouTs4Vjo0iRnoCGIGuY m5BZd5sNqIZ37lp5JMlOjbTg5Jjtkq9C/yrYKplgywOupzyG4fb6ERO9ONtQQ5Ls sKLq13D3Bf4jEG+9vqqV3WTNq1HGuNEEOhOl4SeWn5QlaEYCQvsE8pxzG+ylAgMB AAGjggJ4MIICdDAdBgNVHQ4EFgQUMExnR/MXo/2TbJM/l+RBYYxJ+wEwHwYDVR0j BBgwFoAUS6RRH0uBxWXO0+cLMCD70O0FVi8wDgYDVR0PAQH/BAQDAgeAMIGPBgNV HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv cmVwby9ycGtpX2NhXzk3M2U3YTk4YTcxYjQ5ZmZiYjIyYjc2ZWQ1ZjEyOWUyLzAv NEJBNDUxMUY0QjgxQzU2NUNFRDNFNzBCMzAyMEZCRDBFRDA1NTYyRi5jcmwwgZ4G CCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5wYWFz LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQxYjUtODJh MC1mMGQwMmMwM2EyYzYvNy80QkE0NTExRjRCODFDNTY1Q0VEM0U3MEIzMDIwRkJE MEVEMDU1NjJGLmNlcjCBmgYIKwYBBQUHAQsEgY0wgYowgYcGCCsGAQUFBzALhnty c3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQvcmVwby9ycGtpX2NhXzk3M2U3 YTk4YTcxYjQ5ZmZiYjIyYjc2ZWQ1ZjEyOWUyLzAvNEJBNDUxMUY0QjgxQzU2NUNF RDNFNzBCMzAyMEZCRDBFRDA1NTYyRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAHODrOnqay+jXFGuxuOj e9mnas96c24b2kWO0OjhwsClmEKcqzvn2GiSWuwSIa8OVQ0C1A8hQq+0FHohEXHI dWVIOQK9zGI8XdmA2gBJQJw0LK9zkRl+GEqRW6jT/GjJqn5+G98DhV7bgzNMf5Qo m0dIbb11VLcJw4NZNFBc19oO7eXpmBiYGtoj1u5rYAaBTejImxO4evRkkujY8jCO kL5bsMqYuEI+p4M+zxJMxAqHCmiDtGYs7b6Fqof/IWqhaupxR2UpHObjqkGzbAl3 /NBq7DOBNRUYUIKj9MPGFb6+vGCL25GaPlJd9fusiPSt4wp1kVaOUCd5qqeCGyYP 06I= -----END CERTIFICATE-----Generated at Thu Mar 26 15:59:52 2026 by rpki-client