$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_973e7a98a71b49ffbb22b76ed5f129e2/0/4BA4511F4B81C565CED3E70B3020FBD0ED05562F.mft File: 4BA4511F4B81C565CED3E70B3020FBD0ED05562F.mft (raw, json) Hash identifier: tDXONqek65OGhqHjdBnjVSR6shR/x8V2JTLACR2hr60= Subject key identifier: 70:A2:2F:EB:C8:ED:88:23:CE:ED:75:5E:D8:CE:36:D1:94:03:A8:BF Authority key identifier: 4B:A4:51:1F:4B:81:C5:65:CE:D3:E7:0B:30:20:FB:D0:ED:05:56:2F Certificate issuer: /CN=4BA4511F4B81C565CED3E70B3020FBD0ED05562F Certificate serial: 5D43C36F5B7D0A25256070A6DC2C969076C2A939 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/4BA4511F4B81C565CED3E70B3020FBD0ED05562F.cer Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_973e7a98a71b49ffbb22b76ed5f129e2/0/4BA4511F4B81C565CED3E70B3020FBD0ED05562F.mft Manifest number: 03AC Signing time: Fri 24 Jul 2026 04:06:41 +0000 Manifest this update: Fri 24 Jul 2026 04:01:41 +0000 Manifest next update: Sat 25 Jul 2026 04:48:41 +0000 Files and hashes: 1: 4BA4511F4B81C565CED3E70B3020FBD0ED05562F.crl (hash: izBXzQe9ajNcwQ3RPsEPcY6Up3E7A74kqw7gguNsO9U=) Validation: OK Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_973e7a98a71b49ffbb22b76ed5f129e2/0/4BA4511F4B81C565CED3E70B3020FBD0ED05562F.crl rsync://rpki-repo.as207960.net/repo/rpki_ca_973e7a98a71b49ffbb22b76ed5f129e2/0/4BA4511F4B81C565CED3E70B3020FBD0ED05562F.mft rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/4BA4511F4B81C565CED3E70B3020FBD0ED05562F.cer rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 25 Jul 2026 04:48:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:43:c3:6f:5b:7d:0a:25:25:60:70:a6:dc:2c:96:90:76:c2:a9:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4BA4511F4B81C565CED3E70B3020FBD0ED05562F Validity Not Before: Jul 24 04:01:41 2026 GMT Not After : Jul 25 04:48:41 2026 GMT Subject: CN=70A22FEBC8ED8823CEED755ED8CE36D19403A8BF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:22:63:9f:dc:f8:55:4a:0b:3d:31:6a:2c:62: c6:3a:6f:01:99:f4:ae:91:d8:1d:ee:0d:5d:7f:69: 97:bb:64:e1:e3:53:80:30:af:6a:78:46:57:d4:a7: b9:e0:4a:f8:91:11:f2:0b:c2:78:b5:26:44:f8:95: 9f:78:34:24:1a:00:1f:7a:a2:65:f9:f8:20:2a:48: 0a:bb:0a:99:d4:7b:d6:68:64:b7:9b:74:05:b1:5d: a1:4f:26:69:9a:36:49:06:1c:9e:23:a3:86:60:df: 09:73:22:21:01:c7:1e:fa:69:58:06:4e:f2:cc:dd: a8:e7:e1:fc:89:69:c0:a0:bc:7a:13:f4:9a:c6:05: ad:62:12:71:dc:90:9d:33:d2:16:65:7a:bf:84:35: f6:46:6f:3e:09:3c:bf:00:8f:6e:71:cc:bf:37:3b: 0c:72:b0:7b:8b:c8:cb:b1:47:a8:eb:68:64:84:b3: 09:c6:d0:32:6d:ae:fd:6d:89:a5:bc:54:74:e5:c5: 04:6f:68:a5:56:e1:3b:df:0f:ef:c2:f2:10:a5:17: 87:cc:de:85:b1:d0:05:84:4f:9e:10:e1:3d:a7:30: 7d:38:60:b5:ec:a4:59:95:b6:38:74:c7:77:3f:97: 0d:28:d1:88:e5:50:2d:2a:9f:12:52:a5:e4:80:c4: f0:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:A2:2F:EB:C8:ED:88:23:CE:ED:75:5E:D8:CE:36:D1:94:03:A8:BF X509v3 Authority Key Identifier: keyid:4B:A4:51:1F:4B:81:C5:65:CE:D3:E7:0B:30:20:FB:D0:ED:05:56:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_973e7a98a71b49ffbb22b76ed5f129e2/0/4BA4511F4B81C565CED3E70B3020FBD0ED05562F.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/4BA4511F4B81C565CED3E70B3020FBD0ED05562F.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_973e7a98a71b49ffbb22b76ed5f129e2/0/4BA4511F4B81C565CED3E70B3020FBD0ED05562F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:45:10:0a:98:6c:91:ec:9c:90:54:62:d5:89:7b:5f:9d:26: 78:03:03:13:dd:f1:0f:be:1c:1d:18:bf:ae:9a:b3:24:aa:ad: 59:df:c9:c5:89:0b:0a:33:9b:78:08:60:2f:49:d5:ff:0e:28: 71:58:b0:e4:85:3f:87:3b:ca:53:ec:0c:b4:f2:94:43:ca:a4: 1b:a2:e7:4a:50:4e:6d:fa:25:0c:1d:da:41:42:89:e1:af:b3: 19:5b:1a:e4:10:62:5c:f7:4b:cd:39:c3:2a:74:6b:05:3e:de: 5c:86:f6:82:a9:63:b3:21:84:2a:f1:97:ca:96:9d:0b:af:3a: a2:2f:27:28:18:40:4c:ab:9d:83:c2:c6:af:8f:77:68:86:1a: dd:5c:90:64:8e:7f:52:ad:4f:eb:b5:21:fb:41:83:cb:77:3e: 26:dc:da:05:ff:dd:17:a5:4e:08:da:b3:11:e9:a8:a2:b6:7a: a5:ff:ca:84:1a:21:c0:7e:4c:df:c4:e8:de:7b:03:e7:b2:51: f6:ef:45:67:81:55:e4:db:84:7c:9f:8c:b0:7d:6d:9e:1b:1f: 66:60:0a:20:1d:2e:a7:2a:aa:31:6e:ef:eb:43:c4:70:36:2d: 17:8c:d0:bd:9f:ca:2d:20:c3:f5:0c:62:70:06:b3:ac:73:7c: 82:96:47:73 -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIUXUPDb1t9CiUlYHCm3CyWkHbCqTkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEJBNDUxMUY0QjgxQzU2NUNFRDNFNzBCMzAyMEZCRDBF RDA1NTYyRjAeFw0yNjA3MjQwNDAxNDFaFw0yNjA3MjUwNDQ4NDFaMDMxMTAvBgNV BAMTKDcwQTIyRkVCQzhFRDg4MjNDRUVENzU1RUQ4Q0UzNkQxOTQwM0E4QkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChImOf3PhVSgs9MWosYsY6bwGZ 9K6R2B3uDV1/aZe7ZOHjU4Awr2p4RlfUp7ngSviREfILwni1JkT4lZ94NCQaAB96 omX5+CAqSAq7CpnUe9ZoZLebdAWxXaFPJmmaNkkGHJ4jo4Zg3wlzIiEBxx76aVgG TvLM3ajn4fyJacCgvHoT9JrGBa1iEnHckJ0z0hZler+ENfZGbz4JPL8Aj25xzL83 OwxysHuLyMuxR6jraGSEswnG0DJtrv1tiaW8VHTlxQRvaKVW4TvfD+/C8hClF4fM 3oWx0AWET54Q4T2nMH04YLXspFmVtjh0x3c/lw0o0YjlUC0qnxJSpeSAxPAXAgMB AAGjggJ4MIICdDAdBgNVHQ4EFgQUcKIv68jtiCPO7XVe2M420ZQDqL8wHwYDVR0j BBgwFoAUS6RRH0uBxWXO0+cLMCD70O0FVi8wDgYDVR0PAQH/BAQDAgeAMIGPBgNV HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv cmVwby9ycGtpX2NhXzk3M2U3YTk4YTcxYjQ5ZmZiYjIyYjc2ZWQ1ZjEyOWUyLzAv NEJBNDUxMUY0QjgxQzU2NUNFRDNFNzBCMzAyMEZCRDBFRDA1NTYyRi5jcmwwgZ4G CCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5wYWFz LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQxYjUtODJh MC1mMGQwMmMwM2EyYzYvNy80QkE0NTExRjRCODFDNTY1Q0VEM0U3MEIzMDIwRkJE MEVEMDU1NjJGLmNlcjCBmgYIKwYBBQUHAQsEgY0wgYowgYcGCCsGAQUFBzALhnty c3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQvcmVwby9ycGtpX2NhXzk3M2U3 YTk4YTcxYjQ5ZmZiYjIyYjc2ZWQ1ZjEyOWUyLzAvNEJBNDUxMUY0QjgxQzU2NUNF RDNFNzBCMzAyMEZCRDBFRDA1NTYyRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBADpFEAqYbJHsnJBUYtWJ e1+dJngDAxPd8Q++HB0Yv66asySqrVnfycWJCwozm3gIYC9J1f8OKHFYsOSFP4c7 ylPsDLTylEPKpBui50pQTm36JQwd2kFCieGvsxlbGuQQYlz3S805wyp0awU+3lyG 9oKpY7MhhCrxl8qWnQuvOqIvJygYQEyrnYPCxq+Pd2iGGt1ckGSOf1KtT+u1IftB g8t3Pibc2gX/3RelTgjasxHpqKK2eqX/yoQaIcB+TN/E6N57A+eyUfbvRWeBVeTb hHyfjLB9bZ4bH2ZgCiAdLqcqqjFu7+tDxHA2LReM0L2fyi0gw/UMYnAGs6xzfIKW R3M= -----END CERTIFICATE-----Generated at Fri Jul 24 16:55:49 2026 by rpki-client