$ rpki-client -vvvf rpki-repo.as207960.net/repo/rpki_ca_973e7a98a71b49ffbb22b76ed5f129e2/0/4BA4511F4B81C565CED3E70B3020FBD0ED05562F.mft File: 4BA4511F4B81C565CED3E70B3020FBD0ED05562F.mft (raw, json) Hash identifier: LtjVUL5vyXmkVxrb1f4oIMhZz+6hOkNqd8V3Z454YHE= Subject key identifier: 5F:48:29:66:4E:2C:F8:DC:94:AD:12:41:00:59:28:AA:FB:3D:18:5C Authority key identifier: 4B:A4:51:1F:4B:81:C5:65:CE:D3:E7:0B:30:20:FB:D0:ED:05:56:2F Certificate issuer: /CN=4BA4511F4B81C565CED3E70B3020FBD0ED05562F Certificate serial: 1B83C4257F093E09776FB9B52666DD904AE70250 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/4BA4511F4B81C565CED3E70B3020FBD0ED05562F.cer Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_973e7a98a71b49ffbb22b76ed5f129e2/0/4BA4511F4B81C565CED3E70B3020FBD0ED05562F.mft Manifest number: 03EF Signing time: Sat 26 Sep 2026 07:51:36 +0000 Manifest this update: Sat 26 Sep 2026 07:46:35 +0000 Manifest next update: Sun 27 Sep 2026 11:12:35 +0000 Files and hashes: 1: 4BA4511F4B81C565CED3E70B3020FBD0ED05562F.crl (hash: EJClxRFgK5QEjDaQ2jk/Y0Ji1GWuZaVe+v2snva2Rm8=) Validation: OK Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_973e7a98a71b49ffbb22b76ed5f129e2/0/4BA4511F4B81C565CED3E70B3020FBD0ED05562F.crl rsync://rpki-repo.as207960.net/repo/rpki_ca_973e7a98a71b49ffbb22b76ed5f129e2/0/4BA4511F4B81C565CED3E70B3020FBD0ED05562F.mft rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/4BA4511F4B81C565CED3E70B3020FBD0ED05562F.cer rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 27 Sep 2026 02:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:83:c4:25:7f:09:3e:09:77:6f:b9:b5:26:66:dd:90:4a:e7:02:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4BA4511F4B81C565CED3E70B3020FBD0ED05562F Validity Not Before: Sep 26 07:46:35 2026 GMT Not After : Sep 27 11:12:35 2026 GMT Subject: CN=5F4829664E2CF8DC94AD1241005928AAFB3D185C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:0d:a9:ac:f7:6c:6a:07:7c:55:8b:e4:7a:14: 92:48:da:9a:42:d5:7b:b8:ad:b4:a6:6e:0f:ef:ef: ea:6f:e6:81:eb:c6:d2:ac:ac:8d:5a:82:59:59:f6: 87:56:c9:97:41:ed:7c:83:02:54:fc:23:9d:d4:cc: de:bc:8b:ed:b8:63:23:f0:fa:23:d6:6b:b3:11:92: 08:59:4b:0c:75:3b:2b:09:77:6f:35:a8:7d:72:b7: 3e:cf:13:5d:a1:28:34:55:a2:68:12:f6:89:a1:0b: 0b:85:91:4b:cc:65:83:c6:04:b0:31:7a:6a:b4:3c: 0a:35:73:5f:f3:64:74:17:21:ae:45:03:ab:a6:39: 5f:e3:cc:d7:0d:22:94:56:d8:fd:4e:78:f4:f0:0a: 30:5b:a8:4c:50:7a:d3:c0:95:c5:04:0f:59:b9:c9: bd:81:c0:51:ce:bf:d0:70:81:a2:20:c3:05:98:7d: 36:f9:84:6b:a1:09:35:31:64:b5:ec:68:f3:3e:ef: ba:b7:b4:35:ed:7e:a5:4f:ed:e2:33:c7:f3:60:5b: d5:6c:e9:9e:27:5f:e0:dc:7a:38:04:7f:16:a4:09: 0e:26:0f:c8:10:5c:04:39:d5:a3:cf:b3:7a:10:0c: 16:57:57:a8:47:b4:59:de:76:e2:a2:e3:83:a7:00: 3c:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:48:29:66:4E:2C:F8:DC:94:AD:12:41:00:59:28:AA:FB:3D:18:5C X509v3 Authority Key Identifier: keyid:4B:A4:51:1F:4B:81:C5:65:CE:D3:E7:0B:30:20:FB:D0:ED:05:56:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_973e7a98a71b49ffbb22b76ed5f129e2/0/4BA4511F4B81C565CED3E70B3020FBD0ED05562F.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/4BA4511F4B81C565CED3E70B3020FBD0ED05562F.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_973e7a98a71b49ffbb22b76ed5f129e2/0/4BA4511F4B81C565CED3E70B3020FBD0ED05562F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:b0:81:f0:e1:65:0e:f1:cd:d2:ee:b5:46:46:53:ab:9f:26: 27:9f:0a:2e:55:bb:60:15:ff:16:de:48:c0:98:16:60:d0:bd: 1f:c3:ed:c8:9e:63:13:f9:e3:e4:05:dc:73:65:96:02:06:36: d5:62:e6:80:70:25:ab:1a:d7:57:0f:b0:91:31:52:75:7c:da: 4f:67:19:85:a1:dd:90:74:d7:91:af:7e:8c:77:ba:4c:a0:9b: ec:31:bf:cf:ee:42:bc:90:7b:17:60:56:46:49:ce:9e:fc:a5: c4:6f:37:e1:61:62:08:20:69:ab:6f:f6:80:3a:53:78:d8:48: 60:5a:19:4f:8e:50:0f:05:74:3f:fb:c3:e1:9a:f3:9d:54:fe: 23:2e:77:b0:aa:cc:65:b7:7e:9d:8e:43:b9:05:c9:06:7f:76: 3c:15:c1:e0:0e:d5:47:92:56:20:5d:40:02:2d:9b:13:b2:1b: f8:22:75:7c:ca:55:98:fb:da:24:af:63:09:e2:5e:78:63:21: f3:f7:ee:0f:2b:cb:15:35:2e:23:2f:0a:24:bc:0f:92:43:69: 3d:98:00:35:36:97:55:48:7e:ee:8b:3a:98:2e:48:2b:0f:b1: a4:d4:06:1b:4c:c1:32:d3:4c:27:46:f0:88:ba:92:47:aa:d3: 47:4a:82:59 -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIUG4PEJX8JPgl3b7m1JmbdkErnAlAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEJBNDUxMUY0QjgxQzU2NUNFRDNFNzBCMzAyMEZCRDBF RDA1NTYyRjAeFw0yNjA5MjYwNzQ2MzVaFw0yNjA5MjcxMTEyMzVaMDMxMTAvBgNV BAMTKDVGNDgyOTY2NEUyQ0Y4REM5NEFEMTI0MTAwNTkyOEFBRkIzRDE4NUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUDams92xqB3xVi+R6FJJI2ppC 1Xu4rbSmbg/v7+pv5oHrxtKsrI1agllZ9odWyZdB7XyDAlT8I53UzN68i+24YyPw +iPWa7MRkghZSwx1OysJd281qH1ytz7PE12hKDRVomgS9omhCwuFkUvMZYPGBLAx emq0PAo1c1/zZHQXIa5FA6umOV/jzNcNIpRW2P1OePTwCjBbqExQetPAlcUED1m5 yb2BwFHOv9BwgaIgwwWYfTb5hGuhCTUxZLXsaPM+77q3tDXtfqVP7eIzx/NgW9Vs 6Z4nX+DcejgEfxakCQ4mD8gQXAQ51aPPs3oQDBZXV6hHtFneduKi44OnADyLAgMB AAGjggJ4MIICdDAdBgNVHQ4EFgQUX0gpZk4s+NyUrRJBAFkoqvs9GFwwHwYDVR0j BBgwFoAUS6RRH0uBxWXO0+cLMCD70O0FVi8wDgYDVR0PAQH/BAQDAgeAMIGPBgNV HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv cmVwby9ycGtpX2NhXzk3M2U3YTk4YTcxYjQ5ZmZiYjIyYjc2ZWQ1ZjEyOWUyLzAv NEJBNDUxMUY0QjgxQzU2NUNFRDNFNzBCMzAyMEZCRDBFRDA1NTYyRi5jcmwwgZ4G CCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5wYWFz LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQxYjUtODJh MC1mMGQwMmMwM2EyYzYvNy80QkE0NTExRjRCODFDNTY1Q0VEM0U3MEIzMDIwRkJE MEVEMDU1NjJGLmNlcjCBmgYIKwYBBQUHAQsEgY0wgYowgYcGCCsGAQUFBzALhnty c3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQvcmVwby9ycGtpX2NhXzk3M2U3 YTk4YTcxYjQ5ZmZiYjIyYjc2ZWQ1ZjEyOWUyLzAvNEJBNDUxMUY0QjgxQzU2NUNF RDNFNzBCMzAyMEZCRDBFRDA1NTYyRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAH2wgfDhZQ7xzdLutUZG U6ufJiefCi5Vu2AV/xbeSMCYFmDQvR/D7cieYxP54+QF3HNllgIGNtVi5oBwJasa 11cPsJExUnV82k9nGYWh3ZB015Gvfox3ukygm+wxv8/uQryQexdgVkZJzp78pcRv N+FhYgggaatv9oA6U3jYSGBaGU+OUA8FdD/7w+Ga851U/iMud7CqzGW3fp2OQ7kF yQZ/djwVweAO1UeSViBdQAItmxOyG/gidXzKVZj72iSvYwniXnhjIfP37g8ryxU1 LiMvCiS8D5JDaT2YADU2l1VIfu6LOpguSCsPsaTUBhtMwTLTTCdG8Ii6kkeq00dK glk= -----END CERTIFICATE-----Generated at Sat Sep 26 13:15:52 2026 by rpki-client