$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_973e7a98a71b49ffbb22b76ed5f129e2/0/4BA4511F4B81C565CED3E70B3020FBD0ED05562F.mft File: 4BA4511F4B81C565CED3E70B3020FBD0ED05562F.mft (raw, json) Hash identifier: 7CJroQWsliVDrbRZv0jQsYC9SlnWBpQGRh43oMTMbio= Subject key identifier: 32:39:EE:B4:D5:37:5E:CD:F2:10:5D:DD:65:4C:C4:65:3A:03:39:E9 Authority key identifier: 4B:A4:51:1F:4B:81:C5:65:CE:D3:E7:0B:30:20:FB:D0:ED:05:56:2F Certificate issuer: /CN=4BA4511F4B81C565CED3E70B3020FBD0ED05562F Certificate serial: 24FA61DB809719DB34E0FAFD00F64B565E7BF147 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/4BA4511F4B81C565CED3E70B3020FBD0ED05562F.cer Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_973e7a98a71b49ffbb22b76ed5f129e2/0/4BA4511F4B81C565CED3E70B3020FBD0ED05562F.mft Manifest number: 0260 Signing time: Mon 20 Oct 2025 11:27:10 +0000 Manifest this update: Mon 20 Oct 2025 11:22:10 +0000 Manifest next update: Tue 21 Oct 2025 11:33:10 +0000 Files and hashes: 1: 4BA4511F4B81C565CED3E70B3020FBD0ED05562F.crl (hash: /vm/OdXrc6UVzoxX5T9Vy6mcIo2T0dhCYWB9enXPfuc=) Validation: OK Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_973e7a98a71b49ffbb22b76ed5f129e2/0/4BA4511F4B81C565CED3E70B3020FBD0ED05562F.crl rsync://rpki-repo.as207960.net/repo/rpki_ca_973e7a98a71b49ffbb22b76ed5f129e2/0/4BA4511F4B81C565CED3E70B3020FBD0ED05562F.mft rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/4BA4511F4B81C565CED3E70B3020FBD0ED05562F.cer rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 21 Oct 2025 06:58:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:fa:61:db:80:97:19:db:34:e0:fa:fd:00:f6:4b:56:5e:7b:f1:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4BA4511F4B81C565CED3E70B3020FBD0ED05562F Validity Not Before: Oct 20 11:22:10 2025 GMT Not After : Oct 21 11:33:10 2025 GMT Subject: CN=3239EEB4D5375ECDF2105DDD654CC4653A0339E9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:03:92:f2:3a:15:63:8a:00:4c:b2:91:bc:d4: 83:af:77:3d:bf:b8:d9:77:9f:a2:5e:ee:73:e9:98: c0:00:30:52:99:d3:39:2d:40:1a:04:51:15:ad:2d: 05:8f:2f:41:94:ff:1f:86:62:ec:5e:fa:58:24:2d: bf:ba:ee:de:1b:d9:4a:46:b2:d6:e3:90:97:fa:35: 95:a7:2d:e3:47:de:30:c8:71:fa:2d:42:8f:c5:bc: 83:02:34:d0:83:a9:cf:c7:01:18:fb:83:33:d5:a0: 46:6b:b4:21:9a:52:4b:1d:d0:5b:1d:f7:df:2e:4b: c5:f2:ba:20:2e:4d:7e:3e:e1:96:31:6d:d9:06:40: 36:20:81:86:9f:e3:bc:8d:15:d8:52:fe:aa:aa:d8: c5:ed:37:aa:0a:ec:7c:a4:72:44:de:45:de:fb:e7: 06:2a:79:e8:a0:b2:e3:c9:24:b6:0c:cd:66:71:b8: 97:17:0b:3b:64:01:1c:b7:23:db:8f:f3:f4:65:9b: 32:c8:18:e5:de:c0:10:53:e9:71:73:85:c4:fd:9c: 7a:e7:12:51:cc:98:52:75:b0:29:e4:51:d6:26:ac: 30:ba:06:1a:df:70:14:7d:8b:b9:b1:5a:7c:63:31: a4:99:26:ba:a9:c0:06:ca:c0:ad:32:f0:87:00:20: ad:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:39:EE:B4:D5:37:5E:CD:F2:10:5D:DD:65:4C:C4:65:3A:03:39:E9 X509v3 Authority Key Identifier: keyid:4B:A4:51:1F:4B:81:C5:65:CE:D3:E7:0B:30:20:FB:D0:ED:05:56:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_973e7a98a71b49ffbb22b76ed5f129e2/0/4BA4511F4B81C565CED3E70B3020FBD0ED05562F.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/4BA4511F4B81C565CED3E70B3020FBD0ED05562F.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_973e7a98a71b49ffbb22b76ed5f129e2/0/4BA4511F4B81C565CED3E70B3020FBD0ED05562F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:d2:71:0c:90:3c:ac:bf:5f:23:89:70:2d:7c:cd:0e:7b:37: cb:f1:72:ec:18:7f:e2:f7:85:50:b5:2f:b3:13:0b:17:01:a7: aa:26:8d:1a:96:71:27:00:da:d1:aa:d3:09:70:51:ef:a3:fc: ae:77:69:75:72:0a:d8:ec:4d:08:c2:b8:c6:b2:39:de:f7:18: ca:11:be:35:64:bf:c6:61:d7:59:56:f8:fb:c0:cf:43:f9:7d: cc:aa:ad:41:fc:93:33:0d:2e:a0:26:90:55:7e:fc:63:66:ec: 1a:3a:1f:81:3a:c0:5d:5c:b7:41:91:04:67:44:96:93:b1:81: 87:13:50:f8:82:a3:9f:da:43:90:0a:dc:39:79:91:96:6f:81: ab:54:7b:75:ff:66:3e:68:6d:e4:8f:5d:7b:2a:ba:cb:64:8c: f8:cd:9b:5b:26:b3:f5:dd:84:0a:06:00:db:e6:4b:f8:68:ee: 08:ac:ac:84:5a:4e:a3:ec:98:1d:58:94:21:c5:4f:8b:66:60: 4b:77:2c:75:36:b2:64:56:22:98:e7:07:0a:f8:3f:34:07:5e: 18:e2:ef:1a:f5:2b:09:55:80:cf:80:40:a1:5d:dc:b0:4f:55: 89:16:2e:98:70:01:2d:62:f4:19:2d:6d:75:ac:5a:a4:01:a0: e3:64:9d:89 -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIUJPph24CXGds04Pr9APZLVl578UcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEJBNDUxMUY0QjgxQzU2NUNFRDNFNzBCMzAyMEZCRDBF RDA1NTYyRjAeFw0yNTEwMjAxMTIyMTBaFw0yNTEwMjExMTMzMTBaMDMxMTAvBgNV BAMTKDMyMzlFRUI0RDUzNzVFQ0RGMjEwNURERDY1NENDNDY1M0EwMzM5RTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDaA5LyOhVjigBMspG81IOvdz2/ uNl3n6Je7nPpmMAAMFKZ0zktQBoEURWtLQWPL0GU/x+GYuxe+lgkLb+67t4b2UpG stbjkJf6NZWnLeNH3jDIcfotQo/FvIMCNNCDqc/HARj7gzPVoEZrtCGaUksd0Fsd 998uS8XyuiAuTX4+4ZYxbdkGQDYggYaf47yNFdhS/qqq2MXtN6oK7HykckTeRd77 5wYqeeigsuPJJLYMzWZxuJcXCztkARy3I9uP8/RlmzLIGOXewBBT6XFzhcT9nHrn ElHMmFJ1sCnkUdYmrDC6BhrfcBR9i7mxWnxjMaSZJrqpwAbKwK0y8IcAIK0nAgMB AAGjggJ4MIICdDAdBgNVHQ4EFgQUMjnutNU3Xs3yEF3dZUzEZToDOekwHwYDVR0j BBgwFoAUS6RRH0uBxWXO0+cLMCD70O0FVi8wDgYDVR0PAQH/BAQDAgeAMIGPBgNV HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv cmVwby9ycGtpX2NhXzk3M2U3YTk4YTcxYjQ5ZmZiYjIyYjc2ZWQ1ZjEyOWUyLzAv NEJBNDUxMUY0QjgxQzU2NUNFRDNFNzBCMzAyMEZCRDBFRDA1NTYyRi5jcmwwgZ4G CCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5wYWFz LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQxYjUtODJh MC1mMGQwMmMwM2EyYzYvNy80QkE0NTExRjRCODFDNTY1Q0VEM0U3MEIzMDIwRkJE MEVEMDU1NjJGLmNlcjCBmgYIKwYBBQUHAQsEgY0wgYowgYcGCCsGAQUFBzALhnty c3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQvcmVwby9ycGtpX2NhXzk3M2U3 YTk4YTcxYjQ5ZmZiYjIyYjc2ZWQ1ZjEyOWUyLzAvNEJBNDUxMUY0QjgxQzU2NUNF RDNFNzBCMzAyMEZCRDBFRDA1NTYyRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBABzScQyQPKy/XyOJcC18 zQ57N8vxcuwYf+L3hVC1L7MTCxcBp6omjRqWcScA2tGq0wlwUe+j/K53aXVyCtjs TQjCuMayOd73GMoRvjVkv8Zh11lW+PvAz0P5fcyqrUH8kzMNLqAmkFV+/GNm7Bo6 H4E6wF1ct0GRBGdElpOxgYcTUPiCo5/aQ5AK3Dl5kZZvgatUe3X/Zj5obeSPXXsq ustkjPjNm1sms/XdhAoGANvmS/ho7gisrIRaTqPsmB1YlCHFT4tmYEt3LHU2smRW IpjnBwr4PzQHXhji7xr1KwlVgM+AQKFd3LBPVYkWLphwAS1i9BktbXWsWqQBoONk nYk= -----END CERTIFICATE-----Generated at Mon Oct 20 14:58:05 2025 by rpki-client