$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_973e7a98a71b49ffbb22b76ed5f129e2/0/4BA4511F4B81C565CED3E70B3020FBD0ED05562F.mft File: 4BA4511F4B81C565CED3E70B3020FBD0ED05562F.mft (raw, json) Hash identifier: 3dpOpgs6x5kuCWrZFOMSNM3BBEzEiMdisfYyN6DRi5g= Subject key identifier: 64:26:D3:6E:BD:7C:F0:03:82:9F:C9:DA:79:2B:E0:33:FE:C0:AC:11 Authority key identifier: 4B:A4:51:1F:4B:81:C5:65:CE:D3:E7:0B:30:20:FB:D0:ED:05:56:2F Certificate issuer: /CN=4BA4511F4B81C565CED3E70B3020FBD0ED05562F Certificate serial: 616BCB7FEBDF46982F18AFEFFFA680E55110DEB2 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/4BA4511F4B81C565CED3E70B3020FBD0ED05562F.cer Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_973e7a98a71b49ffbb22b76ed5f129e2/0/4BA4511F4B81C565CED3E70B3020FBD0ED05562F.mft Manifest number: 02FC Signing time: Fri 13 Mar 2026 12:41:31 +0000 Manifest this update: Fri 13 Mar 2026 12:36:28 +0000 Manifest next update: Sat 14 Mar 2026 15:47:28 +0000 Files and hashes: 1: 4BA4511F4B81C565CED3E70B3020FBD0ED05562F.crl (hash: XOZNTQWQtw9FO4W9H7kenDn2uT1/UadXil9SrbSVeXs=) Validation: OK Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_973e7a98a71b49ffbb22b76ed5f129e2/0/4BA4511F4B81C565CED3E70B3020FBD0ED05562F.crl rsync://rpki-repo.as207960.net/repo/rpki_ca_973e7a98a71b49ffbb22b76ed5f129e2/0/4BA4511F4B81C565CED3E70B3020FBD0ED05562F.mft rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/4BA4511F4B81C565CED3E70B3020FBD0ED05562F.cer rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 14 Mar 2026 12:25:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:6b:cb:7f:eb:df:46:98:2f:18:af:ef:ff:a6:80:e5:51:10:de:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4BA4511F4B81C565CED3E70B3020FBD0ED05562F Validity Not Before: Mar 13 12:36:28 2026 GMT Not After : Mar 14 15:47:28 2026 GMT Subject: CN=6426D36EBD7CF003829FC9DA792BE033FEC0AC11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:50:b8:9f:60:d8:22:ee:44:34:a6:25:72:02: 79:08:30:2d:30:22:fd:69:83:59:e8:5a:9d:d5:25: ea:e6:d5:a8:3e:b6:f2:d5:84:1c:7b:2a:f7:02:bd: 51:76:a9:cd:c9:5b:1e:f2:fa:02:99:63:cc:32:62: 01:a6:e3:e4:48:7d:8f:42:35:a3:fd:56:5b:0d:af: 11:ca:fc:b5:49:4f:97:e4:e7:21:34:3e:fa:05:10: 27:33:f4:19:62:cf:80:76:13:2d:af:0a:9d:dc:ca: 2e:73:8f:65:e3:a1:8e:d4:fa:5a:67:4d:99:46:5f: d8:20:03:70:73:eb:d3:66:d6:c8:aa:d1:36:17:35: 91:1d:ee:1e:6b:ff:75:4e:c7:7b:9e:61:eb:b0:e8: 91:d0:be:e2:e5:ce:97:5e:07:8f:b3:66:a3:ba:be: bb:83:54:a5:f9:e7:57:0a:db:21:e7:63:ab:9a:ba: 83:5c:27:cd:d9:51:f7:5f:0b:a7:74:92:df:5e:ec: 29:6e:9a:9b:8f:d0:40:c8:90:28:11:b4:e3:1b:9a: bf:88:bd:9d:90:1b:f9:53:bf:0b:3c:7d:6f:0a:b7: be:57:36:f9:38:cc:c4:b2:1c:63:13:79:49:7c:49: 0d:a5:85:90:84:b6:0c:cc:3a:56:cb:9f:af:46:54: 01:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:26:D3:6E:BD:7C:F0:03:82:9F:C9:DA:79:2B:E0:33:FE:C0:AC:11 X509v3 Authority Key Identifier: keyid:4B:A4:51:1F:4B:81:C5:65:CE:D3:E7:0B:30:20:FB:D0:ED:05:56:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_973e7a98a71b49ffbb22b76ed5f129e2/0/4BA4511F4B81C565CED3E70B3020FBD0ED05562F.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/4BA4511F4B81C565CED3E70B3020FBD0ED05562F.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_973e7a98a71b49ffbb22b76ed5f129e2/0/4BA4511F4B81C565CED3E70B3020FBD0ED05562F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 14:7b:9f:b6:d4:a3:e9:88:32:71:3f:0c:ff:9d:9e:84:b2:16: 91:d2:48:61:0a:d7:42:1a:03:76:af:e9:ec:39:fa:2d:75:45: f9:27:37:5a:21:c7:0e:19:3d:3c:58:59:77:b5:c6:10:58:bd: b4:f4:aa:2c:5e:19:3c:03:3a:83:bd:47:2a:c4:47:98:60:0b: 22:df:f6:65:55:20:97:37:8e:3f:69:65:d1:19:e4:6f:5c:42: 37:fa:9e:cd:5b:f9:b4:0a:c1:1e:8b:08:6a:3a:df:6c:11:0a: d2:ea:7f:20:9a:b2:3f:a2:2d:b9:d9:35:0d:44:20:e4:a4:f0: b5:ee:29:84:dd:77:bd:08:54:e0:3d:f5:f6:df:4b:17:52:e3: a3:f1:c4:24:d4:15:43:0f:2d:2e:f6:58:78:a6:f9:57:92:b4: 46:f8:1a:11:f1:5f:3a:1e:25:5e:fe:af:d8:ec:84:de:fa:a0: 05:fb:ca:65:c6:2c:9d:03:7e:a0:5f:2b:55:5f:34:56:28:81: 38:dd:d4:bd:3a:43:b3:e7:b3:f9:c0:30:28:22:02:70:7c:6a: c7:c5:d5:fd:28:28:36:b5:6e:e6:92:15:18:ac:58:4b:f0:8b: 23:e9:70:55:f8:d3:02:8f:a0:c1:06:48:5e:f2:e5:c3:78:fe: ae:60:40:aa -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIUYWvLf+vfRpgvGK/v/6aA5VEQ3rIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEJBNDUxMUY0QjgxQzU2NUNFRDNFNzBCMzAyMEZCRDBF RDA1NTYyRjAeFw0yNjAzMTMxMjM2MjhaFw0yNjAzMTQxNTQ3MjhaMDMxMTAvBgNV BAMTKDY0MjZEMzZFQkQ3Q0YwMDM4MjlGQzlEQTc5MkJFMDMzRkVDMEFDMTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCbULifYNgi7kQ0piVyAnkIMC0w Iv1pg1noWp3VJerm1ag+tvLVhBx7KvcCvVF2qc3JWx7y+gKZY8wyYgGm4+RIfY9C NaP9VlsNrxHK/LVJT5fk5yE0PvoFECcz9Bliz4B2Ey2vCp3cyi5zj2XjoY7U+lpn TZlGX9ggA3Bz69Nm1siq0TYXNZEd7h5r/3VOx3ueYeuw6JHQvuLlzpdeB4+zZqO6 vruDVKX551cK2yHnY6uauoNcJ83ZUfdfC6d0kt9e7ClumpuP0EDIkCgRtOMbmr+I vZ2QG/lTvws8fW8Kt75XNvk4zMSyHGMTeUl8SQ2lhZCEtgzMOlbLn69GVAF5AgMB AAGjggJ4MIICdDAdBgNVHQ4EFgQUZCbTbr188AOCn8naeSvgM/7ArBEwHwYDVR0j BBgwFoAUS6RRH0uBxWXO0+cLMCD70O0FVi8wDgYDVR0PAQH/BAQDAgeAMIGPBgNV HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv cmVwby9ycGtpX2NhXzk3M2U3YTk4YTcxYjQ5ZmZiYjIyYjc2ZWQ1ZjEyOWUyLzAv NEJBNDUxMUY0QjgxQzU2NUNFRDNFNzBCMzAyMEZCRDBFRDA1NTYyRi5jcmwwgZ4G CCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5wYWFz LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQxYjUtODJh MC1mMGQwMmMwM2EyYzYvNy80QkE0NTExRjRCODFDNTY1Q0VEM0U3MEIzMDIwRkJE MEVEMDU1NjJGLmNlcjCBmgYIKwYBBQUHAQsEgY0wgYowgYcGCCsGAQUFBzALhnty c3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQvcmVwby9ycGtpX2NhXzk3M2U3 YTk4YTcxYjQ5ZmZiYjIyYjc2ZWQ1ZjEyOWUyLzAvNEJBNDUxMUY0QjgxQzU2NUNF RDNFNzBCMzAyMEZCRDBFRDA1NTYyRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBABR7n7bUo+mIMnE/DP+d noSyFpHSSGEK10IaA3av6ew5+i11RfknN1ohxw4ZPTxYWXe1xhBYvbT0qixeGTwD OoO9RyrER5hgCyLf9mVVIJc3jj9pZdEZ5G9cQjf6ns1b+bQKwR6LCGo632wRCtLq fyCasj+iLbnZNQ1EIOSk8LXuKYTdd70IVOA99fbfSxdS46PxxCTUFUMPLS72WHim +VeStEb4GhHxXzoeJV7+r9jshN76oAX7ymXGLJ0DfqBfK1VfNFYogTjd1L06Q7Pn s/nAMCgiAnB8asfF1f0oKDa1buaSFRisWEvwiyPpcFX40wKPoMEGSF7y5cN4/q5g QKo= -----END CERTIFICATE-----Generated at Sat Mar 14 05:39:51 2026 by rpki-client