$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_973e7a98a71b49ffbb22b76ed5f129e2/0/4BA4511F4B81C565CED3E70B3020FBD0ED05562F.mft File: 4BA4511F4B81C565CED3E70B3020FBD0ED05562F.mft (raw, json) Hash identifier: VqMASSvNVCudYF5thLWaQXGaRmZnTAbhZUS4uvvgo1s= Subject key identifier: 04:80:5F:41:20:35:5B:FC:8F:7F:D6:4A:58:03:38:74:B1:D4:E3:9D Authority key identifier: 4B:A4:51:1F:4B:81:C5:65:CE:D3:E7:0B:30:20:FB:D0:ED:05:56:2F Certificate issuer: /CN=4BA4511F4B81C565CED3E70B3020FBD0ED05562F Certificate serial: 2B7C50565CFD32088BA161F57F6B26BA34E12B30 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/4BA4511F4B81C565CED3E70B3020FBD0ED05562F.cer Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_973e7a98a71b49ffbb22b76ed5f129e2/0/4BA4511F4B81C565CED3E70B3020FBD0ED05562F.mft Manifest number: 03B3 Signing time: Wed 29 Jul 2026 13:18:14 +0000 Manifest this update: Wed 29 Jul 2026 13:13:14 +0000 Manifest next update: Thu 30 Jul 2026 13:55:14 +0000 Files and hashes: 1: 4BA4511F4B81C565CED3E70B3020FBD0ED05562F.crl (hash: vVNWDZUB/dIL58boGoictj6ZyUfSp1de5VtWXnsb+bs=) Validation: OK Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_973e7a98a71b49ffbb22b76ed5f129e2/0/4BA4511F4B81C565CED3E70B3020FBD0ED05562F.crl rsync://rpki-repo.as207960.net/repo/rpki_ca_973e7a98a71b49ffbb22b76ed5f129e2/0/4BA4511F4B81C565CED3E70B3020FBD0ED05562F.mft rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/4BA4511F4B81C565CED3E70B3020FBD0ED05562F.cer rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 30 Jul 2026 13:55:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:7c:50:56:5c:fd:32:08:8b:a1:61:f5:7f:6b:26:ba:34:e1:2b:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4BA4511F4B81C565CED3E70B3020FBD0ED05562F Validity Not Before: Jul 29 13:13:14 2026 GMT Not After : Jul 30 13:55:14 2026 GMT Subject: CN=04805F4120355BFC8F7FD64A58033874B1D4E39D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:ac:ee:78:d8:3e:a1:d4:3b:74:a4:47:dd:e2: e3:4b:48:5c:45:fb:9d:4a:18:8e:93:40:b2:0c:f1: af:a8:05:48:3f:9c:d9:d4:d5:78:6d:c1:89:42:ee: 53:e6:ee:7d:1f:cc:63:34:1b:ea:76:69:8f:1f:ab: 91:28:a9:98:44:e9:46:49:67:72:2c:9a:c1:5f:13: 69:c7:e4:ba:6b:50:d5:c1:54:33:4c:b7:e9:2c:c6: a1:e0:39:ec:43:ad:bb:ae:6d:69:65:4d:16:83:0e: 64:e0:3e:bb:dd:f6:2a:9a:51:84:18:6a:61:2b:35: a3:1e:c4:cb:93:5b:f4:96:e1:fb:b0:ce:d6:20:dd: 7d:6d:06:6c:27:55:13:8b:68:a9:13:4e:eb:eb:8a: 85:1a:be:c0:2f:cb:93:6a:37:15:41:a2:22:c8:02: 08:b9:85:f1:94:79:fc:2a:c3:89:2a:45:51:6d:7f: 84:94:be:2a:f7:1d:65:9b:6c:85:ba:c7:34:9b:3c: 68:68:56:74:82:46:fc:b2:bf:99:96:b5:32:15:fe: a6:0f:4e:9e:3f:b7:24:15:fe:41:a8:cf:90:da:af: a7:0e:42:4c:84:ac:87:50:e6:5d:72:81:64:a1:eb: 44:ee:c6:be:79:ac:37:6f:1c:99:64:e9:b2:0b:73: 40:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:80:5F:41:20:35:5B:FC:8F:7F:D6:4A:58:03:38:74:B1:D4:E3:9D X509v3 Authority Key Identifier: keyid:4B:A4:51:1F:4B:81:C5:65:CE:D3:E7:0B:30:20:FB:D0:ED:05:56:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_973e7a98a71b49ffbb22b76ed5f129e2/0/4BA4511F4B81C565CED3E70B3020FBD0ED05562F.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/4BA4511F4B81C565CED3E70B3020FBD0ED05562F.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_973e7a98a71b49ffbb22b76ed5f129e2/0/4BA4511F4B81C565CED3E70B3020FBD0ED05562F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:19:0f:32:59:42:d3:c5:91:cd:13:d2:d3:ac:39:09:8d:52: ce:22:0c:bd:33:69:7c:9f:c3:05:70:24:2f:71:5f:82:54:ff: a6:12:66:26:5d:0d:82:fa:cb:e8:25:cc:45:d2:da:11:f5:7c: 87:d9:6f:8f:56:1c:44:4d:45:75:3c:de:57:c2:51:c4:a9:6d: 6c:6b:d6:18:f8:55:ad:06:bf:e4:0a:dd:c3:ca:da:ef:db:cd: 08:bf:b7:70:3c:e3:70:99:e3:1a:81:f2:95:1a:4e:83:77:9f: 28:d9:32:76:df:e3:7b:ab:c7:63:7c:9d:b2:e9:13:bc:8c:fc: 80:5f:ab:8a:91:11:6b:1b:3b:e8:c8:fd:ef:45:5b:09:01:de: 3b:0e:47:0f:ba:a4:8e:7a:e5:34:21:b1:10:03:c8:3b:9c:c2: 99:ea:d7:e1:de:60:b7:d5:20:32:09:93:80:8b:b1:57:83:0e: c0:b7:de:39:1d:9a:ba:df:fd:69:ca:73:e0:c8:65:5a:7f:58: fa:ce:2a:ff:d9:15:9a:fd:4a:8b:8a:42:c5:c2:ee:68:13:da: b6:a4:05:71:19:fa:d2:cd:26:47:1e:df:4b:63:85:53:8d:98: d3:fa:c1:ee:34:1f:f9:ee:00:ca:aa:cc:3f:4c:dc:cb:48:3b: 80:24:11:cb -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIUK3xQVlz9MgiLoWH1f2smujThKzAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEJBNDUxMUY0QjgxQzU2NUNFRDNFNzBCMzAyMEZCRDBF RDA1NTYyRjAeFw0yNjA3MjkxMzEzMTRaFw0yNjA3MzAxMzU1MTRaMDMxMTAvBgNV BAMTKDA0ODA1RjQxMjAzNTVCRkM4RjdGRDY0QTU4MDMzODc0QjFENEUzOUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbrO542D6h1Dt0pEfd4uNLSFxF +51KGI6TQLIM8a+oBUg/nNnU1XhtwYlC7lPm7n0fzGM0G+p2aY8fq5EoqZhE6UZJ Z3IsmsFfE2nH5LprUNXBVDNMt+ksxqHgOexDrbuubWllTRaDDmTgPrvd9iqaUYQY amErNaMexMuTW/SW4fuwztYg3X1tBmwnVROLaKkTTuvrioUavsAvy5NqNxVBoiLI Agi5hfGUefwqw4kqRVFtf4SUvir3HWWbbIW6xzSbPGhoVnSCRvyyv5mWtTIV/qYP Tp4/tyQV/kGoz5Dar6cOQkyErIdQ5l1ygWSh60Tuxr55rDdvHJlk6bILc0AfAgMB AAGjggJ4MIICdDAdBgNVHQ4EFgQUBIBfQSA1W/yPf9ZKWAM4dLHU450wHwYDVR0j BBgwFoAUS6RRH0uBxWXO0+cLMCD70O0FVi8wDgYDVR0PAQH/BAQDAgeAMIGPBgNV HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv cmVwby9ycGtpX2NhXzk3M2U3YTk4YTcxYjQ5ZmZiYjIyYjc2ZWQ1ZjEyOWUyLzAv NEJBNDUxMUY0QjgxQzU2NUNFRDNFNzBCMzAyMEZCRDBFRDA1NTYyRi5jcmwwgZ4G CCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5wYWFz LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQxYjUtODJh MC1mMGQwMmMwM2EyYzYvNy80QkE0NTExRjRCODFDNTY1Q0VEM0U3MEIzMDIwRkJE MEVEMDU1NjJGLmNlcjCBmgYIKwYBBQUHAQsEgY0wgYowgYcGCCsGAQUFBzALhnty c3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQvcmVwby9ycGtpX2NhXzk3M2U3 YTk4YTcxYjQ5ZmZiYjIyYjc2ZWQ1ZjEyOWUyLzAvNEJBNDUxMUY0QjgxQzU2NUNF RDNFNzBCMzAyMEZCRDBFRDA1NTYyRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBABcZDzJZQtPFkc0T0tOs OQmNUs4iDL0zaXyfwwVwJC9xX4JU/6YSZiZdDYL6y+glzEXS2hH1fIfZb49WHERN RXU83lfCUcSpbWxr1hj4Va0Gv+QK3cPK2u/bzQi/t3A843CZ4xqB8pUaToN3nyjZ Mnbf43urx2N8nbLpE7yM/IBfq4qREWsbO+jI/e9FWwkB3jsORw+6pI565TQhsRAD yDucwpnq1+HeYLfVIDIJk4CLsVeDDsC33jkdmrrf/WnKc+DIZVp/WPrOKv/ZFZr9 SouKQsXC7mgT2rakBXEZ+tLNJkce30tjhVONmNP6we40H/nuAMqqzD9M3MtIO4Ak Ecs= -----END CERTIFICATE-----Generated at Thu Jul 30 07:05:15 2026 by rpki-client