$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_973e7a98a71b49ffbb22b76ed5f129e2/0/4BA4511F4B81C565CED3E70B3020FBD0ED05562F.mft File: 4BA4511F4B81C565CED3E70B3020FBD0ED05562F.mft (raw, json) Hash identifier: vqVlxk+jSy2Lix8vkRyNqq10bs0UvqH0lqAsWi1QlLM= Subject key identifier: 1D:38:59:E2:8E:65:29:2B:D4:32:9E:08:0E:E1:D0:CD:B0:55:2E:AA Authority key identifier: 4B:A4:51:1F:4B:81:C5:65:CE:D3:E7:0B:30:20:FB:D0:ED:05:56:2F Certificate issuer: /CN=4BA4511F4B81C565CED3E70B3020FBD0ED05562F Certificate serial: 252787411BBCCB0EB5B5E12E11E04A890410CCCE Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/4BA4511F4B81C565CED3E70B3020FBD0ED05562F.cer Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_973e7a98a71b49ffbb22b76ed5f129e2/0/4BA4511F4B81C565CED3E70B3020FBD0ED05562F.mft Manifest number: 033D Signing time: Sat 02 May 2026 00:00:54 +0000 Manifest this update: Fri 01 May 2026 23:55:53 +0000 Manifest next update: Sun 03 May 2026 03:25:53 +0000 Files and hashes: 1: 4BA4511F4B81C565CED3E70B3020FBD0ED05562F.crl (hash: RFNJGGMLJUcTwGd23rCley+f5OpXHPDDJvHboNgPXr8=) Validation: OK Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_973e7a98a71b49ffbb22b76ed5f129e2/0/4BA4511F4B81C565CED3E70B3020FBD0ED05562F.crl rsync://rpki-repo.as207960.net/repo/rpki_ca_973e7a98a71b49ffbb22b76ed5f129e2/0/4BA4511F4B81C565CED3E70B3020FBD0ED05562F.mft rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/4BA4511F4B81C565CED3E70B3020FBD0ED05562F.cer rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 03 May 2026 00:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:27:87:41:1b:bc:cb:0e:b5:b5:e1:2e:11:e0:4a:89:04:10:cc:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4BA4511F4B81C565CED3E70B3020FBD0ED05562F Validity Not Before: May 1 23:55:53 2026 GMT Not After : May 3 03:25:53 2026 GMT Subject: CN=1D3859E28E65292BD4329E080EE1D0CDB0552EAA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:f4:f0:81:d8:5f:ed:18:56:36:7c:f1:b5:44: 69:6c:c3:e5:67:29:0e:c8:15:73:7a:06:e2:87:d9: 29:37:e4:a5:0b:93:20:0d:4a:fc:7d:0b:9d:c0:5f: 33:21:2f:9c:48:32:00:72:60:dd:85:69:46:b4:b3: 1d:e2:f1:f3:39:2e:4b:db:df:9c:d2:f7:e6:71:2c: 66:1b:2c:16:3e:22:7b:ce:c6:61:a5:63:85:06:c2: 0f:9e:32:82:49:7a:46:b9:27:ac:3f:6e:ff:12:20: 94:90:ae:e5:4c:d6:e0:81:05:a7:e9:df:0f:6b:28: 1a:69:06:c9:a6:63:b7:47:82:a3:bc:05:6b:69:d4: 6b:78:bc:88:a1:ae:ab:8f:9d:7f:2c:fb:2b:91:c7: 1d:95:30:c9:d4:aa:6c:c7:fc:9d:c5:51:d1:d3:44: 4e:4b:37:c2:b1:57:b5:57:2e:21:2b:e5:e0:27:86: a8:2e:1b:ca:61:2d:08:2c:18:6f:67:13:4e:43:d7: a8:15:a7:77:2f:b1:15:40:c1:07:f1:60:38:56:fc: 70:1a:30:2c:cd:1c:17:a9:60:68:37:f3:cf:7d:0f: fb:99:58:69:88:3b:52:8b:19:ec:00:ef:09:aa:37: 4f:04:7f:2c:69:7d:f7:d7:b1:96:71:75:8a:40:59: 91:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:38:59:E2:8E:65:29:2B:D4:32:9E:08:0E:E1:D0:CD:B0:55:2E:AA X509v3 Authority Key Identifier: keyid:4B:A4:51:1F:4B:81:C5:65:CE:D3:E7:0B:30:20:FB:D0:ED:05:56:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_973e7a98a71b49ffbb22b76ed5f129e2/0/4BA4511F4B81C565CED3E70B3020FBD0ED05562F.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/4BA4511F4B81C565CED3E70B3020FBD0ED05562F.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_973e7a98a71b49ffbb22b76ed5f129e2/0/4BA4511F4B81C565CED3E70B3020FBD0ED05562F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:78:97:b9:c8:31:59:f3:a8:f5:97:f8:f2:61:42:21:a9:7a: b2:bd:88:bb:f7:cc:67:57:56:95:aa:db:03:88:43:22:2e:c8: f0:85:0f:c5:32:4c:57:e6:08:b9:23:27:81:8f:14:e5:e5:fa: 80:d7:9f:d5:12:02:82:6e:3a:37:54:ce:c9:1d:41:fa:e6:35: 8f:5e:22:37:7d:a5:a4:0b:ba:08:43:a9:58:aa:33:d6:fb:75: f6:49:b5:41:60:52:fa:82:b7:d8:82:74:ba:6d:58:61:81:a8: 8d:46:66:a4:a6:92:30:99:38:32:2d:b4:fb:5f:44:6e:8a:6a: 1c:fa:19:66:6b:37:df:44:24:85:c0:ee:aa:65:92:2a:5c:4d: 04:d7:cd:36:70:39:15:15:46:4b:2f:c1:77:d2:43:b7:23:35: 1e:b2:22:5d:a1:07:d8:64:40:1a:e7:46:81:24:f2:5e:7f:8b: ed:dc:27:cf:58:2c:7f:0d:e2:4a:ad:06:71:d7:18:4a:c0:15: 90:36:e1:02:4c:63:0e:fb:bd:c7:75:42:38:e7:00:9b:31:a4: 43:4b:3c:1e:48:10:1e:7b:5d:91:07:59:93:23:ac:d2:0f:22: 15:fc:1f:40:97:7d:c1:92:b8:49:43:76:66:46:59:43:ed:7b: 49:fa:3e:01 -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIUJSeHQRu8yw61teEuEeBKiQQQzM4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEJBNDUxMUY0QjgxQzU2NUNFRDNFNzBCMzAyMEZCRDBF RDA1NTYyRjAeFw0yNjA1MDEyMzU1NTNaFw0yNjA1MDMwMzI1NTNaMDMxMTAvBgNV BAMTKDFEMzg1OUUyOEU2NTI5MkJENDMyOUUwODBFRTFEMENEQjA1NTJFQUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDI9PCB2F/tGFY2fPG1RGlsw+Vn KQ7IFXN6BuKH2Sk35KULkyANSvx9C53AXzMhL5xIMgByYN2FaUa0sx3i8fM5Lkvb 35zS9+ZxLGYbLBY+InvOxmGlY4UGwg+eMoJJeka5J6w/bv8SIJSQruVM1uCBBafp 3w9rKBppBsmmY7dHgqO8BWtp1Gt4vIihrquPnX8s+yuRxx2VMMnUqmzH/J3FUdHT RE5LN8KxV7VXLiEr5eAnhqguG8phLQgsGG9nE05D16gVp3cvsRVAwQfxYDhW/HAa MCzNHBepYGg38899D/uZWGmIO1KLGewA7wmqN08EfyxpfffXsZZxdYpAWZGbAgMB AAGjggJ4MIICdDAdBgNVHQ4EFgQUHThZ4o5lKSvUMp4IDuHQzbBVLqowHwYDVR0j BBgwFoAUS6RRH0uBxWXO0+cLMCD70O0FVi8wDgYDVR0PAQH/BAQDAgeAMIGPBgNV HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv cmVwby9ycGtpX2NhXzk3M2U3YTk4YTcxYjQ5ZmZiYjIyYjc2ZWQ1ZjEyOWUyLzAv NEJBNDUxMUY0QjgxQzU2NUNFRDNFNzBCMzAyMEZCRDBFRDA1NTYyRi5jcmwwgZ4G CCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5wYWFz LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQxYjUtODJh MC1mMGQwMmMwM2EyYzYvNy80QkE0NTExRjRCODFDNTY1Q0VEM0U3MEIzMDIwRkJE MEVEMDU1NjJGLmNlcjCBmgYIKwYBBQUHAQsEgY0wgYowgYcGCCsGAQUFBzALhnty c3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQvcmVwby9ycGtpX2NhXzk3M2U3 YTk4YTcxYjQ5ZmZiYjIyYjc2ZWQ1ZjEyOWUyLzAvNEJBNDUxMUY0QjgxQzU2NUNF RDNFNzBCMzAyMEZCRDBFRDA1NTYyRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAB14l7nIMVnzqPWX+PJh QiGperK9iLv3zGdXVpWq2wOIQyIuyPCFD8UyTFfmCLkjJ4GPFOXl+oDXn9USAoJu OjdUzskdQfrmNY9eIjd9paQLughDqViqM9b7dfZJtUFgUvqCt9iCdLptWGGBqI1G ZqSmkjCZODIttPtfRG6Kahz6GWZrN99EJIXA7qplkipcTQTXzTZwORUVRksvwXfS Q7cjNR6yIl2hB9hkQBrnRoEk8l5/i+3cJ89YLH8N4kqtBnHXGErAFZA24QJMYw77 vcd1QjjnAJsxpENLPB5IEB57XZEHWZMjrNIPIhX8H0CXfcGSuElDdmZGWUPte0n6 PgE= -----END CERTIFICATE-----Generated at Sat May 2 08:43:12 2026 by rpki-client