$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_973e7a98a71b49ffbb22b76ed5f129e2/0/4BA4511F4B81C565CED3E70B3020FBD0ED05562F.mft File: 4BA4511F4B81C565CED3E70B3020FBD0ED05562F.mft (raw, json) Hash identifier: NfpUbXQIyVlkeR9QKRKIe8TUoPFLBMPea5+PCZWpI+k= Subject key identifier: D1:58:4E:04:3D:D0:DE:24:52:67:BC:B8:06:BD:F6:B5:E7:31:82:1B Authority key identifier: 4B:A4:51:1F:4B:81:C5:65:CE:D3:E7:0B:30:20:FB:D0:ED:05:56:2F Certificate issuer: /CN=4BA4511F4B81C565CED3E70B3020FBD0ED05562F Certificate serial: 36951AA31CB05A277A9AEDDC1BA5A6FE3926DD99 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/4BA4511F4B81C565CED3E70B3020FBD0ED05562F.cer Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_973e7a98a71b49ffbb22b76ed5f129e2/0/4BA4511F4B81C565CED3E70B3020FBD0ED05562F.mft Manifest number: 0269 Signing time: Mon 27 Oct 2025 05:11:56 +0000 Manifest this update: Mon 27 Oct 2025 05:06:56 +0000 Manifest next update: Tue 28 Oct 2025 06:58:56 +0000 Files and hashes: 1: 4BA4511F4B81C565CED3E70B3020FBD0ED05562F.crl (hash: z63QaMBA2q/qGy0ob3yz1IJ5uIwfE0S/On240eExadM=) Validation: OK Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_973e7a98a71b49ffbb22b76ed5f129e2/0/4BA4511F4B81C565CED3E70B3020FBD0ED05562F.crl rsync://rpki-repo.as207960.net/repo/rpki_ca_973e7a98a71b49ffbb22b76ed5f129e2/0/4BA4511F4B81C565CED3E70B3020FBD0ED05562F.mft rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/4BA4511F4B81C565CED3E70B3020FBD0ED05562F.cer rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 28 Oct 2025 02:00:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:95:1a:a3:1c:b0:5a:27:7a:9a:ed:dc:1b:a5:a6:fe:39:26:dd:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4BA4511F4B81C565CED3E70B3020FBD0ED05562F Validity Not Before: Oct 27 05:06:56 2025 GMT Not After : Oct 28 06:58:56 2025 GMT Subject: CN=D1584E043DD0DE245267BCB806BDF6B5E731821B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:28:51:72:89:fa:6c:27:62:fc:8c:74:5c:d8: df:59:ab:99:67:fe:3a:f6:44:1f:87:26:63:ee:33: a0:e4:9f:b1:8b:85:23:da:2a:4c:2e:b0:1f:13:c1: 27:b3:2e:db:7a:80:af:d0:81:45:9b:3a:84:cb:a2: 45:b2:c2:62:f9:2e:2a:f1:fa:29:a6:cf:95:fa:f3: 66:cd:41:32:12:98:04:85:79:4d:76:91:5d:f9:9c: 58:93:3f:cd:3b:8a:c6:85:a4:a7:1b:de:98:4a:89: 5d:17:6a:b1:fe:03:21:6c:8b:77:a3:a9:d5:7d:ab: 77:dd:94:68:56:ca:e0:92:cf:67:3b:02:79:a2:a7: 72:1b:a1:b7:89:8a:2e:de:84:04:96:ed:65:d6:29: 34:4b:5c:46:4c:5e:82:f2:df:ef:1b:95:67:ee:00: e4:c2:6c:d2:fe:a6:5b:58:ca:bb:0b:b8:b6:ae:50: da:69:2a:d8:f0:1a:91:e2:71:29:bb:c6:14:7e:4a: 9c:b4:b3:56:18:20:40:f3:2d:1a:7d:4b:ac:39:9b: a5:2a:86:fe:9c:be:22:02:fa:a9:2e:bd:27:99:f7: 8b:ea:a7:b0:d0:27:6d:06:b6:77:d0:e4:02:18:4b: c2:49:db:0d:b2:0b:53:45:c7:69:75:45:2c:ba:b2: 58:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:58:4E:04:3D:D0:DE:24:52:67:BC:B8:06:BD:F6:B5:E7:31:82:1B X509v3 Authority Key Identifier: keyid:4B:A4:51:1F:4B:81:C5:65:CE:D3:E7:0B:30:20:FB:D0:ED:05:56:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_973e7a98a71b49ffbb22b76ed5f129e2/0/4BA4511F4B81C565CED3E70B3020FBD0ED05562F.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/4BA4511F4B81C565CED3E70B3020FBD0ED05562F.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_973e7a98a71b49ffbb22b76ed5f129e2/0/4BA4511F4B81C565CED3E70B3020FBD0ED05562F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6f:95:b9:26:c0:3b:9b:a2:45:75:44:da:09:24:79:4c:31:5b: 80:c7:00:12:4b:29:c2:f1:04:cd:e8:df:f5:ea:16:05:29:cd: 6e:76:65:1c:1d:55:cc:2b:73:30:01:af:3a:90:08:04:87:fd: 45:eb:79:dc:83:05:81:54:fa:64:4f:40:92:3e:bb:28:2c:f3: 7f:fd:e6:02:84:51:72:66:3f:ed:2e:af:0b:bc:07:9f:5c:9f: f9:85:49:0d:36:6e:22:e9:cc:4b:e0:37:33:8f:b7:f8:02:82: b9:88:d5:ac:a4:c5:d1:40:70:e0:cb:00:e8:09:45:04:3a:15: 6f:a5:c8:49:e7:5d:6c:b7:2a:db:74:ce:a3:30:e2:d3:7a:54: ea:6f:9b:12:9d:92:a4:d4:41:6f:a4:0a:19:eb:eb:a1:9d:81: 95:37:4e:50:da:1b:0c:9c:b7:8c:f0:e4:b4:52:be:ba:b5:af: 68:ff:42:e0:e2:32:1b:c0:39:5f:5e:1d:92:3f:0c:a2:03:52: 0e:f3:17:d3:92:dc:15:45:75:88:05:ca:29:4f:6a:7a:e7:4e: a9:9d:22:63:f3:f5:3b:90:12:9f:15:1d:f4:b3:87:9c:3f:da: a3:e2:da:4c:10:b8:78:c6:2c:c5:d2:1c:a4:48:52:dc:55:8e: cc:ad:5e:7b -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIUNpUaoxywWid6mu3cG6Wm/jkm3ZkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEJBNDUxMUY0QjgxQzU2NUNFRDNFNzBCMzAyMEZCRDBF RDA1NTYyRjAeFw0yNTEwMjcwNTA2NTZaFw0yNTEwMjgwNjU4NTZaMDMxMTAvBgNV BAMTKEQxNTg0RTA0M0REMERFMjQ1MjY3QkNCODA2QkRGNkI1RTczMTgyMUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCEKFFyifpsJ2L8jHRc2N9Zq5ln /jr2RB+HJmPuM6Dkn7GLhSPaKkwusB8TwSezLtt6gK/QgUWbOoTLokWywmL5Lirx +immz5X682bNQTISmASFeU12kV35nFiTP807isaFpKcb3phKiV0XarH+AyFsi3ej qdV9q3fdlGhWyuCSz2c7Anmip3IbobeJii7ehASW7WXWKTRLXEZMXoLy3+8blWfu AOTCbNL+pltYyrsLuLauUNppKtjwGpHicSm7xhR+Spy0s1YYIEDzLRp9S6w5m6Uq hv6cviIC+qkuvSeZ94vqp7DQJ20GtnfQ5AIYS8JJ2w2yC1NFx2l1RSy6slilAgMB AAGjggJ4MIICdDAdBgNVHQ4EFgQU0VhOBD3Q3iRSZ7y4Br32tecxghswHwYDVR0j BBgwFoAUS6RRH0uBxWXO0+cLMCD70O0FVi8wDgYDVR0PAQH/BAQDAgeAMIGPBgNV HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv cmVwby9ycGtpX2NhXzk3M2U3YTk4YTcxYjQ5ZmZiYjIyYjc2ZWQ1ZjEyOWUyLzAv NEJBNDUxMUY0QjgxQzU2NUNFRDNFNzBCMzAyMEZCRDBFRDA1NTYyRi5jcmwwgZ4G CCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5wYWFz LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQxYjUtODJh MC1mMGQwMmMwM2EyYzYvNy80QkE0NTExRjRCODFDNTY1Q0VEM0U3MEIzMDIwRkJE MEVEMDU1NjJGLmNlcjCBmgYIKwYBBQUHAQsEgY0wgYowgYcGCCsGAQUFBzALhnty c3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQvcmVwby9ycGtpX2NhXzk3M2U3 YTk4YTcxYjQ5ZmZiYjIyYjc2ZWQ1ZjEyOWUyLzAvNEJBNDUxMUY0QjgxQzU2NUNF RDNFNzBCMzAyMEZCRDBFRDA1NTYyRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAG+VuSbAO5uiRXVE2gkk eUwxW4DHABJLKcLxBM3o3/XqFgUpzW52ZRwdVcwrczABrzqQCASH/UXredyDBYFU +mRPQJI+uygs83/95gKEUXJmP+0urwu8B59cn/mFSQ02biLpzEvgNzOPt/gCgrmI 1aykxdFAcODLAOgJRQQ6FW+lyEnnXWy3Ktt0zqMw4tN6VOpvmxKdkqTUQW+kChnr 66GdgZU3TlDaGwyct4zw5LRSvrq1r2j/QuDiMhvAOV9eHZI/DKIDUg7zF9OS3BVF dYgFyilPanrnTqmdImPz9TuQEp8VHfSzh5w/2qPi2kwQuHjGLMXSHKRIUtxVjsyt Xns= -----END CERTIFICATE-----Generated at Mon Oct 27 15:22:34 2025 by rpki-client