$ rpki-client -vvvf rpki-repo.as207960.net/repo/rpki_ca_973e7a98a71b49ffbb22b76ed5f129e2/0/4BA4511F4B81C565CED3E70B3020FBD0ED05562F.mft File: 4BA4511F4B81C565CED3E70B3020FBD0ED05562F.mft (raw, json) Hash identifier: Lhp2fundDrbiXL5nZtx7xKrWKP5LI791S3G92SxeCbY= Subject key identifier: 4F:8F:10:78:2E:C2:2A:5C:A6:DB:39:BF:A3:90:79:41:42:38:3C:63 Authority key identifier: 4B:A4:51:1F:4B:81:C5:65:CE:D3:E7:0B:30:20:FB:D0:ED:05:56:2F Certificate issuer: /CN=4BA4511F4B81C565CED3E70B3020FBD0ED05562F Certificate serial: 4D965B7B9C0AA80BBB57F6FF9B2097931C7EA394 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/4BA4511F4B81C565CED3E70B3020FBD0ED05562F.cer Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_973e7a98a71b49ffbb22b76ed5f129e2/0/4BA4511F4B81C565CED3E70B3020FBD0ED05562F.mft Manifest number: 03E3 Signing time: Thu 17 Sep 2026 11:36:28 +0000 Manifest this update: Thu 17 Sep 2026 11:31:28 +0000 Manifest next update: Fri 18 Sep 2026 12:30:28 +0000 Files and hashes: 1: 4BA4511F4B81C565CED3E70B3020FBD0ED05562F.crl (hash: D/FtfGSdWc7SClzXtnIQaJUmp8zsN/S1aoHbFbwhU2A=) Validation: OK Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_973e7a98a71b49ffbb22b76ed5f129e2/0/4BA4511F4B81C565CED3E70B3020FBD0ED05562F.crl rsync://rpki-repo.as207960.net/repo/rpki_ca_973e7a98a71b49ffbb22b76ed5f129e2/0/4BA4511F4B81C565CED3E70B3020FBD0ED05562F.mft rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/4BA4511F4B81C565CED3E70B3020FBD0ED05562F.cer rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 18 Sep 2026 12:30:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:96:5b:7b:9c:0a:a8:0b:bb:57:f6:ff:9b:20:97:93:1c:7e:a3:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4BA4511F4B81C565CED3E70B3020FBD0ED05562F Validity Not Before: Sep 17 11:31:28 2026 GMT Not After : Sep 18 12:30:28 2026 GMT Subject: CN=4F8F10782EC22A5CA6DB39BFA390794142383C63 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:5d:8f:25:c3:72:50:54:9d:cb:23:00:e6:6b: 88:e2:0c:fe:dd:d5:e4:b4:33:63:ed:20:a1:eb:d7: 03:cf:a8:6c:7f:28:01:be:59:39:51:1f:c6:5a:6c: 26:d8:ea:63:e3:0e:58:e0:ce:ff:5f:f9:06:c3:04: 3a:85:61:b4:46:2b:9d:d3:04:4d:de:e5:58:c9:b0: f3:2e:00:03:a5:75:c9:4b:90:dd:72:1e:cf:da:5e: 79:47:da:56:f5:9e:bd:11:50:22:e4:77:67:09:0f: 09:3c:db:cb:e8:77:9d:74:b8:b3:28:1e:73:36:b7: a6:a2:8c:4b:6a:f0:c0:51:b1:49:be:3a:dd:8c:4e: 49:a2:b6:66:9b:50:09:4b:32:f2:05:8d:62:32:ee: b8:ef:8f:85:ca:67:23:ab:23:1a:04:cc:c6:29:9b: e4:67:c7:ed:a8:71:36:f2:90:f0:cb:24:e9:73:4b: 23:3c:c9:27:a0:a5:ac:01:77:73:79:db:d3:44:48: d8:10:91:ab:56:3f:99:7a:18:d3:05:ad:1d:0b:fa: 53:af:2f:29:9d:36:d6:32:7d:0a:0e:1b:a0:9a:5e: 7e:ad:1e:95:90:0c:6b:a1:66:7a:11:77:54:1d:d3: 29:76:d8:9d:8e:9d:45:14:48:00:91:d5:45:9c:1d: 30:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:8F:10:78:2E:C2:2A:5C:A6:DB:39:BF:A3:90:79:41:42:38:3C:63 X509v3 Authority Key Identifier: keyid:4B:A4:51:1F:4B:81:C5:65:CE:D3:E7:0B:30:20:FB:D0:ED:05:56:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_973e7a98a71b49ffbb22b76ed5f129e2/0/4BA4511F4B81C565CED3E70B3020FBD0ED05562F.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/4BA4511F4B81C565CED3E70B3020FBD0ED05562F.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_973e7a98a71b49ffbb22b76ed5f129e2/0/4BA4511F4B81C565CED3E70B3020FBD0ED05562F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2d:68:25:96:a4:92:21:b7:6b:f9:6f:6a:25:bb:2d:65:73:8b: 33:b6:70:98:31:eb:e4:37:43:aa:f8:d2:62:ea:58:92:63:e2: 50:e4:6c:d0:a4:a4:fa:18:15:60:a1:f6:e5:37:e2:75:3e:5c: b6:84:53:92:b7:f8:68:0d:09:a3:a6:df:dd:84:7d:17:75:56: ed:9c:db:eb:9f:5c:26:e7:cb:58:bf:84:41:e3:07:f2:78:33: 18:96:0f:5a:ea:3a:89:d2:d9:cd:b3:bc:5c:84:f1:1f:0a:cc: 28:7a:30:b4:56:a5:37:56:eb:7e:b1:aa:b0:cc:02:a2:2d:22: b8:49:a6:ad:be:26:dc:06:37:10:7e:56:b3:27:d7:d2:5b:93: 52:fa:c3:ce:4f:31:56:12:86:92:17:b7:c6:03:4f:7f:6b:dc: 84:30:cc:50:4e:4b:1e:34:fb:19:fc:98:28:59:3b:5b:f3:f5: c2:2c:0b:a1:ef:9d:81:a1:a3:18:95:78:e4:89:a5:eb:f1:4d: cc:de:20:1d:5b:a3:45:28:de:d3:3f:9c:0c:64:29:fb:31:37: 8b:49:b6:b0:e6:37:e6:c0:ac:73:e5:a5:d9:cd:12:e6:b6:a3: 92:bf:f3:8e:62:2a:d6:fb:72:b4:e6:f3:23:9c:00:76:62:40: e5:b8:a4:5f -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIUTZZbe5wKqAu7V/b/myCXkxx+o5QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEJBNDUxMUY0QjgxQzU2NUNFRDNFNzBCMzAyMEZCRDBF RDA1NTYyRjAeFw0yNjA5MTcxMTMxMjhaFw0yNjA5MTgxMjMwMjhaMDMxMTAvBgNV BAMTKDRGOEYxMDc4MkVDMjJBNUNBNkRCMzlCRkEzOTA3OTQxNDIzODNDNjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDuXY8lw3JQVJ3LIwDma4jiDP7d 1eS0M2PtIKHr1wPPqGx/KAG+WTlRH8ZabCbY6mPjDljgzv9f+QbDBDqFYbRGK53T BE3e5VjJsPMuAAOldclLkN1yHs/aXnlH2lb1nr0RUCLkd2cJDwk828vod510uLMo HnM2t6aijEtq8MBRsUm+Ot2MTkmitmabUAlLMvIFjWIy7rjvj4XKZyOrIxoEzMYp m+Rnx+2ocTbykPDLJOlzSyM8ySegpawBd3N529NESNgQkatWP5l6GNMFrR0L+lOv LymdNtYyfQoOG6CaXn6tHpWQDGuhZnoRd1Qd0yl22J2OnUUUSACR1UWcHTCxAgMB AAGjggJ4MIICdDAdBgNVHQ4EFgQUT48QeC7CKlym2zm/o5B5QUI4PGMwHwYDVR0j BBgwFoAUS6RRH0uBxWXO0+cLMCD70O0FVi8wDgYDVR0PAQH/BAQDAgeAMIGPBgNV HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv cmVwby9ycGtpX2NhXzk3M2U3YTk4YTcxYjQ5ZmZiYjIyYjc2ZWQ1ZjEyOWUyLzAv NEJBNDUxMUY0QjgxQzU2NUNFRDNFNzBCMzAyMEZCRDBFRDA1NTYyRi5jcmwwgZ4G CCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5wYWFz LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQxYjUtODJh MC1mMGQwMmMwM2EyYzYvNy80QkE0NTExRjRCODFDNTY1Q0VEM0U3MEIzMDIwRkJE MEVEMDU1NjJGLmNlcjCBmgYIKwYBBQUHAQsEgY0wgYowgYcGCCsGAQUFBzALhnty c3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQvcmVwby9ycGtpX2NhXzk3M2U3 YTk4YTcxYjQ5ZmZiYjIyYjc2ZWQ1ZjEyOWUyLzAvNEJBNDUxMUY0QjgxQzU2NUNF RDNFNzBCMzAyMEZCRDBFRDA1NTYyRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAC1oJZakkiG3a/lvaiW7 LWVzizO2cJgx6+Q3Q6r40mLqWJJj4lDkbNCkpPoYFWCh9uU34nU+XLaEU5K3+GgN CaOm392EfRd1Vu2c2+ufXCbny1i/hEHjB/J4MxiWD1rqOonS2c2zvFyE8R8KzCh6 MLRWpTdW636xqrDMAqItIrhJpq2+JtwGNxB+VrMn19Jbk1L6w85PMVYShpIXt8YD T39r3IQwzFBOSx40+xn8mChZO1vz9cIsC6HvnYGhoxiVeOSJpevxTczeIB1bo0Uo 3tM/nAxkKfsxN4tJtrDmN+bArHPlpdnNEua2o5K/845iKtb7crTm8yOcAHZiQOW4 pF8= -----END CERTIFICATE-----Generated at Thu Sep 17 23:43:13 2026 by rpki-client