$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_973e7a98a71b49ffbb22b76ed5f129e2/0/4BA4511F4B81C565CED3E70B3020FBD0ED05562F.mft File: 4BA4511F4B81C565CED3E70B3020FBD0ED05562F.mft (raw, json) Hash identifier: N86aq/iQ+HYo3aZDQI6wU1Crj8xD1H8foopLuXUB+l4= Subject key identifier: B6:C6:6F:26:B2:65:D9:96:F8:94:14:A8:AF:AB:53:E9:87:A4:2C:81 Authority key identifier: 4B:A4:51:1F:4B:81:C5:65:CE:D3:E7:0B:30:20:FB:D0:ED:05:56:2F Certificate issuer: /CN=4BA4511F4B81C565CED3E70B3020FBD0ED05562F Certificate serial: 788AB6EAFB3B52BC7E33E8BC26DCDF9609D55CC9 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/4BA4511F4B81C565CED3E70B3020FBD0ED05562F.cer Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_973e7a98a71b49ffbb22b76ed5f129e2/0/4BA4511F4B81C565CED3E70B3020FBD0ED05562F.mft Manifest number: 03B2 Signing time: Tue 28 Jul 2026 18:39:28 +0000 Manifest this update: Tue 28 Jul 2026 18:34:28 +0000 Manifest next update: Wed 29 Jul 2026 21:15:28 +0000 Files and hashes: 1: 4BA4511F4B81C565CED3E70B3020FBD0ED05562F.crl (hash: KaqFwZimvgHSbhnAaguDnD+kHfpFg7nXtG2MN6+5n3A=) Validation: OK Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_973e7a98a71b49ffbb22b76ed5f129e2/0/4BA4511F4B81C565CED3E70B3020FBD0ED05562F.crl rsync://rpki-repo.as207960.net/repo/rpki_ca_973e7a98a71b49ffbb22b76ed5f129e2/0/4BA4511F4B81C565CED3E70B3020FBD0ED05562F.mft rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/4BA4511F4B81C565CED3E70B3020FBD0ED05562F.cer rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 29 Jul 2026 21:15:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:8a:b6:ea:fb:3b:52:bc:7e:33:e8:bc:26:dc:df:96:09:d5:5c:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4BA4511F4B81C565CED3E70B3020FBD0ED05562F Validity Not Before: Jul 28 18:34:28 2026 GMT Not After : Jul 29 21:15:28 2026 GMT Subject: CN=B6C66F26B265D996F89414A8AFAB53E987A42C81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:77:e8:84:4e:62:ce:20:f0:92:c7:ea:97:67: 1a:67:ec:40:8f:53:08:c5:a6:f2:fa:09:fe:9f:26: 57:28:c9:33:b9:36:ee:83:01:04:8c:fd:be:70:49: 42:e6:88:9d:95:3f:b5:99:98:ac:92:60:37:fa:9d: ba:bf:aa:dc:62:22:ad:de:2b:22:10:a1:cf:a2:8f: de:1e:bc:d1:90:1d:c7:c6:2c:1d:02:cb:82:e3:8b: 0c:3d:72:ad:74:0f:44:06:d8:88:59:ec:15:3b:df: 9f:bf:80:df:74:37:9c:87:3f:62:4f:40:8c:e6:bf: 90:07:4a:e8:84:18:60:1e:38:dc:d4:db:25:a9:25: 5a:e1:a0:73:ca:dc:af:fb:51:52:72:9b:0c:d5:85: b3:03:4f:9b:30:b4:f9:ed:bd:fa:d5:24:33:26:b9: 5c:e4:c3:b9:46:23:d7:88:d5:f1:c3:50:65:68:e8: da:84:f4:29:0d:a1:f9:f7:04:9d:97:fa:aa:fd:59: 4d:a7:f7:f0:dc:71:b8:72:70:d0:ae:73:49:b6:8b: b9:76:40:cb:3d:fc:df:e5:a1:ee:c6:53:13:b1:8b: 8c:6c:c6:e0:5b:0a:48:d6:33:f3:5b:20:ff:0d:a6: 36:e3:7f:3e:49:ee:06:8e:4a:61:80:93:53:d6:35: e8:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:C6:6F:26:B2:65:D9:96:F8:94:14:A8:AF:AB:53:E9:87:A4:2C:81 X509v3 Authority Key Identifier: keyid:4B:A4:51:1F:4B:81:C5:65:CE:D3:E7:0B:30:20:FB:D0:ED:05:56:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_973e7a98a71b49ffbb22b76ed5f129e2/0/4BA4511F4B81C565CED3E70B3020FBD0ED05562F.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/4BA4511F4B81C565CED3E70B3020FBD0ED05562F.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_973e7a98a71b49ffbb22b76ed5f129e2/0/4BA4511F4B81C565CED3E70B3020FBD0ED05562F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:8a:99:f6:66:1b:4d:f8:48:1e:83:ec:bd:45:6a:1d:3a:e1: 0d:34:3d:67:6f:d5:fa:90:d5:b2:4f:a5:07:ec:ff:15:99:45: 0c:03:a4:9c:d1:0b:ac:98:a3:9c:6a:ae:d5:4e:0f:23:e4:f7: 84:8d:e4:c1:07:a2:05:30:90:cd:25:27:58:6b:73:84:e4:2e: 71:44:8d:c0:b2:e0:70:65:23:31:cd:0a:aa:66:0b:f3:d9:a3: fc:cd:b4:35:a6:24:f7:b9:6f:ec:0a:5c:d3:bf:b4:98:8c:2f: 82:a9:8e:0f:34:b0:0d:16:25:d3:80:59:9d:f6:4b:bb:3b:23: 03:ac:be:77:47:76:6d:cd:68:18:8e:2f:11:79:df:06:41:71: 12:b6:71:8b:87:f6:30:5d:d1:21:8e:64:2b:f9:c3:7f:63:25: a2:34:8f:bf:52:c5:a7:82:a8:03:6c:ee:9b:67:42:77:2e:e9: 55:8d:71:a1:44:0f:bb:66:bd:61:37:08:9d:b0:6f:36:4e:96: f3:c9:da:e2:57:9c:77:a8:1e:f2:6e:6c:0b:7c:84:50:53:a4: 33:b9:1c:c4:16:9c:ab:0a:f1:f5:5a:f1:b6:79:c9:0f:bd:60: 23:9f:80:f5:42:84:ff:a7:92:e8:03:5b:1d:32:02:b3:69:17: 84:a9:2e:ab -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIUeIq26vs7Urx+M+i8JtzflgnVXMkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEJBNDUxMUY0QjgxQzU2NUNFRDNFNzBCMzAyMEZCRDBF RDA1NTYyRjAeFw0yNjA3MjgxODM0MjhaFw0yNjA3MjkyMTE1MjhaMDMxMTAvBgNV BAMTKEI2QzY2RjI2QjI2NUQ5OTZGODk0MTRBOEFGQUI1M0U5ODdBNDJDODEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkd+iETmLOIPCSx+qXZxpn7ECP UwjFpvL6Cf6fJlcoyTO5Nu6DAQSM/b5wSULmiJ2VP7WZmKySYDf6nbq/qtxiIq3e KyIQoc+ij94evNGQHcfGLB0Cy4Ljiww9cq10D0QG2IhZ7BU735+/gN90N5yHP2JP QIzmv5AHSuiEGGAeONzU2yWpJVrhoHPK3K/7UVJymwzVhbMDT5swtPntvfrVJDMm uVzkw7lGI9eI1fHDUGVo6NqE9CkNofn3BJ2X+qr9WU2n9/DccbhycNCuc0m2i7l2 QMs9/N/loe7GUxOxi4xsxuBbCkjWM/NbIP8Npjbjfz5J7gaOSmGAk1PWNeiNAgMB AAGjggJ4MIICdDAdBgNVHQ4EFgQUtsZvJrJl2Zb4lBSor6tT6YekLIEwHwYDVR0j BBgwFoAUS6RRH0uBxWXO0+cLMCD70O0FVi8wDgYDVR0PAQH/BAQDAgeAMIGPBgNV HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv cmVwby9ycGtpX2NhXzk3M2U3YTk4YTcxYjQ5ZmZiYjIyYjc2ZWQ1ZjEyOWUyLzAv NEJBNDUxMUY0QjgxQzU2NUNFRDNFNzBCMzAyMEZCRDBFRDA1NTYyRi5jcmwwgZ4G CCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5wYWFz LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQxYjUtODJh MC1mMGQwMmMwM2EyYzYvNy80QkE0NTExRjRCODFDNTY1Q0VEM0U3MEIzMDIwRkJE MEVEMDU1NjJGLmNlcjCBmgYIKwYBBQUHAQsEgY0wgYowgYcGCCsGAQUFBzALhnty c3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQvcmVwby9ycGtpX2NhXzk3M2U3 YTk4YTcxYjQ5ZmZiYjIyYjc2ZWQ1ZjEyOWUyLzAvNEJBNDUxMUY0QjgxQzU2NUNF RDNFNzBCMzAyMEZCRDBFRDA1NTYyRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBADSKmfZmG034SB6D7L1F ah064Q00PWdv1fqQ1bJPpQfs/xWZRQwDpJzRC6yYo5xqrtVODyPk94SN5MEHogUw kM0lJ1hrc4TkLnFEjcCy4HBlIzHNCqpmC/PZo/zNtDWmJPe5b+wKXNO/tJiML4Kp jg80sA0WJdOAWZ32S7s7IwOsvndHdm3NaBiOLxF53wZBcRK2cYuH9jBd0SGOZCv5 w39jJaI0j79SxaeCqANs7ptnQncu6VWNcaFED7tmvWE3CJ2wbzZOlvPJ2uJXnHeo HvJubAt8hFBTpDO5HMQWnKsK8fVa8bZ5yQ+9YCOfgPVChP+nkugDWx0yArNpF4Sp Lqs= -----END CERTIFICATE-----Generated at Wed Jul 29 03:28:51 2026 by rpki-client