$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_973e7a98a71b49ffbb22b76ed5f129e2/0/4BA4511F4B81C565CED3E70B3020FBD0ED05562F.mft File: 4BA4511F4B81C565CED3E70B3020FBD0ED05562F.mft (raw, json) Hash identifier: +tl13ZaD2rF0IL4e4+YwFgZWEb2QHrNFcxhwnhjugVQ= Subject key identifier: 61:BE:19:AB:7A:95:31:91:3C:CC:68:ED:C7:5A:82:9E:AE:96:7B:05 Authority key identifier: 4B:A4:51:1F:4B:81:C5:65:CE:D3:E7:0B:30:20:FB:D0:ED:05:56:2F Certificate issuer: /CN=4BA4511F4B81C565CED3E70B3020FBD0ED05562F Certificate serial: 6002B47DF6CC658E9331B1C5EDA1D3AAC1A21B9A Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/4BA4511F4B81C565CED3E70B3020FBD0ED05562F.cer Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_973e7a98a71b49ffbb22b76ed5f129e2/0/4BA4511F4B81C565CED3E70B3020FBD0ED05562F.mft Manifest number: 0213 Signing time: Mon 04 Aug 2025 02:05:10 +0000 Manifest this update: Mon 04 Aug 2025 02:00:10 +0000 Manifest next update: Tue 05 Aug 2025 03:14:10 +0000 Files and hashes: 1: 4BA4511F4B81C565CED3E70B3020FBD0ED05562F.crl (hash: +ViJtjipqht0ird6Sp9JTNGhe4W8z9QcWum8WTKbwRA=) Validation: OK Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_973e7a98a71b49ffbb22b76ed5f129e2/0/4BA4511F4B81C565CED3E70B3020FBD0ED05562F.crl rsync://rpki-repo.as207960.net/repo/rpki_ca_973e7a98a71b49ffbb22b76ed5f129e2/0/4BA4511F4B81C565CED3E70B3020FBD0ED05562F.mft rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/4BA4511F4B81C565CED3E70B3020FBD0ED05562F.cer rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 05 Aug 2025 02:33:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:02:b4:7d:f6:cc:65:8e:93:31:b1:c5:ed:a1:d3:aa:c1:a2:1b:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4BA4511F4B81C565CED3E70B3020FBD0ED05562F Validity Not Before: Aug 4 02:00:10 2025 GMT Not After : Aug 5 03:14:10 2025 GMT Subject: CN=61BE19AB7A9531913CCC68EDC75A829EAE967B05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:a2:36:b5:78:bd:34:d7:68:12:c4:45:b1:8c: 22:d6:d8:d9:78:62:f4:72:4f:dd:74:2d:de:70:d5: 6b:e9:7a:d5:3a:47:3d:eb:12:3c:c7:2f:6d:aa:5d: 7f:32:67:63:e7:a9:89:54:5e:80:df:60:81:a5:55: cc:76:9f:0b:65:de:47:c3:6b:08:0e:a5:3e:85:b0: 1a:18:47:ac:af:8d:72:ba:a3:46:44:0e:ed:d2:0c: fe:a5:80:7b:74:2b:07:bb:b8:29:25:aa:b4:5f:b7: 86:f6:62:58:08:08:1a:3e:76:2b:f3:f5:8b:f0:0d: 5e:fa:d3:41:54:3d:ad:a2:eb:16:70:fa:cf:e3:06: b1:0c:31:4b:86:7c:92:13:be:09:69:7e:95:a5:2a: 86:97:a5:1f:22:15:9e:18:f9:38:5f:7b:17:cc:b7: 07:53:62:13:f0:48:f6:02:c9:bb:c4:46:e9:9c:8a: db:1f:1e:ae:ac:51:24:f8:58:2a:da:92:45:34:3a: 54:51:1a:35:c9:50:37:04:c9:59:07:70:21:97:1f: 1f:a0:82:fd:01:21:c7:6a:9c:8d:7f:10:70:d1:2c: 81:a0:12:09:37:66:46:4e:07:0f:df:5d:21:e3:c6: 4b:3c:d6:2a:08:61:95:04:c0:37:49:94:0d:3d:62: ae:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:BE:19:AB:7A:95:31:91:3C:CC:68:ED:C7:5A:82:9E:AE:96:7B:05 X509v3 Authority Key Identifier: keyid:4B:A4:51:1F:4B:81:C5:65:CE:D3:E7:0B:30:20:FB:D0:ED:05:56:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_973e7a98a71b49ffbb22b76ed5f129e2/0/4BA4511F4B81C565CED3E70B3020FBD0ED05562F.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/4BA4511F4B81C565CED3E70B3020FBD0ED05562F.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_973e7a98a71b49ffbb22b76ed5f129e2/0/4BA4511F4B81C565CED3E70B3020FBD0ED05562F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:f2:d0:6d:43:a5:ea:08:a0:4c:9a:a2:87:7e:3b:2c:67:9c: 43:b9:7f:fc:fe:71:c4:fa:93:9b:de:d2:69:7a:65:e5:d7:b3: 21:97:a7:41:71:12:7c:2f:14:1e:bb:64:17:a8:85:32:49:52: f3:75:16:0a:0d:f7:60:a7:2d:8d:cb:46:ea:71:c8:fa:4f:bd: 8b:0a:09:d0:cf:4c:07:3c:96:70:36:20:3a:14:86:79:86:d0: c2:24:a1:b7:33:d3:11:8e:3e:cd:9a:48:d3:98:49:44:d1:b7: 4d:3d:71:e4:28:a5:f8:02:0a:e9:56:5a:95:85:0a:d9:f4:64: 57:49:8d:86:6d:27:0b:07:34:17:67:d4:fb:92:33:9e:d1:8e: cb:fa:35:91:58:3b:04:82:03:a1:62:e1:a7:93:7c:4d:2c:f9: 9c:7c:5f:9e:42:2e:22:3e:b2:bf:f8:f2:b4:f1:34:80:af:ed: 09:24:96:90:bd:93:f4:eb:5b:84:9f:b1:a8:79:cf:94:ec:a5: a4:ec:48:49:db:02:5e:c9:7a:37:41:40:7b:52:99:c3:02:60: 64:13:2c:7f:e9:4b:48:84:95:e0:9d:2a:5b:f2:ef:b2:f3:c3: 88:c1:ca:f1:e3:a2:e8:3a:7c:3e:d9:27:fe:26:8b:be:de:ff: 50:6f:d2:eb -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIUYAK0ffbMZY6TMbHF7aHTqsGiG5owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEJBNDUxMUY0QjgxQzU2NUNFRDNFNzBCMzAyMEZCRDBF RDA1NTYyRjAeFw0yNTA4MDQwMjAwMTBaFw0yNTA4MDUwMzE0MTBaMDMxMTAvBgNV BAMTKDYxQkUxOUFCN0E5NTMxOTEzQ0NDNjhFREM3NUE4MjlFQUU5NjdCMDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwoja1eL0012gSxEWxjCLW2Nl4 YvRyT910Ld5w1WvpetU6Rz3rEjzHL22qXX8yZ2PnqYlUXoDfYIGlVcx2nwtl3kfD awgOpT6FsBoYR6yvjXK6o0ZEDu3SDP6lgHt0Kwe7uCklqrRft4b2YlgICBo+divz 9YvwDV7600FUPa2i6xZw+s/jBrEMMUuGfJITvglpfpWlKoaXpR8iFZ4Y+ThfexfM twdTYhPwSPYCybvERumcitsfHq6sUST4WCrakkU0OlRRGjXJUDcEyVkHcCGXHx+g gv0BIcdqnI1/EHDRLIGgEgk3ZkZOBw/fXSHjxks81ioIYZUEwDdJlA09Yq73AgMB AAGjggJ4MIICdDAdBgNVHQ4EFgQUYb4Zq3qVMZE8zGjtx1qCnq6WewUwHwYDVR0j BBgwFoAUS6RRH0uBxWXO0+cLMCD70O0FVi8wDgYDVR0PAQH/BAQDAgeAMIGPBgNV HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv cmVwby9ycGtpX2NhXzk3M2U3YTk4YTcxYjQ5ZmZiYjIyYjc2ZWQ1ZjEyOWUyLzAv NEJBNDUxMUY0QjgxQzU2NUNFRDNFNzBCMzAyMEZCRDBFRDA1NTYyRi5jcmwwgZ4G CCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5wYWFz LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQxYjUtODJh MC1mMGQwMmMwM2EyYzYvNy80QkE0NTExRjRCODFDNTY1Q0VEM0U3MEIzMDIwRkJE MEVEMDU1NjJGLmNlcjCBmgYIKwYBBQUHAQsEgY0wgYowgYcGCCsGAQUFBzALhnty c3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQvcmVwby9ycGtpX2NhXzk3M2U3 YTk4YTcxYjQ5ZmZiYjIyYjc2ZWQ1ZjEyOWUyLzAvNEJBNDUxMUY0QjgxQzU2NUNF RDNFNzBCMzAyMEZCRDBFRDA1NTYyRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBACzy0G1DpeoIoEyaood+ OyxnnEO5f/z+ccT6k5ve0ml6ZeXXsyGXp0FxEnwvFB67ZBeohTJJUvN1FgoN92Cn LY3LRupxyPpPvYsKCdDPTAc8lnA2IDoUhnmG0MIkobcz0xGOPs2aSNOYSUTRt009 ceQopfgCCulWWpWFCtn0ZFdJjYZtJwsHNBdn1PuSM57Rjsv6NZFYOwSCA6Fi4aeT fE0s+Zx8X55CLiI+sr/48rTxNICv7QkklpC9k/TrW4Sfsah5z5TspaTsSEnbAl7J ejdBQHtSmcMCYGQTLH/pS0iEleCdKlvy77Lzw4jByvHjoug6fD7ZJ/4mi77e/1Bv 0us= -----END CERTIFICATE-----Generated at Mon Aug 4 18:30:11 2025 by rpki-client