$ rpki-client -vvvf rpki-repo.as207960.net/repo/rpki_ca_973e7a98a71b49ffbb22b76ed5f129e2/0/4BA4511F4B81C565CED3E70B3020FBD0ED05562F.mft File: 4BA4511F4B81C565CED3E70B3020FBD0ED05562F.mft (raw, json) Hash identifier: 1q8jkTZtzXjd2peKqEUw3uFAvfCkSU810vRrshcM+r8= Subject key identifier: C1:0B:AC:25:05:5F:A4:92:A0:FD:DF:F2:40:E1:82:1F:09:AC:5A:E5 Authority key identifier: 4B:A4:51:1F:4B:81:C5:65:CE:D3:E7:0B:30:20:FB:D0:ED:05:56:2F Certificate issuer: /CN=4BA4511F4B81C565CED3E70B3020FBD0ED05562F Certificate serial: 09ECED6BB284D48A1CA78277474FEDF5385C278C Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/4BA4511F4B81C565CED3E70B3020FBD0ED05562F.cer Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_973e7a98a71b49ffbb22b76ed5f129e2/0/4BA4511F4B81C565CED3E70B3020FBD0ED05562F.mft Manifest number: 03EC Signing time: Thu 24 Sep 2026 01:26:37 +0000 Manifest this update: Thu 24 Sep 2026 01:21:37 +0000 Manifest next update: Fri 25 Sep 2026 04:29:37 +0000 Files and hashes: 1: 4BA4511F4B81C565CED3E70B3020FBD0ED05562F.crl (hash: 4kzThIriZLXCq3+r9IfRbgqOnr6FScHBQC8Tg3UUS/8=) Validation: OK Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_973e7a98a71b49ffbb22b76ed5f129e2/0/4BA4511F4B81C565CED3E70B3020FBD0ED05562F.crl rsync://rpki-repo.as207960.net/repo/rpki_ca_973e7a98a71b49ffbb22b76ed5f129e2/0/4BA4511F4B81C565CED3E70B3020FBD0ED05562F.mft rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/4BA4511F4B81C565CED3E70B3020FBD0ED05562F.cer rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 25 Sep 2026 04:29:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:ec:ed:6b:b2:84:d4:8a:1c:a7:82:77:47:4f:ed:f5:38:5c:27:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4BA4511F4B81C565CED3E70B3020FBD0ED05562F Validity Not Before: Sep 24 01:21:37 2026 GMT Not After : Sep 25 04:29:37 2026 GMT Subject: CN=C10BAC25055FA492A0FDDFF240E1821F09AC5AE5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:78:45:84:ec:63:9b:1d:c8:2c:25:30:c1:00: 2c:08:56:71:f0:30:7d:fa:06:8f:4f:57:ff:2f:3a: 19:7d:de:d8:9c:01:ba:75:17:8a:29:8d:9e:01:da: a6:bf:db:6b:2a:56:b0:e5:fb:2c:cf:1d:4d:2f:2e: c9:64:c0:c2:49:a3:08:0c:d3:b1:b5:37:d1:1b:3d: 01:a4:ca:b2:e6:99:98:be:af:3f:11:1f:28:e0:22: e2:0f:9b:b6:81:df:29:ab:44:0e:b9:a1:55:58:b1: d2:de:f2:b5:47:79:8c:dc:54:39:e9:66:a4:d7:9a: d5:78:35:f8:a4:1b:d7:ff:18:3c:8a:f9:d5:10:8e: 1e:d9:a7:27:bd:b7:97:8d:9c:db:b6:14:a5:9e:4b: 7f:7b:8d:5e:1a:a9:fc:6b:78:ee:50:9c:7a:74:56: 8b:e4:18:8d:b0:06:e9:dc:4b:97:d6:99:76:35:d9: 42:f7:31:fc:fb:bd:26:01:ad:49:44:cd:00:5e:75: 87:40:84:d9:2b:b3:fa:36:ad:25:a4:fa:4a:4b:4c: fc:be:90:71:73:9a:48:db:51:2b:43:cf:af:1d:c1: 46:6c:2e:89:d8:ea:85:f1:7d:b7:4d:97:7b:ec:a8: c5:12:f0:5a:7d:5f:37:6d:1e:1d:62:88:49:2b:e1: 9d:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:0B:AC:25:05:5F:A4:92:A0:FD:DF:F2:40:E1:82:1F:09:AC:5A:E5 X509v3 Authority Key Identifier: keyid:4B:A4:51:1F:4B:81:C5:65:CE:D3:E7:0B:30:20:FB:D0:ED:05:56:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_973e7a98a71b49ffbb22b76ed5f129e2/0/4BA4511F4B81C565CED3E70B3020FBD0ED05562F.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/4BA4511F4B81C565CED3E70B3020FBD0ED05562F.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_973e7a98a71b49ffbb22b76ed5f129e2/0/4BA4511F4B81C565CED3E70B3020FBD0ED05562F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:c1:61:ae:2c:e6:6b:db:66:ae:8d:56:bd:bc:a1:46:fb:b2: 36:29:05:03:a9:a6:49:c0:e2:46:dc:dd:11:4b:38:f8:7e:7c: 4f:50:25:18:b1:2a:1a:51:4b:40:b3:5d:f2:e9:a9:c1:66:c8: db:d1:a0:eb:d9:86:e0:73:4e:95:c0:e2:1e:c0:23:28:f6:32: 6d:02:1b:e3:d7:47:19:0f:55:8c:5a:3c:4e:fe:94:91:f2:ff: 0f:9d:40:72:5b:70:aa:42:2d:c9:90:c9:3f:7d:11:15:0e:2f: 0c:fe:3b:cc:84:9f:2f:6f:ca:d3:2c:a9:e5:d9:12:93:67:be: 00:c1:90:67:98:cc:19:6a:1d:ee:25:17:76:f2:87:cc:f5:7c: 2e:7c:32:6c:9e:d7:95:0e:17:d2:b8:56:1c:48:c4:7e:06:7f: ca:ef:4a:e5:c6:32:4a:8b:99:f6:a0:fc:cb:17:07:61:be:78: 1c:9c:1a:1d:5c:a6:fb:ab:d5:fc:7f:ec:42:14:2d:2f:98:fd: 32:1f:95:6e:9c:de:5d:28:61:83:e2:ca:3c:9b:9f:80:0d:ad: 08:35:7e:6c:5e:86:b1:c8:fc:15:0b:fb:ae:75:ba:8d:7e:57: 95:8f:d4:12:e6:2b:88:e9:37:a2:b6:8a:30:1d:14:77:84:26: 3f:43:fd:c2 -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIUCezta7KE1Iocp4J3R0/t9ThcJ4wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEJBNDUxMUY0QjgxQzU2NUNFRDNFNzBCMzAyMEZCRDBF RDA1NTYyRjAeFw0yNjA5MjQwMTIxMzdaFw0yNjA5MjUwNDI5MzdaMDMxMTAvBgNV BAMTKEMxMEJBQzI1MDU1RkE0OTJBMEZEREZGMjQwRTE4MjFGMDlBQzVBRTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4eEWE7GObHcgsJTDBACwIVnHw MH36Bo9PV/8vOhl93ticAbp1F4opjZ4B2qa/22sqVrDl+yzPHU0vLslkwMJJowgM 07G1N9EbPQGkyrLmmZi+rz8RHyjgIuIPm7aB3ymrRA65oVVYsdLe8rVHeYzcVDnp ZqTXmtV4NfikG9f/GDyK+dUQjh7Zpye9t5eNnNu2FKWeS397jV4aqfxreO5QnHp0 VovkGI2wBuncS5fWmXY12UL3Mfz7vSYBrUlEzQBedYdAhNkrs/o2rSWk+kpLTPy+ kHFzmkjbUStDz68dwUZsLonY6oXxfbdNl3vsqMUS8Fp9XzdtHh1iiEkr4Z27AgMB AAGjggJ4MIICdDAdBgNVHQ4EFgQUwQusJQVfpJKg/d/yQOGCHwmsWuUwHwYDVR0j BBgwFoAUS6RRH0uBxWXO0+cLMCD70O0FVi8wDgYDVR0PAQH/BAQDAgeAMIGPBgNV HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv cmVwby9ycGtpX2NhXzk3M2U3YTk4YTcxYjQ5ZmZiYjIyYjc2ZWQ1ZjEyOWUyLzAv NEJBNDUxMUY0QjgxQzU2NUNFRDNFNzBCMzAyMEZCRDBFRDA1NTYyRi5jcmwwgZ4G CCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5wYWFz LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQxYjUtODJh MC1mMGQwMmMwM2EyYzYvNy80QkE0NTExRjRCODFDNTY1Q0VEM0U3MEIzMDIwRkJE MEVEMDU1NjJGLmNlcjCBmgYIKwYBBQUHAQsEgY0wgYowgYcGCCsGAQUFBzALhnty c3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQvcmVwby9ycGtpX2NhXzk3M2U3 YTk4YTcxYjQ5ZmZiYjIyYjc2ZWQ1ZjEyOWUyLzAvNEJBNDUxMUY0QjgxQzU2NUNF RDNFNzBCMzAyMEZCRDBFRDA1NTYyRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAA/BYa4s5mvbZq6NVr28 oUb7sjYpBQOppknA4kbc3RFLOPh+fE9QJRixKhpRS0CzXfLpqcFmyNvRoOvZhuBz TpXA4h7AIyj2Mm0CG+PXRxkPVYxaPE7+lJHy/w+dQHJbcKpCLcmQyT99ERUOLwz+ O8yEny9vytMsqeXZEpNnvgDBkGeYzBlqHe4lF3byh8z1fC58Mmye15UOF9K4VhxI xH4Gf8rvSuXGMkqLmfag/MsXB2G+eBycGh1cpvur1fx/7EIULS+Y/TIflW6c3l0o YYPiyjybn4ANrQg1fmxehrHI/BUL+651uo1+V5WP1BLmK4jpN6K2ijAdFHeEJj9D /cI= -----END CERTIFICATE-----Generated at Thu Sep 24 19:23:43 2026 by rpki-client