$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_973e7a98a71b49ffbb22b76ed5f129e2/0/4BA4511F4B81C565CED3E70B3020FBD0ED05562F.mft File: 4BA4511F4B81C565CED3E70B3020FBD0ED05562F.mft (raw, json) Hash identifier: e510pgGkFuyJHaOed4XNBdbgoTiDp1cmP2GNyvlhR2I= Subject key identifier: D5:FE:E2:74:75:0C:ED:3B:C4:D9:DD:6B:C4:8A:D1:D1:FB:F0:20:20 Authority key identifier: 4B:A4:51:1F:4B:81:C5:65:CE:D3:E7:0B:30:20:FB:D0:ED:05:56:2F Certificate issuer: /CN=4BA4511F4B81C565CED3E70B3020FBD0ED05562F Certificate serial: 157A17C8733D159616376F9CEBDDF8CA1F31846F Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/4BA4511F4B81C565CED3E70B3020FBD0ED05562F.cer Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_973e7a98a71b49ffbb22b76ed5f129e2/0/4BA4511F4B81C565CED3E70B3020FBD0ED05562F.mft Manifest number: 032A Signing time: Fri 17 Apr 2026 17:09:06 +0000 Manifest this update: Fri 17 Apr 2026 17:04:04 +0000 Manifest next update: Sat 18 Apr 2026 18:12:04 +0000 Files and hashes: 1: 4BA4511F4B81C565CED3E70B3020FBD0ED05562F.crl (hash: S1tTBeqmRblzndEbM//Xzzo0+pfBZemyCMCbJ/CkUC0=) Validation: OK Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_973e7a98a71b49ffbb22b76ed5f129e2/0/4BA4511F4B81C565CED3E70B3020FBD0ED05562F.crl rsync://rpki-repo.as207960.net/repo/rpki_ca_973e7a98a71b49ffbb22b76ed5f129e2/0/4BA4511F4B81C565CED3E70B3020FBD0ED05562F.mft rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/4BA4511F4B81C565CED3E70B3020FBD0ED05562F.cer rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 18 Apr 2026 04:33:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:7a:17:c8:73:3d:15:96:16:37:6f:9c:eb:dd:f8:ca:1f:31:84:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4BA4511F4B81C565CED3E70B3020FBD0ED05562F Validity Not Before: Apr 17 17:04:04 2026 GMT Not After : Apr 18 18:12:04 2026 GMT Subject: CN=D5FEE274750CED3BC4D9DD6BC48AD1D1FBF02020 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:6f:61:b5:fe:79:34:d9:fd:9f:3b:f0:c3:55: 50:1d:f2:0a:3b:4c:01:c9:e3:80:36:89:31:3f:9c: 32:56:90:3c:56:3d:85:a6:c5:c4:18:82:bb:fe:c8: ed:b3:97:86:b7:97:83:83:a7:7c:c2:ce:e3:0b:ae: d2:86:05:ad:0f:1e:6c:8a:55:4c:b3:2f:15:c0:f4: 70:03:85:af:d8:f6:74:e8:77:e3:ce:da:1f:6c:00: fc:64:e6:2f:91:24:b6:69:45:36:3c:d6:d7:9e:c1: 64:a5:2d:9e:60:02:12:d5:a9:e1:e0:94:d5:56:76: c3:6c:e0:07:c6:6e:96:b4:75:f6:c9:8e:ea:91:e1: 6e:2a:8b:0f:09:f5:22:bb:6f:9a:da:c2:0d:06:e7: b5:47:43:d7:bc:fa:22:c9:87:35:44:93:a2:86:f1: 58:7f:ac:a8:54:09:e5:d0:92:9e:46:5d:fb:78:71: 6e:a8:80:d6:39:ff:53:30:4f:cf:fa:97:0d:fa:a9: d2:a0:23:61:a8:99:9c:30:02:ec:40:ca:9c:3d:ce: 2e:3d:5d:fe:45:5b:6c:fb:e7:45:e5:3a:9d:2d:18: 51:fd:eb:b3:05:4d:e9:d0:63:66:f1:08:7d:ff:39: 25:09:6b:c7:d0:ec:b9:5b:c6:a0:24:86:6d:a2:b0: 5a:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:FE:E2:74:75:0C:ED:3B:C4:D9:DD:6B:C4:8A:D1:D1:FB:F0:20:20 X509v3 Authority Key Identifier: keyid:4B:A4:51:1F:4B:81:C5:65:CE:D3:E7:0B:30:20:FB:D0:ED:05:56:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_973e7a98a71b49ffbb22b76ed5f129e2/0/4BA4511F4B81C565CED3E70B3020FBD0ED05562F.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/4BA4511F4B81C565CED3E70B3020FBD0ED05562F.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_973e7a98a71b49ffbb22b76ed5f129e2/0/4BA4511F4B81C565CED3E70B3020FBD0ED05562F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:9f:5d:07:9f:ce:4c:49:05:ba:1b:51:cf:91:1a:ce:79:2e: 5f:8f:5f:a8:2a:63:53:4a:3d:12:21:f7:d6:d2:26:1a:c3:99: 98:d1:a3:e2:9d:dc:26:7d:43:83:6c:8b:3b:8a:7f:9c:f5:55: 17:11:82:51:b1:c7:b8:af:16:8a:59:14:aa:9f:ab:3d:f3:80: 96:58:51:52:97:fe:c9:1c:c3:31:da:cc:52:8d:e0:0e:4a:7b: c5:13:aa:37:8e:d6:ef:21:68:0e:ef:ca:bb:cd:84:75:59:20: 97:1a:6a:b1:a2:cf:19:c3:e9:8e:d8:44:70:c9:8b:cc:30:e1: 7a:e4:00:68:95:ca:d9:df:90:d8:38:46:46:18:fa:c6:da:66: 53:0a:84:1c:86:53:ce:7f:9d:fc:b8:67:17:55:8b:71:22:a3: e7:b3:76:a3:c9:0b:45:bc:27:ba:0c:8b:77:53:3a:01:40:51: ed:23:72:aa:11:03:45:2f:52:71:fa:d7:cc:8e:6e:a5:5c:bb: bf:4e:fc:88:24:6b:7e:6a:fa:7e:4b:e5:82:6c:4d:4f:3d:d0: 62:ad:19:00:62:6c:0d:b2:f4:e0:b2:0d:8a:90:51:b8:27:0b: b3:e7:bd:00:a3:0b:1f:b3:df:91:18:3b:b0:f8:71:4c:b9:cf: 00:17:8d:2f -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIUFXoXyHM9FZYWN2+c6934yh8xhG8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEJBNDUxMUY0QjgxQzU2NUNFRDNFNzBCMzAyMEZCRDBF RDA1NTYyRjAeFw0yNjA0MTcxNzA0MDRaFw0yNjA0MTgxODEyMDRaMDMxMTAvBgNV BAMTKEQ1RkVFMjc0NzUwQ0VEM0JDNEQ5REQ2QkM0OEFEMUQxRkJGMDIwMjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGb2G1/nk02f2fO/DDVVAd8go7 TAHJ44A2iTE/nDJWkDxWPYWmxcQYgrv+yO2zl4a3l4ODp3zCzuMLrtKGBa0PHmyK VUyzLxXA9HADha/Y9nTod+PO2h9sAPxk5i+RJLZpRTY81teewWSlLZ5gAhLVqeHg lNVWdsNs4AfGbpa0dfbJjuqR4W4qiw8J9SK7b5rawg0G57VHQ9e8+iLJhzVEk6KG 8Vh/rKhUCeXQkp5GXft4cW6ogNY5/1MwT8/6lw36qdKgI2GomZwwAuxAypw9zi49 Xf5FW2z750XlOp0tGFH967MFTenQY2bxCH3/OSUJa8fQ7LlbxqAkhm2isFoZAgMB AAGjggJ4MIICdDAdBgNVHQ4EFgQU1f7idHUM7TvE2d1rxIrR0fvwICAwHwYDVR0j BBgwFoAUS6RRH0uBxWXO0+cLMCD70O0FVi8wDgYDVR0PAQH/BAQDAgeAMIGPBgNV HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv cmVwby9ycGtpX2NhXzk3M2U3YTk4YTcxYjQ5ZmZiYjIyYjc2ZWQ1ZjEyOWUyLzAv NEJBNDUxMUY0QjgxQzU2NUNFRDNFNzBCMzAyMEZCRDBFRDA1NTYyRi5jcmwwgZ4G CCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5wYWFz LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQxYjUtODJh MC1mMGQwMmMwM2EyYzYvNy80QkE0NTExRjRCODFDNTY1Q0VEM0U3MEIzMDIwRkJE MEVEMDU1NjJGLmNlcjCBmgYIKwYBBQUHAQsEgY0wgYowgYcGCCsGAQUFBzALhnty c3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQvcmVwby9ycGtpX2NhXzk3M2U3 YTk4YTcxYjQ5ZmZiYjIyYjc2ZWQ1ZjEyOWUyLzAvNEJBNDUxMUY0QjgxQzU2NUNF RDNFNzBCMzAyMEZCRDBFRDA1NTYyRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAEmfXQefzkxJBbobUc+R Gs55Ll+PX6gqY1NKPRIh99bSJhrDmZjRo+Kd3CZ9Q4NsizuKf5z1VRcRglGxx7iv FopZFKqfqz3zgJZYUVKX/skcwzHazFKN4A5Ke8UTqjeO1u8haA7vyrvNhHVZIJca arGizxnD6Y7YRHDJi8ww4XrkAGiVytnfkNg4RkYY+sbaZlMKhByGU85/nfy4ZxdV i3Eio+ezdqPJC0W8J7oMi3dTOgFAUe0jcqoRA0UvUnH618yObqVcu79O/Igka35q +n5L5YJsTU890GKtGQBibA2y9OCyDYqQUbgnC7PnvQCjCx+z35EYO7D4cUy5zwAX jS8= -----END CERTIFICATE-----Generated at Fri Apr 17 22:43:24 2026 by rpki-client