$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_973e7a98a71b49ffbb22b76ed5f129e2/0/4BA4511F4B81C565CED3E70B3020FBD0ED05562F.mft File: 4BA4511F4B81C565CED3E70B3020FBD0ED05562F.mft (raw, json) Hash identifier: dIUkK32NmjXmWvHeS9xPRv9Bu6KN+GwzSvPKe6JVYzU= Subject key identifier: DF:0A:77:15:A5:A7:F5:A1:75:D8:7C:50:DB:A4:C4:2D:B8:18:8E:DE Authority key identifier: 4B:A4:51:1F:4B:81:C5:65:CE:D3:E7:0B:30:20:FB:D0:ED:05:56:2F Certificate issuer: /CN=4BA4511F4B81C565CED3E70B3020FBD0ED05562F Certificate serial: 17C9719B3C34D3E61BAC2D5B17592699A3621E8E Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/4BA4511F4B81C565CED3E70B3020FBD0ED05562F.cer Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_973e7a98a71b49ffbb22b76ed5f129e2/0/4BA4511F4B81C565CED3E70B3020FBD0ED05562F.mft Manifest number: 0376 Signing time: Sat 13 Jun 2026 10:56:06 +0000 Manifest this update: Sat 13 Jun 2026 10:51:06 +0000 Manifest next update: Sun 14 Jun 2026 14:19:06 +0000 Files and hashes: 1: 4BA4511F4B81C565CED3E70B3020FBD0ED05562F.crl (hash: KNjZ14z8TniwiAgKRmmybnjIPljryCh1iatZFCysqmg=) Validation: OK Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_973e7a98a71b49ffbb22b76ed5f129e2/0/4BA4511F4B81C565CED3E70B3020FBD0ED05562F.crl rsync://rpki-repo.as207960.net/repo/rpki_ca_973e7a98a71b49ffbb22b76ed5f129e2/0/4BA4511F4B81C565CED3E70B3020FBD0ED05562F.mft rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/4BA4511F4B81C565CED3E70B3020FBD0ED05562F.cer rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Jun 2026 13:17:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:c9:71:9b:3c:34:d3:e6:1b:ac:2d:5b:17:59:26:99:a3:62:1e:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4BA4511F4B81C565CED3E70B3020FBD0ED05562F Validity Not Before: Jun 13 10:51:06 2026 GMT Not After : Jun 14 14:19:06 2026 GMT Subject: CN=DF0A7715A5A7F5A175D87C50DBA4C42DB8188EDE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:fd:51:f8:45:fb:14:80:c3:ac:fc:c7:2d:e9: 6b:6c:61:c0:ef:75:65:8b:37:8c:fb:19:a6:4e:f9: 8b:98:97:ab:ce:0b:b8:91:3a:f1:ae:3b:23:84:90: 40:fd:4c:e3:48:33:31:36:91:8d:05:44:fe:ac:8c: d1:40:86:1d:4c:72:eb:b9:7a:8a:41:60:b1:30:c5: 31:d5:a7:9f:62:d1:df:2d:5c:c3:14:57:30:82:a2: 21:47:f2:af:ac:ac:29:6d:64:11:06:e9:b4:88:87: 37:a7:a3:e4:35:fd:59:df:ca:52:ab:00:a7:aa:04: 58:47:3b:fb:c9:bc:c3:55:79:1a:50:3b:ea:48:15: 08:93:0b:81:d4:6c:8a:42:8f:7b:af:7b:53:c5:f3: 89:ed:46:04:4c:5d:23:14:c4:83:33:8f:7f:71:bd: b4:d9:d7:16:59:dc:ff:a4:17:87:bd:ca:4b:1b:1f: 15:dc:ed:5b:2f:58:7a:e5:7a:e1:eb:da:4c:b8:97: e7:ca:c0:a6:d0:57:99:bc:ff:cb:1c:2f:c1:ff:59: 7a:93:4b:71:d3:82:ee:fb:40:35:f7:0d:0e:bd:60: 02:12:cc:09:03:0d:0d:4a:55:2b:8f:7c:91:23:dd: 90:78:69:76:90:45:89:98:2f:9f:0f:5e:3e:6d:22: 07:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:0A:77:15:A5:A7:F5:A1:75:D8:7C:50:DB:A4:C4:2D:B8:18:8E:DE X509v3 Authority Key Identifier: keyid:4B:A4:51:1F:4B:81:C5:65:CE:D3:E7:0B:30:20:FB:D0:ED:05:56:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_973e7a98a71b49ffbb22b76ed5f129e2/0/4BA4511F4B81C565CED3E70B3020FBD0ED05562F.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/4BA4511F4B81C565CED3E70B3020FBD0ED05562F.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_973e7a98a71b49ffbb22b76ed5f129e2/0/4BA4511F4B81C565CED3E70B3020FBD0ED05562F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:fc:aa:5c:34:8d:bc:09:2a:d5:c0:ce:ae:45:16:12:b8:0a: e6:e0:1a:b1:48:7d:07:d8:a6:97:c6:17:67:23:b1:80:15:08: 0d:2c:91:d9:05:af:47:29:69:05:9b:c3:ba:93:e9:56:0f:4e: 04:56:1b:40:0b:3e:63:8d:62:73:30:12:5d:0b:d2:9e:85:4f: 4a:fc:6d:d3:e4:81:94:58:29:08:d3:9d:d0:df:80:dd:ef:86: 7c:5b:ae:c1:70:d5:6c:21:61:e0:2e:a2:a7:1f:a2:b3:b4:ba: 36:9b:ee:86:b0:47:d8:fd:1d:34:04:4a:40:d1:fe:de:0b:44: 6e:f4:80:3c:4e:da:2c:0a:67:d6:ff:48:fe:fc:4a:2e:fd:20: 79:db:9c:aa:c7:4d:3f:73:7c:1e:ed:b9:39:d7:2f:56:d1:2b: 36:7e:44:2c:32:0f:f1:cd:63:0a:a5:be:ec:fa:6a:c1:72:cd: 06:02:0a:98:3b:90:5e:ee:c1:e2:47:f9:4c:87:37:8e:70:0e: bb:10:f0:4a:0c:5b:25:9e:41:62:95:62:c4:cc:62:da:df:7c: 6c:e7:c7:87:99:b0:fc:eb:34:12:c2:d9:53:60:85:93:33:f9: d4:53:d8:0b:0b:25:85:27:de:6f:60:64:16:2a:f0:95:07:b9: 14:40:39:96 -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIUF8lxmzw00+YbrC1bF1kmmaNiHo4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEJBNDUxMUY0QjgxQzU2NUNFRDNFNzBCMzAyMEZCRDBF RDA1NTYyRjAeFw0yNjA2MTMxMDUxMDZaFw0yNjA2MTQxNDE5MDZaMDMxMTAvBgNV BAMTKERGMEE3NzE1QTVBN0Y1QTE3NUQ4N0M1MERCQTRDNDJEQjgxODhFREUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDF/VH4RfsUgMOs/Mct6WtsYcDv dWWLN4z7GaZO+YuYl6vOC7iROvGuOyOEkED9TONIMzE2kY0FRP6sjNFAhh1Mcuu5 eopBYLEwxTHVp59i0d8tXMMUVzCCoiFH8q+srCltZBEG6bSIhzeno+Q1/VnfylKr AKeqBFhHO/vJvMNVeRpQO+pIFQiTC4HUbIpCj3uve1PF84ntRgRMXSMUxIMzj39x vbTZ1xZZ3P+kF4e9yksbHxXc7VsvWHrleuHr2ky4l+fKwKbQV5m8/8scL8H/WXqT S3HTgu77QDX3DQ69YAISzAkDDQ1KVSuPfJEj3ZB4aXaQRYmYL58PXj5tIgd/AgMB AAGjggJ4MIICdDAdBgNVHQ4EFgQU3wp3FaWn9aF12HxQ26TELbgYjt4wHwYDVR0j BBgwFoAUS6RRH0uBxWXO0+cLMCD70O0FVi8wDgYDVR0PAQH/BAQDAgeAMIGPBgNV HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv cmVwby9ycGtpX2NhXzk3M2U3YTk4YTcxYjQ5ZmZiYjIyYjc2ZWQ1ZjEyOWUyLzAv NEJBNDUxMUY0QjgxQzU2NUNFRDNFNzBCMzAyMEZCRDBFRDA1NTYyRi5jcmwwgZ4G CCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5wYWFz LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQxYjUtODJh MC1mMGQwMmMwM2EyYzYvNy80QkE0NTExRjRCODFDNTY1Q0VEM0U3MEIzMDIwRkJE MEVEMDU1NjJGLmNlcjCBmgYIKwYBBQUHAQsEgY0wgYowgYcGCCsGAQUFBzALhnty c3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQvcmVwby9ycGtpX2NhXzk3M2U3 YTk4YTcxYjQ5ZmZiYjIyYjc2ZWQ1ZjEyOWUyLzAvNEJBNDUxMUY0QjgxQzU2NUNF RDNFNzBCMzAyMEZCRDBFRDA1NTYyRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBACn8qlw0jbwJKtXAzq5F FhK4CubgGrFIfQfYppfGF2cjsYAVCA0skdkFr0cpaQWbw7qT6VYPTgRWG0ALPmON YnMwEl0L0p6FT0r8bdPkgZRYKQjTndDfgN3vhnxbrsFw1WwhYeAuoqcforO0ujab 7oawR9j9HTQESkDR/t4LRG70gDxO2iwKZ9b/SP78Si79IHnbnKrHTT9zfB7tuTnX L1bRKzZ+RCwyD/HNYwqlvuz6asFyzQYCCpg7kF7uweJH+UyHN45wDrsQ8EoMWyWe QWKVYsTMYtrffGznx4eZsPzrNBLC2VNghZMz+dRT2AsLJYUn3m9gZBYq8JUHuRRA OZY= -----END CERTIFICATE-----Generated at Sat Jun 13 23:16:24 2026 by rpki-client