$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_9d839ca0a55e42a49d10de071f46598b/0/970AD94C83244100A97F9186D53DADAB07995EE9.mft File: 970AD94C83244100A97F9186D53DADAB07995EE9.mft (raw, json) Hash identifier: YTIqen/v0Rf7FvBLoZljbr92HLPLaxSoXOjJUsk2UrM= Subject key identifier: BC:96:62:7D:34:5E:EF:FC:12:04:F0:D8:EE:0A:6F:D9:A9:68:EC:F8 Authority key identifier: 97:0A:D9:4C:83:24:41:00:A9:7F:91:86:D5:3D:AD:AB:07:99:5E:E9 Certificate issuer: /CN=970AD94C83244100A97F9186D53DADAB07995EE9 Certificate serial: 47F4955A11F91420E544CE67F4E3879FC8F259D8 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/970AD94C83244100A97F9186D53DADAB07995EE9.cer Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_9d839ca0a55e42a49d10de071f46598b/0/970AD94C83244100A97F9186D53DADAB07995EE9.mft Manifest number: 0335 Signing time: Wed 29 Apr 2026 23:07:04 +0000 Manifest this update: Wed 29 Apr 2026 23:02:04 +0000 Manifest next update: Fri 01 May 2026 01:54:04 +0000 Files and hashes: 1: 326131313a663263303a666666363a3a2f34382d3438203d3e20323132323435.roa (hash: KUWIZJqj2P5+rqMCtyxvRjTojjJdo7mG970P3wqCh/c=) 2: 326131313a663263303a616361303a3a2f34342d3438203d3e20323132323435.roa (hash: CCNk9XY2QHD/b3jWZi363Jj900j75CnbAukUts4RWyQ=) 3: 970AD94C83244100A97F9186D53DADAB07995EE9.crl (hash: FCxMM6jVKXT0YXZPbzuLk4nRLJd6FKsaM36MmqW7+O8=) Validation: OK Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_9d839ca0a55e42a49d10de071f46598b/0/970AD94C83244100A97F9186D53DADAB07995EE9.crl rsync://rpki-repo.as207960.net/repo/rpki_ca_9d839ca0a55e42a49d10de071f46598b/0/970AD94C83244100A97F9186D53DADAB07995EE9.mft rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/970AD94C83244100A97F9186D53DADAB07995EE9.cer rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 01 May 2026 01:54:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:f4:95:5a:11:f9:14:20:e5:44:ce:67:f4:e3:87:9f:c8:f2:59:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=970AD94C83244100A97F9186D53DADAB07995EE9 Validity Not Before: Apr 29 23:02:04 2026 GMT Not After : May 1 01:54:04 2026 GMT Subject: CN=BC96627D345EEFFC1204F0D8EE0A6FD9A968ECF8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:f4:23:4a:09:26:04:35:11:6b:1d:c7:ab:b4: 7b:0d:f7:fe:c3:ad:35:0c:04:03:5b:0b:b3:de:72: 8d:36:2b:cb:8e:38:9f:f9:3a:0f:a6:93:b8:f2:29: 5f:ab:11:ca:e8:0f:8e:4b:f5:7b:d1:3f:fb:a2:63: 2e:4f:87:2e:45:f4:87:e3:71:8b:d4:68:f2:fb:2f: 0a:06:db:ae:dd:af:08:38:4b:9f:66:61:b6:94:c6: f5:cb:50:59:99:e2:64:34:6e:d2:8f:94:22:0a:ce: 26:21:6b:42:bb:93:c9:98:fc:44:a3:f4:1f:f0:0a: 70:4a:52:e5:04:c8:91:92:16:29:d6:6e:97:15:f7: 11:be:d8:ad:73:c1:4b:04:17:4c:62:26:f6:e5:cc: 80:0a:b1:29:0e:c6:f0:3d:f7:34:84:d1:56:9e:c9: 71:92:74:2f:51:7f:97:2f:f8:45:10:2c:93:8d:64: da:91:b9:e4:a8:af:ae:9a:a3:ad:4a:7b:4c:2f:a2: 13:cd:9c:39:57:78:27:8d:43:84:e8:a6:13:74:0f: e7:3f:16:f4:67:2e:dd:c7:ba:59:87:b9:01:c3:71: 79:80:79:aa:e9:4d:1e:35:9d:6d:38:2c:31:63:62: 5e:da:97:4a:65:0b:29:bb:c3:dc:71:93:08:6d:0a: 55:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:96:62:7D:34:5E:EF:FC:12:04:F0:D8:EE:0A:6F:D9:A9:68:EC:F8 X509v3 Authority Key Identifier: keyid:97:0A:D9:4C:83:24:41:00:A9:7F:91:86:D5:3D:AD:AB:07:99:5E:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_9d839ca0a55e42a49d10de071f46598b/0/970AD94C83244100A97F9186D53DADAB07995EE9.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/970AD94C83244100A97F9186D53DADAB07995EE9.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_9d839ca0a55e42a49d10de071f46598b/0/970AD94C83244100A97F9186D53DADAB07995EE9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 90:d1:14:fe:a8:d9:e8:b4:0b:82:e0:a8:1d:1e:a5:57:8f:f1: 5a:99:b7:93:53:e2:f6:70:c6:6e:6d:a0:97:14:b3:77:2e:3f: 14:c0:cd:98:c3:9b:7a:f7:c8:c9:93:38:7d:69:a5:1d:fe:a6: cf:80:0a:85:8b:a6:aa:c5:44:0b:1f:2e:40:e4:db:42:4b:4c: a3:32:b8:10:ce:93:8a:68:c1:9e:2d:d8:5d:46:3b:eb:65:47: 28:de:4b:10:4b:43:a2:23:f6:f5:f6:ab:e8:7d:c8:80:35:1e: de:6d:ab:6f:f3:d0:0d:b1:ad:41:45:49:34:dc:c5:19:9a:63: 8e:83:1c:81:98:83:3b:4d:1d:70:9c:23:a1:ea:55:72:e3:1e: b8:c8:7c:30:ec:61:af:44:33:93:2f:1e:72:e5:e2:d8:2c:05: d7:df:59:28:21:4a:b7:f8:26:1d:bd:4e:5c:a9:39:e0:c6:ec: ec:b9:2f:46:0b:5f:60:9a:fc:20:6d:fa:a3:54:63:69:3c:72: 3e:c4:6f:57:9d:f1:75:b9:1b:c9:da:be:38:fd:40:45:dd:60: f8:3b:3c:1c:d5:73:82:7f:83:82:11:1c:22:95:64:68:3c:31: 4f:95:14:52:be:75:06:00:e0:85:f9:f6:59:85:c0:79:6e:53: 7d:3b:c9:6f -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIUR/SVWhH5FCDlRM5n9OOHn8jyWdgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTcwQUQ5NEM4MzI0NDEwMEE5N0Y5MTg2RDUzREFEQUIw Nzk5NUVFOTAeFw0yNjA0MjkyMzAyMDRaFw0yNjA1MDEwMTU0MDRaMDMxMTAvBgNV BAMTKEJDOTY2MjdEMzQ1RUVGRkMxMjA0RjBEOEVFMEE2RkQ5QTk2OEVDRjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCw9CNKCSYENRFrHcertHsN9/7D rTUMBANbC7Peco02K8uOOJ/5Og+mk7jyKV+rEcroD45L9XvRP/uiYy5Phy5F9Ifj cYvUaPL7LwoG267drwg4S59mYbaUxvXLUFmZ4mQ0btKPlCIKziYha0K7k8mY/ESj 9B/wCnBKUuUEyJGSFinWbpcV9xG+2K1zwUsEF0xiJvblzIAKsSkOxvA99zSE0Vae yXGSdC9Rf5cv+EUQLJONZNqRueSor66ao61Ke0wvohPNnDlXeCeNQ4TophN0D+c/ FvRnLt3HulmHuQHDcXmAearpTR41nW04LDFjYl7al0plCym7w9xxkwhtClWvAgMB AAGjggJ4MIICdDAdBgNVHQ4EFgQUvJZifTRe7/wSBPDY7gpv2alo7PgwHwYDVR0j BBgwFoAUlwrZTIMkQQCpf5GG1T2tqweZXukwDgYDVR0PAQH/BAQDAgeAMIGPBgNV HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv cmVwby9ycGtpX2NhXzlkODM5Y2EwYTU1ZTQyYTQ5ZDEwZGUwNzFmNDY1OThiLzAv OTcwQUQ5NEM4MzI0NDEwMEE5N0Y5MTg2RDUzREFEQUIwNzk5NUVFOS5jcmwwgZ4G CCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5wYWFz LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQxYjUtODJh MC1mMGQwMmMwM2EyYzYvNy85NzBBRDk0QzgzMjQ0MTAwQTk3RjkxODZENTNEQURB QjA3OTk1RUU5LmNlcjCBmgYIKwYBBQUHAQsEgY0wgYowgYcGCCsGAQUFBzALhnty c3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQvcmVwby9ycGtpX2NhXzlkODM5 Y2EwYTU1ZTQyYTQ5ZDEwZGUwNzFmNDY1OThiLzAvOTcwQUQ5NEM4MzI0NDEwMEE5 N0Y5MTg2RDUzREFEQUIwNzk5NUVFOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAJDRFP6o2ei0C4LgqB0e pVeP8VqZt5NT4vZwxm5toJcUs3cuPxTAzZjDm3r3yMmTOH1ppR3+ps+ACoWLpqrF RAsfLkDk20JLTKMyuBDOk4powZ4t2F1GO+tlRyjeSxBLQ6Ij9vX2q+h9yIA1Ht5t q2/z0A2xrUFFSTTcxRmaY46DHIGYgztNHXCcI6HqVXLjHrjIfDDsYa9EM5MvHnLl 4tgsBdffWSghSrf4Jh29TlypOeDG7Oy5L0YLX2Ca/CBt+qNUY2k8cj7Eb1ed8XW5 G8navjj9QEXdYPg7PBzVc4J/g4IRHCKVZGg8MU+VFFK+dQYA4IX59lmFwHluU307 yW8= -----END CERTIFICATE-----Generated at Thu Apr 30 15:15:37 2026 by rpki-client