$ rpki-client -vvvf rpki-repo.as207960.net/repo/rpki_ca_9d839ca0a55e42a49d10de071f46598b/0/970AD94C83244100A97F9186D53DADAB07995EE9.mft File: 970AD94C83244100A97F9186D53DADAB07995EE9.mft (raw, json) Hash identifier: 1B4bEuaKKWhSNfZxW34nUm3z87hNeOqV4fWSM0OqudQ= Subject key identifier: D2:C4:23:2F:5F:41:58:4A:51:CF:1B:8E:EB:AD:92:74:F5:C8:7B:63 Authority key identifier: 97:0A:D9:4C:83:24:41:00:A9:7F:91:86:D5:3D:AD:AB:07:99:5E:E9 Certificate issuer: /CN=970AD94C83244100A97F9186D53DADAB07995EE9 Certificate serial: 427C95865E41FD62629C9648A0F108E121ADF53C Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/970AD94C83244100A97F9186D53DADAB07995EE9.cer Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_9d839ca0a55e42a49d10de071f46598b/0/970AD94C83244100A97F9186D53DADAB07995EE9.mft Manifest number: 03D2 Signing time: Wed 26 Aug 2026 06:37:48 +0000 Manifest this update: Wed 26 Aug 2026 06:32:48 +0000 Manifest next update: Thu 27 Aug 2026 07:34:48 +0000 Files and hashes: 1: 326131313a663263303a616361303a3a2f34342d3438203d3e20323132323435.roa (hash: 9SYQBw+WVon+uq1bGjlomS1wDEHFsVFbA0dbRqR0nMs=) 2: 970AD94C83244100A97F9186D53DADAB07995EE9.crl (hash: UZ4QiJYroD8k84DyAOqLbTBtajVmy+bnMfw6B+yKV0c=) 3: 326131313a663263303a666666363a3a2f34382d3438203d3e20323132323435.roa (hash: MoaZbbTY7Jqr4LowGTe1KRJNCD2PmKCRt2v7wni6Nh8=) Validation: OK Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_9d839ca0a55e42a49d10de071f46598b/0/970AD94C83244100A97F9186D53DADAB07995EE9.crl rsync://rpki-repo.as207960.net/repo/rpki_ca_9d839ca0a55e42a49d10de071f46598b/0/970AD94C83244100A97F9186D53DADAB07995EE9.mft rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/970AD94C83244100A97F9186D53DADAB07995EE9.cer rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 27 Aug 2026 07:34:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:7c:95:86:5e:41:fd:62:62:9c:96:48:a0:f1:08:e1:21:ad:f5:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=970AD94C83244100A97F9186D53DADAB07995EE9 Validity Not Before: Aug 26 06:32:48 2026 GMT Not After : Aug 27 07:34:48 2026 GMT Subject: CN=D2C4232F5F41584A51CF1B8EEBAD9274F5C87B63 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:13:f1:f7:78:63:e4:84:93:1e:eb:9d:54:f8: 18:2d:e1:8e:23:28:aa:06:4e:71:be:91:68:a7:96: f6:3f:37:13:4e:79:41:51:a3:7e:20:8e:7d:7c:58: 79:53:8d:fa:24:e6:8b:ee:6f:72:e0:2c:18:cd:46: 21:23:45:36:05:f3:4e:2f:97:80:42:d8:2e:20:bf: 03:6b:a3:65:a8:d6:9c:9f:9d:4a:e3:2f:99:03:86: d4:a5:76:1d:41:c3:8a:79:93:c0:4d:24:6d:c0:aa: be:17:73:9b:02:56:9f:27:0d:e9:7f:02:c7:27:60: 09:94:fa:b5:25:65:83:cd:fe:e3:3e:6c:ab:84:ab: 1d:e5:62:bc:df:c4:00:2a:43:b4:d2:36:92:bf:64: 8f:0d:6a:8b:e1:fc:e4:7e:98:ca:21:9b:bf:a1:c5: 6c:5d:52:e8:38:05:0c:bf:9c:5d:80:90:99:89:f8: a8:f9:d5:0d:e2:00:0d:d2:de:7d:1b:72:fc:52:65: 86:bb:3c:a9:8a:f0:df:36:13:f2:c9:7d:93:43:1c: 54:7d:53:e2:35:6f:35:97:d5:6b:e8:8e:0d:17:15: 4f:59:05:ff:8f:54:bd:f4:01:46:c9:0b:c9:36:03: c1:c1:56:24:c1:b3:26:48:40:66:7c:60:22:7a:3e: 3d:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:C4:23:2F:5F:41:58:4A:51:CF:1B:8E:EB:AD:92:74:F5:C8:7B:63 X509v3 Authority Key Identifier: keyid:97:0A:D9:4C:83:24:41:00:A9:7F:91:86:D5:3D:AD:AB:07:99:5E:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_9d839ca0a55e42a49d10de071f46598b/0/970AD94C83244100A97F9186D53DADAB07995EE9.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/970AD94C83244100A97F9186D53DADAB07995EE9.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_9d839ca0a55e42a49d10de071f46598b/0/970AD94C83244100A97F9186D53DADAB07995EE9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:34:ef:0e:d7:07:a8:86:90:16:bf:56:72:39:a4:05:a7:66: 8e:f9:ec:e2:ab:cc:63:2e:32:4e:07:18:e6:3e:2c:81:2e:d7: f8:e7:f8:af:b0:18:94:4f:7e:65:6e:88:11:25:20:21:af:ff: da:59:bc:62:15:25:c4:62:f8:d9:10:42:75:c9:64:41:40:79: 80:58:ee:bd:e9:1f:19:ac:5a:2d:34:12:ad:d2:66:18:2a:cb: 87:ac:5a:55:0f:f5:13:58:89:db:49:87:ea:ab:4d:0d:eb:9a: c4:96:d1:3f:a8:fc:8f:83:13:24:2f:10:11:cc:8a:06:50:d0: 2b:f4:d2:fd:27:19:1c:b2:fa:28:56:4c:cc:bf:96:40:81:4d: ea:ee:0f:09:35:28:b1:8f:5b:a9:f7:c3:1e:a4:89:34:30:7d: cb:b7:dd:f2:ed:fe:c7:67:be:4f:1e:5e:4e:09:59:e9:c7:bf: fe:2d:d9:3c:07:04:a8:99:51:84:c6:65:3f:4d:6e:ec:d1:01: d9:b7:09:5f:bc:b0:67:2c:41:17:c2:c5:58:b9:7b:d5:ce:aa: fa:98:50:04:c4:30:aa:42:ad:ea:20:0a:c7:fa:73:f1:02:0d: f2:e2:24:bd:17:03:12:09:e3:61:c2:8b:29:e1:3b:43:f9:d8: 5b:36:cb:82 -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIUQnyVhl5B/WJinJZIoPEI4SGt9TwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTcwQUQ5NEM4MzI0NDEwMEE5N0Y5MTg2RDUzREFEQUIw Nzk5NUVFOTAeFw0yNjA4MjYwNjMyNDhaFw0yNjA4MjcwNzM0NDhaMDMxMTAvBgNV BAMTKEQyQzQyMzJGNUY0MTU4NEE1MUNGMUI4RUVCQUQ5Mjc0RjVDODdCNjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBE/H3eGPkhJMe651U+Bgt4Y4j KKoGTnG+kWinlvY/NxNOeUFRo34gjn18WHlTjfok5ovub3LgLBjNRiEjRTYF804v l4BC2C4gvwNro2Wo1pyfnUrjL5kDhtSldh1Bw4p5k8BNJG3Aqr4Xc5sCVp8nDel/ AscnYAmU+rUlZYPN/uM+bKuEqx3lYrzfxAAqQ7TSNpK/ZI8Naovh/OR+mMohm7+h xWxdUug4BQy/nF2AkJmJ+Kj51Q3iAA3S3n0bcvxSZYa7PKmK8N82E/LJfZNDHFR9 U+I1bzWX1Wvojg0XFU9ZBf+PVL30AUbJC8k2A8HBViTBsyZIQGZ8YCJ6Pj0vAgMB AAGjggJ4MIICdDAdBgNVHQ4EFgQU0sQjL19BWEpRzxuO662SdPXIe2MwHwYDVR0j BBgwFoAUlwrZTIMkQQCpf5GG1T2tqweZXukwDgYDVR0PAQH/BAQDAgeAMIGPBgNV HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv cmVwby9ycGtpX2NhXzlkODM5Y2EwYTU1ZTQyYTQ5ZDEwZGUwNzFmNDY1OThiLzAv OTcwQUQ5NEM4MzI0NDEwMEE5N0Y5MTg2RDUzREFEQUIwNzk5NUVFOS5jcmwwgZ4G CCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5wYWFz LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQxYjUtODJh MC1mMGQwMmMwM2EyYzYvNy85NzBBRDk0QzgzMjQ0MTAwQTk3RjkxODZENTNEQURB QjA3OTk1RUU5LmNlcjCBmgYIKwYBBQUHAQsEgY0wgYowgYcGCCsGAQUFBzALhnty c3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQvcmVwby9ycGtpX2NhXzlkODM5 Y2EwYTU1ZTQyYTQ5ZDEwZGUwNzFmNDY1OThiLzAvOTcwQUQ5NEM4MzI0NDEwMEE5 N0Y5MTg2RDUzREFEQUIwNzk5NUVFOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAEc07w7XB6iGkBa/VnI5 pAWnZo757OKrzGMuMk4HGOY+LIEu1/jn+K+wGJRPfmVuiBElICGv/9pZvGIVJcRi +NkQQnXJZEFAeYBY7r3pHxmsWi00Eq3SZhgqy4esWlUP9RNYidtJh+qrTQ3rmsSW 0T+o/I+DEyQvEBHMigZQ0Cv00v0nGRyy+ihWTMy/lkCBTeruDwk1KLGPW6n3wx6k iTQwfcu33fLt/sdnvk8eXk4JWenHv/4t2TwHBKiZUYTGZT9NbuzRAdm3CV+8sGcs QRfCxVi5e9XOqvqYUATEMKpCreogCsf6c/ECDfLiJL0XAxIJ42HCiynhO0P52Fs2 y4I= -----END CERTIFICATE-----Generated at Wed Aug 26 19:46:15 2026 by rpki-client