$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_9d839ca0a55e42a49d10de071f46598b/0/970AD94C83244100A97F9186D53DADAB07995EE9.mft File: 970AD94C83244100A97F9186D53DADAB07995EE9.mft (raw, json) Hash identifier: KZILkZKHR436o3huwQ9XbPXIfPCgbFjadGCzSIAvcbo= Subject key identifier: 45:A4:49:38:2D:CB:A1:82:AB:6F:1A:99:1D:60:0F:E2:78:7B:76:2A Authority key identifier: 97:0A:D9:4C:83:24:41:00:A9:7F:91:86:D5:3D:AD:AB:07:99:5E:E9 Certificate issuer: /CN=970AD94C83244100A97F9186D53DADAB07995EE9 Certificate serial: 52D79E4B9E9B9BF74257E99B4FD513E60A83325A Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/970AD94C83244100A97F9186D53DADAB07995EE9.cer Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_9d839ca0a55e42a49d10de071f46598b/0/970AD94C83244100A97F9186D53DADAB07995EE9.mft Manifest number: 0208 Signing time: Wed 30 Jul 2025 17:12:28 +0000 Manifest this update: Wed 30 Jul 2025 17:07:28 +0000 Manifest next update: Thu 31 Jul 2025 19:38:28 +0000 Files and hashes: 1: 970AD94C83244100A97F9186D53DADAB07995EE9.crl (hash: wnaH8ly0t0+e/ZO31dg3ZDJgQGzHRHYyAJPCgzCgv1c=) 2: 326131313a663263303a616361303a3a2f34342d3438203d3e20323132323435.roa (hash: CCNk9XY2QHD/b3jWZi363Jj900j75CnbAukUts4RWyQ=) 3: 326131313a663263303a666666363a3a2f34382d3438203d3e20323132323435.roa (hash: KUWIZJqj2P5+rqMCtyxvRjTojjJdo7mG970P3wqCh/c=) Validation: OK Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_9d839ca0a55e42a49d10de071f46598b/0/970AD94C83244100A97F9186D53DADAB07995EE9.crl rsync://rpki-repo.as207960.net/repo/rpki_ca_9d839ca0a55e42a49d10de071f46598b/0/970AD94C83244100A97F9186D53DADAB07995EE9.mft rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/970AD94C83244100A97F9186D53DADAB07995EE9.cer rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 31 Jul 2025 11:08:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:d7:9e:4b:9e:9b:9b:f7:42:57:e9:9b:4f:d5:13:e6:0a:83:32:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=970AD94C83244100A97F9186D53DADAB07995EE9 Validity Not Before: Jul 30 17:07:28 2025 GMT Not After : Jul 31 19:38:28 2025 GMT Subject: CN=45A449382DCBA182AB6F1A991D600FE2787B762A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:70:43:10:66:51:a4:ef:ee:bc:cd:63:2b:f3: 5b:ea:1b:0b:49:8d:b2:34:a5:84:8e:17:47:e3:31: 1c:86:5c:6f:cb:15:f3:6b:23:4d:b1:bd:0a:62:d6: 76:28:05:38:59:8e:da:e6:f6:83:38:0b:26:80:c2: 6a:e4:bc:4f:f6:b7:ec:32:c6:1e:82:be:d9:08:cf: 4e:e3:a5:9e:2c:8a:b3:24:f3:ed:bd:b1:85:51:82: f2:2e:a3:63:37:57:c1:d1:5d:34:47:45:d2:28:71: 47:af:3b:d3:bb:a0:60:18:82:8e:c0:d0:7f:07:cd: cc:bd:09:58:f9:a3:26:70:e4:a3:93:72:ed:61:50: d6:43:e4:1b:ce:9a:bb:af:96:46:45:fc:05:42:1a: 91:f1:72:b9:b5:03:1d:56:59:3c:af:05:c5:ab:4c: dd:2b:35:e4:41:66:42:58:47:e6:44:0a:e2:0b:72: 2f:5e:cb:2a:41:64:c1:38:73:a2:a2:2b:45:b3:cc: 8c:0c:4f:a4:bb:c7:ca:31:51:53:73:0f:84:3c:e5: 01:03:72:6a:5c:02:6b:43:25:e0:03:56:ea:de:dd: 19:d5:4a:19:35:a9:e0:3d:88:85:f5:a9:aa:57:34: ba:3f:99:17:44:37:df:a2:c2:64:55:4d:cf:53:81: bb:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:A4:49:38:2D:CB:A1:82:AB:6F:1A:99:1D:60:0F:E2:78:7B:76:2A X509v3 Authority Key Identifier: keyid:97:0A:D9:4C:83:24:41:00:A9:7F:91:86:D5:3D:AD:AB:07:99:5E:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_9d839ca0a55e42a49d10de071f46598b/0/970AD94C83244100A97F9186D53DADAB07995EE9.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/970AD94C83244100A97F9186D53DADAB07995EE9.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_9d839ca0a55e42a49d10de071f46598b/0/970AD94C83244100A97F9186D53DADAB07995EE9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:21:d4:4a:b7:f3:a2:9f:98:5a:1b:92:78:bc:0c:f5:c4:af: 73:43:41:19:8a:9b:54:83:93:84:9a:b3:85:91:7c:f8:14:87: 65:c1:bc:4d:0e:21:da:c2:f9:15:f6:bb:29:e2:9a:0d:40:c1: 0a:e0:1b:d5:d6:aa:d5:ee:30:28:98:7c:e3:32:d7:9a:1b:8f: 08:cc:43:d6:fb:77:ae:ed:fd:05:3e:bb:5f:8e:2c:26:24:38: 55:ea:3c:70:ce:c6:98:e4:d1:b5:ce:f6:46:a0:3f:09:3e:e1: b1:a6:4b:79:e2:94:3a:d7:0e:44:95:a1:d9:d8:10:6b:e0:fd: 65:68:2e:ba:ec:c6:53:4e:cb:ef:97:05:4b:19:a4:ae:b5:fa: e1:95:b8:9b:d4:75:91:88:b4:ce:7b:46:c0:33:d7:6a:04:5e: 9d:78:e1:7a:36:08:fc:59:cd:c7:e0:1d:6b:6a:08:6e:0e:e1: 44:a6:f4:5b:30:73:79:68:6d:67:68:e4:da:8a:b4:04:af:86: df:1d:2a:f0:ff:6d:e9:cf:6d:df:90:08:a2:34:d6:4b:6b:86: ef:7e:bb:3c:82:60:19:58:f8:40:a9:71:24:d0:65:cb:ad:ae: 5d:02:b2:43:b9:34:1d:e6:e3:7f:f1:ab:ee:6a:13:1a:41:41: 14:2c:6f:62 -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIUUteeS56bm/dCV+mbT9UT5gqDMlowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTcwQUQ5NEM4MzI0NDEwMEE5N0Y5MTg2RDUzREFEQUIw Nzk5NUVFOTAeFw0yNTA3MzAxNzA3MjhaFw0yNTA3MzExOTM4MjhaMDMxMTAvBgNV BAMTKDQ1QTQ0OTM4MkRDQkExODJBQjZGMUE5OTFENjAwRkUyNzg3Qjc2MkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDrcEMQZlGk7+68zWMr81vqGwtJ jbI0pYSOF0fjMRyGXG/LFfNrI02xvQpi1nYoBThZjtrm9oM4CyaAwmrkvE/2t+wy xh6CvtkIz07jpZ4sirMk8+29sYVRgvIuo2M3V8HRXTRHRdIocUevO9O7oGAYgo7A 0H8Hzcy9CVj5oyZw5KOTcu1hUNZD5BvOmruvlkZF/AVCGpHxcrm1Ax1WWTyvBcWr TN0rNeRBZkJYR+ZECuILci9eyypBZME4c6KiK0WzzIwMT6S7x8oxUVNzD4Q85QED cmpcAmtDJeADVure3RnVShk1qeA9iIX1qapXNLo/mRdEN9+iwmRVTc9TgbupAgMB AAGjggJ4MIICdDAdBgNVHQ4EFgQURaRJOC3LoYKrbxqZHWAP4nh7diowHwYDVR0j BBgwFoAUlwrZTIMkQQCpf5GG1T2tqweZXukwDgYDVR0PAQH/BAQDAgeAMIGPBgNV HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv cmVwby9ycGtpX2NhXzlkODM5Y2EwYTU1ZTQyYTQ5ZDEwZGUwNzFmNDY1OThiLzAv OTcwQUQ5NEM4MzI0NDEwMEE5N0Y5MTg2RDUzREFEQUIwNzk5NUVFOS5jcmwwgZ4G CCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5wYWFz LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQxYjUtODJh MC1mMGQwMmMwM2EyYzYvNy85NzBBRDk0QzgzMjQ0MTAwQTk3RjkxODZENTNEQURB QjA3OTk1RUU5LmNlcjCBmgYIKwYBBQUHAQsEgY0wgYowgYcGCCsGAQUFBzALhnty c3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQvcmVwby9ycGtpX2NhXzlkODM5 Y2EwYTU1ZTQyYTQ5ZDEwZGUwNzFmNDY1OThiLzAvOTcwQUQ5NEM4MzI0NDEwMEE5 N0Y5MTg2RDUzREFEQUIwNzk5NUVFOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAAQh1Eq386KfmFobkni8 DPXEr3NDQRmKm1SDk4Sas4WRfPgUh2XBvE0OIdrC+RX2uynimg1AwQrgG9XWqtXu MCiYfOMy15objwjMQ9b7d67t/QU+u1+OLCYkOFXqPHDOxpjk0bXO9kagPwk+4bGm S3nilDrXDkSVodnYEGvg/WVoLrrsxlNOy++XBUsZpK61+uGVuJvUdZGItM57RsAz 12oEXp144Xo2CPxZzcfgHWtqCG4O4USm9Fswc3lobWdo5NqKtASvht8dKvD/benP bd+QCKI01ktrhu9+uzyCYBlY+ECpcSTQZcutrl0CskO5NB3m43/xq+5qExpBQRQs b2I= -----END CERTIFICATE-----Generated at Thu Jul 31 01:05:24 2025 by rpki-client