$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_9d839ca0a55e42a49d10de071f46598b/0/970AD94C83244100A97F9186D53DADAB07995EE9.mft File: 970AD94C83244100A97F9186D53DADAB07995EE9.mft (raw, json) Hash identifier: isIsF2WdAhAqKrPFVokkoOWvDzafZXJSYj9gra0Bd0Y= Subject key identifier: 1C:2A:11:B3:49:33:DF:06:3A:C9:BD:B4:9E:6F:F4:CF:02:D5:55:44 Authority key identifier: 97:0A:D9:4C:83:24:41:00:A9:7F:91:86:D5:3D:AD:AB:07:99:5E:E9 Certificate issuer: /CN=970AD94C83244100A97F9186D53DADAB07995EE9 Certificate serial: 60037EDFE372B748833E3920C10B79071E61A68B Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/970AD94C83244100A97F9186D53DADAB07995EE9.cer Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_9d839ca0a55e42a49d10de071f46598b/0/970AD94C83244100A97F9186D53DADAB07995EE9.mft Manifest number: 0271 Signing time: Thu 06 Nov 2025 18:54:52 +0000 Manifest this update: Thu 06 Nov 2025 18:49:50 +0000 Manifest next update: Fri 07 Nov 2025 20:33:50 +0000 Files and hashes: 1: 970AD94C83244100A97F9186D53DADAB07995EE9.crl (hash: KDcwe1CM9z3pZHG1cZJgJxmk7yTaGQR6luG/2eP+afA=) 2: 326131313a663263303a666666363a3a2f34382d3438203d3e20323132323435.roa (hash: KUWIZJqj2P5+rqMCtyxvRjTojjJdo7mG970P3wqCh/c=) 3: 326131313a663263303a616361303a3a2f34342d3438203d3e20323132323435.roa (hash: CCNk9XY2QHD/b3jWZi363Jj900j75CnbAukUts4RWyQ=) Validation: OK Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_9d839ca0a55e42a49d10de071f46598b/0/970AD94C83244100A97F9186D53DADAB07995EE9.crl rsync://rpki-repo.as207960.net/repo/rpki_ca_9d839ca0a55e42a49d10de071f46598b/0/970AD94C83244100A97F9186D53DADAB07995EE9.mft rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/970AD94C83244100A97F9186D53DADAB07995EE9.cer rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 07 Nov 2025 14:56:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:03:7e:df:e3:72:b7:48:83:3e:39:20:c1:0b:79:07:1e:61:a6:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=970AD94C83244100A97F9186D53DADAB07995EE9 Validity Not Before: Nov 6 18:49:50 2025 GMT Not After : Nov 7 20:33:50 2025 GMT Subject: CN=1C2A11B34933DF063AC9BDB49E6FF4CF02D55544 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:b4:e9:82:cd:16:dd:fe:89:59:57:20:f3:1d: e7:86:f3:2e:9b:d0:59:7e:11:71:c5:b2:32:2b:cb: 82:6e:67:69:32:94:19:d9:8a:58:19:a3:d8:1a:3c: c5:43:06:f9:ab:de:a9:d8:57:43:d6:2f:06:ab:70: 70:73:b0:3a:5b:c6:79:72:3c:fa:f0:1e:2f:17:ed: 38:e5:21:80:f2:d5:63:44:40:29:8b:c7:dc:75:2d: f0:76:dc:76:ab:e8:1b:0c:39:07:6d:1e:69:d9:df: 68:49:10:93:85:30:da:5e:80:ad:83:18:45:db:83: 88:42:2f:33:12:db:af:95:06:77:89:2c:23:88:5e: 5a:b0:bf:37:93:58:c7:ff:bb:1c:c3:50:6e:e3:3c: 0e:71:c2:4b:ae:e9:fc:0c:c5:d8:15:6e:38:15:51: 88:ed:c7:ea:05:ba:7b:44:f2:1d:ab:34:89:20:e3: a6:1c:88:ae:cf:cd:17:71:cd:d7:b3:74:34:c7:fe: 3b:99:71:65:a2:67:61:0b:1d:c1:de:71:cb:36:00: fe:32:56:fa:c1:8c:3d:a5:ba:2c:3b:53:64:24:50: 40:b4:5c:84:98:c0:45:81:47:a2:cf:81:a4:05:50: 73:f8:e2:45:d9:d2:e2:40:0f:ec:8e:e2:87:c2:0c: eb:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:2A:11:B3:49:33:DF:06:3A:C9:BD:B4:9E:6F:F4:CF:02:D5:55:44 X509v3 Authority Key Identifier: keyid:97:0A:D9:4C:83:24:41:00:A9:7F:91:86:D5:3D:AD:AB:07:99:5E:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_9d839ca0a55e42a49d10de071f46598b/0/970AD94C83244100A97F9186D53DADAB07995EE9.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/970AD94C83244100A97F9186D53DADAB07995EE9.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_9d839ca0a55e42a49d10de071f46598b/0/970AD94C83244100A97F9186D53DADAB07995EE9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:f2:d3:1c:1f:c9:0e:65:ed:80:a0:74:4a:e2:c9:a7:d4:39: 47:73:8b:2e:1d:e0:38:13:40:6d:b1:9e:01:8c:85:4d:27:10: cc:9c:c0:01:01:01:e1:2c:e0:54:c3:ba:14:c3:c7:85:04:00: 25:ec:bc:a1:f9:b9:e8:82:18:f7:a4:f8:ae:63:15:cb:54:18: 09:b2:f3:c1:d1:ed:28:a2:e9:1d:aa:37:82:26:ff:52:65:e8: a6:bd:b6:a1:74:d4:ef:ac:00:48:fd:28:27:95:e5:df:85:ce: f4:0a:ee:43:29:45:d6:32:c9:23:60:1f:fa:35:1d:39:80:77: 69:b2:84:56:97:5d:3c:cb:2e:88:fb:be:94:1f:44:5f:07:53: 75:ee:12:e1:d4:53:1d:f1:95:55:4b:ef:a0:f2:e5:0e:72:4f: ce:2b:93:33:5f:1a:81:68:f9:54:7a:80:26:a5:35:b1:96:12: 3b:77:77:b4:9f:eb:98:12:06:d4:68:5a:fe:ab:08:39:61:10: fa:84:cb:30:12:3f:16:3e:bf:d3:f7:af:53:bf:37:6f:13:e2: bf:55:b3:33:83:96:a8:29:cb:96:26:f5:4d:a0:cd:31:57:74: 1f:59:02:c1:0e:e8:56:b2:c9:76:7e:9a:bd:9e:c9:b4:b0:8d: dd:a6:2b:8c -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIUYAN+3+Nyt0iDPjkgwQt5Bx5hposwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTcwQUQ5NEM4MzI0NDEwMEE5N0Y5MTg2RDUzREFEQUIw Nzk5NUVFOTAeFw0yNTExMDYxODQ5NTBaFw0yNTExMDcyMDMzNTBaMDMxMTAvBgNV BAMTKDFDMkExMUIzNDkzM0RGMDYzQUM5QkRCNDlFNkZGNENGMDJENTU1NDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxtOmCzRbd/olZVyDzHeeG8y6b 0Fl+EXHFsjIry4JuZ2kylBnZilgZo9gaPMVDBvmr3qnYV0PWLwarcHBzsDpbxnly PPrwHi8X7TjlIYDy1WNEQCmLx9x1LfB23Har6BsMOQdtHmnZ32hJEJOFMNpegK2D GEXbg4hCLzMS26+VBneJLCOIXlqwvzeTWMf/uxzDUG7jPA5xwkuu6fwMxdgVbjgV UYjtx+oFuntE8h2rNIkg46YciK7PzRdxzdezdDTH/juZcWWiZ2ELHcHeccs2AP4y VvrBjD2luiw7U2QkUEC0XISYwEWBR6LPgaQFUHP44kXZ0uJAD+yO4ofCDOvDAgMB AAGjggJ4MIICdDAdBgNVHQ4EFgQUHCoRs0kz3wY6yb20nm/0zwLVVUQwHwYDVR0j BBgwFoAUlwrZTIMkQQCpf5GG1T2tqweZXukwDgYDVR0PAQH/BAQDAgeAMIGPBgNV HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv cmVwby9ycGtpX2NhXzlkODM5Y2EwYTU1ZTQyYTQ5ZDEwZGUwNzFmNDY1OThiLzAv OTcwQUQ5NEM4MzI0NDEwMEE5N0Y5MTg2RDUzREFEQUIwNzk5NUVFOS5jcmwwgZ4G CCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5wYWFz LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQxYjUtODJh MC1mMGQwMmMwM2EyYzYvNy85NzBBRDk0QzgzMjQ0MTAwQTk3RjkxODZENTNEQURB QjA3OTk1RUU5LmNlcjCBmgYIKwYBBQUHAQsEgY0wgYowgYcGCCsGAQUFBzALhnty c3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQvcmVwby9ycGtpX2NhXzlkODM5 Y2EwYTU1ZTQyYTQ5ZDEwZGUwNzFmNDY1OThiLzAvOTcwQUQ5NEM4MzI0NDEwMEE5 N0Y5MTg2RDUzREFEQUIwNzk5NUVFOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAE7y0xwfyQ5l7YCgdEri yafUOUdziy4d4DgTQG2xngGMhU0nEMycwAEBAeEs4FTDuhTDx4UEACXsvKH5ueiC GPek+K5jFctUGAmy88HR7Sii6R2qN4Im/1Jl6Ka9tqF01O+sAEj9KCeV5d+FzvQK 7kMpRdYyySNgH/o1HTmAd2myhFaXXTzLLoj7vpQfRF8HU3XuEuHUUx3xlVVL76Dy 5Q5yT84rkzNfGoFo+VR6gCalNbGWEjt3d7Sf65gSBtRoWv6rCDlhEPqEyzASPxY+ v9P3r1O/N28T4r9VszODlqgpy5Ym9U2gzTFXdB9ZAsEO6FayyXZ+mr2eybSwjd2m K4w= -----END CERTIFICATE-----Generated at Thu Nov 6 20:06:08 2025 by rpki-client