$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_9d839ca0a55e42a49d10de071f46598b/0/970AD94C83244100A97F9186D53DADAB07995EE9.mft File: 970AD94C83244100A97F9186D53DADAB07995EE9.mft (raw, json) Hash identifier: HY2c4Hk6VTm0NQh+phGlMiWmhmwJ0T7g0CjjvfxqF84= Subject key identifier: A1:46:D3:C7:C5:42:D9:5F:DB:0E:4C:36:B5:D7:07:81:3E:F7:49:CD Authority key identifier: 97:0A:D9:4C:83:24:41:00:A9:7F:91:86:D5:3D:AD:AB:07:99:5E:E9 Certificate issuer: /CN=970AD94C83244100A97F9186D53DADAB07995EE9 Certificate serial: 4BCAD031142DC0D0B0FCD36C9E6B75C08A57974D Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/970AD94C83244100A97F9186D53DADAB07995EE9.cer Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_9d839ca0a55e42a49d10de071f46598b/0/970AD94C83244100A97F9186D53DADAB07995EE9.mft Manifest number: 01BE Signing time: Fri 06 Jun 2025 14:39:57 +0000 Manifest this update: Fri 06 Jun 2025 14:34:54 +0000 Manifest next update: Sat 07 Jun 2025 17:25:54 +0000 Files and hashes: 1: 970AD94C83244100A97F9186D53DADAB07995EE9.crl (hash: N1KJ2YffYCJ1Li5C6YK00Zs9bw/oqtcJfkwX+cMdnJg=) 2: 326131313a663263303a616361303a3a2f34342d3438203d3e20323132323435.roa (hash: nGPaoJsTa0iz1OKWgPTFsxZ5o789bs60P5bQmrEBxPY=) 3: 326131313a663263303a666666363a3a2f34382d3438203d3e20323132323435.roa (hash: tepnhtpStfx+iROmpj+cPwbcFtzKc4geGeglxL8Depc=) Validation: OK Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_9d839ca0a55e42a49d10de071f46598b/0/970AD94C83244100A97F9186D53DADAB07995EE9.crl rsync://rpki-repo.as207960.net/repo/rpki_ca_9d839ca0a55e42a49d10de071f46598b/0/970AD94C83244100A97F9186D53DADAB07995EE9.mft rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/970AD94C83244100A97F9186D53DADAB07995EE9.cer rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 07 Jun 2025 02:50:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:ca:d0:31:14:2d:c0:d0:b0:fc:d3:6c:9e:6b:75:c0:8a:57:97:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=970AD94C83244100A97F9186D53DADAB07995EE9 Validity Not Before: Jun 6 14:34:54 2025 GMT Not After : Jun 7 17:25:54 2025 GMT Subject: CN=A146D3C7C542D95FDB0E4C36B5D707813EF749CD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:68:42:3e:85:81:21:e8:06:a9:82:63:58:c3: 34:bc:55:18:5a:33:89:47:c2:57:34:1f:2f:e6:34: 16:d2:9a:f9:19:08:09:03:ce:73:e9:22:6c:16:c4: 85:2d:e7:fc:a6:0b:e9:b1:77:a8:6b:fb:de:4a:07: bb:9b:dd:78:9d:a3:89:d6:16:63:1a:b2:57:53:e2: 6f:2a:fa:ac:26:d4:84:ac:11:d7:3a:05:8d:f1:d6: 33:ea:7e:a0:50:d4:ee:fc:8a:e8:3f:06:cb:b6:73: 63:b2:91:9a:d2:ef:b4:b2:fd:19:d3:da:fe:f1:5a: 7c:f3:14:f3:be:d0:9c:9b:95:d0:50:9e:5a:22:5c: 30:03:35:72:6a:7d:b7:b6:69:c1:e5:e0:b0:67:a7: 70:08:04:cd:73:cb:bb:a8:cc:d6:cc:d0:31:b6:5b: 5e:38:b4:62:98:81:58:8c:7d:76:80:94:eb:f4:0f: 42:c3:7b:28:1c:08:7d:9e:98:8d:4c:50:e3:68:48: a8:f5:53:5b:0a:1f:c5:5a:bc:52:68:11:08:2a:28: 15:d5:ce:cb:ea:b8:22:25:c3:56:e0:b8:19:df:8d: 70:ab:35:e7:c2:b3:70:df:be:c9:47:bb:28:94:d7: 44:1f:48:9e:af:49:28:44:6a:e2:5b:d8:5a:c7:af: 6e:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:46:D3:C7:C5:42:D9:5F:DB:0E:4C:36:B5:D7:07:81:3E:F7:49:CD X509v3 Authority Key Identifier: keyid:97:0A:D9:4C:83:24:41:00:A9:7F:91:86:D5:3D:AD:AB:07:99:5E:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_9d839ca0a55e42a49d10de071f46598b/0/970AD94C83244100A97F9186D53DADAB07995EE9.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/970AD94C83244100A97F9186D53DADAB07995EE9.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_9d839ca0a55e42a49d10de071f46598b/0/970AD94C83244100A97F9186D53DADAB07995EE9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a9:e3:59:02:d8:dc:c4:2c:0f:b7:a5:12:76:72:53:59:4b:cc: 4c:4c:7c:f6:ff:c5:1c:c3:d6:60:6d:a5:19:1f:c6:1f:39:2b: a0:18:cd:55:2b:91:70:de:e7:80:60:a3:83:58:72:83:e1:ab: 99:03:b1:a9:a2:86:d6:38:5a:74:91:d2:96:5a:b9:0f:44:82: e4:b2:fc:01:32:1a:e5:99:01:98:52:ab:e8:8d:a4:95:35:99: c4:47:d6:a5:f1:fa:ce:a6:11:46:fe:f7:0c:d1:a7:16:f4:a9: 25:30:b8:a1:86:da:97:c4:9d:6e:87:f1:3d:d8:7e:7c:80:24: 19:2f:b6:14:19:7d:f8:ec:a8:c4:80:29:38:84:37:9e:ec:fa: 25:25:76:8a:f0:2b:3f:42:85:6b:05:0f:13:1e:67:2c:28:b8: 0a:17:11:76:f4:77:3c:22:e8:ee:44:44:dc:98:63:fd:84:3d: 9a:6e:b0:27:bf:d9:63:1a:20:e1:22:1c:b5:0a:58:fb:13:13: 35:95:de:f1:7e:27:5c:81:99:3c:82:5a:0c:60:3c:4b:4c:17: 67:ac:54:f5:fd:5a:12:c6:ea:c7:29:bb:57:67:c6:62:27:b0: ce:d7:a7:eb:25:3d:15:ea:72:f8:cc:41:ae:ba:1e:f1:cf:79: a2:cb:df:1e -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIUS8rQMRQtwNCw/NNsnmt1wIpXl00wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTcwQUQ5NEM4MzI0NDEwMEE5N0Y5MTg2RDUzREFEQUIw Nzk5NUVFOTAeFw0yNTA2MDYxNDM0NTRaFw0yNTA2MDcxNzI1NTRaMDMxMTAvBgNV BAMTKEExNDZEM0M3QzU0MkQ5NUZEQjBFNEMzNkI1RDcwNzgxM0VGNzQ5Q0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwaEI+hYEh6AapgmNYwzS8VRha M4lHwlc0Hy/mNBbSmvkZCAkDznPpImwWxIUt5/ymC+mxd6hr+95KB7ub3Xido4nW FmMasldT4m8q+qwm1ISsEdc6BY3x1jPqfqBQ1O78iug/Bsu2c2OykZrS77Sy/RnT 2v7xWnzzFPO+0JybldBQnloiXDADNXJqfbe2acHl4LBnp3AIBM1zy7uozNbM0DG2 W144tGKYgViMfXaAlOv0D0LDeygcCH2emI1MUONoSKj1U1sKH8VavFJoEQgqKBXV zsvquCIlw1bguBnfjXCrNefCs3DfvslHuyiU10QfSJ6vSShEauJb2FrHr24DAgMB AAGjggJ4MIICdDAdBgNVHQ4EFgQUoUbTx8VC2V/bDkw2tdcHgT73Sc0wHwYDVR0j BBgwFoAUlwrZTIMkQQCpf5GG1T2tqweZXukwDgYDVR0PAQH/BAQDAgeAMIGPBgNV HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv cmVwby9ycGtpX2NhXzlkODM5Y2EwYTU1ZTQyYTQ5ZDEwZGUwNzFmNDY1OThiLzAv OTcwQUQ5NEM4MzI0NDEwMEE5N0Y5MTg2RDUzREFEQUIwNzk5NUVFOS5jcmwwgZ4G CCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5wYWFz LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQxYjUtODJh MC1mMGQwMmMwM2EyYzYvNy85NzBBRDk0QzgzMjQ0MTAwQTk3RjkxODZENTNEQURB QjA3OTk1RUU5LmNlcjCBmgYIKwYBBQUHAQsEgY0wgYowgYcGCCsGAQUFBzALhnty c3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQvcmVwby9ycGtpX2NhXzlkODM5 Y2EwYTU1ZTQyYTQ5ZDEwZGUwNzFmNDY1OThiLzAvOTcwQUQ5NEM4MzI0NDEwMEE5 N0Y5MTg2RDUzREFEQUIwNzk5NUVFOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAKnjWQLY3MQsD7elEnZy U1lLzExMfPb/xRzD1mBtpRkfxh85K6AYzVUrkXDe54Bgo4NYcoPhq5kDsamihtY4 WnSR0pZauQ9EguSy/AEyGuWZAZhSq+iNpJU1mcRH1qXx+s6mEUb+9wzRpxb0qSUw uKGG2pfEnW6H8T3YfnyAJBkvthQZffjsqMSAKTiEN57s+iUldorwKz9ChWsFDxMe ZywouAoXEXb0dzwi6O5ERNyYY/2EPZpusCe/2WMaIOEiHLUKWPsTEzWV3vF+J1yB mTyCWgxgPEtMF2esVPX9WhLG6scpu1dnxmInsM7Xp+slPRXqcvjMQa66HvHPeaLL 3x4= -----END CERTIFICATE-----Generated at Fri Jun 6 19:33:05 2025 by rpki-client