$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_9d839ca0a55e42a49d10de071f46598b/0/970AD94C83244100A97F9186D53DADAB07995EE9.mft File: 970AD94C83244100A97F9186D53DADAB07995EE9.mft (raw, json) Hash identifier: wGKJyKmLognrCjar9QFQwt/DC2tc+oGmgUthodIkxqw= Subject key identifier: F2:8E:35:DA:32:2B:3C:EF:36:D8:C2:0C:4C:74:B7:1A:9A:DA:4D:1E Authority key identifier: 97:0A:D9:4C:83:24:41:00:A9:7F:91:86:D5:3D:AD:AB:07:99:5E:E9 Certificate issuer: /CN=970AD94C83244100A97F9186D53DADAB07995EE9 Certificate serial: 1F4BA95833BE96EF7DB6CB6638554517533BB902 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/970AD94C83244100A97F9186D53DADAB07995EE9.cer Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_9d839ca0a55e42a49d10de071f46598b/0/970AD94C83244100A97F9186D53DADAB07995EE9.mft Manifest number: 0373 Signing time: Mon 15 Jun 2026 01:08:18 +0000 Manifest this update: Mon 15 Jun 2026 01:03:18 +0000 Manifest next update: Tue 16 Jun 2026 02:52:18 +0000 Files and hashes: 1: 326131313a663263303a616361303a3a2f34342d3438203d3e20323132323435.roa (hash: 9SYQBw+WVon+uq1bGjlomS1wDEHFsVFbA0dbRqR0nMs=) 2: 970AD94C83244100A97F9186D53DADAB07995EE9.crl (hash: uPUxMrZM79hTJ4S5sU+ncscRayV4eZjxWusw5POUex0=) 3: 326131313a663263303a666666363a3a2f34382d3438203d3e20323132323435.roa (hash: MoaZbbTY7Jqr4LowGTe1KRJNCD2PmKCRt2v7wni6Nh8=) Validation: OK Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_9d839ca0a55e42a49d10de071f46598b/0/970AD94C83244100A97F9186D53DADAB07995EE9.crl rsync://rpki-repo.as207960.net/repo/rpki_ca_9d839ca0a55e42a49d10de071f46598b/0/970AD94C83244100A97F9186D53DADAB07995EE9.mft rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/970AD94C83244100A97F9186D53DADAB07995EE9.cer rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Jun 2026 22:00:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:4b:a9:58:33:be:96:ef:7d:b6:cb:66:38:55:45:17:53:3b:b9:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=970AD94C83244100A97F9186D53DADAB07995EE9 Validity Not Before: Jun 15 01:03:18 2026 GMT Not After : Jun 16 02:52:18 2026 GMT Subject: CN=F28E35DA322B3CEF36D8C20C4C74B71A9ADA4D1E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:97:c7:1e:bd:e5:62:c4:77:1c:5b:df:20:a5: c1:27:86:9d:8a:b8:77:4e:d6:15:13:9b:b9:63:3f: 7f:80:59:42:2e:99:1d:af:46:b7:8c:38:07:cb:df: 76:9e:f2:77:fa:af:c0:f3:e9:c1:03:f7:10:4b:72: 0e:fd:5c:b3:dc:a2:58:8b:b9:96:14:b7:42:dc:29: 65:fb:67:01:c3:c7:63:30:95:1d:95:f7:5c:64:fd: 69:5d:17:ea:cf:ba:8f:6b:4d:18:d5:53:e7:3c:ff: 90:8c:b6:69:3d:37:68:eb:77:ea:ce:91:83:25:71: c4:8a:26:77:8b:e3:de:08:e1:6e:92:99:de:26:ac: 82:7d:8a:3d:ce:32:a9:64:54:d7:85:8f:f0:29:95: 9e:37:7e:ef:1e:2e:fe:48:b4:d9:d9:88:3a:df:fe: 6f:8e:d9:5d:f2:fa:c2:64:67:fa:37:72:63:55:9b: 38:e5:27:ab:68:1d:e9:4d:6e:a1:ae:4e:44:b9:0b: 19:da:24:8c:0b:f7:29:b8:61:07:17:e2:16:e4:0e: ca:de:1c:d7:c6:69:f8:6e:94:71:28:4a:04:2a:2f: a1:34:a8:b4:96:21:a3:07:bf:61:00:5d:eb:87:6e: 55:03:9a:07:7e:4e:ab:5d:08:52:1f:db:30:64:66: 7c:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:8E:35:DA:32:2B:3C:EF:36:D8:C2:0C:4C:74:B7:1A:9A:DA:4D:1E X509v3 Authority Key Identifier: keyid:97:0A:D9:4C:83:24:41:00:A9:7F:91:86:D5:3D:AD:AB:07:99:5E:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_9d839ca0a55e42a49d10de071f46598b/0/970AD94C83244100A97F9186D53DADAB07995EE9.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/970AD94C83244100A97F9186D53DADAB07995EE9.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_9d839ca0a55e42a49d10de071f46598b/0/970AD94C83244100A97F9186D53DADAB07995EE9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:93:c4:33:62:98:a4:cc:e6:e5:25:25:d1:64:db:39:8a:6c: f5:47:c7:73:80:2e:83:f4:7a:c8:e3:ed:33:86:33:ea:27:64: 81:5e:a4:bd:46:38:c9:e0:82:4a:db:68:9e:ac:13:59:88:54: f2:4f:55:62:f6:ca:5e:32:aa:52:16:da:32:c0:0e:ff:83:56: 50:a4:43:0e:08:6f:38:3a:74:cf:ef:b0:00:fd:24:41:36:9d: e8:28:94:7d:e2:24:03:bf:1c:6e:e5:e3:fc:67:2c:f7:76:27: 2f:34:c0:e6:ab:6c:1a:1c:c5:1d:5c:5e:d1:3c:4c:0d:af:0f: 02:e2:93:8c:15:ac:7b:32:91:7a:ca:7c:b4:d3:b9:06:fd:a7: 68:21:ab:74:9c:85:6c:ea:d0:66:b9:73:cf:9a:e8:48:41:c7: 2c:63:f9:57:98:d7:cb:8a:87:93:80:eb:37:f7:1c:58:3f:e2: 79:aa:2a:09:01:68:ce:aa:05:99:7c:26:4d:4a:1c:ae:ea:42: 84:6a:5b:f8:b0:eb:d9:dd:bd:7c:fc:19:18:28:41:72:c3:90: 51:c0:60:d1:06:9e:10:de:ed:9c:0e:a8:37:b5:15:6a:7e:71: 0f:49:97:3d:10:c8:e9:28:e2:cb:61:38:05:ff:a0:2a:2f:a7: e3:5f:73:24 -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIUH0upWDO+lu99tstmOFVFF1M7uQIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTcwQUQ5NEM4MzI0NDEwMEE5N0Y5MTg2RDUzREFEQUIw Nzk5NUVFOTAeFw0yNjA2MTUwMTAzMThaFw0yNjA2MTYwMjUyMThaMDMxMTAvBgNV BAMTKEYyOEUzNURBMzIyQjNDRUYzNkQ4QzIwQzRDNzRCNzFBOUFEQTREMUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjl8ceveVixHccW98gpcEnhp2K uHdO1hUTm7ljP3+AWUIumR2vRreMOAfL33ae8nf6r8Dz6cED9xBLcg79XLPcoliL uZYUt0LcKWX7ZwHDx2MwlR2V91xk/WldF+rPuo9rTRjVU+c8/5CMtmk9N2jrd+rO kYMlccSKJneL494I4W6Smd4mrIJ9ij3OMqlkVNeFj/AplZ43fu8eLv5ItNnZiDrf /m+O2V3y+sJkZ/o3cmNVmzjlJ6toHelNbqGuTkS5CxnaJIwL9ym4YQcX4hbkDsre HNfGafhulHEoSgQqL6E0qLSWIaMHv2EAXeuHblUDmgd+TqtdCFIf2zBkZnwZAgMB AAGjggJ4MIICdDAdBgNVHQ4EFgQU8o412jIrPO822MIMTHS3GpraTR4wHwYDVR0j BBgwFoAUlwrZTIMkQQCpf5GG1T2tqweZXukwDgYDVR0PAQH/BAQDAgeAMIGPBgNV HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv cmVwby9ycGtpX2NhXzlkODM5Y2EwYTU1ZTQyYTQ5ZDEwZGUwNzFmNDY1OThiLzAv OTcwQUQ5NEM4MzI0NDEwMEE5N0Y5MTg2RDUzREFEQUIwNzk5NUVFOS5jcmwwgZ4G CCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5wYWFz LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQxYjUtODJh MC1mMGQwMmMwM2EyYzYvNy85NzBBRDk0QzgzMjQ0MTAwQTk3RjkxODZENTNEQURB QjA3OTk1RUU5LmNlcjCBmgYIKwYBBQUHAQsEgY0wgYowgYcGCCsGAQUFBzALhnty c3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQvcmVwby9ycGtpX2NhXzlkODM5 Y2EwYTU1ZTQyYTQ5ZDEwZGUwNzFmNDY1OThiLzAvOTcwQUQ5NEM4MzI0NDEwMEE5 N0Y5MTg2RDUzREFEQUIwNzk5NUVFOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBADGTxDNimKTM5uUlJdFk 2zmKbPVHx3OALoP0esjj7TOGM+onZIFepL1GOMnggkrbaJ6sE1mIVPJPVWL2yl4y qlIW2jLADv+DVlCkQw4Ibzg6dM/vsAD9JEE2negolH3iJAO/HG7l4/xnLPd2Jy80 wOarbBocxR1cXtE8TA2vDwLik4wVrHsykXrKfLTTuQb9p2ghq3SchWzq0Ga5c8+a 6EhBxyxj+VeY18uKh5OA6zf3HFg/4nmqKgkBaM6qBZl8Jk1KHK7qQoRqW/iw69nd vXz8GRgoQXLDkFHAYNEGnhDe7ZwOqDe1FWp+cQ9Jlz0QyOko4sthOAX/oCovp+Nf cyQ= -----END CERTIFICATE-----Generated at Mon Jun 15 06:26:05 2026 by rpki-client