$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_9d839ca0a55e42a49d10de071f46598b/0/970AD94C83244100A97F9186D53DADAB07995EE9.mft File: 970AD94C83244100A97F9186D53DADAB07995EE9.mft (raw, json) Hash identifier: patZq0v0uia7kdWjLPz35g4uEoHP5SO7D1tNp6TplBI= Subject key identifier: 4D:B4:B8:E5:05:B6:AD:0D:1B:4D:4B:9E:E2:0D:B7:8D:62:25:8B:88 Authority key identifier: 97:0A:D9:4C:83:24:41:00:A9:7F:91:86:D5:3D:AD:AB:07:99:5E:E9 Certificate issuer: /CN=970AD94C83244100A97F9186D53DADAB07995EE9 Certificate serial: 266D6CA796AA8F90D79AD830AC64A67575D3D20A Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/970AD94C83244100A97F9186D53DADAB07995EE9.cer Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_9d839ca0a55e42a49d10de071f46598b/0/970AD94C83244100A97F9186D53DADAB07995EE9.mft Manifest number: 0230 Signing time: Thu 18 Sep 2025 20:54:21 +0000 Manifest this update: Thu 18 Sep 2025 20:49:21 +0000 Manifest next update: Fri 19 Sep 2025 22:23:21 +0000 Files and hashes: 1: 970AD94C83244100A97F9186D53DADAB07995EE9.crl (hash: mCCGap6ydTG9d6YZdRlUxWT5GPhpYXxXAqv30bqUPI4=) 2: 326131313a663263303a616361303a3a2f34342d3438203d3e20323132323435.roa (hash: CCNk9XY2QHD/b3jWZi363Jj900j75CnbAukUts4RWyQ=) 3: 326131313a663263303a666666363a3a2f34382d3438203d3e20323132323435.roa (hash: KUWIZJqj2P5+rqMCtyxvRjTojjJdo7mG970P3wqCh/c=) Validation: OK Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_9d839ca0a55e42a49d10de071f46598b/0/970AD94C83244100A97F9186D53DADAB07995EE9.crl rsync://rpki-repo.as207960.net/repo/rpki_ca_9d839ca0a55e42a49d10de071f46598b/0/970AD94C83244100A97F9186D53DADAB07995EE9.mft rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/970AD94C83244100A97F9186D53DADAB07995EE9.cer rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Sep 2025 14:56:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:6d:6c:a7:96:aa:8f:90:d7:9a:d8:30:ac:64:a6:75:75:d3:d2:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=970AD94C83244100A97F9186D53DADAB07995EE9 Validity Not Before: Sep 18 20:49:21 2025 GMT Not After : Sep 19 22:23:21 2025 GMT Subject: CN=4DB4B8E505B6AD0D1B4D4B9EE20DB78D62258B88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:fb:03:91:29:d5:15:68:ad:d2:99:02:fe:6c: 4c:e9:24:4d:b4:94:95:89:2d:9a:ba:2a:eb:17:68: 20:13:71:6c:12:83:4b:f7:2d:bf:e9:d3:f5:1d:a9: 87:98:e1:f6:68:ec:b5:ad:b1:51:9d:30:c5:40:bb: 1a:a9:38:ec:92:e2:d1:64:46:3d:af:8d:7d:80:3e: ea:ef:b0:93:0e:bd:f8:c8:78:01:bd:c9:3e:97:a8: 73:f8:fd:dc:51:c0:ef:e7:74:7d:c6:3a:8c:ff:81: 9a:7a:44:0f:6a:de:41:17:18:8b:e5:ea:c9:6f:f9: f3:99:40:a6:01:5f:ff:f5:68:3c:dd:e6:d4:52:c1: 27:dc:ae:6c:14:40:99:41:91:19:79:a3:cd:c6:8d: 8d:47:f5:e4:b6:23:4d:be:90:88:b1:8c:26:d7:ee: 40:c7:bb:d3:0e:5c:ec:11:00:a1:1b:69:59:f0:1c: 17:97:c6:96:f5:a9:c4:86:e9:bd:b1:75:08:89:8e: 3c:ea:a4:7d:ca:c5:2e:99:c6:f4:94:f4:2f:51:9d: 5d:dd:fe:08:91:01:75:cc:20:c8:14:dd:4a:56:d2: ce:e9:18:b1:6d:e9:3d:aa:c0:6d:47:75:46:bb:f0: 96:5a:9c:52:9d:9c:c5:24:2b:e7:37:dd:61:3d:d4: ed:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:B4:B8:E5:05:B6:AD:0D:1B:4D:4B:9E:E2:0D:B7:8D:62:25:8B:88 X509v3 Authority Key Identifier: keyid:97:0A:D9:4C:83:24:41:00:A9:7F:91:86:D5:3D:AD:AB:07:99:5E:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_9d839ca0a55e42a49d10de071f46598b/0/970AD94C83244100A97F9186D53DADAB07995EE9.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/970AD94C83244100A97F9186D53DADAB07995EE9.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_9d839ca0a55e42a49d10de071f46598b/0/970AD94C83244100A97F9186D53DADAB07995EE9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:92:d1:73:02:ef:a4:79:69:d6:70:79:03:4e:b3:5e:5c:f0: 09:20:65:d3:2b:e3:90:18:64:a4:e2:ad:fb:80:3a:1a:6d:8f: 95:e0:aa:f5:f8:db:ee:a6:b2:bd:e5:de:0c:35:4e:4c:0b:48: bf:11:97:5f:47:55:54:69:6d:fa:9f:78:ca:2a:33:cb:60:f9: f0:d8:d6:2a:7d:42:70:96:d4:ea:a7:0a:68:15:85:4a:fc:a1: 0e:54:c7:34:ef:b3:2d:97:a2:fe:17:45:8f:0a:34:c0:2e:c5: 0b:12:97:39:e3:75:a1:8b:77:d2:39:f3:a3:6d:fa:de:9a:4d: 26:0a:04:05:8f:06:ba:49:ee:6a:51:92:f0:35:19:11:79:ab: 5d:bf:08:11:1f:1d:f9:80:00:e1:1e:15:0d:a5:97:6a:b8:c6: 93:97:cc:de:d2:38:06:7c:1b:aa:aa:da:2c:db:d9:f5:2c:35: 26:7f:46:62:b8:95:4f:4e:dd:a8:e1:67:37:22:ae:e1:ec:d8: 8b:1f:60:eb:0a:2e:14:96:fc:2b:58:20:a7:f7:0e:88:dc:c0: 44:89:1b:f3:48:d4:c0:49:01:7e:86:ca:69:29:37:32:75:7a: ec:21:c2:29:43:fd:1e:d1:73:a5:03:36:2c:bf:da:1c:90:4f: 03:ab:e0:21 -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIUJm1sp5aqj5DXmtgwrGSmdXXT0gowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTcwQUQ5NEM4MzI0NDEwMEE5N0Y5MTg2RDUzREFEQUIw Nzk5NUVFOTAeFw0yNTA5MTgyMDQ5MjFaFw0yNTA5MTkyMjIzMjFaMDMxMTAvBgNV BAMTKDREQjRCOEU1MDVCNkFEMEQxQjRENEI5RUUyMERCNzhENjIyNThCODgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3+wORKdUVaK3SmQL+bEzpJE20 lJWJLZq6KusXaCATcWwSg0v3Lb/p0/UdqYeY4fZo7LWtsVGdMMVAuxqpOOyS4tFk Rj2vjX2APurvsJMOvfjIeAG9yT6XqHP4/dxRwO/ndH3GOoz/gZp6RA9q3kEXGIvl 6slv+fOZQKYBX//1aDzd5tRSwSfcrmwUQJlBkRl5o83GjY1H9eS2I02+kIixjCbX 7kDHu9MOXOwRAKEbaVnwHBeXxpb1qcSG6b2xdQiJjjzqpH3KxS6ZxvSU9C9RnV3d /giRAXXMIMgU3UpW0s7pGLFt6T2qwG1HdUa78JZanFKdnMUkK+c33WE91O2pAgMB AAGjggJ4MIICdDAdBgNVHQ4EFgQUTbS45QW2rQ0bTUue4g23jWIli4gwHwYDVR0j BBgwFoAUlwrZTIMkQQCpf5GG1T2tqweZXukwDgYDVR0PAQH/BAQDAgeAMIGPBgNV HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv cmVwby9ycGtpX2NhXzlkODM5Y2EwYTU1ZTQyYTQ5ZDEwZGUwNzFmNDY1OThiLzAv OTcwQUQ5NEM4MzI0NDEwMEE5N0Y5MTg2RDUzREFEQUIwNzk5NUVFOS5jcmwwgZ4G CCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5wYWFz LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQxYjUtODJh MC1mMGQwMmMwM2EyYzYvNy85NzBBRDk0QzgzMjQ0MTAwQTk3RjkxODZENTNEQURB QjA3OTk1RUU5LmNlcjCBmgYIKwYBBQUHAQsEgY0wgYowgYcGCCsGAQUFBzALhnty c3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQvcmVwby9ycGtpX2NhXzlkODM5 Y2EwYTU1ZTQyYTQ5ZDEwZGUwNzFmNDY1OThiLzAvOTcwQUQ5NEM4MzI0NDEwMEE5 N0Y5MTg2RDUzREFEQUIwNzk5NUVFOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAEqS0XMC76R5adZweQNO s15c8AkgZdMr45AYZKTirfuAOhptj5XgqvX42+6msr3l3gw1TkwLSL8Rl19HVVRp bfqfeMoqM8tg+fDY1ip9QnCW1OqnCmgVhUr8oQ5UxzTvsy2Xov4XRY8KNMAuxQsS lznjdaGLd9I586Nt+t6aTSYKBAWPBrpJ7mpRkvA1GRF5q12/CBEfHfmAAOEeFQ2l l2q4xpOXzN7SOAZ8G6qq2izb2fUsNSZ/RmK4lU9O3ajhZzciruHs2IsfYOsKLhSW /CtYIKf3DojcwESJG/NI1MBJAX6GymkpNzJ1euwhwilD/R7Rc6UDNiy/2hyQTwOr 4CE= -----END CERTIFICATE-----Generated at Fri Sep 19 03:33:01 2025 by rpki-client