$ rpki-client -vvvf rpki-repo.as207960.net/repo/rpki_ca_9d839ca0a55e42a49d10de071f46598b/0/970AD94C83244100A97F9186D53DADAB07995EE9.mft File: 970AD94C83244100A97F9186D53DADAB07995EE9.mft (raw, json) Hash identifier: +q8bgnu+HV1fQBJoTqccRnDkHphXnUvCd96OM4O6LTY= Subject key identifier: 97:FC:53:C4:33:83:FA:53:C9:81:41:83:EE:4A:32:65:0A:1A:8D:53 Authority key identifier: 97:0A:D9:4C:83:24:41:00:A9:7F:91:86:D5:3D:AD:AB:07:99:5E:E9 Certificate issuer: /CN=970AD94C83244100A97F9186D53DADAB07995EE9 Certificate serial: 28DF75DB2C10AA85F77FEEEEFB187AD2155B11FB Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/970AD94C83244100A97F9186D53DADAB07995EE9.cer Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_9d839ca0a55e42a49d10de071f46598b/0/970AD94C83244100A97F9186D53DADAB07995EE9.mft Manifest number: 03FC Signing time: Sat 10 Oct 2026 00:17:48 +0000 Manifest this update: Sat 10 Oct 2026 00:12:46 +0000 Manifest next update: Sun 11 Oct 2026 03:20:46 +0000 Files and hashes: 1: 970AD94C83244100A97F9186D53DADAB07995EE9.crl (hash: R1ogRaqrriM2RDIsmjCJ+M49N5aFqgGJBnqD1rkz5GA=) 2: 326131313a663263303a616361303a3a2f34342d3438203d3e20323132323435.roa (hash: 9SYQBw+WVon+uq1bGjlomS1wDEHFsVFbA0dbRqR0nMs=) 3: 326131313a663263303a666666363a3a2f34382d3438203d3e20323132323435.roa (hash: MoaZbbTY7Jqr4LowGTe1KRJNCD2PmKCRt2v7wni6Nh8=) Validation: OK Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_9d839ca0a55e42a49d10de071f46598b/0/970AD94C83244100A97F9186D53DADAB07995EE9.crl rsync://rpki-repo.as207960.net/repo/rpki_ca_9d839ca0a55e42a49d10de071f46598b/0/970AD94C83244100A97F9186D53DADAB07995EE9.mft rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/970AD94C83244100A97F9186D53DADAB07995EE9.cer rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Oct 2026 21:01:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:df:75:db:2c:10:aa:85:f7:7f:ee:ee:fb:18:7a:d2:15:5b:11:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=970AD94C83244100A97F9186D53DADAB07995EE9 Validity Not Before: Oct 10 00:12:46 2026 GMT Not After : Oct 11 03:20:46 2026 GMT Subject: CN=97FC53C43383FA53C9814183EE4A32650A1A8D53 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:61:8b:5a:16:94:06:d9:86:01:66:b7:92:0b: 30:c6:eb:72:97:8f:21:a3:8c:5d:a6:13:d1:c8:0d: ff:02:b4:c0:af:81:21:54:d0:ff:5f:76:5b:0d:ce: e6:16:07:78:36:1c:d1:56:dc:ac:77:b2:51:6d:53: 1e:1b:01:68:86:b8:fa:5b:5a:6e:52:69:3a:fc:8e: 8e:16:67:48:f1:b8:17:46:dc:5f:10:50:36:23:8d: 6e:14:52:d0:97:e9:ee:f6:b1:c8:b8:9a:36:50:bf: fc:ac:5f:26:76:99:89:5a:10:c4:f8:98:99:f1:cf: 74:de:59:a2:e6:64:2e:10:a4:38:cf:e7:63:f3:22: 01:69:f9:b1:52:9e:c3:f3:7e:e6:9b:b1:86:84:23: 16:82:8e:c7:69:73:18:5b:9f:6e:72:e1:25:a9:5e: d4:5d:fd:ad:52:9d:05:42:0a:14:03:09:07:a4:8a: 29:e3:3c:42:1d:b9:fe:bc:90:15:42:ee:8a:28:62: 2c:3c:47:12:1c:9b:bc:d3:9f:8b:77:a1:d2:94:28: 54:ab:89:a3:88:29:36:9d:db:f0:06:07:a5:62:c7: 7d:75:95:2e:9c:de:6b:51:a1:de:94:7b:9c:ba:75: c0:1f:d6:bf:4d:f2:f4:28:a9:7e:eb:b7:1a:1e:6d: ff:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:FC:53:C4:33:83:FA:53:C9:81:41:83:EE:4A:32:65:0A:1A:8D:53 X509v3 Authority Key Identifier: keyid:97:0A:D9:4C:83:24:41:00:A9:7F:91:86:D5:3D:AD:AB:07:99:5E:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_9d839ca0a55e42a49d10de071f46598b/0/970AD94C83244100A97F9186D53DADAB07995EE9.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/970AD94C83244100A97F9186D53DADAB07995EE9.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_9d839ca0a55e42a49d10de071f46598b/0/970AD94C83244100A97F9186D53DADAB07995EE9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6f:d5:7d:23:b9:59:de:6f:07:32:20:70:e3:45:9f:c4:74:e8: 28:49:d1:bf:6c:a1:b7:27:45:58:b1:45:c6:14:77:a7:8a:c2: 2b:38:2b:1a:57:68:e7:18:d7:24:83:e5:da:e4:a1:9a:05:d0: e6:6e:0f:ce:88:ec:5c:60:f8:d7:b5:4d:2e:e2:00:30:e5:58: 15:f0:10:e3:6e:8e:6a:92:34:78:d5:c4:6e:50:76:52:06:bd: 4c:ca:ed:ea:68:94:06:9a:19:bb:ed:4b:74:b8:2e:d0:51:41: 15:1a:57:ee:8d:2b:31:80:1d:a5:bb:9c:62:8a:44:6b:f1:03: 04:ce:22:b8:2b:53:8b:4a:23:26:1f:19:ad:b5:e6:db:ec:78: d4:e3:c3:4e:9c:60:2d:d2:27:73:ed:7e:d4:62:b9:88:ca:f9: 7c:d6:bc:6d:db:5d:a7:83:36:40:f7:7a:f9:c5:0f:0e:47:b8: 1f:65:b9:e5:27:3d:39:61:dc:cb:d6:e5:36:90:e4:a3:03:9c: 0a:c7:e3:f9:62:1e:a0:c0:9e:85:5b:02:39:30:c3:0e:24:74: 0a:4d:ca:34:2a:9d:c2:43:39:a8:ce:5e:66:38:11:ef:27:44: a2:1b:e3:53:27:88:24:e0:a3:31:15:26:dc:f3:4d:c3:e9:0a: 60:81:32:58 -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIUKN912ywQqoX3f+7u+xh60hVbEfswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTcwQUQ5NEM4MzI0NDEwMEE5N0Y5MTg2RDUzREFEQUIw Nzk5NUVFOTAeFw0yNjEwMTAwMDEyNDZaFw0yNjEwMTEwMzIwNDZaMDMxMTAvBgNV BAMTKDk3RkM1M0M0MzM4M0ZBNTNDOTgxNDE4M0VFNEEzMjY1MEExQThENTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzYYtaFpQG2YYBZreSCzDG63KX jyGjjF2mE9HIDf8CtMCvgSFU0P9fdlsNzuYWB3g2HNFW3Kx3slFtUx4bAWiGuPpb Wm5SaTr8jo4WZ0jxuBdG3F8QUDYjjW4UUtCX6e72sci4mjZQv/ysXyZ2mYlaEMT4 mJnxz3TeWaLmZC4QpDjP52PzIgFp+bFSnsPzfuabsYaEIxaCjsdpcxhbn25y4SWp XtRd/a1SnQVCChQDCQekiinjPEIduf68kBVC7oooYiw8RxIcm7zTn4t3odKUKFSr iaOIKTad2/AGB6Vix311lS6c3mtRod6Ue5y6dcAf1r9N8vQoqX7rtxoebf+lAgMB AAGjggJ4MIICdDAdBgNVHQ4EFgQUl/xTxDOD+lPJgUGD7koyZQoajVMwHwYDVR0j BBgwFoAUlwrZTIMkQQCpf5GG1T2tqweZXukwDgYDVR0PAQH/BAQDAgeAMIGPBgNV HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv cmVwby9ycGtpX2NhXzlkODM5Y2EwYTU1ZTQyYTQ5ZDEwZGUwNzFmNDY1OThiLzAv OTcwQUQ5NEM4MzI0NDEwMEE5N0Y5MTg2RDUzREFEQUIwNzk5NUVFOS5jcmwwgZ4G CCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5wYWFz LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQxYjUtODJh MC1mMGQwMmMwM2EyYzYvNy85NzBBRDk0QzgzMjQ0MTAwQTk3RjkxODZENTNEQURB QjA3OTk1RUU5LmNlcjCBmgYIKwYBBQUHAQsEgY0wgYowgYcGCCsGAQUFBzALhnty c3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQvcmVwby9ycGtpX2NhXzlkODM5 Y2EwYTU1ZTQyYTQ5ZDEwZGUwNzFmNDY1OThiLzAvOTcwQUQ5NEM4MzI0NDEwMEE5 N0Y5MTg2RDUzREFEQUIwNzk5NUVFOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAG/VfSO5Wd5vBzIgcONF n8R06ChJ0b9sobcnRVixRcYUd6eKwis4KxpXaOcY1ySD5drkoZoF0OZuD86I7Fxg +Ne1TS7iADDlWBXwEONujmqSNHjVxG5QdlIGvUzK7epolAaaGbvtS3S4LtBRQRUa V+6NKzGAHaW7nGKKRGvxAwTOIrgrU4tKIyYfGa215tvseNTjw06cYC3SJ3PtftRi uYjK+XzWvG3bXaeDNkD3evnFDw5HuB9lueUnPTlh3MvW5TaQ5KMDnArH4/liHqDA noVbAjkwww4kdApNyjQqncJDOajOXmY4Ee8nRKIb41MniCTgozEVJtzzTcPpCmCB Mlg= -----END CERTIFICATE-----Generated at Sat Oct 10 11:30:27 2026 by rpki-client