$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_9d839ca0a55e42a49d10de071f46598b/0/970AD94C83244100A97F9186D53DADAB07995EE9.mft File: 970AD94C83244100A97F9186D53DADAB07995EE9.mft (raw, json) Hash identifier: 5teYcDl20kFIgS65H4L3Vc4EGPRQ+maRsrpWidkb55A= Subject key identifier: AD:B3:6F:DC:8D:C3:B5:AF:BF:C9:B7:9C:E9:2C:C5:40:A3:65:88:59 Authority key identifier: 97:0A:D9:4C:83:24:41:00:A9:7F:91:86:D5:3D:AD:AB:07:99:5E:E9 Certificate issuer: /CN=970AD94C83244100A97F9186D53DADAB07995EE9 Certificate serial: 1B0CD0A9CECCFD3077DF61A754534D1975CF102E Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/970AD94C83244100A97F9186D53DADAB07995EE9.cer Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_9d839ca0a55e42a49d10de071f46598b/0/970AD94C83244100A97F9186D53DADAB07995EE9.mft Manifest number: 01CA Signing time: Sat 14 Jun 2025 09:49:15 +0000 Manifest this update: Sat 14 Jun 2025 09:44:13 +0000 Manifest next update: Sun 15 Jun 2025 11:40:13 +0000 Files and hashes: 1: 326131313a663263303a666666363a3a2f34382d3438203d3e20323132323435.roa (hash: KUWIZJqj2P5+rqMCtyxvRjTojjJdo7mG970P3wqCh/c=) 2: 970AD94C83244100A97F9186D53DADAB07995EE9.crl (hash: xX1xAYXHYZmDGvmOEGmre+zQxcbVpbU+UNp9wHPZ7DE=) 3: 326131313a663263303a616361303a3a2f34342d3438203d3e20323132323435.roa (hash: CCNk9XY2QHD/b3jWZi363Jj900j75CnbAukUts4RWyQ=) Validation: OK Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_9d839ca0a55e42a49d10de071f46598b/0/970AD94C83244100A97F9186D53DADAB07995EE9.crl rsync://rpki-repo.as207960.net/repo/rpki_ca_9d839ca0a55e42a49d10de071f46598b/0/970AD94C83244100A97F9186D53DADAB07995EE9.mft rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/970AD94C83244100A97F9186D53DADAB07995EE9.cer rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 15 Jun 2025 11:40:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:0c:d0:a9:ce:cc:fd:30:77:df:61:a7:54:53:4d:19:75:cf:10:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=970AD94C83244100A97F9186D53DADAB07995EE9 Validity Not Before: Jun 14 09:44:13 2025 GMT Not After : Jun 15 11:40:13 2025 GMT Subject: CN=ADB36FDC8DC3B5AFBFC9B79CE92CC540A3658859 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:9c:5e:64:d3:00:4a:d7:93:b2:3f:ad:88:d3: c7:67:92:0e:ce:e7:bb:c5:8b:0b:7f:70:00:78:59: 42:c3:93:92:be:6b:09:53:2f:11:30:36:d5:86:93: b4:7c:ef:31:aa:18:6d:2e:34:e9:8d:c0:cd:36:32: 06:96:f4:0f:d1:e6:ff:fe:62:99:cb:21:3c:7d:0b: 9c:d5:f9:c3:5b:39:ba:ca:d0:ad:c0:65:58:bc:97: 54:2f:bc:5d:c4:f7:eb:d6:37:69:fc:df:23:10:b6: 0a:9c:36:07:8e:5f:70:83:95:68:82:a5:01:cd:14: be:81:a8:98:a0:49:a9:9a:5d:3f:48:b8:54:88:ee: a7:20:cb:7f:7c:6b:8d:9f:f5:17:28:eb:46:b5:63: dd:c5:57:7e:06:d4:bb:df:78:b9:28:3a:e4:48:47: b2:f4:22:dd:0b:68:82:ae:fc:72:8b:cc:46:a2:ad: ea:54:ae:33:93:6e:42:a6:57:cc:e3:97:0d:c9:18: 5e:ed:cb:55:f4:11:aa:9a:ef:79:aa:46:8b:c3:fe: 8d:4b:f2:63:69:2b:41:5b:82:d5:ee:92:bb:e8:c8: 8d:30:39:b4:6f:b2:62:c2:cd:07:d7:29:4e:4a:65: fd:36:95:de:cb:4a:6c:77:5f:fa:1f:4c:77:e5:13: 79:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:B3:6F:DC:8D:C3:B5:AF:BF:C9:B7:9C:E9:2C:C5:40:A3:65:88:59 X509v3 Authority Key Identifier: keyid:97:0A:D9:4C:83:24:41:00:A9:7F:91:86:D5:3D:AD:AB:07:99:5E:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_9d839ca0a55e42a49d10de071f46598b/0/970AD94C83244100A97F9186D53DADAB07995EE9.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/970AD94C83244100A97F9186D53DADAB07995EE9.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_9d839ca0a55e42a49d10de071f46598b/0/970AD94C83244100A97F9186D53DADAB07995EE9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9b:f5:be:d5:aa:fc:b3:db:7e:32:a7:13:e3:fe:3f:09:5e:7d: c2:2c:54:1f:d3:fe:9a:b8:0b:6d:b4:d4:1e:22:90:09:a0:73: ec:7b:de:cc:a3:e4:22:13:78:c5:f0:1d:99:f4:9d:51:25:a2: 26:0b:ba:e0:fc:fc:53:33:d6:ed:b0:83:74:e7:08:0c:9b:23: 32:d0:9c:46:96:72:8e:bb:be:69:90:99:f9:89:71:cc:0b:e8: ef:ea:0b:bc:2a:4e:18:5c:8d:a8:02:3a:5a:e7:3a:ac:91:8b: 2d:35:3d:19:67:9e:7b:e8:72:4a:19:2c:18:28:18:5d:0b:95: a4:59:76:8d:af:ef:87:ea:b7:c0:4d:cc:ae:97:de:b6:29:03: 15:3e:0c:75:09:fe:6a:d4:a4:73:6e:cf:af:ce:23:30:22:f4: 0e:d7:ea:a5:44:ed:0c:4d:c2:eb:61:70:da:3b:44:a4:d6:dc: 2f:aa:42:97:7b:19:f3:cd:d1:44:13:45:5d:a8:26:69:5d:c3: 1a:dc:84:a3:ff:82:85:ea:45:63:37:78:38:ee:b3:7e:af:7a: f0:3d:9b:25:23:d1:d1:ca:8e:aa:0b:f7:7d:18:e9:c2:d6:6f: 10:ab:65:72:cb:fe:6e:64:64:e8:4a:ed:68:34:1e:38:33:d9: 58:43:18:42 -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIUGwzQqc7M/TB332GnVFNNGXXPEC4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTcwQUQ5NEM4MzI0NDEwMEE5N0Y5MTg2RDUzREFEQUIw Nzk5NUVFOTAeFw0yNTA2MTQwOTQ0MTNaFw0yNTA2MTUxMTQwMTNaMDMxMTAvBgNV BAMTKEFEQjM2RkRDOERDM0I1QUZCRkM5Qjc5Q0U5MkNDNTQwQTM2NTg4NTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDInF5k0wBK15OyP62I08dnkg7O 57vFiwt/cAB4WULDk5K+awlTLxEwNtWGk7R87zGqGG0uNOmNwM02MgaW9A/R5v/+ YpnLITx9C5zV+cNbObrK0K3AZVi8l1QvvF3E9+vWN2n83yMQtgqcNgeOX3CDlWiC pQHNFL6BqJigSamaXT9IuFSI7qcgy398a42f9Rco60a1Y93FV34G1LvfeLkoOuRI R7L0It0LaIKu/HKLzEairepUrjOTbkKmV8zjlw3JGF7ty1X0Eaqa73mqRovD/o1L 8mNpK0FbgtXukrvoyI0wObRvsmLCzQfXKU5KZf02ld7LSmx3X/ofTHflE3khAgMB AAGjggJ4MIICdDAdBgNVHQ4EFgQUrbNv3I3Dta+/ybec6SzFQKNliFkwHwYDVR0j BBgwFoAUlwrZTIMkQQCpf5GG1T2tqweZXukwDgYDVR0PAQH/BAQDAgeAMIGPBgNV HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv cmVwby9ycGtpX2NhXzlkODM5Y2EwYTU1ZTQyYTQ5ZDEwZGUwNzFmNDY1OThiLzAv OTcwQUQ5NEM4MzI0NDEwMEE5N0Y5MTg2RDUzREFEQUIwNzk5NUVFOS5jcmwwgZ4G CCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5wYWFz LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQxYjUtODJh MC1mMGQwMmMwM2EyYzYvNy85NzBBRDk0QzgzMjQ0MTAwQTk3RjkxODZENTNEQURB QjA3OTk1RUU5LmNlcjCBmgYIKwYBBQUHAQsEgY0wgYowgYcGCCsGAQUFBzALhnty c3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQvcmVwby9ycGtpX2NhXzlkODM5 Y2EwYTU1ZTQyYTQ5ZDEwZGUwNzFmNDY1OThiLzAvOTcwQUQ5NEM4MzI0NDEwMEE5 N0Y5MTg2RDUzREFEQUIwNzk5NUVFOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAJv1vtWq/LPbfjKnE+P+ PwlefcIsVB/T/pq4C2201B4ikAmgc+x73syj5CITeMXwHZn0nVEloiYLuuD8/FMz 1u2wg3TnCAybIzLQnEaWco67vmmQmfmJccwL6O/qC7wqThhcjagCOlrnOqyRiy01 PRlnnnvockoZLBgoGF0LlaRZdo2v74fqt8BNzK6X3rYpAxU+DHUJ/mrUpHNuz6/O IzAi9A7X6qVE7QxNwuthcNo7RKTW3C+qQpd7GfPN0UQTRV2oJmldwxrchKP/goXq RWM3eDjus36vevA9myUj0dHKjqoL930Y6cLWbxCrZXLL/m5kZOhK7Wg0Hjgz2VhD GEI= -----END CERTIFICATE-----Generated at Sun Jun 15 02:34:11 2025 by rpki-client