$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_9d839ca0a55e42a49d10de071f46598b/0/970AD94C83244100A97F9186D53DADAB07995EE9.mft File: 970AD94C83244100A97F9186D53DADAB07995EE9.mft (raw, json) Hash identifier: pkAIWmGvQ1MmOHgEs010jj9gz3GSMSvjCYgsqb8nkQU= Subject key identifier: FA:BB:78:FD:DF:36:B2:FF:F0:E3:65:B1:37:0B:1A:17:80:1E:82:54 Authority key identifier: 97:0A:D9:4C:83:24:41:00:A9:7F:91:86:D5:3D:AD:AB:07:99:5E:E9 Certificate issuer: /CN=970AD94C83244100A97F9186D53DADAB07995EE9 Certificate serial: 7EF052D37413CBB2DDDAF541F8B91484EBCAE48D Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/970AD94C83244100A97F9186D53DADAB07995EE9.cer Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_9d839ca0a55e42a49d10de071f46598b/0/970AD94C83244100A97F9186D53DADAB07995EE9.mft Manifest number: 026F Signing time: Wed 05 Nov 2025 03:29:32 +0000 Manifest this update: Wed 05 Nov 2025 03:24:32 +0000 Manifest next update: Thu 06 Nov 2025 07:08:32 +0000 Files and hashes: 1: 326131313a663263303a616361303a3a2f34342d3438203d3e20323132323435.roa (hash: CCNk9XY2QHD/b3jWZi363Jj900j75CnbAukUts4RWyQ=) 2: 326131313a663263303a666666363a3a2f34382d3438203d3e20323132323435.roa (hash: KUWIZJqj2P5+rqMCtyxvRjTojjJdo7mG970P3wqCh/c=) 3: 970AD94C83244100A97F9186D53DADAB07995EE9.crl (hash: M8TPsgje8RBdsze++P5txQgU72uVWvO7toDB+Rw0D+o=) Validation: OK Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_9d839ca0a55e42a49d10de071f46598b/0/970AD94C83244100A97F9186D53DADAB07995EE9.crl rsync://rpki-repo.as207960.net/repo/rpki_ca_9d839ca0a55e42a49d10de071f46598b/0/970AD94C83244100A97F9186D53DADAB07995EE9.mft rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/970AD94C83244100A97F9186D53DADAB07995EE9.cer rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 06 Nov 2025 03:00:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:f0:52:d3:74:13:cb:b2:dd:da:f5:41:f8:b9:14:84:eb:ca:e4:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=970AD94C83244100A97F9186D53DADAB07995EE9 Validity Not Before: Nov 5 03:24:32 2025 GMT Not After : Nov 6 07:08:32 2025 GMT Subject: CN=FABB78FDDF36B2FFF0E365B1370B1A17801E8254 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:5d:ef:6e:27:a1:14:91:c8:92:74:3b:a7:be: 10:6c:a5:5e:06:00:ce:85:44:fa:86:fa:33:ee:b5: 19:c3:b7:c9:1d:7e:9e:07:bb:ba:cf:1d:b4:e0:d3: 5b:4b:4f:df:6d:17:a0:7f:7b:d7:0b:f4:05:e8:77: 4d:6f:fd:a6:04:7d:a5:38:0f:f9:88:3e:88:6a:04: e6:69:3d:a3:75:49:ab:ae:42:9e:48:71:03:65:c1: 9a:e4:a8:ab:11:db:cf:4b:eb:1f:a4:30:ca:9e:30: 0b:ab:22:81:f2:75:94:27:77:22:d5:21:fb:29:40: eb:44:6e:a3:b9:4c:45:f2:4c:4a:fa:67:11:f6:fd: e5:7e:e0:f3:cb:f5:92:29:e4:47:30:51:7f:5e:e8: 1c:93:d6:91:15:93:e1:7a:25:4d:cf:5a:15:3a:d6: a9:fd:64:f2:65:09:9e:d5:97:1b:65:ba:8c:22:56: cf:fd:47:b8:cb:11:37:dc:ff:38:fa:19:c4:b1:32: d7:90:1a:b8:21:35:3d:87:e6:e6:e9:d2:eb:d6:fa: 57:d3:0c:38:59:a7:a8:62:13:91:2a:cd:ca:73:21: d9:b2:ab:8b:2d:67:01:65:1f:9b:3f:59:17:e2:34: cc:87:ad:b7:20:cd:d7:40:24:70:59:ad:1d:d1:f7: d2:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:BB:78:FD:DF:36:B2:FF:F0:E3:65:B1:37:0B:1A:17:80:1E:82:54 X509v3 Authority Key Identifier: keyid:97:0A:D9:4C:83:24:41:00:A9:7F:91:86:D5:3D:AD:AB:07:99:5E:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_9d839ca0a55e42a49d10de071f46598b/0/970AD94C83244100A97F9186D53DADAB07995EE9.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/970AD94C83244100A97F9186D53DADAB07995EE9.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_9d839ca0a55e42a49d10de071f46598b/0/970AD94C83244100A97F9186D53DADAB07995EE9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:ad:8d:47:66:6c:74:a0:1f:b2:18:d9:a6:ea:0f:59:7d:75: 3e:81:e8:4f:24:23:82:21:24:44:88:c8:93:f6:96:11:bd:f1: 8e:60:58:dd:a9:67:84:be:f9:a6:f5:0d:c9:a0:64:27:c7:a9: eb:09:da:bc:1d:62:91:30:51:1e:88:3d:6e:02:94:59:39:8f: 49:de:6a:57:2f:53:ba:60:d9:ac:02:f0:3c:91:da:ee:19:82: 40:f5:5d:6f:32:31:ef:9d:59:14:01:7a:ec:68:90:a6:12:f8: d2:57:be:9f:a7:fc:65:7c:ea:02:25:4b:04:32:4e:dc:0e:56: 91:27:40:01:2d:38:fb:23:d1:b0:04:6c:99:da:62:7d:e1:10: cb:4c:1f:c1:bd:74:08:e6:58:08:14:da:64:7c:d5:5c:42:9d: 83:31:e1:fa:4f:89:5c:ea:46:14:4f:c5:3b:91:ee:a4:bd:15: 22:74:5a:19:f5:51:22:02:03:13:54:3d:62:9a:43:c9:be:71: 13:12:83:72:40:20:65:12:02:a3:a5:92:0d:ea:79:e8:8e:88: 75:53:d3:e0:f6:5b:ae:0d:85:ff:11:0b:5f:29:4e:7f:51:49: 9a:15:bd:11:4d:8c:dc:7c:ea:56:0c:0b:c3:ef:93:d8:36:7e: f4:40:8c:66 -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIUfvBS03QTy7Ld2vVB+LkUhOvK5I0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTcwQUQ5NEM4MzI0NDEwMEE5N0Y5MTg2RDUzREFEQUIw Nzk5NUVFOTAeFw0yNTExMDUwMzI0MzJaFw0yNTExMDYwNzA4MzJaMDMxMTAvBgNV BAMTKEZBQkI3OEZEREYzNkIyRkZGMEUzNjVCMTM3MEIxQTE3ODAxRTgyNTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLXe9uJ6EUkciSdDunvhBspV4G AM6FRPqG+jPutRnDt8kdfp4Hu7rPHbTg01tLT99tF6B/e9cL9AXod01v/aYEfaU4 D/mIPohqBOZpPaN1SauuQp5IcQNlwZrkqKsR289L6x+kMMqeMAurIoHydZQndyLV IfspQOtEbqO5TEXyTEr6ZxH2/eV+4PPL9ZIp5EcwUX9e6ByT1pEVk+F6JU3PWhU6 1qn9ZPJlCZ7VlxtluowiVs/9R7jLETfc/zj6GcSxMteQGrghNT2H5ubp0uvW+lfT DDhZp6hiE5EqzcpzIdmyq4stZwFlH5s/WRfiNMyHrbcgzddAJHBZrR3R99KzAgMB AAGjggJ4MIICdDAdBgNVHQ4EFgQU+rt4/d82sv/w42WxNwsaF4AeglQwHwYDVR0j BBgwFoAUlwrZTIMkQQCpf5GG1T2tqweZXukwDgYDVR0PAQH/BAQDAgeAMIGPBgNV HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv cmVwby9ycGtpX2NhXzlkODM5Y2EwYTU1ZTQyYTQ5ZDEwZGUwNzFmNDY1OThiLzAv OTcwQUQ5NEM4MzI0NDEwMEE5N0Y5MTg2RDUzREFEQUIwNzk5NUVFOS5jcmwwgZ4G CCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5wYWFz LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQxYjUtODJh MC1mMGQwMmMwM2EyYzYvNy85NzBBRDk0QzgzMjQ0MTAwQTk3RjkxODZENTNEQURB QjA3OTk1RUU5LmNlcjCBmgYIKwYBBQUHAQsEgY0wgYowgYcGCCsGAQUFBzALhnty c3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQvcmVwby9ycGtpX2NhXzlkODM5 Y2EwYTU1ZTQyYTQ5ZDEwZGUwNzFmNDY1OThiLzAvOTcwQUQ5NEM4MzI0NDEwMEE5 N0Y5MTg2RDUzREFEQUIwNzk5NUVFOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAAitjUdmbHSgH7IY2abq D1l9dT6B6E8kI4IhJESIyJP2lhG98Y5gWN2pZ4S++ab1DcmgZCfHqesJ2rwdYpEw UR6IPW4ClFk5j0nealcvU7pg2awC8DyR2u4ZgkD1XW8yMe+dWRQBeuxokKYS+NJX vp+n/GV86gIlSwQyTtwOVpEnQAEtOPsj0bAEbJnaYn3hEMtMH8G9dAjmWAgU2mR8 1VxCnYMx4fpPiVzqRhRPxTuR7qS9FSJ0Whn1USICAxNUPWKaQ8m+cRMSg3JAIGUS AqOlkg3qeeiOiHVT0+D2W64Nhf8RC18pTn9RSZoVvRFNjNx86lYMC8Pvk9g2fvRA jGY= -----END CERTIFICATE-----Generated at Wed Nov 5 09:55:30 2025 by rpki-client