$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_9d839ca0a55e42a49d10de071f46598b/0/970AD94C83244100A97F9186D53DADAB07995EE9.mft File: 970AD94C83244100A97F9186D53DADAB07995EE9.mft (raw, json) Hash identifier: 10MTZSkrZlM2NmTCCNSZn6eaVS3cHvUOen7A/eJ1mVA= Subject key identifier: E5:3D:89:C6:65:EF:3D:23:DA:77:95:AC:76:CE:8A:F0:1D:DC:EF:8B Authority key identifier: 97:0A:D9:4C:83:24:41:00:A9:7F:91:86:D5:3D:AD:AB:07:99:5E:E9 Certificate issuer: /CN=970AD94C83244100A97F9186D53DADAB07995EE9 Certificate serial: 7942B726239A6C4135AA9A4DCEAEF23C29FF666C Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/970AD94C83244100A97F9186D53DADAB07995EE9.cer Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_9d839ca0a55e42a49d10de071f46598b/0/970AD94C83244100A97F9186D53DADAB07995EE9.mft Manifest number: 0210 Signing time: Tue 05 Aug 2025 16:42:31 +0000 Manifest this update: Tue 05 Aug 2025 16:37:31 +0000 Manifest next update: Wed 06 Aug 2025 20:31:31 +0000 Files and hashes: 1: 970AD94C83244100A97F9186D53DADAB07995EE9.crl (hash: Gi7EjONO8HCSbMQel8AJaYxNEx+0sMEWwSDbpDqUzto=) 2: 326131313a663263303a616361303a3a2f34342d3438203d3e20323132323435.roa (hash: CCNk9XY2QHD/b3jWZi363Jj900j75CnbAukUts4RWyQ=) 3: 326131313a663263303a666666363a3a2f34382d3438203d3e20323132323435.roa (hash: KUWIZJqj2P5+rqMCtyxvRjTojjJdo7mG970P3wqCh/c=) Validation: OK Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_9d839ca0a55e42a49d10de071f46598b/0/970AD94C83244100A97F9186D53DADAB07995EE9.crl rsync://rpki-repo.as207960.net/repo/rpki_ca_9d839ca0a55e42a49d10de071f46598b/0/970AD94C83244100A97F9186D53DADAB07995EE9.mft rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/970AD94C83244100A97F9186D53DADAB07995EE9.cer rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 06 Aug 2025 14:35:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:42:b7:26:23:9a:6c:41:35:aa:9a:4d:ce:ae:f2:3c:29:ff:66:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=970AD94C83244100A97F9186D53DADAB07995EE9 Validity Not Before: Aug 5 16:37:31 2025 GMT Not After : Aug 6 20:31:31 2025 GMT Subject: CN=E53D89C665EF3D23DA7795AC76CE8AF01DDCEF8B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:08:79:3d:88:5b:d0:ae:07:d7:47:ed:55:f4: 44:64:f8:ec:5f:bb:45:26:64:be:66:2a:5b:bc:dc: 57:e6:eb:07:aa:2a:31:7a:7e:ba:d4:e9:25:58:17: be:bb:33:e9:75:7c:41:34:db:00:c1:94:35:f6:bc: f7:ab:f3:ec:9e:79:67:f4:04:8f:e9:a0:49:87:f3: 3a:07:6e:26:11:ad:e6:9b:79:3b:9a:55:db:25:52: 60:f8:6b:c7:18:8b:3f:ab:49:79:87:24:52:d1:8d: 5c:8b:ca:5d:0c:98:1e:fc:59:67:8f:dc:b4:b2:46: 9b:cb:7d:c4:56:94:cf:8f:c5:f7:31:aa:10:d5:fa: 23:fb:82:40:62:f5:6b:56:6f:2a:73:0a:37:25:23: 9d:71:99:09:87:15:8b:22:eb:51:49:cc:38:03:6a: 54:62:f0:8d:a8:c2:8c:ea:a6:cc:ba:78:75:89:ae: 0c:92:b3:f3:7e:e3:83:d1:da:a5:af:06:0d:a6:d8: a6:2c:cc:69:71:da:e2:9f:20:84:a4:c2:bf:8c:10: 2d:b3:69:ca:ca:9d:70:87:0a:60:04:c5:48:30:65: ef:7d:5e:55:89:49:5b:3b:e1:7a:e9:ff:ec:bf:4c: 03:a4:ae:53:f2:bf:15:24:bd:fe:5c:6b:36:3e:76: 34:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:3D:89:C6:65:EF:3D:23:DA:77:95:AC:76:CE:8A:F0:1D:DC:EF:8B X509v3 Authority Key Identifier: keyid:97:0A:D9:4C:83:24:41:00:A9:7F:91:86:D5:3D:AD:AB:07:99:5E:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_9d839ca0a55e42a49d10de071f46598b/0/970AD94C83244100A97F9186D53DADAB07995EE9.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/970AD94C83244100A97F9186D53DADAB07995EE9.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_9d839ca0a55e42a49d10de071f46598b/0/970AD94C83244100A97F9186D53DADAB07995EE9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 23:80:e8:c5:84:5a:03:28:34:53:3b:51:45:4b:be:38:bf:ff: dd:80:0a:94:70:4e:7c:f2:81:95:17:88:f7:4e:88:33:55:16: 6c:0a:07:76:5f:99:43:4d:29:02:f4:b3:b3:fe:4b:ac:71:b8: 44:dc:70:c2:db:7e:b3:55:13:83:b2:95:cd:ec:f5:f9:7d:9e: 9d:9d:e4:54:a8:1a:1c:cc:d5:17:dd:95:84:ad:33:2e:4f:d7: 06:86:fd:de:8f:18:9f:41:c8:5e:28:ea:74:a4:68:ca:0e:68: 10:6a:45:77:9f:4d:43:a3:45:aa:d4:4e:e4:a1:d8:89:00:96: 08:0f:13:62:f4:70:e7:c0:8f:31:32:fe:dd:79:16:c1:8a:53: 60:29:7e:31:85:14:82:34:96:c7:df:cc:93:37:ba:4e:07:2e: 01:eb:cb:5e:27:17:05:3f:1d:86:62:fe:76:e8:42:e5:11:48: f9:8b:fc:a1:44:15:d3:6b:40:cb:cc:8c:8c:07:81:7b:be:2e: e5:e5:b6:71:10:61:73:da:5f:35:df:87:ff:09:9c:95:a3:a1: a0:14:38:44:b1:c9:ff:64:40:36:b7:de:42:da:c3:0f:6d:8f: 28:17:bf:5c:bd:bb:f3:d4:e5:de:c6:64:48:b4:53:4e:cc:e0: a8:cf:b9:a8 -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIUeUK3JiOabEE1qppNzq7yPCn/ZmwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTcwQUQ5NEM4MzI0NDEwMEE5N0Y5MTg2RDUzREFEQUIw Nzk5NUVFOTAeFw0yNTA4MDUxNjM3MzFaFw0yNTA4MDYyMDMxMzFaMDMxMTAvBgNV BAMTKEU1M0Q4OUM2NjVFRjNEMjNEQTc3OTVBQzc2Q0U4QUYwMUREQ0VGOEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDmCHk9iFvQrgfXR+1V9ERk+Oxf u0UmZL5mKlu83Ffm6weqKjF6frrU6SVYF767M+l1fEE02wDBlDX2vPer8+yeeWf0 BI/poEmH8zoHbiYRreabeTuaVdslUmD4a8cYiz+rSXmHJFLRjVyLyl0MmB78WWeP 3LSyRpvLfcRWlM+PxfcxqhDV+iP7gkBi9WtWbypzCjclI51xmQmHFYsi61FJzDgD alRi8I2owozqpsy6eHWJrgySs/N+44PR2qWvBg2m2KYszGlx2uKfIISkwr+MEC2z acrKnXCHCmAExUgwZe99XlWJSVs74Xrp/+y/TAOkrlPyvxUkvf5cazY+djTBAgMB AAGjggJ4MIICdDAdBgNVHQ4EFgQU5T2JxmXvPSPad5Wsds6K8B3c74swHwYDVR0j BBgwFoAUlwrZTIMkQQCpf5GG1T2tqweZXukwDgYDVR0PAQH/BAQDAgeAMIGPBgNV HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv cmVwby9ycGtpX2NhXzlkODM5Y2EwYTU1ZTQyYTQ5ZDEwZGUwNzFmNDY1OThiLzAv OTcwQUQ5NEM4MzI0NDEwMEE5N0Y5MTg2RDUzREFEQUIwNzk5NUVFOS5jcmwwgZ4G CCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5wYWFz LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQxYjUtODJh MC1mMGQwMmMwM2EyYzYvNy85NzBBRDk0QzgzMjQ0MTAwQTk3RjkxODZENTNEQURB QjA3OTk1RUU5LmNlcjCBmgYIKwYBBQUHAQsEgY0wgYowgYcGCCsGAQUFBzALhnty c3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQvcmVwby9ycGtpX2NhXzlkODM5 Y2EwYTU1ZTQyYTQ5ZDEwZGUwNzFmNDY1OThiLzAvOTcwQUQ5NEM4MzI0NDEwMEE5 N0Y5MTg2RDUzREFEQUIwNzk5NUVFOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBACOA6MWEWgMoNFM7UUVL vji//92ACpRwTnzygZUXiPdOiDNVFmwKB3ZfmUNNKQL0s7P+S6xxuETccMLbfrNV E4Oylc3s9fl9np2d5FSoGhzM1RfdlYStMy5P1waG/d6PGJ9ByF4o6nSkaMoOaBBq RXefTUOjRarUTuSh2IkAlggPE2L0cOfAjzEy/t15FsGKU2ApfjGFFII0lsffzJM3 uk4HLgHry14nFwU/HYZi/nboQuURSPmL/KFEFdNrQMvMjIwHgXu+LuXltnEQYXPa XzXfh/8JnJWjoaAUOESxyf9kQDa33kLaww9tjygXv1y9u/PU5d7GZEi0U07M4KjP uag= -----END CERTIFICATE-----Generated at Wed Aug 6 04:08:40 2025 by rpki-client