$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_9d839ca0a55e42a49d10de071f46598b/0/970AD94C83244100A97F9186D53DADAB07995EE9.mft File: 970AD94C83244100A97F9186D53DADAB07995EE9.mft (raw, json) Hash identifier: 0FK8shYWLZSW/9IS63Z+kaoydzXyqtCet9dFRZLttHA= Subject key identifier: 20:2A:2A:E6:91:0F:29:BA:C7:36:BA:F6:8F:8A:16:83:C7:04:38:BF Authority key identifier: 97:0A:D9:4C:83:24:41:00:A9:7F:91:86:D5:3D:AD:AB:07:99:5E:E9 Certificate issuer: /CN=970AD94C83244100A97F9186D53DADAB07995EE9 Certificate serial: 17906BAF849BF4994A909E766405A20FAAA13FFB Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/970AD94C83244100A97F9186D53DADAB07995EE9.cer Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_9d839ca0a55e42a49d10de071f46598b/0/970AD94C83244100A97F9186D53DADAB07995EE9.mft Manifest number: 0325 Signing time: Fri 17 Apr 2026 18:11:35 +0000 Manifest this update: Fri 17 Apr 2026 18:06:33 +0000 Manifest next update: Sat 18 Apr 2026 21:18:33 +0000 Files and hashes: 1: 326131313a663263303a666666363a3a2f34382d3438203d3e20323132323435.roa (hash: KUWIZJqj2P5+rqMCtyxvRjTojjJdo7mG970P3wqCh/c=) 2: 970AD94C83244100A97F9186D53DADAB07995EE9.crl (hash: AOkj31OngU+oFOk7mFx4B59+RlGOok3a7sR4jmV8hO0=) 3: 326131313a663263303a616361303a3a2f34342d3438203d3e20323132323435.roa (hash: CCNk9XY2QHD/b3jWZi363Jj900j75CnbAukUts4RWyQ=) Validation: OK Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_9d839ca0a55e42a49d10de071f46598b/0/970AD94C83244100A97F9186D53DADAB07995EE9.crl rsync://rpki-repo.as207960.net/repo/rpki_ca_9d839ca0a55e42a49d10de071f46598b/0/970AD94C83244100A97F9186D53DADAB07995EE9.mft rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/970AD94C83244100A97F9186D53DADAB07995EE9.cer rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 18 Apr 2026 21:18:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:90:6b:af:84:9b:f4:99:4a:90:9e:76:64:05:a2:0f:aa:a1:3f:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=970AD94C83244100A97F9186D53DADAB07995EE9 Validity Not Before: Apr 17 18:06:33 2026 GMT Not After : Apr 18 21:18:33 2026 GMT Subject: CN=202A2AE6910F29BAC736BAF68F8A1683C70438BF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:5b:2c:9c:9c:1b:b2:b8:02:1f:f1:19:60:00: fc:45:ad:5a:61:f2:34:29:85:a3:f8:e5:0f:1e:da: 70:66:ac:5f:4d:66:13:81:de:36:c9:cc:34:64:5a: 56:1e:9a:e0:bb:b1:93:8e:b3:6b:9f:72:52:4b:27: 64:05:96:09:a0:2f:9a:48:40:61:22:e8:12:5c:f4: c7:85:13:75:ae:ef:5e:35:09:b0:01:b1:88:16:05: 24:ac:04:ff:ae:82:2a:3a:49:32:a9:95:0e:33:7c: bc:e7:37:c0:28:5d:31:b6:6c:0c:cc:47:f4:8b:40: 23:7a:b2:e2:a6:d0:a8:a1:23:08:ae:a6:4b:72:e2: 0d:28:ee:a2:0f:32:f5:09:44:1f:f7:71:b3:ad:cc: f4:91:e2:af:4c:d4:1d:6a:52:2b:4e:6f:74:19:87: 9d:2a:aa:7a:87:a0:f6:ca:be:be:ad:89:e7:08:7c: cf:ad:a6:71:19:5e:b4:e0:ee:65:e0:4e:a4:72:46: c8:6e:7a:51:c3:55:1a:0c:a0:5e:8d:3a:9f:e1:c2: 93:46:26:8c:95:f7:6a:d3:65:46:7e:7f:a6:87:78: f6:43:67:73:de:5f:12:1b:78:68:52:11:a5:b8:84: f4:5e:83:a1:4a:26:e9:30:02:66:6a:0c:41:06:1b: 78:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:2A:2A:E6:91:0F:29:BA:C7:36:BA:F6:8F:8A:16:83:C7:04:38:BF X509v3 Authority Key Identifier: keyid:97:0A:D9:4C:83:24:41:00:A9:7F:91:86:D5:3D:AD:AB:07:99:5E:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_9d839ca0a55e42a49d10de071f46598b/0/970AD94C83244100A97F9186D53DADAB07995EE9.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/970AD94C83244100A97F9186D53DADAB07995EE9.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_9d839ca0a55e42a49d10de071f46598b/0/970AD94C83244100A97F9186D53DADAB07995EE9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:fd:fb:ca:e0:b4:31:a5:55:3b:cd:78:2a:7b:1c:9c:ca:54: 3c:68:cb:c8:ec:06:dd:ae:20:f2:75:fd:4c:eb:75:9d:db:f0: f1:e4:ed:b1:68:f7:5a:f3:b2:55:f1:03:37:02:ad:a4:5a:cc: 40:fe:95:f6:4c:6a:bc:04:54:7c:23:9a:fc:5b:d1:54:00:c6: 44:19:a5:1b:c6:be:da:93:6e:aa:4d:df:8e:fa:25:c8:0e:e7: 0c:80:6f:e9:a1:4a:09:3c:b1:31:b8:c8:78:84:74:4b:cd:23: c6:23:fe:a4:dd:f5:df:30:04:63:32:c4:4e:2e:41:ab:c2:df: a7:b8:6b:41:42:60:28:93:dc:37:69:98:72:55:a3:a5:d8:99: 07:22:92:ce:15:1d:c5:a7:c6:82:5f:1b:5d:8e:bc:05:f5:7c: 56:13:59:d1:9b:c2:f3:42:2d:e8:ab:0e:0d:29:39:13:ce:ee: 1b:1e:39:85:59:df:73:69:ac:02:62:42:82:09:7d:78:5a:d9: 58:03:06:81:32:7c:1c:c7:9c:af:75:67:99:be:02:e4:94:1c: cb:dd:df:89:7a:21:c8:f9:ad:db:cb:5f:3c:54:17:fc:59:7c: 3b:95:94:7e:a4:bb:28:84:88:36:93:d8:14:2a:8d:ed:ab:a3: f3:19:e9:69 -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIUF5Brr4Sb9JlKkJ52ZAWiD6qhP/swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTcwQUQ5NEM4MzI0NDEwMEE5N0Y5MTg2RDUzREFEQUIw Nzk5NUVFOTAeFw0yNjA0MTcxODA2MzNaFw0yNjA0MTgyMTE4MzNaMDMxMTAvBgNV BAMTKDIwMkEyQUU2OTEwRjI5QkFDNzM2QkFGNjhGOEExNjgzQzcwNDM4QkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCUWyycnBuyuAIf8RlgAPxFrVph 8jQphaP45Q8e2nBmrF9NZhOB3jbJzDRkWlYemuC7sZOOs2ufclJLJ2QFlgmgL5pI QGEi6BJc9MeFE3Wu7141CbABsYgWBSSsBP+ugio6STKplQ4zfLznN8AoXTG2bAzM R/SLQCN6suKm0KihIwiupkty4g0o7qIPMvUJRB/3cbOtzPSR4q9M1B1qUitOb3QZ h50qqnqHoPbKvr6tiecIfM+tpnEZXrTg7mXgTqRyRshuelHDVRoMoF6NOp/hwpNG JoyV92rTZUZ+f6aHePZDZ3PeXxIbeGhSEaW4hPReg6FKJukwAmZqDEEGG3izAgMB AAGjggJ4MIICdDAdBgNVHQ4EFgQUICoq5pEPKbrHNrr2j4oWg8cEOL8wHwYDVR0j BBgwFoAUlwrZTIMkQQCpf5GG1T2tqweZXukwDgYDVR0PAQH/BAQDAgeAMIGPBgNV HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv cmVwby9ycGtpX2NhXzlkODM5Y2EwYTU1ZTQyYTQ5ZDEwZGUwNzFmNDY1OThiLzAv OTcwQUQ5NEM4MzI0NDEwMEE5N0Y5MTg2RDUzREFEQUIwNzk5NUVFOS5jcmwwgZ4G CCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5wYWFz LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQxYjUtODJh MC1mMGQwMmMwM2EyYzYvNy85NzBBRDk0QzgzMjQ0MTAwQTk3RjkxODZENTNEQURB QjA3OTk1RUU5LmNlcjCBmgYIKwYBBQUHAQsEgY0wgYowgYcGCCsGAQUFBzALhnty c3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQvcmVwby9ycGtpX2NhXzlkODM5 Y2EwYTU1ZTQyYTQ5ZDEwZGUwNzFmNDY1OThiLzAvOTcwQUQ5NEM4MzI0NDEwMEE5 N0Y5MTg2RDUzREFEQUIwNzk5NUVFOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBADH9+8rgtDGlVTvNeCp7 HJzKVDxoy8jsBt2uIPJ1/UzrdZ3b8PHk7bFo91rzslXxAzcCraRazED+lfZMarwE VHwjmvxb0VQAxkQZpRvGvtqTbqpN3476JcgO5wyAb+mhSgk8sTG4yHiEdEvNI8Yj /qTd9d8wBGMyxE4uQavC36e4a0FCYCiT3DdpmHJVo6XYmQciks4VHcWnxoJfG12O vAX1fFYTWdGbwvNCLeirDg0pORPO7hseOYVZ33NprAJiQoIJfXha2VgDBoEyfBzH nK91Z5m+AuSUHMvd34l6Icj5rdvLXzxUF/xZfDuVlH6kuyiEiDaT2BQqje2ro/MZ 6Wk= -----END CERTIFICATE-----Generated at Sat Apr 18 04:41:08 2026 by rpki-client