$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_9d839ca0a55e42a49d10de071f46598b/0/970AD94C83244100A97F9186D53DADAB07995EE9.mft File: 970AD94C83244100A97F9186D53DADAB07995EE9.mft (raw, json) Hash identifier: ScN2HjMPm+DQEKU6LPZJGAK0wVqEgyvtBcoe48uzcHU= Subject key identifier: C5:0A:B2:BE:BD:8E:4A:83:1D:13:46:01:CC:FB:2B:7D:65:D2:FE:56 Authority key identifier: 97:0A:D9:4C:83:24:41:00:A9:7F:91:86:D5:3D:AD:AB:07:99:5E:E9 Certificate issuer: /CN=970AD94C83244100A97F9186D53DADAB07995EE9 Certificate serial: 2BFF141DDC86A6C12EE71E726D58C9B45C235064 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/970AD94C83244100A97F9186D53DADAB07995EE9.cer Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_9d839ca0a55e42a49d10de071f46598b/0/970AD94C83244100A97F9186D53DADAB07995EE9.mft Manifest number: 01DD Signing time: Sat 28 Jun 2025 15:45:40 +0000 Manifest this update: Sat 28 Jun 2025 15:40:40 +0000 Manifest next update: Sun 29 Jun 2025 17:35:40 +0000 Files and hashes: 1: 970AD94C83244100A97F9186D53DADAB07995EE9.crl (hash: BTKOpLS4ODAI0PMesSbdiC7352AST1HZ8SMS/p/5CyU=) 2: 326131313a663263303a616361303a3a2f34342d3438203d3e20323132323435.roa (hash: CCNk9XY2QHD/b3jWZi363Jj900j75CnbAukUts4RWyQ=) 3: 326131313a663263303a666666363a3a2f34382d3438203d3e20323132323435.roa (hash: KUWIZJqj2P5+rqMCtyxvRjTojjJdo7mG970P3wqCh/c=) Validation: OK Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_9d839ca0a55e42a49d10de071f46598b/0/970AD94C83244100A97F9186D53DADAB07995EE9.crl rsync://rpki-repo.as207960.net/repo/rpki_ca_9d839ca0a55e42a49d10de071f46598b/0/970AD94C83244100A97F9186D53DADAB07995EE9.mft rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/970AD94C83244100A97F9186D53DADAB07995EE9.cer rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 29 Jun 2025 17:35:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:ff:14:1d:dc:86:a6:c1:2e:e7:1e:72:6d:58:c9:b4:5c:23:50:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=970AD94C83244100A97F9186D53DADAB07995EE9 Validity Not Before: Jun 28 15:40:40 2025 GMT Not After : Jun 29 17:35:40 2025 GMT Subject: CN=C50AB2BEBD8E4A831D134601CCFB2B7D65D2FE56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:53:dc:cb:a6:6c:8f:36:6a:9f:2d:9b:76:59: 0a:d0:1a:b0:8e:4e:0c:89:06:6e:03:61:e3:1a:ef: 49:33:2d:ec:8e:6b:fe:a8:df:a7:9a:bb:ea:8d:03: de:65:ce:56:79:87:3b:b3:34:8c:68:2b:45:1f:d0: 7f:52:05:1d:4d:08:c4:c5:fb:e5:8a:ed:bf:57:2c: 62:eb:92:f8:af:11:e0:7c:72:e6:7a:34:a6:4a:4d: 21:5d:41:c4:90:fb:89:65:fb:c2:25:ad:b8:09:2f: 95:d9:f2:4c:0f:71:b4:bc:59:68:5d:9b:10:18:71: 11:71:7a:c6:ff:c1:75:66:b8:db:0d:af:1f:f9:cc: d8:1a:1b:9b:cc:00:a1:73:d8:70:b2:20:d8:fe:bb: ff:46:b7:a1:d9:6a:4e:b1:ab:8e:d8:c9:2b:17:48: a0:21:29:47:b1:c4:52:06:b9:78:39:c1:59:c2:b8: 61:c3:f1:6f:c4:08:6f:f4:b6:9e:d0:f0:24:2c:6f: a8:7f:ec:5c:41:9a:9e:4a:49:66:56:b1:88:89:4c: ed:1a:ad:cf:2c:e6:a8:04:21:01:d7:64:31:89:b4: 04:a8:58:87:8c:2b:de:a5:3b:7b:d8:e4:14:1c:ee: b7:4a:0e:c3:27:cc:7d:bc:b1:f6:aa:8f:77:fe:25: 2e:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:0A:B2:BE:BD:8E:4A:83:1D:13:46:01:CC:FB:2B:7D:65:D2:FE:56 X509v3 Authority Key Identifier: keyid:97:0A:D9:4C:83:24:41:00:A9:7F:91:86:D5:3D:AD:AB:07:99:5E:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_9d839ca0a55e42a49d10de071f46598b/0/970AD94C83244100A97F9186D53DADAB07995EE9.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/970AD94C83244100A97F9186D53DADAB07995EE9.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_9d839ca0a55e42a49d10de071f46598b/0/970AD94C83244100A97F9186D53DADAB07995EE9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c9:9a:ae:52:7f:3a:34:87:02:4c:32:91:24:f4:ff:83:f7:2c: 35:17:7d:cd:aa:e2:51:dc:bd:1b:f6:15:4a:5e:da:b1:70:ff: 92:9e:5b:cb:4e:bd:da:80:e8:ac:c1:ac:85:a4:13:fe:03:36: 0f:9e:4e:b2:31:1e:3b:2c:d8:23:f6:0f:58:d3:2b:54:08:14: b2:58:bb:27:0d:5c:e4:06:a0:64:ee:c5:cc:d4:3a:ad:2d:c6: 47:f5:73:5f:e4:7c:c5:ca:20:74:e0:aa:8d:23:65:70:b4:03: 61:93:54:26:b8:dc:fe:75:8d:04:d8:ee:9c:54:c2:40:9f:c7: db:89:57:27:fd:e3:25:be:b8:93:5a:72:45:c5:7f:0c:a9:f7: ec:35:18:26:42:0d:5a:2a:8a:e2:56:d1:34:27:4e:34:ac:de: 83:eb:cb:f3:d7:cc:18:9b:84:03:35:82:16:66:68:19:cc:af: 30:13:cd:d2:31:e3:c7:b5:53:b1:36:d4:4e:07:44:45:dc:63: 17:6c:3c:46:ee:b1:88:e1:ee:3d:8b:40:cf:65:89:40:0d:c2: f6:06:d4:8f:ec:0d:78:12:9a:94:dd:a0:26:fe:2f:35:8a:a9: 64:82:42:6c:38:f3:29:e6:c8:1a:fc:ba:42:41:16:80:a8:31: 2c:82:a9:8e -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIUK/8UHdyGpsEu5x5ybVjJtFwjUGQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTcwQUQ5NEM4MzI0NDEwMEE5N0Y5MTg2RDUzREFEQUIw Nzk5NUVFOTAeFw0yNTA2MjgxNTQwNDBaFw0yNTA2MjkxNzM1NDBaMDMxMTAvBgNV BAMTKEM1MEFCMkJFQkQ4RTRBODMxRDEzNDYwMUNDRkIyQjdENjVEMkZFNTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDyU9zLpmyPNmqfLZt2WQrQGrCO TgyJBm4DYeMa70kzLeyOa/6o36eau+qNA95lzlZ5hzuzNIxoK0Uf0H9SBR1NCMTF ++WK7b9XLGLrkvivEeB8cuZ6NKZKTSFdQcSQ+4ll+8IlrbgJL5XZ8kwPcbS8WWhd mxAYcRFxesb/wXVmuNsNrx/5zNgaG5vMAKFz2HCyINj+u/9Gt6HZak6xq47YySsX SKAhKUexxFIGuXg5wVnCuGHD8W/ECG/0tp7Q8CQsb6h/7FxBmp5KSWZWsYiJTO0a rc8s5qgEIQHXZDGJtASoWIeMK96lO3vY5BQc7rdKDsMnzH28sfaqj3f+JS61AgMB AAGjggJ4MIICdDAdBgNVHQ4EFgQUxQqyvr2OSoMdE0YBzPsrfWXS/lYwHwYDVR0j BBgwFoAUlwrZTIMkQQCpf5GG1T2tqweZXukwDgYDVR0PAQH/BAQDAgeAMIGPBgNV HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv cmVwby9ycGtpX2NhXzlkODM5Y2EwYTU1ZTQyYTQ5ZDEwZGUwNzFmNDY1OThiLzAv OTcwQUQ5NEM4MzI0NDEwMEE5N0Y5MTg2RDUzREFEQUIwNzk5NUVFOS5jcmwwgZ4G CCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5wYWFz LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQxYjUtODJh MC1mMGQwMmMwM2EyYzYvNy85NzBBRDk0QzgzMjQ0MTAwQTk3RjkxODZENTNEQURB QjA3OTk1RUU5LmNlcjCBmgYIKwYBBQUHAQsEgY0wgYowgYcGCCsGAQUFBzALhnty c3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQvcmVwby9ycGtpX2NhXzlkODM5 Y2EwYTU1ZTQyYTQ5ZDEwZGUwNzFmNDY1OThiLzAvOTcwQUQ5NEM4MzI0NDEwMEE5 N0Y5MTg2RDUzREFEQUIwNzk5NUVFOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAMmarlJ/OjSHAkwykST0 /4P3LDUXfc2q4lHcvRv2FUpe2rFw/5KeW8tOvdqA6KzBrIWkE/4DNg+eTrIxHjss 2CP2D1jTK1QIFLJYuycNXOQGoGTuxczUOq0txkf1c1/kfMXKIHTgqo0jZXC0A2GT VCa43P51jQTY7pxUwkCfx9uJVyf94yW+uJNackXFfwyp9+w1GCZCDVoqiuJW0TQn TjSs3oPry/PXzBibhAM1ghZmaBnMrzATzdIx48e1U7E21E4HREXcYxdsPEbusYjh 7j2LQM9liUANwvYG1I/sDXgSmpTdoCb+LzWKqWSCQmw48ynmyBr8ukJBFoCoMSyC qY4= -----END CERTIFICATE-----Generated at Sun Jun 29 08:53:08 2025 by rpki-client