$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_9d839ca0a55e42a49d10de071f46598b/0/970AD94C83244100A97F9186D53DADAB07995EE9.mft File: 970AD94C83244100A97F9186D53DADAB07995EE9.mft (raw, json) Hash identifier: co2237RMtKo4fkM+A2UbHtGFc2fFe4FfEIiWfwzmDZc= Subject key identifier: B0:90:33:04:AC:6E:10:03:C8:15:37:FA:14:5D:ED:B0:D1:F7:DC:91 Authority key identifier: 97:0A:D9:4C:83:24:41:00:A9:7F:91:86:D5:3D:AD:AB:07:99:5E:E9 Certificate issuer: /CN=970AD94C83244100A97F9186D53DADAB07995EE9 Certificate serial: 1D3DBC6CF6E30F234472A0C226B6941CA6969FA2 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/970AD94C83244100A97F9186D53DADAB07995EE9.cer Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_9d839ca0a55e42a49d10de071f46598b/0/970AD94C83244100A97F9186D53DADAB07995EE9.mft Manifest number: 0259 Signing time: Sun 19 Oct 2025 19:45:33 +0000 Manifest this update: Sun 19 Oct 2025 19:40:33 +0000 Manifest next update: Mon 20 Oct 2025 20:28:33 +0000 Files and hashes: 1: 326131313a663263303a616361303a3a2f34342d3438203d3e20323132323435.roa (hash: CCNk9XY2QHD/b3jWZi363Jj900j75CnbAukUts4RWyQ=) 2: 970AD94C83244100A97F9186D53DADAB07995EE9.crl (hash: m3jwDCpgbBaAM8THHZPZfRYtHrdbwWz5USd1YymvRNY=) 3: 326131313a663263303a666666363a3a2f34382d3438203d3e20323132323435.roa (hash: KUWIZJqj2P5+rqMCtyxvRjTojjJdo7mG970P3wqCh/c=) Validation: OK Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_9d839ca0a55e42a49d10de071f46598b/0/970AD94C83244100A97F9186D53DADAB07995EE9.crl rsync://rpki-repo.as207960.net/repo/rpki_ca_9d839ca0a55e42a49d10de071f46598b/0/970AD94C83244100A97F9186D53DADAB07995EE9.mft rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/970AD94C83244100A97F9186D53DADAB07995EE9.cer rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 20 Oct 2025 20:28:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:3d:bc:6c:f6:e3:0f:23:44:72:a0:c2:26:b6:94:1c:a6:96:9f:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=970AD94C83244100A97F9186D53DADAB07995EE9 Validity Not Before: Oct 19 19:40:33 2025 GMT Not After : Oct 20 20:28:33 2025 GMT Subject: CN=B0903304AC6E1003C81537FA145DEDB0D1F7DC91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:3d:f7:62:03:f9:0d:90:a2:93:8c:3c:6b:ff: d9:b4:e0:84:07:66:24:bc:aa:a0:16:4a:80:19:e1: f5:5f:d3:eb:c7:1b:96:c9:cc:25:e0:da:9c:6f:f9: 81:92:67:23:0b:2e:0f:ad:4d:db:e1:0f:77:d9:61: cb:e3:74:bb:17:1d:86:91:13:25:aa:9f:76:96:f9: 3e:eb:b0:5b:0f:15:f3:fa:fb:c9:ed:79:90:17:74: 64:45:f7:6b:4a:5d:27:da:c9:50:5e:7b:13:ba:69: 8a:75:90:ca:58:9f:ce:c2:f4:5e:c0:86:6e:65:9f: e9:30:65:ca:da:5c:f4:9e:f7:26:19:64:9f:36:2a: 80:88:af:87:90:84:be:7a:ca:6b:9f:cf:5e:08:01: 4f:14:2c:be:74:9b:03:06:37:ef:b9:16:1e:6e:42: 7e:4b:6b:59:58:44:ed:77:3c:d2:b8:82:f3:13:17: 01:84:d0:c8:16:87:6c:40:dc:26:e3:6b:2a:01:2d: 7b:28:fc:80:0a:95:61:f9:70:5e:ae:c8:79:c4:e1: f9:f8:01:09:b6:b5:af:73:fc:63:8e:c6:f4:13:76: 15:60:c2:c7:76:26:da:4d:dd:0e:32:4f:ec:7f:d3: b4:bd:8d:90:f5:fb:5f:bf:30:8b:99:4f:00:21:a2: 1f:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:90:33:04:AC:6E:10:03:C8:15:37:FA:14:5D:ED:B0:D1:F7:DC:91 X509v3 Authority Key Identifier: keyid:97:0A:D9:4C:83:24:41:00:A9:7F:91:86:D5:3D:AD:AB:07:99:5E:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_9d839ca0a55e42a49d10de071f46598b/0/970AD94C83244100A97F9186D53DADAB07995EE9.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/970AD94C83244100A97F9186D53DADAB07995EE9.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_9d839ca0a55e42a49d10de071f46598b/0/970AD94C83244100A97F9186D53DADAB07995EE9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:25:d0:dc:b0:40:c2:f5:8c:6f:2c:1e:92:dd:10:b8:5f:db: 36:db:97:6f:66:cb:dc:0b:f6:8c:93:ff:81:ee:2d:ab:77:11: b2:9e:39:bb:a8:a1:1a:8f:cf:6a:be:18:01:bd:78:3e:e3:a0: 75:25:f2:69:e7:24:8c:f6:ad:2e:18:ff:df:fb:07:49:21:fd: d4:f8:59:d4:8e:e0:01:17:9a:c7:f5:b3:ae:55:a8:74:fc:c2: c7:1f:b1:ca:17:da:1a:53:cf:29:8f:f3:55:61:c2:c6:f2:44: 5a:c8:07:01:73:de:7d:7a:ed:4e:a5:4b:7f:19:f0:2c:97:29: 02:12:29:4f:38:d3:19:40:66:02:b2:14:4d:92:2c:f6:f6:4c: 10:96:64:97:86:7a:b6:64:6b:03:2d:22:56:95:1d:5b:08:4c: b4:b3:22:88:94:52:8b:57:a4:c2:f1:ff:04:ef:e8:4a:0a:ae: 6e:b6:99:e1:1a:71:a1:82:20:e1:6a:0a:cc:ed:b9:2d:1a:a5: fa:55:e2:be:36:bd:c6:b6:b7:7c:a4:e4:a2:e5:10:a0:41:a4: 86:a9:86:a4:49:74:0f:f6:a7:09:5a:35:50:b3:8d:0a:51:48: dd:da:38:c3:d5:dd:8c:73:8d:13:d5:83:83:4c:6f:f2:6f:5e: 5b:5c:13:35 -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIUHT28bPbjDyNEcqDCJraUHKaWn6IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTcwQUQ5NEM4MzI0NDEwMEE5N0Y5MTg2RDUzREFEQUIw Nzk5NUVFOTAeFw0yNTEwMTkxOTQwMzNaFw0yNTEwMjAyMDI4MzNaMDMxMTAvBgNV BAMTKEIwOTAzMzA0QUM2RTEwMDNDODE1MzdGQTE0NURFREIwRDFGN0RDOTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmPfdiA/kNkKKTjDxr/9m04IQH ZiS8qqAWSoAZ4fVf0+vHG5bJzCXg2pxv+YGSZyMLLg+tTdvhD3fZYcvjdLsXHYaR EyWqn3aW+T7rsFsPFfP6+8nteZAXdGRF92tKXSfayVBeexO6aYp1kMpYn87C9F7A hm5ln+kwZcraXPSe9yYZZJ82KoCIr4eQhL56ymufz14IAU8ULL50mwMGN++5Fh5u Qn5La1lYRO13PNK4gvMTFwGE0MgWh2xA3CbjayoBLXso/IAKlWH5cF6uyHnE4fn4 AQm2ta9z/GOOxvQTdhVgwsd2JtpN3Q4yT+x/07S9jZD1+1+/MIuZTwAhoh9hAgMB AAGjggJ4MIICdDAdBgNVHQ4EFgQUsJAzBKxuEAPIFTf6FF3tsNH33JEwHwYDVR0j BBgwFoAUlwrZTIMkQQCpf5GG1T2tqweZXukwDgYDVR0PAQH/BAQDAgeAMIGPBgNV HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv cmVwby9ycGtpX2NhXzlkODM5Y2EwYTU1ZTQyYTQ5ZDEwZGUwNzFmNDY1OThiLzAv OTcwQUQ5NEM4MzI0NDEwMEE5N0Y5MTg2RDUzREFEQUIwNzk5NUVFOS5jcmwwgZ4G CCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5wYWFz LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQxYjUtODJh MC1mMGQwMmMwM2EyYzYvNy85NzBBRDk0QzgzMjQ0MTAwQTk3RjkxODZENTNEQURB QjA3OTk1RUU5LmNlcjCBmgYIKwYBBQUHAQsEgY0wgYowgYcGCCsGAQUFBzALhnty c3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQvcmVwby9ycGtpX2NhXzlkODM5 Y2EwYTU1ZTQyYTQ5ZDEwZGUwNzFmNDY1OThiLzAvOTcwQUQ5NEM4MzI0NDEwMEE5 N0Y5MTg2RDUzREFEQUIwNzk5NUVFOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAHcl0NywQML1jG8sHpLd ELhf2zbbl29my9wL9oyT/4HuLat3EbKeObuooRqPz2q+GAG9eD7joHUl8mnnJIz2 rS4Y/9/7B0kh/dT4WdSO4AEXmsf1s65VqHT8wscfscoX2hpTzymP81VhwsbyRFrI BwFz3n167U6lS38Z8CyXKQISKU840xlAZgKyFE2SLPb2TBCWZJeGerZkawMtIlaV HVsITLSzIoiUUotXpMLx/wTv6EoKrm62meEacaGCIOFqCsztuS0apfpV4r42vca2 t3yk5KLlEKBBpIaphqRJdA/2pwlaNVCzjQpRSN3aOMPV3YxzjRPVg4NMb/JvXltc EzU= -----END CERTIFICATE-----Generated at Mon Oct 20 10:12:51 2025 by rpki-client