$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_9d839ca0a55e42a49d10de071f46598b/0/970AD94C83244100A97F9186D53DADAB07995EE9.mft File: 970AD94C83244100A97F9186D53DADAB07995EE9.mft (raw, json) Hash identifier: D6BNU4swCPD/kAyr5QhXhCwlPVTWjFoAWqfZ/7H8SoM= Subject key identifier: 29:77:11:07:71:8C:E4:90:8A:A1:C8:34:60:94:CC:94:2B:D9:EC:4C Authority key identifier: 97:0A:D9:4C:83:24:41:00:A9:7F:91:86:D5:3D:AD:AB:07:99:5E:E9 Certificate issuer: /CN=970AD94C83244100A97F9186D53DADAB07995EE9 Certificate serial: 1474D266A465932D30C12078FD22C33B69695825 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/970AD94C83244100A97F9186D53DADAB07995EE9.cer Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_9d839ca0a55e42a49d10de071f46598b/0/970AD94C83244100A97F9186D53DADAB07995EE9.mft Manifest number: 0199 Signing time: Fri 09 May 2025 11:56:24 +0000 Manifest this update: Fri 09 May 2025 11:51:21 +0000 Manifest next update: Sat 10 May 2025 12:56:21 +0000 Files and hashes: 1: 970AD94C83244100A97F9186D53DADAB07995EE9.crl (hash: LGIovPPSnSKTHsSEareb61bEb1XkK8hMSTawJkCMyNQ=) 2: 326131313a663263303a666666363a3a2f34382d3438203d3e20323132323435.roa (hash: tepnhtpStfx+iROmpj+cPwbcFtzKc4geGeglxL8Depc=) 3: 326131313a663263303a616361303a3a2f34342d3438203d3e20323132323435.roa (hash: nGPaoJsTa0iz1OKWgPTFsxZ5o789bs60P5bQmrEBxPY=) Validation: OK Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_9d839ca0a55e42a49d10de071f46598b/0/970AD94C83244100A97F9186D53DADAB07995EE9.crl rsync://rpki-repo.as207960.net/repo/rpki_ca_9d839ca0a55e42a49d10de071f46598b/0/970AD94C83244100A97F9186D53DADAB07995EE9.mft rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/970AD94C83244100A97F9186D53DADAB07995EE9.cer rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 May 2025 12:56:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:74:d2:66:a4:65:93:2d:30:c1:20:78:fd:22:c3:3b:69:69:58:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=970AD94C83244100A97F9186D53DADAB07995EE9 Validity Not Before: May 9 11:51:21 2025 GMT Not After : May 10 12:56:21 2025 GMT Subject: CN=29771107718CE4908AA1C8346094CC942BD9EC4C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:32:2b:e6:b1:1e:1d:c2:d3:a3:d6:1d:ac:99: 7d:d1:82:59:36:28:54:80:a8:b8:ab:4f:bd:f8:f3: 74:36:ab:74:64:fa:b3:96:a5:4a:6e:ee:dc:87:f0: b2:83:da:a0:03:80:74:e1:e1:64:77:45:e3:cd:f7: 89:84:57:da:7f:a9:8b:94:cc:6f:9d:70:c9:0b:bc: 51:38:ce:b8:ef:5b:05:e4:3a:16:d2:24:af:b3:4b: c0:f5:a6:7d:b6:08:be:29:0e:91:ea:fe:35:39:00: 04:74:f2:35:cd:f8:a7:c1:98:d4:9e:5b:d9:b9:41: 01:6e:41:62:b8:15:17:1b:0d:68:ef:e8:74:bd:01: 87:cd:09:bd:80:51:26:72:fe:33:66:b0:72:c2:b9: c4:2c:d9:9c:e3:30:03:62:a2:9c:fd:ad:f9:1b:c8: 15:11:c4:e1:1a:e9:fb:58:36:d4:c4:d4:c4:61:b1: c7:59:12:6a:2d:6c:4e:71:f5:76:7d:21:6a:eb:1f: 6b:26:b8:ba:20:b7:8c:ca:10:1f:47:02:ac:af:d0: f8:6c:57:98:3b:0f:9e:ef:ce:85:2f:a8:73:51:4d: b5:a5:f6:09:cf:e5:d3:a0:1f:5a:db:31:6d:5a:3d: 3a:83:e1:8a:19:ee:d2:bd:a9:07:c8:73:47:9c:54: 19:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:77:11:07:71:8C:E4:90:8A:A1:C8:34:60:94:CC:94:2B:D9:EC:4C X509v3 Authority Key Identifier: keyid:97:0A:D9:4C:83:24:41:00:A9:7F:91:86:D5:3D:AD:AB:07:99:5E:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_9d839ca0a55e42a49d10de071f46598b/0/970AD94C83244100A97F9186D53DADAB07995EE9.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/970AD94C83244100A97F9186D53DADAB07995EE9.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_9d839ca0a55e42a49d10de071f46598b/0/970AD94C83244100A97F9186D53DADAB07995EE9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:fd:82:f6:d1:a4:b7:15:c6:82:e7:e8:30:44:64:97:71:ce: 89:c5:ec:40:e1:1e:02:7a:ec:f8:55:74:a0:96:84:07:b7:a4: bb:af:47:9d:3a:0b:9c:fd:0e:24:a3:f4:f7:6d:87:93:a3:ee: c8:19:45:77:56:26:bb:a4:72:62:ac:0f:22:78:7e:49:b7:c5: 11:56:f7:3f:6c:c0:ee:5f:5f:7d:89:ae:c9:e2:56:68:a1:6f: 99:0a:0d:d6:c6:25:ce:c0:9e:66:56:ea:f7:7a:7a:24:02:70: f9:e5:e5:0c:5e:4d:8c:db:0c:4c:55:72:f9:2d:ef:6b:a0:f5: 5b:d8:7f:c9:fe:01:67:a8:17:77:76:b5:aa:ee:35:83:2e:be: ea:c4:d1:36:f6:e1:09:ee:09:cf:ee:1d:0b:2c:b6:58:c1:07: 9b:7a:be:5e:6a:51:5a:6a:c0:eb:07:08:f3:dd:dd:da:93:8f: 60:cf:f0:ef:90:68:a1:b3:ac:10:d4:51:48:27:38:c8:b6:ee: 80:36:40:a1:c9:e6:c6:c3:8f:65:91:d5:28:c2:43:ea:7b:cf: f5:a8:83:7d:04:17:5d:89:d8:1a:eb:d2:0a:1b:ad:d4:4e:59: a4:c0:14:c6:b6:3f:a6:d8:a9:e9:17:36:b6:5d:68:0e:38:0c: a9:46:a1:ef -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIUFHTSZqRlky0wwSB4/SLDO2lpWCUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTcwQUQ5NEM4MzI0NDEwMEE5N0Y5MTg2RDUzREFEQUIw Nzk5NUVFOTAeFw0yNTA1MDkxMTUxMjFaFw0yNTA1MTAxMjU2MjFaMDMxMTAvBgNV BAMTKDI5NzcxMTA3NzE4Q0U0OTA4QUExQzgzNDYwOTRDQzk0MkJEOUVDNEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/MivmsR4dwtOj1h2smX3Rglk2 KFSAqLirT73483Q2q3Rk+rOWpUpu7tyH8LKD2qADgHTh4WR3RePN94mEV9p/qYuU zG+dcMkLvFE4zrjvWwXkOhbSJK+zS8D1pn22CL4pDpHq/jU5AAR08jXN+KfBmNSe W9m5QQFuQWK4FRcbDWjv6HS9AYfNCb2AUSZy/jNmsHLCucQs2ZzjMANiopz9rfkb yBURxOEa6ftYNtTE1MRhscdZEmotbE5x9XZ9IWrrH2smuLogt4zKEB9HAqyv0Phs V5g7D57vzoUvqHNRTbWl9gnP5dOgH1rbMW1aPTqD4YoZ7tK9qQfIc0ecVBnPAgMB AAGjggJ4MIICdDAdBgNVHQ4EFgQUKXcRB3GM5JCKocg0YJTMlCvZ7EwwHwYDVR0j BBgwFoAUlwrZTIMkQQCpf5GG1T2tqweZXukwDgYDVR0PAQH/BAQDAgeAMIGPBgNV HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv cmVwby9ycGtpX2NhXzlkODM5Y2EwYTU1ZTQyYTQ5ZDEwZGUwNzFmNDY1OThiLzAv OTcwQUQ5NEM4MzI0NDEwMEE5N0Y5MTg2RDUzREFEQUIwNzk5NUVFOS5jcmwwgZ4G CCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5wYWFz LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQxYjUtODJh MC1mMGQwMmMwM2EyYzYvNy85NzBBRDk0QzgzMjQ0MTAwQTk3RjkxODZENTNEQURB QjA3OTk1RUU5LmNlcjCBmgYIKwYBBQUHAQsEgY0wgYowgYcGCCsGAQUFBzALhnty c3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQvcmVwby9ycGtpX2NhXzlkODM5 Y2EwYTU1ZTQyYTQ5ZDEwZGUwNzFmNDY1OThiLzAvOTcwQUQ5NEM4MzI0NDEwMEE5 N0Y5MTg2RDUzREFEQUIwNzk5NUVFOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAHX9gvbRpLcVxoLn6DBE ZJdxzonF7EDhHgJ67PhVdKCWhAe3pLuvR506C5z9DiSj9Pdth5Oj7sgZRXdWJruk cmKsDyJ4fkm3xRFW9z9swO5fX32JrsniVmihb5kKDdbGJc7AnmZW6vd6eiQCcPnl 5QxeTYzbDExVcvkt72ug9VvYf8n+AWeoF3d2taruNYMuvurE0Tb24QnuCc/uHQss tljBB5t6vl5qUVpqwOsHCPPd3dqTj2DP8O+QaKGzrBDUUUgnOMi27oA2QKHJ5sbD j2WR1SjCQ+p7z/Wog30EF12J2Brr0gobrdROWaTAFMa2P6bYqekXNrZdaA44DKlG oe8= -----END CERTIFICATE-----Generated at Sat May 10 06:34:39 2025 by rpki-client