$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_9d839ca0a55e42a49d10de071f46598b/0/970AD94C83244100A97F9186D53DADAB07995EE9.mft File: 970AD94C83244100A97F9186D53DADAB07995EE9.mft (raw, json) Hash identifier: u1jy3rtFQdE6UV1EqZfEZuzl38o5vgvzuuXeLD9i4r8= Subject key identifier: 28:BC:34:F7:AD:55:08:EE:9A:0C:00:38:32:6A:5D:D8:D7:06:3E:87 Authority key identifier: 97:0A:D9:4C:83:24:41:00:A9:7F:91:86:D5:3D:AD:AB:07:99:5E:E9 Certificate issuer: /CN=970AD94C83244100A97F9186D53DADAB07995EE9 Certificate serial: 4DB682C6291D5E41AC265991CC06FABD8464E4CC Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/970AD94C83244100A97F9186D53DADAB07995EE9.cer Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_9d839ca0a55e42a49d10de071f46598b/0/970AD94C83244100A97F9186D53DADAB07995EE9.mft Manifest number: 03A7 Signing time: Fri 24 Jul 2026 12:05:39 +0000 Manifest this update: Fri 24 Jul 2026 12:00:39 +0000 Manifest next update: Sat 25 Jul 2026 14:10:39 +0000 Files and hashes: 1: 970AD94C83244100A97F9186D53DADAB07995EE9.crl (hash: Mli/83q2LeVdGEInwnEGRTYXqL0SPvZobVUxyj6Q8No=) 2: 326131313a663263303a666666363a3a2f34382d3438203d3e20323132323435.roa (hash: MoaZbbTY7Jqr4LowGTe1KRJNCD2PmKCRt2v7wni6Nh8=) 3: 326131313a663263303a616361303a3a2f34342d3438203d3e20323132323435.roa (hash: 9SYQBw+WVon+uq1bGjlomS1wDEHFsVFbA0dbRqR0nMs=) Validation: OK Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_9d839ca0a55e42a49d10de071f46598b/0/970AD94C83244100A97F9186D53DADAB07995EE9.crl rsync://rpki-repo.as207960.net/repo/rpki_ca_9d839ca0a55e42a49d10de071f46598b/0/970AD94C83244100A97F9186D53DADAB07995EE9.mft rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/970AD94C83244100A97F9186D53DADAB07995EE9.cer rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 25 Jul 2026 08:00:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:b6:82:c6:29:1d:5e:41:ac:26:59:91:cc:06:fa:bd:84:64:e4:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=970AD94C83244100A97F9186D53DADAB07995EE9 Validity Not Before: Jul 24 12:00:39 2026 GMT Not After : Jul 25 14:10:39 2026 GMT Subject: CN=28BC34F7AD5508EE9A0C0038326A5DD8D7063E87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:58:29:d4:8c:9b:c9:bf:13:82:d9:26:e5:ee: 77:52:6e:26:9b:cb:7d:63:4b:3e:f3:94:02:4d:b8: 7c:4b:95:f2:2c:6d:27:bc:87:9b:1f:d1:de:7d:5d: 94:99:d0:d8:4d:c2:c2:43:1d:d7:18:30:86:ec:21: 0e:7a:81:76:08:86:e8:0e:f7:3f:f4:b1:56:2f:95: 33:77:9d:60:1c:1d:d8:7e:e0:05:c6:fb:bd:93:aa: d1:59:99:a3:be:71:d6:e9:62:1e:c1:fc:56:eb:f5: 6c:91:77:6b:4d:25:f9:23:ff:43:a0:a4:99:a9:7e: 3f:96:ef:d9:59:7c:11:b0:09:b8:55:96:47:67:69: 72:69:08:1d:df:5d:79:46:9a:e9:9e:7d:3f:8e:3c: 0e:e1:60:3e:f1:46:f0:67:78:f7:ff:01:bc:ba:2e: cd:b2:5d:af:b4:bb:06:4f:59:de:a7:df:f9:13:8d: a0:9b:8c:83:9e:01:46:11:7f:98:96:84:3d:9c:3c: 7b:44:67:81:57:3d:de:66:58:a5:6c:5b:a1:6a:85: a2:d2:79:76:ef:db:cd:dd:20:0c:23:be:26:5f:19: bb:ce:33:cd:ee:bd:a4:d2:a3:7f:e6:5e:fd:98:43: 17:7c:c4:2f:ab:77:9c:a8:18:5f:18:fc:79:d7:3a: b1:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:BC:34:F7:AD:55:08:EE:9A:0C:00:38:32:6A:5D:D8:D7:06:3E:87 X509v3 Authority Key Identifier: keyid:97:0A:D9:4C:83:24:41:00:A9:7F:91:86:D5:3D:AD:AB:07:99:5E:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_9d839ca0a55e42a49d10de071f46598b/0/970AD94C83244100A97F9186D53DADAB07995EE9.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/970AD94C83244100A97F9186D53DADAB07995EE9.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_9d839ca0a55e42a49d10de071f46598b/0/970AD94C83244100A97F9186D53DADAB07995EE9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9b:54:d8:19:8b:cc:9d:99:f3:eb:de:b8:93:67:77:d0:8d:3b: 27:4d:d0:e4:64:8d:da:22:94:e7:b3:2e:6e:a8:b3:23:ad:92: fd:9f:02:f5:c0:e4:86:c1:dc:1c:c7:8c:95:2d:13:b2:9a:a0: f3:eb:10:d0:a9:f2:7f:0a:dd:11:3d:85:e8:42:ab:4f:d7:84: 36:c8:9e:48:a2:28:c6:fc:5e:5f:4a:66:7d:63:a3:fc:67:73: 77:5c:e1:79:35:fc:4a:c9:d4:a2:07:e6:69:a3:0d:2e:d6:3f: 4b:c9:d3:d6:48:50:d8:c3:94:11:2a:98:5c:07:e3:dc:b8:8e: 62:86:5a:f0:27:c4:27:4e:e1:33:79:59:50:7e:ad:2e:5e:a3: e7:ba:df:9a:67:e3:de:a6:ef:35:80:dd:54:ba:b5:f0:3a:84: 11:20:4c:93:c2:fc:34:93:af:fd:50:e5:07:2b:c2:52:44:75: c4:ad:20:ad:cf:e4:ca:f9:b6:58:ba:be:5f:f4:dc:37:c9:cc: 05:4e:c4:35:c6:f0:f0:ad:95:a9:53:c6:e7:dd:ce:4a:30:c6: 10:99:e0:50:f4:ae:41:a3:ec:e0:6b:a0:f3:bf:1c:0d:df:a6: e9:a6:63:82:52:19:fb:cc:ab:d3:37:32:05:2e:87:ba:c2:e7: 55:b0:84:c6 -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIUTbaCxikdXkGsJlmRzAb6vYRk5MwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTcwQUQ5NEM4MzI0NDEwMEE5N0Y5MTg2RDUzREFEQUIw Nzk5NUVFOTAeFw0yNjA3MjQxMjAwMzlaFw0yNjA3MjUxNDEwMzlaMDMxMTAvBgNV BAMTKDI4QkMzNEY3QUQ1NTA4RUU5QTBDMDAzODMyNkE1REQ4RDcwNjNFODcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnWCnUjJvJvxOC2Sbl7ndSbiab y31jSz7zlAJNuHxLlfIsbSe8h5sf0d59XZSZ0NhNwsJDHdcYMIbsIQ56gXYIhugO 9z/0sVYvlTN3nWAcHdh+4AXG+72TqtFZmaO+cdbpYh7B/Fbr9WyRd2tNJfkj/0Og pJmpfj+W79lZfBGwCbhVlkdnaXJpCB3fXXlGmumefT+OPA7hYD7xRvBnePf/Aby6 Ls2yXa+0uwZPWd6n3/kTjaCbjIOeAUYRf5iWhD2cPHtEZ4FXPd5mWKVsW6FqhaLS eXbv283dIAwjviZfGbvOM83uvaTSo3/mXv2YQxd8xC+rd5yoGF8Y/HnXOrG7AgMB AAGjggJ4MIICdDAdBgNVHQ4EFgQUKLw0961VCO6aDAA4Mmpd2NcGPocwHwYDVR0j BBgwFoAUlwrZTIMkQQCpf5GG1T2tqweZXukwDgYDVR0PAQH/BAQDAgeAMIGPBgNV HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv cmVwby9ycGtpX2NhXzlkODM5Y2EwYTU1ZTQyYTQ5ZDEwZGUwNzFmNDY1OThiLzAv OTcwQUQ5NEM4MzI0NDEwMEE5N0Y5MTg2RDUzREFEQUIwNzk5NUVFOS5jcmwwgZ4G CCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5wYWFz LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQxYjUtODJh MC1mMGQwMmMwM2EyYzYvNy85NzBBRDk0QzgzMjQ0MTAwQTk3RjkxODZENTNEQURB QjA3OTk1RUU5LmNlcjCBmgYIKwYBBQUHAQsEgY0wgYowgYcGCCsGAQUFBzALhnty c3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQvcmVwby9ycGtpX2NhXzlkODM5 Y2EwYTU1ZTQyYTQ5ZDEwZGUwNzFmNDY1OThiLzAvOTcwQUQ5NEM4MzI0NDEwMEE5 N0Y5MTg2RDUzREFEQUIwNzk5NUVFOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAJtU2BmLzJ2Z8+veuJNn d9CNOydN0ORkjdoilOezLm6osyOtkv2fAvXA5IbB3BzHjJUtE7KaoPPrENCp8n8K 3RE9hehCq0/XhDbInkiiKMb8Xl9KZn1jo/xnc3dc4Xk1/ErJ1KIH5mmjDS7WP0vJ 09ZIUNjDlBEqmFwH49y4jmKGWvAnxCdO4TN5WVB+rS5eo+e635pn496m7zWA3VS6 tfA6hBEgTJPC/DSTr/1Q5QcrwlJEdcStIK3P5Mr5tli6vl/03DfJzAVOxDXG8PCt lalTxufdzkowxhCZ4FD0rkGj7OBroPO/HA3fpummY4JSGfvMq9M3MgUuh7rC51Ww hMY= -----END CERTIFICATE-----Generated at Fri Jul 24 15:47:58 2026 by rpki-client