$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_9d839ca0a55e42a49d10de071f46598b/0/970AD94C83244100A97F9186D53DADAB07995EE9.mft File: 970AD94C83244100A97F9186D53DADAB07995EE9.mft (raw, json) Hash identifier: Ni/NMTUAzFyUmQeNZwBDMBNrUqH2fHm6AhnfdHEFbfM= Subject key identifier: 4F:35:01:52:D8:A1:53:35:85:91:34:57:17:AC:BA:68:18:2E:78:20 Authority key identifier: 97:0A:D9:4C:83:24:41:00:A9:7F:91:86:D5:3D:AD:AB:07:99:5E:E9 Certificate issuer: /CN=970AD94C83244100A97F9186D53DADAB07995EE9 Certificate serial: 2271D2B3F26B16DD31B93688C56D3CD34A38A211 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/970AD94C83244100A97F9186D53DADAB07995EE9.cer Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_9d839ca0a55e42a49d10de071f46598b/0/970AD94C83244100A97F9186D53DADAB07995EE9.mft Manifest number: 0347 Signing time: Wed 13 May 2026 02:28:36 +0000 Manifest this update: Wed 13 May 2026 02:23:36 +0000 Manifest next update: Thu 14 May 2026 05:26:36 +0000 Files and hashes: 1: 326131313a663263303a666666363a3a2f34382d3438203d3e20323132323435.roa (hash: MoaZbbTY7Jqr4LowGTe1KRJNCD2PmKCRt2v7wni6Nh8=) 2: 970AD94C83244100A97F9186D53DADAB07995EE9.crl (hash: AoQiZWUBFsPMK2h8CZsR5a5/9mxm/J5tNpAS/2L+B/0=) 3: 326131313a663263303a616361303a3a2f34342d3438203d3e20323132323435.roa (hash: 9SYQBw+WVon+uq1bGjlomS1wDEHFsVFbA0dbRqR0nMs=) Validation: OK Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_9d839ca0a55e42a49d10de071f46598b/0/970AD94C83244100A97F9186D53DADAB07995EE9.crl rsync://rpki-repo.as207960.net/repo/rpki_ca_9d839ca0a55e42a49d10de071f46598b/0/970AD94C83244100A97F9186D53DADAB07995EE9.mft rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/970AD94C83244100A97F9186D53DADAB07995EE9.cer rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 14 May 2026 00:34:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:71:d2:b3:f2:6b:16:dd:31:b9:36:88:c5:6d:3c:d3:4a:38:a2:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=970AD94C83244100A97F9186D53DADAB07995EE9 Validity Not Before: May 13 02:23:36 2026 GMT Not After : May 14 05:26:36 2026 GMT Subject: CN=4F350152D8A153358591345717ACBA68182E7820 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:0b:2c:de:95:4f:bd:02:be:94:34:f4:6a:86: 76:e4:38:cb:49:66:3e:f5:73:66:41:e2:7a:ea:c4: d0:7c:47:8c:3b:39:73:1f:95:a7:4f:85:52:7e:f4: bd:be:93:a4:c5:6b:b5:af:bb:2b:8f:d8:5c:78:03: e4:d7:1b:d6:97:29:41:65:51:45:57:e9:09:da:57: 69:44:62:cd:cf:23:5d:25:f1:8a:b5:f3:a4:f5:40: f5:5e:78:be:3b:1e:da:b2:c6:14:ae:ac:1b:64:c8: a9:a3:e2:3b:bd:c0:80:69:02:2a:7b:be:31:7d:6f: 55:2c:8a:e0:93:e9:0c:cf:fd:64:a1:61:b8:67:0c: fa:4e:9b:57:fe:b5:43:2e:47:40:84:a6:8e:d4:d4: c5:e9:d3:e0:d6:10:17:14:c6:b4:56:3b:91:a3:73: 3b:51:f3:10:e0:02:47:44:16:6a:a6:93:37:fd:e7: e8:73:85:fd:1b:19:50:2e:e1:25:65:ca:9f:96:b5: 4a:19:02:48:ec:e7:ef:a1:74:6f:7a:38:cc:d9:52: 5d:43:a9:15:bc:a6:da:3a:af:f3:a3:e6:4f:82:6b: 6e:01:4d:b3:13:a3:1b:ef:4e:64:96:e9:05:38:37: 21:5b:7a:52:16:c3:58:f5:c1:6c:6b:12:74:db:44: 64:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:35:01:52:D8:A1:53:35:85:91:34:57:17:AC:BA:68:18:2E:78:20 X509v3 Authority Key Identifier: keyid:97:0A:D9:4C:83:24:41:00:A9:7F:91:86:D5:3D:AD:AB:07:99:5E:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_9d839ca0a55e42a49d10de071f46598b/0/970AD94C83244100A97F9186D53DADAB07995EE9.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/970AD94C83244100A97F9186D53DADAB07995EE9.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_9d839ca0a55e42a49d10de071f46598b/0/970AD94C83244100A97F9186D53DADAB07995EE9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:14:c8:33:1b:12:db:fc:43:5c:9b:e4:6b:e5:05:2e:59:a1: 7d:05:41:33:40:e6:07:b2:f2:c0:ac:4f:bb:f8:6c:93:57:16: 5b:fa:a2:a7:e8:26:9c:b7:e7:33:1c:f1:b0:78:88:53:9e:d6: 01:4f:28:8a:6b:66:7c:24:d2:43:fd:0e:16:3a:43:dc:5e:e0: 87:8d:0e:29:fe:29:64:ca:3e:af:90:6a:ee:10:48:8e:ce:82: 48:95:89:d2:1a:63:2b:86:3c:62:a9:c8:f7:1d:9f:6d:d7:83: de:7f:ad:6f:41:8b:24:95:dc:3f:60:15:22:d3:fb:50:5d:f3: 82:a1:7a:ef:1d:d4:e6:96:a8:47:1d:41:8f:75:4e:b5:49:e6: 9d:1b:25:ff:89:e4:01:66:09:96:63:62:95:4d:da:d8:41:10: 5e:29:90:02:db:af:6b:3b:69:1a:63:7e:22:7e:de:89:4d:03: ee:8c:2a:34:c4:e3:98:98:fb:39:7a:88:14:4a:b8:74:a1:6e: a4:28:29:0e:46:bf:45:bd:09:a5:51:ae:d1:fa:e8:f5:ce:f7: 91:41:31:e3:13:d8:f3:c2:1d:fe:00:3b:06:dc:ec:a3:89:3d: 42:40:00:74:3f:f3:77:78:e7:81:ab:05:cf:90:0a:97:80:00: 64:5d:e6:ec -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIUInHSs/JrFt0xuTaIxW0800o4ohEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTcwQUQ5NEM4MzI0NDEwMEE5N0Y5MTg2RDUzREFEQUIw Nzk5NUVFOTAeFw0yNjA1MTMwMjIzMzZaFw0yNjA1MTQwNTI2MzZaMDMxMTAvBgNV BAMTKDRGMzUwMTUyRDhBMTUzMzU4NTkxMzQ1NzE3QUNCQTY4MTgyRTc4MjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDkCyzelU+9Ar6UNPRqhnbkOMtJ Zj71c2ZB4nrqxNB8R4w7OXMfladPhVJ+9L2+k6TFa7WvuyuP2Fx4A+TXG9aXKUFl UUVX6QnaV2lEYs3PI10l8Yq186T1QPVeeL47HtqyxhSurBtkyKmj4ju9wIBpAip7 vjF9b1UsiuCT6QzP/WShYbhnDPpOm1f+tUMuR0CEpo7U1MXp0+DWEBcUxrRWO5Gj cztR8xDgAkdEFmqmkzf95+hzhf0bGVAu4SVlyp+WtUoZAkjs5++hdG96OMzZUl1D qRW8pto6r/Oj5k+Ca24BTbMToxvvTmSW6QU4NyFbelIWw1j1wWxrEnTbRGSnAgMB AAGjggJ4MIICdDAdBgNVHQ4EFgQUTzUBUtihUzWFkTRXF6y6aBgueCAwHwYDVR0j BBgwFoAUlwrZTIMkQQCpf5GG1T2tqweZXukwDgYDVR0PAQH/BAQDAgeAMIGPBgNV HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv cmVwby9ycGtpX2NhXzlkODM5Y2EwYTU1ZTQyYTQ5ZDEwZGUwNzFmNDY1OThiLzAv OTcwQUQ5NEM4MzI0NDEwMEE5N0Y5MTg2RDUzREFEQUIwNzk5NUVFOS5jcmwwgZ4G CCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5wYWFz LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQxYjUtODJh MC1mMGQwMmMwM2EyYzYvNy85NzBBRDk0QzgzMjQ0MTAwQTk3RjkxODZENTNEQURB QjA3OTk1RUU5LmNlcjCBmgYIKwYBBQUHAQsEgY0wgYowgYcGCCsGAQUFBzALhnty c3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQvcmVwby9ycGtpX2NhXzlkODM5 Y2EwYTU1ZTQyYTQ5ZDEwZGUwNzFmNDY1OThiLzAvOTcwQUQ5NEM4MzI0NDEwMEE5 N0Y5MTg2RDUzREFEQUIwNzk5NUVFOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAEAUyDMbEtv8Q1yb5Gvl BS5ZoX0FQTNA5gey8sCsT7v4bJNXFlv6oqfoJpy35zMc8bB4iFOe1gFPKIprZnwk 0kP9DhY6Q9xe4IeNDin+KWTKPq+Qau4QSI7OgkiVidIaYyuGPGKpyPcdn23Xg95/ rW9BiySV3D9gFSLT+1Bd84Kheu8d1OaWqEcdQY91TrVJ5p0bJf+J5AFmCZZjYpVN 2thBEF4pkALbr2s7aRpjfiJ+3olNA+6MKjTE45iY+zl6iBRKuHShbqQoKQ5Gv0W9 CaVRrtH66PXO95FBMeMT2PPCHf4AOwbc7KOJPUJAAHQ/83d454GrBc+QCpeAAGRd 5uw= -----END CERTIFICATE-----Generated at Wed May 13 12:00:11 2026 by rpki-client