$ rpki-client -vvvf rpki-repo.as207960.net/repo/rpki_ca_9d839ca0a55e42a49d10de071f46598b/0/970AD94C83244100A97F9186D53DADAB07995EE9.mft File: 970AD94C83244100A97F9186D53DADAB07995EE9.mft (raw, json) Hash identifier: OB/5KhW9MYczLQsANaLGjQ0ZkCLPel13E0oNCZdBcIs= Subject key identifier: 83:B2:71:ED:00:D8:CC:AF:3A:C0:FC:30:A8:FC:D4:10:23:FB:54:C0 Authority key identifier: 97:0A:D9:4C:83:24:41:00:A9:7F:91:86:D5:3D:AD:AB:07:99:5E:E9 Certificate issuer: /CN=970AD94C83244100A97F9186D53DADAB07995EE9 Certificate serial: 5C7FB6E61FD159265584DE302635F5694FB150A6 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/970AD94C83244100A97F9186D53DADAB07995EE9.cer Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_9d839ca0a55e42a49d10de071f46598b/0/970AD94C83244100A97F9186D53DADAB07995EE9.mft Manifest number: 03EB Signing time: Sun 27 Sep 2026 13:34:33 +0000 Manifest this update: Sun 27 Sep 2026 13:29:33 +0000 Manifest next update: Mon 28 Sep 2026 13:34:33 +0000 Files and hashes: 1: 326131313a663263303a666666363a3a2f34382d3438203d3e20323132323435.roa (hash: MoaZbbTY7Jqr4LowGTe1KRJNCD2PmKCRt2v7wni6Nh8=) 2: 326131313a663263303a616361303a3a2f34342d3438203d3e20323132323435.roa (hash: 9SYQBw+WVon+uq1bGjlomS1wDEHFsVFbA0dbRqR0nMs=) 3: 970AD94C83244100A97F9186D53DADAB07995EE9.crl (hash: Ev0ET1nC4tOxsOAHHOJ4ZZP/KYTQy1me8zuIriyIgG4=) Validation: OK Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_9d839ca0a55e42a49d10de071f46598b/0/970AD94C83244100A97F9186D53DADAB07995EE9.crl rsync://rpki-repo.as207960.net/repo/rpki_ca_9d839ca0a55e42a49d10de071f46598b/0/970AD94C83244100A97F9186D53DADAB07995EE9.mft rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/970AD94C83244100A97F9186D53DADAB07995EE9.cer rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 28 Sep 2026 13:34:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:7f:b6:e6:1f:d1:59:26:55:84:de:30:26:35:f5:69:4f:b1:50:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=970AD94C83244100A97F9186D53DADAB07995EE9 Validity Not Before: Sep 27 13:29:33 2026 GMT Not After : Sep 28 13:34:33 2026 GMT Subject: CN=83B271ED00D8CCAF3AC0FC30A8FCD41023FB54C0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:17:59:0c:66:ab:9f:4d:8d:48:7c:ad:6d:91: de:19:d0:af:f0:c2:da:9c:54:4b:8c:24:73:6b:bb: e2:f7:85:02:8d:09:18:a6:48:12:f1:bb:20:47:80: ba:9c:b5:bf:dd:68:28:4c:42:a7:98:d1:73:1e:1e: 90:54:8b:c9:ae:e5:1e:a7:ff:ed:41:10:ba:93:98: 3e:25:84:4b:0b:9a:1e:08:be:71:fb:be:55:80:7f: 49:39:d1:9d:b9:f2:76:86:85:e1:7e:0f:f2:db:87: e4:4c:8d:e2:b7:8e:54:6d:0f:e3:7e:19:29:9f:bd: d1:ac:3a:dc:42:8d:1b:4c:89:f3:2a:73:59:79:8c: 08:48:e1:34:cf:23:e2:fc:81:41:96:27:3b:10:de: 37:95:53:19:ab:a0:b9:d8:8e:08:ff:79:f0:bf:22: 8d:07:84:07:15:2d:19:fb:de:1c:4e:6e:96:5d:a9: 48:02:9f:55:75:8d:82:1e:91:73:24:9c:f6:f0:de: 5b:96:f4:9f:0b:64:74:4c:a5:f3:03:df:14:e7:bc: 63:50:47:69:1c:5b:61:de:a4:9f:3d:45:fb:6a:ea: df:44:33:b6:a2:72:28:70:e8:0b:c1:8f:f9:65:51: 13:39:c5:30:4b:a9:8a:5a:12:02:00:d4:0a:ea:e5: bf:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:B2:71:ED:00:D8:CC:AF:3A:C0:FC:30:A8:FC:D4:10:23:FB:54:C0 X509v3 Authority Key Identifier: keyid:97:0A:D9:4C:83:24:41:00:A9:7F:91:86:D5:3D:AD:AB:07:99:5E:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_9d839ca0a55e42a49d10de071f46598b/0/970AD94C83244100A97F9186D53DADAB07995EE9.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/970AD94C83244100A97F9186D53DADAB07995EE9.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_9d839ca0a55e42a49d10de071f46598b/0/970AD94C83244100A97F9186D53DADAB07995EE9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:e3:0a:8d:46:e1:39:c3:b5:58:ed:8f:22:89:43:df:07:47: b3:01:f1:16:db:9f:9a:11:44:c6:98:1e:d2:f6:15:5b:56:3e: 8c:58:39:5a:78:86:27:2f:94:4b:29:cc:97:20:59:44:14:56: c6:ac:ed:ae:a5:39:43:e5:e1:02:2f:70:a6:6c:9f:a7:64:05: 50:a5:69:bb:11:b7:b2:27:b4:77:bd:18:34:6b:48:45:e2:6b: 44:bc:99:ba:e4:b5:c9:d1:56:90:31:14:ef:36:95:40:ab:e6: 39:c3:13:08:db:6f:62:f4:26:ec:1e:e7:bf:4e:04:64:07:ee: e9:ff:7a:e9:58:4f:d7:77:36:de:d1:67:d9:df:20:2d:19:5d: 64:da:13:72:f0:46:f2:30:ef:1e:ea:16:81:b9:18:86:4c:16: 20:fb:9c:3b:fc:b1:93:5d:da:19:cc:a9:27:d3:5c:56:48:fd: e5:19:c8:a4:0d:62:d9:99:b6:3d:bc:2c:c8:51:36:a3:eb:d9: ef:f0:e8:d2:5e:0a:12:f8:01:2f:eb:d7:1f:11:0e:4d:9d:ca: 74:aa:39:f9:8d:2c:dd:12:d0:f3:6d:e5:69:74:26:0e:f3:37: 55:bf:a0:b0:43:32:04:a4:89:d5:9d:97:4a:d4:35:32:7d:b5: 48:5c:37:25 -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIUXH+25h/RWSZVhN4wJjX1aU+xUKYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTcwQUQ5NEM4MzI0NDEwMEE5N0Y5MTg2RDUzREFEQUIw Nzk5NUVFOTAeFw0yNjA5MjcxMzI5MzNaFw0yNjA5MjgxMzM0MzNaMDMxMTAvBgNV BAMTKDgzQjI3MUVEMDBEOENDQUYzQUMwRkMzMEE4RkNENDEwMjNGQjU0QzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8F1kMZqufTY1IfK1tkd4Z0K/w wtqcVEuMJHNru+L3hQKNCRimSBLxuyBHgLqctb/daChMQqeY0XMeHpBUi8mu5R6n /+1BELqTmD4lhEsLmh4IvnH7vlWAf0k50Z258naGheF+D/Lbh+RMjeK3jlRtD+N+ GSmfvdGsOtxCjRtMifMqc1l5jAhI4TTPI+L8gUGWJzsQ3jeVUxmroLnYjgj/efC/ Io0HhAcVLRn73hxObpZdqUgCn1V1jYIekXMknPbw3luW9J8LZHRMpfMD3xTnvGNQ R2kcW2HepJ89Rftq6t9EM7aicihw6AvBj/llURM5xTBLqYpaEgIA1Arq5b/LAgMB AAGjggJ4MIICdDAdBgNVHQ4EFgQUg7Jx7QDYzK86wPwwqPzUECP7VMAwHwYDVR0j BBgwFoAUlwrZTIMkQQCpf5GG1T2tqweZXukwDgYDVR0PAQH/BAQDAgeAMIGPBgNV HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv cmVwby9ycGtpX2NhXzlkODM5Y2EwYTU1ZTQyYTQ5ZDEwZGUwNzFmNDY1OThiLzAv OTcwQUQ5NEM4MzI0NDEwMEE5N0Y5MTg2RDUzREFEQUIwNzk5NUVFOS5jcmwwgZ4G CCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5wYWFz LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQxYjUtODJh MC1mMGQwMmMwM2EyYzYvNy85NzBBRDk0QzgzMjQ0MTAwQTk3RjkxODZENTNEQURB QjA3OTk1RUU5LmNlcjCBmgYIKwYBBQUHAQsEgY0wgYowgYcGCCsGAQUFBzALhnty c3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQvcmVwby9ycGtpX2NhXzlkODM5 Y2EwYTU1ZTQyYTQ5ZDEwZGUwNzFmNDY1OThiLzAvOTcwQUQ5NEM4MzI0NDEwMEE5 N0Y5MTg2RDUzREFEQUIwNzk5NUVFOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAEbjCo1G4TnDtVjtjyKJ Q98HR7MB8Rbbn5oRRMaYHtL2FVtWPoxYOVp4hicvlEspzJcgWUQUVsas7a6lOUPl 4QIvcKZsn6dkBVClabsRt7IntHe9GDRrSEXia0S8mbrktcnRVpAxFO82lUCr5jnD Ewjbb2L0Juwe579OBGQH7un/eulYT9d3Nt7RZ9nfIC0ZXWTaE3LwRvIw7x7qFoG5 GIZMFiD7nDv8sZNd2hnMqSfTXFZI/eUZyKQNYtmZtj28LMhRNqPr2e/w6NJeChL4 AS/r1x8RDk2dynSqOfmNLN0S0PNt5Wl0Jg7zN1W/oLBDMgSkidWdl0rUNTJ9tUhc NyU= -----END CERTIFICATE-----Generated at Mon Sep 28 00:01:12 2026 by rpki-client