$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_9d839ca0a55e42a49d10de071f46598b/0/970AD94C83244100A97F9186D53DADAB07995EE9.mft File: 970AD94C83244100A97F9186D53DADAB07995EE9.mft (raw, json) Hash identifier: TYZAS5RnUfsXLlRx7l+U4sOaO6StRouCEmjfT63Vjig= Subject key identifier: CF:7B:E5:F9:25:C8:93:4E:19:2F:99:95:37:68:45:01:78:77:36:03 Authority key identifier: 97:0A:D9:4C:83:24:41:00:A9:7F:91:86:D5:3D:AD:AB:07:99:5E:E9 Certificate issuer: /CN=970AD94C83244100A97F9186D53DADAB07995EE9 Certificate serial: 0B0A249D3C5B4EBCF60B4CC0D26D48DFF053EF8E Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/970AD94C83244100A97F9186D53DADAB07995EE9.cer Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_9d839ca0a55e42a49d10de071f46598b/0/970AD94C83244100A97F9186D53DADAB07995EE9.mft Manifest number: 0308 Signing time: Thu 26 Mar 2026 06:12:55 +0000 Manifest this update: Thu 26 Mar 2026 06:07:53 +0000 Manifest next update: Fri 27 Mar 2026 08:06:53 +0000 Files and hashes: 1: 326131313a663263303a616361303a3a2f34342d3438203d3e20323132323435.roa (hash: CCNk9XY2QHD/b3jWZi363Jj900j75CnbAukUts4RWyQ=) 2: 326131313a663263303a666666363a3a2f34382d3438203d3e20323132323435.roa (hash: KUWIZJqj2P5+rqMCtyxvRjTojjJdo7mG970P3wqCh/c=) 3: 970AD94C83244100A97F9186D53DADAB07995EE9.crl (hash: wICpcdVdlZdiKH53NW3EAHAzTdZ/zvAv5zbeX3GB9go=) Validation: OK Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_9d839ca0a55e42a49d10de071f46598b/0/970AD94C83244100A97F9186D53DADAB07995EE9.crl rsync://rpki-repo.as207960.net/repo/rpki_ca_9d839ca0a55e42a49d10de071f46598b/0/970AD94C83244100A97F9186D53DADAB07995EE9.mft rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/970AD94C83244100A97F9186D53DADAB07995EE9.cer rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 27 Mar 2026 08:06:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:0a:24:9d:3c:5b:4e:bc:f6:0b:4c:c0:d2:6d:48:df:f0:53:ef:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=970AD94C83244100A97F9186D53DADAB07995EE9 Validity Not Before: Mar 26 06:07:53 2026 GMT Not After : Mar 27 08:06:53 2026 GMT Subject: CN=CF7BE5F925C8934E192F99953768450178773603 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:77:89:d6:ea:87:f0:ec:49:01:e0:75:e1:b6: ec:02:94:cc:04:49:fa:b8:3a:c9:ba:c5:f2:88:eb: 0b:38:ab:4a:9e:05:f8:5b:c3:6f:4d:ec:89:f1:4f: ce:9f:9a:85:32:42:5b:0c:99:c4:38:9f:2d:e4:65: 21:b2:49:44:a5:28:28:01:2a:35:1c:bb:6f:09:51: e1:89:80:3f:8e:de:f6:55:17:6b:5e:99:c3:1b:d5: 1e:f6:64:e2:72:c3:10:da:72:a8:ce:09:a2:4c:af: ee:61:49:57:3d:97:76:dc:89:c1:03:af:ea:8d:77: db:1f:30:b4:87:36:5c:53:0b:e2:86:dc:c6:a1:21: 3d:de:b0:55:fc:71:31:93:1f:e7:d6:4e:1b:8b:ea: 6d:b6:96:fc:c0:fe:54:61:f2:08:98:51:93:57:a4: 55:4d:ba:b3:12:06:83:87:6b:7a:41:e2:54:0f:0e: a9:46:20:16:7e:03:23:c7:ef:a9:ad:6b:db:d2:83: 67:8a:24:17:c0:84:2f:95:58:7a:9d:89:b3:f8:7d: 93:58:e6:2c:77:6e:c5:25:60:45:9c:60:ac:c6:e8: 09:d8:cf:2e:b9:2b:31:38:66:15:dd:a1:0a:85:61: 29:42:a3:0a:ca:5c:97:b6:f5:76:c0:49:f5:3c:ca: e5:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:7B:E5:F9:25:C8:93:4E:19:2F:99:95:37:68:45:01:78:77:36:03 X509v3 Authority Key Identifier: keyid:97:0A:D9:4C:83:24:41:00:A9:7F:91:86:D5:3D:AD:AB:07:99:5E:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_9d839ca0a55e42a49d10de071f46598b/0/970AD94C83244100A97F9186D53DADAB07995EE9.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/970AD94C83244100A97F9186D53DADAB07995EE9.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_9d839ca0a55e42a49d10de071f46598b/0/970AD94C83244100A97F9186D53DADAB07995EE9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:e3:a4:f6:7b:42:de:a6:11:c4:3b:6e:6a:76:84:9a:07:b6: 08:9b:da:df:f1:94:7a:c6:be:74:60:b7:5a:a5:d2:9a:d2:50: 39:0d:5a:c7:dc:b7:34:5e:0d:91:80:6e:df:54:41:a9:3e:30: b1:e7:75:06:fb:9f:4d:be:ed:2b:35:52:7e:d1:17:c1:38:25: c2:25:69:e4:a9:d8:ad:ef:28:8a:64:2c:c6:cc:96:8b:28:59: cc:79:d0:96:83:46:97:90:39:d1:c9:43:a9:d1:4e:f1:bb:f3: 96:14:d7:b1:4a:26:f8:cb:6f:30:25:b8:b1:0e:f7:f6:c9:44: b3:16:d0:fc:e6:dc:48:82:97:d3:0e:d5:ef:65:e4:c2:44:dc: f9:53:5d:71:22:4d:b9:49:be:5e:6e:74:b7:38:71:ce:54:e3: 3a:eb:74:57:67:bb:1d:b4:1d:52:2d:5a:25:e2:12:68:36:cd: c3:35:e4:6a:b7:c9:91:4c:2a:7b:c8:23:ce:86:b9:3a:81:03: f7:82:6d:88:25:62:b1:9c:06:54:14:e3:4c:03:6a:48:72:f3: d5:93:73:60:e0:26:45:52:18:1b:6b:29:86:8f:4e:ae:04:1e: e2:04:d5:6a:51:59:3e:29:54:01:c8:1c:82:e9:c4:15:b2:38: f8:de:e9:f3 -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIUCwoknTxbTrz2C0zA0m1I3/BT744wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTcwQUQ5NEM4MzI0NDEwMEE5N0Y5MTg2RDUzREFEQUIw Nzk5NUVFOTAeFw0yNjAzMjYwNjA3NTNaFw0yNjAzMjcwODA2NTNaMDMxMTAvBgNV BAMTKENGN0JFNUY5MjVDODkzNEUxOTJGOTk5NTM3Njg0NTAxNzg3NzM2MDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCId4nW6ofw7EkB4HXhtuwClMwE Sfq4Osm6xfKI6ws4q0qeBfhbw29N7InxT86fmoUyQlsMmcQ4ny3kZSGySUSlKCgB KjUcu28JUeGJgD+O3vZVF2temcMb1R72ZOJywxDacqjOCaJMr+5hSVc9l3bcicED r+qNd9sfMLSHNlxTC+KG3MahIT3esFX8cTGTH+fWThuL6m22lvzA/lRh8giYUZNX pFVNurMSBoOHa3pB4lQPDqlGIBZ+AyPH76mta9vSg2eKJBfAhC+VWHqdibP4fZNY 5ix3bsUlYEWcYKzG6AnYzy65KzE4ZhXdoQqFYSlCowrKXJe29XbASfU8yuWHAgMB AAGjggJ4MIICdDAdBgNVHQ4EFgQUz3vl+SXIk04ZL5mVN2hFAXh3NgMwHwYDVR0j BBgwFoAUlwrZTIMkQQCpf5GG1T2tqweZXukwDgYDVR0PAQH/BAQDAgeAMIGPBgNV HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv cmVwby9ycGtpX2NhXzlkODM5Y2EwYTU1ZTQyYTQ5ZDEwZGUwNzFmNDY1OThiLzAv OTcwQUQ5NEM4MzI0NDEwMEE5N0Y5MTg2RDUzREFEQUIwNzk5NUVFOS5jcmwwgZ4G CCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5wYWFz LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQxYjUtODJh MC1mMGQwMmMwM2EyYzYvNy85NzBBRDk0QzgzMjQ0MTAwQTk3RjkxODZENTNEQURB QjA3OTk1RUU5LmNlcjCBmgYIKwYBBQUHAQsEgY0wgYowgYcGCCsGAQUFBzALhnty c3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQvcmVwby9ycGtpX2NhXzlkODM5 Y2EwYTU1ZTQyYTQ5ZDEwZGUwNzFmNDY1OThiLzAvOTcwQUQ5NEM4MzI0NDEwMEE5 N0Y5MTg2RDUzREFEQUIwNzk5NUVFOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAFbjpPZ7Qt6mEcQ7bmp2 hJoHtgib2t/xlHrGvnRgt1ql0prSUDkNWsfctzReDZGAbt9UQak+MLHndQb7n02+ 7Ss1Un7RF8E4JcIlaeSp2K3vKIpkLMbMlosoWcx50JaDRpeQOdHJQ6nRTvG785YU 17FKJvjLbzAluLEO9/bJRLMW0Pzm3EiCl9MO1e9l5MJE3PlTXXEiTblJvl5udLc4 cc5U4zrrdFdnux20HVItWiXiEmg2zcM15Gq3yZFMKnvII86GuTqBA/eCbYglYrGc BlQU40wDakhy89WTc2DgJkVSGBtrKYaPTq4EHuIE1WpRWT4pVAHIHILpxBWyOPje 6fM= -----END CERTIFICATE-----Generated at Thu Mar 26 20:05:00 2026 by rpki-client