$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/2/069FAF47FF48AEF4C98F5097074530A74C111AB9.mft File: 069FAF47FF48AEF4C98F5097074530A74C111AB9.mft (raw, json) Hash identifier: 04nMuk0RbTtZeaXPEdoStaS9yCbza2sL1Vlv4VsWdYY= Subject key identifier: C3:77:83:EE:BA:33:E4:81:0F:AF:87:20:AF:B4:99:47:2F:40:BD:B8 Authority key identifier: 06:9F:AF:47:FF:48:AE:F4:C9:8F:50:97:07:45:30:A7:4C:11:1A:B9 Certificate issuer: /CN=069FAF47FF48AEF4C98F5097074530A74C111AB9 Certificate serial: 015BA2CBE305EBB0F90D0DAA57EA5AD3D2331B12 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/069FAF47FF48AEF4C98F5097074530A74C111AB9.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/2/069FAF47FF48AEF4C98F5097074530A74C111AB9.mft Manifest number: 0338 Signing time: Mon 30 Jun 2025 05:22:55 +0000 Manifest this update: Mon 30 Jun 2025 05:17:55 +0000 Manifest next update: Tue 01 Jul 2025 06:19:55 +0000 Files and hashes: 1: 326130663a383563313a3336333a3a2f34382d3438203d3e20323135363137.roa (hash: G15mowLoM7Eub0vLuxgC+jxtFArNOkVyDHG13blFH8s=) 2: 326130663a383563313a3335313a3a2f34382d3438203d3e20343031333836.roa (hash: 7mR3vQrcbHUSwKtu57zMbBmzQiQeIJwUP4b5xp+7MO0=) 3: 069FAF47FF48AEF4C98F5097074530A74C111AB9.crl (hash: tyowxwkk/6HulsPWT3bo5xHVap5aZWeOnHZfJnjQ4l8=) 4: 326130663a383563313a3335373a3a2f34382d3438203d3e20323135363137.roa (hash: 0B/fHqDaAtnHXiIonhpxQ7ujnJI7VSnPxGbabzcBFIA=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/2/069FAF47FF48AEF4C98F5097074530A74C111AB9.crl rsync://rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/2/069FAF47FF48AEF4C98F5097074530A74C111AB9.mft rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/069FAF47FF48AEF4C98F5097074530A74C111AB9.cer rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 01 Jul 2025 06:19:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:5b:a2:cb:e3:05:eb:b0:f9:0d:0d:aa:57:ea:5a:d3:d2:33:1b:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=069FAF47FF48AEF4C98F5097074530A74C111AB9 Validity Not Before: Jun 30 05:17:55 2025 GMT Not After : Jul 1 06:19:55 2025 GMT Subject: CN=C37783EEBA33E4810FAF8720AFB499472F40BDB8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:d6:fe:c7:45:e5:3f:71:e0:73:31:d3:db:a6: e3:15:0e:08:79:2d:13:dc:31:d6:34:a3:f4:4b:f5: 90:b0:01:df:01:cd:1d:e9:60:0f:d2:cf:ee:ab:4d: f8:8a:66:89:1e:7d:de:52:59:09:32:73:20:07:fc: d5:24:2e:b3:1e:2a:4c:e7:74:75:54:a7:23:3d:77: 82:b0:ce:77:f3:d7:85:1b:82:46:85:50:83:c0:af: d8:2a:45:cf:1b:c2:6b:48:fc:bc:4d:b1:d5:9f:df: f7:10:d1:28:8f:63:fb:ac:51:cd:7d:82:81:a1:6f: 2d:ee:7d:41:de:4d:75:1b:15:bf:ba:5d:4c:4c:44: d8:f8:01:a7:b7:29:76:99:f4:4b:db:aa:7c:5b:a8: 34:5e:bf:c3:7c:1b:e1:94:e4:73:db:22:56:5a:14: 13:1e:8a:30:cf:b1:32:7b:dd:3a:85:9d:8b:0b:c9: 3b:b0:b7:a4:53:87:64:7d:a2:ea:f4:4d:65:50:52: 09:23:54:08:b2:18:7a:b8:dc:63:c9:76:4e:92:2f: ca:60:d5:75:27:3e:6f:ca:08:36:6c:1e:82:0d:24: b9:03:27:1c:3d:b3:c4:6e:5f:de:1e:b3:9f:89:40: 16:7b:1e:d8:83:9f:4f:fb:83:ab:58:15:5e:f1:69: 0e:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:77:83:EE:BA:33:E4:81:0F:AF:87:20:AF:B4:99:47:2F:40:BD:B8 X509v3 Authority Key Identifier: keyid:06:9F:AF:47:FF:48:AE:F4:C9:8F:50:97:07:45:30:A7:4C:11:1A:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/2/069FAF47FF48AEF4C98F5097074530A74C111AB9.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/069FAF47FF48AEF4C98F5097074530A74C111AB9.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/2/069FAF47FF48AEF4C98F5097074530A74C111AB9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:76:be:ec:e9:f5:46:69:a8:3c:05:85:bc:f2:53:62:14:1c: fa:97:7a:6f:72:bd:bc:22:fe:b3:64:63:52:42:bd:0e:33:cb: ac:d7:ca:9f:6b:81:98:96:90:ad:c3:5c:cf:4e:27:c9:4e:c7: e3:f8:e9:2a:85:5b:48:6b:32:96:42:eb:dc:01:f2:8c:b5:7e: 9e:47:42:05:0a:f6:fc:13:dd:5b:e6:54:04:51:25:f8:b2:c0: 27:cc:1f:ba:72:c5:ba:5c:66:68:b9:93:46:6c:a2:17:5f:1b: f0:3c:1c:ed:98:cb:10:f8:23:08:39:69:9b:ee:6e:69:dc:43: ec:ed:9e:40:f4:a0:ac:d3:ea:9f:b0:c0:5e:f8:15:d3:ac:55: a2:be:f6:a6:87:85:7f:a7:85:8a:07:34:fb:b2:ec:1b:0b:16: e7:37:7c:52:73:5d:46:cc:56:30:00:01:cb:b9:96:0b:cf:da: 03:4e:51:71:41:3b:fc:4c:17:2d:be:d3:4b:8f:4c:0a:2c:9b: bf:c1:ed:ec:1b:e0:e9:49:20:35:53:f0:f6:0f:7d:07:4a:2d: be:13:64:b5:9c:ba:48:8f:d0:55:b4:92:ce:d9:98:60:fc:cd: bd:0e:02:e6:56:bd:21:58:d6:f1:15:d9:72:9a:c6:6d:07:61: 83:84:62:60 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUAVuiy+MF67D5DQ2qV+pa09IzGxIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDY5RkFGNDdGRjQ4QUVGNEM5OEY1MDk3MDc0NTMwQTc0 QzExMUFCOTAeFw0yNTA2MzAwNTE3NTVaFw0yNTA3MDEwNjE5NTVaMDMxMTAvBgNV BAMTKEMzNzc4M0VFQkEzM0U0ODEwRkFGODcyMEFGQjQ5OTQ3MkY0MEJEQjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/1v7HReU/ceBzMdPbpuMVDgh5 LRPcMdY0o/RL9ZCwAd8BzR3pYA/Sz+6rTfiKZokefd5SWQkycyAH/NUkLrMeKkzn dHVUpyM9d4Kwznfz14UbgkaFUIPAr9gqRc8bwmtI/LxNsdWf3/cQ0SiPY/usUc19 goGhby3ufUHeTXUbFb+6XUxMRNj4Aae3KXaZ9EvbqnxbqDRev8N8G+GU5HPbIlZa FBMeijDPsTJ73TqFnYsLyTuwt6RTh2R9our0TWVQUgkjVAiyGHq43GPJdk6SL8pg 1XUnPm/KCDZsHoINJLkDJxw9s8RuX94es5+JQBZ7HtiDn0/7g6tYFV7xaQ5TAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUw3eD7roz5IEPr4cgr7SZRy9AvbgwHwYDVR0j BBgwFoAUBp+vR/9IrvTJj1CXB0Uwp0wRGrkwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMjNkNWY2ODItYjUxYi00ODEyLWI4YjEtNDMwZTM4Njgz NzQ4LzIvMDY5RkFGNDdGRjQ4QUVGNEM5OEY1MDk3MDc0NTMwQTc0QzExMUFCOS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84NGQ1MTgxMC0xOTg3LTQ3 MDEtOGYxZi04NDI1MTExOTY0ZjQvMC8wNjlGQUY0N0ZGNDhBRUY0Qzk4RjUwOTcw NzQ1MzBBNzRDMTExQUI5LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzIzZDVmNjgyLWI1MWItNDgxMi1iOGIxLTQzMGUzODY4Mzc0OC8yLzA2OUZBRjQ3 RkY0OEFFRjRDOThGNTA5NzA3NDUzMEE3NEMxMTFBQjkubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBHdr7s 6fVGaag8BYW88lNiFBz6l3pvcr28Iv6zZGNSQr0OM8us18qfa4GYlpCtw1zPTifJ Tsfj+OkqhVtIazKWQuvcAfKMtX6eR0IFCvb8E91b5lQEUSX4ssAnzB+6csW6XGZo uZNGbKIXXxvwPBztmMsQ+CMIOWmb7m5p3EPs7Z5A9KCs0+qfsMBe+BXTrFWivvam h4V/p4WKBzT7suwbCxbnN3xSc11GzFYwAAHLuZYLz9oDTlFxQTv8TBctvtNLj0wK LJu/we3sG+DpSSA1U/D2D30HSi2+E2S1nLpIj9BVtJLO2Zhg/M29DgLmVr0hWNbx FdlymsZtB2GDhGJg -----END CERTIFICATE-----Generated at Mon Jun 30 13:04:24 2025 by rpki-client