$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/2/069FAF47FF48AEF4C98F5097074530A74C111AB9.mft File: 069FAF47FF48AEF4C98F5097074530A74C111AB9.mft (raw, json) Hash identifier: yBrp3oRfldjX27br/2e7ewnjUYAy04O08d3cMpc9MOw= Subject key identifier: 24:1D:D5:4E:75:28:BD:A6:61:7D:1D:85:DD:16:47:39:AE:F3:EE:A6 Authority key identifier: 06:9F:AF:47:FF:48:AE:F4:C9:8F:50:97:07:45:30:A7:4C:11:1A:B9 Certificate issuer: /CN=069FAF47FF48AEF4C98F5097074530A74C111AB9 Certificate serial: 27AD18F67905A13A3E27C75526A910BD884389B9 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/069FAF47FF48AEF4C98F5097074530A74C111AB9.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/2/069FAF47FF48AEF4C98F5097074530A74C111AB9.mft Manifest number: 03CB Signing time: Mon 20 Oct 2025 03:32:19 +0000 Manifest this update: Mon 20 Oct 2025 03:27:19 +0000 Manifest next update: Tue 21 Oct 2025 07:01:19 +0000 Files and hashes: 1: 326130663a383563313a3336333a3a2f34382d3438203d3e20323135363137.roa (hash: G15mowLoM7Eub0vLuxgC+jxtFArNOkVyDHG13blFH8s=) 2: 326130663a383563313a3335373a3a2f34382d3438203d3e20323135363137.roa (hash: 0B/fHqDaAtnHXiIonhpxQ7ujnJI7VSnPxGbabzcBFIA=) 3: 069FAF47FF48AEF4C98F5097074530A74C111AB9.crl (hash: 4mGBKG+HKt+FlLSX3tsK89CIYzl8jHj7smCInibll6M=) 4: 326130663a383563313a3335313a3a2f34382d3438203d3e20343031333836.roa (hash: pdFac+QI0R/UPdzS1q2a9ExUPSLxlAAabS/RPyMDKJ0=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/2/069FAF47FF48AEF4C98F5097074530A74C111AB9.crl rsync://rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/2/069FAF47FF48AEF4C98F5097074530A74C111AB9.mft rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/069FAF47FF48AEF4C98F5097074530A74C111AB9.cer rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 21 Oct 2025 07:01:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:ad:18:f6:79:05:a1:3a:3e:27:c7:55:26:a9:10:bd:88:43:89:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=069FAF47FF48AEF4C98F5097074530A74C111AB9 Validity Not Before: Oct 20 03:27:19 2025 GMT Not After : Oct 21 07:01:19 2025 GMT Subject: CN=241DD54E7528BDA6617D1D85DD164739AEF3EEA6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:94:55:ee:eb:af:c6:7b:92:8e:56:82:75:ef: 89:76:d3:f6:3a:8b:27:99:cf:02:25:2f:a8:fd:00: 9a:c6:6a:e7:e8:ff:d7:c1:c8:f3:cc:57:e7:bc:f9: e9:69:6b:13:8e:d0:b8:f9:d3:99:74:ab:9b:8b:e5: fb:9c:2f:89:9d:9b:6e:63:68:e7:1a:8e:85:f1:8e: dc:a7:34:89:34:67:86:b0:ed:49:45:95:fb:3b:0c: 00:00:b9:7d:df:0c:43:5a:0b:95:e1:3a:c3:92:db: 82:bb:bf:90:3e:62:aa:4e:55:ee:2c:c6:2f:78:b1: 00:06:c7:46:d4:65:f8:d1:5a:a5:74:05:c8:fb:e1: 84:d9:41:88:e6:7b:01:0d:de:95:cb:62:98:5c:da: e8:87:f0:4a:d1:64:2f:43:bb:b1:30:ac:f0:c2:5d: 8c:51:ae:9a:b4:4a:9b:f2:ff:a0:20:1a:16:57:75: a2:11:68:75:d3:4b:35:5a:7c:23:c9:ee:9d:6b:3e: cf:59:d3:46:37:b8:48:7f:8d:b3:96:90:ff:9e:d8: 52:db:17:44:b9:47:b5:e9:76:e1:d5:78:1a:a8:d6: b2:1d:6b:33:2f:c1:4f:04:b7:1d:00:4c:71:d1:87: f3:06:a1:43:76:d1:75:6b:98:fd:51:b6:a4:3e:27: 97:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:1D:D5:4E:75:28:BD:A6:61:7D:1D:85:DD:16:47:39:AE:F3:EE:A6 X509v3 Authority Key Identifier: keyid:06:9F:AF:47:FF:48:AE:F4:C9:8F:50:97:07:45:30:A7:4C:11:1A:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/2/069FAF47FF48AEF4C98F5097074530A74C111AB9.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/069FAF47FF48AEF4C98F5097074530A74C111AB9.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/2/069FAF47FF48AEF4C98F5097074530A74C111AB9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:5f:b8:97:a7:c1:52:1f:7d:81:bf:57:88:8d:0a:6e:24:ec: 21:05:e9:70:27:6c:c5:95:84:3f:58:57:4e:a5:5e:37:d5:bb: 9b:da:22:46:51:3f:3c:ad:02:f8:d6:01:12:cb:db:1b:aa:a8: dc:aa:a6:f1:e0:f7:69:f5:cd:c4:40:d4:24:a6:87:3a:ca:bc: 3b:26:de:ef:05:6f:ed:53:c9:e7:86:75:d3:3c:62:ad:b3:2a: 20:5c:6d:59:6d:17:f7:15:ba:30:ba:6e:eb:03:c5:13:80:a3: dd:4c:49:d6:99:52:30:a8:dc:74:e7:59:b8:f6:ec:69:1f:e8: 86:1b:1f:6e:0b:d9:21:07:29:45:14:6e:4f:db:5e:87:25:b2: 42:f8:b0:cd:de:8e:47:bf:f6:11:80:0a:a8:dc:c0:69:01:27: d3:e3:db:60:16:b8:43:ff:78:a2:6e:7f:34:c0:07:00:15:38: 53:e2:c5:f8:96:3d:29:a4:4c:fb:46:10:46:cd:cd:93:72:50: 4d:c8:6c:dd:ad:36:c2:9c:e5:45:10:ed:b7:b9:e4:47:22:ad: 00:6a:07:1e:40:eb:65:5f:0e:dd:8a:f5:92:6d:a9:ac:5d:ba: 32:27:33:42:b7:7a:a9:05:54:e1:e8:1b:c1:f5:e2:56:a5:18: 22:13:fa:ad -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUJ60Y9nkFoTo+J8dVJqkQvYhDibkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDY5RkFGNDdGRjQ4QUVGNEM5OEY1MDk3MDc0NTMwQTc0 QzExMUFCOTAeFw0yNTEwMjAwMzI3MTlaFw0yNTEwMjEwNzAxMTlaMDMxMTAvBgNV BAMTKDI0MURENTRFNzUyOEJEQTY2MTdEMUQ4NUREMTY0NzM5QUVGM0VFQTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDElFXu66/Ge5KOVoJ174l20/Y6 iyeZzwIlL6j9AJrGaufo/9fByPPMV+e8+elpaxOO0Lj505l0q5uL5fucL4mdm25j aOcajoXxjtynNIk0Z4aw7UlFlfs7DAAAuX3fDENaC5XhOsOS24K7v5A+YqpOVe4s xi94sQAGx0bUZfjRWqV0Bcj74YTZQYjmewEN3pXLYphc2uiH8ErRZC9Du7EwrPDC XYxRrpq0Spvy/6AgGhZXdaIRaHXTSzVafCPJ7p1rPs9Z00Y3uEh/jbOWkP+e2FLb F0S5R7XpduHVeBqo1rIdazMvwU8Etx0ATHHRh/MGoUN20XVrmP1RtqQ+J5erAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUJB3VTnUovaZhfR2F3RZHOa7z7qYwHwYDVR0j BBgwFoAUBp+vR/9IrvTJj1CXB0Uwp0wRGrkwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMjNkNWY2ODItYjUxYi00ODEyLWI4YjEtNDMwZTM4Njgz NzQ4LzIvMDY5RkFGNDdGRjQ4QUVGNEM5OEY1MDk3MDc0NTMwQTc0QzExMUFCOS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84NGQ1MTgxMC0xOTg3LTQ3 MDEtOGYxZi04NDI1MTExOTY0ZjQvMC8wNjlGQUY0N0ZGNDhBRUY0Qzk4RjUwOTcw NzQ1MzBBNzRDMTExQUI5LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzIzZDVmNjgyLWI1MWItNDgxMi1iOGIxLTQzMGUzODY4Mzc0OC8yLzA2OUZBRjQ3 RkY0OEFFRjRDOThGNTA5NzA3NDUzMEE3NEMxMTFBQjkubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBSX7iX p8FSH32Bv1eIjQpuJOwhBelwJ2zFlYQ/WFdOpV431bub2iJGUT88rQL41gESy9sb qqjcqqbx4Pdp9c3EQNQkpoc6yrw7Jt7vBW/tU8nnhnXTPGKtsyogXG1ZbRf3Fbow um7rA8UTgKPdTEnWmVIwqNx051m49uxpH+iGGx9uC9khBylFFG5P216HJbJC+LDN 3o5Hv/YRgAqo3MBpASfT49tgFrhD/3iibn80wAcAFThT4sX4lj0ppEz7RhBGzc2T clBNyGzdrTbCnOVFEO23ueRHIq0AagceQOtlXw7divWSbamsXboyJzNCt3qpBVTh 6BvB9eJWpRgiE/qt -----END CERTIFICATE-----Generated at Mon Oct 20 18:06:38 2025 by rpki-client