$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/2/069FAF47FF48AEF4C98F5097074530A74C111AB9.mft File: 069FAF47FF48AEF4C98F5097074530A74C111AB9.mft (raw, json) Hash identifier: 4pK29ZAUguUsV/EsRjHXXlfl1JzJ7KTdnl4o/uhfmik= Subject key identifier: C6:3A:1A:27:4F:9E:6A:18:77:C8:73:AA:93:95:FE:2F:9A:CD:06:3C Authority key identifier: 06:9F:AF:47:FF:48:AE:F4:C9:8F:50:97:07:45:30:A7:4C:11:1A:B9 Certificate issuer: /CN=069FAF47FF48AEF4C98F5097074530A74C111AB9 Certificate serial: 21B4A947137922BCAA1B8428D1332D21C14AEA48 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/069FAF47FF48AEF4C98F5097074530A74C111AB9.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/2/069FAF47FF48AEF4C98F5097074530A74C111AB9.mft Manifest number: 04E4 Signing time: Tue 12 May 2026 16:26:50 +0000 Manifest this update: Tue 12 May 2026 16:21:49 +0000 Manifest next update: Wed 13 May 2026 19:01:49 +0000 Files and hashes: 1: 326130663a383563313a3335373a3a2f34382d3438203d3e20323135363137.roa (hash: mT7wNp38f47L+2MAFo1ah1wV4i3g7EwDZhqEAFbd0PU=) 2: 069FAF47FF48AEF4C98F5097074530A74C111AB9.crl (hash: 0xKMVxfTaMoFJnCV7wwWUpWqnZYWa/SsrcMDN8VX5qQ=) 3: 326130663a383563313a3336333a3a2f34382d3438203d3e20323135363137.roa (hash: nWVf9Vd1/pxv69WaHKM1e/8vQ/po0I7aidbKnzISSgo=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/2/069FAF47FF48AEF4C98F5097074530A74C111AB9.crl rsync://rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/2/069FAF47FF48AEF4C98F5097074530A74C111AB9.mft rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/069FAF47FF48AEF4C98F5097074530A74C111AB9.cer rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 13 May 2026 19:01:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:b4:a9:47:13:79:22:bc:aa:1b:84:28:d1:33:2d:21:c1:4a:ea:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=069FAF47FF48AEF4C98F5097074530A74C111AB9 Validity Not Before: May 12 16:21:49 2026 GMT Not After : May 13 19:01:49 2026 GMT Subject: CN=C63A1A274F9E6A1877C873AA9395FE2F9ACD063C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:33:cc:65:ef:4e:27:e2:27:49:0d:3d:bf:a2: ad:21:f9:e7:07:3a:3e:08:7e:3f:da:17:6a:4f:77: 66:8c:fa:1c:52:b7:b9:23:17:5c:73:64:17:9d:ac: c8:61:e7:b5:45:65:b8:63:2d:c7:25:1d:7f:be:35: 11:ba:ae:09:d1:3f:50:eb:7e:e0:74:02:63:e2:3c: f5:4c:33:34:66:91:24:a3:51:52:8c:94:b8:f2:52: 37:b1:58:f2:eb:a9:7e:15:08:eb:fb:a7:7a:0b:ef: 41:73:ad:3b:77:32:f8:56:ce:42:e1:40:8a:3b:41: 2a:e3:1f:33:d6:a5:3e:c8:ee:b0:8a:67:a3:89:23: 42:5d:3f:bb:fc:e6:65:d5:a8:9b:fa:62:b3:c4:f8: c0:47:9e:5a:59:a0:82:4f:fa:e9:de:f8:b5:2b:6a: 06:41:13:d9:65:58:ca:a9:e6:af:4d:36:72:46:5d: 93:5d:f3:6f:0d:d1:07:83:44:24:d0:68:53:aa:25: 04:26:2d:ad:04:f2:ac:f1:3a:dd:94:e2:bc:6f:4e: 7e:9e:d9:24:6f:e7:ea:a0:40:bd:65:b0:1b:0b:8d: 65:ef:2a:70:ab:38:69:5d:57:df:28:9b:e3:e8:5c: 8c:e8:16:d7:80:08:c7:69:f0:0f:11:f9:08:0e:d5: 39:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:3A:1A:27:4F:9E:6A:18:77:C8:73:AA:93:95:FE:2F:9A:CD:06:3C X509v3 Authority Key Identifier: keyid:06:9F:AF:47:FF:48:AE:F4:C9:8F:50:97:07:45:30:A7:4C:11:1A:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/2/069FAF47FF48AEF4C98F5097074530A74C111AB9.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/069FAF47FF48AEF4C98F5097074530A74C111AB9.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/2/069FAF47FF48AEF4C98F5097074530A74C111AB9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:8d:73:97:77:b4:48:93:60:d9:21:c6:2c:6d:f9:1b:36:33: 43:2d:18:90:c1:65:f1:a7:a9:d3:ee:d2:c7:ec:25:c1:9e:bf: d6:44:6d:92:ec:89:25:44:72:99:97:fb:58:1b:cf:b5:00:f5: 6e:50:42:16:1b:79:04:c1:9e:b3:f5:97:cb:85:80:56:9c:31: 3a:c3:ed:aa:12:34:e2:df:19:5a:36:2c:f4:76:48:d0:e2:13: 67:35:bd:55:41:54:3d:74:a0:b5:ed:24:58:3c:7b:cf:67:fd: a1:6a:40:b6:fb:da:14:fe:7e:6d:e7:c7:37:35:bf:dc:dc:1f: 6a:6a:34:82:2c:93:1e:45:37:ad:e6:71:4e:12:97:8a:0e:d9: 3b:94:63:8b:24:47:11:a3:3a:70:b7:15:36:2f:6a:25:07:f8: b7:64:59:d9:7c:46:6c:9b:31:97:25:6a:bd:d0:7c:f9:74:4e: c1:aa:83:b1:d1:9e:3d:d0:9a:15:66:b8:ed:5a:7e:fa:75:d6: cb:f3:bf:2f:3e:c6:17:88:d1:21:d0:87:ad:fc:e7:da:13:14: 71:25:a4:5e:ad:a9:89:01:09:48:cf:db:95:2b:0e:e4:02:ca: 7c:40:25:37:b4:f9:47:05:10:f8:51:a3:32:d3:29:35:5c:84: 51:dd:4c:74 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUIbSpRxN5IryqG4Qo0TMtIcFK6kgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDY5RkFGNDdGRjQ4QUVGNEM5OEY1MDk3MDc0NTMwQTc0 QzExMUFCOTAeFw0yNjA1MTIxNjIxNDlaFw0yNjA1MTMxOTAxNDlaMDMxMTAvBgNV BAMTKEM2M0ExQTI3NEY5RTZBMTg3N0M4NzNBQTkzOTVGRTJGOUFDRDA2M0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDeM8xl704n4idJDT2/oq0h+ecH Oj4Ifj/aF2pPd2aM+hxSt7kjF1xzZBedrMhh57VFZbhjLcclHX++NRG6rgnRP1Dr fuB0AmPiPPVMMzRmkSSjUVKMlLjyUjexWPLrqX4VCOv7p3oL70FzrTt3MvhWzkLh QIo7QSrjHzPWpT7I7rCKZ6OJI0JdP7v85mXVqJv6YrPE+MBHnlpZoIJP+une+LUr agZBE9llWMqp5q9NNnJGXZNd828N0QeDRCTQaFOqJQQmLa0E8qzxOt2U4rxvTn6e 2SRv5+qgQL1lsBsLjWXvKnCrOGldV98om+PoXIzoFteACMdp8A8R+QgO1TkdAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUxjoaJ0+eahh3yHOqk5X+L5rNBjwwHwYDVR0j BBgwFoAUBp+vR/9IrvTJj1CXB0Uwp0wRGrkwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMjNkNWY2ODItYjUxYi00ODEyLWI4YjEtNDMwZTM4Njgz NzQ4LzIvMDY5RkFGNDdGRjQ4QUVGNEM5OEY1MDk3MDc0NTMwQTc0QzExMUFCOS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84NGQ1MTgxMC0xOTg3LTQ3 MDEtOGYxZi04NDI1MTExOTY0ZjQvMC8wNjlGQUY0N0ZGNDhBRUY0Qzk4RjUwOTcw NzQ1MzBBNzRDMTExQUI5LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzIzZDVmNjgyLWI1MWItNDgxMi1iOGIxLTQzMGUzODY4Mzc0OC8yLzA2OUZBRjQ3 RkY0OEFFRjRDOThGNTA5NzA3NDUzMEE3NEMxMTFBQjkubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQA/jXOX d7RIk2DZIcYsbfkbNjNDLRiQwWXxp6nT7tLH7CXBnr/WRG2S7IklRHKZl/tYG8+1 APVuUEIWG3kEwZ6z9ZfLhYBWnDE6w+2qEjTi3xlaNiz0dkjQ4hNnNb1VQVQ9dKC1 7SRYPHvPZ/2hakC2+9oU/n5t58c3Nb/c3B9qajSCLJMeRTet5nFOEpeKDtk7lGOL JEcRozpwtxU2L2olB/i3ZFnZfEZsmzGXJWq90Hz5dE7BqoOx0Z490JoVZrjtWn76 ddbL878vPsYXiNEh0Iet/OfaExRxJaReramJAQlIz9uVKw7kAsp8QCU3tPlHBRD4 UaMy0yk1XIRR3Ux0 -----END CERTIFICATE-----Generated at Wed May 13 09:11:10 2026 by rpki-client