$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/2/069FAF47FF48AEF4C98F5097074530A74C111AB9.mft File: 069FAF47FF48AEF4C98F5097074530A74C111AB9.mft (raw, json) Hash identifier: Eylup+tmLwK4kpkE2/GC7QXhfKDFi4i3LrrJoQqhl6U= Subject key identifier: 0E:EF:2B:D3:F8:6D:1C:77:2C:F6:7A:C5:88:8A:BF:A0:3A:DE:E4:38 Authority key identifier: 06:9F:AF:47:FF:48:AE:F4:C9:8F:50:97:07:45:30:A7:4C:11:1A:B9 Certificate issuer: /CN=069FAF47FF48AEF4C98F5097074530A74C111AB9 Certificate serial: 757DCCCA04A39766E5DCD4211FAD5395BCE2E23C Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/069FAF47FF48AEF4C98F5097074530A74C111AB9.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/2/069FAF47FF48AEF4C98F5097074530A74C111AB9.mft Manifest number: 0572 Signing time: Fri 24 Jul 2026 06:19:38 +0000 Manifest this update: Fri 24 Jul 2026 06:14:38 +0000 Manifest next update: Sat 25 Jul 2026 09:44:38 +0000 Files and hashes: 1: 069FAF47FF48AEF4C98F5097074530A74C111AB9.crl (hash: 9upyF9bRLsnmbpmfONCaEQXprnBJpbRa51D8FeJcVKo=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/2/069FAF47FF48AEF4C98F5097074530A74C111AB9.crl rsync://rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/2/069FAF47FF48AEF4C98F5097074530A74C111AB9.mft rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/069FAF47FF48AEF4C98F5097074530A74C111AB9.cer rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 25 Jul 2026 08:00:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:7d:cc:ca:04:a3:97:66:e5:dc:d4:21:1f:ad:53:95:bc:e2:e2:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=069FAF47FF48AEF4C98F5097074530A74C111AB9 Validity Not Before: Jul 24 06:14:38 2026 GMT Not After : Jul 25 09:44:38 2026 GMT Subject: CN=0EEF2BD3F86D1C772CF67AC5888ABFA03ADEE438 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:dc:52:1d:32:b4:00:ea:fa:5a:03:3b:a1:fc: b5:bb:ff:86:fe:36:4d:1c:a8:96:6d:d2:ed:e1:e4: bb:03:63:32:8c:6f:d8:2c:d1:a2:d0:da:28:27:54: 6d:9b:ab:9d:65:50:1a:17:33:77:6d:6c:53:a6:f1: 66:56:16:94:e9:bc:7e:f9:d1:ff:50:be:23:16:75: 0e:9b:ef:90:8f:b4:59:fb:d6:c1:b0:f3:15:b7:8b: 41:53:b2:0d:9d:e5:fb:c8:e1:ee:c2:a8:16:b6:32: fe:79:07:ab:3d:ce:8c:40:06:9c:4d:37:78:0d:02: 02:af:7f:39:e8:a8:bb:7a:8a:7d:b4:61:6d:4c:0f: 61:d9:d4:65:c3:15:b5:3d:7d:0f:d4:e6:fc:cb:7b: bf:b4:56:6f:74:42:8e:9a:38:e0:14:a0:a1:c9:fd: 82:7d:c4:e8:b2:a9:93:64:89:96:57:7e:24:2d:c0: b8:85:6e:ed:e8:81:8e:73:1c:9e:1d:00:cb:0b:4d: ed:a4:54:23:a4:54:ac:f2:c2:64:80:d0:30:76:97: c3:2a:ab:b8:0e:56:aa:f1:27:45:83:e0:bd:b9:11: 55:4a:18:82:67:85:f9:8d:df:4f:18:d7:21:51:e5: 1b:10:00:1a:83:54:7f:f9:0c:88:d4:ff:f7:05:67: f8:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:EF:2B:D3:F8:6D:1C:77:2C:F6:7A:C5:88:8A:BF:A0:3A:DE:E4:38 X509v3 Authority Key Identifier: keyid:06:9F:AF:47:FF:48:AE:F4:C9:8F:50:97:07:45:30:A7:4C:11:1A:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/2/069FAF47FF48AEF4C98F5097074530A74C111AB9.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/069FAF47FF48AEF4C98F5097074530A74C111AB9.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/2/069FAF47FF48AEF4C98F5097074530A74C111AB9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b0:5b:c5:e8:1f:44:5c:03:ee:db:7f:4e:4c:68:3b:11:ad:c2: be:bc:77:f3:01:32:2a:bb:d7:5d:4e:75:a9:bb:71:78:90:0f: f9:a2:dd:87:99:9c:e5:43:7a:4d:af:14:82:d9:5e:df:01:b7: 5d:3f:27:2b:c0:f4:5d:99:88:ef:a3:4b:76:e6:2d:30:9e:c8: f1:1a:e5:93:9d:15:1b:d9:99:84:f6:25:86:d9:65:91:ef:b0: 2c:6c:3a:b7:62:94:7a:ee:d9:29:e8:71:86:2b:dd:43:36:15: ea:9e:30:cc:6b:86:53:4f:43:3b:71:bd:d4:ec:65:fd:ab:20: 03:62:87:60:18:82:11:13:75:aa:3f:a5:a4:db:3c:cf:1f:45: 0c:be:6b:e8:a3:04:9d:29:c2:b1:bd:48:2c:43:8d:a6:39:9f: 94:52:7f:58:d7:95:8f:8b:4f:e6:f7:6f:a0:76:30:a3:45:f4: c8:c5:0d:a8:4f:88:1e:6f:4e:90:c8:d2:53:4f:9b:ef:5c:aa: 98:b6:71:b4:a4:59:8b:91:f3:56:a7:a1:66:00:32:2d:8d:85: 85:a2:4e:d0:1a:38:a2:bb:ce:e1:20:1b:53:54:7d:59:7f:d8: 4e:f1:73:e1:85:59:dc:56:9e:48:81:61:a3:75:13:7c:5b:4b: a4:84:9a:b4 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUdX3MygSjl2bl3NQhH61Tlbzi4jwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDY5RkFGNDdGRjQ4QUVGNEM5OEY1MDk3MDc0NTMwQTc0 QzExMUFCOTAeFw0yNjA3MjQwNjE0MzhaFw0yNjA3MjUwOTQ0MzhaMDMxMTAvBgNV BAMTKDBFRUYyQkQzRjg2RDFDNzcyQ0Y2N0FDNTg4OEFCRkEwM0FERUU0MzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCu3FIdMrQA6vpaAzuh/LW7/4b+ Nk0cqJZt0u3h5LsDYzKMb9gs0aLQ2ignVG2bq51lUBoXM3dtbFOm8WZWFpTpvH75 0f9QviMWdQ6b75CPtFn71sGw8xW3i0FTsg2d5fvI4e7CqBa2Mv55B6s9zoxABpxN N3gNAgKvfznoqLt6in20YW1MD2HZ1GXDFbU9fQ/U5vzLe7+0Vm90Qo6aOOAUoKHJ /YJ9xOiyqZNkiZZXfiQtwLiFbu3ogY5zHJ4dAMsLTe2kVCOkVKzywmSA0DB2l8Mq q7gOVqrxJ0WD4L25EVVKGIJnhfmN308Y1yFR5RsQABqDVH/5DIjU//cFZ/j5AgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUDu8r0/htHHcs9nrFiIq/oDre5DgwHwYDVR0j BBgwFoAUBp+vR/9IrvTJj1CXB0Uwp0wRGrkwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMjNkNWY2ODItYjUxYi00ODEyLWI4YjEtNDMwZTM4Njgz NzQ4LzIvMDY5RkFGNDdGRjQ4QUVGNEM5OEY1MDk3MDc0NTMwQTc0QzExMUFCOS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84NGQ1MTgxMC0xOTg3LTQ3 MDEtOGYxZi04NDI1MTExOTY0ZjQvMC8wNjlGQUY0N0ZGNDhBRUY0Qzk4RjUwOTcw NzQ1MzBBNzRDMTExQUI5LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzIzZDVmNjgyLWI1MWItNDgxMi1iOGIxLTQzMGUzODY4Mzc0OC8yLzA2OUZBRjQ3 RkY0OEFFRjRDOThGNTA5NzA3NDUzMEE3NEMxMTFBQjkubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCwW8Xo H0RcA+7bf05MaDsRrcK+vHfzATIqu9ddTnWpu3F4kA/5ot2HmZzlQ3pNrxSC2V7f AbddPycrwPRdmYjvo0t25i0wnsjxGuWTnRUb2ZmE9iWG2WWR77AsbDq3YpR67tkp 6HGGK91DNhXqnjDMa4ZTT0M7cb3U7GX9qyADYodgGIIRE3WqP6Wk2zzPH0UMvmvo owSdKcKxvUgsQ42mOZ+UUn9Y15WPi0/m92+gdjCjRfTIxQ2oT4geb06QyNJTT5vv XKqYtnG0pFmLkfNWp6FmADItjYWFok7QGjiiu87hIBtTVH1Zf9hO8XPhhVncVp5I gWGjdRN8W0ukhJq0 -----END CERTIFICATE-----Generated at Fri Jul 24 12:40:07 2026 by rpki-client