$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/2/069FAF47FF48AEF4C98F5097074530A74C111AB9.mft File: 069FAF47FF48AEF4C98F5097074530A74C111AB9.mft (raw, json) Hash identifier: 7TJ9u3Qjiv4ZSQCJub1AdwvtXPsFpXWHskKRDCCof3M= Subject key identifier: D1:C5:C4:F1:4F:1D:FC:64:E5:4A:96:24:CD:B7:43:12:3F:CC:B0:E4 Authority key identifier: 06:9F:AF:47:FF:48:AE:F4:C9:8F:50:97:07:45:30:A7:4C:11:1A:B9 Certificate issuer: /CN=069FAF47FF48AEF4C98F5097074530A74C111AB9 Certificate serial: 4A824BE81D5616E48E5CB686729C6477C13B8256 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/069FAF47FF48AEF4C98F5097074530A74C111AB9.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/2/069FAF47FF48AEF4C98F5097074530A74C111AB9.mft Manifest number: 037D Signing time: Sat 23 Aug 2025 18:55:22 +0000 Manifest this update: Sat 23 Aug 2025 18:50:22 +0000 Manifest next update: Sun 24 Aug 2025 19:02:22 +0000 Files and hashes: 1: 069FAF47FF48AEF4C98F5097074530A74C111AB9.crl (hash: 25tU5lX+agKe1YVE2OuZ0nwj/iKf5ALKuAz9bIuIpkU=) 2: 326130663a383563313a3336333a3a2f34382d3438203d3e20323135363137.roa (hash: G15mowLoM7Eub0vLuxgC+jxtFArNOkVyDHG13blFH8s=) 3: 326130663a383563313a3335313a3a2f34382d3438203d3e20343031333836.roa (hash: 7mR3vQrcbHUSwKtu57zMbBmzQiQeIJwUP4b5xp+7MO0=) 4: 326130663a383563313a3335373a3a2f34382d3438203d3e20323135363137.roa (hash: 0B/fHqDaAtnHXiIonhpxQ7ujnJI7VSnPxGbabzcBFIA=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/2/069FAF47FF48AEF4C98F5097074530A74C111AB9.crl rsync://rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/2/069FAF47FF48AEF4C98F5097074530A74C111AB9.mft rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/069FAF47FF48AEF4C98F5097074530A74C111AB9.cer rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 24 Aug 2025 19:02:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:82:4b:e8:1d:56:16:e4:8e:5c:b6:86:72:9c:64:77:c1:3b:82:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=069FAF47FF48AEF4C98F5097074530A74C111AB9 Validity Not Before: Aug 23 18:50:22 2025 GMT Not After : Aug 24 19:02:22 2025 GMT Subject: CN=D1C5C4F14F1DFC64E54A9624CDB743123FCCB0E4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:32:d4:1b:ef:de:2a:76:d0:ef:e0:48:8e:f4: ff:17:7f:8a:30:c1:a4:2d:fe:eb:46:c3:a6:33:c3: 6d:01:74:fe:54:18:6a:42:9e:17:b6:38:67:28:01: 63:d7:c9:0f:2d:79:e3:92:30:b7:76:18:59:78:1b: 30:a2:8b:93:cc:6d:1c:ac:b5:80:64:7e:ad:15:94: 6b:11:f3:4b:57:bf:f8:b6:0a:24:fa:af:3e:dd:81: 35:38:63:35:b8:8d:0d:7b:10:47:da:bd:44:cc:f1: 68:bb:97:b3:b8:2d:6d:24:6b:62:be:14:e2:38:ed: 1e:ea:d4:d0:46:7a:4f:ae:af:4d:9b:04:19:c6:8f: 28:19:d9:9d:44:27:80:ce:85:0a:58:9a:c5:c8:b5: d6:cd:34:2e:71:9a:36:11:66:ef:c3:48:82:b6:95: d8:67:5f:11:f2:58:33:a0:db:9a:a4:e1:67:bb:30: b8:31:84:13:d2:5c:5d:b3:12:15:52:ae:ee:de:08: 09:90:54:42:17:4c:fb:ac:41:7c:8c:c4:1a:17:9e: 58:78:0d:1b:e1:3a:2b:b9:18:42:c9:67:6b:d3:e6: 1d:ca:93:37:0d:34:fb:1b:d2:56:fc:7a:7a:3e:d4: b7:b4:d1:8c:41:14:e0:8d:b5:49:27:2e:e5:7c:af: 60:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:C5:C4:F1:4F:1D:FC:64:E5:4A:96:24:CD:B7:43:12:3F:CC:B0:E4 X509v3 Authority Key Identifier: keyid:06:9F:AF:47:FF:48:AE:F4:C9:8F:50:97:07:45:30:A7:4C:11:1A:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/2/069FAF47FF48AEF4C98F5097074530A74C111AB9.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/069FAF47FF48AEF4C98F5097074530A74C111AB9.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/2/069FAF47FF48AEF4C98F5097074530A74C111AB9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:88:2b:67:c5:f4:b3:c2:6d:54:dd:26:7d:6b:0a:5d:80:d0: 16:7b:6b:1d:35:7a:88:bf:29:5f:65:9a:5d:f3:4a:8e:66:a6: e1:15:ef:59:6f:64:f4:fa:cc:a6:38:9a:0e:1b:37:cb:44:5a: 3b:94:ae:a6:0d:2a:40:5a:1f:47:df:7e:05:d1:e7:76:c5:bc: 40:1d:a0:39:97:a0:83:70:43:18:d1:03:fe:91:8b:a9:6a:4f: e3:2e:b5:f0:2c:ac:54:af:f1:d2:c1:a1:d2:57:c0:f7:8e:d7: 00:81:b1:40:55:6c:89:08:0d:a7:2b:25:c3:d1:96:8f:47:fd: b8:32:fd:10:67:5f:17:61:2b:09:47:d5:05:50:6a:7b:37:22: 8e:39:94:26:2b:30:d7:ee:39:84:93:f4:6b:8d:d0:9b:df:4c: 32:50:7d:b9:1a:a5:5f:54:8d:5f:80:6f:d2:5a:4e:b4:a1:bf: 4d:0e:0a:0a:1d:90:82:08:9c:90:2a:a7:ef:a1:a3:80:9d:f3: 0c:21:7c:4b:e4:c2:57:e3:2f:4f:65:12:ed:ba:ce:90:39:3d: 3b:09:71:96:37:1f:54:55:c4:51:7d:dd:ed:4c:0a:34:66:ae: c1:67:a5:65:11:77:c1:43:bc:c6:e7:8c:a2:ca:0c:18:c2:be: 30:41:5f:41 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUSoJL6B1WFuSOXLaGcpxkd8E7glYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDY5RkFGNDdGRjQ4QUVGNEM5OEY1MDk3MDc0NTMwQTc0 QzExMUFCOTAeFw0yNTA4MjMxODUwMjJaFw0yNTA4MjQxOTAyMjJaMDMxMTAvBgNV BAMTKEQxQzVDNEYxNEYxREZDNjRFNTRBOTYyNENEQjc0MzEyM0ZDQ0IwRTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDkMtQb794qdtDv4EiO9P8Xf4ow waQt/utGw6Yzw20BdP5UGGpCnhe2OGcoAWPXyQ8teeOSMLd2GFl4GzCii5PMbRys tYBkfq0VlGsR80tXv/i2CiT6rz7dgTU4YzW4jQ17EEfavUTM8Wi7l7O4LW0ka2K+ FOI47R7q1NBGek+ur02bBBnGjygZ2Z1EJ4DOhQpYmsXItdbNNC5xmjYRZu/DSIK2 ldhnXxHyWDOg25qk4We7MLgxhBPSXF2zEhVSru7eCAmQVEIXTPusQXyMxBoXnlh4 DRvhOiu5GELJZ2vT5h3KkzcNNPsb0lb8eno+1Le00YxBFOCNtUknLuV8r2DHAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQU0cXE8U8d/GTlSpYkzbdDEj/MsOQwHwYDVR0j BBgwFoAUBp+vR/9IrvTJj1CXB0Uwp0wRGrkwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMjNkNWY2ODItYjUxYi00ODEyLWI4YjEtNDMwZTM4Njgz NzQ4LzIvMDY5RkFGNDdGRjQ4QUVGNEM5OEY1MDk3MDc0NTMwQTc0QzExMUFCOS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84NGQ1MTgxMC0xOTg3LTQ3 MDEtOGYxZi04NDI1MTExOTY0ZjQvMC8wNjlGQUY0N0ZGNDhBRUY0Qzk4RjUwOTcw NzQ1MzBBNzRDMTExQUI5LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzIzZDVmNjgyLWI1MWItNDgxMi1iOGIxLTQzMGUzODY4Mzc0OC8yLzA2OUZBRjQ3 RkY0OEFFRjRDOThGNTA5NzA3NDUzMEE3NEMxMTFBQjkubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBWiCtn xfSzwm1U3SZ9awpdgNAWe2sdNXqIvylfZZpd80qOZqbhFe9Zb2T0+symOJoOGzfL RFo7lK6mDSpAWh9H334F0ed2xbxAHaA5l6CDcEMY0QP+kYupak/jLrXwLKxUr/HS waHSV8D3jtcAgbFAVWyJCA2nKyXD0ZaPR/24Mv0QZ18XYSsJR9UFUGp7NyKOOZQm KzDX7jmEk/RrjdCb30wyUH25GqVfVI1fgG/SWk60ob9NDgoKHZCCCJyQKqfvoaOA nfMMIXxL5MJX4y9PZRLtus6QOT07CXGWNx9UVcRRfd3tTAo0Zq7BZ6VlEXfBQ7zG 54yiygwYwr4wQV9B -----END CERTIFICATE-----Generated at Sun Aug 24 04:20:37 2025 by rpki-client