$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/2/069FAF47FF48AEF4C98F5097074530A74C111AB9.mft File: 069FAF47FF48AEF4C98F5097074530A74C111AB9.mft (raw, json) Hash identifier: 1D7HLfYqnu/mcfwiPcu2kQGLg4B0YfzwixOkiTjHV0E= Subject key identifier: BA:66:AC:02:D9:13:CB:6F:50:D4:E8:82:EC:12:BE:88:55:9F:C8:BB Authority key identifier: 06:9F:AF:47:FF:48:AE:F4:C9:8F:50:97:07:45:30:A7:4C:11:1A:B9 Certificate issuer: /CN=069FAF47FF48AEF4C98F5097074530A74C111AB9 Certificate serial: 4DA041FFED3A0DBDD2061E0ECCAB4AEF67DDF309 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/069FAF47FF48AEF4C98F5097074530A74C111AB9.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/2/069FAF47FF48AEF4C98F5097074530A74C111AB9.mft Manifest number: 02F6 Signing time: Fri 09 May 2025 18:17:05 +0000 Manifest this update: Fri 09 May 2025 18:12:05 +0000 Manifest next update: Sat 10 May 2025 21:05:05 +0000 Files and hashes: 1: 069FAF47FF48AEF4C98F5097074530A74C111AB9.crl (hash: md/beXqEdOI1TmC0x8DJ9+zORsZ/n61f0CUdGjLDW3I=) 2: 326130663a383563313a3336333a3a2f34382d3438203d3e20323135363137.roa (hash: G15mowLoM7Eub0vLuxgC+jxtFArNOkVyDHG13blFH8s=) 3: 326130663a383563313a3335313a3a2f34382d3438203d3e20343031333836.roa (hash: 7mR3vQrcbHUSwKtu57zMbBmzQiQeIJwUP4b5xp+7MO0=) 4: 326130663a383563313a3335373a3a2f34382d3438203d3e20323135363137.roa (hash: 0B/fHqDaAtnHXiIonhpxQ7ujnJI7VSnPxGbabzcBFIA=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/2/069FAF47FF48AEF4C98F5097074530A74C111AB9.crl rsync://rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/2/069FAF47FF48AEF4C98F5097074530A74C111AB9.mft rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/069FAF47FF48AEF4C98F5097074530A74C111AB9.cer rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 May 2025 17:53:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:a0:41:ff:ed:3a:0d:bd:d2:06:1e:0e:cc:ab:4a:ef:67:dd:f3:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=069FAF47FF48AEF4C98F5097074530A74C111AB9 Validity Not Before: May 9 18:12:05 2025 GMT Not After : May 10 21:05:05 2025 GMT Subject: CN=BA66AC02D913CB6F50D4E882EC12BE88559FC8BB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:d3:d8:7c:8b:bd:27:23:d3:29:8b:b6:7f:5e: 0f:ff:be:07:10:a2:6c:c0:be:f2:2b:c1:f9:12:44: 5e:48:76:89:b4:0b:44:c4:92:49:05:78:52:99:91: 0b:31:80:f5:64:12:e5:de:de:39:bb:a5:ae:89:ba: bb:e6:0f:96:cc:8f:8e:9f:fa:e6:06:f2:92:18:9b: 6d:cf:ae:e2:11:8e:b5:33:18:3a:e9:bb:82:39:67: da:3c:90:7d:1b:cc:2e:2f:92:17:03:d1:53:b5:e7: b3:54:d6:af:f6:08:23:17:39:3e:1d:1a:e6:05:65: 70:3c:a2:ad:ee:13:c3:c5:02:88:1d:0c:9d:3c:25: fd:05:98:f0:6c:fa:4c:c2:60:ff:f6:a1:5f:b4:d9: 04:23:31:50:46:e3:63:7e:4f:a6:f4:c4:06:dc:49: 7b:e8:bd:7c:00:03:99:fe:3d:a4:4d:31:b0:5a:82: 69:7c:83:b3:93:f5:0d:f1:ce:d9:34:9b:90:db:6a: 63:2f:47:14:a3:be:0c:eb:bd:59:a5:13:77:23:73: 81:22:12:d0:85:e7:87:0e:84:03:a5:71:7c:41:6f: 35:d2:83:a7:81:87:8f:ce:21:26:be:7b:f6:eb:06: 39:12:11:1b:b5:b8:a2:1d:94:bc:45:42:2e:4a:53: 3d:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:66:AC:02:D9:13:CB:6F:50:D4:E8:82:EC:12:BE:88:55:9F:C8:BB X509v3 Authority Key Identifier: keyid:06:9F:AF:47:FF:48:AE:F4:C9:8F:50:97:07:45:30:A7:4C:11:1A:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/2/069FAF47FF48AEF4C98F5097074530A74C111AB9.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/069FAF47FF48AEF4C98F5097074530A74C111AB9.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/2/069FAF47FF48AEF4C98F5097074530A74C111AB9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a5:24:4a:da:43:b2:6e:16:3a:0b:83:a3:f2:89:6d:36:c6:48: bd:a8:10:39:49:1c:3f:e9:c5:24:29:14:49:f1:13:d3:26:23: 9c:d0:c5:8d:02:15:52:ff:c2:aa:8b:0f:ed:35:b2:e3:5f:99: 7a:49:c1:ee:09:d0:56:0d:03:5b:cb:0b:b8:f2:01:f6:0b:c1: c6:12:66:4b:0d:28:5d:01:a1:59:d4:f3:fa:36:6d:b1:7a:8d: af:d2:50:21:33:e7:4d:90:80:bb:ff:76:e1:a5:da:8d:9e:81: 28:0d:4b:4a:0a:53:9e:e3:ee:46:61:35:26:52:32:03:91:34: bd:fe:ca:f7:82:69:56:cb:4b:a5:b9:a4:2d:8e:49:d9:ef:b0: a9:d6:52:8a:0c:4e:7d:74:eb:2b:96:ee:98:9c:54:21:99:d8: 81:85:5e:7c:02:8e:99:6f:d0:f1:44:70:1b:51:95:55:5d:8b: d4:0d:d3:5d:b7:c9:1d:4e:1a:9f:fa:93:9a:f2:cd:83:27:a6: 05:8d:31:d6:9a:6f:6e:a5:17:64:2e:c4:70:9e:19:f4:9d:d8: 8b:4e:36:a0:26:ce:f1:72:33:8c:c0:7c:ca:c4:ee:a8:59:2c: e3:82:a6:3a:3b:f6:2d:f5:bd:f9:3d:eb:d6:8f:a7:1e:be:6d: bc:ce:1d:e4 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUTaBB/+06Db3SBh4OzKtK72fd8wkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDY5RkFGNDdGRjQ4QUVGNEM5OEY1MDk3MDc0NTMwQTc0 QzExMUFCOTAeFw0yNTA1MDkxODEyMDVaFw0yNTA1MTAyMTA1MDVaMDMxMTAvBgNV BAMTKEJBNjZBQzAyRDkxM0NCNkY1MEQ0RTg4MkVDMTJCRTg4NTU5RkM4QkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD209h8i70nI9Mpi7Z/Xg//vgcQ omzAvvIrwfkSRF5Idom0C0TEkkkFeFKZkQsxgPVkEuXe3jm7pa6JurvmD5bMj46f +uYG8pIYm23PruIRjrUzGDrpu4I5Z9o8kH0bzC4vkhcD0VO157NU1q/2CCMXOT4d GuYFZXA8oq3uE8PFAogdDJ08Jf0FmPBs+kzCYP/2oV+02QQjMVBG42N+T6b0xAbc SXvovXwAA5n+PaRNMbBagml8g7OT9Q3xztk0m5DbamMvRxSjvgzrvVmlE3cjc4Ei EtCF54cOhAOlcXxBbzXSg6eBh4/OISa+e/brBjkSERu1uKIdlLxFQi5KUz33AgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUumasAtkTy29Q1OiC7BK+iFWfyLswHwYDVR0j BBgwFoAUBp+vR/9IrvTJj1CXB0Uwp0wRGrkwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMjNkNWY2ODItYjUxYi00ODEyLWI4YjEtNDMwZTM4Njgz NzQ4LzIvMDY5RkFGNDdGRjQ4QUVGNEM5OEY1MDk3MDc0NTMwQTc0QzExMUFCOS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84NGQ1MTgxMC0xOTg3LTQ3 MDEtOGYxZi04NDI1MTExOTY0ZjQvMC8wNjlGQUY0N0ZGNDhBRUY0Qzk4RjUwOTcw NzQ1MzBBNzRDMTExQUI5LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzIzZDVmNjgyLWI1MWItNDgxMi1iOGIxLTQzMGUzODY4Mzc0OC8yLzA2OUZBRjQ3 RkY0OEFFRjRDOThGNTA5NzA3NDUzMEE3NEMxMTFBQjkubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQClJEra Q7JuFjoLg6PyiW02xki9qBA5SRw/6cUkKRRJ8RPTJiOc0MWNAhVS/8Kqiw/tNbLj X5l6ScHuCdBWDQNbywu48gH2C8HGEmZLDShdAaFZ1PP6Nm2xeo2v0lAhM+dNkIC7 /3bhpdqNnoEoDUtKClOe4+5GYTUmUjIDkTS9/sr3gmlWy0uluaQtjknZ77Cp1lKK DE59dOsrlu6YnFQhmdiBhV58Ao6Zb9DxRHAbUZVVXYvUDdNdt8kdThqf+pOa8s2D J6YFjTHWmm9upRdkLsRwnhn0ndiLTjagJs7xcjOMwHzKxO6oWSzjgqY6O/Yt9b35 PevWj6cevm28zh3k -----END CERTIFICATE-----Generated at Fri May 9 22:05:01 2025 by rpki-client