$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/2/069FAF47FF48AEF4C98F5097074530A74C111AB9.mft File: 069FAF47FF48AEF4C98F5097074530A74C111AB9.mft (raw, json) Hash identifier: /30osvG+ExqtUJlv3iMXnGBB+v/LmxaXSNRIxyaoiuo= Subject key identifier: 17:1B:B0:BA:19:21:93:80:46:AF:88:6B:63:9B:CA:38:AA:50:3B:E1 Authority key identifier: 06:9F:AF:47:FF:48:AE:F4:C9:8F:50:97:07:45:30:A7:4C:11:1A:B9 Certificate issuer: /CN=069FAF47FF48AEF4C98F5097074530A74C111AB9 Certificate serial: 444C5E976B3C21F21A77ECEC83720B6725589D5F Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/069FAF47FF48AEF4C98F5097074530A74C111AB9.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/2/069FAF47FF48AEF4C98F5097074530A74C111AB9.mft Manifest number: 04A5 Signing time: Wed 25 Mar 2026 12:25:00 +0000 Manifest this update: Wed 25 Mar 2026 12:20:00 +0000 Manifest next update: Thu 26 Mar 2026 14:42:00 +0000 Files and hashes: 1: 326130663a383563313a3336333a3a2f34382d3438203d3e20323135363137.roa (hash: nWVf9Vd1/pxv69WaHKM1e/8vQ/po0I7aidbKnzISSgo=) 2: 069FAF47FF48AEF4C98F5097074530A74C111AB9.crl (hash: VpBRw85tR1w5nYrO6TEwOIYrPQjvYgEcMjghBKaSwtg=) 3: 326130663a383563313a3335373a3a2f34382d3438203d3e20323135363137.roa (hash: mT7wNp38f47L+2MAFo1ah1wV4i3g7EwDZhqEAFbd0PU=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/2/069FAF47FF48AEF4C98F5097074530A74C111AB9.crl rsync://rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/2/069FAF47FF48AEF4C98F5097074530A74C111AB9.mft rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/069FAF47FF48AEF4C98F5097074530A74C111AB9.cer rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 26 Mar 2026 14:42:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:4c:5e:97:6b:3c:21:f2:1a:77:ec:ec:83:72:0b:67:25:58:9d:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=069FAF47FF48AEF4C98F5097074530A74C111AB9 Validity Not Before: Mar 25 12:20:00 2026 GMT Not After : Mar 26 14:42:00 2026 GMT Subject: CN=171BB0BA1921938046AF886B639BCA38AA503BE1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:cf:d8:8d:51:f4:81:76:21:eb:84:be:23:53: 05:06:0b:15:34:04:f6:5f:2b:83:68:e3:b0:d1:40: 3c:42:e7:1f:d2:6a:6a:f3:d0:99:f9:1b:5e:8b:75: c3:0e:1a:10:83:d1:f5:74:95:25:0f:b3:84:a7:31: 43:e6:2c:7c:40:2e:c1:dc:58:fc:1c:fe:f6:43:77: 3e:ba:18:22:ec:5a:cb:24:3d:9c:98:dc:d9:6e:2d: e9:28:0a:d5:3a:c4:80:7c:5c:a4:f8:8f:3e:fc:fe: b9:89:90:30:ac:f5:f7:79:2b:2c:df:1c:c3:e9:bc: df:63:07:c7:31:fb:96:20:70:40:bd:5c:75:d4:df: 39:dd:4d:e4:89:a3:38:77:d0:f2:0e:21:4e:9d:4e: f6:73:f1:08:63:32:70:1a:92:0c:1a:26:7d:0a:31: bd:8f:aa:cf:5b:a8:1d:b2:99:18:f3:5a:f1:ec:f5: 1e:73:f4:4e:37:b4:ec:6f:a2:b0:aa:ee:f5:c6:a0: d9:00:e5:6f:78:9d:0e:8e:16:64:c4:f8:63:34:db: 35:68:31:e3:0f:8b:f2:80:c2:2d:4e:94:26:99:a9: 2c:3e:ca:2f:16:16:ce:f5:ff:61:bc:9a:1c:f0:e5: 88:b2:76:72:fe:f1:84:e6:32:10:10:16:3e:1a:48: 0c:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:1B:B0:BA:19:21:93:80:46:AF:88:6B:63:9B:CA:38:AA:50:3B:E1 X509v3 Authority Key Identifier: keyid:06:9F:AF:47:FF:48:AE:F4:C9:8F:50:97:07:45:30:A7:4C:11:1A:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/2/069FAF47FF48AEF4C98F5097074530A74C111AB9.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/069FAF47FF48AEF4C98F5097074530A74C111AB9.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/2/069FAF47FF48AEF4C98F5097074530A74C111AB9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:27:64:a8:61:df:a8:cf:53:ac:8d:92:1c:27:ac:0b:3b:cc: f5:b5:3e:1c:48:5b:c4:33:14:be:e3:fa:53:52:97:7b:34:29: 24:37:41:65:cb:78:05:bf:c3:04:b8:f4:2b:6a:47:be:16:35: e2:5c:16:f9:41:58:3b:f7:94:8c:7d:60:86:1b:63:75:da:ed: e8:b8:5e:f9:19:02:f0:6b:76:c4:1e:46:0a:a6:0a:ac:76:37: d1:a6:5c:e7:88:48:ea:e8:19:a4:ff:05:bb:67:d5:9e:74:e2: 59:1e:17:07:24:04:84:45:32:df:b5:f7:2b:5d:ff:88:d0:66: c7:33:c9:e9:c7:ef:c9:58:0c:03:f6:35:2a:d0:21:35:39:e3: 50:fb:af:de:c0:78:e8:36:1c:25:70:f8:1e:bf:ab:61:72:c7: 45:76:bb:1f:02:75:24:04:57:4f:9a:80:f8:46:6e:fa:7f:2b: a1:35:26:d9:b6:32:27:2b:23:ad:b4:93:2c:a4:f2:39:17:d9: ef:b3:55:98:d1:a3:43:a7:33:da:56:06:1e:df:1b:6f:99:c3: f5:b3:69:af:88:9f:8a:30:b1:6d:9b:bc:9b:c7:5e:3c:bd:b0: 9b:a7:da:09:74:88:44:45:71:c7:6c:47:8b:a4:a4:9f:0b:a7: 99:4e:b7:b7 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIURExel2s8IfIad+zsg3ILZyVYnV8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDY5RkFGNDdGRjQ4QUVGNEM5OEY1MDk3MDc0NTMwQTc0 QzExMUFCOTAeFw0yNjAzMjUxMjIwMDBaFw0yNjAzMjYxNDQyMDBaMDMxMTAvBgNV BAMTKDE3MUJCMEJBMTkyMTkzODA0NkFGODg2QjYzOUJDQTM4QUE1MDNCRTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpz9iNUfSBdiHrhL4jUwUGCxU0 BPZfK4No47DRQDxC5x/Samrz0Jn5G16LdcMOGhCD0fV0lSUPs4SnMUPmLHxALsHc WPwc/vZDdz66GCLsWsskPZyY3NluLekoCtU6xIB8XKT4jz78/rmJkDCs9fd5Kyzf HMPpvN9jB8cx+5YgcEC9XHXU3zndTeSJozh30PIOIU6dTvZz8QhjMnAakgwaJn0K Mb2Pqs9bqB2ymRjzWvHs9R5z9E43tOxvorCq7vXGoNkA5W94nQ6OFmTE+GM02zVo MeMPi/KAwi1OlCaZqSw+yi8WFs71/2G8mhzw5YiydnL+8YTmMhAQFj4aSAxXAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUFxuwuhkhk4BGr4hrY5vKOKpQO+EwHwYDVR0j BBgwFoAUBp+vR/9IrvTJj1CXB0Uwp0wRGrkwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMjNkNWY2ODItYjUxYi00ODEyLWI4YjEtNDMwZTM4Njgz NzQ4LzIvMDY5RkFGNDdGRjQ4QUVGNEM5OEY1MDk3MDc0NTMwQTc0QzExMUFCOS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84NGQ1MTgxMC0xOTg3LTQ3 MDEtOGYxZi04NDI1MTExOTY0ZjQvMC8wNjlGQUY0N0ZGNDhBRUY0Qzk4RjUwOTcw NzQ1MzBBNzRDMTExQUI5LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzIzZDVmNjgyLWI1MWItNDgxMi1iOGIxLTQzMGUzODY4Mzc0OC8yLzA2OUZBRjQ3 RkY0OEFFRjRDOThGNTA5NzA3NDUzMEE3NEMxMTFBQjkubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAOJ2So Yd+oz1OsjZIcJ6wLO8z1tT4cSFvEMxS+4/pTUpd7NCkkN0Fly3gFv8MEuPQrake+ FjXiXBb5QVg795SMfWCGG2N12u3ouF75GQLwa3bEHkYKpgqsdjfRplzniEjq6Bmk /wW7Z9WedOJZHhcHJASERTLftfcrXf+I0GbHM8npx+/JWAwD9jUq0CE1OeNQ+6/e wHjoNhwlcPgev6thcsdFdrsfAnUkBFdPmoD4Rm76fyuhNSbZtjInKyOttJMspPI5 F9nvs1WY0aNDpzPaVgYe3xtvmcP1s2mviJ+KMLFtm7ybx148vbCbp9oJdIhERXHH bEeLpKSfC6eZTre3 -----END CERTIFICATE-----Generated at Thu Mar 26 07:48:29 2026 by rpki-client