$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/2/069FAF47FF48AEF4C98F5097074530A74C111AB9.mft File: 069FAF47FF48AEF4C98F5097074530A74C111AB9.mft (raw, json) Hash identifier: jblVHOJHETjmFvZQGwOeYroU4Laygzjmwm27a49ydBo= Subject key identifier: 66:AA:7B:2D:24:86:5C:A0:3A:78:B6:0C:28:66:04:D3:61:FA:AD:7C Authority key identifier: 06:9F:AF:47:FF:48:AE:F4:C9:8F:50:97:07:45:30:A7:4C:11:1A:B9 Certificate issuer: /CN=069FAF47FF48AEF4C98F5097074530A74C111AB9 Certificate serial: 32DF5C7B5ECFC8F6BA81C12C8CD22E99271EAAB8 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/069FAF47FF48AEF4C98F5097074530A74C111AB9.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/2/069FAF47FF48AEF4C98F5097074530A74C111AB9.mft Manifest number: 05C8 Signing time: Sat 26 Sep 2026 17:39:26 +0000 Manifest this update: Sat 26 Sep 2026 17:34:26 +0000 Manifest next update: Sun 27 Sep 2026 19:59:26 +0000 Files and hashes: 1: 069FAF47FF48AEF4C98F5097074530A74C111AB9.crl (hash: qN8nSbYm1UBJrzvbBjE8ex719PSFxfx6GdKDRVLbxmo=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/2/069FAF47FF48AEF4C98F5097074530A74C111AB9.crl rsync://rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/2/069FAF47FF48AEF4C98F5097074530A74C111AB9.mft rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/069FAF47FF48AEF4C98F5097074530A74C111AB9.cer rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 27 Sep 2026 11:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:df:5c:7b:5e:cf:c8:f6:ba:81:c1:2c:8c:d2:2e:99:27:1e:aa:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=069FAF47FF48AEF4C98F5097074530A74C111AB9 Validity Not Before: Sep 26 17:34:26 2026 GMT Not After : Sep 27 19:59:26 2026 GMT Subject: CN=66AA7B2D24865CA03A78B60C286604D361FAAD7C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:fa:ad:34:7d:22:c5:76:80:c9:77:5b:dc:e6: ca:b0:14:f9:7e:6a:28:60:e7:f3:43:fb:f8:63:92: 04:c0:a6:62:df:fe:4d:7c:93:de:e6:fe:5b:05:fe: 88:1f:b5:89:a9:4f:9d:df:34:bb:94:94:25:64:69: 0e:cb:20:ba:32:fd:ab:ec:86:0c:6b:18:59:3d:fe: 41:f2:e4:c9:a6:a0:c4:f9:79:3b:af:d5:7b:25:d1: 70:f1:42:ac:93:a4:82:50:92:3b:9d:38:d1:fa:03: 77:d2:03:2f:f8:f4:86:dc:80:fa:15:73:68:00:af: 70:9b:55:24:24:41:6c:16:09:a9:87:8c:7b:0c:f6: 22:08:82:98:59:81:7c:42:b7:cb:ae:73:ed:b2:65: 1f:bb:c4:dd:1d:f8:c4:e1:e8:70:ba:c6:79:42:8a: 5c:d0:83:5b:81:52:55:d5:32:2e:0d:bb:ba:d0:e6: b2:a9:01:69:ca:46:61:54:2d:31:80:cb:0b:2d:1d: 56:d5:3a:79:46:ca:b3:7c:ba:75:b7:42:2a:38:d6: 05:a4:40:e4:11:af:91:1d:9f:17:26:99:39:40:48: 77:74:a1:d4:1c:1a:6a:39:3f:e9:70:3a:d7:69:20: 51:43:82:2f:2e:55:14:c6:23:ec:45:e4:9d:bb:5f: fb:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:AA:7B:2D:24:86:5C:A0:3A:78:B6:0C:28:66:04:D3:61:FA:AD:7C X509v3 Authority Key Identifier: keyid:06:9F:AF:47:FF:48:AE:F4:C9:8F:50:97:07:45:30:A7:4C:11:1A:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/2/069FAF47FF48AEF4C98F5097074530A74C111AB9.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/069FAF47FF48AEF4C98F5097074530A74C111AB9.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/2/069FAF47FF48AEF4C98F5097074530A74C111AB9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b8:5a:59:b7:c2:34:89:ee:38:86:58:54:d7:aa:c4:c5:54:42: f5:3f:c2:0f:2a:cd:ad:d7:40:42:c5:e5:30:df:9f:fb:6d:60: dd:1a:55:86:bd:3a:b4:c1:3d:59:75:94:91:1b:fc:b0:7f:27: 1b:a7:29:c8:7c:f2:24:b1:05:e9:b9:c9:c4:ab:89:50:97:b9: 98:90:0e:da:66:71:7f:eb:f3:b1:21:bb:c5:78:13:18:82:bd: 09:5b:5b:b2:de:64:4c:fa:dd:70:ca:0b:18:8a:4b:c5:cd:dc: a7:da:f0:3b:77:20:e9:49:32:f8:39:a6:43:0b:79:2b:42:fa: 32:ff:a6:94:bf:cd:04:92:8a:35:fe:2e:f8:16:56:fe:55:be: b4:d2:d1:23:f6:62:9f:07:25:77:90:d9:70:3e:cf:4c:a3:3f: eb:4d:a4:f9:e0:39:7b:e7:8d:7d:1b:f5:9c:61:db:e7:fe:30: ba:24:57:12:f4:c5:6c:e2:47:db:df:cf:2f:9f:bb:91:4d:6e: 6a:a8:30:dc:39:fc:03:44:31:ae:c1:52:90:f1:39:f8:50:fc: bc:53:b4:ce:b2:01:34:2f:5a:9d:17:eb:f1:2d:e0:8e:51:c4: 81:9d:3e:70:2a:3b:f9:7a:9f:56:61:1f:de:86:a1:01:5c:5a: ee:cb:06:dc -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUMt9ce17PyPa6gcEsjNIumSceqrgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDY5RkFGNDdGRjQ4QUVGNEM5OEY1MDk3MDc0NTMwQTc0 QzExMUFCOTAeFw0yNjA5MjYxNzM0MjZaFw0yNjA5MjcxOTU5MjZaMDMxMTAvBgNV BAMTKDY2QUE3QjJEMjQ4NjVDQTAzQTc4QjYwQzI4NjYwNEQzNjFGQUFEN0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDO+q00fSLFdoDJd1vc5sqwFPl+ aihg5/ND+/hjkgTApmLf/k18k97m/lsF/ogftYmpT53fNLuUlCVkaQ7LILoy/avs hgxrGFk9/kHy5MmmoMT5eTuv1Xsl0XDxQqyTpIJQkjudONH6A3fSAy/49IbcgPoV c2gAr3CbVSQkQWwWCamHjHsM9iIIgphZgXxCt8uuc+2yZR+7xN0d+MTh6HC6xnlC ilzQg1uBUlXVMi4Nu7rQ5rKpAWnKRmFULTGAywstHVbVOnlGyrN8unW3Qio41gWk QOQRr5EdnxcmmTlASHd0odQcGmo5P+lwOtdpIFFDgi8uVRTGI+xF5J27X/v1AgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUZqp7LSSGXKA6eLYMKGYE02H6rXwwHwYDVR0j BBgwFoAUBp+vR/9IrvTJj1CXB0Uwp0wRGrkwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMjNkNWY2ODItYjUxYi00ODEyLWI4YjEtNDMwZTM4Njgz NzQ4LzIvMDY5RkFGNDdGRjQ4QUVGNEM5OEY1MDk3MDc0NTMwQTc0QzExMUFCOS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84NGQ1MTgxMC0xOTg3LTQ3 MDEtOGYxZi04NDI1MTExOTY0ZjQvMC8wNjlGQUY0N0ZGNDhBRUY0Qzk4RjUwOTcw NzQ1MzBBNzRDMTExQUI5LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzIzZDVmNjgyLWI1MWItNDgxMi1iOGIxLTQzMGUzODY4Mzc0OC8yLzA2OUZBRjQ3 RkY0OEFFRjRDOThGNTA5NzA3NDUzMEE3NEMxMTFBQjkubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQC4Wlm3 wjSJ7jiGWFTXqsTFVEL1P8IPKs2t10BCxeUw35/7bWDdGlWGvTq0wT1ZdZSRG/yw fycbpynIfPIksQXpucnEq4lQl7mYkA7aZnF/6/OxIbvFeBMYgr0JW1uy3mRM+t1w ygsYikvFzdyn2vA7dyDpSTL4OaZDC3krQvoy/6aUv80Ekoo1/i74Flb+Vb600tEj 9mKfByV3kNlwPs9Moz/rTaT54Dl75419G/WcYdvn/jC6JFcS9MVs4kfb388vn7uR TW5qqDDcOfwDRDGuwVKQ8Tn4UPy8U7TOsgE0L1qdF+vxLeCOUcSBnT5wKjv5ep9W YR/ehqEBXFruywbc -----END CERTIFICATE-----Generated at Sun Sep 27 00:29:55 2026 by rpki-client