$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/2/06DB699D191D4B0289910C88E99CF94A671142F5.mft File: 06DB699D191D4B0289910C88E99CF94A671142F5.mft (raw, json) Hash identifier: rWhAmFYS7ezZK+K7BmqRmfalvJJuvNjYLEdbuTvF7uo= Subject key identifier: 1B:B9:77:B3:F2:6C:25:CC:EC:8D:86:8B:2D:9D:2D:E1:8D:39:C2:04 Authority key identifier: 06:DB:69:9D:19:1D:4B:02:89:91:0C:88:E9:9C:F9:4A:67:11:42:F5 Certificate issuer: /CN=06DB699D191D4B0289910C88E99CF94A671142F5 Certificate serial: 0BEC07C8C60516BDFD866222AA1B1F425B94A563 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/06DB699D191D4B0289910C88E99CF94A671142F5.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/2/06DB699D191D4B0289910C88E99CF94A671142F5.mft Manifest number: 98 Signing time: Sun 19 Oct 2025 18:48:16 +0000 Manifest this update: Sun 19 Oct 2025 18:43:16 +0000 Manifest next update: Mon 20 Oct 2025 21:22:16 +0000 Files and hashes: 1: 326130363a396634313a363936393a3a2f34382d3438203d3e20323132323432.roa (hash: oZMKPe8zIqKXDWE+ceP6ZovC366mkj//dk5ag6RqSYo=) 2: 06DB699D191D4B0289910C88E99CF94A671142F5.crl (hash: JTKZ+kqu9jiTtBngThf1ibF22FKMoWf6X+PoR2i1ebA=) 3: 326130363a396634313a3a2f33322d3438203d3e20323135303835.roa (hash: Wzsm4f2LA5za568wbkiJepokvyBzVpcjorefCVCiEbM=) 4: 5A3F7819353CE0FD13B8FFCDCB8837ED0BF5915F.cer (hash: vr0IDnvMrQlAIKTPbmc9XgADtBREMeozkPpGVjOFGr4=) 5: 326130363a396634313a613930303a3a2f34382d3438203d3e20323037363832.roa (hash: UqjWSUv2XiZdDsdQ0uOndREGc/szQ2JnxQlbZ2ADckI=) 6: 326130363a396634313a613930313a3a2f34382d3438203d3e20323035383338.roa (hash: TZFInP0XSpkR7gzjfw2R3ov4SaV+J0Kzbqc0lAbOzbM=) 7: 38332e3134322e33312e302f32342d3234203d3e20323135303835.roa (hash: K8xHXu8PBNylpSXaMswB01W3KM9JQNKdf8F+yOiMZUQ=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/2/06DB699D191D4B0289910C88E99CF94A671142F5.crl rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/2/06DB699D191D4B0289910C88E99CF94A671142F5.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/06DB699D191D4B0289910C88E99CF94A671142F5.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 20 Oct 2025 21:22:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:ec:07:c8:c6:05:16:bd:fd:86:62:22:aa:1b:1f:42:5b:94:a5:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=06DB699D191D4B0289910C88E99CF94A671142F5 Validity Not Before: Oct 19 18:43:16 2025 GMT Not After : Oct 20 21:22:16 2025 GMT Subject: CN=1BB977B3F26C25CCEC8D868B2D9D2DE18D39C204 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:e3:6f:c7:80:f4:5c:f7:4c:26:95:5e:56:b8: 6c:74:6f:77:89:d7:23:bd:4d:b8:75:cb:6f:68:98: 40:ca:a6:6c:db:bb:f4:ac:78:a2:b7:b7:d3:f1:2b: 74:5a:50:a2:57:b5:89:47:fd:ca:81:97:3c:ed:a9: 99:dc:4a:ee:45:87:c5:91:1b:06:c6:95:39:e4:7b: 38:ac:ce:c9:4c:94:c1:cf:18:d8:b3:00:38:32:a4: 44:61:5b:47:bf:16:6b:52:15:b5:38:ea:51:4b:ff: d9:42:ea:57:26:5e:1c:2d:98:40:7e:e4:c7:15:af: 17:a0:b8:84:17:f6:79:f3:6d:df:46:13:f2:f3:c9: 7b:d7:97:3d:51:3a:64:e7:81:01:56:2b:ec:16:c9: ba:ca:9b:3a:73:03:b1:61:6b:9e:21:a1:ef:25:a4: 30:89:f4:e0:d4:54:51:c6:4e:63:2c:5b:f0:7b:04: d4:b6:1f:ae:65:30:fe:a1:9b:30:58:a7:49:d6:61: c2:f7:e7:a6:84:1d:b0:bf:69:bd:df:f9:08:c4:c4: 38:12:19:6e:4a:e0:0e:29:bb:16:7f:62:e4:1c:a5: 37:58:64:9f:e1:60:cc:62:06:ab:17:a5:1a:39:5c: 88:ed:87:63:95:41:67:7d:2b:8a:b3:51:35:2b:2a: ab:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:B9:77:B3:F2:6C:25:CC:EC:8D:86:8B:2D:9D:2D:E1:8D:39:C2:04 X509v3 Authority Key Identifier: keyid:06:DB:69:9D:19:1D:4B:02:89:91:0C:88:E9:9C:F9:4A:67:11:42:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/2/06DB699D191D4B0289910C88E99CF94A671142F5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/06DB699D191D4B0289910C88E99CF94A671142F5.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/2/06DB699D191D4B0289910C88E99CF94A671142F5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:6c:59:d4:2d:f1:84:31:f0:c5:3b:17:96:13:87:20:e2:69: 74:61:1d:c9:1f:89:78:9d:2c:98:d6:7a:2b:1c:3c:e5:34:9f: 9c:0e:a6:38:1c:5d:0d:3f:ba:d1:0d:a9:1c:62:19:1e:6c:a6: f1:9d:17:7e:2d:1c:c2:f3:dc:93:f5:6e:09:2b:67:82:29:87: 54:c5:4b:24:8d:77:bc:4b:d0:2e:d1:59:31:c6:84:74:9f:3c: 44:64:d5:79:f5:f1:3d:61:1a:6b:43:a0:93:d2:89:48:f1:09: a1:89:9e:8c:51:24:e6:f2:76:23:2b:2f:b1:ea:91:98:f6:6c: 63:ac:f9:d2:b2:21:71:26:48:90:c5:ce:b5:f5:cc:35:70:fc: 74:13:92:dc:7a:68:e2:4e:78:ce:46:5e:ac:0d:1e:88:a8:85: 7f:40:ca:34:be:34:42:f2:5d:cb:51:8d:ee:3f:2b:b0:cd:2d: ee:e9:06:3a:dc:90:36:d0:53:8d:8c:a5:f1:8b:5b:83:09:8c: db:67:af:f1:33:83:05:49:5c:b8:95:d1:5e:1b:e9:d2:a6:80: e3:de:82:0f:e9:7d:92:69:c6:ca:12:6a:b5:41:61:88:76:42: 43:24:2e:0d:e2:5d:15:88:f9:e6:69:8e:53:06:ab:1e:93:73: f2:82:15:e7 -----BEGIN CERTIFICATE----- MIIFbTCCBFWgAwIBAgIUC+wHyMYFFr39hmIiqhsfQluUpWMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDZEQjY5OUQxOTFENEIwMjg5OTEwQzg4RTk5Q0Y5NEE2 NzExNDJGNTAeFw0yNTEwMTkxODQzMTZaFw0yNTEwMjAyMTIyMTZaMDMxMTAvBgNV BAMTKDFCQjk3N0IzRjI2QzI1Q0NFQzhEODY4QjJEOUQyREUxOEQzOUMyMDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCm42/HgPRc90wmlV5WuGx0b3eJ 1yO9Tbh1y29omEDKpmzbu/SseKK3t9PxK3RaUKJXtYlH/cqBlzztqZncSu5Fh8WR GwbGlTnkeziszslMlMHPGNizADgypERhW0e/FmtSFbU46lFL/9lC6lcmXhwtmEB+ 5McVrxeguIQX9nnzbd9GE/LzyXvXlz1ROmTngQFWK+wWybrKmzpzA7Fha54hoe8l pDCJ9ODUVFHGTmMsW/B7BNS2H65lMP6hmzBYp0nWYcL356aEHbC/ab3f+QjExDgS GW5K4A4puxZ/YuQcpTdYZJ/hYMxiBqsXpRo5XIjth2OVQWd9K4qzUTUrKqvXAgMB AAGjggJ3MIICczAdBgNVHQ4EFgQUG7l3s/JsJczsjYaLLZ0t4Y05wgQwHwYDVR0j BBgwFoAUBttpnRkdSwKJkQyI6Zz5SmcRQvUwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMzAxMTk0NGQtN2ViMy00ZjYzLWExNTktY2ZmMDJjMDI2 YWJmLzIvMDZEQjY5OUQxOTFENEIwMjg5OTEwQzg4RTk5Q0Y5NEE2NzExNDJGNS5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1 YzkxYmUzZjlkLzcvMDZEQjY5OUQxOTFENEIwMjg5OTEwQzg4RTk5Q0Y5NEE2NzEx NDJGNS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8zMDExOTQ0ZC03 ZWIzLTRmNjMtYTE1OS1jZmYwMmMwMjZhYmYvMi8wNkRCNjk5RDE5MUQ0QjAyODk5 MTBDODhFOTlDRjk0QTY3MTE0MkY1Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKmxZ1C3xhDHwxTsXlhOH IOJpdGEdyR+JeJ0smNZ6Kxw85TSfnA6mOBxdDT+60Q2pHGIZHmym8Z0Xfi0cwvPc k/VuCStngimHVMVLJI13vEvQLtFZMcaEdJ88RGTVefXxPWEaa0Ogk9KJSPEJoYme jFEk5vJ2IysvseqRmPZsY6z50rIhcSZIkMXOtfXMNXD8dBOS3Hpo4k54zkZerA0e iKiFf0DKNL40QvJdy1GN7j8rsM0t7ukGOtyQNtBTjYyl8YtbgwmM22ev8TODBUlc uJXRXhvp0qaA496CD+l9kmnGyhJqtUFhiHZCQyQuDeJdFYj55mmOUwarHpNz8oIV 5w== -----END CERTIFICATE-----Generated at Mon Oct 20 09:24:38 2025 by rpki-client