$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/2/06DB699D191D4B0289910C88E99CF94A671142F5.mft File: 06DB699D191D4B0289910C88E99CF94A671142F5.mft (raw, json) Hash identifier: 1WVhU7mHcGtCjA9YOlH7PyvRr9kY/kiVoy+iKLqdq54= Subject key identifier: A1:46:EB:CC:E5:B3:79:31:A5:76:71:60:41:67:5D:00:6E:C6:DE:D7 Authority key identifier: 06:DB:69:9D:19:1D:4B:02:89:91:0C:88:E9:9C:F9:4A:67:11:42:F5 Certificate issuer: /CN=06DB699D191D4B0289910C88E99CF94A671142F5 Certificate serial: 2E9A514F4BD2493C8DE52723CF2DB02135775E3E Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/06DB699D191D4B0289910C88E99CF94A671142F5.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/2/06DB699D191D4B0289910C88E99CF94A671142F5.mft Manifest number: 4A Signing time: Sat 23 Aug 2025 20:16:57 +0000 Manifest this update: Sat 23 Aug 2025 20:11:57 +0000 Manifest next update: Sun 24 Aug 2025 21:49:57 +0000 Files and hashes: 1: 38332e3134322e33312e302f32342d3234203d3e20323135303835.roa (hash: K8xHXu8PBNylpSXaMswB01W3KM9JQNKdf8F+yOiMZUQ=) 2: 326130363a396634313a613930303a3a2f34382d3438203d3e20323037363832.roa (hash: UqjWSUv2XiZdDsdQ0uOndREGc/szQ2JnxQlbZ2ADckI=) 3: 06DB699D191D4B0289910C88E99CF94A671142F5.crl (hash: rNaCMOLBCc4MXcBNRMJ2IdJ9rKxJopKgE7hmSHvV1y4=) 4: 326130363a396634313a3a2f33322d3438203d3e20323135303835.roa (hash: Wzsm4f2LA5za568wbkiJepokvyBzVpcjorefCVCiEbM=) 5: 326130363a396634313a613930313a3a2f34382d3438203d3e20323035383338.roa (hash: TZFInP0XSpkR7gzjfw2R3ov4SaV+J0Kzbqc0lAbOzbM=) 6: 5A3F7819353CE0FD13B8FFCDCB8837ED0BF5915F.cer (hash: vr0IDnvMrQlAIKTPbmc9XgADtBREMeozkPpGVjOFGr4=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/2/06DB699D191D4B0289910C88E99CF94A671142F5.crl rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/2/06DB699D191D4B0289910C88E99CF94A671142F5.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/06DB699D191D4B0289910C88E99CF94A671142F5.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 24 Aug 2025 13:34:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:9a:51:4f:4b:d2:49:3c:8d:e5:27:23:cf:2d:b0:21:35:77:5e:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=06DB699D191D4B0289910C88E99CF94A671142F5 Validity Not Before: Aug 23 20:11:57 2025 GMT Not After : Aug 24 21:49:57 2025 GMT Subject: CN=A146EBCCE5B37931A576716041675D006EC6DED7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:a1:86:51:87:c2:43:0a:af:8c:74:66:34:19: 54:ad:ad:7c:ee:84:81:97:ec:53:52:83:57:29:65: 9b:5e:c6:e6:b4:78:b1:6e:e1:7f:8a:d1:48:85:9a: 84:56:c8:4b:13:15:bb:32:3c:9d:64:7c:0d:8e:fa: 83:e5:ec:03:d9:a1:15:ee:16:4f:f8:82:3d:c5:92: d2:c1:41:28:3e:5f:3a:84:a0:b9:0f:a0:be:31:10: ac:b6:6e:a3:b4:54:3b:d4:a7:56:7a:d8:52:2b:0d: 0e:14:ab:2c:cc:e3:64:6c:0e:ba:fc:c4:76:4a:3e: ad:5c:f7:c9:4f:9a:59:a0:f8:66:df:51:9d:69:d0: dd:ac:66:31:7d:5c:85:e5:58:9a:52:d1:2e:cc:f8: f2:40:43:64:b9:69:e2:0f:c7:be:84:17:e2:76:70: 59:3c:69:59:d3:ca:60:7f:20:8a:e7:3c:c2:09:f0: 12:93:65:a5:46:03:c1:3b:e2:5a:92:42:af:b9:82: 2c:56:b0:5c:4a:17:97:aa:c6:c2:10:fa:01:ea:e1: 2d:26:04:80:71:7c:b4:77:14:c5:e1:0c:c4:7a:aa: 21:26:11:6d:1d:d8:48:a9:91:d7:df:83:db:a6:a6: 32:d1:bd:cf:73:da:ab:9d:ce:98:93:ce:5b:dc:f1: 71:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:46:EB:CC:E5:B3:79:31:A5:76:71:60:41:67:5D:00:6E:C6:DE:D7 X509v3 Authority Key Identifier: keyid:06:DB:69:9D:19:1D:4B:02:89:91:0C:88:E9:9C:F9:4A:67:11:42:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/2/06DB699D191D4B0289910C88E99CF94A671142F5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/06DB699D191D4B0289910C88E99CF94A671142F5.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/2/06DB699D191D4B0289910C88E99CF94A671142F5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 62:4a:f1:1a:97:9f:74:55:09:7a:11:9a:a5:6b:ed:c4:80:f6: a5:02:3b:2b:45:88:2b:02:9f:2e:45:c6:12:8c:29:08:c9:21: 2c:5e:9b:c5:3a:65:3b:91:d4:6b:85:ab:e4:c7:d0:c4:3c:1f: 52:24:99:3f:48:4a:58:de:7a:78:57:78:29:c4:e5:ef:ba:89: 96:9d:54:95:e2:43:a4:14:6e:d8:e3:05:be:ce:23:e3:d4:ac: 07:cb:24:f9:32:1f:1f:c8:f8:ce:63:21:d6:8d:5a:ad:a0:d7: 0d:c0:4a:b5:71:3d:ad:8f:43:67:7c:cc:0d:d1:8c:f7:5e:53: 37:18:f5:b3:b8:c2:0c:8b:d3:ac:56:a9:09:a9:7d:71:91:d6: 3c:de:4b:99:22:5a:fb:6d:c1:32:e1:dd:c0:8e:2c:d4:97:e0: 0c:a2:44:71:5e:4a:52:44:94:e0:1d:6b:f0:b4:ff:6b:76:fd: 4c:c0:ca:02:c5:a4:1e:1e:76:eb:69:0f:6a:e1:c6:52:07:0c: 6a:f6:b7:b8:a2:ff:27:2e:11:ff:c8:b5:ec:4e:78:1d:3f:2b: 17:80:d5:3d:4e:62:bf:74:d0:8d:55:70:c2:d5:41:83:45:3e: 91:37:c1:63:47:a0:18:72:7b:91:09:3f:07:69:4f:4c:c2:51: 7f:6d:b1:ea -----BEGIN CERTIFICATE----- MIIFbTCCBFWgAwIBAgIULppRT0vSSTyN5Scjzy2wITV3Xj4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDZEQjY5OUQxOTFENEIwMjg5OTEwQzg4RTk5Q0Y5NEE2 NzExNDJGNTAeFw0yNTA4MjMyMDExNTdaFw0yNTA4MjQyMTQ5NTdaMDMxMTAvBgNV BAMTKEExNDZFQkNDRTVCMzc5MzFBNTc2NzE2MDQxNjc1RDAwNkVDNkRFRDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyoYZRh8JDCq+MdGY0GVStrXzu hIGX7FNSg1cpZZtexua0eLFu4X+K0UiFmoRWyEsTFbsyPJ1kfA2O+oPl7APZoRXu Fk/4gj3FktLBQSg+XzqEoLkPoL4xEKy2bqO0VDvUp1Z62FIrDQ4UqyzM42RsDrr8 xHZKPq1c98lPmlmg+GbfUZ1p0N2sZjF9XIXlWJpS0S7M+PJAQ2S5aeIPx76EF+J2 cFk8aVnTymB/IIrnPMIJ8BKTZaVGA8E74lqSQq+5gixWsFxKF5eqxsIQ+gHq4S0m BIBxfLR3FMXhDMR6qiEmEW0d2Eipkdffg9umpjLRvc9z2qudzpiTzlvc8XExAgMB AAGjggJ3MIICczAdBgNVHQ4EFgQUoUbrzOWzeTGldnFgQWddAG7G3tcwHwYDVR0j BBgwFoAUBttpnRkdSwKJkQyI6Zz5SmcRQvUwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMzAxMTk0NGQtN2ViMy00ZjYzLWExNTktY2ZmMDJjMDI2 YWJmLzIvMDZEQjY5OUQxOTFENEIwMjg5OTEwQzg4RTk5Q0Y5NEE2NzExNDJGNS5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1 YzkxYmUzZjlkLzcvMDZEQjY5OUQxOTFENEIwMjg5OTEwQzg4RTk5Q0Y5NEE2NzEx NDJGNS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8zMDExOTQ0ZC03 ZWIzLTRmNjMtYTE1OS1jZmYwMmMwMjZhYmYvMi8wNkRCNjk5RDE5MUQ0QjAyODk5 MTBDODhFOTlDRjk0QTY3MTE0MkY1Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYkrxGpefdFUJehGapWvt xID2pQI7K0WIKwKfLkXGEowpCMkhLF6bxTplO5HUa4Wr5MfQxDwfUiSZP0hKWN56 eFd4KcTl77qJlp1UleJDpBRu2OMFvs4j49SsB8sk+TIfH8j4zmMh1o1araDXDcBK tXE9rY9DZ3zMDdGM915TNxj1s7jCDIvTrFapCal9cZHWPN5LmSJa+23BMuHdwI4s 1JfgDKJEcV5KUkSU4B1r8LT/a3b9TMDKAsWkHh5262kPauHGUgcMava3uKL/Jy4R /8i17E54HT8rF4DVPU5iv3TQjVVwwtVBg0U+kTfBY0egGHJ7kQk/B2lPTMJRf22x 6g== -----END CERTIFICATE-----Generated at Sat Aug 23 23:46:13 2025 by rpki-client