$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/2/069FAF47FF48AEF4C98F5097074530A74C111AB9.mft File: 069FAF47FF48AEF4C98F5097074530A74C111AB9.mft (raw, json) Hash identifier: e6Zhuc04mat1yZLj1gf2cFn84aSwWlcA9r/xBJzjDgY= Subject key identifier: 7B:F4:3A:3C:4C:2D:39:06:54:03:6A:DC:DC:B0:5C:CD:3B:C0:C4:59 Authority key identifier: 06:9F:AF:47:FF:48:AE:F4:C9:8F:50:97:07:45:30:A7:4C:11:1A:B9 Certificate issuer: /CN=069FAF47FF48AEF4C98F5097074530A74C111AB9 Certificate serial: 626D8D99EBF2164F0C51A8CB3A722A84405E9435 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/069FAF47FF48AEF4C98F5097074530A74C111AB9.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/2/069FAF47FF48AEF4C98F5097074530A74C111AB9.mft Manifest number: 034E Signing time: Mon 21 Jul 2025 03:32:26 +0000 Manifest this update: Mon 21 Jul 2025 03:27:26 +0000 Manifest next update: Tue 22 Jul 2025 05:49:26 +0000 Files and hashes: 1: 326130663a383563313a3335373a3a2f34382d3438203d3e20323135363137.roa (hash: 0B/fHqDaAtnHXiIonhpxQ7ujnJI7VSnPxGbabzcBFIA=) 2: 326130663a383563313a3336333a3a2f34382d3438203d3e20323135363137.roa (hash: G15mowLoM7Eub0vLuxgC+jxtFArNOkVyDHG13blFH8s=) 3: 326130663a383563313a3335313a3a2f34382d3438203d3e20343031333836.roa (hash: 7mR3vQrcbHUSwKtu57zMbBmzQiQeIJwUP4b5xp+7MO0=) 4: 069FAF47FF48AEF4C98F5097074530A74C111AB9.crl (hash: azviLQvWdowLnmvPt9Qy3sh1+tHS+0Q9qUVIcok0HgQ=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/2/069FAF47FF48AEF4C98F5097074530A74C111AB9.crl rsync://rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/2/069FAF47FF48AEF4C98F5097074530A74C111AB9.mft rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/069FAF47FF48AEF4C98F5097074530A74C111AB9.cer rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 22 Jul 2025 05:49:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:6d:8d:99:eb:f2:16:4f:0c:51:a8:cb:3a:72:2a:84:40:5e:94:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=069FAF47FF48AEF4C98F5097074530A74C111AB9 Validity Not Before: Jul 21 03:27:26 2025 GMT Not After : Jul 22 05:49:26 2025 GMT Subject: CN=7BF43A3C4C2D390654036ADCDCB05CCD3BC0C459 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:ed:91:1f:98:15:0f:1b:51:76:50:f1:81:62: a1:ab:28:50:48:f6:c1:9e:cf:dd:b3:a1:f9:56:6c: b0:fd:6c:d6:12:cd:5c:42:39:0b:0d:da:b2:42:42: 41:8b:69:b7:57:26:88:a9:fd:4b:94:8a:03:3a:ea: 8b:4c:1e:09:3a:70:6e:94:70:37:2c:1e:f2:3d:91: da:b3:8b:4d:92:41:c8:ca:f9:5c:43:b7:d7:da:f8: 68:83:8c:9b:05:f2:6c:d2:22:06:76:ec:dd:29:fa: 23:d6:0a:01:25:ba:80:68:9f:91:6f:d1:03:7b:fe: 2e:3a:9f:41:a6:f7:1b:08:03:6f:d7:b6:44:8e:7d: 44:d5:1f:f8:cd:f1:e9:89:4e:99:61:3e:41:3e:69: 69:ae:e6:26:91:8f:2d:b5:d6:9b:5d:a8:b5:a5:ba: 37:ed:fe:f7:ca:55:7d:eb:9a:4a:8d:db:2c:8b:cb: 47:44:4c:e5:29:99:45:22:e9:62:c5:7a:aa:f6:96: 6b:54:c5:a1:51:d7:9c:10:0d:65:d1:69:b0:1d:b0: 94:1d:97:2b:f3:67:d5:a8:45:80:04:ee:d1:68:67: c5:54:13:9c:0c:55:e7:84:27:e2:86:62:d4:bb:90: 4d:c3:2e:eb:56:d8:37:d9:e1:4b:46:3f:ba:51:d0: f9:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:F4:3A:3C:4C:2D:39:06:54:03:6A:DC:DC:B0:5C:CD:3B:C0:C4:59 X509v3 Authority Key Identifier: keyid:06:9F:AF:47:FF:48:AE:F4:C9:8F:50:97:07:45:30:A7:4C:11:1A:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/2/069FAF47FF48AEF4C98F5097074530A74C111AB9.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/069FAF47FF48AEF4C98F5097074530A74C111AB9.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/2/069FAF47FF48AEF4C98F5097074530A74C111AB9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:f8:8b:3e:f0:6a:6c:e8:e1:97:b4:50:ab:89:75:6b:45:ba: 3c:d9:a5:3e:f2:84:35:48:ac:cf:ae:6f:ca:77:93:13:63:60: 61:4b:96:50:2f:8d:a2:33:fe:8f:60:51:27:c6:ac:9c:4e:74: ca:8e:4a:6a:63:27:b3:99:c5:27:b0:d9:ec:e2:56:b8:b8:24: 16:c0:bc:20:25:21:f6:ce:29:10:56:37:7f:e2:5b:cd:41:45: 26:7d:43:b2:30:0e:23:19:03:13:2a:ae:10:36:a8:21:a1:28: bf:32:24:8d:d9:d7:0d:f8:a2:a0:73:29:01:bb:b1:b7:12:fd: f1:0e:77:15:89:11:c0:89:8a:ea:a0:c7:e4:71:4b:c5:a1:52: 20:c6:2f:c1:48:bf:2b:69:99:6a:b4:ef:8d:29:85:a3:95:bc: 1f:c1:c1:9f:fc:a3:95:05:20:e8:1f:b8:9b:e6:1f:31:06:81: cf:b1:e3:c3:53:f6:35:8f:c5:45:f7:a6:01:9c:b4:9b:e1:f3: 94:50:7f:c1:84:0f:de:b6:79:94:8f:ce:52:bc:a8:19:11:43: ee:ae:80:d3:14:fa:93:31:f9:ce:d2:a5:4d:29:c8:93:5d:2a: ee:25:1e:4a:27:e2:69:76:5b:2d:6d:e2:0d:64:2f:eb:30:d8: 8f:06:6f:98 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUYm2NmevyFk8MUajLOnIqhEBelDUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDY5RkFGNDdGRjQ4QUVGNEM5OEY1MDk3MDc0NTMwQTc0 QzExMUFCOTAeFw0yNTA3MjEwMzI3MjZaFw0yNTA3MjIwNTQ5MjZaMDMxMTAvBgNV BAMTKDdCRjQzQTNDNEMyRDM5MDY1NDAzNkFEQ0RDQjA1Q0NEM0JDMEM0NTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDs7ZEfmBUPG1F2UPGBYqGrKFBI 9sGez92zoflWbLD9bNYSzVxCOQsN2rJCQkGLabdXJoip/UuUigM66otMHgk6cG6U cDcsHvI9kdqzi02SQcjK+VxDt9fa+GiDjJsF8mzSIgZ27N0p+iPWCgEluoBon5Fv 0QN7/i46n0Gm9xsIA2/XtkSOfUTVH/jN8emJTplhPkE+aWmu5iaRjy211ptdqLWl ujft/vfKVX3rmkqN2yyLy0dETOUpmUUi6WLFeqr2lmtUxaFR15wQDWXRabAdsJQd lyvzZ9WoRYAE7tFoZ8VUE5wMVeeEJ+KGYtS7kE3DLutW2DfZ4UtGP7pR0PlbAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUe/Q6PEwtOQZUA2rc3LBczTvAxFkwHwYDVR0j BBgwFoAUBp+vR/9IrvTJj1CXB0Uwp0wRGrkwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMjNkNWY2ODItYjUxYi00ODEyLWI4YjEtNDMwZTM4Njgz NzQ4LzIvMDY5RkFGNDdGRjQ4QUVGNEM5OEY1MDk3MDc0NTMwQTc0QzExMUFCOS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84NGQ1MTgxMC0xOTg3LTQ3 MDEtOGYxZi04NDI1MTExOTY0ZjQvMC8wNjlGQUY0N0ZGNDhBRUY0Qzk4RjUwOTcw NzQ1MzBBNzRDMTExQUI5LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzIzZDVmNjgyLWI1MWItNDgxMi1iOGIxLTQzMGUzODY4Mzc0OC8yLzA2OUZBRjQ3 RkY0OEFFRjRDOThGNTA5NzA3NDUzMEE3NEMxMTFBQjkubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCJ+Is+ 8Gps6OGXtFCriXVrRbo82aU+8oQ1SKzPrm/Kd5MTY2BhS5ZQL42iM/6PYFEnxqyc TnTKjkpqYyezmcUnsNns4la4uCQWwLwgJSH2zikQVjd/4lvNQUUmfUOyMA4jGQMT Kq4QNqghoSi/MiSN2dcN+KKgcykBu7G3Ev3xDncViRHAiYrqoMfkcUvFoVIgxi/B SL8raZlqtO+NKYWjlbwfwcGf/KOVBSDoH7ib5h8xBoHPsePDU/Y1j8VF96YBnLSb 4fOUUH/BhA/etnmUj85SvKgZEUPuroDTFPqTMfnO0qVNKciTXSruJR5KJ+Jpdlst beINZC/rMNiPBm+Y -----END CERTIFICATE-----Generated at Mon Jul 21 18:04:56 2025 by rpki-client