$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/2/069FAF47FF48AEF4C98F5097074530A74C111AB9.mft File: 069FAF47FF48AEF4C98F5097074530A74C111AB9.mft (raw, json) Hash identifier: 01tBqqUcdlGczQmw8UfvvU8CGj0oMCjjXv1+dQ5Nx08= Subject key identifier: C5:6F:A8:94:B4:B3:E3:4D:8C:D2:17:F2:40:D3:45:9A:62:CA:AB:7B Authority key identifier: 06:9F:AF:47:FF:48:AE:F4:C9:8F:50:97:07:45:30:A7:4C:11:1A:B9 Certificate issuer: /CN=069FAF47FF48AEF4C98F5097074530A74C111AB9 Certificate serial: 56FA011AE6E3E218073861F65E807F9A44E02D48 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/069FAF47FF48AEF4C98F5097074530A74C111AB9.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/2/069FAF47FF48AEF4C98F5097074530A74C111AB9.mft Manifest number: 05AA Signing time: Fri 04 Sep 2026 05:12:25 +0000 Manifest this update: Fri 04 Sep 2026 05:07:25 +0000 Manifest next update: Sat 05 Sep 2026 07:36:25 +0000 Files and hashes: 1: 069FAF47FF48AEF4C98F5097074530A74C111AB9.crl (hash: pyFr2FG4p/Fu8q/xKO0PzlWwPMpW+AyvfFQAJN2GnqE=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/2/069FAF47FF48AEF4C98F5097074530A74C111AB9.crl rsync://rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/2/069FAF47FF48AEF4C98F5097074530A74C111AB9.mft rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/069FAF47FF48AEF4C98F5097074530A74C111AB9.cer rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 05 Sep 2026 07:36:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:fa:01:1a:e6:e3:e2:18:07:38:61:f6:5e:80:7f:9a:44:e0:2d:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=069FAF47FF48AEF4C98F5097074530A74C111AB9 Validity Not Before: Sep 4 05:07:25 2026 GMT Not After : Sep 5 07:36:25 2026 GMT Subject: CN=C56FA894B4B3E34D8CD217F240D3459A62CAAB7B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:75:46:92:fc:f9:39:26:56:4a:5a:ae:46:0f: 13:12:06:4a:0d:d9:40:60:03:25:0a:ad:b5:b0:17: 75:22:a3:18:bc:2a:c6:13:2a:5f:1c:9f:16:eb:8f: 7e:f3:71:42:6a:f9:42:f3:cb:48:1b:90:47:3c:23: 98:7a:8e:8f:25:0a:30:c7:be:a7:07:43:4a:67:2f: 92:b4:88:74:ab:f9:5a:ff:31:6d:fd:ca:fb:41:98: 7a:fe:39:4d:30:f9:55:2f:31:a8:23:57:60:ba:81: 9b:ea:5b:5e:81:8c:73:b6:3e:f3:77:f6:9d:ca:cc: 6d:65:77:02:f6:21:67:3e:4b:83:d2:f0:a0:cb:18: 6e:52:6c:33:21:1a:c8:95:af:b5:95:c7:c0:a1:1a: 7b:4d:95:43:f7:ac:02:dc:2d:12:2f:db:67:16:bf: c7:91:92:25:c3:46:67:a0:50:ce:47:98:fc:ad:0d: 56:6f:39:7c:34:5b:f0:a9:d6:6d:bc:93:12:08:f8: 4a:b4:84:cd:d2:0c:53:4c:3e:61:52:00:13:62:06: 1f:9e:7d:49:95:c8:57:a8:db:6d:80:85:a0:95:a1: ca:a8:15:df:e5:41:0b:9a:93:b0:49:83:1a:58:83: df:fe:33:a4:5e:d6:29:93:69:c8:b4:9a:c4:4c:6d: 9f:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:6F:A8:94:B4:B3:E3:4D:8C:D2:17:F2:40:D3:45:9A:62:CA:AB:7B X509v3 Authority Key Identifier: keyid:06:9F:AF:47:FF:48:AE:F4:C9:8F:50:97:07:45:30:A7:4C:11:1A:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/2/069FAF47FF48AEF4C98F5097074530A74C111AB9.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/069FAF47FF48AEF4C98F5097074530A74C111AB9.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/2/069FAF47FF48AEF4C98F5097074530A74C111AB9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:2e:74:e4:6f:fc:6d:b8:fc:73:b3:d3:23:3a:f2:b2:7f:f7: fe:96:a9:c0:16:b7:3d:6e:a4:15:7d:86:07:de:4f:2d:55:76: 37:66:76:4f:3c:41:16:c5:eb:bd:b1:c6:07:19:b2:8f:82:ae: 99:4b:f6:be:e5:d7:e6:e1:10:1f:a2:59:42:41:8e:83:39:b0: fe:07:cd:ae:36:0f:35:54:78:03:2b:29:b6:42:1a:88:15:ad: dd:3e:65:88:7e:bc:42:c5:4b:8d:00:c2:13:45:dc:d2:e7:21: 56:37:0f:c7:b3:24:20:81:e0:75:84:f2:4d:44:0d:48:f0:08: 80:1f:df:58:72:f9:a1:c5:13:9d:27:d0:41:42:48:f7:57:d6: 3f:9b:11:a5:5c:9f:d9:0e:d8:f6:c4:e9:29:95:38:eb:c2:b0: a5:09:95:40:3c:60:5e:54:67:d3:4e:03:e9:43:cf:fd:49:52: 7c:d3:aa:3a:f2:52:09:ac:ed:70:4e:a9:e5:f5:e3:20:0d:40: 78:ce:7a:b3:8a:89:e3:d4:ec:8c:86:33:76:d5:dc:67:4d:e7: 75:fa:62:40:9c:8a:03:6a:25:ae:68:8a:ba:35:a2:04:26:26: 2a:9b:01:d3:9b:a6:ee:47:a4:4c:64:80:c2:07:1b:61:bc:00: 31:51:88:99 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUVvoBGubj4hgHOGH2XoB/mkTgLUgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDY5RkFGNDdGRjQ4QUVGNEM5OEY1MDk3MDc0NTMwQTc0 QzExMUFCOTAeFw0yNjA5MDQwNTA3MjVaFw0yNjA5MDUwNzM2MjVaMDMxMTAvBgNV BAMTKEM1NkZBODk0QjRCM0UzNEQ4Q0QyMTdGMjQwRDM0NTlBNjJDQUFCN0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD2dUaS/Pk5JlZKWq5GDxMSBkoN 2UBgAyUKrbWwF3Uioxi8KsYTKl8cnxbrj37zcUJq+ULzy0gbkEc8I5h6jo8lCjDH vqcHQ0pnL5K0iHSr+Vr/MW39yvtBmHr+OU0w+VUvMagjV2C6gZvqW16BjHO2PvN3 9p3KzG1ldwL2IWc+S4PS8KDLGG5SbDMhGsiVr7WVx8ChGntNlUP3rALcLRIv22cW v8eRkiXDRmegUM5HmPytDVZvOXw0W/Cp1m28kxII+Eq0hM3SDFNMPmFSABNiBh+e fUmVyFeo222AhaCVocqoFd/lQQuak7BJgxpYg9/+M6Re1imTaci0msRMbZ/9AgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUxW+olLSz402M0hfyQNNFmmLKq3swHwYDVR0j BBgwFoAUBp+vR/9IrvTJj1CXB0Uwp0wRGrkwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMjNkNWY2ODItYjUxYi00ODEyLWI4YjEtNDMwZTM4Njgz NzQ4LzIvMDY5RkFGNDdGRjQ4QUVGNEM5OEY1MDk3MDc0NTMwQTc0QzExMUFCOS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84NGQ1MTgxMC0xOTg3LTQ3 MDEtOGYxZi04NDI1MTExOTY0ZjQvMC8wNjlGQUY0N0ZGNDhBRUY0Qzk4RjUwOTcw NzQ1MzBBNzRDMTExQUI5LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzIzZDVmNjgyLWI1MWItNDgxMi1iOGIxLTQzMGUzODY4Mzc0OC8yLzA2OUZBRjQ3 RkY0OEFFRjRDOThGNTA5NzA3NDUzMEE3NEMxMTFBQjkubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAPLnTk b/xtuPxzs9MjOvKyf/f+lqnAFrc9bqQVfYYH3k8tVXY3ZnZPPEEWxeu9scYHGbKP gq6ZS/a+5dfm4RAfollCQY6DObD+B82uNg81VHgDKym2QhqIFa3dPmWIfrxCxUuN AMITRdzS5yFWNw/HsyQggeB1hPJNRA1I8AiAH99YcvmhxROdJ9BBQkj3V9Y/mxGl XJ/ZDtj2xOkplTjrwrClCZVAPGBeVGfTTgPpQ8/9SVJ806o68lIJrO1wTqnl9eMg DUB4znqzionj1OyMhjN21dxnTed1+mJAnIoDaiWuaIq6NaIEJiYqmwHTm6buR6RM ZIDCBxthvAAxUYiZ -----END CERTIFICATE-----Generated at Fri Sep 4 23:46:52 2026 by rpki-client