$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/2/069FAF47FF48AEF4C98F5097074530A74C111AB9.mft File: 069FAF47FF48AEF4C98F5097074530A74C111AB9.mft (raw, json) Hash identifier: 9fafbxiqKB5YGNjrIdY7DQWYpLRJ7cI530TvMkoPfAY= Subject key identifier: 96:5F:98:D4:82:25:9A:3C:02:27:B3:63:85:C8:F7:35:5E:CB:98:85 Authority key identifier: 06:9F:AF:47:FF:48:AE:F4:C9:8F:50:97:07:45:30:A7:4C:11:1A:B9 Certificate issuer: /CN=069FAF47FF48AEF4C98F5097074530A74C111AB9 Certificate serial: 785E6329E2B40538CC8E9129DFD2EB0873427984 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/069FAF47FF48AEF4C98F5097074530A74C111AB9.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/2/069FAF47FF48AEF4C98F5097074530A74C111AB9.mft Manifest number: 05EC Signing time: Fri 23 Oct 2026 23:40:27 +0000 Manifest this update: Fri 23 Oct 2026 23:35:27 +0000 Manifest next update: Sun 25 Oct 2026 00:27:27 +0000 Files and hashes: 1: 069FAF47FF48AEF4C98F5097074530A74C111AB9.crl (hash: 2UzYbM4mjQtkUm84NfKj5C+8qCIdAycNP5Ka3ZSEb4M=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/2/069FAF47FF48AEF4C98F5097074530A74C111AB9.crl rsync://rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/2/069FAF47FF48AEF4C98F5097074530A74C111AB9.mft rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/069FAF47FF48AEF4C98F5097074530A74C111AB9.cer rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Oct 2026 00:27:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:5e:63:29:e2:b4:05:38:cc:8e:91:29:df:d2:eb:08:73:42:79:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=069FAF47FF48AEF4C98F5097074530A74C111AB9 Validity Not Before: Oct 23 23:35:27 2026 GMT Not After : Oct 25 00:27:27 2026 GMT Subject: CN=965F98D482259A3C0227B36385C8F7355ECB9885 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:40:3c:5f:72:4c:a1:69:fb:d2:dd:86:f3:b1: 99:e1:7f:7b:29:7d:b4:f6:9f:e8:0d:7a:00:69:3e: a0:c1:01:a3:13:43:d3:f4:09:2c:18:f8:06:a4:f1: 0e:66:b9:fa:7c:97:35:db:af:61:6b:2e:18:41:15: 31:57:d5:7b:a1:8d:c8:53:90:19:12:58:60:f9:d1: 0f:e5:69:04:bf:39:38:54:46:b7:d4:5b:f1:a3:d3: ee:95:6d:8a:6b:9f:2a:25:99:6b:d7:97:ad:6e:d9: fd:dc:6c:93:be:83:5c:34:b5:7e:33:19:cf:15:a2: 18:7d:20:8b:b0:d9:d7:cc:ac:b3:c0:10:b9:f5:ae: a9:ab:80:73:b6:e4:2e:38:09:2b:79:f4:4c:4b:74: 58:07:46:df:10:a9:02:a1:ae:34:b3:4e:f1:d3:30: 92:9c:8d:06:ba:ab:09:8a:43:f0:04:e4:47:29:f0: 7a:a6:cb:79:ce:cd:48:c6:8f:57:31:71:a9:0c:79: 6b:07:7c:7d:20:2c:e0:1c:0a:89:8c:c7:3e:42:4a: ed:72:24:c6:02:d4:2b:92:c3:da:84:6d:11:6d:7d: c1:15:f7:a4:ce:60:61:20:78:7b:37:1f:5a:e1:46: dc:c4:46:3a:22:54:4d:0e:24:1c:41:33:34:2c:c1: 01:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:5F:98:D4:82:25:9A:3C:02:27:B3:63:85:C8:F7:35:5E:CB:98:85 X509v3 Authority Key Identifier: keyid:06:9F:AF:47:FF:48:AE:F4:C9:8F:50:97:07:45:30:A7:4C:11:1A:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/2/069FAF47FF48AEF4C98F5097074530A74C111AB9.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/069FAF47FF48AEF4C98F5097074530A74C111AB9.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/2/069FAF47FF48AEF4C98F5097074530A74C111AB9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:8c:4c:0e:f2:e6:c1:b0:30:b2:15:62:6f:f0:21:3e:02:19: a2:4a:bc:a1:a0:e5:28:3c:4d:39:76:90:f9:a8:0a:c0:1b:65: a9:d2:17:b1:b5:61:b0:7f:79:25:15:5f:96:35:05:e1:c8:0c: bb:d2:c0:bc:35:44:4b:2c:bb:c9:39:cb:cf:0a:c9:a9:b3:53: 90:82:55:16:ff:d8:77:be:06:4b:32:ca:ed:e1:26:04:d9:1b: c4:4c:b3:14:f5:6c:ba:a9:92:b6:48:a5:a5:98:4f:40:a4:ac: 78:6c:03:9e:89:a3:9d:2f:1a:eb:86:b3:6d:70:b6:d7:18:f1: 3a:7f:ba:47:af:2c:78:7e:4d:67:03:c2:ae:28:ea:bf:9f:45: 87:c6:23:62:5b:3b:f1:04:90:18:c9:b2:d8:81:1c:88:22:21: 85:7c:ff:a7:8e:60:b5:9f:88:2d:a0:74:f4:f2:2a:c1:fd:57: 3c:10:52:de:95:e5:9c:a7:27:87:ad:9a:ad:2f:9f:9b:d5:8f: 35:bc:6c:b9:76:cd:00:74:9f:14:ec:54:54:c4:02:75:78:28: ee:db:16:8e:5f:f0:65:49:dd:4c:95:9d:e0:73:67:7d:4e:7c: cb:39:ac:32:d7:c7:bf:54:4a:95:b0:37:bf:42:dd:b8:e9:c5: 31:14:da:97 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUeF5jKeK0BTjMjpEp39LrCHNCeYQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDY5RkFGNDdGRjQ4QUVGNEM5OEY1MDk3MDc0NTMwQTc0 QzExMUFCOTAeFw0yNjEwMjMyMzM1MjdaFw0yNjEwMjUwMDI3MjdaMDMxMTAvBgNV BAMTKDk2NUY5OEQ0ODIyNTlBM0MwMjI3QjM2Mzg1QzhGNzM1NUVDQjk4ODUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFQDxfckyhafvS3YbzsZnhf3sp fbT2n+gNegBpPqDBAaMTQ9P0CSwY+Aak8Q5mufp8lzXbr2FrLhhBFTFX1XuhjchT kBkSWGD50Q/laQS/OThURrfUW/Gj0+6VbYprnyolmWvXl61u2f3cbJO+g1w0tX4z Gc8Vohh9IIuw2dfMrLPAELn1rqmrgHO25C44CSt59ExLdFgHRt8QqQKhrjSzTvHT MJKcjQa6qwmKQ/AE5Ecp8Hqmy3nOzUjGj1cxcakMeWsHfH0gLOAcComMxz5CSu1y JMYC1CuSw9qEbRFtfcEV96TOYGEgeHs3H1rhRtzERjoiVE0OJBxBMzQswQH7AgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUll+Y1IIlmjwCJ7Njhcj3NV7LmIUwHwYDVR0j BBgwFoAUBp+vR/9IrvTJj1CXB0Uwp0wRGrkwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMjNkNWY2ODItYjUxYi00ODEyLWI4YjEtNDMwZTM4Njgz NzQ4LzIvMDY5RkFGNDdGRjQ4QUVGNEM5OEY1MDk3MDc0NTMwQTc0QzExMUFCOS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84NGQ1MTgxMC0xOTg3LTQ3 MDEtOGYxZi04NDI1MTExOTY0ZjQvMC8wNjlGQUY0N0ZGNDhBRUY0Qzk4RjUwOTcw NzQ1MzBBNzRDMTExQUI5LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzIzZDVmNjgyLWI1MWItNDgxMi1iOGIxLTQzMGUzODY4Mzc0OC8yLzA2OUZBRjQ3 RkY0OEFFRjRDOThGNTA5NzA3NDUzMEE3NEMxMTFBQjkubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQA0jEwO 8ubBsDCyFWJv8CE+AhmiSryhoOUoPE05dpD5qArAG2Wp0hextWGwf3klFV+WNQXh yAy70sC8NURLLLvJOcvPCsmps1OQglUW/9h3vgZLMsrt4SYE2RvETLMU9Wy6qZK2 SKWlmE9ApKx4bAOeiaOdLxrrhrNtcLbXGPE6f7pHryx4fk1nA8KuKOq/n0WHxiNi WzvxBJAYybLYgRyIIiGFfP+njmC1n4gtoHT08irB/Vc8EFLeleWcpyeHrZqtL5+b 1Y81vGy5ds0AdJ8U7FRUxAJ1eCju2xaOX/BlSd1MlZ3gc2d9TnzLOawy18e/VEqV sDe/Qt246cUxFNqX -----END CERTIFICATE-----Generated at Sat Oct 24 10:14:04 2026 by rpki-client