$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/2/069FAF47FF48AEF4C98F5097074530A74C111AB9.mft File: 069FAF47FF48AEF4C98F5097074530A74C111AB9.mft (raw, json) Hash identifier: Q3ti7DaSgnJtRWgaXMrs1M3+TxUQ3OemNQq2G3QB7bQ= Subject key identifier: 01:EC:45:D0:4F:B5:CA:6B:A9:03:98:9B:F9:FD:D4:FD:FC:FF:AF:2D Authority key identifier: 06:9F:AF:47:FF:48:AE:F4:C9:8F:50:97:07:45:30:A7:4C:11:1A:B9 Certificate issuer: /CN=069FAF47FF48AEF4C98F5097074530A74C111AB9 Certificate serial: 36E5C3D1EA6F712B97B33776A46DD0A367A5E72A Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/069FAF47FF48AEF4C98F5097074530A74C111AB9.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/2/069FAF47FF48AEF4C98F5097074530A74C111AB9.mft Manifest number: 03D2 Signing time: Sat 25 Oct 2025 11:18:17 +0000 Manifest this update: Sat 25 Oct 2025 11:13:17 +0000 Manifest next update: Sun 26 Oct 2025 13:09:17 +0000 Files and hashes: 1: 326130663a383563313a3335313a3a2f34382d3438203d3e20343031333836.roa (hash: pdFac+QI0R/UPdzS1q2a9ExUPSLxlAAabS/RPyMDKJ0=) 2: 326130663a383563313a3336333a3a2f34382d3438203d3e20323135363137.roa (hash: G15mowLoM7Eub0vLuxgC+jxtFArNOkVyDHG13blFH8s=) 3: 326130663a383563313a3335373a3a2f34382d3438203d3e20323135363137.roa (hash: 0B/fHqDaAtnHXiIonhpxQ7ujnJI7VSnPxGbabzcBFIA=) 4: 069FAF47FF48AEF4C98F5097074530A74C111AB9.crl (hash: KyZstVKH69iFUkXr8cqQk2zD2MeJlRTipP1RbcB/g9w=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/2/069FAF47FF48AEF4C98F5097074530A74C111AB9.crl rsync://rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/2/069FAF47FF48AEF4C98F5097074530A74C111AB9.mft rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/069FAF47FF48AEF4C98F5097074530A74C111AB9.cer rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 26 Oct 2025 11:00:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:e5:c3:d1:ea:6f:71:2b:97:b3:37:76:a4:6d:d0:a3:67:a5:e7:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=069FAF47FF48AEF4C98F5097074530A74C111AB9 Validity Not Before: Oct 25 11:13:17 2025 GMT Not After : Oct 26 13:09:17 2025 GMT Subject: CN=01EC45D04FB5CA6BA903989BF9FDD4FDFCFFAF2D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:e8:d8:f6:45:49:15:e3:8d:79:c4:bd:3c:70: a1:e2:42:3d:8b:c0:66:0a:00:d3:92:a5:33:9e:66: f8:d9:53:ed:61:c8:29:f1:ed:30:09:3c:03:75:c9: 2b:fb:6b:4d:cc:58:60:86:7b:32:67:ce:39:0b:c5: aa:fe:ef:71:00:d9:51:92:c3:b9:eb:ed:4a:06:0b: 9e:8a:90:e1:dd:4a:67:6d:12:31:3a:a1:1f:ea:ae: 04:83:05:25:04:14:b9:b7:ba:ae:8a:18:02:20:52: 0c:d5:8e:2c:2b:86:fd:d4:3a:bc:f2:2d:e4:48:b2: b7:08:a7:f0:47:dd:33:3c:99:c7:19:f5:7d:04:94: f4:c4:b3:0a:41:02:72:93:fa:32:5d:3f:21:79:52: 0d:1a:91:63:3c:0a:7b:d9:37:56:ac:fb:8a:73:ac: d5:ba:3e:d5:b0:db:66:0e:1a:44:1c:6c:84:de:62: cb:56:44:05:60:4c:7c:5a:a4:09:67:2c:bb:a5:01: 68:e5:ff:d8:27:dc:67:79:80:8e:b7:c2:ee:6a:e1: b4:33:c1:b7:81:af:4d:95:02:57:05:d6:6a:8c:ab: 19:4e:07:13:c2:d0:03:b7:df:8a:d5:01:84:bc:25: f8:cf:33:77:b0:47:e1:e1:38:7d:79:17:c2:c4:2a: 01:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:EC:45:D0:4F:B5:CA:6B:A9:03:98:9B:F9:FD:D4:FD:FC:FF:AF:2D X509v3 Authority Key Identifier: keyid:06:9F:AF:47:FF:48:AE:F4:C9:8F:50:97:07:45:30:A7:4C:11:1A:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/2/069FAF47FF48AEF4C98F5097074530A74C111AB9.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/069FAF47FF48AEF4C98F5097074530A74C111AB9.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/2/069FAF47FF48AEF4C98F5097074530A74C111AB9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:57:75:3c:99:15:57:4a:99:60:ea:63:d3:cb:8d:03:d9:be: 06:b0:33:80:52:2a:04:82:0b:a1:eb:1b:fe:58:35:e6:31:67: 65:ee:12:2f:81:d6:ce:9a:05:2e:06:2b:3c:20:89:68:4c:32: c7:c4:fb:a6:10:d1:58:30:84:5a:86:9a:01:98:cf:f0:2c:be: 89:3a:ad:9b:d7:34:12:76:dd:ab:e3:e0:fc:a9:46:20:d5:ec: f6:ee:ee:fb:9f:21:73:a4:91:1e:56:9e:3d:f8:41:fe:48:fe: e4:d0:fd:c5:c1:af:3b:6f:32:37:cb:bb:a4:95:0f:80:60:5d: a0:31:a3:e0:8a:24:08:e2:61:06:07:49:28:19:40:29:d0:c9: a8:b4:53:cf:9d:e6:e2:9a:f5:ba:59:bb:63:7a:7d:79:ef:9f: 96:25:7e:5a:47:6b:90:84:a6:15:b4:ca:3a:d4:fc:c3:6c:e2: 85:27:82:ae:cb:0d:04:07:1e:bc:3a:84:22:5f:45:8b:e0:dd: d7:88:10:93:df:63:a0:8a:24:7d:ac:eb:1d:22:fd:ed:d7:e6: 82:38:df:8d:c0:0a:62:31:4f:27:9e:eb:f7:c9:ad:f4:ae:55: 4b:d4:32:c2:cc:c3:09:14:58:ea:23:7c:0b:f6:40:80:94:73: 6b:20:55:53 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUNuXD0epvcSuXszd2pG3Qo2el5yowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDY5RkFGNDdGRjQ4QUVGNEM5OEY1MDk3MDc0NTMwQTc0 QzExMUFCOTAeFw0yNTEwMjUxMTEzMTdaFw0yNTEwMjYxMzA5MTdaMDMxMTAvBgNV BAMTKDAxRUM0NUQwNEZCNUNBNkJBOTAzOTg5QkY5RkRENEZERkNGRkFGMkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDK6Nj2RUkV4415xL08cKHiQj2L wGYKANOSpTOeZvjZU+1hyCnx7TAJPAN1ySv7a03MWGCGezJnzjkLxar+73EA2VGS w7nr7UoGC56KkOHdSmdtEjE6oR/qrgSDBSUEFLm3uq6KGAIgUgzVjiwrhv3UOrzy LeRIsrcIp/BH3TM8mccZ9X0ElPTEswpBAnKT+jJdPyF5Ug0akWM8CnvZN1as+4pz rNW6PtWw22YOGkQcbITeYstWRAVgTHxapAlnLLulAWjl/9gn3Gd5gI63wu5q4bQz wbeBr02VAlcF1mqMqxlOBxPC0AO334rVAYS8JfjPM3ewR+HhOH15F8LEKgHdAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUAexF0E+1ymupA5ib+f3U/fz/ry0wHwYDVR0j BBgwFoAUBp+vR/9IrvTJj1CXB0Uwp0wRGrkwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMjNkNWY2ODItYjUxYi00ODEyLWI4YjEtNDMwZTM4Njgz NzQ4LzIvMDY5RkFGNDdGRjQ4QUVGNEM5OEY1MDk3MDc0NTMwQTc0QzExMUFCOS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84NGQ1MTgxMC0xOTg3LTQ3 MDEtOGYxZi04NDI1MTExOTY0ZjQvMC8wNjlGQUY0N0ZGNDhBRUY0Qzk4RjUwOTcw NzQ1MzBBNzRDMTExQUI5LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzIzZDVmNjgyLWI1MWItNDgxMi1iOGIxLTQzMGUzODY4Mzc0OC8yLzA2OUZBRjQ3 RkY0OEFFRjRDOThGNTA5NzA3NDUzMEE3NEMxMTFBQjkubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBAV3U8 mRVXSplg6mPTy40D2b4GsDOAUioEgguh6xv+WDXmMWdl7hIvgdbOmgUuBis8IIlo TDLHxPumENFYMIRahpoBmM/wLL6JOq2b1zQSdt2r4+D8qUYg1ez27u77nyFzpJEe Vp49+EH+SP7k0P3Fwa87bzI3y7uklQ+AYF2gMaPgiiQI4mEGB0koGUAp0MmotFPP nebimvW6Wbtjen1575+WJX5aR2uQhKYVtMo61PzDbOKFJ4Kuyw0EBx68OoQiX0WL 4N3XiBCT32OgiiR9rOsdIv3t1+aCON+NwApiMU8nnuv3ya30rlVL1DLCzMMJFFjq I3wL9kCAlHNrIFVT -----END CERTIFICATE-----Generated at Sat Oct 25 17:24:40 2025 by rpki-client