$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/2/069FAF47FF48AEF4C98F5097074530A74C111AB9.mft File: 069FAF47FF48AEF4C98F5097074530A74C111AB9.mft (raw, json) Hash identifier: 5BhqSsja31dwqbWrio+gfGtykNAjE5Td+bpd2OweVt0= Subject key identifier: 9B:52:4E:8C:70:BE:AA:DB:72:D5:43:59:C4:66:AB:7B:33:1D:1C:D3 Authority key identifier: 06:9F:AF:47:FF:48:AE:F4:C9:8F:50:97:07:45:30:A7:4C:11:1A:B9 Certificate issuer: /CN=069FAF47FF48AEF4C98F5097074530A74C111AB9 Certificate serial: 7EC300494C8B6130114E49400DE75EA1E5A02922 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/069FAF47FF48AEF4C98F5097074530A74C111AB9.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/2/069FAF47FF48AEF4C98F5097074530A74C111AB9.mft Manifest number: 0392 Signing time: Sun 07 Sep 2025 22:11:13 +0000 Manifest this update: Sun 07 Sep 2025 22:06:13 +0000 Manifest next update: Mon 08 Sep 2025 23:16:13 +0000 Files and hashes: 1: 326130663a383563313a3336333a3a2f34382d3438203d3e20323135363137.roa (hash: G15mowLoM7Eub0vLuxgC+jxtFArNOkVyDHG13blFH8s=) 2: 326130663a383563313a3335313a3a2f34382d3438203d3e20343031333836.roa (hash: 7mR3vQrcbHUSwKtu57zMbBmzQiQeIJwUP4b5xp+7MO0=) 3: 069FAF47FF48AEF4C98F5097074530A74C111AB9.crl (hash: sZugcxsvQeHD3lxD5tSSdi9YxX/N4ElDAgi7TreEqDk=) 4: 326130663a383563313a3335373a3a2f34382d3438203d3e20323135363137.roa (hash: 0B/fHqDaAtnHXiIonhpxQ7ujnJI7VSnPxGbabzcBFIA=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/2/069FAF47FF48AEF4C98F5097074530A74C111AB9.crl rsync://rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/2/069FAF47FF48AEF4C98F5097074530A74C111AB9.mft rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/069FAF47FF48AEF4C98F5097074530A74C111AB9.cer rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 08 Sep 2025 16:00:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:c3:00:49:4c:8b:61:30:11:4e:49:40:0d:e7:5e:a1:e5:a0:29:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=069FAF47FF48AEF4C98F5097074530A74C111AB9 Validity Not Before: Sep 7 22:06:13 2025 GMT Not After : Sep 8 23:16:13 2025 GMT Subject: CN=9B524E8C70BEAADB72D54359C466AB7B331D1CD3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:95:39:fa:b0:f7:46:82:9b:5b:d0:9b:60:d4: d4:5b:aa:56:28:c2:a2:f4:97:be:9f:72:84:99:84: fb:81:61:83:0d:97:24:a6:f5:89:b7:e3:90:5c:eb: 76:fa:5b:fd:86:04:b6:e6:ec:fa:ea:c2:d5:59:e2: aa:21:cf:33:2d:9c:30:7e:ad:ce:e6:1e:a2:58:f3: a4:57:9c:18:fa:d9:04:3d:52:88:0e:fd:4f:5b:e7: 5b:d8:66:be:5e:80:ad:f0:45:84:00:78:35:66:85: 87:a7:93:57:07:ef:4e:9e:fc:b3:4f:73:49:4b:67: 23:7d:45:4d:25:47:40:14:d8:d9:5f:dc:cf:b6:e4: 24:d6:b5:dc:0e:57:fc:e2:1b:1a:6f:60:7b:88:d4: 53:61:62:97:34:57:77:37:10:61:f4:8e:4c:f3:95: 41:91:e7:65:03:64:ec:c0:47:88:71:2b:ec:df:ee: 5e:64:c6:8e:93:b3:54:55:68:b0:99:02:30:db:e8: f5:1d:c4:fe:4c:8e:ad:f8:2a:cc:3d:97:31:6a:2b: 85:14:4b:5a:ae:4f:53:d8:18:f7:f4:f1:77:16:d4: 48:20:2c:45:06:6e:8b:ee:46:6f:9b:58:5d:85:27: fc:02:4b:28:5d:ad:c9:c8:7c:3a:6d:5c:da:43:cd: e4:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:52:4E:8C:70:BE:AA:DB:72:D5:43:59:C4:66:AB:7B:33:1D:1C:D3 X509v3 Authority Key Identifier: keyid:06:9F:AF:47:FF:48:AE:F4:C9:8F:50:97:07:45:30:A7:4C:11:1A:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/2/069FAF47FF48AEF4C98F5097074530A74C111AB9.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/069FAF47FF48AEF4C98F5097074530A74C111AB9.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/2/069FAF47FF48AEF4C98F5097074530A74C111AB9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:47:b6:8a:52:05:36:ea:e8:fa:d0:bc:f7:65:5d:a0:5f:c3: 0f:cd:3a:a6:0c:6b:2c:99:db:63:4c:e4:62:77:42:7d:ba:64: 59:5b:15:80:4a:24:31:9e:1c:6c:24:6c:30:5f:e0:ad:27:eb: 03:93:b0:59:58:0f:85:0b:fc:03:00:78:54:2d:19:66:23:7f: 10:b8:ff:0f:be:b9:ff:eb:18:28:a9:cb:6f:25:8b:8a:e8:03: ba:3c:a4:89:3a:6f:4c:6b:e8:8c:34:21:8d:7b:8f:15:c0:53: 30:56:8d:18:a2:cc:42:05:42:b3:87:6a:ca:90:24:cd:17:fe: e8:ca:54:f5:40:69:57:0a:33:d1:1a:34:ec:fc:c5:a7:64:6d: da:9f:63:01:59:b6:25:00:0d:e7:09:20:9c:4a:a6:d0:be:aa: de:3c:30:71:ae:ef:33:bc:86:ce:ac:0e:6d:e5:22:40:5c:88: 1e:e7:1b:c8:c6:80:53:79:88:2a:00:81:c0:0c:41:ed:89:e5: 10:f8:8c:06:98:96:b6:19:af:32:88:cb:c1:08:fc:d2:39:88: 7b:05:06:68:41:d5:12:d3:c9:2e:ca:b0:9e:cc:66:21:b2:85: 15:c4:07:73:79:b1:92:da:83:9c:ac:3f:43:94:9a:d8:d3:ca: 0a:09:40:d2 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUfsMASUyLYTARTklADedeoeWgKSIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDY5RkFGNDdGRjQ4QUVGNEM5OEY1MDk3MDc0NTMwQTc0 QzExMUFCOTAeFw0yNTA5MDcyMjA2MTNaFw0yNTA5MDgyMzE2MTNaMDMxMTAvBgNV BAMTKDlCNTI0RThDNzBCRUFBREI3MkQ1NDM1OUM0NjZBQjdCMzMxRDFDRDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCulTn6sPdGgptb0Jtg1NRbqlYo wqL0l76fcoSZhPuBYYMNlySm9Ym345Bc63b6W/2GBLbm7PrqwtVZ4qohzzMtnDB+ rc7mHqJY86RXnBj62QQ9UogO/U9b51vYZr5egK3wRYQAeDVmhYenk1cH706e/LNP c0lLZyN9RU0lR0AU2Nlf3M+25CTWtdwOV/ziGxpvYHuI1FNhYpc0V3c3EGH0jkzz lUGR52UDZOzAR4hxK+zf7l5kxo6Ts1RVaLCZAjDb6PUdxP5Mjq34Ksw9lzFqK4UU S1quT1PYGPf08XcW1EggLEUGbovuRm+bWF2FJ/wCSyhdrcnIfDptXNpDzeSrAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUm1JOjHC+qtty1UNZxGarezMdHNMwHwYDVR0j BBgwFoAUBp+vR/9IrvTJj1CXB0Uwp0wRGrkwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMjNkNWY2ODItYjUxYi00ODEyLWI4YjEtNDMwZTM4Njgz NzQ4LzIvMDY5RkFGNDdGRjQ4QUVGNEM5OEY1MDk3MDc0NTMwQTc0QzExMUFCOS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84NGQ1MTgxMC0xOTg3LTQ3 MDEtOGYxZi04NDI1MTExOTY0ZjQvMC8wNjlGQUY0N0ZGNDhBRUY0Qzk4RjUwOTcw NzQ1MzBBNzRDMTExQUI5LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzIzZDVmNjgyLWI1MWItNDgxMi1iOGIxLTQzMGUzODY4Mzc0OC8yLzA2OUZBRjQ3 RkY0OEFFRjRDOThGNTA5NzA3NDUzMEE3NEMxMTFBQjkubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBbR7aK UgU26uj60Lz3ZV2gX8MPzTqmDGssmdtjTORid0J9umRZWxWASiQxnhxsJGwwX+Ct J+sDk7BZWA+FC/wDAHhULRlmI38QuP8Pvrn/6xgoqctvJYuK6AO6PKSJOm9Ma+iM NCGNe48VwFMwVo0YosxCBUKzh2rKkCTNF/7oylT1QGlXCjPRGjTs/MWnZG3an2MB WbYlAA3nCSCcSqbQvqrePDBxru8zvIbOrA5t5SJAXIge5xvIxoBTeYgqAIHADEHt ieUQ+IwGmJa2Ga8yiMvBCPzSOYh7BQZoQdUS08kuyrCezGYhsoUVxAdzebGS2oOc rD9DlJrY08oKCUDS -----END CERTIFICATE-----Generated at Sun Sep 7 23:14:10 2025 by rpki-client