$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/2/069FAF47FF48AEF4C98F5097074530A74C111AB9.mft File: 069FAF47FF48AEF4C98F5097074530A74C111AB9.mft (raw, json) Hash identifier: +i5OpwJu2h6cP/W3rZ1ykdTFMQOLtIQSRJE7PVaKHPI= Subject key identifier: 2D:EE:22:A8:74:2B:28:2A:43:1C:90:79:1F:8C:C1:A5:12:EB:9F:A3 Authority key identifier: 06:9F:AF:47:FF:48:AE:F4:C9:8F:50:97:07:45:30:A7:4C:11:1A:B9 Certificate issuer: /CN=069FAF47FF48AEF4C98F5097074530A74C111AB9 Certificate serial: 756C596C98DFF061D19EA5F80DFF54C376E086FB Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/069FAF47FF48AEF4C98F5097074530A74C111AB9.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/2/069FAF47FF48AEF4C98F5097074530A74C111AB9.mft Manifest number: 0316 Signing time: Wed 04 Jun 2025 20:15:50 +0000 Manifest this update: Wed 04 Jun 2025 20:10:50 +0000 Manifest next update: Thu 05 Jun 2025 22:33:50 +0000 Files and hashes: 1: 326130663a383563313a3335373a3a2f34382d3438203d3e20323135363137.roa (hash: 0B/fHqDaAtnHXiIonhpxQ7ujnJI7VSnPxGbabzcBFIA=) 2: 069FAF47FF48AEF4C98F5097074530A74C111AB9.crl (hash: 1xVTXcAePfHkYHUGnhc7r+ij0irNVAkqKKDok3Czvz8=) 3: 326130663a383563313a3335313a3a2f34382d3438203d3e20343031333836.roa (hash: 7mR3vQrcbHUSwKtu57zMbBmzQiQeIJwUP4b5xp+7MO0=) 4: 326130663a383563313a3336333a3a2f34382d3438203d3e20323135363137.roa (hash: G15mowLoM7Eub0vLuxgC+jxtFArNOkVyDHG13blFH8s=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/2/069FAF47FF48AEF4C98F5097074530A74C111AB9.crl rsync://rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/2/069FAF47FF48AEF4C98F5097074530A74C111AB9.mft rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/069FAF47FF48AEF4C98F5097074530A74C111AB9.cer rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 05 Jun 2025 18:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:6c:59:6c:98:df:f0:61:d1:9e:a5:f8:0d:ff:54:c3:76:e0:86:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=069FAF47FF48AEF4C98F5097074530A74C111AB9 Validity Not Before: Jun 4 20:10:50 2025 GMT Not After : Jun 5 22:33:50 2025 GMT Subject: CN=2DEE22A8742B282A431C90791F8CC1A512EB9FA3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:74:9e:cf:b6:13:22:9a:9c:56:ec:0f:58:07: 38:5d:e8:da:d1:b7:b3:5b:34:a4:46:99:05:71:b5: ba:3b:aa:0b:8c:56:d4:c5:c4:00:8a:d4:fe:bd:c6: 06:2c:f0:3f:43:0c:d7:13:cb:a4:23:ba:e3:b3:71: e0:08:5c:9f:3b:52:6c:a3:2b:34:59:8e:2d:c7:f4: 4b:80:1a:98:64:b6:5a:ff:c0:ee:f2:4a:75:6a:0f: e9:cc:bb:eb:32:6d:5c:16:f6:1a:8e:a8:13:3d:97: 8d:44:30:19:4c:f2:d0:16:e5:72:79:44:d7:22:ad: e2:24:5a:b7:b8:23:40:57:6d:6e:44:03:83:8b:78: 9b:c2:7d:2f:4f:14:91:88:ac:27:15:6c:28:63:6d: 65:6f:5d:ec:ee:5b:53:47:a5:b9:ee:51:4a:d3:a2: 7c:63:8a:0f:4a:01:bb:ab:b7:3e:0d:0f:a1:f1:54: ae:31:44:f2:5e:d4:49:f3:c4:82:3d:5b:30:3a:0e: dd:1e:ad:1f:75:cc:b9:66:07:82:d5:f2:36:5d:e2: 4f:8d:f4:46:5d:92:2f:ac:25:cd:3e:ff:5d:9a:1e: bb:a4:7a:5d:67:83:39:1f:a7:1f:ff:f4:07:5b:7d: 3c:cd:74:39:82:01:dc:fd:c8:0c:59:e2:c6:56:57: 44:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:EE:22:A8:74:2B:28:2A:43:1C:90:79:1F:8C:C1:A5:12:EB:9F:A3 X509v3 Authority Key Identifier: keyid:06:9F:AF:47:FF:48:AE:F4:C9:8F:50:97:07:45:30:A7:4C:11:1A:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/2/069FAF47FF48AEF4C98F5097074530A74C111AB9.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/069FAF47FF48AEF4C98F5097074530A74C111AB9.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/2/069FAF47FF48AEF4C98F5097074530A74C111AB9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b9:8e:f1:66:3e:5a:4e:73:3b:fd:8b:3a:0f:38:ef:fa:d4:6c: 2e:d7:8a:e1:46:18:8f:08:98:2f:25:82:86:84:90:b3:07:e1: 2c:91:4b:68:76:76:10:a4:85:45:e3:a7:37:10:42:85:88:71: 6b:ff:9b:94:c7:7e:7d:8b:5c:2c:06:17:44:cf:38:18:03:bb: 99:22:29:54:36:9a:c0:13:91:23:c5:e4:42:24:cb:03:39:6f: d5:7c:df:3b:c3:1f:20:e6:73:94:1f:a4:c2:89:a9:ad:ea:23: fc:c8:26:80:6a:1e:20:6e:4d:16:99:60:71:26:44:cc:2f:b2: 2e:1d:cb:cf:8c:cb:de:29:e9:ab:34:c4:0d:52:a0:16:0a:85: ed:cc:34:99:e5:b5:f4:df:79:4a:82:35:a4:3f:de:5e:df:8b: 91:d6:c3:a8:47:b4:17:91:57:78:b8:77:cd:f3:2b:7e:6d:a6: aa:76:18:dc:fb:c3:cf:f7:51:55:79:3f:0f:8b:ae:bb:71:8f: ff:2e:13:fe:c5:ed:e7:33:3b:b1:6d:9d:6f:a0:61:91:5d:0a: 91:4b:be:dc:d3:e6:bb:f0:0c:b4:72:e6:ae:e2:a1:40:fb:4d: b4:6c:e9:f6:fb:ad:03:e0:8a:67:8d:d4:17:99:3a:df:6e:36: d6:e2:2a:c0 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUdWxZbJjf8GHRnqX4Df9Uw3bghvswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDY5RkFGNDdGRjQ4QUVGNEM5OEY1MDk3MDc0NTMwQTc0 QzExMUFCOTAeFw0yNTA2MDQyMDEwNTBaFw0yNTA2MDUyMjMzNTBaMDMxMTAvBgNV BAMTKDJERUUyMkE4NzQyQjI4MkE0MzFDOTA3OTFGOENDMUE1MTJFQjlGQTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDldJ7PthMimpxW7A9YBzhd6NrR t7NbNKRGmQVxtbo7qguMVtTFxACK1P69xgYs8D9DDNcTy6QjuuOzceAIXJ87Umyj KzRZji3H9EuAGphktlr/wO7ySnVqD+nMu+sybVwW9hqOqBM9l41EMBlM8tAW5XJ5 RNcireIkWre4I0BXbW5EA4OLeJvCfS9PFJGIrCcVbChjbWVvXezuW1NHpbnuUUrT onxjig9KAburtz4ND6HxVK4xRPJe1EnzxII9WzA6Dt0erR91zLlmB4LV8jZd4k+N 9EZdki+sJc0+/12aHrukel1ngzkfpx//9AdbfTzNdDmCAdz9yAxZ4sZWV0SjAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQULe4iqHQrKCpDHJB5H4zBpRLrn6MwHwYDVR0j BBgwFoAUBp+vR/9IrvTJj1CXB0Uwp0wRGrkwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMjNkNWY2ODItYjUxYi00ODEyLWI4YjEtNDMwZTM4Njgz NzQ4LzIvMDY5RkFGNDdGRjQ4QUVGNEM5OEY1MDk3MDc0NTMwQTc0QzExMUFCOS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84NGQ1MTgxMC0xOTg3LTQ3 MDEtOGYxZi04NDI1MTExOTY0ZjQvMC8wNjlGQUY0N0ZGNDhBRUY0Qzk4RjUwOTcw NzQ1MzBBNzRDMTExQUI5LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzIzZDVmNjgyLWI1MWItNDgxMi1iOGIxLTQzMGUzODY4Mzc0OC8yLzA2OUZBRjQ3 RkY0OEFFRjRDOThGNTA5NzA3NDUzMEE3NEMxMTFBQjkubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQC5jvFm PlpOczv9izoPOO/61Gwu14rhRhiPCJgvJYKGhJCzB+EskUtodnYQpIVF46c3EEKF iHFr/5uUx359i1wsBhdEzzgYA7uZIilUNprAE5EjxeRCJMsDOW/VfN87wx8g5nOU H6TCiamt6iP8yCaAah4gbk0WmWBxJkTML7IuHcvPjMveKemrNMQNUqAWCoXtzDSZ 5bX033lKgjWkP95e34uR1sOoR7QXkVd4uHfN8yt+baaqdhjc+8PP91FVeT8Pi667 cY//LhP+xe3nMzuxbZ1voGGRXQqRS77c0+a78Ay0cuau4qFA+020bOn2+60D4Ipn jdQXmTrfbjbW4irA -----END CERTIFICATE-----Generated at Thu Jun 5 00:10:34 2025 by rpki-client