$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/2/069FAF47FF48AEF4C98F5097074530A74C111AB9.mft File: 069FAF47FF48AEF4C98F5097074530A74C111AB9.mft (raw, json) Hash identifier: 33dzQIViofEBF8xn4Xw6Ma/0xyQTpC8aPtvcy/skQfE= Subject key identifier: 77:0B:FA:8B:C8:C5:B0:85:31:C9:57:E0:E8:DA:5E:5F:F2:8B:95:A2 Authority key identifier: 06:9F:AF:47:FF:48:AE:F4:C9:8F:50:97:07:45:30:A7:4C:11:1A:B9 Certificate issuer: /CN=069FAF47FF48AEF4C98F5097074530A74C111AB9 Certificate serial: 44D68CDBC60ACE79200E463422931D0F10554E83 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/069FAF47FF48AEF4C98F5097074530A74C111AB9.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/2/069FAF47FF48AEF4C98F5097074530A74C111AB9.mft Manifest number: 04D0 Signing time: Mon 27 Apr 2026 07:08:43 +0000 Manifest this update: Mon 27 Apr 2026 07:03:42 +0000 Manifest next update: Tue 28 Apr 2026 07:59:42 +0000 Files and hashes: 1: 069FAF47FF48AEF4C98F5097074530A74C111AB9.crl (hash: Ewd111zt2TlUbCkIN43DV0yPAShErvGOETCMlmUmnKA=) 2: 326130663a383563313a3336333a3a2f34382d3438203d3e20323135363137.roa (hash: nWVf9Vd1/pxv69WaHKM1e/8vQ/po0I7aidbKnzISSgo=) 3: 326130663a383563313a3335373a3a2f34382d3438203d3e20323135363137.roa (hash: mT7wNp38f47L+2MAFo1ah1wV4i3g7EwDZhqEAFbd0PU=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/2/069FAF47FF48AEF4C98F5097074530A74C111AB9.crl rsync://rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/2/069FAF47FF48AEF4C98F5097074530A74C111AB9.mft rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/069FAF47FF48AEF4C98F5097074530A74C111AB9.cer rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 28 Apr 2026 07:59:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:d6:8c:db:c6:0a:ce:79:20:0e:46:34:22:93:1d:0f:10:55:4e:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=069FAF47FF48AEF4C98F5097074530A74C111AB9 Validity Not Before: Apr 27 07:03:42 2026 GMT Not After : Apr 28 07:59:42 2026 GMT Subject: CN=770BFA8BC8C5B08531C957E0E8DA5E5FF28B95A2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:20:92:49:da:3e:bc:c1:21:14:44:d0:31:cc: f8:ba:e5:53:14:02:f0:9e:8f:48:f4:1e:5c:ee:6d: 91:bc:e9:d7:6c:ba:26:06:69:be:7f:65:39:21:e9: 20:4f:5d:93:58:21:9e:c9:d7:83:89:ce:1b:1e:38: 14:19:37:b2:68:86:10:e5:3d:24:a4:ea:40:8f:c4: 7c:67:3b:30:e3:72:71:8a:4b:3b:45:93:92:ca:98: 74:47:ea:ee:41:19:56:64:04:92:40:90:bd:e3:08: f4:b9:42:64:32:6f:54:61:0f:98:91:b0:30:f8:22: a9:ec:48:05:08:47:08:d4:c9:51:cb:01:55:2d:6a: 40:b8:02:92:df:f9:b3:95:eb:13:4b:61:ab:99:3a: a0:c9:91:d1:94:a5:78:42:72:63:14:97:88:da:58: ac:06:0e:49:4e:e1:56:b9:c3:21:b1:36:0c:2a:ac: 1f:38:46:27:8d:e8:63:1e:2b:ac:ba:60:d8:15:17: 90:41:49:d8:15:0c:60:b0:53:ee:c7:bf:19:d3:40: 4b:ea:91:8a:9b:d3:c9:63:cb:e7:0d:48:7c:4e:68: fb:28:c7:ae:3b:73:d9:03:e4:f9:de:8b:41:28:a2: 2e:56:56:fe:bd:8b:15:be:55:5b:04:d0:d1:d7:7f: 1b:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:0B:FA:8B:C8:C5:B0:85:31:C9:57:E0:E8:DA:5E:5F:F2:8B:95:A2 X509v3 Authority Key Identifier: keyid:06:9F:AF:47:FF:48:AE:F4:C9:8F:50:97:07:45:30:A7:4C:11:1A:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/2/069FAF47FF48AEF4C98F5097074530A74C111AB9.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/069FAF47FF48AEF4C98F5097074530A74C111AB9.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/2/069FAF47FF48AEF4C98F5097074530A74C111AB9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3d:1e:7c:bd:65:b3:04:2d:a2:25:13:4b:ab:0c:0a:ce:61:a8: c2:15:3f:64:ba:4f:45:43:45:d3:74:a0:ef:28:e5:9f:97:da: 0d:8e:25:7d:c1:40:ae:27:fc:ee:71:e3:ec:3c:2c:ca:e3:d2: 62:cf:ac:6a:ff:1c:7a:3e:63:da:b2:94:1c:45:ee:f4:d9:f5: a5:ff:db:e5:91:72:f8:3f:2e:db:83:69:53:7b:c9:69:7f:62: bc:2e:11:4d:28:fd:1b:26:82:9d:17:77:ed:46:44:11:21:a9: c9:67:1b:6e:83:38:45:c0:4d:d3:31:36:c3:a4:f9:5f:05:12: b2:29:06:5c:dd:8b:c8:84:ef:81:c2:aa:dd:9b:fd:fb:f1:f4: 0e:c7:f9:87:e2:79:24:ab:c7:6a:20:8e:7d:da:50:20:4f:32: 82:d5:67:6f:9f:ed:4d:73:1d:4d:a5:30:6f:29:42:77:02:50: 15:ac:33:8f:1f:58:53:92:17:46:be:5e:2e:d5:e0:8f:ea:a8: 78:37:ac:95:9e:b1:5e:9d:6b:b0:b2:dc:1c:eb:c8:d5:17:b9: 1f:93:fe:d4:8c:22:2c:9e:a0:21:98:1a:c0:63:42:c4:31:49: c1:6a:97:90:9b:c7:fb:c9:7e:4f:c1:85:ea:64:d3:25:03:fe: 24:3a:02:5c -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIURNaM28YKznkgDkY0IpMdDxBVToMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDY5RkFGNDdGRjQ4QUVGNEM5OEY1MDk3MDc0NTMwQTc0 QzExMUFCOTAeFw0yNjA0MjcwNzAzNDJaFw0yNjA0MjgwNzU5NDJaMDMxMTAvBgNV BAMTKDc3MEJGQThCQzhDNUIwODUzMUM5NTdFMEU4REE1RTVGRjI4Qjk1QTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDmIJJJ2j68wSEURNAxzPi65VMU AvCej0j0HlzubZG86ddsuiYGab5/ZTkh6SBPXZNYIZ7J14OJzhseOBQZN7JohhDl PSSk6kCPxHxnOzDjcnGKSztFk5LKmHRH6u5BGVZkBJJAkL3jCPS5QmQyb1RhD5iR sDD4IqnsSAUIRwjUyVHLAVUtakC4ApLf+bOV6xNLYauZOqDJkdGUpXhCcmMUl4ja WKwGDklO4Va5wyGxNgwqrB84RieN6GMeK6y6YNgVF5BBSdgVDGCwU+7HvxnTQEvq kYqb08ljy+cNSHxOaPsox647c9kD5Pnei0Eooi5WVv69ixW+VVsE0NHXfxsHAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUdwv6i8jFsIUxyVfg6NpeX/KLlaIwHwYDVR0j BBgwFoAUBp+vR/9IrvTJj1CXB0Uwp0wRGrkwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMjNkNWY2ODItYjUxYi00ODEyLWI4YjEtNDMwZTM4Njgz NzQ4LzIvMDY5RkFGNDdGRjQ4QUVGNEM5OEY1MDk3MDc0NTMwQTc0QzExMUFCOS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84NGQ1MTgxMC0xOTg3LTQ3 MDEtOGYxZi04NDI1MTExOTY0ZjQvMC8wNjlGQUY0N0ZGNDhBRUY0Qzk4RjUwOTcw NzQ1MzBBNzRDMTExQUI5LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzIzZDVmNjgyLWI1MWItNDgxMi1iOGIxLTQzMGUzODY4Mzc0OC8yLzA2OUZBRjQ3 RkY0OEFFRjRDOThGNTA5NzA3NDUzMEE3NEMxMTFBQjkubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQA9Hny9 ZbMELaIlE0urDArOYajCFT9kuk9FQ0XTdKDvKOWfl9oNjiV9wUCuJ/zucePsPCzK 49Jiz6xq/xx6PmPaspQcRe702fWl/9vlkXL4Py7bg2lTe8lpf2K8LhFNKP0bJoKd F3ftRkQRIanJZxtugzhFwE3TMTbDpPlfBRKyKQZc3YvIhO+Bwqrdm/378fQOx/mH 4nkkq8dqII592lAgTzKC1Wdvn+1Ncx1NpTBvKUJ3AlAVrDOPH1hTkhdGvl4u1eCP 6qh4N6yVnrFenWuwstwc68jVF7kfk/7UjCIsnqAhmBrAY0LEMUnBapeQm8f7yX5P wYXqZNMlA/4kOgJc -----END CERTIFICATE-----Generated at Mon Apr 27 16:26:26 2026 by rpki-client