$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/2/06DB699D191D4B0289910C88E99CF94A671142F5.mft File: 06DB699D191D4B0289910C88E99CF94A671142F5.mft (raw, json) Hash identifier: ppMf1HCUZe7OFQrIkUyoC9TsCSFKrqV8aMWJwjvA1lM= Subject key identifier: 4D:F1:C2:75:E6:65:64:AD:D4:AB:57:77:08:50:4C:4E:4A:BB:2A:D0 Authority key identifier: 06:DB:69:9D:19:1D:4B:02:89:91:0C:88:E9:9C:F9:4A:67:11:42:F5 Certificate issuer: /CN=06DB699D191D4B0289910C88E99CF94A671142F5 Certificate serial: 13523E40BB70ACBB4B475EEA86E2C067A09C278E Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/06DB699D191D4B0289910C88E99CF94A671142F5.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/2/06DB699D191D4B0289910C88E99CF94A671142F5.mft Manifest number: 89 Signing time: Wed 08 Oct 2025 10:08:13 +0000 Manifest this update: Wed 08 Oct 2025 10:03:13 +0000 Manifest next update: Thu 09 Oct 2025 11:24:13 +0000 Files and hashes: 1: 06DB699D191D4B0289910C88E99CF94A671142F5.crl (hash: aj4lMCkw5ANBsmT9r7No4yc0LmDWfMT8IEoJnJzswWg=) 2: 326130363a396634313a613930313a3a2f34382d3438203d3e20323035383338.roa (hash: TZFInP0XSpkR7gzjfw2R3ov4SaV+J0Kzbqc0lAbOzbM=) 3: 326130363a396634313a613930303a3a2f34382d3438203d3e20323037363832.roa (hash: UqjWSUv2XiZdDsdQ0uOndREGc/szQ2JnxQlbZ2ADckI=) 4: 326130363a396634313a3a2f33322d3438203d3e20323135303835.roa (hash: Wzsm4f2LA5za568wbkiJepokvyBzVpcjorefCVCiEbM=) 5: 326130363a396634313a363936393a3a2f34382d3438203d3e20323132323432.roa (hash: oZMKPe8zIqKXDWE+ceP6ZovC366mkj//dk5ag6RqSYo=) 6: 38332e3134322e33312e302f32342d3234203d3e20323135303835.roa (hash: K8xHXu8PBNylpSXaMswB01W3KM9JQNKdf8F+yOiMZUQ=) 7: 5A3F7819353CE0FD13B8FFCDCB8837ED0BF5915F.cer (hash: vr0IDnvMrQlAIKTPbmc9XgADtBREMeozkPpGVjOFGr4=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/2/06DB699D191D4B0289910C88E99CF94A671142F5.crl rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/2/06DB699D191D4B0289910C88E99CF94A671142F5.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/06DB699D191D4B0289910C88E99CF94A671142F5.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 09 Oct 2025 11:24:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:52:3e:40:bb:70:ac:bb:4b:47:5e:ea:86:e2:c0:67:a0:9c:27:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=06DB699D191D4B0289910C88E99CF94A671142F5 Validity Not Before: Oct 8 10:03:13 2025 GMT Not After : Oct 9 11:24:13 2025 GMT Subject: CN=4DF1C275E66564ADD4AB577708504C4E4ABB2AD0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:df:79:3b:a3:fa:77:61:81:7b:85:c4:a1:eb: 06:69:cd:8a:5d:e3:87:57:29:ed:9c:b4:0f:5f:3b: b7:09:0d:1a:18:24:2e:e2:36:b0:3a:43:36:2e:12: cd:2c:68:63:a2:d8:8f:62:e5:72:c8:55:11:ec:fc: be:58:a0:cf:08:ef:fc:8c:25:4b:d0:bc:e5:40:1d: 39:ce:87:fe:7e:2a:f2:ee:68:a7:96:c1:9c:92:b0: 63:da:74:46:c8:cf:07:fe:57:b1:e0:7f:ea:5c:38: a6:fa:38:c1:dc:40:65:36:e2:87:76:86:5d:31:90: 9b:03:44:74:a2:99:ee:97:1d:07:fd:b7:80:da:89: 64:8b:2f:2a:5c:a9:7d:68:ef:fb:e0:90:5f:fc:5b: ce:0d:7b:35:0c:08:b7:ba:d3:1e:1e:22:35:db:56: e4:6f:4c:34:48:f7:54:76:60:3a:62:b9:1e:97:9c: dc:30:ad:ce:2b:c3:04:98:21:37:a6:55:2a:01:64: ae:e3:1c:59:59:56:6d:39:a4:de:a1:27:c7:0a:ab: 2c:6e:ef:0f:8f:98:a0:3b:23:e6:1f:04:67:d7:69: 1e:35:3b:58:0b:3f:e6:3f:93:1b:6e:56:2c:a8:0d: db:e2:3a:48:0e:e9:27:0d:71:39:7d:88:68:f6:69: d7:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:F1:C2:75:E6:65:64:AD:D4:AB:57:77:08:50:4C:4E:4A:BB:2A:D0 X509v3 Authority Key Identifier: keyid:06:DB:69:9D:19:1D:4B:02:89:91:0C:88:E9:9C:F9:4A:67:11:42:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/2/06DB699D191D4B0289910C88E99CF94A671142F5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/06DB699D191D4B0289910C88E99CF94A671142F5.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/2/06DB699D191D4B0289910C88E99CF94A671142F5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:8f:e2:3b:7d:2f:3a:07:50:b0:62:a4:02:62:32:58:25:4f: 5c:28:83:2c:8b:23:0c:1c:ab:4e:2c:e1:a6:78:1b:87:dd:eb: c1:6c:16:14:47:cd:43:67:77:75:2e:d7:32:a0:23:63:c2:da: 64:09:76:6e:cb:ad:95:7c:87:6d:89:51:95:a5:fb:a3:e7:d0: 42:31:e1:9f:54:b7:36:1e:1b:db:b0:7b:0e:63:89:0c:10:50: fe:3d:60:81:2d:20:13:58:d4:7d:ec:1b:a5:3d:80:20:d0:e8: a0:40:dd:c1:3f:33:94:7c:ab:b2:26:e3:8e:24:37:b5:ff:25: 24:2e:19:0b:37:d1:25:b0:8e:cd:82:6f:8e:3d:9f:c3:21:4e: 1c:48:72:9b:2f:82:bb:ea:86:1c:bc:92:41:19:b0:50:5c:4b: 80:f2:74:2e:8b:e4:d5:c1:cd:0a:55:4c:4c:2d:f3:55:84:17: 40:4d:09:bb:e2:01:d0:ad:56:e1:14:f0:ff:2c:46:6c:9a:f1: b5:d4:cc:d7:1a:0a:d5:3d:58:11:3d:47:86:36:c4:a1:cb:a6: 71:68:be:1f:a1:0c:b2:13:6e:8a:66:67:56:27:37:b9:06:2a: 9f:03:04:bc:68:5f:9d:fb:11:f3:5d:e4:4b:89:0d:0e:2a:d7: 35:43:95:f4 -----BEGIN CERTIFICATE----- MIIFbTCCBFWgAwIBAgIUE1I+QLtwrLtLR17qhuLAZ6CcJ44wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDZEQjY5OUQxOTFENEIwMjg5OTEwQzg4RTk5Q0Y5NEE2 NzExNDJGNTAeFw0yNTEwMDgxMDAzMTNaFw0yNTEwMDkxMTI0MTNaMDMxMTAvBgNV BAMTKDRERjFDMjc1RTY2NTY0QURENEFCNTc3NzA4NTA0QzRFNEFCQjJBRDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDr33k7o/p3YYF7hcSh6wZpzYpd 44dXKe2ctA9fO7cJDRoYJC7iNrA6QzYuEs0saGOi2I9i5XLIVRHs/L5YoM8I7/yM JUvQvOVAHTnOh/5+KvLuaKeWwZySsGPadEbIzwf+V7Hgf+pcOKb6OMHcQGU24od2 hl0xkJsDRHSime6XHQf9t4DaiWSLLypcqX1o7/vgkF/8W84NezUMCLe60x4eIjXb VuRvTDRI91R2YDpiuR6XnNwwrc4rwwSYITemVSoBZK7jHFlZVm05pN6hJ8cKqyxu 7w+PmKA7I+YfBGfXaR41O1gLP+Y/kxtuViyoDdviOkgO6ScNcTl9iGj2adcnAgMB AAGjggJ3MIICczAdBgNVHQ4EFgQUTfHCdeZlZK3Uq1d3CFBMTkq7KtAwHwYDVR0j BBgwFoAUBttpnRkdSwKJkQyI6Zz5SmcRQvUwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMzAxMTk0NGQtN2ViMy00ZjYzLWExNTktY2ZmMDJjMDI2 YWJmLzIvMDZEQjY5OUQxOTFENEIwMjg5OTEwQzg4RTk5Q0Y5NEE2NzExNDJGNS5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1 YzkxYmUzZjlkLzcvMDZEQjY5OUQxOTFENEIwMjg5OTEwQzg4RTk5Q0Y5NEE2NzEx NDJGNS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8zMDExOTQ0ZC03 ZWIzLTRmNjMtYTE1OS1jZmYwMmMwMjZhYmYvMi8wNkRCNjk5RDE5MUQ0QjAyODk5 MTBDODhFOTlDRjk0QTY3MTE0MkY1Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARo/iO30vOgdQsGKkAmIy WCVPXCiDLIsjDByrTizhpngbh93rwWwWFEfNQ2d3dS7XMqAjY8LaZAl2bsutlXyH bYlRlaX7o+fQQjHhn1S3Nh4b27B7DmOJDBBQ/j1ggS0gE1jUfewbpT2AINDooEDd wT8zlHyrsibjjiQ3tf8lJC4ZCzfRJbCOzYJvjj2fwyFOHEhymy+Cu+qGHLySQRmw UFxLgPJ0Lovk1cHNClVMTC3zVYQXQE0Ju+IB0K1W4RTw/yxGbJrxtdTM1xoK1T1Y ET1HhjbEocumcWi+H6EMshNuimZnVic3uQYqnwMEvGhfnfsR813kS4kNDirXNUOV 9A== -----END CERTIFICATE-----Generated at Wed Oct 8 23:33:41 2025 by rpki-client