$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/2/06DB699D191D4B0289910C88E99CF94A671142F5.mft File: 06DB699D191D4B0289910C88E99CF94A671142F5.mft (raw, json) Hash identifier: 1E7l2BR7rTD2dtc7p63qJePrPVfJUpWcQhr33Uw+GpM= Subject key identifier: 2C:9E:2E:00:F1:04:F4:C3:D6:EE:9B:66:FB:5B:02:D6:11:59:5C:7C Authority key identifier: 06:DB:69:9D:19:1D:4B:02:89:91:0C:88:E9:9C:F9:4A:67:11:42:F5 Certificate issuer: /CN=06DB699D191D4B0289910C88E99CF94A671142F5 Certificate serial: 54DA05AF94303C8F516F74BA163334947559EC18 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/06DB699D191D4B0289910C88E99CF94A671142F5.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/2/06DB699D191D4B0289910C88E99CF94A671142F5.mft Manifest number: 45 Signing time: Tue 19 Aug 2025 22:41:28 +0000 Manifest this update: Tue 19 Aug 2025 22:36:28 +0000 Manifest next update: Thu 21 Aug 2025 01:43:28 +0000 Files and hashes: 1: 326130363a396634313a3a2f33322d3438203d3e20323135303835.roa (hash: Wzsm4f2LA5za568wbkiJepokvyBzVpcjorefCVCiEbM=) 2: 38332e3134322e33312e302f32342d3234203d3e20323135303835.roa (hash: K8xHXu8PBNylpSXaMswB01W3KM9JQNKdf8F+yOiMZUQ=) 3: 5A3F7819353CE0FD13B8FFCDCB8837ED0BF5915F.cer (hash: vr0IDnvMrQlAIKTPbmc9XgADtBREMeozkPpGVjOFGr4=) 4: 06DB699D191D4B0289910C88E99CF94A671142F5.crl (hash: BWryJjdxJLKCXzJMeXUG5v39do/xaY3DT8cvwWQ9p30=) 5: 326130363a396634313a613930303a3a2f34382d3438203d3e20323037363832.roa (hash: UqjWSUv2XiZdDsdQ0uOndREGc/szQ2JnxQlbZ2ADckI=) 6: 326130363a396634313a613930313a3a2f34382d3438203d3e20323035383338.roa (hash: TZFInP0XSpkR7gzjfw2R3ov4SaV+J0Kzbqc0lAbOzbM=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/2/06DB699D191D4B0289910C88E99CF94A671142F5.crl rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/2/06DB699D191D4B0289910C88E99CF94A671142F5.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/06DB699D191D4B0289910C88E99CF94A671142F5.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 21 Aug 2025 01:43:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:da:05:af:94:30:3c:8f:51:6f:74:ba:16:33:34:94:75:59:ec:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=06DB699D191D4B0289910C88E99CF94A671142F5 Validity Not Before: Aug 19 22:36:28 2025 GMT Not After : Aug 21 01:43:28 2025 GMT Subject: CN=2C9E2E00F104F4C3D6EE9B66FB5B02D611595C7C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:96:2e:9f:69:a0:48:f7:00:74:98:3e:ba:59: a3:f3:12:44:02:df:9c:76:0d:0f:c6:97:da:94:e9: 54:4a:b7:fd:74:9e:1b:f2:1b:47:85:56:b3:be:dc: 86:5d:b9:fd:67:89:00:88:04:c7:44:58:b4:18:be: 96:f4:99:6a:f7:ac:00:73:c9:e5:39:c6:00:36:b8: 1d:d2:63:d0:9b:14:0b:a7:4c:ad:8f:9e:de:a1:90: 32:db:35:8e:0a:52:82:37:10:58:93:13:78:11:27: a4:51:9b:91:ba:75:8c:c7:70:0f:f0:b7:91:40:6c: 18:ec:d2:ca:96:aa:61:84:5a:99:92:d9:05:34:05: 17:30:7f:3a:a2:c5:d0:b0:27:80:21:22:fa:12:e3: 04:87:ac:85:1c:87:91:ea:55:4e:8f:50:27:68:0e: e2:2c:5f:61:33:49:fb:77:8f:40:37:f3:73:8f:e0: 90:f3:4a:02:2f:7a:1c:73:6f:67:48:99:b4:6f:1d: b9:d0:ac:00:c5:5f:23:c5:a5:80:b6:86:de:43:e7: b2:00:8d:ce:4f:bb:c7:17:0d:72:1b:23:6f:9e:a0: ef:26:65:8d:a1:ca:60:38:c7:60:84:b4:4a:ad:32: 14:ef:80:db:f5:5d:f0:d4:68:62:09:80:3e:12:4c: ae:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:9E:2E:00:F1:04:F4:C3:D6:EE:9B:66:FB:5B:02:D6:11:59:5C:7C X509v3 Authority Key Identifier: keyid:06:DB:69:9D:19:1D:4B:02:89:91:0C:88:E9:9C:F9:4A:67:11:42:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/2/06DB699D191D4B0289910C88E99CF94A671142F5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/06DB699D191D4B0289910C88E99CF94A671142F5.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/2/06DB699D191D4B0289910C88E99CF94A671142F5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:67:c9:10:b9:a3:0f:49:d9:90:5d:17:ee:aa:42:16:93:60: bc:f2:cc:6c:b1:10:e5:bd:20:33:45:7e:c1:f1:b0:cc:95:4e: e5:a8:4f:db:66:aa:99:8e:86:45:5b:63:02:24:f0:69:09:18: 6d:4f:69:fe:a9:18:53:23:ff:ab:c0:39:2c:13:cc:70:ef:75: c2:04:b0:ea:ac:a3:27:8a:38:34:7b:3f:e0:fb:f3:1c:bf:47: d5:bc:66:fc:26:f4:8a:73:10:f1:8e:cc:ea:b7:1c:fc:ca:14: ba:f0:28:a0:71:9d:ed:56:65:fb:da:d7:e7:1f:0e:c2:7e:87: 7f:85:86:e0:17:63:9d:28:da:27:61:56:cb:5e:a7:2b:3f:1e: 01:43:72:6d:81:16:ea:08:47:64:7b:14:ac:34:e5:2e:62:65: 17:53:96:6c:b5:50:97:a9:14:d8:a1:18:d4:41:a1:22:57:66: 70:0b:6b:30:12:96:c6:5f:ac:c0:02:d7:9d:20:9d:d3:83:f8: f1:8f:5e:7d:d2:f5:e2:06:34:e3:f0:83:0d:67:29:db:7b:81: 06:9c:99:3c:9e:01:81:30:e2:ef:39:73:a2:56:d8:68:97:9d: 96:90:6f:90:93:9c:51:9d:2e:60:8f:8e:b2:bb:4e:fb:16:05: a4:1a:01:8e -----BEGIN CERTIFICATE----- MIIFbTCCBFWgAwIBAgIUVNoFr5QwPI9Rb3S6FjM0lHVZ7BgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDZEQjY5OUQxOTFENEIwMjg5OTEwQzg4RTk5Q0Y5NEE2 NzExNDJGNTAeFw0yNTA4MTkyMjM2MjhaFw0yNTA4MjEwMTQzMjhaMDMxMTAvBgNV BAMTKDJDOUUyRTAwRjEwNEY0QzNENkVFOUI2NkZCNUIwMkQ2MTE1OTVDN0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCMli6faaBI9wB0mD66WaPzEkQC 35x2DQ/Gl9qU6VRKt/10nhvyG0eFVrO+3IZduf1niQCIBMdEWLQYvpb0mWr3rABz yeU5xgA2uB3SY9CbFAunTK2Pnt6hkDLbNY4KUoI3EFiTE3gRJ6RRm5G6dYzHcA/w t5FAbBjs0sqWqmGEWpmS2QU0BRcwfzqixdCwJ4AhIvoS4wSHrIUch5HqVU6PUCdo DuIsX2EzSft3j0A383OP4JDzSgIvehxzb2dImbRvHbnQrADFXyPFpYC2ht5D57IA jc5Pu8cXDXIbI2+eoO8mZY2hymA4x2CEtEqtMhTvgNv1XfDUaGIJgD4STK7jAgMB AAGjggJ3MIICczAdBgNVHQ4EFgQULJ4uAPEE9MPW7ptm+1sC1hFZXHwwHwYDVR0j BBgwFoAUBttpnRkdSwKJkQyI6Zz5SmcRQvUwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMzAxMTk0NGQtN2ViMy00ZjYzLWExNTktY2ZmMDJjMDI2 YWJmLzIvMDZEQjY5OUQxOTFENEIwMjg5OTEwQzg4RTk5Q0Y5NEE2NzExNDJGNS5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1 YzkxYmUzZjlkLzcvMDZEQjY5OUQxOTFENEIwMjg5OTEwQzg4RTk5Q0Y5NEE2NzEx NDJGNS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8zMDExOTQ0ZC03 ZWIzLTRmNjMtYTE1OS1jZmYwMmMwMjZhYmYvMi8wNkRCNjk5RDE5MUQ0QjAyODk5 MTBDODhFOTlDRjk0QTY3MTE0MkY1Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKWfJELmjD0nZkF0X7qpC FpNgvPLMbLEQ5b0gM0V+wfGwzJVO5ahP22aqmY6GRVtjAiTwaQkYbU9p/qkYUyP/ q8A5LBPMcO91wgSw6qyjJ4o4NHs/4PvzHL9H1bxm/Cb0inMQ8Y7M6rcc/MoUuvAo oHGd7VZl+9rX5x8Own6Hf4WG4BdjnSjaJ2FWy16nKz8eAUNybYEW6ghHZHsUrDTl LmJlF1OWbLVQl6kU2KEY1EGhIldmcAtrMBKWxl+swALXnSCd04P48Y9efdL14gY0 4/CDDWcp23uBBpyZPJ4BgTDi7zlzolbYaJedlpBvkJOcUZ0uYI+OsrtO+xYFpBoB jg== -----END CERTIFICATE-----Generated at Wed Aug 20 18:55:27 2025 by rpki-client