$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/2/069FAF47FF48AEF4C98F5097074530A74C111AB9.mft File: 069FAF47FF48AEF4C98F5097074530A74C111AB9.mft (raw, json) Hash identifier: ODYYqc0hDKvjDyDJrqEkZ96owb50cOq3E6IfDzBvJhY= Subject key identifier: FF:EC:0A:66:73:8E:E5:36:46:39:5A:F0:0B:46:83:A1:20:AB:5D:FA Authority key identifier: 06:9F:AF:47:FF:48:AE:F4:C9:8F:50:97:07:45:30:A7:4C:11:1A:B9 Certificate issuer: /CN=069FAF47FF48AEF4C98F5097074530A74C111AB9 Certificate serial: 1BAB06A87DE405874F615A1517843B76FC55C127 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/069FAF47FF48AEF4C98F5097074530A74C111AB9.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/2/069FAF47FF48AEF4C98F5097074530A74C111AB9.mft Manifest number: 0485 Signing time: Sun 01 Mar 2026 06:13:31 +0000 Manifest this update: Sun 01 Mar 2026 06:08:31 +0000 Manifest next update: Mon 02 Mar 2026 08:43:31 +0000 Files and hashes: 1: 326130663a383563313a3335373a3a2f34382d3438203d3e20323135363137.roa (hash: mT7wNp38f47L+2MAFo1ah1wV4i3g7EwDZhqEAFbd0PU=) 2: 069FAF47FF48AEF4C98F5097074530A74C111AB9.crl (hash: 5p+2sroBz9bi2LLZ5aiMZtnalrKopZ6B4MaqbGpbBGE=) 3: 326130663a383563313a3336333a3a2f34382d3438203d3e20323135363137.roa (hash: nWVf9Vd1/pxv69WaHKM1e/8vQ/po0I7aidbKnzISSgo=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/2/069FAF47FF48AEF4C98F5097074530A74C111AB9.crl rsync://rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/2/069FAF47FF48AEF4C98F5097074530A74C111AB9.mft rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/069FAF47FF48AEF4C98F5097074530A74C111AB9.cer rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Mar 2026 08:43:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:ab:06:a8:7d:e4:05:87:4f:61:5a:15:17:84:3b:76:fc:55:c1:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=069FAF47FF48AEF4C98F5097074530A74C111AB9 Validity Not Before: Mar 1 06:08:31 2026 GMT Not After : Mar 2 08:43:31 2026 GMT Subject: CN=FFEC0A66738EE53646395AF00B4683A120AB5DFA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:dd:c7:85:8b:23:72:44:6f:88:56:fc:bc:17: 50:ba:9b:c5:dd:c2:a1:da:85:9e:bd:38:af:15:73: 37:a8:60:d5:1b:03:c0:fe:0f:60:5d:c6:eb:4a:8c: f4:ec:17:2d:26:59:3e:c1:f4:84:3b:35:a4:f3:0d: 51:fd:a8:04:2b:db:03:d7:22:94:23:f4:be:3c:a1: 81:5e:d8:86:f6:80:3b:f9:29:6d:81:ae:5d:46:50: 50:ab:01:4f:f6:7d:19:de:72:50:38:80:29:eb:be: a8:5b:78:04:e5:4d:1e:da:45:17:2c:33:35:0f:f8: 31:00:48:b2:53:11:26:5b:9b:b8:3e:55:ee:bc:8d: 97:6a:1d:c7:00:2f:f8:24:1e:b3:36:57:73:0f:f7: 93:b7:7b:b1:ea:ca:8a:2c:40:64:94:51:8b:0d:61: 57:f7:f1:22:8c:8e:c4:1b:0c:f1:29:5b:a2:93:8e: 59:30:ea:83:b1:0c:b3:b3:d8:bb:b4:04:24:18:7d: 76:8e:d1:b7:72:d1:ea:30:fa:c6:21:76:e0:15:63: 3a:a4:8d:38:6a:0b:6c:5e:27:68:24:ba:be:bb:c6: 37:bb:bc:a2:5b:8e:64:dd:2e:5d:d3:6d:59:99:b9: 71:1e:cd:ab:f2:97:e1:c7:29:4e:6e:db:f1:c5:2a: 07:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:EC:0A:66:73:8E:E5:36:46:39:5A:F0:0B:46:83:A1:20:AB:5D:FA X509v3 Authority Key Identifier: keyid:06:9F:AF:47:FF:48:AE:F4:C9:8F:50:97:07:45:30:A7:4C:11:1A:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/2/069FAF47FF48AEF4C98F5097074530A74C111AB9.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/069FAF47FF48AEF4C98F5097074530A74C111AB9.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/2/069FAF47FF48AEF4C98F5097074530A74C111AB9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:17:96:8e:21:5a:08:00:ed:2c:e6:1b:a7:1b:8a:e9:6b:53: 0a:02:d2:c2:ba:9d:be:d9:28:ce:12:e4:bd:74:53:53:35:d1: d4:aa:9e:7e:d1:b4:0d:30:15:5d:c7:1a:42:c1:88:a6:3c:7f: 42:2c:54:ba:dc:2f:f0:b5:fb:ec:3f:8b:dc:17:f8:d2:78:51: c7:f2:fb:25:61:f5:44:5c:3f:5d:1e:f1:2b:24:b5:b9:f9:d9: 09:c7:5e:55:3c:15:e3:2c:93:65:f2:28:fb:6b:8b:fb:79:8c: dc:59:84:dd:27:a6:75:3d:95:e9:cb:37:7e:cc:45:a5:65:91: 66:a4:a5:6d:76:9a:e1:ed:bb:86:9c:47:4c:25:fd:0b:ff:fe: 5a:58:9b:0e:5e:c6:c7:12:0b:7d:a8:1a:f7:01:46:7c:f0:58: 02:b8:34:ba:bb:4e:94:93:fd:a1:20:57:91:41:63:41:13:8b: 88:67:39:63:79:ef:2e:ee:79:f0:15:62:88:42:96:a9:3e:3f: ff:fb:0c:ed:89:0e:10:5e:39:ea:9e:66:fc:e4:4f:64:96:82: d0:f8:c2:7a:4b:fe:b9:e4:77:72:a9:51:3a:05:b5:84:84:67: 30:e7:72:3d:94:e7:45:39:a3:c9:04:a0:21:d5:61:94:2c:a3: 64:fc:f9:7c -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUG6sGqH3kBYdPYVoVF4Q7dvxVwScwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDY5RkFGNDdGRjQ4QUVGNEM5OEY1MDk3MDc0NTMwQTc0 QzExMUFCOTAeFw0yNjAzMDEwNjA4MzFaFw0yNjAzMDIwODQzMzFaMDMxMTAvBgNV BAMTKEZGRUMwQTY2NzM4RUU1MzY0NjM5NUFGMDBCNDY4M0ExMjBBQjVERkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCz3ceFiyNyRG+IVvy8F1C6m8Xd wqHahZ69OK8VczeoYNUbA8D+D2BdxutKjPTsFy0mWT7B9IQ7NaTzDVH9qAQr2wPX IpQj9L48oYFe2Ib2gDv5KW2Brl1GUFCrAU/2fRneclA4gCnrvqhbeATlTR7aRRcs MzUP+DEASLJTESZbm7g+Ve68jZdqHccAL/gkHrM2V3MP95O3e7HqyoosQGSUUYsN YVf38SKMjsQbDPEpW6KTjlkw6oOxDLOz2Lu0BCQYfXaO0bdy0eow+sYhduAVYzqk jThqC2xeJ2gkur67xje7vKJbjmTdLl3TbVmZuXEezavyl+HHKU5u2/HFKgcdAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQU/+wKZnOO5TZGOVrwC0aDoSCrXfowHwYDVR0j BBgwFoAUBp+vR/9IrvTJj1CXB0Uwp0wRGrkwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMjNkNWY2ODItYjUxYi00ODEyLWI4YjEtNDMwZTM4Njgz NzQ4LzIvMDY5RkFGNDdGRjQ4QUVGNEM5OEY1MDk3MDc0NTMwQTc0QzExMUFCOS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84NGQ1MTgxMC0xOTg3LTQ3 MDEtOGYxZi04NDI1MTExOTY0ZjQvMC8wNjlGQUY0N0ZGNDhBRUY0Qzk4RjUwOTcw NzQ1MzBBNzRDMTExQUI5LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzIzZDVmNjgyLWI1MWItNDgxMi1iOGIxLTQzMGUzODY4Mzc0OC8yLzA2OUZBRjQ3 RkY0OEFFRjRDOThGNTA5NzA3NDUzMEE3NEMxMTFBQjkubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCKF5aO IVoIAO0s5hunG4rpa1MKAtLCup2+2SjOEuS9dFNTNdHUqp5+0bQNMBVdxxpCwYim PH9CLFS63C/wtfvsP4vcF/jSeFHH8vslYfVEXD9dHvErJLW5+dkJx15VPBXjLJNl 8ij7a4v7eYzcWYTdJ6Z1PZXpyzd+zEWlZZFmpKVtdprh7buGnEdMJf0L//5aWJsO XsbHEgt9qBr3AUZ88FgCuDS6u06Uk/2hIFeRQWNBE4uIZzljee8u7nnwFWKIQpap Pj//+wztiQ4QXjnqnmb85E9kloLQ+MJ6S/655HdyqVE6BbWEhGcw53I9lOdFOaPJ BKAh1WGULKNk/Pl8 -----END CERTIFICATE-----Generated at Sun Mar 1 20:57:34 2026 by rpki-client