$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/2/069FAF47FF48AEF4C98F5097074530A74C111AB9.mft File: 069FAF47FF48AEF4C98F5097074530A74C111AB9.mft (raw, json) Hash identifier: DGyFqf57ytAwceugFc8P4w3udc4jz9cZDG7c0AURBBo= Subject key identifier: EE:F7:D3:E3:64:31:A2:36:A1:12:D7:5A:0B:F0:C5:87:D6:6C:19:2E Authority key identifier: 06:9F:AF:47:FF:48:AE:F4:C9:8F:50:97:07:45:30:A7:4C:11:1A:B9 Certificate issuer: /CN=069FAF47FF48AEF4C98F5097074530A74C111AB9 Certificate serial: 44FF93980BC0646DEC6CD31C47A4441DA075EF20 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/069FAF47FF48AEF4C98F5097074530A74C111AB9.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/2/069FAF47FF48AEF4C98F5097074530A74C111AB9.mft Manifest number: 05BF Signing time: Sat 19 Sep 2026 23:01:00 +0000 Manifest this update: Sat 19 Sep 2026 22:56:00 +0000 Manifest next update: Sun 20 Sep 2026 23:23:00 +0000 Files and hashes: 1: 069FAF47FF48AEF4C98F5097074530A74C111AB9.crl (hash: cpuOjUMDoCvetJhreLt/rcKMWEd0ejktLrnjfgP5DY8=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/2/069FAF47FF48AEF4C98F5097074530A74C111AB9.crl rsync://rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/2/069FAF47FF48AEF4C98F5097074530A74C111AB9.mft rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/069FAF47FF48AEF4C98F5097074530A74C111AB9.cer rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 20 Sep 2026 23:23:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:ff:93:98:0b:c0:64:6d:ec:6c:d3:1c:47:a4:44:1d:a0:75:ef:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=069FAF47FF48AEF4C98F5097074530A74C111AB9 Validity Not Before: Sep 19 22:56:00 2026 GMT Not After : Sep 20 23:23:00 2026 GMT Subject: CN=EEF7D3E36431A236A112D75A0BF0C587D66C192E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:4c:08:54:d3:b4:49:99:79:fe:67:3f:d1:bd: 92:53:f7:f0:0f:03:38:43:69:73:21:03:de:0b:4c: b6:e6:96:4d:f3:74:a6:02:bc:d8:b1:47:62:7e:ae: 55:4f:01:d1:91:3c:9b:83:36:83:5d:f8:03:6b:3d: 76:5a:ea:6b:4f:bf:c1:6e:1e:5a:dd:00:6f:cb:7b: af:7a:20:37:bc:96:00:b1:30:d9:d4:8a:4f:56:34: 2e:f4:2e:dd:35:c2:77:8c:12:34:f4:ef:13:6c:dd: 14:92:33:db:de:2e:58:4a:37:07:d4:16:60:29:28: 21:44:ff:16:61:3a:55:97:b2:0f:d7:7a:8c:2b:a0: ca:35:08:27:65:35:91:f5:4e:11:66:8f:36:9c:68: 10:31:49:e3:eb:f3:af:cc:63:69:57:81:2f:d2:f6: d0:df:c2:6b:25:41:51:c8:10:bf:e2:8b:eb:1f:e9: 71:d1:86:58:9e:0f:45:da:48:f5:a3:cf:44:6e:6f: 39:f1:f4:54:01:1c:4d:1b:10:e3:6c:37:80:18:e6: 2d:9c:69:ed:e6:66:ff:cc:fa:de:fb:76:72:ea:c2: b7:cf:af:af:2f:f3:f8:86:45:61:ea:52:32:15:84: c9:44:84:74:ce:f6:53:54:9d:1c:bf:a9:5f:0c:65: d5:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:F7:D3:E3:64:31:A2:36:A1:12:D7:5A:0B:F0:C5:87:D6:6C:19:2E X509v3 Authority Key Identifier: keyid:06:9F:AF:47:FF:48:AE:F4:C9:8F:50:97:07:45:30:A7:4C:11:1A:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/2/069FAF47FF48AEF4C98F5097074530A74C111AB9.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/069FAF47FF48AEF4C98F5097074530A74C111AB9.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/2/069FAF47FF48AEF4C98F5097074530A74C111AB9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:61:73:df:f2:d1:8c:c9:7d:91:52:5d:e0:ee:ef:93:62:b4: 4e:cc:0f:1e:4f:c9:bf:e1:37:0d:f0:11:6e:61:c2:b8:3b:91: 33:57:2a:a5:aa:c6:75:14:0e:c5:f1:8a:63:cc:04:3e:db:46: e7:50:e9:28:00:a7:9e:f8:49:82:09:66:3c:d3:0a:29:83:ce: d3:8a:0f:d8:cf:4f:76:d7:16:79:73:b6:01:f9:75:bb:4c:43: 5e:3a:b9:f4:c4:5c:0c:84:8a:82:ba:5a:df:62:48:82:d1:8f: 13:db:78:b7:e1:59:c4:e3:c1:35:96:9a:f0:2f:a1:22:73:1d: 07:28:16:7a:89:ee:38:fa:65:61:96:da:00:b3:33:2a:74:3f: a6:5a:c1:f5:a0:a3:48:e1:5c:5d:37:32:3c:f5:b2:22:95:22: e7:37:a3:04:55:09:51:e6:d9:d5:51:92:18:74:8e:f0:38:e0: 85:0b:a5:9e:eb:1d:18:dd:0a:07:27:ab:a7:73:82:d1:85:52: b0:9e:d1:dd:c2:e8:21:12:b6:da:44:7b:ec:48:e9:41:ee:3a: 45:22:3e:86:29:fc:48:aa:fa:54:4e:ce:60:68:27:8a:74:f7: df:20:4b:a6:29:cb:8c:25:17:c3:14:a9:c6:aa:97:51:44:5c: f5:b8:93:3e -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIURP+TmAvAZG3sbNMcR6REHaB17yAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDY5RkFGNDdGRjQ4QUVGNEM5OEY1MDk3MDc0NTMwQTc0 QzExMUFCOTAeFw0yNjA5MTkyMjU2MDBaFw0yNjA5MjAyMzIzMDBaMDMxMTAvBgNV BAMTKEVFRjdEM0UzNjQzMUEyMzZBMTEyRDc1QTBCRjBDNTg3RDY2QzE5MkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDwTAhU07RJmXn+Zz/RvZJT9/AP AzhDaXMhA94LTLbmlk3zdKYCvNixR2J+rlVPAdGRPJuDNoNd+ANrPXZa6mtPv8Fu HlrdAG/Le696IDe8lgCxMNnUik9WNC70Lt01wneMEjT07xNs3RSSM9veLlhKNwfU FmApKCFE/xZhOlWXsg/XeowroMo1CCdlNZH1ThFmjzacaBAxSePr86/MY2lXgS/S 9tDfwmslQVHIEL/ii+sf6XHRhlieD0XaSPWjz0Rubznx9FQBHE0bEONsN4AY5i2c ae3mZv/M+t77dnLqwrfPr68v8/iGRWHqUjIVhMlEhHTO9lNUnRy/qV8MZdVVAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQU7vfT42QxojahEtdaC/DFh9ZsGS4wHwYDVR0j BBgwFoAUBp+vR/9IrvTJj1CXB0Uwp0wRGrkwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMjNkNWY2ODItYjUxYi00ODEyLWI4YjEtNDMwZTM4Njgz NzQ4LzIvMDY5RkFGNDdGRjQ4QUVGNEM5OEY1MDk3MDc0NTMwQTc0QzExMUFCOS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84NGQ1MTgxMC0xOTg3LTQ3 MDEtOGYxZi04NDI1MTExOTY0ZjQvMC8wNjlGQUY0N0ZGNDhBRUY0Qzk4RjUwOTcw NzQ1MzBBNzRDMTExQUI5LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzIzZDVmNjgyLWI1MWItNDgxMi1iOGIxLTQzMGUzODY4Mzc0OC8yLzA2OUZBRjQ3 RkY0OEFFRjRDOThGNTA5NzA3NDUzMEE3NEMxMTFBQjkubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQB8YXPf 8tGMyX2RUl3g7u+TYrROzA8eT8m/4TcN8BFuYcK4O5EzVyqlqsZ1FA7F8YpjzAQ+ 20bnUOkoAKee+EmCCWY80wopg87Tig/Yz0921xZ5c7YB+XW7TENeOrn0xFwMhIqC ulrfYkiC0Y8T23i34VnE48E1lprwL6Eicx0HKBZ6ie44+mVhltoAszMqdD+mWsH1 oKNI4VxdNzI89bIilSLnN6MEVQlR5tnVUZIYdI7wOOCFC6We6x0Y3QoHJ6unc4LR hVKwntHdwughErbaRHvsSOlB7jpFIj6GKfxIqvpUTs5gaCeKdPffIEumKcuMJRfD FKnGqpdRRFz1uJM+ -----END CERTIFICATE-----Generated at Sun Sep 20 13:49:49 2026 by rpki-client