$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/2/069FAF47FF48AEF4C98F5097074530A74C111AB9.mft File: 069FAF47FF48AEF4C98F5097074530A74C111AB9.mft (raw, json) Hash identifier: /o949XF8EPJCAdEXkbO9L05d0T8tMg6tNIfpHSLpE2M= Subject key identifier: 5D:79:55:7C:A9:34:FE:B6:D2:83:20:33:27:0A:E4:00:7D:E6:2F:F8 Authority key identifier: 06:9F:AF:47:FF:48:AE:F4:C9:8F:50:97:07:45:30:A7:4C:11:1A:B9 Certificate issuer: /CN=069FAF47FF48AEF4C98F5097074530A74C111AB9 Certificate serial: 512E4817DC8DDC56835F6F06133109AA708F5374 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/069FAF47FF48AEF4C98F5097074530A74C111AB9.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/2/069FAF47FF48AEF4C98F5097074530A74C111AB9.mft Manifest number: 03E1 Signing time: Wed 05 Nov 2025 00:21:20 +0000 Manifest this update: Wed 05 Nov 2025 00:16:20 +0000 Manifest next update: Thu 06 Nov 2025 03:32:20 +0000 Files and hashes: 1: 069FAF47FF48AEF4C98F5097074530A74C111AB9.crl (hash: wNapTQPw2gLNb4bVgyBBO0tVtTf80l+Xy+2jVg57GgY=) 2: 326130663a383563313a3335373a3a2f34382d3438203d3e20323135363137.roa (hash: 0B/fHqDaAtnHXiIonhpxQ7ujnJI7VSnPxGbabzcBFIA=) 3: 326130663a383563313a3335313a3a2f34382d3438203d3e20343031333836.roa (hash: pdFac+QI0R/UPdzS1q2a9ExUPSLxlAAabS/RPyMDKJ0=) 4: 326130663a383563313a3336333a3a2f34382d3438203d3e20323135363137.roa (hash: G15mowLoM7Eub0vLuxgC+jxtFArNOkVyDHG13blFH8s=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/2/069FAF47FF48AEF4C98F5097074530A74C111AB9.crl rsync://rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/2/069FAF47FF48AEF4C98F5097074530A74C111AB9.mft rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/069FAF47FF48AEF4C98F5097074530A74C111AB9.cer rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 05 Nov 2025 22:37:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:2e:48:17:dc:8d:dc:56:83:5f:6f:06:13:31:09:aa:70:8f:53:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=069FAF47FF48AEF4C98F5097074530A74C111AB9 Validity Not Before: Nov 5 00:16:20 2025 GMT Not After : Nov 6 03:32:20 2025 GMT Subject: CN=5D79557CA934FEB6D2832033270AE4007DE62FF8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:fc:28:75:91:9c:e6:93:7e:63:a0:00:54:92: 4b:d5:4d:20:90:37:12:aa:53:f8:69:66:40:2a:a4: 02:69:92:8e:62:98:fa:ca:02:5b:8a:55:b6:ee:4c: 99:3d:6c:98:d3:57:f0:23:28:9a:56:69:38:83:2d: 95:ca:ab:86:56:38:4d:f9:c1:c1:b6:bb:f2:98:32: 83:0a:3c:7b:37:e9:74:03:2a:eb:96:5d:ca:4d:75: 7c:40:81:7b:a2:b5:40:49:c1:19:3f:8d:dd:3b:65: c1:4f:6d:59:65:35:e1:35:c9:f2:fd:4a:2f:60:23: 4f:4b:8f:2a:a8:13:40:2b:1a:31:1b:bc:f2:d1:fd: 68:b6:9e:af:85:cb:b1:bf:ca:5e:d3:bc:fe:90:32: 9e:c3:91:33:e3:e6:58:23:94:a4:61:14:6a:6a:8a: 07:2c:52:29:d2:03:ad:69:e6:d7:a1:ad:78:97:ae: 85:ed:1b:59:85:46:f3:ad:df:5e:53:3d:38:3a:47: 1f:6c:26:51:93:fd:e3:73:f5:a9:0f:84:ef:07:11: f5:7e:67:33:3a:ee:32:df:a0:ed:13:f8:1f:6e:aa: 8c:62:1e:c4:5f:71:95:dd:6e:d6:88:9c:e5:c8:1e: 5a:ad:1b:de:e1:84:31:9c:89:8c:06:16:3d:d9:e3: 10:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:79:55:7C:A9:34:FE:B6:D2:83:20:33:27:0A:E4:00:7D:E6:2F:F8 X509v3 Authority Key Identifier: keyid:06:9F:AF:47:FF:48:AE:F4:C9:8F:50:97:07:45:30:A7:4C:11:1A:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/2/069FAF47FF48AEF4C98F5097074530A74C111AB9.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/069FAF47FF48AEF4C98F5097074530A74C111AB9.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/2/069FAF47FF48AEF4C98F5097074530A74C111AB9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:21:9f:5d:f0:f1:cd:9b:5d:58:2d:9f:f1:0a:fe:2c:47:ab: 62:0f:98:54:7c:f6:9c:b2:5d:77:32:a3:f5:d5:b7:d0:db:a8: c8:28:cb:30:fb:f7:2e:c4:04:11:86:fa:cb:75:dc:0c:5a:55: ef:2a:c4:73:70:a2:39:10:e0:b7:9b:86:ac:57:3c:28:ab:0f: 83:af:18:1c:71:8a:1f:c8:d8:77:91:72:12:3f:68:63:ec:33: a4:de:e5:c0:04:85:d7:02:88:b5:fa:93:c4:1a:13:e5:cf:0d: 3f:00:67:42:66:42:1a:c6:87:82:ce:c6:d0:3e:5a:cd:7d:b8: 72:f5:80:66:e4:81:ec:5f:e2:29:d9:1c:ce:e8:80:3f:d1:5d: 53:bb:67:2c:e0:64:d4:d2:f7:e3:8c:f8:9e:20:bd:26:03:32: e1:7f:6b:44:81:6d:96:50:d5:ac:a0:69:17:63:7d:4a:8b:a1: 76:a7:d3:1e:1d:6a:f0:df:99:a1:67:39:20:40:97:35:e5:94: 38:db:3e:08:46:ac:93:aa:01:2d:22:0b:ed:fe:c3:31:32:ec: 79:65:51:2f:79:c0:c6:ce:a8:87:51:b5:aa:a6:6c:35:82:5b: b9:0e:ae:7b:25:10:9d:2e:cc:5e:19:69:e2:f8:80:9b:35:ff: a3:f2:43:a3 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUUS5IF9yN3FaDX28GEzEJqnCPU3QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDY5RkFGNDdGRjQ4QUVGNEM5OEY1MDk3MDc0NTMwQTc0 QzExMUFCOTAeFw0yNTExMDUwMDE2MjBaFw0yNTExMDYwMzMyMjBaMDMxMTAvBgNV BAMTKDVENzk1NTdDQTkzNEZFQjZEMjgzMjAzMzI3MEFFNDAwN0RFNjJGRjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDU/Ch1kZzmk35joABUkkvVTSCQ NxKqU/hpZkAqpAJpko5imPrKAluKVbbuTJk9bJjTV/AjKJpWaTiDLZXKq4ZWOE35 wcG2u/KYMoMKPHs36XQDKuuWXcpNdXxAgXuitUBJwRk/jd07ZcFPbVllNeE1yfL9 Si9gI09LjyqoE0ArGjEbvPLR/Wi2nq+Fy7G/yl7TvP6QMp7DkTPj5lgjlKRhFGpq igcsUinSA61p5tehrXiXroXtG1mFRvOt315TPTg6Rx9sJlGT/eNz9akPhO8HEfV+ ZzM67jLfoO0T+B9uqoxiHsRfcZXdbtaInOXIHlqtG97hhDGciYwGFj3Z4xAxAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUXXlVfKk0/rbSgyAzJwrkAH3mL/gwHwYDVR0j BBgwFoAUBp+vR/9IrvTJj1CXB0Uwp0wRGrkwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMjNkNWY2ODItYjUxYi00ODEyLWI4YjEtNDMwZTM4Njgz NzQ4LzIvMDY5RkFGNDdGRjQ4QUVGNEM5OEY1MDk3MDc0NTMwQTc0QzExMUFCOS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84NGQ1MTgxMC0xOTg3LTQ3 MDEtOGYxZi04NDI1MTExOTY0ZjQvMC8wNjlGQUY0N0ZGNDhBRUY0Qzk4RjUwOTcw NzQ1MzBBNzRDMTExQUI5LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzIzZDVmNjgyLWI1MWItNDgxMi1iOGIxLTQzMGUzODY4Mzc0OC8yLzA2OUZBRjQ3 RkY0OEFFRjRDOThGNTA5NzA3NDUzMEE3NEMxMTFBQjkubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQB6IZ9d 8PHNm11YLZ/xCv4sR6tiD5hUfPacsl13MqP11bfQ26jIKMsw+/cuxAQRhvrLddwM WlXvKsRzcKI5EOC3m4asVzwoqw+DrxgccYofyNh3kXISP2hj7DOk3uXABIXXAoi1 +pPEGhPlzw0/AGdCZkIaxoeCzsbQPlrNfbhy9YBm5IHsX+Ip2RzO6IA/0V1Tu2cs 4GTU0vfjjPieIL0mAzLhf2tEgW2WUNWsoGkXY31Ki6F2p9MeHWrw35mhZzkgQJc1 5ZQ42z4IRqyTqgEtIgvt/sMxMux5ZVEvecDGzqiHUbWqpmw1glu5Dq57JRCdLsxe GWni+ICbNf+j8kOj -----END CERTIFICATE-----Generated at Wed Nov 5 06:06:46 2025 by rpki-client