$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/2/069FAF47FF48AEF4C98F5097074530A74C111AB9.mft File: 069FAF47FF48AEF4C98F5097074530A74C111AB9.mft (raw, json) Hash identifier: gEVwzMM8PHBN8KvPq+/zf57QM8v0KCJU8WiK/k3Fst0= Subject key identifier: A3:91:2E:9F:9A:F5:05:26:0C:55:E8:7D:4E:2E:4C:4E:32:38:A4:C9 Authority key identifier: 06:9F:AF:47:FF:48:AE:F4:C9:8F:50:97:07:45:30:A7:4C:11:1A:B9 Certificate issuer: /CN=069FAF47FF48AEF4C98F5097074530A74C111AB9 Certificate serial: 7A4B7A38ACC0A61278D0D27D9D6BA1D56BEE589D Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/069FAF47FF48AEF4C98F5097074530A74C111AB9.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/2/069FAF47FF48AEF4C98F5097074530A74C111AB9.mft Manifest number: 0326 Signing time: Mon 16 Jun 2025 17:24:51 +0000 Manifest this update: Mon 16 Jun 2025 17:19:51 +0000 Manifest next update: Tue 17 Jun 2025 20:55:51 +0000 Files and hashes: 1: 326130663a383563313a3335373a3a2f34382d3438203d3e20323135363137.roa (hash: 0B/fHqDaAtnHXiIonhpxQ7ujnJI7VSnPxGbabzcBFIA=) 2: 069FAF47FF48AEF4C98F5097074530A74C111AB9.crl (hash: 8IG5wU2A5lr9ZorsmWTsRIvXxp7OZpIY/XouP197+h4=) 3: 326130663a383563313a3335313a3a2f34382d3438203d3e20343031333836.roa (hash: 7mR3vQrcbHUSwKtu57zMbBmzQiQeIJwUP4b5xp+7MO0=) 4: 326130663a383563313a3336333a3a2f34382d3438203d3e20323135363137.roa (hash: G15mowLoM7Eub0vLuxgC+jxtFArNOkVyDHG13blFH8s=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/2/069FAF47FF48AEF4C98F5097074530A74C111AB9.crl rsync://rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/2/069FAF47FF48AEF4C98F5097074530A74C111AB9.mft rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/069FAF47FF48AEF4C98F5097074530A74C111AB9.cer rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 17 Jun 2025 14:25:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:4b:7a:38:ac:c0:a6:12:78:d0:d2:7d:9d:6b:a1:d5:6b:ee:58:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=069FAF47FF48AEF4C98F5097074530A74C111AB9 Validity Not Before: Jun 16 17:19:51 2025 GMT Not After : Jun 17 20:55:51 2025 GMT Subject: CN=A3912E9F9AF505260C55E87D4E2E4C4E3238A4C9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:f6:de:46:57:d1:87:85:1d:be:d4:0c:5b:76: 12:c2:8a:3b:f1:d7:79:16:41:07:b8:0d:66:45:af: 86:64:61:da:2f:8d:c9:13:61:03:63:df:5f:39:a5: de:f6:46:f0:06:22:1e:b5:6d:7b:56:df:eb:e7:b9: a6:59:be:3a:1d:7f:d6:dc:a2:75:ba:48:d4:80:04: 99:a8:cc:db:f9:cf:44:e9:df:2a:11:84:97:f9:cd: 3d:25:75:91:93:d6:ff:fc:ee:93:27:97:f8:99:9d: c9:47:9a:02:ba:38:55:ff:ce:80:e9:0b:3c:10:52: 14:5d:6d:6e:3e:14:4f:2a:2f:15:bc:05:86:18:f3: fd:17:a4:c7:85:8f:fb:c9:9f:1d:08:b3:0d:5b:06: eb:9f:17:29:96:5e:55:bb:13:44:32:e3:32:ff:8e: 92:8a:8f:90:16:ef:fb:6c:ce:92:cc:47:18:55:3e: 13:96:ce:5b:06:c2:18:9a:05:4a:a8:ce:17:2c:d6: 36:c9:4e:04:a0:d6:7e:5b:44:ee:5a:55:c1:8b:e3: c1:76:0b:a1:92:4f:b1:0f:fc:96:72:21:05:8b:72: 43:b5:36:66:d4:d3:84:f6:53:0c:b1:79:bb:7f:b1: 9f:aa:63:9c:89:ac:a6:5e:96:84:44:e6:bf:03:41: 9a:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:91:2E:9F:9A:F5:05:26:0C:55:E8:7D:4E:2E:4C:4E:32:38:A4:C9 X509v3 Authority Key Identifier: keyid:06:9F:AF:47:FF:48:AE:F4:C9:8F:50:97:07:45:30:A7:4C:11:1A:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/2/069FAF47FF48AEF4C98F5097074530A74C111AB9.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/069FAF47FF48AEF4C98F5097074530A74C111AB9.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/2/069FAF47FF48AEF4C98F5097074530A74C111AB9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:2b:7f:6f:ba:86:1a:ed:ee:32:5f:19:ec:b5:49:b4:d2:b4: f9:4e:9d:3d:01:12:08:d0:72:2d:b1:86:a1:b3:3e:23:40:d4: b2:4b:f0:4a:ed:d7:8e:2e:6b:84:8b:d0:78:b7:ec:d3:d8:10: 86:7b:bb:41:96:63:5f:2f:70:72:16:57:b0:1b:ec:75:55:95: b8:37:96:6a:48:8f:39:51:4e:c2:0a:20:76:9a:9d:e8:53:06: 4f:3e:cc:7b:72:d0:d5:49:41:dd:4d:45:12:47:68:23:61:e4: 96:f2:68:6d:48:ff:14:a5:43:13:f1:3a:46:5f:43:b9:2f:c4: 21:4a:a7:a0:c2:12:49:7f:e3:be:b4:33:fe:2d:2f:ee:b4:6a: 7d:fd:b8:f9:d4:04:7b:fb:8e:02:69:d4:95:53:f5:e9:4e:8c: c9:5d:07:e7:05:28:8b:14:4f:00:ec:9c:b1:fb:27:e1:9c:98: c3:42:c3:29:a9:c6:0c:10:57:75:33:90:3a:2d:bb:dc:9e:77: ee:4e:99:4b:ec:09:78:15:d3:33:7c:74:97:1c:72:61:51:50: 69:15:a5:28:4b:08:38:a4:81:ce:8d:e7:86:3a:fc:96:c9:29: 13:f7:eb:de:c1:28:e0:76:4e:f1:46:69:ac:2d:ea:ce:12:d4: 82:03:40:8d -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUekt6OKzAphJ40NJ9nWuh1WvuWJ0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDY5RkFGNDdGRjQ4QUVGNEM5OEY1MDk3MDc0NTMwQTc0 QzExMUFCOTAeFw0yNTA2MTYxNzE5NTFaFw0yNTA2MTcyMDU1NTFaMDMxMTAvBgNV BAMTKEEzOTEyRTlGOUFGNTA1MjYwQzU1RTg3RDRFMkU0QzRFMzIzOEE0QzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCx9t5GV9GHhR2+1AxbdhLCijvx 13kWQQe4DWZFr4ZkYdovjckTYQNj3185pd72RvAGIh61bXtW3+vnuaZZvjodf9bc onW6SNSABJmozNv5z0Tp3yoRhJf5zT0ldZGT1v/87pMnl/iZnclHmgK6OFX/zoDp CzwQUhRdbW4+FE8qLxW8BYYY8/0XpMeFj/vJnx0Isw1bBuufFymWXlW7E0Qy4zL/ jpKKj5AW7/tszpLMRxhVPhOWzlsGwhiaBUqozhcs1jbJTgSg1n5bRO5aVcGL48F2 C6GST7EP/JZyIQWLckO1NmbU04T2Uwyxebt/sZ+qY5yJrKZeloRE5r8DQZr5AgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUo5Eun5r1BSYMVeh9Ti5MTjI4pMkwHwYDVR0j BBgwFoAUBp+vR/9IrvTJj1CXB0Uwp0wRGrkwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMjNkNWY2ODItYjUxYi00ODEyLWI4YjEtNDMwZTM4Njgz NzQ4LzIvMDY5RkFGNDdGRjQ4QUVGNEM5OEY1MDk3MDc0NTMwQTc0QzExMUFCOS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84NGQ1MTgxMC0xOTg3LTQ3 MDEtOGYxZi04NDI1MTExOTY0ZjQvMC8wNjlGQUY0N0ZGNDhBRUY0Qzk4RjUwOTcw NzQ1MzBBNzRDMTExQUI5LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzIzZDVmNjgyLWI1MWItNDgxMi1iOGIxLTQzMGUzODY4Mzc0OC8yLzA2OUZBRjQ3 RkY0OEFFRjRDOThGNTA5NzA3NDUzMEE3NEMxMTFBQjkubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBTK39v uoYa7e4yXxnstUm00rT5Tp09ARII0HItsYahsz4jQNSyS/BK7deOLmuEi9B4t+zT 2BCGe7tBlmNfL3ByFlewG+x1VZW4N5ZqSI85UU7CCiB2mp3oUwZPPsx7ctDVSUHd TUUSR2gjYeSW8mhtSP8UpUMT8TpGX0O5L8QhSqegwhJJf+O+tDP+LS/utGp9/bj5 1AR7+44CadSVU/XpTozJXQfnBSiLFE8A7Jyx+yfhnJjDQsMpqcYMEFd1M5A6Lbvc nnfuTplL7Al4FdMzfHSXHHJhUVBpFaUoSwg4pIHOjeeGOvyWySkT9+vewSjgdk7x RmmsLerOEtSCA0CN -----END CERTIFICATE-----Generated at Tue Jun 17 00:14:37 2025 by rpki-client