$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/2/069FAF47FF48AEF4C98F5097074530A74C111AB9.mft File: 069FAF47FF48AEF4C98F5097074530A74C111AB9.mft (raw, json) Hash identifier: 4QfNd7fyBYTVVa6dIc3jKjD0h0WXBaMbLs9KWmqI7/w= Subject key identifier: 2E:8E:26:A4:10:A3:CC:62:B6:A2:32:C9:6F:14:DE:12:28:94:A8:38 Authority key identifier: 06:9F:AF:47:FF:48:AE:F4:C9:8F:50:97:07:45:30:A7:4C:11:1A:B9 Certificate issuer: /CN=069FAF47FF48AEF4C98F5097074530A74C111AB9 Certificate serial: 71BCB858774993E1F0C8D71B4C37FCC41B8C9E6D Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/069FAF47FF48AEF4C98F5097074530A74C111AB9.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/2/069FAF47FF48AEF4C98F5097074530A74C111AB9.mft Manifest number: 0364 Signing time: Wed 06 Aug 2025 09:28:05 +0000 Manifest this update: Wed 06 Aug 2025 09:23:05 +0000 Manifest next update: Thu 07 Aug 2025 11:00:05 +0000 Files and hashes: 1: 326130663a383563313a3336333a3a2f34382d3438203d3e20323135363137.roa (hash: G15mowLoM7Eub0vLuxgC+jxtFArNOkVyDHG13blFH8s=) 2: 326130663a383563313a3335373a3a2f34382d3438203d3e20323135363137.roa (hash: 0B/fHqDaAtnHXiIonhpxQ7ujnJI7VSnPxGbabzcBFIA=) 3: 326130663a383563313a3335313a3a2f34382d3438203d3e20343031333836.roa (hash: 7mR3vQrcbHUSwKtu57zMbBmzQiQeIJwUP4b5xp+7MO0=) 4: 069FAF47FF48AEF4C98F5097074530A74C111AB9.crl (hash: aDg9bv22iLTsL/PoLkq7oQQzPVldDRd+L7jufFZuyEY=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/2/069FAF47FF48AEF4C98F5097074530A74C111AB9.crl rsync://rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/2/069FAF47FF48AEF4C98F5097074530A74C111AB9.mft rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/069FAF47FF48AEF4C98F5097074530A74C111AB9.cer rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 07 Aug 2025 11:00:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:bc:b8:58:77:49:93:e1:f0:c8:d7:1b:4c:37:fc:c4:1b:8c:9e:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=069FAF47FF48AEF4C98F5097074530A74C111AB9 Validity Not Before: Aug 6 09:23:05 2025 GMT Not After : Aug 7 11:00:05 2025 GMT Subject: CN=2E8E26A410A3CC62B6A232C96F14DE122894A838 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:93:63:66:14:e9:39:29:25:c2:57:43:8e:d8: 74:99:54:b9:38:a6:18:4a:a2:20:61:af:66:56:17: 6a:ae:42:a8:11:23:05:4d:64:f6:06:23:07:5b:ff: 23:a3:f1:15:1e:20:6a:ac:ad:bc:45:62:47:8d:f5: 67:16:57:ae:10:d8:32:22:29:ce:35:6f:89:bb:5e: 42:ee:c2:2a:b2:e5:cf:8e:e3:f5:07:32:a2:4a:b8: 2a:e5:40:bc:dd:cb:b7:11:62:1e:34:ef:bd:56:a7: 57:ac:c4:d0:d3:31:be:c4:ab:4e:19:17:3e:96:0f: 30:42:c9:99:44:ce:44:b4:45:8c:6b:20:a5:b2:56: f4:f1:fc:6d:67:13:76:e8:c5:fb:27:ba:c2:7b:20: 2c:e5:88:0a:1f:be:11:85:d6:83:14:3f:e6:be:12: cb:57:e5:a2:59:64:58:a2:4a:6b:4d:b9:7f:8b:bd: 44:31:03:f3:c4:63:63:db:b7:9a:c5:74:44:1a:b9: 3c:f1:73:76:c7:1e:01:f6:f6:3e:e8:ef:53:23:05: 60:5b:b3:51:b8:8b:2d:f3:49:25:9e:09:3b:50:58: 71:57:38:df:f4:78:2d:92:62:f7:23:1e:54:02:e4: 37:6e:5e:7d:db:80:0d:48:08:86:3e:44:17:94:65: 81:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:8E:26:A4:10:A3:CC:62:B6:A2:32:C9:6F:14:DE:12:28:94:A8:38 X509v3 Authority Key Identifier: keyid:06:9F:AF:47:FF:48:AE:F4:C9:8F:50:97:07:45:30:A7:4C:11:1A:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/2/069FAF47FF48AEF4C98F5097074530A74C111AB9.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/069FAF47FF48AEF4C98F5097074530A74C111AB9.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/2/069FAF47FF48AEF4C98F5097074530A74C111AB9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:c4:b7:6c:fe:5d:38:dd:37:a5:b1:43:d8:d3:47:7c:ad:30: f5:d4:00:cf:b6:94:d1:a2:da:7b:db:14:c7:a8:ac:5b:a1:13: 28:d1:0d:87:c8:8f:9e:5f:83:13:8c:9f:b1:ec:21:83:4e:91: 83:90:83:c4:46:3e:db:6d:69:3a:91:3c:af:1d:9b:a9:60:bf: 88:c5:f7:0d:6f:78:75:0b:f9:09:52:5f:e1:47:fd:30:10:01: 78:24:ec:7d:3d:de:50:67:20:fa:98:f7:67:d0:3c:50:be:bc: e2:88:16:75:6e:1e:82:4a:dd:e5:e0:a7:b1:c6:0d:f7:33:7f: 6c:74:47:c7:78:59:8d:97:69:9a:38:6f:4a:72:c1:65:36:aa: 62:1e:9a:3a:4c:d6:d7:c6:2b:72:dc:89:1a:b4:98:5f:36:05: 49:52:c2:51:5b:a9:a4:d6:7f:4c:bc:7a:fd:57:db:cc:b5:1d: b0:c5:55:08:13:38:c3:fe:ce:ff:54:8c:55:eb:52:cb:c3:cf: e9:f2:86:de:b6:38:da:2e:ab:d3:ea:40:0f:10:cb:2c:1a:cb: b4:ee:1c:66:4f:49:b7:c5:52:8f:a5:67:35:3e:4d:65:d2:34: d8:19:32:95:06:39:bf:ce:b8:6b:7a:34:60:14:62:ef:56:42: 01:fa:a8:44 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUcby4WHdJk+HwyNcbTDf8xBuMnm0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDY5RkFGNDdGRjQ4QUVGNEM5OEY1MDk3MDc0NTMwQTc0 QzExMUFCOTAeFw0yNTA4MDYwOTIzMDVaFw0yNTA4MDcxMTAwMDVaMDMxMTAvBgNV BAMTKDJFOEUyNkE0MTBBM0NDNjJCNkEyMzJDOTZGMTRERTEyMjg5NEE4MzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD1k2NmFOk5KSXCV0OO2HSZVLk4 phhKoiBhr2ZWF2quQqgRIwVNZPYGIwdb/yOj8RUeIGqsrbxFYkeN9WcWV64Q2DIi Kc41b4m7XkLuwiqy5c+O4/UHMqJKuCrlQLzdy7cRYh40771Wp1esxNDTMb7Eq04Z Fz6WDzBCyZlEzkS0RYxrIKWyVvTx/G1nE3boxfsnusJ7ICzliAofvhGF1oMUP+a+ EstX5aJZZFiiSmtNuX+LvUQxA/PEY2Pbt5rFdEQauTzxc3bHHgH29j7o71MjBWBb s1G4iy3zSSWeCTtQWHFXON/0eC2SYvcjHlQC5DduXn3bgA1ICIY+RBeUZYFFAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQULo4mpBCjzGK2ojLJbxTeEiiUqDgwHwYDVR0j BBgwFoAUBp+vR/9IrvTJj1CXB0Uwp0wRGrkwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMjNkNWY2ODItYjUxYi00ODEyLWI4YjEtNDMwZTM4Njgz NzQ4LzIvMDY5RkFGNDdGRjQ4QUVGNEM5OEY1MDk3MDc0NTMwQTc0QzExMUFCOS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84NGQ1MTgxMC0xOTg3LTQ3 MDEtOGYxZi04NDI1MTExOTY0ZjQvMC8wNjlGQUY0N0ZGNDhBRUY0Qzk4RjUwOTcw NzQ1MzBBNzRDMTExQUI5LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzIzZDVmNjgyLWI1MWItNDgxMi1iOGIxLTQzMGUzODY4Mzc0OC8yLzA2OUZBRjQ3 RkY0OEFFRjRDOThGNTA5NzA3NDUzMEE3NEMxMTFBQjkubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCRxLds /l043TelsUPY00d8rTD11ADPtpTRotp72xTHqKxboRMo0Q2HyI+eX4MTjJ+x7CGD TpGDkIPERj7bbWk6kTyvHZupYL+IxfcNb3h1C/kJUl/hR/0wEAF4JOx9Pd5QZyD6 mPdn0DxQvrziiBZ1bh6CSt3l4Kexxg33M39sdEfHeFmNl2maOG9KcsFlNqpiHpo6 TNbXxity3IkatJhfNgVJUsJRW6mk1n9MvHr9V9vMtR2wxVUIEzjD/s7/VIxV61LL w8/p8obetjjaLqvT6kAPEMssGsu07hxmT0m3xVKPpWc1Pk1l0jTYGTKVBjm/zrhr ejRgFGLvVkIB+qhE -----END CERTIFICATE-----Generated at Thu Aug 7 01:04:59 2025 by rpki-client