$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/2/069FAF47FF48AEF4C98F5097074530A74C111AB9.mft File: 069FAF47FF48AEF4C98F5097074530A74C111AB9.mft (raw, json) Hash identifier: CPm+ZHeTpmx4JdeBmDFcNGZ5iKR/v0v+5W6fWqGtdjE= Subject key identifier: 8A:36:E9:C5:76:FE:C0:1F:A2:3C:AC:F3:75:67:FA:1C:C6:4C:34:A5 Authority key identifier: 06:9F:AF:47:FF:48:AE:F4:C9:8F:50:97:07:45:30:A7:4C:11:1A:B9 Certificate issuer: /CN=069FAF47FF48AEF4C98F5097074530A74C111AB9 Certificate serial: 718FAFBFF2C6EA7086BAF0386C3AF5A79BA4F802 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/069FAF47FF48AEF4C98F5097074530A74C111AB9.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/2/069FAF47FF48AEF4C98F5097074530A74C111AB9.mft Manifest number: 04C3 Signing time: Fri 17 Apr 2026 14:26:57 +0000 Manifest this update: Fri 17 Apr 2026 14:21:57 +0000 Manifest next update: Sat 18 Apr 2026 16:36:57 +0000 Files and hashes: 1: 069FAF47FF48AEF4C98F5097074530A74C111AB9.crl (hash: QsZtI4n5lUqrwfz1+PZX9meQvJ/Gqbhw1iUlGf2godY=) 2: 326130663a383563313a3335373a3a2f34382d3438203d3e20323135363137.roa (hash: mT7wNp38f47L+2MAFo1ah1wV4i3g7EwDZhqEAFbd0PU=) 3: 326130663a383563313a3336333a3a2f34382d3438203d3e20323135363137.roa (hash: nWVf9Vd1/pxv69WaHKM1e/8vQ/po0I7aidbKnzISSgo=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/2/069FAF47FF48AEF4C98F5097074530A74C111AB9.crl rsync://rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/2/069FAF47FF48AEF4C98F5097074530A74C111AB9.mft rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/069FAF47FF48AEF4C98F5097074530A74C111AB9.cer rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 18 Apr 2026 16:00:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:8f:af:bf:f2:c6:ea:70:86:ba:f0:38:6c:3a:f5:a7:9b:a4:f8:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=069FAF47FF48AEF4C98F5097074530A74C111AB9 Validity Not Before: Apr 17 14:21:57 2026 GMT Not After : Apr 18 16:36:57 2026 GMT Subject: CN=8A36E9C576FEC01FA23CACF37567FA1CC64C34A5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:8c:45:44:e7:3c:e1:6e:97:2b:6a:00:2b:91: 32:68:0b:7b:20:fd:1b:4a:78:97:4c:93:d7:18:d4: 74:fa:7a:62:59:9c:71:94:f1:ac:6f:9c:b0:2e:4c: ca:22:ac:64:9e:ed:ce:74:53:ca:02:50:44:6c:1d: 21:30:07:c1:29:df:a5:86:1f:71:93:c7:e4:05:37: 65:b0:00:31:b6:76:f0:3d:a4:3b:c9:c8:13:21:60: d2:4a:5c:6a:8e:a3:1c:3b:d5:2d:20:1d:db:1c:a0: 13:12:f3:bc:41:7b:c0:e5:ff:84:0c:6e:a6:ac:66: 70:83:19:1a:d2:56:18:b6:3d:40:48:0d:c0:71:21: 06:98:b2:0d:df:7b:a6:86:81:33:ac:c3:bd:57:6f: fa:0c:9b:5b:cb:9e:02:2a:b5:5d:c0:8d:80:3d:95: db:a5:2c:d1:40:d6:ba:54:1f:24:3e:3f:b6:d5:70: 08:9d:8e:55:1f:00:53:55:33:87:0d:5d:b2:c5:b8: 4b:d0:d0:24:de:f7:33:8a:92:a0:01:da:9f:b4:d8: 64:57:11:21:56:d8:72:6f:29:ab:34:b4:89:49:ad: 24:c3:b1:56:83:9f:ac:ae:c5:be:63:21:98:b5:a5: 19:71:b3:eb:e2:11:ed:65:6a:15:63:78:cf:8f:ef: 16:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:36:E9:C5:76:FE:C0:1F:A2:3C:AC:F3:75:67:FA:1C:C6:4C:34:A5 X509v3 Authority Key Identifier: keyid:06:9F:AF:47:FF:48:AE:F4:C9:8F:50:97:07:45:30:A7:4C:11:1A:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/2/069FAF47FF48AEF4C98F5097074530A74C111AB9.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/069FAF47FF48AEF4C98F5097074530A74C111AB9.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/2/069FAF47FF48AEF4C98F5097074530A74C111AB9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:71:32:8a:a0:1b:f6:2e:ab:a1:78:06:74:69:3c:2d:7c:f0: 31:98:5f:42:5c:71:da:39:32:80:e9:45:60:5f:bb:8b:2e:a7: 58:73:5e:fa:ec:48:c4:88:6d:dc:f3:9e:c2:78:fd:a7:aa:c3: 5d:24:12:63:11:b3:cf:df:19:e5:72:10:d0:46:e3:24:7c:79: f7:90:64:4c:d9:00:10:a9:b3:20:26:2b:3b:a7:0f:93:6d:b6: b7:42:dc:e5:f9:be:7e:da:d8:b6:05:d6:25:2b:b2:27:80:50: e4:e0:92:19:fc:d1:c9:b6:66:7c:ce:65:0b:a9:4a:ed:17:b8: e8:16:22:8b:a8:af:f8:a2:54:6b:6c:f2:94:44:1f:77:31:92: 5a:6d:ec:5e:e3:66:f6:10:60:45:46:e9:e3:78:bb:59:9c:2b: 69:53:48:b0:5f:26:6c:bd:c6:73:36:a6:01:3f:79:18:5c:01: 8c:a3:85:0c:a5:b4:f8:f3:10:4b:7f:8e:d7:a3:47:93:b2:30: ed:76:7b:21:d8:55:81:a2:29:24:2d:df:9c:ac:4d:e3:dd:1f: 5f:58:8c:35:77:98:cd:58:69:9e:fa:31:01:00:47:7e:62:c8: 81:9b:30:3c:62:d6:1b:86:df:b9:0d:ce:65:e7:66:0c:d5:e2: 98:46:34:ce -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUcY+vv/LG6nCGuvA4bDr1p5uk+AIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDY5RkFGNDdGRjQ4QUVGNEM5OEY1MDk3MDc0NTMwQTc0 QzExMUFCOTAeFw0yNjA0MTcxNDIxNTdaFw0yNjA0MTgxNjM2NTdaMDMxMTAvBgNV BAMTKDhBMzZFOUM1NzZGRUMwMUZBMjNDQUNGMzc1NjdGQTFDQzY0QzM0QTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpjEVE5zzhbpcragArkTJoC3sg /RtKeJdMk9cY1HT6emJZnHGU8axvnLAuTMoirGSe7c50U8oCUERsHSEwB8Ep36WG H3GTx+QFN2WwADG2dvA9pDvJyBMhYNJKXGqOoxw71S0gHdscoBMS87xBe8Dl/4QM bqasZnCDGRrSVhi2PUBIDcBxIQaYsg3fe6aGgTOsw71Xb/oMm1vLngIqtV3AjYA9 ldulLNFA1rpUHyQ+P7bVcAidjlUfAFNVM4cNXbLFuEvQ0CTe9zOKkqAB2p+02GRX ESFW2HJvKas0tIlJrSTDsVaDn6yuxb5jIZi1pRlxs+viEe1lahVjeM+P7xbNAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUijbpxXb+wB+iPKzzdWf6HMZMNKUwHwYDVR0j BBgwFoAUBp+vR/9IrvTJj1CXB0Uwp0wRGrkwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMjNkNWY2ODItYjUxYi00ODEyLWI4YjEtNDMwZTM4Njgz NzQ4LzIvMDY5RkFGNDdGRjQ4QUVGNEM5OEY1MDk3MDc0NTMwQTc0QzExMUFCOS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84NGQ1MTgxMC0xOTg3LTQ3 MDEtOGYxZi04NDI1MTExOTY0ZjQvMC8wNjlGQUY0N0ZGNDhBRUY0Qzk4RjUwOTcw NzQ1MzBBNzRDMTExQUI5LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzIzZDVmNjgyLWI1MWItNDgxMi1iOGIxLTQzMGUzODY4Mzc0OC8yLzA2OUZBRjQ3 RkY0OEFFRjRDOThGNTA5NzA3NDUzMEE3NEMxMTFBQjkubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCGcTKK oBv2LquheAZ0aTwtfPAxmF9CXHHaOTKA6UVgX7uLLqdYc1767EjEiG3c857CeP2n qsNdJBJjEbPP3xnlchDQRuMkfHn3kGRM2QAQqbMgJis7pw+Tbba3Qtzl+b5+2ti2 BdYlK7IngFDk4JIZ/NHJtmZ8zmULqUrtF7joFiKLqK/4olRrbPKURB93MZJabexe 42b2EGBFRunjeLtZnCtpU0iwXyZsvcZzNqYBP3kYXAGMo4UMpbT48xBLf47Xo0eT sjDtdnsh2FWBoikkLd+crE3j3R9fWIw1d5jNWGme+jEBAEd+YsiBmzA8YtYbht+5 Dc5l52YM1eKYRjTO -----END CERTIFICATE-----Generated at Sat Apr 18 00:00:30 2026 by rpki-client