$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/2/06DB699D191D4B0289910C88E99CF94A671142F5.mft File: 06DB699D191D4B0289910C88E99CF94A671142F5.mft (raw, json) Hash identifier: /F4lzAVGMoO02t71T1tAmFz5YCOyNA4tkZPa93csXt4= Subject key identifier: C8:55:2B:17:4F:95:75:FD:E5:02:E7:B6:BD:3F:24:48:F5:BD:82:8F Authority key identifier: 06:DB:69:9D:19:1D:4B:02:89:91:0C:88:E9:9C:F9:4A:67:11:42:F5 Certificate issuer: /CN=06DB699D191D4B0289910C88E99CF94A671142F5 Certificate serial: 64D65CBB27599317538C289336020DDEA1E48A81 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/06DB699D191D4B0289910C88E99CF94A671142F5.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/2/06DB699D191D4B0289910C88E99CF94A671142F5.mft Manifest number: AD Signing time: Tue 04 Nov 2025 11:38:20 +0000 Manifest this update: Tue 04 Nov 2025 11:33:20 +0000 Manifest next update: Wed 05 Nov 2025 13:40:20 +0000 Files and hashes: 1: 5A3F7819353CE0FD13B8FFCDCB8837ED0BF5915F.cer (hash: vr0IDnvMrQlAIKTPbmc9XgADtBREMeozkPpGVjOFGr4=) 2: 06DB699D191D4B0289910C88E99CF94A671142F5.crl (hash: IjgmuOR5qiNMLOysIl9Gi5GC6xiJS9KDhggZIY++lrA=) 3: 326130363a396634313a613930303a3a2f34382d3438203d3e20323037363832.roa (hash: UqjWSUv2XiZdDsdQ0uOndREGc/szQ2JnxQlbZ2ADckI=) 4: 326130363a396634313a363936393a3a2f34382d3438203d3e20323132323432.roa (hash: oZMKPe8zIqKXDWE+ceP6ZovC366mkj//dk5ag6RqSYo=) 5: 326130363a396634313a613930313a3a2f34382d3438203d3e20323035383338.roa (hash: TZFInP0XSpkR7gzjfw2R3ov4SaV+J0Kzbqc0lAbOzbM=) 6: 38332e3134322e33312e302f32342d3234203d3e20323135303835.roa (hash: K8xHXu8PBNylpSXaMswB01W3KM9JQNKdf8F+yOiMZUQ=) 7: 326130363a396634313a3a2f33322d3438203d3e20323135303835.roa (hash: Wzsm4f2LA5za568wbkiJepokvyBzVpcjorefCVCiEbM=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/2/06DB699D191D4B0289910C88E99CF94A671142F5.crl rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/2/06DB699D191D4B0289910C88E99CF94A671142F5.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/06DB699D191D4B0289910C88E99CF94A671142F5.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 05 Nov 2025 13:40:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:d6:5c:bb:27:59:93:17:53:8c:28:93:36:02:0d:de:a1:e4:8a:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=06DB699D191D4B0289910C88E99CF94A671142F5 Validity Not Before: Nov 4 11:33:20 2025 GMT Not After : Nov 5 13:40:20 2025 GMT Subject: CN=C8552B174F9575FDE502E7B6BD3F2448F5BD828F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:54:e4:0b:24:f0:9a:65:ce:2b:67:ea:9f:e0: e6:52:66:8d:6e:7c:0d:dc:9c:3d:83:2c:e2:fd:0c: 9f:a9:83:d8:83:47:dd:93:b6:cd:2f:0e:5d:23:f4: 2b:5a:29:94:b8:42:15:8f:bc:e6:c0:7a:2a:b5:22: 65:7f:20:a8:bb:19:6c:98:cd:3f:49:4b:04:3b:9e: 3e:5b:3a:6f:62:8d:8a:48:d2:2a:f4:c5:6f:d9:ca: c7:b4:81:e4:c0:a8:3d:54:66:61:f6:ad:3e:04:9d: ba:ed:62:9c:c0:12:7d:7c:49:91:d9:9f:1a:bf:a8: 20:39:ca:e2:8a:19:b3:43:19:aa:d3:cc:6e:7d:d9: e4:32:f3:bd:79:dd:56:6b:8a:2c:85:96:b3:e4:f4: 59:f8:67:5e:33:8e:24:23:b3:83:42:54:5c:f7:c0: ec:40:a9:98:7c:e8:a4:52:54:3a:5a:5f:2a:03:e6: 2d:4f:82:26:66:b9:b6:a0:9c:05:ae:d9:06:f0:8b: 0a:1b:04:43:52:df:1a:bf:f7:c2:71:99:0d:86:89: 9f:bc:01:9b:db:03:ef:be:4c:71:a7:7a:fc:48:12: 4a:86:e9:b5:c2:e4:7d:f4:fc:1e:f6:72:82:b2:e8: 1a:20:9d:00:f0:cc:e9:31:a2:e4:96:5e:96:db:30: 33:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:55:2B:17:4F:95:75:FD:E5:02:E7:B6:BD:3F:24:48:F5:BD:82:8F X509v3 Authority Key Identifier: keyid:06:DB:69:9D:19:1D:4B:02:89:91:0C:88:E9:9C:F9:4A:67:11:42:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/2/06DB699D191D4B0289910C88E99CF94A671142F5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/06DB699D191D4B0289910C88E99CF94A671142F5.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/2/06DB699D191D4B0289910C88E99CF94A671142F5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:a8:37:1a:db:97:fe:a2:a1:98:4e:24:6b:46:8d:14:26:48: 4b:a5:89:9c:f0:f5:40:ad:e8:53:d9:e5:f1:9d:be:a7:9e:0e: f8:37:af:c2:f4:33:1f:d0:a9:02:d9:95:c5:8e:9d:63:a8:f4: 18:13:e8:6c:ef:51:36:0e:62:bc:2d:82:92:01:d2:7b:83:1a: d2:a0:6c:b8:e3:62:6c:2d:3e:13:ea:97:c9:d1:61:38:64:e5: 3a:d2:6e:05:57:5c:e1:4b:af:d8:9a:ee:15:e0:66:3f:48:33: 4f:40:f4:37:6a:64:db:85:9d:6c:ef:51:18:ed:02:8a:f1:d6: 45:7a:f6:7d:02:02:fa:c1:67:a6:04:9b:c9:8d:46:61:25:b8: b4:67:b4:1b:97:57:2b:11:74:15:ec:00:be:c2:2b:7c:94:21: 75:1f:94:7d:d8:67:e5:24:42:38:30:5f:3b:00:1b:00:1d:78: dd:76:d6:eb:62:b6:2d:8d:cc:31:7e:9d:1f:78:87:60:50:87: 30:65:33:76:51:9c:0e:4a:f7:42:ce:13:70:27:92:7f:20:e9: be:7a:5b:6f:90:79:2f:a3:dc:86:fe:38:46:dd:b8:54:29:61: c8:23:e1:8a:2a:f3:65:38:a3:8b:d0:46:d5:78:8f:2b:7c:6b: be:4a:73:c6 -----BEGIN CERTIFICATE----- MIIFbTCCBFWgAwIBAgIUZNZcuydZkxdTjCiTNgIN3qHkioEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDZEQjY5OUQxOTFENEIwMjg5OTEwQzg4RTk5Q0Y5NEE2 NzExNDJGNTAeFw0yNTExMDQxMTMzMjBaFw0yNTExMDUxMzQwMjBaMDMxMTAvBgNV BAMTKEM4NTUyQjE3NEY5NTc1RkRFNTAyRTdCNkJEM0YyNDQ4RjVCRDgyOEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDeVOQLJPCaZc4rZ+qf4OZSZo1u fA3cnD2DLOL9DJ+pg9iDR92Tts0vDl0j9CtaKZS4QhWPvObAeiq1ImV/IKi7GWyY zT9JSwQ7nj5bOm9ijYpI0ir0xW/Zyse0geTAqD1UZmH2rT4EnbrtYpzAEn18SZHZ nxq/qCA5yuKKGbNDGarTzG592eQy87153VZriiyFlrPk9Fn4Z14zjiQjs4NCVFz3 wOxAqZh86KRSVDpaXyoD5i1PgiZmubagnAWu2QbwiwobBENS3xq/98JxmQ2GiZ+8 AZvbA+++THGnevxIEkqG6bXC5H30/B72coKy6BognQDwzOkxouSWXpbbMDPvAgMB AAGjggJ3MIICczAdBgNVHQ4EFgQUyFUrF0+Vdf3lAue2vT8kSPW9go8wHwYDVR0j BBgwFoAUBttpnRkdSwKJkQyI6Zz5SmcRQvUwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMzAxMTk0NGQtN2ViMy00ZjYzLWExNTktY2ZmMDJjMDI2 YWJmLzIvMDZEQjY5OUQxOTFENEIwMjg5OTEwQzg4RTk5Q0Y5NEE2NzExNDJGNS5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1 YzkxYmUzZjlkLzcvMDZEQjY5OUQxOTFENEIwMjg5OTEwQzg4RTk5Q0Y5NEE2NzEx NDJGNS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8zMDExOTQ0ZC03 ZWIzLTRmNjMtYTE1OS1jZmYwMmMwMjZhYmYvMi8wNkRCNjk5RDE5MUQ0QjAyODk5 MTBDODhFOTlDRjk0QTY3MTE0MkY1Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiag3GtuX/qKhmE4ka0aN FCZIS6WJnPD1QK3oU9nl8Z2+p54O+DevwvQzH9CpAtmVxY6dY6j0GBPobO9RNg5i vC2CkgHSe4Ma0qBsuONibC0+E+qXydFhOGTlOtJuBVdc4Uuv2JruFeBmP0gzT0D0 N2pk24WdbO9RGO0CivHWRXr2fQIC+sFnpgSbyY1GYSW4tGe0G5dXKxF0FewAvsIr fJQhdR+Ufdhn5SRCODBfOwAbAB143XbW62K2LY3MMX6dH3iHYFCHMGUzdlGcDkr3 Qs4TcCeSfyDpvnpbb5B5L6Pchv44Rt24VClhyCPhiirzZTiji9BG1XiPK3xrvkpz xg== -----END CERTIFICATE-----Generated at Wed Nov 5 06:52:29 2025 by rpki-client