$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/2/06DB699D191D4B0289910C88E99CF94A671142F5.mft File: 06DB699D191D4B0289910C88E99CF94A671142F5.mft (raw, json) Hash identifier: jLQeXuOuyUNQ3dTiJUntVBsVCBM2g7y69hoiacLpP80= Subject key identifier: 2C:E7:D8:4F:BA:01:94:FE:48:E3:24:E0:0E:13:94:E2:E5:19:37:D2 Authority key identifier: 06:DB:69:9D:19:1D:4B:02:89:91:0C:88:E9:9C:F9:4A:67:11:42:F5 Certificate issuer: /CN=06DB699D191D4B0289910C88E99CF94A671142F5 Certificate serial: 08A9F079141E85AA4930BDA0E7A90E561F79BEE0 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/06DB699D191D4B0289910C88E99CF94A671142F5.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/2/06DB699D191D4B0289910C88E99CF94A671142F5.mft Manifest number: 2D Signing time: Mon 04 Aug 2025 00:23:39 +0000 Manifest this update: Mon 04 Aug 2025 00:18:39 +0000 Manifest next update: Tue 05 Aug 2025 02:25:39 +0000 Files and hashes: 1: 06DB699D191D4B0289910C88E99CF94A671142F5.crl (hash: 3TVNhV5ELCupokB6p3MNo48YRuIbuP55nlt65QOyIsc=) 2: 38332e3134322e33312e302f32342d3234203d3e20323135303835.roa (hash: K8xHXu8PBNylpSXaMswB01W3KM9JQNKdf8F+yOiMZUQ=) 3: 326130363a396634313a613930303a3a2f34382d3438203d3e20323037363832.roa (hash: UqjWSUv2XiZdDsdQ0uOndREGc/szQ2JnxQlbZ2ADckI=) 4: 5A3F7819353CE0FD13B8FFCDCB8837ED0BF5915F.cer (hash: vr0IDnvMrQlAIKTPbmc9XgADtBREMeozkPpGVjOFGr4=) 5: 326130363a396634313a3a2f33322d3438203d3e20323135303835.roa (hash: Wzsm4f2LA5za568wbkiJepokvyBzVpcjorefCVCiEbM=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/2/06DB699D191D4B0289910C88E99CF94A671142F5.crl rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/2/06DB699D191D4B0289910C88E99CF94A671142F5.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/06DB699D191D4B0289910C88E99CF94A671142F5.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 04 Aug 2025 23:12:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:a9:f0:79:14:1e:85:aa:49:30:bd:a0:e7:a9:0e:56:1f:79:be:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=06DB699D191D4B0289910C88E99CF94A671142F5 Validity Not Before: Aug 4 00:18:39 2025 GMT Not After : Aug 5 02:25:39 2025 GMT Subject: CN=2CE7D84FBA0194FE48E324E00E1394E2E51937D2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:bf:4f:66:3b:40:aa:22:fe:64:e8:76:ab:43: ed:bf:3b:5e:84:8b:73:ea:20:b7:33:c8:4b:da:6f: 28:a0:e0:59:c4:92:29:be:a0:cc:2a:fc:ba:e3:cc: c0:cb:bc:0e:fe:0b:c7:40:da:9c:a4:9e:7a:51:fb: f7:bb:65:27:23:61:94:a0:21:a9:55:f6:bb:d6:4d: 14:ee:8f:a3:e0:8d:76:d5:9d:97:f6:35:85:27:b4: 67:8d:df:b2:51:d8:18:3e:89:9e:84:43:3f:ca:7d: f1:86:b8:94:69:68:bd:23:91:73:46:db:65:06:e9: d3:02:4e:c1:51:64:29:51:5e:74:f6:14:3c:55:87: 38:5f:14:16:7e:01:b1:10:6a:33:5a:9d:b9:69:77: 11:99:c5:03:cc:fe:36:79:63:d2:9a:d0:9d:09:a1: 51:1e:94:2e:37:ba:d9:e4:3d:fa:60:45:d6:93:b1: 6e:17:88:16:f3:7d:bb:ad:39:45:45:3a:5e:dc:61: c2:3a:4b:48:da:d3:c8:8c:22:10:0b:a1:f4:94:1d: 51:91:86:44:1b:62:cf:27:a8:bb:54:40:05:75:a2: 63:0b:c9:3f:87:a2:c4:06:13:13:1a:44:d7:e4:46: 38:5c:1e:df:4d:67:27:1f:0e:42:05:66:59:a8:a3: 9c:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:E7:D8:4F:BA:01:94:FE:48:E3:24:E0:0E:13:94:E2:E5:19:37:D2 X509v3 Authority Key Identifier: keyid:06:DB:69:9D:19:1D:4B:02:89:91:0C:88:E9:9C:F9:4A:67:11:42:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/2/06DB699D191D4B0289910C88E99CF94A671142F5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/06DB699D191D4B0289910C88E99CF94A671142F5.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/2/06DB699D191D4B0289910C88E99CF94A671142F5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:57:e1:91:a0:64:cb:34:08:ab:8a:6d:b1:1b:55:02:eb:5a: 56:81:e6:db:da:73:04:1a:e6:50:0a:a9:04:9e:b6:de:6f:14: 74:fb:cd:5d:d0:80:7f:d6:46:61:38:68:72:f9:db:d8:a1:87: 09:e0:7c:3c:da:8c:dd:b1:5e:4a:39:65:5e:dc:52:44:fd:5b: 65:e3:1b:a6:01:a4:f5:60:52:64:dc:9a:e8:45:be:bc:b6:c5: ad:d6:d0:2e:e4:d1:89:ed:dc:e1:55:96:2d:6b:80:a8:ae:91: 5a:20:d3:61:60:9e:78:4d:dc:d9:ee:be:07:88:31:ab:b2:40: 32:95:3e:ea:4e:f2:fe:97:c3:86:21:07:48:01:06:27:d6:d3: e6:4c:b5:20:11:02:13:2e:09:5d:b5:da:36:0e:49:9e:11:5f: 6b:a5:49:73:1e:ca:b8:49:72:88:93:9a:0e:25:d8:35:97:ca: 73:59:59:9b:fa:b7:39:89:9d:0c:27:6f:4f:c8:b4:ea:e5:be: c1:2f:1a:a1:57:77:bb:f0:9c:b8:f1:40:a1:b8:2d:2a:89:e4: 1e:ef:6e:8b:36:65:df:03:73:c9:e5:5b:42:d4:a6:2e:ac:b8: d8:77:a5:8e:56:d0:d7:3a:32:56:8b:fd:e4:00:d6:e2:f2:88: 32:d9:76:5a -----BEGIN CERTIFICATE----- MIIFbTCCBFWgAwIBAgIUCKnweRQehapJML2g56kOVh95vuAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDZEQjY5OUQxOTFENEIwMjg5OTEwQzg4RTk5Q0Y5NEE2 NzExNDJGNTAeFw0yNTA4MDQwMDE4MzlaFw0yNTA4MDUwMjI1MzlaMDMxMTAvBgNV BAMTKDJDRTdEODRGQkEwMTk0RkU0OEUzMjRFMDBFMTM5NEUyRTUxOTM3RDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDmv09mO0CqIv5k6HarQ+2/O16E i3PqILczyEvabyig4FnEkim+oMwq/LrjzMDLvA7+C8dA2pyknnpR+/e7ZScjYZSg IalV9rvWTRTuj6PgjXbVnZf2NYUntGeN37JR2Bg+iZ6EQz/KffGGuJRpaL0jkXNG 22UG6dMCTsFRZClRXnT2FDxVhzhfFBZ+AbEQajNanblpdxGZxQPM/jZ5Y9Ka0J0J oVEelC43utnkPfpgRdaTsW4XiBbzfbutOUVFOl7cYcI6S0ja08iMIhALofSUHVGR hkQbYs8nqLtUQAV1omMLyT+HosQGExMaRNfkRjhcHt9NZycfDkIFZlmoo5wdAgMB AAGjggJ3MIICczAdBgNVHQ4EFgQULOfYT7oBlP5I4yTgDhOU4uUZN9IwHwYDVR0j BBgwFoAUBttpnRkdSwKJkQyI6Zz5SmcRQvUwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMzAxMTk0NGQtN2ViMy00ZjYzLWExNTktY2ZmMDJjMDI2 YWJmLzIvMDZEQjY5OUQxOTFENEIwMjg5OTEwQzg4RTk5Q0Y5NEE2NzExNDJGNS5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1 YzkxYmUzZjlkLzcvMDZEQjY5OUQxOTFENEIwMjg5OTEwQzg4RTk5Q0Y5NEE2NzEx NDJGNS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8zMDExOTQ0ZC03 ZWIzLTRmNjMtYTE1OS1jZmYwMmMwMjZhYmYvMi8wNkRCNjk5RDE5MUQ0QjAyODk5 MTBDODhFOTlDRjk0QTY3MTE0MkY1Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOVfhkaBkyzQIq4ptsRtV AutaVoHm29pzBBrmUAqpBJ623m8UdPvNXdCAf9ZGYThocvnb2KGHCeB8PNqM3bFe SjllXtxSRP1bZeMbpgGk9WBSZNya6EW+vLbFrdbQLuTRie3c4VWWLWuAqK6RWiDT YWCeeE3c2e6+B4gxq7JAMpU+6k7y/pfDhiEHSAEGJ9bT5ky1IBECEy4JXbXaNg5J nhFfa6VJcx7KuElyiJOaDiXYNZfKc1lZm/q3OYmdDCdvT8i06uW+wS8aoVd3u/Cc uPFAobgtKonkHu9uizZl3wNzyeVbQtSmLqy42HeljlbQ1zoyVov95ADW4vKIMtl2 Wg== -----END CERTIFICATE-----Generated at Mon Aug 4 15:28:19 2025 by rpki-client