$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/2/06DB699D191D4B0289910C88E99CF94A671142F5.mft File: 06DB699D191D4B0289910C88E99CF94A671142F5.mft (raw, json) Hash identifier: eHh37QCMkFyG/mQwDFWikLLQqnb+2mi0+wcA0rr4zNA= Subject key identifier: C5:63:F5:36:B9:DD:24:38:04:50:33:FD:BA:23:9D:37:F6:D8:38:84 Authority key identifier: 06:DB:69:9D:19:1D:4B:02:89:91:0C:88:E9:9C:F9:4A:67:11:42:F5 Certificate issuer: /CN=06DB699D191D4B0289910C88E99CF94A671142F5 Certificate serial: 3638B3BDA040F13F619C22C71B09F7B5C93218AE Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/06DB699D191D4B0289910C88E99CF94A671142F5.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/2/06DB699D191D4B0289910C88E99CF94A671142F5.mft Manifest number: 0283 Signing time: Mon 21 Sep 2026 17:23:22 +0000 Manifest this update: Mon 21 Sep 2026 17:18:22 +0000 Manifest next update: Tue 22 Sep 2026 18:05:22 +0000 Files and hashes: 1: 326130363a396634313a3330303a3a2f34302d3438203d3e20323134393239.roa (hash: iVfsjGUvTt7XJSqNB1gfJbq7PcNxzcp6mUdRwbAEvfI=) 2: 326130363a396634313a613930303a3a2f34382d3438203d3e20323037363832.roa (hash: IPmhuzBuQk0H65gj7yTl9nlDYGhk58il9d6iAo3tkJ8=) 3: 326130363a396634363a3a2f33322d3332203d3e20323135303835.roa (hash: KHPMWVPXSNE5MeO2seajbhD7um8es2E6kpPLcpx4Rh4=) 4: 326130363a396634313a3930303a3a2f34302d3438203d3e20323134393239.roa (hash: +AMN4bGgppj9vi32rQAsxbtShvgpXDGYgBVZExdRGNA=) 5: 38332e3134322e33312e302f32342d3234203d3e20323135303835.roa (hash: c23f5zfF11QepD/hCX1+ZX8Ztc0XcCBU7/BkVhVVOkA=) 6: 326130363a396634313a3530303a3a2f34302d3438203d3e20323134393239.roa (hash: vhj3ge0HFLUitKaN+s5zDz0PPLk5IVtPYbDDdzjfCRg=) 7: 326130363a396634313a363936393a3a2f34382d3438203d3e20323132323432.roa (hash: AwETYoDWLr+UL+mh9uhHo7iWKly/gsr+Qa4Sf+Pb3lQ=) 8: 326130363a396634313a613a3a2f34382d3438203d3e20323135303835.roa (hash: NbDxV9qrS6TiSjVCZUDuT8o/FjbSqGztLjVZ8dbtZec=) 9: 326130363a396634313a3a2f33322d3332203d3e20323135303835.roa (hash: oQiFmCDOiC8wMUPyhseeYgHp6yjZLGbjApAcNJ0LBoc=) 10: 5A3F7819353CE0FD13B8FFCDCB8837ED0BF5915F.cer (hash: zDfWjzGK40zSCpRuFh+A3O83EeUEIjX9jMdsKJlIUSE=) 11: 06DB699D191D4B0289910C88E99CF94A671142F5.crl (hash: K2CDhZbSkM4Mm2gusjvZgDMH/jvbOYhpiegM8FwLGJg=) 12: 326130363a396634313a613839393a3a2f34382d3438203d3e20323037363832.roa (hash: AsmqfeR8tzd8apPghjomjQ+mrFPKbFgoIC7Ra9M+3/4=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/2/06DB699D191D4B0289910C88E99CF94A671142F5.crl rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/2/06DB699D191D4B0289910C88E99CF94A671142F5.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/06DB699D191D4B0289910C88E99CF94A671142F5.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 22 Sep 2026 14:16:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:38:b3:bd:a0:40:f1:3f:61:9c:22:c7:1b:09:f7:b5:c9:32:18:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=06DB699D191D4B0289910C88E99CF94A671142F5 Validity Not Before: Sep 21 17:18:22 2026 GMT Not After : Sep 22 18:05:22 2026 GMT Subject: CN=C563F536B9DD2438045033FDBA239D37F6D83884 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:ed:d9:98:0b:bc:07:07:1f:b7:cd:e2:01:72: 18:ea:46:91:c7:c7:4c:e4:64:68:34:29:10:ff:fa: 80:0f:27:fe:ab:24:85:cb:eb:b8:55:f7:50:cd:bf: db:d8:fe:d1:26:f2:0e:21:0c:4c:ed:72:f3:8f:c1: 6e:de:73:1a:14:88:21:bf:c2:46:03:87:c0:e7:36: 92:96:bf:75:60:4c:5d:5f:3b:cd:54:c9:f0:90:de: da:01:02:19:4f:b9:c6:3b:b9:1c:73:0b:76:48:51: 46:38:1f:8f:32:5e:af:e8:cb:16:47:de:2d:0e:ca: 1d:c4:5d:c2:55:62:66:26:2f:29:63:1d:45:7b:f6: 7e:1a:5a:8c:79:d4:fc:95:6d:6c:8c:fc:c1:76:03: 87:d4:ce:96:36:40:42:fd:ec:ea:8e:32:19:23:8a: c3:1c:a8:64:aa:78:29:64:aa:a7:a5:3d:90:f4:06: 19:6b:8c:66:cc:f9:8a:8f:43:a2:f7:fd:5a:6d:bc: 61:cd:dd:2b:3e:ff:ab:0c:20:db:88:89:e5:30:e0: 2f:fb:75:8d:4b:31:34:be:20:e6:57:eb:7b:d4:4d: ae:10:e9:be:ab:cf:21:eb:fb:96:b6:54:37:96:a2: 3f:46:98:8f:0a:16:dd:ae:73:87:ce:ec:9b:d1:32: ba:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:63:F5:36:B9:DD:24:38:04:50:33:FD:BA:23:9D:37:F6:D8:38:84 X509v3 Authority Key Identifier: keyid:06:DB:69:9D:19:1D:4B:02:89:91:0C:88:E9:9C:F9:4A:67:11:42:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/2/06DB699D191D4B0289910C88E99CF94A671142F5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/06DB699D191D4B0289910C88E99CF94A671142F5.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/2/06DB699D191D4B0289910C88E99CF94A671142F5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:d0:4b:90:34:a6:c3:e6:7c:8c:c9:b3:88:19:e6:5f:af:17: 45:c8:3a:36:7d:1b:7d:4c:79:0c:83:33:29:af:f6:6e:29:6c: bc:3d:01:11:6f:47:f6:ed:02:69:3c:c2:52:89:5f:68:b1:0b: 43:a3:0c:52:33:91:7d:cf:f9:93:f3:bd:3a:3a:7a:41:29:54: 2c:2f:d8:4a:da:57:ec:65:32:03:f4:49:4c:72:d4:5b:be:ed: 8c:0b:58:27:59:6a:ca:f5:77:9c:f2:0d:dd:df:aa:47:77:35: a8:49:e7:2f:6b:c4:61:98:ba:b9:78:3e:31:06:03:3e:b2:8c: 28:49:1e:cd:78:da:df:db:db:ac:a3:31:fe:09:eb:04:68:b1: ed:ab:cf:79:5c:4d:f7:70:93:d7:e8:02:5f:ff:80:88:2f:66: f0:40:e0:9e:09:9c:70:ce:d3:55:06:09:8d:9c:1d:34:07:d0: 5d:a1:f3:85:68:af:e5:b3:ac:1c:d8:41:6f:32:0e:05:9d:48: e5:a3:a3:c8:d4:0d:87:1a:43:d5:b2:7c:57:89:f8:b5:4a:2b: 92:6d:d0:92:42:bc:e7:91:06:37:bc:ff:d3:81:df:32:a8:29: af:d7:e4:93:03:a7:77:0e:42:b9:0b:ba:e5:4a:92:ec:05:50: 20:2d:93:16 -----BEGIN CERTIFICATE----- MIIFbTCCBFWgAwIBAgIUNjizvaBA8T9hnCLHGwn3tckyGK4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDZEQjY5OUQxOTFENEIwMjg5OTEwQzg4RTk5Q0Y5NEE2 NzExNDJGNTAeFw0yNjA5MjExNzE4MjJaFw0yNjA5MjIxODA1MjJaMDMxMTAvBgNV BAMTKEM1NjNGNTM2QjlERDI0MzgwNDUwMzNGREJBMjM5RDM3RjZEODM4ODQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCi7dmYC7wHBx+3zeIBchjqRpHH x0zkZGg0KRD/+oAPJ/6rJIXL67hV91DNv9vY/tEm8g4hDEztcvOPwW7ecxoUiCG/ wkYDh8DnNpKWv3VgTF1fO81UyfCQ3toBAhlPucY7uRxzC3ZIUUY4H48yXq/oyxZH 3i0Oyh3EXcJVYmYmLyljHUV79n4aWox51PyVbWyM/MF2A4fUzpY2QEL97OqOMhkj isMcqGSqeClkqqelPZD0BhlrjGbM+YqPQ6L3/VptvGHN3Ss+/6sMINuIieUw4C/7 dY1LMTS+IOZX63vUTa4Q6b6rzyHr+5a2VDeWoj9GmI8KFt2uc4fO7JvRMrp7AgMB AAGjggJ3MIICczAdBgNVHQ4EFgQUxWP1NrndJDgEUDP9uiOdN/bYOIQwHwYDVR0j BBgwFoAUBttpnRkdSwKJkQyI6Zz5SmcRQvUwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMzAxMTk0NGQtN2ViMy00ZjYzLWExNTktY2ZmMDJjMDI2 YWJmLzIvMDZEQjY5OUQxOTFENEIwMjg5OTEwQzg4RTk5Q0Y5NEE2NzExNDJGNS5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1 YzkxYmUzZjlkLzcvMDZEQjY5OUQxOTFENEIwMjg5OTEwQzg4RTk5Q0Y5NEE2NzEx NDJGNS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8zMDExOTQ0ZC03 ZWIzLTRmNjMtYTE1OS1jZmYwMmMwMjZhYmYvMi8wNkRCNjk5RDE5MUQ0QjAyODk5 MTBDODhFOTlDRjk0QTY3MTE0MkY1Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS9BLkDSmw+Z8jMmziBnm X68XRcg6Nn0bfUx5DIMzKa/2bilsvD0BEW9H9u0CaTzCUolfaLELQ6MMUjORfc/5 k/O9Ojp6QSlULC/YStpX7GUyA/RJTHLUW77tjAtYJ1lqyvV3nPIN3d+qR3c1qEnn L2vEYZi6uXg+MQYDPrKMKEkezXja39vbrKMx/gnrBGix7avPeVxN93CT1+gCX/+A iC9m8EDgngmccM7TVQYJjZwdNAfQXaHzhWiv5bOsHNhBbzIOBZ1I5aOjyNQNhxpD 1bJ8V4n4tUorkm3QkkK855EGN7z/04HfMqgpr9fkkwOndw5CuQu65UqS7AVQIC2T Fg== -----END CERTIFICATE-----Generated at Mon Sep 21 20:51:44 2026 by rpki-client