$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09456214-8d25-4b5e-9e04-35c0a7a26470/0/FB2E043F755DA1329FB66347D17DC2B79A73C3FA.mft File: FB2E043F755DA1329FB66347D17DC2B79A73C3FA.mft (raw, json) Hash identifier: rthNTkJMXjUZXuzSzpfnnKkiRn3EGIepew0aXSXQAIE= Subject key identifier: F3:46:C2:57:72:A3:C5:C3:B4:00:A0:CD:94:E0:A7:B4:7D:80:4C:36 Authority key identifier: FB:2E:04:3F:75:5D:A1:32:9F:B6:63:47:D1:7D:C2:B7:9A:73:C3:FA Certificate issuer: /CN=FB2E043F755DA1329FB66347D17DC2B79A73C3FA Certificate serial: 1ED9BD9E1436DE45FC8B618A901A30B4A82A6242 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/FB2E043F755DA1329FB66347D17DC2B79A73C3FA.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09456214-8d25-4b5e-9e04-35c0a7a26470/0/FB2E043F755DA1329FB66347D17DC2B79A73C3FA.mft Manifest number: 6E Signing time: Tue 04 Nov 2025 03:59:22 +0000 Manifest this update: Tue 04 Nov 2025 03:54:22 +0000 Manifest next update: Wed 05 Nov 2025 04:11:22 +0000 Files and hashes: 1: 326131343a373538343a653361303a3a2f34342d3434203d3e20333937303332.roa (hash: JCyGJNLuGhm2G7yv8F0G1yT21Qa/DAGdxn1vxIgtXH8=) 2: FB2E043F755DA1329FB66347D17DC2B79A73C3FA.crl (hash: y40+s4LT2RyDW40wevOEs6mhr1UmdjfFK3l2oqedtms=) 3: 326131343a373538343a653339303a3a2f34342d3434203d3e20333937303332.roa (hash: lLg4au3IVvnSiHqBxXRTNckohkijbwJ1gyWVOIjX72Q=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09456214-8d25-4b5e-9e04-35c0a7a26470/0/FB2E043F755DA1329FB66347D17DC2B79A73C3FA.crl rsync://rsync.paas.rpki.ripe.net/repository/09456214-8d25-4b5e-9e04-35c0a7a26470/0/FB2E043F755DA1329FB66347D17DC2B79A73C3FA.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/FB2E043F755DA1329FB66347D17DC2B79A73C3FA.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 05 Nov 2025 04:11:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:d9:bd:9e:14:36:de:45:fc:8b:61:8a:90:1a:30:b4:a8:2a:62:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FB2E043F755DA1329FB66347D17DC2B79A73C3FA Validity Not Before: Nov 4 03:54:22 2025 GMT Not After : Nov 5 04:11:22 2025 GMT Subject: CN=F346C25772A3C5C3B400A0CD94E0A7B47D804C36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:57:06:45:4e:24:6d:04:1a:d9:64:65:50:6c: e8:fb:f7:27:f3:15:61:ea:e0:f2:92:0f:3f:0d:48: 6a:d2:fb:83:fc:5a:e4:5c:1f:e1:d1:92:79:99:78: 2e:1e:e1:56:9d:e0:17:2c:dc:da:28:3a:76:a8:fd: 8b:e6:6e:f3:72:1e:63:71:fb:3e:b2:5a:15:49:97: ba:3b:52:fb:a7:46:08:e5:7b:21:69:06:48:0e:65: fa:e9:a3:09:f5:27:90:18:51:ef:95:c0:53:b4:d8: 2d:c6:58:d8:37:76:3e:7a:06:4b:05:b1:cb:c4:5a: 97:94:68:0b:fd:77:78:c3:e2:ea:2d:b6:e4:39:d4: 4c:67:cb:53:de:92:d5:8c:d6:e2:79:34:02:ab:5e: d5:93:44:97:10:c7:d7:bd:4e:8f:45:09:d7:b0:c1: 24:ca:5f:2f:70:59:6f:99:51:f2:b5:85:13:3e:bd: 79:09:e6:48:37:c4:09:63:c9:a7:2d:13:e0:7e:a4: c1:3b:6e:37:9f:67:c7:fa:d2:01:04:94:8c:4f:9c: fe:3c:4a:f1:82:bc:77:85:d0:35:b6:5c:b7:aa:b6: ce:63:a9:f9:9b:7a:48:d9:f5:f4:45:0a:7d:b4:1f: bb:0d:a8:68:8b:e1:64:fd:5a:b7:d1:e0:0a:15:4b: a2:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:46:C2:57:72:A3:C5:C3:B4:00:A0:CD:94:E0:A7:B4:7D:80:4C:36 X509v3 Authority Key Identifier: keyid:FB:2E:04:3F:75:5D:A1:32:9F:B6:63:47:D1:7D:C2:B7:9A:73:C3:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/09456214-8d25-4b5e-9e04-35c0a7a26470/0/FB2E043F755DA1329FB66347D17DC2B79A73C3FA.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/FB2E043F755DA1329FB66347D17DC2B79A73C3FA.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09456214-8d25-4b5e-9e04-35c0a7a26470/0/FB2E043F755DA1329FB66347D17DC2B79A73C3FA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:c7:06:21:69:06:88:61:57:93:fa:27:ab:b8:a9:59:e8:d5: 34:3c:6a:f2:fe:e7:21:dc:22:bd:3c:78:d5:1f:11:d5:cf:d8: 28:b7:ab:ea:0f:99:72:65:72:23:cc:5a:6b:af:f5:56:5e:09: a6:bd:85:22:73:47:44:aa:05:38:13:c3:ac:fc:0a:ca:3b:6e: 15:72:64:9c:78:67:92:d2:4f:78:83:bf:50:2f:8e:b2:9e:9b: 76:31:8c:c2:15:9b:51:df:73:57:c3:99:b5:9a:82:6d:e6:11: ad:e6:9e:b7:b1:b3:bf:be:b5:d5:d8:25:e4:c7:09:fc:e9:8b: 82:e0:ce:9a:77:2c:e9:ff:a6:fb:71:7f:cc:3b:f0:fd:2b:f9: 7e:ea:3a:5d:6e:03:8d:f0:f6:58:9a:4e:bc:6c:89:6d:4f:6c: 0d:96:88:d7:3f:a2:04:c6:ac:20:37:b9:98:15:69:d3:73:e9: a5:01:2a:e5:5b:a4:8e:74:91:07:b3:29:9a:cd:5c:50:1a:6c: 01:5d:e7:18:c6:0c:8a:c8:69:41:f7:8c:a4:05:88:a2:91:11: 5a:29:d4:b0:e2:a5:d8:bf:8f:54:a3:ee:83:f3:e7:55:26:a3: bd:69:bf:0b:34:4b:92:53:82:5a:7b:62:ac:02:f4:13:ad:fd: c1:a0:da:8a -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUHtm9nhQ23kX8i2GKkBowtKgqYkIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkIyRTA0M0Y3NTVEQTEzMjlGQjY2MzQ3RDE3REMyQjc5 QTczQzNGQTAeFw0yNTExMDQwMzU0MjJaFw0yNTExMDUwNDExMjJaMDMxMTAvBgNV BAMTKEYzNDZDMjU3NzJBM0M1QzNCNDAwQTBDRDk0RTBBN0I0N0Q4MDRDMzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMVwZFTiRtBBrZZGVQbOj79yfz FWHq4PKSDz8NSGrS+4P8WuRcH+HRknmZeC4e4Vad4Bcs3NooOnao/YvmbvNyHmNx +z6yWhVJl7o7UvunRgjleyFpBkgOZfrpown1J5AYUe+VwFO02C3GWNg3dj56BksF scvEWpeUaAv9d3jD4uottuQ51Exny1PektWM1uJ5NAKrXtWTRJcQx9e9To9FCdew wSTKXy9wWW+ZUfK1hRM+vXkJ5kg3xAljyactE+B+pME7bjefZ8f60gEElIxPnP48 SvGCvHeF0DW2XLeqts5jqfmbekjZ9fRFCn20H7sNqGiL4WT9WrfR4AoVS6INAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQU80bCV3KjxcO0AKDNlOCntH2ATDYwHwYDVR0j BBgwFoAU+y4EP3VdoTKftmNH0X3Ct5pzw/owDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMDk0NTYyMTQtOGQyNS00YjVlLTllMDQtMzVjMGE3YTI2 NDcwLzAvRkIyRTA0M0Y3NTVEQTEzMjlGQjY2MzQ3RDE3REMyQjc5QTczQzNGQS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC9GQjJFMDQzRjc1NURBMTMyOUZCNjYzNDdE MTdEQzJCNzlBNzNDM0ZBLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzA5NDU2MjE0LThkMjUtNGI1ZS05ZTA0LTM1YzBhN2EyNjQ3MC8wL0ZCMkUwNDNG NzU1REExMzI5RkI2NjM0N0QxN0RDMkI3OUE3M0MzRkEubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCNxwYh aQaIYVeT+ieruKlZ6NU0PGry/uch3CK9PHjVHxHVz9got6vqD5lyZXIjzFprr/VW XgmmvYUic0dEqgU4E8Os/ArKO24VcmSceGeS0k94g79QL46ynpt2MYzCFZtR33NX w5m1moJt5hGt5p63sbO/vrXV2CXkxwn86YuC4M6adyzp/6b7cX/MO/D9K/l+6jpd bgON8PZYmk68bIltT2wNlojXP6IExqwgN7mYFWnTc+mlASrlW6SOdJEHsymazVxQ GmwBXecYxgyKyGlB94ykBYiikRFaKdSw4qXYv49Uo+6D8+dVJqO9ab8LNEuSU4Ja e2KsAvQTrf3BoNqK -----END CERTIFICATE-----Generated at Tue Nov 4 10:55:24 2025 by rpki-client