$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/59c83e5c-4b55-4a1a-8003-1b7ecc51d47a/3/FA710E21BC41E9827D52D66DE98EF8E9ACE9B1E8.mft File: FA710E21BC41E9827D52D66DE98EF8E9ACE9B1E8.mft (raw, json) Hash identifier: xeP3pTwUumwoKNjydDWoG6mZ0WZgMvDE97gRAqco/iU= Subject key identifier: 73:B7:C5:9E:6E:A5:BA:55:0F:C4:C7:5B:A2:5D:24:1C:69:D4:19:45 Authority key identifier: FA:71:0E:21:BC:41:E9:82:7D:52:D6:6D:E9:8E:F8:E9:AC:E9:B1:E8 Certificate issuer: /CN=FA710E21BC41E9827D52D66DE98EF8E9ACE9B1E8 Certificate serial: 5F290CBAEC2723876B5E0C71BF59479469BB84D6 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/FA710E21BC41E9827D52D66DE98EF8E9ACE9B1E8.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/59c83e5c-4b55-4a1a-8003-1b7ecc51d47a/3/FA710E21BC41E9827D52D66DE98EF8E9ACE9B1E8.mft Manifest number: 1C Signing time: Fri 08 Aug 2025 01:52:47 +0000 Manifest this update: Fri 08 Aug 2025 01:47:47 +0000 Manifest next update: Sat 09 Aug 2025 03:43:47 +0000 Files and hashes: 1: 326131343a373538343a346630303a3a2f34302d3430203d3e20323132353136.roa (hash: CNfVsinVsceZGjOaXQsHUjsBZSefgQTBz85mK3PRJtU=) 2: FA710E21BC41E9827D52D66DE98EF8E9ACE9B1E8.crl (hash: 4sWTO9kVyN0SL4t3bJJLBt5hARK27amEGWK3Lz/P8yA=) 3: 326131343a373538343a343030303a3a2f33362d3438203d3e2036353137.roa (hash: 9qxxzty+nI98+cY44+m4DwmBg2WIZrsDW0snWoFPb+U=) 4: 326131343a373538343a343130303a3a2f34302d3438203d3e20323136333039.roa (hash: J9Fi36nQGqAgueP6UU6iZv8HlrGSaFogPoGVrEhPYYg=) 5: 326131343a373538343a343830303a3a2f34382d3438203d3e20323131333538.roa (hash: dxI70qoTw8AqT4GSbNKeSr6HFS9kuFZrrwUT/py32Kc=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/59c83e5c-4b55-4a1a-8003-1b7ecc51d47a/3/FA710E21BC41E9827D52D66DE98EF8E9ACE9B1E8.crl rsync://rsync.paas.rpki.ripe.net/repository/59c83e5c-4b55-4a1a-8003-1b7ecc51d47a/3/FA710E21BC41E9827D52D66DE98EF8E9ACE9B1E8.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/FA710E21BC41E9827D52D66DE98EF8E9ACE9B1E8.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 09 Aug 2025 03:43:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:29:0c:ba:ec:27:23:87:6b:5e:0c:71:bf:59:47:94:69:bb:84:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FA710E21BC41E9827D52D66DE98EF8E9ACE9B1E8 Validity Not Before: Aug 8 01:47:47 2025 GMT Not After : Aug 9 03:43:47 2025 GMT Subject: CN=73B7C59E6EA5BA550FC4C75BA25D241C69D41945 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:45:22:aa:df:b4:73:0e:81:a7:c0:12:ce:26: c9:cd:60:09:93:c3:7d:f9:22:f8:72:e8:7f:a4:4a: 39:38:02:2c:65:12:dc:8e:6b:54:db:07:9c:4d:d0: e4:00:63:31:e0:0f:8d:7d:0d:fd:e3:b7:51:b1:2a: 8d:3d:38:82:9d:8e:f9:77:be:d3:f1:f7:f6:2e:2f: a9:fb:15:44:d3:b8:16:ad:d2:08:fc:a8:8f:a3:a6: 7b:e4:cd:45:8a:4b:d7:99:e0:2d:39:98:16:8a:77: 41:c3:73:f0:a7:ab:88:b9:84:bb:60:02:65:4c:ad: e5:cb:a7:26:c9:64:76:8d:c4:6c:38:e1:20:2d:f5: 1b:eb:de:a3:20:e9:9b:89:d0:ce:f3:55:3b:99:60: 17:91:0b:c0:ac:a2:f9:1b:8b:3c:02:53:06:34:ed: f0:ca:c0:69:01:df:0f:bc:4a:2b:d9:d1:76:ee:50: 27:64:d5:13:d2:1c:c5:fc:01:c1:35:38:4f:36:2c: 15:42:76:af:23:a6:eb:09:25:79:ab:8f:80:4c:71: 7e:fc:03:85:d3:b0:34:31:eb:3a:19:1d:be:51:6e: 7f:2b:b9:ab:3f:40:d3:11:6d:cf:e0:57:62:f4:ac: f7:00:ca:4c:61:32:69:a8:e1:98:87:7a:6f:10:d9: fc:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:B7:C5:9E:6E:A5:BA:55:0F:C4:C7:5B:A2:5D:24:1C:69:D4:19:45 X509v3 Authority Key Identifier: keyid:FA:71:0E:21:BC:41:E9:82:7D:52:D6:6D:E9:8E:F8:E9:AC:E9:B1:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/59c83e5c-4b55-4a1a-8003-1b7ecc51d47a/3/FA710E21BC41E9827D52D66DE98EF8E9ACE9B1E8.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/FA710E21BC41E9827D52D66DE98EF8E9ACE9B1E8.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/59c83e5c-4b55-4a1a-8003-1b7ecc51d47a/3/FA710E21BC41E9827D52D66DE98EF8E9ACE9B1E8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:e9:95:68:dd:82:52:37:f8:ec:22:47:1d:89:20:9c:ad:36: af:7d:55:89:18:24:cf:7c:c0:c5:5c:70:67:95:1d:db:20:4a: 81:ae:cc:e2:a8:0e:ca:e2:32:07:37:82:94:53:67:c4:35:41: a7:57:10:84:72:0b:f2:9c:41:3c:1d:80:98:91:ab:41:ad:95: bb:70:b3:c2:d6:be:4a:cf:8e:0a:1e:53:3a:15:04:08:c2:1b: e6:5d:15:d3:06:78:8e:86:77:de:c7:ac:69:06:13:e9:54:17: 25:2e:cc:ba:81:4a:84:f0:9b:23:9e:78:83:8c:a1:99:6b:ed: 6c:ee:9e:fb:e0:22:d5:29:c0:23:87:b0:39:14:d9:82:2c:c5: 76:f9:74:bc:9c:1c:a1:72:54:e0:31:50:44:f2:6e:15:5d:d2: 44:c0:e6:e2:5e:6d:a8:9f:6c:30:65:96:88:15:65:dd:64:0f: 99:1e:30:ef:b8:7f:17:6c:94:39:ac:ad:ff:b0:9f:e3:d1:e9: 92:b4:78:6f:6b:af:8f:d7:72:da:28:4d:8d:18:e4:f8:83:9a: eb:11:50:6c:2a:9f:19:22:8d:4f:da:b3:37:d3:56:f7:4e:43: 40:b2:a2:d2:d1:68:5d:ee:0d:22:ae:ab:8d:a7:fa:6d:c7:33: 46:d8:da:59 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUXykMuuwnI4drXgxxv1lHlGm7hNYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkE3MTBFMjFCQzQxRTk4MjdENTJENjZERTk4RUY4RTlB Q0U5QjFFODAeFw0yNTA4MDgwMTQ3NDdaFw0yNTA4MDkwMzQzNDdaMDMxMTAvBgNV BAMTKDczQjdDNTlFNkVBNUJBNTUwRkM0Qzc1QkEyNUQyNDFDNjlENDE5NDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/RSKq37RzDoGnwBLOJsnNYAmT w335Ivhy6H+kSjk4AixlEtyOa1TbB5xN0OQAYzHgD419Df3jt1GxKo09OIKdjvl3 vtPx9/YuL6n7FUTTuBat0gj8qI+jpnvkzUWKS9eZ4C05mBaKd0HDc/Cnq4i5hLtg AmVMreXLpybJZHaNxGw44SAt9Rvr3qMg6ZuJ0M7zVTuZYBeRC8CsovkbizwCUwY0 7fDKwGkB3w+8SivZ0XbuUCdk1RPSHMX8AcE1OE82LBVCdq8jpusJJXmrj4BMcX78 A4XTsDQx6zoZHb5Rbn8ruas/QNMRbc/gV2L0rPcAykxhMmmo4ZiHem8Q2fwbAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUc7fFnm6lulUPxMdbol0kHGnUGUUwHwYDVR0j BBgwFoAU+nEOIbxB6YJ9UtZt6Y746azpsegwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNTljODNlNWMtNGI1NS00YTFhLTgwMDMtMWI3ZWNjNTFk NDdhLzMvRkE3MTBFMjFCQzQxRTk4MjdENTJENjZERTk4RUY4RTlBQ0U5QjFFOC5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC9GQTcxMEUyMUJDNDFFOTgyN0Q1MkQ2NkRF OThFRjhFOUFDRTlCMUU4LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzU5YzgzZTVjLTRiNTUtNGExYS04MDAzLTFiN2VjYzUxZDQ3YS8zL0ZBNzEwRTIx QkM0MUU5ODI3RDUyRDY2REU5OEVGOEU5QUNFOUIxRTgubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBy6ZVo 3YJSN/jsIkcdiSCcrTavfVWJGCTPfMDFXHBnlR3bIEqBrsziqA7K4jIHN4KUU2fE NUGnVxCEcgvynEE8HYCYkatBrZW7cLPC1r5Kz44KHlM6FQQIwhvmXRXTBniOhnfe x6xpBhPpVBclLsy6gUqE8JsjnniDjKGZa+1s7p774CLVKcAjh7A5FNmCLMV2+XS8 nByhclTgMVBE8m4VXdJEwObiXm2on2wwZZaIFWXdZA+ZHjDvuH8XbJQ5rK3/sJ/j 0emStHhva6+P13LaKE2NGOT4g5rrEVBsKp8ZIo1P2rM301b3TkNAsqLS0Whd7g0i rquNp/ptxzNG2NpZ -----END CERTIFICATE-----Generated at Fri Aug 8 21:01:20 2025 by rpki-client