$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/59c83e5c-4b55-4a1a-8003-1b7ecc51d47a/3/FA710E21BC41E9827D52D66DE98EF8E9ACE9B1E8.mft File: FA710E21BC41E9827D52D66DE98EF8E9ACE9B1E8.mft (raw, json) Hash identifier: QO4RS4e/rtIYU1guvASLwPgHWA8n+H/HV9U34yYomLQ= Subject key identifier: 7F:36:4A:20:82:E5:C6:6C:A8:8C:02:43:38:75:DE:BF:44:5E:39:E9 Authority key identifier: FA:71:0E:21:BC:41:E9:82:7D:52:D6:6D:E9:8E:F8:E9:AC:E9:B1:E8 Certificate issuer: /CN=FA710E21BC41E9827D52D66DE98EF8E9ACE9B1E8 Certificate serial: 1035884A6F045AFC07B7603AF41167F78DE301FC Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/FA710E21BC41E9827D52D66DE98EF8E9ACE9B1E8.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/59c83e5c-4b55-4a1a-8003-1b7ecc51d47a/3/FA710E21BC41E9827D52D66DE98EF8E9ACE9B1E8.mft Manifest number: 92 Signing time: Tue 04 Nov 2025 11:00:39 +0000 Manifest this update: Tue 04 Nov 2025 10:55:39 +0000 Manifest next update: Wed 05 Nov 2025 14:48:39 +0000 Files and hashes: 1: 326131343a373538343a343130303a3a2f34302d3438203d3e20323136333039.roa (hash: J9Fi36nQGqAgueP6UU6iZv8HlrGSaFogPoGVrEhPYYg=) 2: 326131343a373538343a343830303a3a2f34382d3438203d3e20323131333538.roa (hash: dxI70qoTw8AqT4GSbNKeSr6HFS9kuFZrrwUT/py32Kc=) 3: 326131343a373538343a343030303a3a2f33362d3438203d3e2036353137.roa (hash: 9qxxzty+nI98+cY44+m4DwmBg2WIZrsDW0snWoFPb+U=) 4: FA710E21BC41E9827D52D66DE98EF8E9ACE9B1E8.crl (hash: 9B6p1hBfNc2OzpZAmLP//evsmLh+S6EiHeeUSzyLDAk=) 5: 326131343a373538343a346630303a3a2f34302d3430203d3e20323132353136.roa (hash: CNfVsinVsceZGjOaXQsHUjsBZSefgQTBz85mK3PRJtU=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/59c83e5c-4b55-4a1a-8003-1b7ecc51d47a/3/FA710E21BC41E9827D52D66DE98EF8E9ACE9B1E8.crl rsync://rsync.paas.rpki.ripe.net/repository/59c83e5c-4b55-4a1a-8003-1b7ecc51d47a/3/FA710E21BC41E9827D52D66DE98EF8E9ACE9B1E8.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/FA710E21BC41E9827D52D66DE98EF8E9ACE9B1E8.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 05 Nov 2025 14:48:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:35:88:4a:6f:04:5a:fc:07:b7:60:3a:f4:11:67:f7:8d:e3:01:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FA710E21BC41E9827D52D66DE98EF8E9ACE9B1E8 Validity Not Before: Nov 4 10:55:39 2025 GMT Not After : Nov 5 14:48:39 2025 GMT Subject: CN=7F364A2082E5C66CA88C02433875DEBF445E39E9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:1c:ed:63:38:12:55:ac:1c:14:27:81:e6:ba: 12:e3:43:dd:3f:85:3d:cf:a1:99:29:5d:3b:f4:55: 1f:79:c0:d2:d1:ba:a6:70:00:4e:07:10:28:94:96: ab:66:80:c2:48:f1:93:12:f8:b1:6e:47:7b:64:1c: 11:dd:81:a2:1e:00:03:b4:be:89:80:2a:bc:c1:a0: 8d:47:39:69:e6:f0:97:19:73:78:4b:34:56:13:eb: cd:30:2a:f5:a1:3b:cf:6f:7f:cd:49:2e:45:a0:bf: 80:5b:f4:49:19:a3:84:6f:67:04:25:ca:f6:15:d5: 69:e8:2d:e4:89:52:69:67:8f:c0:7e:77:27:ea:75: 73:68:2a:0f:a5:f4:1d:6f:5b:43:9a:96:e7:ce:a0: dd:6a:ff:07:72:50:7b:95:62:b6:82:8b:5f:1f:40: ba:a9:2d:49:d7:1c:b5:b5:67:f6:be:52:3f:13:01: 3e:00:8e:c1:1c:f2:3d:ba:c1:77:2f:8c:2d:9a:cf: 36:48:f6:84:9f:fb:ce:b3:60:52:8c:8e:45:6f:0f: 8e:0b:d1:3c:3b:0e:6e:cb:8b:7a:85:02:a3:31:bb: ff:76:2c:c4:66:f4:51:9f:8b:d8:70:b8:e0:5c:00: 2a:e5:d4:cb:ee:33:b5:03:26:20:8b:d3:b4:b4:23: 08:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:36:4A:20:82:E5:C6:6C:A8:8C:02:43:38:75:DE:BF:44:5E:39:E9 X509v3 Authority Key Identifier: keyid:FA:71:0E:21:BC:41:E9:82:7D:52:D6:6D:E9:8E:F8:E9:AC:E9:B1:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/59c83e5c-4b55-4a1a-8003-1b7ecc51d47a/3/FA710E21BC41E9827D52D66DE98EF8E9ACE9B1E8.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/FA710E21BC41E9827D52D66DE98EF8E9ACE9B1E8.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/59c83e5c-4b55-4a1a-8003-1b7ecc51d47a/3/FA710E21BC41E9827D52D66DE98EF8E9ACE9B1E8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:72:9c:23:ad:e9:54:46:ca:1f:3c:9c:26:85:46:90:3f:7a: 00:a6:9e:20:19:84:e5:78:3d:ac:31:33:d8:63:76:87:61:e8: 96:38:13:25:ea:0a:3d:1d:5a:6a:dd:db:62:ab:21:95:6f:9a: bd:66:a4:c2:7f:64:7b:bd:86:7e:60:29:d2:ad:25:26:6f:bc: a5:9b:87:eb:c8:80:72:5e:35:b7:84:6e:f6:7a:d0:a5:86:2c: 99:e1:1b:59:db:06:68:1a:24:b3:e6:df:3a:b2:88:b7:d0:e2: 0f:24:85:a1:85:46:4a:10:1b:da:c7:40:d6:f8:c0:23:50:f2: 0b:1b:05:f3:17:6a:cd:fb:05:fa:3c:e3:a6:95:bd:a8:2f:1b: 46:a8:6f:5f:53:3f:9e:79:b8:11:2f:82:1d:b8:f7:d0:63:be: d7:85:3c:0c:d1:ce:76:5c:53:8e:02:8c:2f:ee:83:d4:d1:85: 0b:8d:f3:52:26:91:a6:fc:33:f1:5f:1e:0e:83:33:40:aa:25: 2d:a0:74:de:42:0d:9f:2f:83:28:5f:51:2e:d6:dd:2c:5d:b9: 09:73:bb:4e:ad:09:22:93:fe:04:9b:ac:52:2e:2a:d5:90:50: 76:df:70:30:da:af:71:85:74:26:30:5f:2c:a5:cc:4e:a8:6a: f4:8a:99:18 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUEDWISm8EWvwHt2A69BFn943jAfwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkE3MTBFMjFCQzQxRTk4MjdENTJENjZERTk4RUY4RTlB Q0U5QjFFODAeFw0yNTExMDQxMDU1MzlaFw0yNTExMDUxNDQ4MzlaMDMxMTAvBgNV BAMTKDdGMzY0QTIwODJFNUM2NkNBODhDMDI0MzM4NzVERUJGNDQ1RTM5RTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMHO1jOBJVrBwUJ4HmuhLjQ90/ hT3PoZkpXTv0VR95wNLRuqZwAE4HECiUlqtmgMJI8ZMS+LFuR3tkHBHdgaIeAAO0 vomAKrzBoI1HOWnm8JcZc3hLNFYT680wKvWhO89vf81JLkWgv4Bb9EkZo4RvZwQl yvYV1WnoLeSJUmlnj8B+dyfqdXNoKg+l9B1vW0OalufOoN1q/wdyUHuVYraCi18f QLqpLUnXHLW1Z/a+Uj8TAT4AjsEc8j26wXcvjC2azzZI9oSf+86zYFKMjkVvD44L 0Tw7Dm7Li3qFAqMxu/92LMRm9FGfi9hwuOBcACrl1MvuM7UDJiCL07S0IwjnAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUfzZKIILlxmyojAJDOHXev0ReOekwHwYDVR0j BBgwFoAU+nEOIbxB6YJ9UtZt6Y746azpsegwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNTljODNlNWMtNGI1NS00YTFhLTgwMDMtMWI3ZWNjNTFk NDdhLzMvRkE3MTBFMjFCQzQxRTk4MjdENTJENjZERTk4RUY4RTlBQ0U5QjFFOC5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC9GQTcxMEUyMUJDNDFFOTgyN0Q1MkQ2NkRF OThFRjhFOUFDRTlCMUU4LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzU5YzgzZTVjLTRiNTUtNGExYS04MDAzLTFiN2VjYzUxZDQ3YS8zL0ZBNzEwRTIx QkM0MUU5ODI3RDUyRDY2REU5OEVGOEU5QUNFOUIxRTgubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCNcpwj relURsofPJwmhUaQP3oApp4gGYTleD2sMTPYY3aHYeiWOBMl6go9HVpq3dtiqyGV b5q9ZqTCf2R7vYZ+YCnSrSUmb7ylm4fryIByXjW3hG72etClhiyZ4RtZ2wZoGiSz 5t86soi30OIPJIWhhUZKEBvax0DW+MAjUPILGwXzF2rN+wX6POOmlb2oLxtGqG9f Uz+eebgRL4IduPfQY77XhTwM0c52XFOOAowv7oPU0YULjfNSJpGm/DPxXx4OgzNA qiUtoHTeQg2fL4MoX1Eu1t0sXbkJc7tOrQkik/4Em6xSLirVkFB233Aw2q9xhXQm MF8spcxOqGr0ipkY -----END CERTIFICATE-----Generated at Tue Nov 4 20:22:40 2025 by rpki-client