$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.mft File: FAC4708D7E265DB1044F9BB0EE8728587F48B484.mft (raw, json) Hash identifier: qykCnA4jflGLWjA4jP4z6ErZxTYsPvgOjPsd0ZcBj4Y= Subject key identifier: 3D:0C:1D:D4:8E:54:E7:19:75:17:F1:45:89:FD:2C:5F:BB:81:4F:8B Authority key identifier: FA:C4:70:8D:7E:26:5D:B1:04:4F:9B:B0:EE:87:28:58:7F:48:B4:84 Certificate issuer: /CN=fac4708d7e265db1044f9bb0ee8728587f48b484 Certificate serial: 043DE9FDB0DC796C77D0E6DF6489EFEFD2F65EC5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.mft Manifest number: 0F Signing time: Sat 14 Jun 2025 19:23:00 +0000 Manifest this update: Sat 14 Jun 2025 19:18:00 +0000 Manifest next update: Sun 15 Jun 2025 19:57:00 +0000 Files and hashes: 1: FAC4708D7E265DB1044F9BB0EE8728587F48B484.crl (hash: Xu1ttoMC1jkCM56dNT8sK3ugEepLrLynEmgPeK8bkB8=) 2: 3138352e38362e3232342e302f32342d3234203d3e203439313932.roa (hash: R1iDu9WCL0q2IrJGzq/wt63LOyBWhh9M6puThqaZhTQ=) 3: 326130303a363334303a3a2f33322d3332203d3e203538323939.roa (hash: r7Nz5sTQ0srB/YDhKbCNr13tvMGVCwAnxfmWfTPFEmA=) 4: 352e3232362e3134362e302f32342d3234203d3e203538323939.roa (hash: qNr0TnWXn91io5Kf4S/eUzwAUX/WkTOzXp+VxijVCjY=) 5: 352e3232362e3134342e302f32312d3231203d3e203538323939.roa (hash: fo9Lh+tNo20hmXbMUCX4eNXLCfhJfwiBBGLGaQ6kzuA=) 6: 326131323a616638303a3a2f33322d3332203d3e203536383833.roa (hash: SqpLdUzG49Jud64fYEC0hiT3rT/sz4nQsAd6iQkoKk8=) 7: 323030313a3637633a323634383a3a2f34382d3438203d3e203133303330.roa (hash: gJcgXZCcNvkeeSlp/fGn07D0YciYEry1v6B6cF0VIYA=) 8: 326130313a3230653a3a2f33322d3332203d3e203431303531.roa (hash: dHo42eRURsQRPaktXGGvl5v6FK2mmQ17gzUqGLoOaR0=) 9: 3138352e3231312e34332e302f32342d3234203d3e203536383833.roa (hash: 0GGtulQgh58mdaZy9i43/jGy8cDbbjgf1fqq974LzcM=) 10: 3138352e34342e38302e302f32342d3234203d3e203339343231.roa (hash: UQetgJ8gkrizZ8Ee9Cz8vW5vh9g+HY6FYRsN52DUj8Y=) 11: 3138352e34342e38312e302f32342d3234203d3e203339343231.roa (hash: BF6S2GfzcRLVtvnyZ19+5dCLfsNDbMuOlEIUiJ5+jzQ=) 12: 326130303a363334303a343030303a3a2f34382d3438203d3e203538323939.roa (hash: 2cIUBbXFtw6TIW3gtkGzSlPyISGn3/RYjHd6OQ6VrYU=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.crl rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.mft rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 15 Jun 2025 12:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:3d:e9:fd:b0:dc:79:6c:77:d0:e6:df:64:89:ef:ef:d2:f6:5e:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fac4708d7e265db1044f9bb0ee8728587f48b484 Validity Not Before: Jun 14 19:18:00 2025 GMT Not After : Jun 15 19:57:00 2025 GMT Subject: CN=3D0C1DD48E54E7197517F14589FD2C5FBB814F8B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:95:5c:82:06:80:d8:7b:c8:4d:4f:91:8a:5a: ff:90:1f:94:ab:b9:ac:b8:96:c4:93:65:5a:c4:25: 6a:87:1a:8c:fe:d9:1a:2a:9c:ce:84:6f:db:dc:99: 28:01:41:97:a0:69:7d:1d:ad:e8:f1:32:61:88:6b: 27:a0:e1:94:dd:d6:92:7f:e3:30:28:25:63:6e:c5: 52:36:05:27:c6:2c:a3:dc:60:89:c8:3c:3b:1b:78: 83:a1:6a:7b:3c:ca:23:9d:d8:45:5b:e4:c1:ed:d4: 14:fd:99:71:77:21:50:44:2e:65:85:e7:54:aa:de: 52:8c:b2:81:46:de:f6:b6:67:b2:a9:d3:f4:04:4f: 8a:44:e3:67:f1:c6:40:ab:c5:71:55:c3:da:e0:ec: 75:cf:91:ee:3b:81:2c:d8:47:e1:2d:26:2b:b7:91: c0:8a:d6:6a:18:3c:4b:c6:6d:fd:57:86:56:b0:2c: 40:fd:39:7c:62:da:3c:39:85:f2:b7:ec:85:7a:fb: 5d:ed:96:2c:db:62:9a:27:ad:ed:d4:50:1d:ad:2f: f7:27:97:84:e5:3b:22:95:6b:d9:74:4b:73:45:2f: ec:80:1e:d6:8b:55:61:19:13:8e:4b:1a:0d:a3:12: 65:e1:8a:ef:8d:3e:38:5e:33:cd:e2:67:bb:b8:85: 60:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:0C:1D:D4:8E:54:E7:19:75:17:F1:45:89:FD:2C:5F:BB:81:4F:8B X509v3 Authority Key Identifier: keyid:FA:C4:70:8D:7E:26:5D:B1:04:4F:9B:B0:EE:87:28:58:7F:48:B4:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:52:3d:2e:36:87:8d:2c:3f:e8:fd:c2:62:f6:9c:61:29:6f: 53:cc:48:3e:86:86:d7:3d:7b:46:41:b5:28:5d:55:80:d9:49: 2b:28:47:41:9b:53:df:34:9e:14:0c:db:e8:cc:4c:d5:9f:1b: 37:da:49:fe:16:f8:b8:78:b4:4c:65:7e:18:95:c9:51:9f:a1: 04:7c:2c:b2:77:ec:61:85:bb:3d:cd:dd:2c:22:c8:00:b5:e7: d9:e0:36:1c:00:90:52:47:41:48:d3:b4:2b:f6:8d:10:17:78: 5b:58:bb:af:56:63:b5:e4:81:b0:48:ca:bc:58:6e:dc:1b:0b: e8:df:bc:35:32:db:91:e0:8c:ea:75:ac:0a:25:96:ff:9a:06: a5:a0:c9:d1:9f:ae:0e:d6:f7:6a:c4:2d:a5:04:9f:db:3e:da: 48:b9:13:ed:06:c7:da:4f:43:a6:15:f8:60:98:db:2d:1e:eb: b6:e1:fd:39:dc:f4:06:41:d4:b2:7c:16:59:4a:45:b8:bd:e4: 03:f0:1e:8c:5d:5c:07:73:b3:f2:cc:5e:69:a7:07:15:54:0b: 0b:57:c2:c7:db:53:ad:05:df:1c:d3:08:55:3f:47:e9:45:58: 99:f2:95:d2:c0:f9:b9:14:d4:a3:81:07:4f:1d:7e:d5:a4:ca: 39:43:d5:2e -----BEGIN CERTIFICATE----- MIIFPjCCBCagAwIBAgIUBD3p/bDceWx30ObfZInv79L2XsUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoZmFjNDcwOGQ3ZTI2NWRiMTA0NGY5YmIwZWU4NzI4NTg3 ZjQ4YjQ4NDAeFw0yNTA2MTQxOTE4MDBaFw0yNTA2MTUxOTU3MDBaMDMxMTAvBgNV BAMTKDNEMEMxREQ0OEU1NEU3MTk3NTE3RjE0NTg5RkQyQzVGQkI4MTRGOEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0lVyCBoDYe8hNT5GKWv+QH5Sr uay4lsSTZVrEJWqHGoz+2RoqnM6Eb9vcmSgBQZegaX0drejxMmGIayeg4ZTd1pJ/ 4zAoJWNuxVI2BSfGLKPcYInIPDsbeIOhans8yiOd2EVb5MHt1BT9mXF3IVBELmWF 51Sq3lKMsoFG3va2Z7Kp0/QET4pE42fxxkCrxXFVw9rg7HXPke47gSzYR+EtJiu3 kcCK1moYPEvGbf1XhlawLED9OXxi2jw5hfK37IV6+13tlizbYponre3UUB2tL/cn l4TlOyKVa9l0S3NFL+yAHtaLVWEZE45LGg2jEmXhiu+NPjheM83iZ7u4hWBHAgMB AAGjggJIMIICRDAdBgNVHQ4EFgQUPQwd1I5U5xl1F/FFif0sX7uBT4swHwYDVR0j BBgwFoAU+sRwjX4mXbEET5uw7ocoWH9ItIQwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNWI1OGU2NDYtZTdhMi00NjVjLTg3YzUtNDNjMzU5YWQ5 MzY5LzAvRkFDNDcwOEQ3RTI2NURCMTA0NEY5QkIwRUU4NzI4NTg3RjQ4QjQ4NC5j cmwwZQYIKwYBBQUHAQEEWTBXMFUGCCsGAQUFBzAChklyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzEtc1J3alg0bVhiRUVUNXV3N29jb1dI OUl0SVEuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNWI1OGU2NDYt ZTdhMi00NjVjLTg3YzUtNDNjMzU5YWQ5MzY5LzAvRkFDNDcwOEQ3RTI2NURCMTA0 NEY5QkIwRUU4NzI4NTg3RjQ4QjQ4NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAFdSPS42h40sP+j9wmL2 nGEpb1PMSD6Ghtc9e0ZBtShdVYDZSSsoR0GbU980nhQM2+jMTNWfGzfaSf4W+Lh4 tExlfhiVyVGfoQR8LLJ37GGFuz3N3SwiyAC159ngNhwAkFJHQUjTtCv2jRAXeFtY u69WY7XkgbBIyrxYbtwbC+jfvDUy25HgjOp1rAollv+aBqWgydGfrg7W92rELaUE n9s+2ki5E+0Gx9pPQ6YV+GCY2y0e67bh/Tnc9AZB1LJ8FllKRbi95APwHoxdXAdz s/LMXmmnBxVUCwtXwsfbU60F3xzTCFU/R+lFWJnyldLA+bkU1KOBB08dftWkyjlD 1S4= -----END CERTIFICATE-----Generated at Sat Jun 14 22:20:59 2025 by rpki-client