$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.mft File: FAC4708D7E265DB1044F9BB0EE8728587F48B484.mft (raw, json) Hash identifier: CdPvBTYL3rmTbYW2Q2DTP3sxTqj3Qp8Tv+JPLmQSXvI= Subject key identifier: A6:E3:C3:DA:B1:10:14:B8:A9:37:0A:F4:74:08:9D:37:FD:70:2E:DB Authority key identifier: FA:C4:70:8D:7E:26:5D:B1:04:4F:9B:B0:EE:87:28:58:7F:48:B4:84 Certificate issuer: /CN=fac4708d7e265db1044f9bb0ee8728587f48b484 Certificate serial: 4671405A7C2F014BFB0807AF5BC26DD88663D5F5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.mft Manifest number: CD Signing time: Tue 04 Nov 2025 13:29:27 +0000 Manifest this update: Tue 04 Nov 2025 13:24:27 +0000 Manifest next update: Wed 05 Nov 2025 13:56:27 +0000 Files and hashes: 1: 3138352e38362e3232342e302f32342d3234203d3e203439313932.roa (hash: R1iDu9WCL0q2IrJGzq/wt63LOyBWhh9M6puThqaZhTQ=) 2: 326130303a363334303a343030303a3a2f34382d3438203d3e203538323939.roa (hash: 2cIUBbXFtw6TIW3gtkGzSlPyISGn3/RYjHd6OQ6VrYU=) 3: 3138352e34342e38312e302f32342d3234203d3e203339343231.roa (hash: BF6S2GfzcRLVtvnyZ19+5dCLfsNDbMuOlEIUiJ5+jzQ=) 4: FAC4708D7E265DB1044F9BB0EE8728587F48B484.crl (hash: E//tB/XFbP5MiCdsJuS5qTQoEfFHhdhr1JGWXvfwpCc=) 5: 3138352e34342e38302e302f32342d3234203d3e203339343231.roa (hash: UQetgJ8gkrizZ8Ee9Cz8vW5vh9g+HY6FYRsN52DUj8Y=) 6: 326130303a363334303a3a2f33322d3332203d3e203538323939.roa (hash: r7Nz5sTQ0srB/YDhKbCNr13tvMGVCwAnxfmWfTPFEmA=) 7: 352e3232362e3134342e302f32312d3231203d3e203538323939.roa (hash: fo9Lh+tNo20hmXbMUCX4eNXLCfhJfwiBBGLGaQ6kzuA=) 8: 323030313a3637633a323634383a3a2f34382d3438203d3e203133303330.roa (hash: gJcgXZCcNvkeeSlp/fGn07D0YciYEry1v6B6cF0VIYA=) 9: 3138352e3231312e34332e302f32342d3234203d3e203536383833.roa (hash: 0GGtulQgh58mdaZy9i43/jGy8cDbbjgf1fqq974LzcM=) 10: 352e3232362e3134362e302f32342d3234203d3e203538323939.roa (hash: qNr0TnWXn91io5Kf4S/eUzwAUX/WkTOzXp+VxijVCjY=) 11: 326130313a3230653a3a2f33322d3332203d3e203431303531.roa (hash: dHo42eRURsQRPaktXGGvl5v6FK2mmQ17gzUqGLoOaR0=) 12: 3138352e38362e3232382e302f32332d3234203d3e203538323939.roa (hash: 890AdEnFU4YBNlCNp/5Ad5R0sKIy6AzHzJmChUqZzls=) 13: 326131323a616638303a3a2f33322d3332203d3e203536383833.roa (hash: SqpLdUzG49Jud64fYEC0hiT3rT/sz4nQsAd6iQkoKk8=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.crl rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.mft rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 05 Nov 2025 13:56:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:71:40:5a:7c:2f:01:4b:fb:08:07:af:5b:c2:6d:d8:86:63:d5:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fac4708d7e265db1044f9bb0ee8728587f48b484 Validity Not Before: Nov 4 13:24:27 2025 GMT Not After : Nov 5 13:56:27 2025 GMT Subject: CN=A6E3C3DAB11014B8A9370AF474089D37FD702EDB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:b6:52:ec:f8:b1:84:7f:ff:25:5d:52:5f:0a: 84:18:51:96:d1:a6:42:57:8e:21:04:e8:84:44:b1: cb:5c:22:bd:24:6e:df:7c:81:f2:4f:5f:11:06:21: c0:dc:c1:ae:27:e0:02:11:a0:db:5e:39:01:14:0c: 1a:7a:05:18:02:60:cf:84:91:ca:fa:83:42:b4:f3: cf:be:9a:44:5e:03:e1:95:c8:85:d5:00:92:94:b1: 2e:88:2c:93:3c:f4:40:1b:1e:73:f7:07:fb:49:44: 8e:2a:cf:53:1c:e5:65:84:8b:4d:e7:60:cb:b9:bf: 69:cd:1c:32:0b:f7:36:6d:98:b3:b9:5b:69:1c:a6: 98:69:68:3d:cc:01:76:e6:70:e1:74:41:26:c4:4c: e6:86:57:53:c5:ef:04:7a:dd:10:69:9b:df:e6:1f: 39:f0:aa:d4:f1:fd:03:e7:f8:bf:42:bc:76:93:d0: f0:82:27:f0:05:58:08:9e:cc:e1:85:fc:c1:9f:22: be:e2:26:fd:9d:80:9d:a6:a6:6b:f3:b6:e6:da:4f: 22:bc:3a:ee:66:24:57:27:b1:59:4a:e7:b3:da:0c: dd:5f:58:80:25:4d:5b:84:10:08:57:31:09:95:ea: 3e:2c:72:b3:6d:58:9b:41:81:f9:32:74:b0:f2:10: c7:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:E3:C3:DA:B1:10:14:B8:A9:37:0A:F4:74:08:9D:37:FD:70:2E:DB X509v3 Authority Key Identifier: keyid:FA:C4:70:8D:7E:26:5D:B1:04:4F:9B:B0:EE:87:28:58:7F:48:B4:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 96:f0:bc:e5:0c:f0:a1:5f:a5:1f:1f:b8:2e:49:ea:01:ee:a2: e6:d4:fe:f5:7e:c3:5d:af:78:19:45:4d:e5:48:3d:8a:ea:7c: 91:80:d4:2a:da:b8:ab:b9:1a:3d:24:9e:9e:00:e5:80:b5:5d: ef:20:f3:51:2d:0d:c0:ad:41:0d:06:29:65:36:ac:2f:b4:05: 95:f8:61:6e:c2:8b:4b:c8:61:64:7b:15:b9:53:be:39:1a:30: 61:e9:06:81:fc:4e:19:4f:83:dd:c8:7d:cc:3f:37:ca:af:e8: 05:7b:ff:b8:b1:6e:98:00:e9:32:ee:32:b8:2a:4e:7d:c9:77: 09:55:d9:d4:db:59:b7:a3:13:3b:b2:e0:3d:9e:e2:10:e2:0f: e3:5c:8e:21:4e:0c:ec:87:50:1f:30:73:18:f6:82:97:79:5c: ac:c1:cb:07:cb:7f:0d:08:02:c3:4c:55:eb:24:a2:9c:ca:45: 6e:27:6e:5f:c7:af:5c:24:fb:ac:76:88:0e:d3:cb:43:a7:5d: 38:4b:5e:f1:68:13:7b:e0:e6:d2:06:c5:8b:db:52:62:4c:ec: 88:0e:5b:cb:8e:8f:91:82:93:4a:d0:5f:f3:17:fa:69:11:32: 04:e4:1f:a9:70:eb:a6:c2:47:4f:44:40:c7:5f:f0:30:de:61: 90:c9:59:d8 -----BEGIN CERTIFICATE----- MIIFPjCCBCagAwIBAgIURnFAWnwvAUv7CAevW8Jt2IZj1fUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoZmFjNDcwOGQ3ZTI2NWRiMTA0NGY5YmIwZWU4NzI4NTg3 ZjQ4YjQ4NDAeFw0yNTExMDQxMzI0MjdaFw0yNTExMDUxMzU2MjdaMDMxMTAvBgNV BAMTKEE2RTNDM0RBQjExMDE0QjhBOTM3MEFGNDc0MDg5RDM3RkQ3MDJFREIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0tlLs+LGEf/8lXVJfCoQYUZbR pkJXjiEE6IREsctcIr0kbt98gfJPXxEGIcDcwa4n4AIRoNteOQEUDBp6BRgCYM+E kcr6g0K088++mkReA+GVyIXVAJKUsS6ILJM89EAbHnP3B/tJRI4qz1Mc5WWEi03n YMu5v2nNHDIL9zZtmLO5W2kcpphpaD3MAXbmcOF0QSbETOaGV1PF7wR63RBpm9/m HznwqtTx/QPn+L9CvHaT0PCCJ/AFWAiezOGF/MGfIr7iJv2dgJ2mpmvztubaTyK8 Ou5mJFcnsVlK57PaDN1fWIAlTVuEEAhXMQmV6j4scrNtWJtBgfkydLDyEMfbAgMB AAGjggJIMIICRDAdBgNVHQ4EFgQUpuPD2rEQFLipNwr0dAidN/1wLtswHwYDVR0j BBgwFoAU+sRwjX4mXbEET5uw7ocoWH9ItIQwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNWI1OGU2NDYtZTdhMi00NjVjLTg3YzUtNDNjMzU5YWQ5 MzY5LzAvRkFDNDcwOEQ3RTI2NURCMTA0NEY5QkIwRUU4NzI4NTg3RjQ4QjQ4NC5j cmwwZQYIKwYBBQUHAQEEWTBXMFUGCCsGAQUFBzAChklyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzEtc1J3alg0bVhiRUVUNXV3N29jb1dI OUl0SVEuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNWI1OGU2NDYt ZTdhMi00NjVjLTg3YzUtNDNjMzU5YWQ5MzY5LzAvRkFDNDcwOEQ3RTI2NURCMTA0 NEY5QkIwRUU4NzI4NTg3RjQ4QjQ4NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAJbwvOUM8KFfpR8fuC5J 6gHuoubU/vV+w12veBlFTeVIPYrqfJGA1CrauKu5Gj0knp4A5YC1Xe8g81EtDcCt QQ0GKWU2rC+0BZX4YW7Ci0vIYWR7FblTvjkaMGHpBoH8ThlPg93Ifcw/N8qv6AV7 /7ixbpgA6TLuMrgqTn3JdwlV2dTbWbejEzuy4D2e4hDiD+NcjiFODOyHUB8wcxj2 gpd5XKzBywfLfw0IAsNMVeskopzKRW4nbl/Hr1wk+6x2iA7Ty0OnXThLXvFoE3vg 5tIGxYvbUmJM7IgOW8uOj5GCk0rQX/MX+mkRMgTkH6lw66bCR09EQMdf8DDeYZDJ Wdg= -----END CERTIFICATE-----Generated at Wed Nov 5 02:43:11 2025 by rpki-client