$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/705b1897-d907-4dfc-b68b-77f485f58d6c/0/FDEE16BDC5420A60A3D6A8A29BD302650937B88C.mft File: FDEE16BDC5420A60A3D6A8A29BD302650937B88C.mft (raw, json) Hash identifier: 4riVnl9KePDnQADycWkJjJS0AdvDeJ3I7J4spSHJFYw= Subject key identifier: 59:51:75:AC:B5:6E:A3:5C:98:72:35:11:8D:6D:6D:AE:B0:0E:9A:DE Authority key identifier: FD:EE:16:BD:C5:42:0A:60:A3:D6:A8:A2:9B:D3:02:65:09:37:B8:8C Certificate issuer: /CN=FDEE16BDC5420A60A3D6A8A29BD302650937B88C Certificate serial: 7E79120963481CB10F3404A62CC733BA31BAB075 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/FDEE16BDC5420A60A3D6A8A29BD302650937B88C.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/705b1897-d907-4dfc-b68b-77f485f58d6c/0/FDEE16BDC5420A60A3D6A8A29BD302650937B88C.mft Manifest number: 32 Signing time: Tue 05 Aug 2025 17:28:04 +0000 Manifest this update: Tue 05 Aug 2025 17:23:04 +0000 Manifest next update: Wed 06 Aug 2025 21:22:04 +0000 Files and hashes: 1: FDEE16BDC5420A60A3D6A8A29BD302650937B88C.crl (hash: dwzRtquPTxSpFxzSohmnWLjGxkBrknftAOBfjznJEUc=) 2: 326131343a373538303a373030303a3a2f33362d3336203d3e20323135313038.roa (hash: bvyg3HtIyqBCxLiPY89KCRG9IWT8nd/t/MqdudiybDI=) 3: 326131343a373538333a313030303a3a2f33362d3336203d3e20323135313038.roa (hash: Uc2wuWBne08reeuhGMV9FbwTFk0eKIo5Ei95b36hJuE=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/705b1897-d907-4dfc-b68b-77f485f58d6c/0/FDEE16BDC5420A60A3D6A8A29BD302650937B88C.crl rsync://rsync.paas.rpki.ripe.net/repository/705b1897-d907-4dfc-b68b-77f485f58d6c/0/FDEE16BDC5420A60A3D6A8A29BD302650937B88C.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/FDEE16BDC5420A60A3D6A8A29BD302650937B88C.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 06 Aug 2025 21:22:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:79:12:09:63:48:1c:b1:0f:34:04:a6:2c:c7:33:ba:31:ba:b0:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FDEE16BDC5420A60A3D6A8A29BD302650937B88C Validity Not Before: Aug 5 17:23:04 2025 GMT Not After : Aug 6 21:22:04 2025 GMT Subject: CN=595175ACB56EA35C987235118D6D6DAEB00E9ADE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:ae:5c:14:13:46:4a:a3:63:ae:e1:7e:29:ab: 26:71:51:e8:8a:ff:22:9c:79:de:a5:5e:8a:ce:1b: 19:07:49:84:fe:62:18:b5:73:05:13:f0:75:91:86: 06:bb:9f:9a:b4:34:80:0a:fd:60:d3:e6:68:73:90: 33:3d:93:6a:cc:1b:66:5f:21:e1:26:ff:45:38:7f: 7e:85:37:91:5f:45:df:3c:6a:bc:eb:19:9e:0f:4c: a5:b6:21:37:83:67:e2:4f:ef:8e:af:09:9c:a9:d4: e5:c2:1f:4a:95:51:56:fa:83:c5:53:ac:6a:e3:d1: f5:77:93:87:a2:85:45:3b:db:a1:df:09:31:13:0b: 30:5d:70:56:14:3a:82:a5:3a:37:ac:ca:25:2d:c7: ed:cb:2a:30:c5:5b:94:f0:bb:b7:b6:50:25:32:68: 47:00:1d:d1:7b:ca:04:29:06:ec:8f:24:d4:52:1b: 6e:49:b8:c3:10:bd:93:ea:47:2e:e6:9e:c8:6b:cd: eb:c9:f6:6d:fc:1a:b4:ee:b5:fa:4b:89:6b:29:0b: d0:9a:b3:f9:a3:c7:47:e7:f1:97:cc:0e:10:fb:a0: 61:81:ff:14:e3:f4:cc:0e:c1:0c:8e:54:9b:86:dd: 23:a6:1a:45:b3:59:7c:65:af:bc:9d:82:22:35:f8: 3f:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:51:75:AC:B5:6E:A3:5C:98:72:35:11:8D:6D:6D:AE:B0:0E:9A:DE X509v3 Authority Key Identifier: keyid:FD:EE:16:BD:C5:42:0A:60:A3:D6:A8:A2:9B:D3:02:65:09:37:B8:8C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/705b1897-d907-4dfc-b68b-77f485f58d6c/0/FDEE16BDC5420A60A3D6A8A29BD302650937B88C.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/FDEE16BDC5420A60A3D6A8A29BD302650937B88C.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/705b1897-d907-4dfc-b68b-77f485f58d6c/0/FDEE16BDC5420A60A3D6A8A29BD302650937B88C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:fa:53:9e:12:5e:24:71:75:2d:b3:3d:a5:3a:09:a8:c9:51: f6:97:ef:8c:2d:58:eb:a6:f9:71:51:fd:95:84:74:de:5f:d3: a7:71:f7:22:48:78:a0:77:64:34:5e:c6:b6:65:e3:62:95:88: 49:59:ee:9a:b5:0d:3c:ad:a1:81:01:d6:a1:d8:9c:53:07:9e: ec:6a:5f:3d:a2:ad:de:b1:1a:a7:da:5e:9e:a6:33:d4:f6:fe: d8:e3:6e:e0:cd:9f:0d:88:7e:57:51:b1:e0:1f:28:fd:16:92: 27:17:43:52:70:b6:65:c0:0e:e6:9f:1d:e3:99:93:62:91:2d: 25:1f:d2:7f:77:ad:ba:f4:c2:e1:11:1f:57:02:78:0d:5c:fc: bf:2b:d6:06:48:3b:57:a8:17:81:a4:60:00:4d:ab:f8:e8:a8: fa:88:78:d1:f7:48:eb:06:0c:a5:96:6b:40:45:7b:58:92:92: 76:89:bc:9c:69:27:3c:05:13:aa:20:60:24:5b:d5:bb:41:f1: c2:de:96:68:5e:ab:52:83:59:8a:d2:39:1e:fa:61:00:93:04: 34:62:51:de:8e:6a:b2:71:e0:f4:06:02:84:e7:23:81:83:03: 6b:62:50:60:aa:df:71:f5:c4:79:cf:6b:44:9a:7c:03:1f:9a: fc:23:56:b4 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUfnkSCWNIHLEPNASmLMczujG6sHUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkRFRTE2QkRDNTQyMEE2MEEzRDZBOEEyOUJEMzAyNjUw OTM3Qjg4QzAeFw0yNTA4MDUxNzIzMDRaFw0yNTA4MDYyMTIyMDRaMDMxMTAvBgNV BAMTKDU5NTE3NUFDQjU2RUEzNUM5ODcyMzUxMThENkQ2REFFQjAwRTlBREUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyrlwUE0ZKo2Ou4X4pqyZxUeiK /yKced6lXorOGxkHSYT+Yhi1cwUT8HWRhga7n5q0NIAK/WDT5mhzkDM9k2rMG2Zf IeEm/0U4f36FN5FfRd88arzrGZ4PTKW2ITeDZ+JP746vCZyp1OXCH0qVUVb6g8VT rGrj0fV3k4eihUU726HfCTETCzBdcFYUOoKlOjesyiUtx+3LKjDFW5Twu7e2UCUy aEcAHdF7ygQpBuyPJNRSG25JuMMQvZPqRy7mnshrzevJ9m38GrTutfpLiWspC9Ca s/mjx0fn8ZfMDhD7oGGB/xTj9MwOwQyOVJuG3SOmGkWzWXxlr7ydgiI1+D+DAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUWVF1rLVuo1yYcjURjW1trrAOmt4wHwYDVR0j BBgwFoAU/e4WvcVCCmCj1qiim9MCZQk3uIwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNzA1YjE4OTctZDkwNy00ZGZjLWI2OGItNzdmNDg1ZjU4 ZDZjLzAvRkRFRTE2QkRDNTQyMEE2MEEzRDZBOEEyOUJEMzAyNjUwOTM3Qjg4Qy5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC9GREVFMTZCREM1NDIwQTYwQTNENkE4QTI5 QkQzMDI2NTA5MzdCODhDLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzcwNWIxODk3LWQ5MDctNGRmYy1iNjhiLTc3ZjQ4NWY1OGQ2Yy8wL0ZERUUxNkJE QzU0MjBBNjBBM0Q2QThBMjlCRDMwMjY1MDkzN0I4OEMubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBf+lOe El4kcXUtsz2lOgmoyVH2l++MLVjrpvlxUf2VhHTeX9OncfciSHigd2Q0Xsa2ZeNi lYhJWe6atQ08raGBAdah2JxTB57sal89oq3esRqn2l6epjPU9v7Y427gzZ8NiH5X UbHgHyj9FpInF0NScLZlwA7mnx3jmZNikS0lH9J/d6269MLhER9XAngNXPy/K9YG SDtXqBeBpGAATav46Kj6iHjR90jrBgyllmtARXtYkpJ2ibycaSc8BROqIGAkW9W7 QfHC3pZoXqtSg1mK0jke+mEAkwQ0YlHejmqyceD0BgKE5yOBgwNrYlBgqt9x9cR5 z2tEmnwDH5r8I1a0 -----END CERTIFICATE-----Generated at Wed Aug 6 07:46:04 2025 by rpki-client