$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/705b1897-d907-4dfc-b68b-77f485f58d6c/0/FDEE16BDC5420A60A3D6A8A29BD302650937B88C.mft File: FDEE16BDC5420A60A3D6A8A29BD302650937B88C.mft (raw, json) Hash identifier: Tmy/ZrMV7r5FEKcslu/928xfr8kBoYwjCxzabUVMOR0= Subject key identifier: 58:08:E8:2A:75:04:3A:E2:60:F7:97:4D:7B:03:26:08:1F:A0:DC:8C Authority key identifier: FD:EE:16:BD:C5:42:0A:60:A3:D6:A8:A2:9B:D3:02:65:09:37:B8:8C Certificate issuer: /CN=FDEE16BDC5420A60A3D6A8A29BD302650937B88C Certificate serial: 58D1C23247ED18FE931F751A8C5A7A86FD0B9F55 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/FDEE16BDC5420A60A3D6A8A29BD302650937B88C.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/705b1897-d907-4dfc-b68b-77f485f58d6c/0/FDEE16BDC5420A60A3D6A8A29BD302650937B88C.mft Manifest number: AB Signing time: Tue 04 Nov 2025 02:53:46 +0000 Manifest this update: Tue 04 Nov 2025 02:48:46 +0000 Manifest next update: Wed 05 Nov 2025 03:55:46 +0000 Files and hashes: 1: 326131343a373538303a373030303a3a2f33362d3336203d3e20323135313038.roa (hash: bvyg3HtIyqBCxLiPY89KCRG9IWT8nd/t/MqdudiybDI=) 2: 326131343a373538333a313030303a3a2f33362d3336203d3e20323135313038.roa (hash: Uc2wuWBne08reeuhGMV9FbwTFk0eKIo5Ei95b36hJuE=) 3: FDEE16BDC5420A60A3D6A8A29BD302650937B88C.crl (hash: W57ZQBnPYS1WS+6a+HYjCcbCEWmfBoNQOgjFXkwiuFE=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/705b1897-d907-4dfc-b68b-77f485f58d6c/0/FDEE16BDC5420A60A3D6A8A29BD302650937B88C.crl rsync://rsync.paas.rpki.ripe.net/repository/705b1897-d907-4dfc-b68b-77f485f58d6c/0/FDEE16BDC5420A60A3D6A8A29BD302650937B88C.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/FDEE16BDC5420A60A3D6A8A29BD302650937B88C.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 05 Nov 2025 03:55:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:d1:c2:32:47:ed:18:fe:93:1f:75:1a:8c:5a:7a:86:fd:0b:9f:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FDEE16BDC5420A60A3D6A8A29BD302650937B88C Validity Not Before: Nov 4 02:48:46 2025 GMT Not After : Nov 5 03:55:46 2025 GMT Subject: CN=5808E82A75043AE260F7974D7B0326081FA0DC8C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:4d:13:9a:26:86:fa:3a:5a:4a:0f:6b:ab:c7: ca:7e:7d:88:8f:22:f0:10:ef:b3:27:44:6e:a1:1c: e0:42:01:1a:fd:4c:31:c8:b1:5f:5c:a9:09:f0:5f: cf:01:b5:e2:ce:b5:a5:a9:c1:99:1b:53:4f:15:9c: e6:94:46:50:89:b0:32:97:3d:4d:81:e0:13:50:4c: 5d:b7:c1:88:fa:27:18:51:d9:42:02:e6:3d:50:89: 7a:fb:37:55:71:b5:8b:b9:0a:82:b2:a4:68:d8:a0: 0a:cc:33:e9:27:27:67:6c:8c:9f:ae:08:a1:df:cc: ac:d8:bc:94:4d:7b:0f:8d:c1:43:23:52:ab:6b:ef: 47:3c:3e:05:bd:34:3d:1f:bd:86:68:a2:d9:74:db: 7e:d4:d0:a9:76:4a:e8:64:a9:8c:08:44:1b:b1:f0: dd:bb:4c:64:22:2f:3a:f5:f9:69:98:5b:17:2b:3a: 86:cd:be:9e:62:87:38:23:66:d0:ee:9c:9e:d3:3f: 78:19:3b:45:a9:79:a9:e9:2a:00:3c:14:f5:51:15: 20:40:e5:86:87:00:7f:1b:eb:fa:a1:9e:87:af:39: 71:68:03:66:27:98:eb:ad:73:15:df:85:11:a3:b6: a2:e9:8f:40:fd:e0:11:b2:c8:7a:7d:3a:ad:58:b1: ef:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:08:E8:2A:75:04:3A:E2:60:F7:97:4D:7B:03:26:08:1F:A0:DC:8C X509v3 Authority Key Identifier: keyid:FD:EE:16:BD:C5:42:0A:60:A3:D6:A8:A2:9B:D3:02:65:09:37:B8:8C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/705b1897-d907-4dfc-b68b-77f485f58d6c/0/FDEE16BDC5420A60A3D6A8A29BD302650937B88C.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/FDEE16BDC5420A60A3D6A8A29BD302650937B88C.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/705b1897-d907-4dfc-b68b-77f485f58d6c/0/FDEE16BDC5420A60A3D6A8A29BD302650937B88C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:83:e1:02:1b:34:0d:30:1b:80:aa:58:92:36:ce:55:f2:51: 7c:35:a9:c7:66:f5:10:62:ac:6a:bb:7e:62:23:bd:97:0d:71: bd:33:f6:c9:3d:63:a3:32:e0:74:25:4c:83:38:bd:03:6b:94: 44:ad:1e:c0:67:44:50:a7:af:4d:58:94:82:27:98:f6:35:35: 65:21:9e:b5:eb:f2:3f:dc:30:8d:3c:b6:a0:b7:fb:12:f7:fb: af:43:c3:dc:71:8e:dc:a5:77:03:f4:63:4d:f6:64:34:8c:3c: 85:6c:51:0d:98:00:80:fc:ed:82:ef:9d:10:79:a1:6e:bd:51: 8e:23:7b:b3:bc:ef:02:0a:cf:42:e1:86:a1:fd:34:64:9d:bc: 98:eb:44:7f:f0:c4:52:0f:3c:7c:39:47:09:dc:1d:5c:bd:70: ed:e7:b8:a2:05:b5:45:53:4c:ff:63:19:8f:9f:0b:ba:0b:1c: dd:52:cb:5b:7e:78:cf:04:1c:84:75:53:ba:53:a0:1c:21:0c: a9:ec:ab:92:e8:7d:4b:3f:9e:b1:99:20:35:3d:03:5e:31:39: 18:e3:db:82:0f:97:d5:7c:5f:da:be:e5:9a:2a:10:fb:f2:f9: b0:8d:6d:34:b9:81:a5:2c:cb:20:65:16:95:8d:eb:85:69:7d: 32:0f:2d:34 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUWNHCMkftGP6TH3UajFp6hv0Ln1UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkRFRTE2QkRDNTQyMEE2MEEzRDZBOEEyOUJEMzAyNjUw OTM3Qjg4QzAeFw0yNTExMDQwMjQ4NDZaFw0yNTExMDUwMzU1NDZaMDMxMTAvBgNV BAMTKDU4MDhFODJBNzUwNDNBRTI2MEY3OTc0RDdCMDMyNjA4MUZBMERDOEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDeTROaJob6OlpKD2urx8p+fYiP IvAQ77MnRG6hHOBCARr9TDHIsV9cqQnwX88BteLOtaWpwZkbU08VnOaURlCJsDKX PU2B4BNQTF23wYj6JxhR2UIC5j1QiXr7N1VxtYu5CoKypGjYoArMM+knJ2dsjJ+u CKHfzKzYvJRNew+NwUMjUqtr70c8PgW9ND0fvYZootl0237U0Kl2SuhkqYwIRBux 8N27TGQiLzr1+WmYWxcrOobNvp5ihzgjZtDunJ7TP3gZO0WpeanpKgA8FPVRFSBA 5YaHAH8b6/qhnoevOXFoA2YnmOutcxXfhRGjtqLpj0D94BGyyHp9Oq1Yse+LAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUWAjoKnUEOuJg95dNewMmCB+g3IwwHwYDVR0j BBgwFoAU/e4WvcVCCmCj1qiim9MCZQk3uIwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNzA1YjE4OTctZDkwNy00ZGZjLWI2OGItNzdmNDg1ZjU4 ZDZjLzAvRkRFRTE2QkRDNTQyMEE2MEEzRDZBOEEyOUJEMzAyNjUwOTM3Qjg4Qy5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC9GREVFMTZCREM1NDIwQTYwQTNENkE4QTI5 QkQzMDI2NTA5MzdCODhDLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzcwNWIxODk3LWQ5MDctNGRmYy1iNjhiLTc3ZjQ4NWY1OGQ2Yy8wL0ZERUUxNkJE QzU0MjBBNjBBM0Q2QThBMjlCRDMwMjY1MDkzN0I4OEMubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBlg+EC GzQNMBuAqliSNs5V8lF8NanHZvUQYqxqu35iI72XDXG9M/bJPWOjMuB0JUyDOL0D a5RErR7AZ0RQp69NWJSCJ5j2NTVlIZ616/I/3DCNPLagt/sS9/uvQ8PccY7cpXcD 9GNN9mQ0jDyFbFENmACA/O2C750QeaFuvVGOI3uzvO8CCs9C4Yah/TRknbyY60R/ 8MRSDzx8OUcJ3B1cvXDt57iiBbVFU0z/YxmPnwu6CxzdUstbfnjPBByEdVO6U6Ac IQyp7KuS6H1LP56xmSA1PQNeMTkY49uCD5fVfF/avuWaKhD78vmwjW00uYGlLMsg ZRaVjeuFaX0yDy00 -----END CERTIFICATE-----Generated at Tue Nov 4 14:46:47 2025 by rpki-client