$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/1/FA8F32A0B21DD2779315422B5A2184C649E03C0B.mft File: FA8F32A0B21DD2779315422B5A2184C649E03C0B.mft (raw, json) Hash identifier: UMOnC8yTTgDATpxJQqtlAJSQCRHON1n849dB96Tpp48= Subject key identifier: AD:5E:7F:09:D8:DB:D9:30:61:62:CA:20:88:4C:E2:E3:00:6D:DC:10 Authority key identifier: FA:8F:32:A0:B2:1D:D2:77:93:15:42:2B:5A:21:84:C6:49:E0:3C:0B Certificate issuer: /CN=FA8F32A0B21DD2779315422B5A2184C649E03C0B Certificate serial: 3810547BD5C35662916CE847CEACE627952265BD Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/FA8F32A0B21DD2779315422B5A2184C649E03C0B.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/1/FA8F32A0B21DD2779315422B5A2184C649E03C0B.mft Manifest number: 040C Signing time: Mon 16 Jun 2025 02:06:34 +0000 Manifest this update: Mon 16 Jun 2025 02:01:34 +0000 Manifest next update: Tue 17 Jun 2025 05:58:34 +0000 Files and hashes: 1: 326130373a353463313a663030303a3a2f33362d3438203d3e20323038343533.roa (hash: /CFUhpNUUZNwoRgflpnALQIis6DpR20ZsBTAXpcqHGA=) 2: FA8F32A0B21DD2779315422B5A2184C649E03C0B.crl (hash: Ed1ocQlhKOk9N6ZVqEl9E5PPH8VQvjDvTdIWa8qDKS0=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/1/FA8F32A0B21DD2779315422B5A2184C649E03C0B.crl rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/1/FA8F32A0B21DD2779315422B5A2184C649E03C0B.mft rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/FA8F32A0B21DD2779315422B5A2184C649E03C0B.cer rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.crl rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 16 Jun 2025 20:46:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:10:54:7b:d5:c3:56:62:91:6c:e8:47:ce:ac:e6:27:95:22:65:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FA8F32A0B21DD2779315422B5A2184C649E03C0B Validity Not Before: Jun 16 02:01:34 2025 GMT Not After : Jun 17 05:58:34 2025 GMT Subject: CN=AD5E7F09D8DBD9306162CA20884CE2E3006DDC10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:8b:53:52:24:82:50:38:5f:31:a1:25:ce:61: 3c:4d:20:f3:eb:d8:87:84:1f:da:3c:0d:fe:6c:80: c0:6f:02:3c:4c:6e:ea:7f:66:f7:f9:28:29:72:53: 60:79:86:f8:99:eb:e4:63:af:49:98:9b:68:48:dc: 5f:41:35:25:c1:9a:81:c7:b2:bd:12:6c:57:77:ef: a9:3e:9f:3f:1c:fb:16:a4:0e:92:1a:81:e5:c1:8a: 7f:d9:d4:a9:c1:d2:da:db:73:fb:df:1f:f1:0a:4b: f7:fa:70:79:84:91:a2:fb:ec:0e:41:79:0d:96:5f: 2a:91:f9:d4:d5:bd:75:e0:e6:f3:a5:57:36:3e:da: d5:b9:28:ef:76:32:3e:dd:ea:69:d8:3e:ad:28:72: 78:7b:18:b6:d6:a0:53:c9:25:b1:df:c9:6a:b9:cb: 00:09:52:91:42:36:0e:f1:19:ba:4f:e4:a7:e6:78: 6b:a9:08:2c:b2:af:94:9c:7f:e4:44:79:64:56:c8: 53:87:82:06:c4:f5:bc:fa:f2:0d:a1:4e:f6:89:87: 1b:69:14:8a:c1:f0:7e:53:c1:1c:6d:90:be:1f:1e: 83:90:0c:40:84:fc:71:cb:1c:d7:1f:06:69:de:7b: ec:82:39:3b:fa:f1:69:7a:b5:2b:ab:71:1e:08:1a: 97:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:5E:7F:09:D8:DB:D9:30:61:62:CA:20:88:4C:E2:E3:00:6D:DC:10 X509v3 Authority Key Identifier: keyid:FA:8F:32:A0:B2:1D:D2:77:93:15:42:2B:5A:21:84:C6:49:E0:3C:0B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/1/FA8F32A0B21DD2779315422B5A2184C649E03C0B.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/FA8F32A0B21DD2779315422B5A2184C649E03C0B.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/1/FA8F32A0B21DD2779315422B5A2184C649E03C0B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:de:af:b6:34:7c:52:ef:9d:dd:71:4b:70:c9:f2:2e:0f:88: c0:30:a6:a0:11:95:aa:ba:2d:ed:a1:bc:d5:bb:ed:f3:b9:8a: 52:af:f6:34:0c:c5:1c:ce:ad:db:ba:26:b3:b1:e9:c6:d8:d8: ac:d9:bc:0d:d4:73:fa:3e:e3:5e:ec:aa:ae:85:8f:ec:fb:7b: eb:ce:01:08:47:73:aa:d7:b2:cc:07:ea:3d:de:3c:42:1c:f6: d4:ae:e3:22:57:5b:af:af:9c:e7:52:99:26:4b:14:ed:1f:be: 13:df:9f:6b:55:d0:3c:64:32:bd:06:f1:22:a1:7b:6e:70:5e: 24:b0:78:78:bc:88:fa:a2:54:5e:57:6e:9c:37:5a:ed:6d:b8: 5d:75:0e:f0:f1:90:c6:15:31:2f:fb:01:44:3b:91:93:d6:71: a2:e6:99:8c:55:e2:35:b9:ab:65:a0:6a:86:84:4d:b9:ef:17: d0:15:0a:13:ee:4a:d1:20:39:98:24:90:79:dd:35:b7:23:98: 86:21:04:e8:dc:c8:9d:ea:62:ed:13:e4:15:e3:8c:35:4e:96: b5:78:fd:d5:79:c5:7e:13:54:81:8a:40:8d:9f:36:2a:21:de: 4e:d1:af:00:65:ef:ca:c5:74:70:4f:71:83:dc:ab:64:7a:e6: 8e:c9:89:e4 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUOBBUe9XDVmKRbOhHzqzmJ5UiZb0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkE4RjMyQTBCMjFERDI3NzkzMTU0MjJCNUEyMTg0QzY0 OUUwM0MwQjAeFw0yNTA2MTYwMjAxMzRaFw0yNTA2MTcwNTU4MzRaMDMxMTAvBgNV BAMTKEFENUU3RjA5RDhEQkQ5MzA2MTYyQ0EyMDg4NENFMkUzMDA2RERDMTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpi1NSJIJQOF8xoSXOYTxNIPPr 2IeEH9o8Df5sgMBvAjxMbup/Zvf5KClyU2B5hviZ6+Rjr0mYm2hI3F9BNSXBmoHH sr0SbFd376k+nz8c+xakDpIageXBin/Z1KnB0trbc/vfH/EKS/f6cHmEkaL77A5B eQ2WXyqR+dTVvXXg5vOlVzY+2tW5KO92Mj7d6mnYPq0ocnh7GLbWoFPJJbHfyWq5 ywAJUpFCNg7xGbpP5KfmeGupCCyyr5Scf+REeWRWyFOHggbE9bz68g2hTvaJhxtp FIrB8H5TwRxtkL4fHoOQDECE/HHLHNcfBmnee+yCOTv68Wl6tSurcR4IGpfpAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUrV5/Cdjb2TBhYsogiEzi4wBt3BAwHwYDVR0j BBgwFoAU+o8yoLId0neTFUIrWiGExkngPAswDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNzE0NzZkNjItOWNmYS00ODcxLWEyZDktZmFkZjU3ODFj MTFiLzEvRkE4RjMyQTBCMjFERDI3NzkzMTU0MjJCNUEyMTg0QzY0OUUwM0MwQi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9hYTAwNGJhMS00MTliLTRk YjUtYmJkMy01Y2NhNjMzY2FlM2YvMC9GQThGMzJBMEIyMUREMjc3OTMxNTQyMkI1 QTIxODRDNjQ5RTAzQzBCLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzcxNDc2ZDYyLTljZmEtNDg3MS1hMmQ5LWZhZGY1NzgxYzExYi8xL0ZBOEYzMkEw QjIxREQyNzc5MzE1NDIyQjVBMjE4NEM2NDlFMDNDMEIubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBe3q+2 NHxS753dcUtwyfIuD4jAMKagEZWqui3tobzVu+3zuYpSr/Y0DMUczq3buiazsenG 2Nis2bwN1HP6PuNe7KquhY/s+3vrzgEIR3Oq17LMB+o93jxCHPbUruMiV1uvr5zn UpkmSxTtH74T359rVdA8ZDK9BvEioXtucF4ksHh4vIj6olReV26cN1rtbbhddQ7w 8ZDGFTEv+wFEO5GT1nGi5pmMVeI1uatloGqGhE257xfQFQoT7krRIDmYJJB53TW3 I5iGIQTo3Mid6mLtE+QV44w1Tpa1eP3VecV+E1SBikCNnzYqId5O0a8AZe/KxXRw T3GD3KtkeuaOyYnk -----END CERTIFICATE-----Generated at Mon Jun 16 05:18:40 2025 by rpki-client