$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/59c83e5c-4b55-4a1a-8003-1b7ecc51d47a/3/FA710E21BC41E9827D52D66DE98EF8E9ACE9B1E8.mft File: FA710E21BC41E9827D52D66DE98EF8E9ACE9B1E8.mft (raw, json) Hash identifier: H8RsCFV7g4yyaixu7sr8dySRDmA4JO+vEJ9Q07EDKp4= Subject key identifier: F9:25:58:7B:26:B7:B4:65:9E:0A:8F:5E:52:A0:E7:5C:4E:06:40:A2 Authority key identifier: FA:71:0E:21:BC:41:E9:82:7D:52:D6:6D:E9:8E:F8:E9:AC:E9:B1:E8 Certificate issuer: /CN=FA710E21BC41E9827D52D66DE98EF8E9ACE9B1E8 Certificate serial: 69C59F4885028CD1F26C80BC42317F4B67C22339 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/FA710E21BC41E9827D52D66DE98EF8E9ACE9B1E8.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/59c83e5c-4b55-4a1a-8003-1b7ecc51d47a/3/FA710E21BC41E9827D52D66DE98EF8E9ACE9B1E8.mft Manifest number: 04 Signing time: Sun 20 Jul 2025 13:42:03 +0000 Manifest this update: Sun 20 Jul 2025 13:37:03 +0000 Manifest next update: Mon 21 Jul 2025 17:34:03 +0000 Files and hashes: 1: 326131343a373538343a343830303a3a2f34382d3438203d3e20323131333538.roa (hash: dxI70qoTw8AqT4GSbNKeSr6HFS9kuFZrrwUT/py32Kc=) 2: 326131343a373538343a343030303a3a2f33362d3438203d3e2036353137.roa (hash: 9qxxzty+nI98+cY44+m4DwmBg2WIZrsDW0snWoFPb+U=) 3: 326131343a373538343a343130303a3a2f34302d3438203d3e20323136333039.roa (hash: J9Fi36nQGqAgueP6UU6iZv8HlrGSaFogPoGVrEhPYYg=) 4: FA710E21BC41E9827D52D66DE98EF8E9ACE9B1E8.crl (hash: rDfIdytY25x0GU0djoX9suXzl7yuFVgrlIcoYX3KxpE=) 5: 326131343a373538343a346630303a3a2f34302d3430203d3e20323132353136.roa (hash: CNfVsinVsceZGjOaXQsHUjsBZSefgQTBz85mK3PRJtU=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/59c83e5c-4b55-4a1a-8003-1b7ecc51d47a/3/FA710E21BC41E9827D52D66DE98EF8E9ACE9B1E8.crl rsync://rsync.paas.rpki.ripe.net/repository/59c83e5c-4b55-4a1a-8003-1b7ecc51d47a/3/FA710E21BC41E9827D52D66DE98EF8E9ACE9B1E8.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/FA710E21BC41E9827D52D66DE98EF8E9ACE9B1E8.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 21 Jul 2025 17:34:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:c5:9f:48:85:02:8c:d1:f2:6c:80:bc:42:31:7f:4b:67:c2:23:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FA710E21BC41E9827D52D66DE98EF8E9ACE9B1E8 Validity Not Before: Jul 20 13:37:03 2025 GMT Not After : Jul 21 17:34:03 2025 GMT Subject: CN=F925587B26B7B4659E0A8F5E52A0E75C4E0640A2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:c3:2d:62:a9:7a:7a:c4:be:81:8c:d3:df:3b: 42:76:3b:af:b0:59:53:c2:51:39:55:9d:0f:11:05: 51:f5:09:ed:93:96:29:5d:b1:a3:6b:e1:cd:2e:86: c0:3a:f1:62:18:79:7a:5e:09:17:ac:e4:26:8a:73: 22:be:f0:cc:2c:74:3c:23:a9:1c:f3:15:a6:88:6d: ac:a4:cc:e1:9e:83:8b:82:16:df:71:20:e3:59:36: 12:4b:25:6a:07:2c:46:6c:86:f7:a4:8e:1f:12:c8: aa:e8:38:11:0b:82:3e:b7:08:76:05:df:95:dd:d0: fa:ca:fc:03:3d:95:7c:fc:8e:75:06:39:03:23:bb: 65:72:36:e1:62:79:f7:26:2d:75:eb:4c:01:5e:43: ff:b7:1f:4a:1b:01:f8:c4:e0:a5:d6:37:83:1e:3b: 3d:b2:e2:73:a3:68:92:f8:00:80:6b:89:a4:28:f9: f4:c5:e8:bc:b2:27:dc:9a:a7:f3:45:26:f0:b4:e6: 62:bc:71:0f:39:34:fd:85:69:89:6a:0d:29:21:3b: dc:11:3d:6f:45:db:b3:89:f3:73:ff:bf:03:3e:a7: 1d:16:55:6a:20:5d:6f:cb:a2:84:e6:07:ca:88:d0: a6:52:cf:c6:4b:1a:73:4c:1f:0d:6a:37:80:37:6b: bb:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:25:58:7B:26:B7:B4:65:9E:0A:8F:5E:52:A0:E7:5C:4E:06:40:A2 X509v3 Authority Key Identifier: keyid:FA:71:0E:21:BC:41:E9:82:7D:52:D6:6D:E9:8E:F8:E9:AC:E9:B1:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/59c83e5c-4b55-4a1a-8003-1b7ecc51d47a/3/FA710E21BC41E9827D52D66DE98EF8E9ACE9B1E8.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/FA710E21BC41E9827D52D66DE98EF8E9ACE9B1E8.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/59c83e5c-4b55-4a1a-8003-1b7ecc51d47a/3/FA710E21BC41E9827D52D66DE98EF8E9ACE9B1E8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:fe:81:02:43:c3:b0:28:fa:30:1d:09:96:0c:36:29:e7:6f: a4:be:fe:9e:af:c8:04:61:dd:d3:43:da:69:5f:c3:c8:7d:e9: 75:02:03:46:ed:9b:34:10:f7:f5:6c:0c:25:47:26:6c:85:ff: 85:21:a9:7d:2d:32:49:7e:f1:2f:03:f4:11:54:7e:7d:46:51: 33:59:7d:5d:13:72:4b:93:4b:e1:bc:92:61:a5:df:4e:22:5b: af:5e:91:d6:cb:2d:6a:a2:77:28:62:0c:80:15:b7:87:51:22: 73:9c:f3:6b:c4:7e:4c:ff:c8:11:03:f6:bb:61:2e:f4:83:04: 5b:ca:16:8b:96:c0:37:68:49:94:55:e7:8b:30:20:01:dc:00: ca:e5:02:2a:bc:a1:4b:33:e0:a2:c0:e3:07:b1:9f:a7:47:f1: 6b:48:41:17:4a:0c:ee:68:7b:a7:7f:2d:3d:8b:ad:35:ff:3c: 4d:2e:a2:aa:22:5c:40:b4:68:42:ea:44:62:09:a3:0e:b0:7b: 9c:6f:14:cf:70:61:3c:0d:05:39:98:75:f7:0d:4a:a0:95:84: 67:86:a0:02:37:fe:12:c8:a4:31:de:e8:69:7e:e3:3e:53:3c: 18:b7:21:cb:90:54:bf:13:83:79:a2:12:3d:82:7f:90:a2:f7: c3:fd:7f:b6 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUacWfSIUCjNHybIC8QjF/S2fCIzkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkE3MTBFMjFCQzQxRTk4MjdENTJENjZERTk4RUY4RTlB Q0U5QjFFODAeFw0yNTA3MjAxMzM3MDNaFw0yNTA3MjExNzM0MDNaMDMxMTAvBgNV BAMTKEY5MjU1ODdCMjZCN0I0NjU5RTBBOEY1RTUyQTBFNzVDNEUwNjQwQTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMwy1iqXp6xL6BjNPfO0J2O6+w WVPCUTlVnQ8RBVH1Ce2TlildsaNr4c0uhsA68WIYeXpeCRes5CaKcyK+8MwsdDwj qRzzFaaIbaykzOGeg4uCFt9xIONZNhJLJWoHLEZshvekjh8SyKroOBELgj63CHYF 35Xd0PrK/AM9lXz8jnUGOQMju2VyNuFiefcmLXXrTAFeQ/+3H0obAfjE4KXWN4Me Oz2y4nOjaJL4AIBriaQo+fTF6LyyJ9yap/NFJvC05mK8cQ85NP2FaYlqDSkhO9wR PW9F27OJ83P/vwM+px0WVWogXW/LooTmB8qI0KZSz8ZLGnNMHw1qN4A3a7vdAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQU+SVYeya3tGWeCo9eUqDnXE4GQKIwHwYDVR0j BBgwFoAU+nEOIbxB6YJ9UtZt6Y746azpsegwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNTljODNlNWMtNGI1NS00YTFhLTgwMDMtMWI3ZWNjNTFk NDdhLzMvRkE3MTBFMjFCQzQxRTk4MjdENTJENjZERTk4RUY4RTlBQ0U5QjFFOC5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC9GQTcxMEUyMUJDNDFFOTgyN0Q1MkQ2NkRF OThFRjhFOUFDRTlCMUU4LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzU5YzgzZTVjLTRiNTUtNGExYS04MDAzLTFiN2VjYzUxZDQ3YS8zL0ZBNzEwRTIx QkM0MUU5ODI3RDUyRDY2REU5OEVGOEU5QUNFOUIxRTgubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAn/oEC Q8OwKPowHQmWDDYp52+kvv6er8gEYd3TQ9ppX8PIfel1AgNG7Zs0EPf1bAwlRyZs hf+FIal9LTJJfvEvA/QRVH59RlEzWX1dE3JLk0vhvJJhpd9OIluvXpHWyy1qonco YgyAFbeHUSJznPNrxH5M/8gRA/a7YS70gwRbyhaLlsA3aEmUVeeLMCAB3ADK5QIq vKFLM+CiwOMHsZ+nR/FrSEEXSgzuaHunfy09i601/zxNLqKqIlxAtGhC6kRiCaMO sHucbxTPcGE8DQU5mHX3DUqglYRnhqACN/4SyKQx3uhpfuM+UzwYtyHLkFS/E4N5 ohI9gn+QovfD/X+2 -----END CERTIFICATE-----Generated at Mon Jul 21 10:42:47 2025 by rpki-client