$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.mft File: FAC4708D7E265DB1044F9BB0EE8728587F48B484.mft (raw, json) Hash identifier: m6ycTJN8S68NGfTyxvH44MbUFu4+0FnyuM6OHNleMYQ= Subject key identifier: 20:A5:B0:1D:EB:C5:75:53:20:05:18:0F:8D:EE:B2:C5:A9:76:28:3C Authority key identifier: FA:C4:70:8D:7E:26:5D:B1:04:4F:9B:B0:EE:87:28:58:7F:48:B4:84 Certificate issuer: /CN=fac4708d7e265db1044f9bb0ee8728587f48b484 Certificate serial: 517DAA324E765762302AC351B0BBAB7E3F7EC6AD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.mft Manifest number: 44 Signing time: Thu 24 Jul 2025 23:58:26 +0000 Manifest this update: Thu 24 Jul 2025 23:53:26 +0000 Manifest next update: Sat 26 Jul 2025 00:06:26 +0000 Files and hashes: 1: 326130313a3230653a3a2f33322d3332203d3e203431303531.roa (hash: dHo42eRURsQRPaktXGGvl5v6FK2mmQ17gzUqGLoOaR0=) 2: 326130303a363334303a343030303a3a2f34382d3438203d3e203538323939.roa (hash: 2cIUBbXFtw6TIW3gtkGzSlPyISGn3/RYjHd6OQ6VrYU=) 3: 3138352e38362e3232342e302f32342d3234203d3e203439313932.roa (hash: R1iDu9WCL0q2IrJGzq/wt63LOyBWhh9M6puThqaZhTQ=) 4: 352e3232362e3134362e302f32342d3234203d3e203538323939.roa (hash: qNr0TnWXn91io5Kf4S/eUzwAUX/WkTOzXp+VxijVCjY=) 5: 326130303a363334303a3a2f33322d3332203d3e203538323939.roa (hash: r7Nz5sTQ0srB/YDhKbCNr13tvMGVCwAnxfmWfTPFEmA=) 6: FAC4708D7E265DB1044F9BB0EE8728587F48B484.crl (hash: gDhBoJTjhImWDP3N6xyOsfBtAIyQ6BhRqN7XtIHanQA=) 7: 3138352e3231312e34332e302f32342d3234203d3e203536383833.roa (hash: 0GGtulQgh58mdaZy9i43/jGy8cDbbjgf1fqq974LzcM=) 8: 352e3232362e3134342e302f32312d3231203d3e203538323939.roa (hash: fo9Lh+tNo20hmXbMUCX4eNXLCfhJfwiBBGLGaQ6kzuA=) 9: 3138352e38362e3232382e302f32332d3234203d3e203538323939.roa (hash: 890AdEnFU4YBNlCNp/5Ad5R0sKIy6AzHzJmChUqZzls=) 10: 326131323a616638303a3a2f33322d3332203d3e203536383833.roa (hash: SqpLdUzG49Jud64fYEC0hiT3rT/sz4nQsAd6iQkoKk8=) 11: 3138352e34342e38302e302f32342d3234203d3e203339343231.roa (hash: UQetgJ8gkrizZ8Ee9Cz8vW5vh9g+HY6FYRsN52DUj8Y=) 12: 323030313a3637633a323634383a3a2f34382d3438203d3e203133303330.roa (hash: gJcgXZCcNvkeeSlp/fGn07D0YciYEry1v6B6cF0VIYA=) 13: 3138352e34342e38312e302f32342d3234203d3e203339343231.roa (hash: BF6S2GfzcRLVtvnyZ19+5dCLfsNDbMuOlEIUiJ5+jzQ=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.crl rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.mft rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 26 Jul 2025 00:06:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:7d:aa:32:4e:76:57:62:30:2a:c3:51:b0:bb:ab:7e:3f:7e:c6:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fac4708d7e265db1044f9bb0ee8728587f48b484 Validity Not Before: Jul 24 23:53:26 2025 GMT Not After : Jul 26 00:06:26 2025 GMT Subject: CN=20A5B01DEBC575532005180F8DEEB2C5A976283C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:d8:ac:5f:de:8c:ae:fc:8d:18:7a:3d:d0:5e: cd:48:c1:38:72:94:08:5d:93:17:ad:e8:c2:1b:39: 29:1c:30:d5:d5:43:b1:e4:81:cc:97:e8:ed:b0:16: 4b:a6:a7:07:56:fc:d5:a9:49:95:5b:37:e1:86:19: c5:12:fa:cf:54:81:d7:20:bb:fa:99:49:89:93:bf: a4:4c:be:89:c0:7c:7a:d3:87:28:55:a2:8f:26:d6: a5:cd:2c:25:4f:f8:01:b9:61:52:8f:b6:e2:76:f0: b2:48:83:f5:3a:d0:2e:25:16:15:bf:e9:a8:0c:1f: 16:11:46:5c:34:f2:8a:e3:2a:bc:82:8c:58:d5:38: 31:15:51:12:a8:29:13:d8:81:8d:07:34:a5:9a:af: 0a:1e:b7:24:ec:50:d0:d6:b0:0a:30:a9:ab:d6:4b: 50:70:e1:a3:21:d2:00:89:37:49:a6:a2:39:b1:41: 9d:10:91:19:0a:ee:25:58:fa:9b:42:fc:46:32:97: 67:3d:59:eb:42:37:75:95:5e:d8:d5:99:5d:00:63: d5:50:69:3f:cb:fc:b0:6f:e4:3c:50:f4:22:f7:57: 13:5e:88:30:76:11:8d:35:5f:c7:56:f7:2c:5c:f4: 46:86:3a:cf:d9:87:a2:1c:d2:c7:68:c6:29:79:90: c5:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:A5:B0:1D:EB:C5:75:53:20:05:18:0F:8D:EE:B2:C5:A9:76:28:3C X509v3 Authority Key Identifier: keyid:FA:C4:70:8D:7E:26:5D:B1:04:4F:9B:B0:EE:87:28:58:7F:48:B4:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:d6:d6:6c:5f:d0:1f:17:78:e9:21:e2:9d:90:86:0c:77:e6: 0a:38:0e:69:0b:ec:8a:91:dc:f1:b7:78:84:0b:e0:0c:ba:11: 50:63:93:9d:f9:4f:38:60:ff:1c:e5:57:dd:96:96:62:b5:dd: ef:00:75:7d:66:54:30:d5:e2:f1:e0:c4:7a:a7:8b:3c:c6:3c: ba:30:68:3b:73:2f:6f:bd:f6:29:21:55:15:40:51:85:97:c4: de:22:2c:c1:ba:f4:63:ca:36:74:2f:5d:61:54:d1:ac:ca:60: 93:4a:5b:0f:11:71:93:fd:ad:7b:9b:23:4c:b1:94:fa:04:8c: ae:bd:9f:aa:7e:68:b7:db:7f:d2:c1:83:5f:a6:8a:bf:de:45: 71:de:b4:04:11:e3:59:24:a9:76:a0:7e:97:58:ca:7b:99:2d: b2:f7:fb:34:07:3b:b4:03:c6:bd:a2:8c:65:d1:77:6b:ae:4b: 82:dc:6b:02:fc:01:67:09:8b:7f:ac:d0:cf:8e:24:d4:57:69: 3a:25:f5:07:9d:5b:37:f7:c9:6f:53:1c:bd:53:e7:42:7e:81: 68:ed:15:c7:9c:5d:8a:fc:5b:49:a5:93:48:dd:03:a6:69:49: 41:49:e7:ab:04:92:b2:fe:52:97:3d:72:b0:94:7f:02:6f:f2: fc:5a:7d:25 -----BEGIN CERTIFICATE----- MIIFPjCCBCagAwIBAgIUUX2qMk52V2IwKsNRsLurfj9+xq0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoZmFjNDcwOGQ3ZTI2NWRiMTA0NGY5YmIwZWU4NzI4NTg3 ZjQ4YjQ4NDAeFw0yNTA3MjQyMzUzMjZaFw0yNTA3MjYwMDA2MjZaMDMxMTAvBgNV BAMTKDIwQTVCMDFERUJDNTc1NTMyMDA1MTgwRjhERUVCMkM1QTk3NjI4M0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDE2Kxf3oyu/I0Yej3QXs1IwThy lAhdkxet6MIbOSkcMNXVQ7HkgcyX6O2wFkumpwdW/NWpSZVbN+GGGcUS+s9Ugdcg u/qZSYmTv6RMvonAfHrThyhVoo8m1qXNLCVP+AG5YVKPtuJ28LJIg/U60C4lFhW/ 6agMHxYRRlw08orjKryCjFjVODEVURKoKRPYgY0HNKWarwoetyTsUNDWsAowqavW S1Bw4aMh0gCJN0mmojmxQZ0QkRkK7iVY+ptC/EYyl2c9WetCN3WVXtjVmV0AY9VQ aT/L/LBv5DxQ9CL3VxNeiDB2EY01X8dW9yxc9EaGOs/Zh6Ic0sdoxil5kMVNAgMB AAGjggJIMIICRDAdBgNVHQ4EFgQUIKWwHevFdVMgBRgPje6yxal2KDwwHwYDVR0j BBgwFoAU+sRwjX4mXbEET5uw7ocoWH9ItIQwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNWI1OGU2NDYtZTdhMi00NjVjLTg3YzUtNDNjMzU5YWQ5 MzY5LzAvRkFDNDcwOEQ3RTI2NURCMTA0NEY5QkIwRUU4NzI4NTg3RjQ4QjQ4NC5j cmwwZQYIKwYBBQUHAQEEWTBXMFUGCCsGAQUFBzAChklyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzEtc1J3alg0bVhiRUVUNXV3N29jb1dI OUl0SVEuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNWI1OGU2NDYt ZTdhMi00NjVjLTg3YzUtNDNjMzU5YWQ5MzY5LzAvRkFDNDcwOEQ3RTI2NURCMTA0 NEY5QkIwRUU4NzI4NTg3RjQ4QjQ4NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAHTW1mxf0B8XeOkh4p2Q hgx35go4DmkL7IqR3PG3eIQL4Ay6EVBjk535Tzhg/xzlV92WlmK13e8AdX1mVDDV 4vHgxHqnizzGPLowaDtzL2+99ikhVRVAUYWXxN4iLMG69GPKNnQvXWFU0azKYJNK Ww8RcZP9rXubI0yxlPoEjK69n6p+aLfbf9LBg1+mir/eRXHetAQR41kkqXagfpdY ynuZLbL3+zQHO7QDxr2ijGXRd2uuS4LcawL8AWcJi3+s0M+OJNRXaTol9QedWzf3 yW9THL1T50J+gWjtFcecXYr8W0mlk0jdA6ZpSUFJ56sEkrL+Upc9crCUfwJv8vxa fSU= -----END CERTIFICATE-----Generated at Fri Jul 25 12:43:08 2025 by rpki-client