$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/705b1897-d907-4dfc-b68b-77f485f58d6c/0/FDEE16BDC5420A60A3D6A8A29BD302650937B88C.mft File: FDEE16BDC5420A60A3D6A8A29BD302650937B88C.mft (raw, json) Hash identifier: CXGBtV0W8cWTo6BfF0HArnFdxmcG37EGUekfvamClK8= Subject key identifier: 82:BC:48:52:E6:40:C4:54:34:D2:B9:B2:5C:34:09:07:A5:75:70:27 Authority key identifier: FD:EE:16:BD:C5:42:0A:60:A3:D6:A8:A2:9B:D3:02:65:09:37:B8:8C Certificate issuer: /CN=FDEE16BDC5420A60A3D6A8A29BD302650937B88C Certificate serial: 30440B3F8EB952732C3F61E4A7C92DB2896EB802 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/FDEE16BDC5420A60A3D6A8A29BD302650937B88C.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/705b1897-d907-4dfc-b68b-77f485f58d6c/0/FDEE16BDC5420A60A3D6A8A29BD302650937B88C.mft Manifest number: 1C Signing time: Sun 20 Jul 2025 05:47:48 +0000 Manifest this update: Sun 20 Jul 2025 05:42:48 +0000 Manifest next update: Mon 21 Jul 2025 08:51:48 +0000 Files and hashes: 1: FDEE16BDC5420A60A3D6A8A29BD302650937B88C.crl (hash: inDWmMlsgnmEhVEffKXOD10q5t5QDh8ox4TH4zSC770=) 2: 326131343a373538333a313030303a3a2f33362d3336203d3e20323135313038.roa (hash: Uc2wuWBne08reeuhGMV9FbwTFk0eKIo5Ei95b36hJuE=) 3: 326131343a373538303a373030303a3a2f33362d3336203d3e20323135313038.roa (hash: bvyg3HtIyqBCxLiPY89KCRG9IWT8nd/t/MqdudiybDI=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/705b1897-d907-4dfc-b68b-77f485f58d6c/0/FDEE16BDC5420A60A3D6A8A29BD302650937B88C.crl rsync://rsync.paas.rpki.ripe.net/repository/705b1897-d907-4dfc-b68b-77f485f58d6c/0/FDEE16BDC5420A60A3D6A8A29BD302650937B88C.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/FDEE16BDC5420A60A3D6A8A29BD302650937B88C.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 21 Jul 2025 08:51:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:44:0b:3f:8e:b9:52:73:2c:3f:61:e4:a7:c9:2d:b2:89:6e:b8:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FDEE16BDC5420A60A3D6A8A29BD302650937B88C Validity Not Before: Jul 20 05:42:48 2025 GMT Not After : Jul 21 08:51:48 2025 GMT Subject: CN=82BC4852E640C45434D2B9B25C340907A5757027 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:0b:f6:eb:29:ae:69:d9:e6:7b:67:95:c0:fc: 41:33:b9:0c:97:eb:2f:64:ca:fc:35:b7:84:c1:7a: 82:ca:85:26:a4:16:2b:7f:e3:4f:10:65:0c:41:74: 1d:64:19:31:5b:da:fa:00:db:ff:a1:4e:96:be:1f: 5e:8a:53:d2:b9:02:56:bf:61:fc:8f:c6:4f:42:bb: ad:3b:8b:5d:3b:f5:3d:e8:cd:72:75:4c:62:6f:bb: 14:7a:83:26:37:99:8a:02:5e:75:65:80:e3:43:5b: d5:d9:6a:a0:63:95:23:2d:88:27:96:eb:90:e1:ce: 30:95:7c:aa:76:ca:db:fe:f6:fc:78:cc:53:ee:48: 44:0d:b3:c1:97:48:7a:e3:0c:d2:fc:92:e5:8a:84: ab:31:bf:9c:dd:44:bf:86:ce:8e:10:67:ee:13:9c: c1:db:f2:fe:91:1d:2e:4d:60:bb:d4:ec:5b:b2:11: 01:bc:4d:0b:1b:a1:8d:e2:c2:0e:a2:ed:58:93:6d: 2f:a1:14:2f:bd:c3:42:48:f5:f7:38:e8:9c:62:50: f2:5b:57:05:1b:14:62:0b:b7:69:9e:43:97:1e:f9: 9d:43:dc:11:02:54:86:81:4c:a5:02:79:63:98:6a: 75:f1:04:44:89:a4:9d:13:7a:22:1f:eb:62:d4:bf: 23:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:BC:48:52:E6:40:C4:54:34:D2:B9:B2:5C:34:09:07:A5:75:70:27 X509v3 Authority Key Identifier: keyid:FD:EE:16:BD:C5:42:0A:60:A3:D6:A8:A2:9B:D3:02:65:09:37:B8:8C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/705b1897-d907-4dfc-b68b-77f485f58d6c/0/FDEE16BDC5420A60A3D6A8A29BD302650937B88C.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/FDEE16BDC5420A60A3D6A8A29BD302650937B88C.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/705b1897-d907-4dfc-b68b-77f485f58d6c/0/FDEE16BDC5420A60A3D6A8A29BD302650937B88C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:1a:d1:18:21:b8:4a:42:0a:65:a9:22:92:cc:e6:c2:65:93: 54:83:6b:9e:d9:a5:b6:fb:a2:d5:03:49:bf:78:ec:2c:2f:12: 3a:52:f2:e3:6e:a0:20:00:7c:5f:11:c4:3e:98:0b:76:71:5f: e1:2f:64:4a:87:10:78:0d:90:07:1b:00:c9:08:d9:ce:dd:0b: 54:6d:3e:1d:5c:ba:de:65:24:64:a8:d2:c8:4f:ba:da:b4:ca: 0b:0f:03:0d:0d:66:92:c6:2c:71:bb:7c:24:d5:9b:cd:34:25: 99:5d:a3:82:34:ea:79:bc:d5:19:27:5f:11:37:98:29:db:80: 52:51:16:69:c9:43:cd:60:53:cd:07:bc:96:c1:0a:8b:87:8e: 79:40:10:a3:9f:fd:ef:ae:d4:3b:3d:d6:51:c8:64:36:7c:16: 46:28:2c:f2:21:d0:ce:af:99:7d:d8:9b:8f:aa:a7:9e:cf:94: f4:d8:d6:e5:2a:fc:dd:6e:cd:ee:dd:99:af:28:c9:5a:91:ab: 45:46:53:33:f4:07:f7:41:b3:5c:58:2a:4c:7b:43:63:08:e3: 35:7b:7c:d2:95:60:6f:85:05:d0:06:e2:30:99:a4:31:c0:96: 9f:e4:70:44:9a:b3:64:09:cd:43:f8:c6:6f:4d:09:24:11:35: d9:a7:13:d9 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUMEQLP465UnMsP2Hkp8ktsoluuAIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkRFRTE2QkRDNTQyMEE2MEEzRDZBOEEyOUJEMzAyNjUw OTM3Qjg4QzAeFw0yNTA3MjAwNTQyNDhaFw0yNTA3MjEwODUxNDhaMDMxMTAvBgNV BAMTKDgyQkM0ODUyRTY0MEM0NTQzNEQyQjlCMjVDMzQwOTA3QTU3NTcwMjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjC/brKa5p2eZ7Z5XA/EEzuQyX 6y9kyvw1t4TBeoLKhSakFit/408QZQxBdB1kGTFb2voA2/+hTpa+H16KU9K5Ala/ YfyPxk9Cu607i1079T3ozXJ1TGJvuxR6gyY3mYoCXnVlgONDW9XZaqBjlSMtiCeW 65DhzjCVfKp2ytv+9vx4zFPuSEQNs8GXSHrjDNL8kuWKhKsxv5zdRL+Gzo4QZ+4T nMHb8v6RHS5NYLvU7FuyEQG8TQsboY3iwg6i7ViTbS+hFC+9w0JI9fc46JxiUPJb VwUbFGILt2meQ5ce+Z1D3BECVIaBTKUCeWOYanXxBESJpJ0TeiIf62LUvyNlAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUgrxIUuZAxFQ00rmyXDQJB6V1cCcwHwYDVR0j BBgwFoAU/e4WvcVCCmCj1qiim9MCZQk3uIwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNzA1YjE4OTctZDkwNy00ZGZjLWI2OGItNzdmNDg1ZjU4 ZDZjLzAvRkRFRTE2QkRDNTQyMEE2MEEzRDZBOEEyOUJEMzAyNjUwOTM3Qjg4Qy5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC9GREVFMTZCREM1NDIwQTYwQTNENkE4QTI5 QkQzMDI2NTA5MzdCODhDLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzcwNWIxODk3LWQ5MDctNGRmYy1iNjhiLTc3ZjQ4NWY1OGQ2Yy8wL0ZERUUxNkJE QzU0MjBBNjBBM0Q2QThBMjlCRDMwMjY1MDkzN0I4OEMubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQABGtEY IbhKQgplqSKSzObCZZNUg2ue2aW2+6LVA0m/eOwsLxI6UvLjbqAgAHxfEcQ+mAt2 cV/hL2RKhxB4DZAHGwDJCNnO3QtUbT4dXLreZSRkqNLIT7ratMoLDwMNDWaSxixx u3wk1ZvNNCWZXaOCNOp5vNUZJ18RN5gp24BSURZpyUPNYFPNB7yWwQqLh455QBCj n/3vrtQ7PdZRyGQ2fBZGKCzyIdDOr5l92JuPqqeez5T02NblKvzdbs3u3ZmvKMla katFRlMz9Af3QbNcWCpMe0NjCOM1e3zSlWBvhQXQBuIwmaQxwJaf5HBEmrNkCc1D +MZvTQkkETXZpxPZ -----END CERTIFICATE-----Generated at Mon Jul 21 01:34:07 2025 by rpki-client