$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09456214-8d25-4b5e-9e04-35c0a7a26470/0/FB2E043F755DA1329FB66347D17DC2B79A73C3FA.mft File: FB2E043F755DA1329FB66347D17DC2B79A73C3FA.mft (raw, json) Hash identifier: qjYox8P2mVJ+/ty8pl8Tru46rKnwc2/vcWstefuV7yY= Subject key identifier: 5D:40:60:1A:9A:35:EE:3A:86:61:84:12:90:25:9F:5D:90:A2:6A:6C Authority key identifier: FB:2E:04:3F:75:5D:A1:32:9F:B6:63:47:D1:7D:C2:B7:9A:73:C3:FA Certificate issuer: /CN=FB2E043F755DA1329FB66347D17DC2B79A73C3FA Certificate serial: 61F39EA4933CF7853D1B84F109E8667103404D48 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/FB2E043F755DA1329FB66347D17DC2B79A73C3FA.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09456214-8d25-4b5e-9e04-35c0a7a26470/0/FB2E043F755DA1329FB66347D17DC2B79A73C3FA.mft Manifest number: 5F Signing time: Thu 23 Oct 2025 18:04:22 +0000 Manifest this update: Thu 23 Oct 2025 17:59:22 +0000 Manifest next update: Fri 24 Oct 2025 19:47:22 +0000 Files and hashes: 1: 326131343a373538343a653361303a3a2f34342d3434203d3e20333937303332.roa (hash: JCyGJNLuGhm2G7yv8F0G1yT21Qa/DAGdxn1vxIgtXH8=) 2: FB2E043F755DA1329FB66347D17DC2B79A73C3FA.crl (hash: PBzcuUAbyoDMy5djJN1xMYC8TV1ZpurDcRI4UWby0eM=) 3: 326131343a373538343a653339303a3a2f34342d3434203d3e20333937303332.roa (hash: lLg4au3IVvnSiHqBxXRTNckohkijbwJ1gyWVOIjX72Q=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09456214-8d25-4b5e-9e04-35c0a7a26470/0/FB2E043F755DA1329FB66347D17DC2B79A73C3FA.crl rsync://rsync.paas.rpki.ripe.net/repository/09456214-8d25-4b5e-9e04-35c0a7a26470/0/FB2E043F755DA1329FB66347D17DC2B79A73C3FA.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/FB2E043F755DA1329FB66347D17DC2B79A73C3FA.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 24 Oct 2025 19:47:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:f3:9e:a4:93:3c:f7:85:3d:1b:84:f1:09:e8:66:71:03:40:4d:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FB2E043F755DA1329FB66347D17DC2B79A73C3FA Validity Not Before: Oct 23 17:59:22 2025 GMT Not After : Oct 24 19:47:22 2025 GMT Subject: CN=5D40601A9A35EE3A8661841290259F5D90A26A6C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:41:eb:6b:8e:f6:a8:d5:c9:8d:99:09:df:fa: ed:c2:03:5c:c3:e3:59:57:a4:c9:4b:9a:3b:3f:c5: cc:01:49:c2:e9:08:08:bc:cf:09:a7:77:3a:a3:e7: f4:68:56:98:04:79:5c:e9:d7:76:2e:fc:4f:85:a6: 6a:f2:33:c4:d7:93:03:16:61:86:03:11:32:4c:c5: 6b:a8:06:2c:5d:71:56:81:df:6a:c4:6b:61:da:d2: fc:85:5b:6c:5d:02:ca:97:5f:3a:2c:ea:51:7c:ba: 33:2f:60:20:2d:82:a4:67:46:25:b6:f7:2c:39:a9: 71:33:c1:b4:88:3a:01:81:02:a5:4f:7a:ff:f7:7e: ec:3d:e6:5b:f1:5d:19:59:56:d4:13:70:1b:0f:60: 7c:04:c6:28:ee:b2:d7:3d:94:77:99:8f:0e:5f:ee: 7c:f4:f4:9f:c8:1f:7f:c1:44:70:18:81:1e:8c:b2: b7:87:d7:fc:44:6f:12:37:a1:d5:31:f9:76:dc:39: 33:7f:04:50:b5:3c:c7:e6:b4:d6:ea:3b:b5:02:b5: 4e:ef:98:a4:69:a9:77:f1:35:c7:a3:de:87:38:09: e5:07:d3:f2:6f:3a:84:f1:d7:31:95:ef:30:ae:fe: e8:78:20:6a:e6:cd:05:a0:19:9f:fa:eb:b0:02:46: 28:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:40:60:1A:9A:35:EE:3A:86:61:84:12:90:25:9F:5D:90:A2:6A:6C X509v3 Authority Key Identifier: keyid:FB:2E:04:3F:75:5D:A1:32:9F:B6:63:47:D1:7D:C2:B7:9A:73:C3:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/09456214-8d25-4b5e-9e04-35c0a7a26470/0/FB2E043F755DA1329FB66347D17DC2B79A73C3FA.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/FB2E043F755DA1329FB66347D17DC2B79A73C3FA.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09456214-8d25-4b5e-9e04-35c0a7a26470/0/FB2E043F755DA1329FB66347D17DC2B79A73C3FA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3d:60:7f:38:1e:a4:59:2b:02:01:f8:bc:1c:5f:d1:9f:58:79: 38:7a:d1:3e:49:3e:e3:c6:15:a8:f4:f2:a3:ce:18:84:d1:d1: 4c:d8:b6:0b:7a:c7:7c:23:0b:9c:36:33:8a:25:f8:58:bd:8b: 7b:4e:6b:51:07:57:80:fe:61:df:ad:aa:bc:fd:1e:6d:c2:95: 00:97:f5:57:30:b9:97:1a:09:c6:e5:7a:1f:92:12:f5:62:7c: 95:b9:a4:50:01:c1:94:bb:13:6b:ec:af:60:2d:63:fc:7a:64: 3e:ba:40:24:a3:36:e1:78:cb:aa:f4:d4:99:1f:13:0d:1f:46: 9f:e4:26:ba:b7:d8:02:5f:57:65:df:d8:c8:33:69:45:7d:d8: af:25:6d:ec:5c:6a:7d:04:bc:6f:50:e3:60:a7:14:aa:4e:22: 0a:d8:f7:d7:1e:42:3c:68:d4:d3:ab:fe:ec:ba:d8:7f:77:9e: 4b:b3:08:a9:a7:12:24:d0:9d:7e:4a:68:9f:91:86:a0:f1:91: b7:9b:52:b1:5b:13:9f:07:c6:eb:22:e8:20:64:20:18:1d:77: 03:fa:85:a5:08:b5:9e:06:82:67:bd:e9:cf:39:d4:91:50:09: 8c:28:1d:c6:a6:bd:ff:37:d2:23:ab:a4:90:34:2c:48:0d:db: 16:63:a7:0e -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUYfOepJM894U9G4TxCehmcQNATUgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkIyRTA0M0Y3NTVEQTEzMjlGQjY2MzQ3RDE3REMyQjc5 QTczQzNGQTAeFw0yNTEwMjMxNzU5MjJaFw0yNTEwMjQxOTQ3MjJaMDMxMTAvBgNV BAMTKDVENDA2MDFBOUEzNUVFM0E4NjYxODQxMjkwMjU5RjVEOTBBMjZBNkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4Qetrjvao1cmNmQnf+u3CA1zD 41lXpMlLmjs/xcwBScLpCAi8zwmndzqj5/RoVpgEeVzp13Yu/E+FpmryM8TXkwMW YYYDETJMxWuoBixdcVaB32rEa2Ha0vyFW2xdAsqXXzos6lF8ujMvYCAtgqRnRiW2 9yw5qXEzwbSIOgGBAqVPev/3fuw95lvxXRlZVtQTcBsPYHwExijustc9lHeZjw5f 7nz09J/IH3/BRHAYgR6MsreH1/xEbxI3odUx+XbcOTN/BFC1PMfmtNbqO7UCtU7v mKRpqXfxNcej3oc4CeUH0/JvOoTx1zGV7zCu/uh4IGrmzQWgGZ/667ACRij/AgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUXUBgGpo17jqGYYQSkCWfXZCiamwwHwYDVR0j BBgwFoAU+y4EP3VdoTKftmNH0X3Ct5pzw/owDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMDk0NTYyMTQtOGQyNS00YjVlLTllMDQtMzVjMGE3YTI2 NDcwLzAvRkIyRTA0M0Y3NTVEQTEzMjlGQjY2MzQ3RDE3REMyQjc5QTczQzNGQS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC9GQjJFMDQzRjc1NURBMTMyOUZCNjYzNDdE MTdEQzJCNzlBNzNDM0ZBLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzA5NDU2MjE0LThkMjUtNGI1ZS05ZTA0LTM1YzBhN2EyNjQ3MC8wL0ZCMkUwNDNG NzU1REExMzI5RkI2NjM0N0QxN0RDMkI3OUE3M0MzRkEubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQA9YH84 HqRZKwIB+LwcX9GfWHk4etE+ST7jxhWo9PKjzhiE0dFM2LYLesd8IwucNjOKJfhY vYt7TmtRB1eA/mHfraq8/R5twpUAl/VXMLmXGgnG5XofkhL1YnyVuaRQAcGUuxNr 7K9gLWP8emQ+ukAkozbheMuq9NSZHxMNH0af5Ca6t9gCX1dl39jIM2lFfdivJW3s XGp9BLxvUONgpxSqTiIK2PfXHkI8aNTTq/7suth/d55LswippxIk0J1+SmifkYag 8ZG3m1KxWxOfB8brIuggZCAYHXcD+oWlCLWeBoJnvenPOdSRUAmMKB3Gpr3/N9Ij q6SQNCxIDdsWY6cO -----END CERTIFICATE-----Generated at Fri Oct 24 04:27:44 2025 by rpki-client