$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09456214-8d25-4b5e-9e04-35c0a7a26470/0/FB2E043F755DA1329FB66347D17DC2B79A73C3FA.mft File: FB2E043F755DA1329FB66347D17DC2B79A73C3FA.mft (raw, json) Hash identifier: CEW698nQ4O/kXuZn7/pCSTTma6wLgAr/pGnfSFRGQE0= Subject key identifier: B7:DB:C1:5F:7D:93:44:91:2E:04:68:E2:CA:68:B7:65:35:5C:32:60 Authority key identifier: FB:2E:04:3F:75:5D:A1:32:9F:B6:63:47:D1:7D:C2:B7:9A:73:C3:FA Certificate issuer: /CN=FB2E043F755DA1329FB66347D17DC2B79A73C3FA Certificate serial: 550506F8C2FD9F05222EB8802A3958A133483C0E Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/FB2E043F755DA1329FB66347D17DC2B79A73C3FA.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09456214-8d25-4b5e-9e04-35c0a7a26470/0/FB2E043F755DA1329FB66347D17DC2B79A73C3FA.mft Manifest number: 21 Signing time: Sun 07 Sep 2025 16:55:12 +0000 Manifest this update: Sun 07 Sep 2025 16:50:12 +0000 Manifest next update: Mon 08 Sep 2025 18:46:12 +0000 Files and hashes: 1: FB2E043F755DA1329FB66347D17DC2B79A73C3FA.crl (hash: H7RN49mFf/no9Tn491rFF9yXanu/Mz+mMwj6L8OVURk=) 2: 326131343a373538343a653339303a3a2f34342d3434203d3e20333937303332.roa (hash: lLg4au3IVvnSiHqBxXRTNckohkijbwJ1gyWVOIjX72Q=) 3: 326131343a373538343a653361303a3a2f34342d3434203d3e20333937303332.roa (hash: JCyGJNLuGhm2G7yv8F0G1yT21Qa/DAGdxn1vxIgtXH8=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09456214-8d25-4b5e-9e04-35c0a7a26470/0/FB2E043F755DA1329FB66347D17DC2B79A73C3FA.crl rsync://rsync.paas.rpki.ripe.net/repository/09456214-8d25-4b5e-9e04-35c0a7a26470/0/FB2E043F755DA1329FB66347D17DC2B79A73C3FA.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/FB2E043F755DA1329FB66347D17DC2B79A73C3FA.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 08 Sep 2025 09:27:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:05:06:f8:c2:fd:9f:05:22:2e:b8:80:2a:39:58:a1:33:48:3c:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FB2E043F755DA1329FB66347D17DC2B79A73C3FA Validity Not Before: Sep 7 16:50:12 2025 GMT Not After : Sep 8 18:46:12 2025 GMT Subject: CN=B7DBC15F7D9344912E0468E2CA68B765355C3260 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:04:a9:03:14:3a:4b:da:79:38:28:16:34:e7: af:ea:37:39:4f:76:d6:17:49:70:50:cf:37:ee:2a: ac:62:b1:c3:64:1b:b7:50:e2:40:42:3b:2a:2e:ed: bc:5d:33:37:dc:b7:1f:00:2f:36:7c:b3:ce:6f:6c: 88:1f:32:84:81:1a:51:27:31:d8:82:84:fc:fa:a5: e8:5c:3a:27:14:be:dd:24:36:43:74:fc:a9:df:ee: 6a:05:b9:2b:8c:a3:c9:24:7f:e3:77:fe:fd:60:b9: 2b:b3:f8:77:28:f4:dc:a1:c1:c6:b9:a3:d2:41:8a: 01:7b:0b:9e:0e:cf:de:cd:a3:7d:c0:df:88:32:43: a6:4c:37:71:b1:b7:37:03:b3:2b:66:29:8f:cf:5c: be:74:a0:9b:41:fd:43:0f:24:3d:f4:19:57:5a:ff: 79:15:12:47:fe:f0:12:0b:1b:6f:d0:29:ed:28:da: a5:22:70:9c:55:f0:89:13:25:db:5e:bb:54:09:8d: 00:0a:0f:c2:36:b0:13:73:69:7d:4f:78:9a:5b:2b: 60:01:13:a0:5c:34:b2:c5:d8:9e:8b:21:f9:4a:0f: 96:06:7c:99:ac:38:55:2a:c4:ad:a0:fa:ff:de:2d: d9:ab:96:87:23:57:c5:75:17:9b:f6:f6:9d:8a:bf: 30:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:DB:C1:5F:7D:93:44:91:2E:04:68:E2:CA:68:B7:65:35:5C:32:60 X509v3 Authority Key Identifier: keyid:FB:2E:04:3F:75:5D:A1:32:9F:B6:63:47:D1:7D:C2:B7:9A:73:C3:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/09456214-8d25-4b5e-9e04-35c0a7a26470/0/FB2E043F755DA1329FB66347D17DC2B79A73C3FA.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/FB2E043F755DA1329FB66347D17DC2B79A73C3FA.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09456214-8d25-4b5e-9e04-35c0a7a26470/0/FB2E043F755DA1329FB66347D17DC2B79A73C3FA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:dd:a0:a5:9e:a6:61:1e:ce:db:48:d1:12:34:e3:a6:07:74: ed:fe:e2:be:cc:68:28:91:dc:03:e4:5b:56:cf:37:47:0d:d7: 99:0c:d2:23:61:0a:3a:f6:43:14:93:5d:5d:88:95:df:38:f5: 9b:5f:6b:19:e2:7a:f7:a1:50:1e:08:9b:5a:94:f0:45:05:e7: 3f:44:18:28:d1:98:3d:8e:ce:84:a7:97:9a:8a:46:ed:fd:59: 77:1d:de:08:13:2b:1b:3d:9d:1a:fb:08:ee:c5:ee:d8:50:02: 0b:d7:cb:23:78:cf:e5:bb:0e:e5:d7:85:3a:a2:0d:29:39:09: 16:ce:9f:de:fc:58:d9:5d:09:ca:6a:08:4b:28:6b:ae:f1:3a: 8c:e2:f5:af:bf:4b:32:9f:d9:c5:7a:0b:35:4c:a3:54:21:a3: 1e:df:96:a9:b2:b8:e3:19:f4:8b:1a:43:58:f6:9d:29:00:48: ee:7c:67:c0:18:21:a5:ca:64:27:6d:d3:6d:05:dc:50:4c:d6: e5:2c:bc:82:5a:bd:60:ca:42:a4:45:55:40:a3:ba:de:c3:f1: c3:8d:16:4a:79:29:ae:1d:b8:9b:89:aa:9a:cf:8d:5f:38:fe: b8:f3:85:19:82:80:9a:8d:63:04:40:03:25:e0:e1:e7:50:6e: c4:77:57:57 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUVQUG+ML9nwUiLriAKjlYoTNIPA4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkIyRTA0M0Y3NTVEQTEzMjlGQjY2MzQ3RDE3REMyQjc5 QTczQzNGQTAeFw0yNTA5MDcxNjUwMTJaFw0yNTA5MDgxODQ2MTJaMDMxMTAvBgNV BAMTKEI3REJDMTVGN0Q5MzQ0OTEyRTA0NjhFMkNBNjhCNzY1MzU1QzMyNjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqBKkDFDpL2nk4KBY056/qNzlP dtYXSXBQzzfuKqxiscNkG7dQ4kBCOyou7bxdMzfctx8ALzZ8s85vbIgfMoSBGlEn MdiChPz6pehcOicUvt0kNkN0/Knf7moFuSuMo8kkf+N3/v1guSuz+Hco9Nyhwca5 o9JBigF7C54Oz97No33A34gyQ6ZMN3GxtzcDsytmKY/PXL50oJtB/UMPJD30GVda /3kVEkf+8BILG2/QKe0o2qUicJxV8IkTJdteu1QJjQAKD8I2sBNzaX1PeJpbK2AB E6BcNLLF2J6LIflKD5YGfJmsOFUqxK2g+v/eLdmrlocjV8V1F5v29p2KvzDpAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUt9vBX32TRJEuBGjiymi3ZTVcMmAwHwYDVR0j BBgwFoAU+y4EP3VdoTKftmNH0X3Ct5pzw/owDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMDk0NTYyMTQtOGQyNS00YjVlLTllMDQtMzVjMGE3YTI2 NDcwLzAvRkIyRTA0M0Y3NTVEQTEzMjlGQjY2MzQ3RDE3REMyQjc5QTczQzNGQS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC9GQjJFMDQzRjc1NURBMTMyOUZCNjYzNDdE MTdEQzJCNzlBNzNDM0ZBLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzA5NDU2MjE0LThkMjUtNGI1ZS05ZTA0LTM1YzBhN2EyNjQ3MC8wL0ZCMkUwNDNG NzU1REExMzI5RkI2NjM0N0QxN0RDMkI3OUE3M0MzRkEubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQB53aCl nqZhHs7bSNESNOOmB3Tt/uK+zGgokdwD5FtWzzdHDdeZDNIjYQo69kMUk11diJXf OPWbX2sZ4nr3oVAeCJtalPBFBec/RBgo0Zg9js6Ep5eaikbt/Vl3Hd4IEysbPZ0a +wjuxe7YUAIL18sjeM/luw7l14U6og0pOQkWzp/e/FjZXQnKaghLKGuu8TqM4vWv v0syn9nFegs1TKNUIaMe35apsrjjGfSLGkNY9p0pAEjufGfAGCGlymQnbdNtBdxQ TNblLLyCWr1gykKkRVVAo7rew/HDjRZKeSmuHbibiaqaz41fOP6484UZgoCajWME QAMl4OHnUG7Ed1dX -----END CERTIFICATE-----Generated at Sun Sep 7 23:27:14 2025 by rpki-client