$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/59c83e5c-4b55-4a1a-8003-1b7ecc51d47a/3/FA710E21BC41E9827D52D66DE98EF8E9ACE9B1E8.mft File: FA710E21BC41E9827D52D66DE98EF8E9ACE9B1E8.mft (raw, json) Hash identifier: VzwWjiw2kkeQmuwIXqOATmBxjicb1dGzx6asPQN6z1A= Subject key identifier: F0:64:28:B5:99:4D:E0:87:84:8C:EA:A7:00:81:F7:01:83:2D:0F:8C Authority key identifier: FA:71:0E:21:BC:41:E9:82:7D:52:D6:6D:E9:8E:F8:E9:AC:E9:B1:E8 Certificate issuer: /CN=FA710E21BC41E9827D52D66DE98EF8E9ACE9B1E8 Certificate serial: 0960F8E00CEAF1D4049EAFFC73431F06223BA119 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/FA710E21BC41E9827D52D66DE98EF8E9ACE9B1E8.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/59c83e5c-4b55-4a1a-8003-1b7ecc51d47a/3/FA710E21BC41E9827D52D66DE98EF8E9ACE9B1E8.mft Manifest number: 45 Signing time: Sun 07 Sep 2025 21:35:48 +0000 Manifest this update: Sun 07 Sep 2025 21:30:48 +0000 Manifest next update: Mon 08 Sep 2025 22:24:48 +0000 Files and hashes: 1: 326131343a373538343a343030303a3a2f33362d3438203d3e2036353137.roa (hash: 9qxxzty+nI98+cY44+m4DwmBg2WIZrsDW0snWoFPb+U=) 2: 326131343a373538343a343130303a3a2f34302d3438203d3e20323136333039.roa (hash: J9Fi36nQGqAgueP6UU6iZv8HlrGSaFogPoGVrEhPYYg=) 3: FA710E21BC41E9827D52D66DE98EF8E9ACE9B1E8.crl (hash: 5vPlYUy04XlWD2x3udeC1f6RmIlq3SHJMx0fFEJX1Yk=) 4: 326131343a373538343a346630303a3a2f34302d3430203d3e20323132353136.roa (hash: CNfVsinVsceZGjOaXQsHUjsBZSefgQTBz85mK3PRJtU=) 5: 326131343a373538343a343830303a3a2f34382d3438203d3e20323131333538.roa (hash: dxI70qoTw8AqT4GSbNKeSr6HFS9kuFZrrwUT/py32Kc=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/59c83e5c-4b55-4a1a-8003-1b7ecc51d47a/3/FA710E21BC41E9827D52D66DE98EF8E9ACE9B1E8.crl rsync://rsync.paas.rpki.ripe.net/repository/59c83e5c-4b55-4a1a-8003-1b7ecc51d47a/3/FA710E21BC41E9827D52D66DE98EF8E9ACE9B1E8.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/FA710E21BC41E9827D52D66DE98EF8E9ACE9B1E8.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 08 Sep 2025 09:27:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:60:f8:e0:0c:ea:f1:d4:04:9e:af:fc:73:43:1f:06:22:3b:a1:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FA710E21BC41E9827D52D66DE98EF8E9ACE9B1E8 Validity Not Before: Sep 7 21:30:48 2025 GMT Not After : Sep 8 22:24:48 2025 GMT Subject: CN=F06428B5994DE087848CEAA70081F701832D0F8C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:61:63:15:db:60:31:b2:4c:20:82:5c:fa:ff: 3a:72:89:02:f9:da:14:fa:84:fb:09:27:13:3b:fa: 01:64:f3:4c:55:52:59:10:95:1b:a1:a8:bd:f5:69: e0:17:d3:d7:a3:dd:48:af:9b:64:26:eb:e1:e2:2c: be:66:24:c7:45:5b:80:f1:83:7c:85:e6:cf:a5:a0: 14:04:50:2b:10:fb:80:97:5e:0a:8a:23:d8:9e:ed: dc:91:0f:83:7f:40:ec:ea:40:41:7e:5a:f3:74:3d: 62:a5:45:26:39:de:15:ce:2d:fc:10:37:d0:8b:a0: 64:c6:2c:8c:21:03:2c:5a:33:bd:ca:bf:34:38:c5: 0d:91:84:68:af:e2:05:03:c1:5f:16:da:b0:eb:f1: 95:21:e8:89:b4:e9:19:70:1a:51:6a:7c:d3:46:62: 5a:af:85:0b:6a:97:aa:cd:8a:77:ea:df:2a:81:b1: 7a:00:ca:dc:6e:88:67:94:6d:1d:cc:15:ac:41:0a: 4c:e3:b7:b1:76:a0:41:b8:51:e6:fb:53:f6:d9:1a: 09:1e:3c:14:3e:c8:7d:c6:0b:d2:76:e1:e5:1b:35: b3:e1:9b:15:1e:d3:f4:71:41:bc:e7:93:2f:45:44: 27:3b:50:b4:c3:28:65:5d:da:4c:16:b9:c1:f8:c2: fe:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:64:28:B5:99:4D:E0:87:84:8C:EA:A7:00:81:F7:01:83:2D:0F:8C X509v3 Authority Key Identifier: keyid:FA:71:0E:21:BC:41:E9:82:7D:52:D6:6D:E9:8E:F8:E9:AC:E9:B1:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/59c83e5c-4b55-4a1a-8003-1b7ecc51d47a/3/FA710E21BC41E9827D52D66DE98EF8E9ACE9B1E8.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/FA710E21BC41E9827D52D66DE98EF8E9ACE9B1E8.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/59c83e5c-4b55-4a1a-8003-1b7ecc51d47a/3/FA710E21BC41E9827D52D66DE98EF8E9ACE9B1E8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:0d:5f:55:d8:92:d8:ae:0f:ca:d0:f3:4b:db:dc:09:bd:c9: bb:fc:11:ad:c2:03:df:9b:4a:ea:2c:e9:ba:06:8c:89:6c:39: 76:9b:6c:83:07:80:39:4d:9f:1c:f3:7e:f7:78:c7:ce:8c:78: 89:0b:85:c1:c1:10:df:cc:c8:74:0e:53:b0:08:1b:90:ef:b5: 2b:50:a5:31:1c:e9:cc:8f:42:9c:3e:62:69:36:3d:7a:ca:1b: 86:d0:2a:01:f3:bd:d0:f1:da:7d:b9:67:97:8c:11:b8:06:c4: a3:4c:2b:97:d4:f3:3e:33:a5:00:19:8d:c1:e2:80:13:d9:a5: 3a:2d:03:ae:a5:74:f2:6e:6e:be:25:4d:c0:4d:4b:cd:01:0c: e6:d3:46:f9:b6:72:5b:c1:06:b9:15:96:1f:a7:1d:49:19:4d: 59:55:fa:22:fb:35:bb:92:a1:05:7c:1d:7c:d6:2a:c6:1e:8a: 09:d9:1a:df:61:b5:e1:e7:62:16:be:4a:43:a3:d1:43:f2:2c: 2e:99:1d:59:dd:5c:10:55:ce:b3:9e:06:46:bf:f8:79:66:1a: 49:8e:22:cc:93:53:e2:f0:db:10:57:44:2c:e2:f7:8b:d9:c6: 33:42:6e:5e:e1:06:5f:76:20:2c:cf:46:c1:49:87:14:44:5a: 25:f4:16:82 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUCWD44Azq8dQEnq/8c0MfBiI7oRkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkE3MTBFMjFCQzQxRTk4MjdENTJENjZERTk4RUY4RTlB Q0U5QjFFODAeFw0yNTA5MDcyMTMwNDhaFw0yNTA5MDgyMjI0NDhaMDMxMTAvBgNV BAMTKEYwNjQyOEI1OTk0REUwODc4NDhDRUFBNzAwODFGNzAxODMyRDBGOEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDeYWMV22Axskwgglz6/zpyiQL5 2hT6hPsJJxM7+gFk80xVUlkQlRuhqL31aeAX09ej3Uivm2Qm6+HiLL5mJMdFW4Dx g3yF5s+loBQEUCsQ+4CXXgqKI9ie7dyRD4N/QOzqQEF+WvN0PWKlRSY53hXOLfwQ N9CLoGTGLIwhAyxaM73KvzQ4xQ2RhGiv4gUDwV8W2rDr8ZUh6Im06RlwGlFqfNNG YlqvhQtql6rNinfq3yqBsXoAytxuiGeUbR3MFaxBCkzjt7F2oEG4Ueb7U/bZGgke PBQ+yH3GC9J24eUbNbPhmxUe0/RxQbznky9FRCc7ULTDKGVd2kwWucH4wv5fAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQU8GQotZlN4IeEjOqnAIH3AYMtD4wwHwYDVR0j BBgwFoAU+nEOIbxB6YJ9UtZt6Y746azpsegwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNTljODNlNWMtNGI1NS00YTFhLTgwMDMtMWI3ZWNjNTFk NDdhLzMvRkE3MTBFMjFCQzQxRTk4MjdENTJENjZERTk4RUY4RTlBQ0U5QjFFOC5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC9GQTcxMEUyMUJDNDFFOTgyN0Q1MkQ2NkRF OThFRjhFOUFDRTlCMUU4LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzU5YzgzZTVjLTRiNTUtNGExYS04MDAzLTFiN2VjYzUxZDQ3YS8zL0ZBNzEwRTIx QkM0MUU5ODI3RDUyRDY2REU5OEVGOEU5QUNFOUIxRTgubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQABDV9V 2JLYrg/K0PNL29wJvcm7/BGtwgPfm0rqLOm6BoyJbDl2m2yDB4A5TZ8c8373eMfO jHiJC4XBwRDfzMh0DlOwCBuQ77UrUKUxHOnMj0KcPmJpNj16yhuG0CoB873Q8dp9 uWeXjBG4BsSjTCuX1PM+M6UAGY3B4oAT2aU6LQOupXTybm6+JU3ATUvNAQzm00b5 tnJbwQa5FZYfpx1JGU1ZVfoi+zW7kqEFfB181irGHooJ2RrfYbXh52IWvkpDo9FD 8iwumR1Z3VwQVc6zngZGv/h5ZhpJjiLMk1Pi8NsQV0Qs4veL2cYzQm5e4QZfdiAs z0bBSYcURFol9BaC -----END CERTIFICATE-----Generated at Sun Sep 7 23:32:26 2025 by rpki-client