$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/59c83e5c-4b55-4a1a-8003-1b7ecc51d47a/3/FA710E21BC41E9827D52D66DE98EF8E9ACE9B1E8.mft File: FA710E21BC41E9827D52D66DE98EF8E9ACE9B1E8.mft (raw, json) Hash identifier: yUccxu2FIphHzAibGBYa72g8ofItO7GyjQM3YUtPmgs= Subject key identifier: 8D:EE:9D:02:C4:2C:E6:F6:03:6A:11:D3:6A:24:8F:51:91:2C:0E:64 Authority key identifier: FA:71:0E:21:BC:41:E9:82:7D:52:D6:6D:E9:8E:F8:E9:AC:E9:B1:E8 Certificate issuer: /CN=FA710E21BC41E9827D52D66DE98EF8E9ACE9B1E8 Certificate serial: 71C886C22D2D56F76FDAD4FF4FCF851EB692B6DB Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/FA710E21BC41E9827D52D66DE98EF8E9ACE9B1E8.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/59c83e5c-4b55-4a1a-8003-1b7ecc51d47a/3/FA710E21BC41E9827D52D66DE98EF8E9ACE9B1E8.mft Manifest number: 82 Signing time: Thu 23 Oct 2025 14:14:59 +0000 Manifest this update: Thu 23 Oct 2025 14:09:59 +0000 Manifest next update: Fri 24 Oct 2025 16:44:59 +0000 Files and hashes: 1: 326131343a373538343a343830303a3a2f34382d3438203d3e20323131333538.roa (hash: dxI70qoTw8AqT4GSbNKeSr6HFS9kuFZrrwUT/py32Kc=) 2: 326131343a373538343a343130303a3a2f34302d3438203d3e20323136333039.roa (hash: J9Fi36nQGqAgueP6UU6iZv8HlrGSaFogPoGVrEhPYYg=) 3: FA710E21BC41E9827D52D66DE98EF8E9ACE9B1E8.crl (hash: Dox9IzdJtXhz178k/q3jLJstim6sTGeTA2+PH9Ooi7U=) 4: 326131343a373538343a346630303a3a2f34302d3430203d3e20323132353136.roa (hash: CNfVsinVsceZGjOaXQsHUjsBZSefgQTBz85mK3PRJtU=) 5: 326131343a373538343a343030303a3a2f33362d3438203d3e2036353137.roa (hash: 9qxxzty+nI98+cY44+m4DwmBg2WIZrsDW0snWoFPb+U=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/59c83e5c-4b55-4a1a-8003-1b7ecc51d47a/3/FA710E21BC41E9827D52D66DE98EF8E9ACE9B1E8.crl rsync://rsync.paas.rpki.ripe.net/repository/59c83e5c-4b55-4a1a-8003-1b7ecc51d47a/3/FA710E21BC41E9827D52D66DE98EF8E9ACE9B1E8.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/FA710E21BC41E9827D52D66DE98EF8E9ACE9B1E8.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 24 Oct 2025 16:44:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:c8:86:c2:2d:2d:56:f7:6f:da:d4:ff:4f:cf:85:1e:b6:92:b6:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FA710E21BC41E9827D52D66DE98EF8E9ACE9B1E8 Validity Not Before: Oct 23 14:09:59 2025 GMT Not After : Oct 24 16:44:59 2025 GMT Subject: CN=8DEE9D02C42CE6F6036A11D36A248F51912C0E64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:75:99:c5:0e:d1:11:f9:a5:1c:ed:f3:96:9d: af:fb:4e:e3:62:df:e4:98:c4:d2:16:93:69:be:16: b0:e5:cc:80:b5:46:f2:37:51:a3:2f:39:96:fc:21: 91:7f:dd:9a:39:32:9c:d6:8a:0d:a1:da:03:d8:f7: 50:d3:58:89:a1:c4:85:4b:e6:95:fa:b6:29:4f:df: 88:e8:a7:e0:55:f4:37:52:88:d7:8c:2e:12:84:3a: ac:1e:77:47:ca:a0:f7:7a:ae:fc:d2:f1:81:b4:03: a3:ad:e0:fa:b2:8b:4c:1f:f0:ce:8c:97:fe:b1:54: 90:5e:0d:99:f0:93:ef:d7:5e:49:1b:b0:fe:8b:8f: 74:00:34:92:01:8f:a3:d5:53:84:4d:bb:9e:13:ed: 63:9c:a6:be:b0:3a:6c:bd:a1:81:1e:9f:cb:d1:f5: 14:0a:07:cd:c2:55:2e:72:d9:5b:3b:29:f4:ad:c3: e2:16:a7:25:be:48:6d:07:bd:00:2d:e4:40:4a:e2: 9c:78:43:73:8c:8d:79:5d:90:4b:09:15:4b:6c:91: d6:6d:01:79:90:b3:f0:41:db:4a:89:57:ca:a5:1c: bf:83:6d:6b:a5:4a:68:03:e3:8b:86:5b:95:13:a2: 95:dc:3f:c6:be:c7:07:9a:31:f8:2c:03:46:ea:e9: 8e:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:EE:9D:02:C4:2C:E6:F6:03:6A:11:D3:6A:24:8F:51:91:2C:0E:64 X509v3 Authority Key Identifier: keyid:FA:71:0E:21:BC:41:E9:82:7D:52:D6:6D:E9:8E:F8:E9:AC:E9:B1:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/59c83e5c-4b55-4a1a-8003-1b7ecc51d47a/3/FA710E21BC41E9827D52D66DE98EF8E9ACE9B1E8.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/FA710E21BC41E9827D52D66DE98EF8E9ACE9B1E8.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/59c83e5c-4b55-4a1a-8003-1b7ecc51d47a/3/FA710E21BC41E9827D52D66DE98EF8E9ACE9B1E8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ef:0a:ef:7d:4e:64:60:dd:da:32:5a:01:ea:b9:34:0a:37:44: 63:d6:bd:96:ed:b6:65:e6:4c:5f:73:c1:bc:82:59:69:c9:1b: 04:bb:dd:00:43:fe:45:3f:4a:77:33:69:ac:60:c2:bb:5d:15: 2f:ad:a1:66:b0:09:0f:7c:f5:63:c2:79:fe:40:95:55:8c:79: a0:5a:c1:8a:75:28:41:1d:c7:ba:88:df:8b:72:4a:12:44:51: 19:ff:8b:d7:37:d2:91:e4:96:e2:6c:66:d4:8b:19:60:d4:2d: 06:2e:7f:c3:7a:a4:a5:54:2a:7f:3a:83:b2:ca:bf:15:b2:73: b8:60:23:60:f6:43:3c:fd:51:b3:c6:0b:cb:74:ec:cf:0c:b6: 23:47:e7:1c:ca:33:d5:16:76:93:5b:58:55:2b:47:df:4e:4e: e6:58:87:b2:8b:9b:9b:d8:b6:5d:0a:d3:b2:e1:80:61:3e:bf: d9:17:a1:39:02:b4:4f:e4:17:b8:7a:b1:91:fe:ff:77:d9:3b: 3f:73:31:77:26:5f:02:90:4c:ce:de:57:6c:8c:52:c7:1b:c1: 08:77:e5:cd:16:74:e9:d9:17:87:f3:a8:21:f9:6f:40:d1:71: 94:ed:62:9f:15:b2:da:9b:fa:da:59:f5:aa:a2:b7:bb:de:e1: 1f:a3:58:8a -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUcciGwi0tVvdv2tT/T8+FHraSttswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkE3MTBFMjFCQzQxRTk4MjdENTJENjZERTk4RUY4RTlB Q0U5QjFFODAeFw0yNTEwMjMxNDA5NTlaFw0yNTEwMjQxNjQ0NTlaMDMxMTAvBgNV BAMTKDhERUU5RDAyQzQyQ0U2RjYwMzZBMTFEMzZBMjQ4RjUxOTEyQzBFNjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPdZnFDtER+aUc7fOWna/7TuNi 3+SYxNIWk2m+FrDlzIC1RvI3UaMvOZb8IZF/3Zo5MpzWig2h2gPY91DTWImhxIVL 5pX6tilP34jop+BV9DdSiNeMLhKEOqwed0fKoPd6rvzS8YG0A6Ot4Pqyi0wf8M6M l/6xVJBeDZnwk+/XXkkbsP6Lj3QANJIBj6PVU4RNu54T7WOcpr6wOmy9oYEen8vR 9RQKB83CVS5y2Vs7KfStw+IWpyW+SG0HvQAt5EBK4px4Q3OMjXldkEsJFUtskdZt AXmQs/BB20qJV8qlHL+DbWulSmgD44uGW5UTopXcP8a+xweaMfgsA0bq6Y5LAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUje6dAsQs5vYDahHTaiSPUZEsDmQwHwYDVR0j BBgwFoAU+nEOIbxB6YJ9UtZt6Y746azpsegwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNTljODNlNWMtNGI1NS00YTFhLTgwMDMtMWI3ZWNjNTFk NDdhLzMvRkE3MTBFMjFCQzQxRTk4MjdENTJENjZERTk4RUY4RTlBQ0U5QjFFOC5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC9GQTcxMEUyMUJDNDFFOTgyN0Q1MkQ2NkRF OThFRjhFOUFDRTlCMUU4LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzU5YzgzZTVjLTRiNTUtNGExYS04MDAzLTFiN2VjYzUxZDQ3YS8zL0ZBNzEwRTIx QkM0MUU5ODI3RDUyRDY2REU5OEVGOEU5QUNFOUIxRTgubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQDvCu99 TmRg3doyWgHquTQKN0Rj1r2W7bZl5kxfc8G8gllpyRsEu90AQ/5FP0p3M2msYMK7 XRUvraFmsAkPfPVjwnn+QJVVjHmgWsGKdShBHce6iN+LckoSRFEZ/4vXN9KR5Jbi bGbUixlg1C0GLn/DeqSlVCp/OoOyyr8VsnO4YCNg9kM8/VGzxgvLdOzPDLYjR+cc yjPVFnaTW1hVK0ffTk7mWIeyi5ub2LZdCtOy4YBhPr/ZF6E5ArRP5Be4erGR/v93 2Ts/czF3Jl8CkEzO3ldsjFLHG8EId+XNFnTp2ReH86gh+W9A0XGU7WKfFbLam/ra WfWqore73uEfo1iK -----END CERTIFICATE-----Generated at Fri Oct 24 04:33:22 2025 by rpki-client