$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.mft File: FAC4708D7E265DB1044F9BB0EE8728587F48B484.mft (raw, json) Hash identifier: LlKLV2Pz+oHSYPZSB0lJ3yg2DV8fyyv786RH9s3QxvQ= Subject key identifier: 45:74:6A:A4:FB:9B:5E:C3:01:58:9A:2C:73:AE:25:65:AC:F8:5E:83 Authority key identifier: FA:C4:70:8D:7E:26:5D:B1:04:4F:9B:B0:EE:87:28:58:7F:48:B4:84 Certificate issuer: /CN=fac4708d7e265db1044f9bb0ee8728587f48b484 Certificate serial: 5F3A48C6F075D343492DC0D076B175013C03668A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.mft Manifest number: 06 Signing time: Sat 07 Jun 2025 22:07:56 +0000 Manifest this update: Sat 07 Jun 2025 22:02:56 +0000 Manifest next update: Mon 09 Jun 2025 01:40:56 +0000 Files and hashes: 1: 326131323a616638303a3a2f33322d3332203d3e203536383833.roa (hash: SqpLdUzG49Jud64fYEC0hiT3rT/sz4nQsAd6iQkoKk8=) 2: 326130303a363334303a343030303a3a2f34382d3438203d3e203538323939.roa (hash: 2cIUBbXFtw6TIW3gtkGzSlPyISGn3/RYjHd6OQ6VrYU=) 3: 352e3232362e3134342e302f32312d3231203d3e203538323939.roa (hash: fo9Lh+tNo20hmXbMUCX4eNXLCfhJfwiBBGLGaQ6kzuA=) 4: 3138352e38362e3232342e302f32342d3234203d3e203439313932.roa (hash: R1iDu9WCL0q2IrJGzq/wt63LOyBWhh9M6puThqaZhTQ=) 5: 352e3232362e3134362e302f32342d3234203d3e203538323939.roa (hash: qNr0TnWXn91io5Kf4S/eUzwAUX/WkTOzXp+VxijVCjY=) 6: 3138352e3231312e34332e302f32342d3234203d3e203536383833.roa (hash: 0GGtulQgh58mdaZy9i43/jGy8cDbbjgf1fqq974LzcM=) 7: FAC4708D7E265DB1044F9BB0EE8728587F48B484.crl (hash: 34E6NyN0Tvqzarw2LSe4XjiOBFhMVKrgQydPKGrAhtg=) 8: 323030313a3637633a323634383a3a2f34382d3438203d3e203133303330.roa (hash: gJcgXZCcNvkeeSlp/fGn07D0YciYEry1v6B6cF0VIYA=) 9: 3138352e34342e38302e302f32342d3234203d3e203339343231.roa (hash: UQetgJ8gkrizZ8Ee9Cz8vW5vh9g+HY6FYRsN52DUj8Y=) 10: 326130313a3230653a3a2f33322d3332203d3e203431303531.roa (hash: dHo42eRURsQRPaktXGGvl5v6FK2mmQ17gzUqGLoOaR0=) 11: 3138352e34342e38312e302f32342d3234203d3e203339343231.roa (hash: BF6S2GfzcRLVtvnyZ19+5dCLfsNDbMuOlEIUiJ5+jzQ=) 12: 326130303a363334303a3a2f33322d3332203d3e203538323939.roa (hash: r7Nz5sTQ0srB/YDhKbCNr13tvMGVCwAnxfmWfTPFEmA=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.crl rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.mft rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 09 Jun 2025 01:40:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:3a:48:c6:f0:75:d3:43:49:2d:c0:d0:76:b1:75:01:3c:03:66:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fac4708d7e265db1044f9bb0ee8728587f48b484 Validity Not Before: Jun 7 22:02:56 2025 GMT Not After : Jun 9 01:40:56 2025 GMT Subject: CN=45746AA4FB9B5EC301589A2C73AE2565ACF85E83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:aa:6e:f5:0f:26:7c:ea:3e:2d:4e:6f:e4:cd: a7:45:4b:70:60:b4:7a:6d:f6:ab:69:0e:bb:d9:cc: 82:f2:a7:e1:56:19:25:fd:7d:d5:1c:7f:0e:7c:ec: 8f:b0:a8:a5:45:69:d0:8f:b2:1b:04:04:23:6f:74: 08:6a:6f:8e:a0:65:e5:da:e5:72:3a:bf:65:c0:fd: 88:77:b1:c8:20:57:cb:66:b1:56:08:d3:45:08:ee: f3:1e:5f:2e:39:4a:87:4f:2d:7a:f3:b3:e5:5d:4c: 9d:76:fc:6c:3c:9f:e0:35:43:bb:d7:b4:25:99:8b: 43:fc:9f:4b:1a:a6:94:b9:ab:14:83:61:c8:6d:51: ee:25:bc:c8:01:61:0f:d4:99:2d:15:82:3d:05:be: 3d:cf:3e:44:f0:1f:d1:e5:03:89:97:8b:98:78:0d: 14:60:78:c6:05:d9:e6:be:e4:38:a4:aa:d9:01:87: 2e:6c:39:2d:82:ec:b5:53:b6:53:c0:ac:9a:34:d6: 2f:6c:45:79:5e:c1:82:1d:24:c6:e0:60:83:04:4a: eb:91:12:32:c3:6e:1b:8b:2f:8a:64:39:74:18:1f: 7d:22:4c:bf:e0:85:25:9d:9d:3d:82:30:b9:f2:17: 4d:98:5e:58:76:ea:62:db:a4:95:65:a5:bf:40:fc: 21:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:74:6A:A4:FB:9B:5E:C3:01:58:9A:2C:73:AE:25:65:AC:F8:5E:83 X509v3 Authority Key Identifier: keyid:FA:C4:70:8D:7E:26:5D:B1:04:4F:9B:B0:EE:87:28:58:7F:48:B4:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:1a:09:97:70:e6:e2:86:b1:06:93:52:71:bc:eb:ec:88:eb: d7:cb:66:ff:14:0e:6c:49:03:ce:c3:b3:48:ca:29:66:bf:26: bc:b6:76:f8:44:0f:8f:cc:69:40:e9:f7:dc:a9:20:1f:7d:15: 87:d3:9d:cb:4f:b6:96:34:be:9d:83:38:a2:fe:d4:40:36:52: ca:e3:6a:32:9d:bb:e6:16:64:67:c7:79:03:8d:78:f1:df:24: ce:8e:0c:48:4c:d1:b7:2f:34:9f:c8:3f:47:ed:b9:13:e9:4e: 02:2c:ee:39:1d:61:a5:55:7a:2d:b2:a7:a1:a8:f7:d7:c2:6a: 52:3d:8d:8e:80:fd:cc:65:c9:38:47:70:ef:29:da:b9:6d:19: 52:4d:f1:9c:8c:3a:fc:a8:ef:ea:e3:fd:41:54:40:d9:38:df: 1f:b7:08:cb:77:4c:a6:ba:e2:1a:17:82:a7:3b:66:47:c5:91: 65:bd:4a:7a:87:3f:5a:64:df:0f:cd:4d:10:40:be:77:73:3e: 8e:38:ac:a3:9b:29:fe:fd:bd:e9:1e:ed:20:d8:00:33:3b:64: 2a:58:e8:e8:37:04:cb:fa:bd:c2:e5:39:78:8b:9f:51:d4:3d: cd:b2:9b:fa:b4:cc:a0:da:5a:13:9d:83:f8:af:94:cd:1d:2a: 39:04:4a:a1 -----BEGIN CERTIFICATE----- MIIFPjCCBCagAwIBAgIUXzpIxvB100NJLcDQdrF1ATwDZoowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoZmFjNDcwOGQ3ZTI2NWRiMTA0NGY5YmIwZWU4NzI4NTg3 ZjQ4YjQ4NDAeFw0yNTA2MDcyMjAyNTZaFw0yNTA2MDkwMTQwNTZaMDMxMTAvBgNV BAMTKDQ1NzQ2QUE0RkI5QjVFQzMwMTU4OUEyQzczQUUyNTY1QUNGODVFODMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+qm71DyZ86j4tTm/kzadFS3Bg tHpt9qtpDrvZzILyp+FWGSX9fdUcfw587I+wqKVFadCPshsEBCNvdAhqb46gZeXa 5XI6v2XA/Yh3scggV8tmsVYI00UI7vMeXy45SodPLXrzs+VdTJ12/Gw8n+A1Q7vX tCWZi0P8n0sappS5qxSDYchtUe4lvMgBYQ/UmS0Vgj0Fvj3PPkTwH9HlA4mXi5h4 DRRgeMYF2ea+5DikqtkBhy5sOS2C7LVTtlPArJo01i9sRXlewYIdJMbgYIMESuuR EjLDbhuLL4pkOXQYH30iTL/ghSWdnT2CMLnyF02YXlh26mLbpJVlpb9A/CEXAgMB AAGjggJIMIICRDAdBgNVHQ4EFgQURXRqpPubXsMBWJosc64lZaz4XoMwHwYDVR0j BBgwFoAU+sRwjX4mXbEET5uw7ocoWH9ItIQwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNWI1OGU2NDYtZTdhMi00NjVjLTg3YzUtNDNjMzU5YWQ5 MzY5LzAvRkFDNDcwOEQ3RTI2NURCMTA0NEY5QkIwRUU4NzI4NTg3RjQ4QjQ4NC5j cmwwZQYIKwYBBQUHAQEEWTBXMFUGCCsGAQUFBzAChklyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzEtc1J3alg0bVhiRUVUNXV3N29jb1dI OUl0SVEuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNWI1OGU2NDYt ZTdhMi00NjVjLTg3YzUtNDNjMzU5YWQ5MzY5LzAvRkFDNDcwOEQ3RTI2NURCMTA0 NEY5QkIwRUU4NzI4NTg3RjQ4QjQ4NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAGAaCZdw5uKGsQaTUnG8 6+yI69fLZv8UDmxJA87Ds0jKKWa/Jry2dvhED4/MaUDp99ypIB99FYfTnctPtpY0 vp2DOKL+1EA2UsrjajKdu+YWZGfHeQONePHfJM6ODEhM0bcvNJ/IP0ftuRPpTgIs 7jkdYaVVei2yp6Go99fCalI9jY6A/cxlyThHcO8p2rltGVJN8ZyMOvyo7+rj/UFU QNk43x+3CMt3TKa64hoXgqc7ZkfFkWW9SnqHP1pk3w/NTRBAvndzPo44rKObKf79 veke7SDYADM7ZCpY6Og3BMv6vcLlOXiLn1HUPc2ym/q0zKDaWhOdg/ivlM0dKjkE SqE= -----END CERTIFICATE-----Generated at Sun Jun 8 10:34:10 2025 by rpki-client