$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.mft File: FAC4708D7E265DB1044F9BB0EE8728587F48B484.mft (raw, json) Hash identifier: L6s3WRVQvElBLoOoPlsGni46W/qwLuFfqHT+Dqj4Db4= Subject key identifier: 1B:96:09:9C:14:D9:00:BF:E1:8A:7F:0D:11:4E:EC:46:F6:34:EC:D6 Authority key identifier: FA:C4:70:8D:7E:26:5D:B1:04:4F:9B:B0:EE:87:28:58:7F:48:B4:84 Certificate issuer: /CN=fac4708d7e265db1044f9bb0ee8728587f48b484 Certificate serial: 3050475CB262C36BCC234F2BA4C88E0ACEC9158C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.mft Manifest number: 82 Signing time: Tue 09 Sep 2025 05:43:45 +0000 Manifest this update: Tue 09 Sep 2025 05:38:45 +0000 Manifest next update: Wed 10 Sep 2025 06:53:45 +0000 Files and hashes: 1: 323030313a3637633a323634383a3a2f34382d3438203d3e203133303330.roa (hash: gJcgXZCcNvkeeSlp/fGn07D0YciYEry1v6B6cF0VIYA=) 2: 3138352e34342e38302e302f32342d3234203d3e203339343231.roa (hash: UQetgJ8gkrizZ8Ee9Cz8vW5vh9g+HY6FYRsN52DUj8Y=) 3: 3138352e34342e38312e302f32342d3234203d3e203339343231.roa (hash: BF6S2GfzcRLVtvnyZ19+5dCLfsNDbMuOlEIUiJ5+jzQ=) 4: 326130303a363334303a3a2f33322d3332203d3e203538323939.roa (hash: r7Nz5sTQ0srB/YDhKbCNr13tvMGVCwAnxfmWfTPFEmA=) 5: 352e3232362e3134362e302f32342d3234203d3e203538323939.roa (hash: qNr0TnWXn91io5Kf4S/eUzwAUX/WkTOzXp+VxijVCjY=) 6: 3138352e3231312e34332e302f32342d3234203d3e203536383833.roa (hash: 0GGtulQgh58mdaZy9i43/jGy8cDbbjgf1fqq974LzcM=) 7: 3138352e38362e3232382e302f32332d3234203d3e203538323939.roa (hash: 890AdEnFU4YBNlCNp/5Ad5R0sKIy6AzHzJmChUqZzls=) 8: 352e3232362e3134342e302f32312d3231203d3e203538323939.roa (hash: fo9Lh+tNo20hmXbMUCX4eNXLCfhJfwiBBGLGaQ6kzuA=) 9: 326130303a363334303a343030303a3a2f34382d3438203d3e203538323939.roa (hash: 2cIUBbXFtw6TIW3gtkGzSlPyISGn3/RYjHd6OQ6VrYU=) 10: FAC4708D7E265DB1044F9BB0EE8728587F48B484.crl (hash: Hv0xYQ+ui2/mTsv1jgqqvQfHK4HYw9tartTRFJ8OmyA=) 11: 326130313a3230653a3a2f33322d3332203d3e203431303531.roa (hash: dHo42eRURsQRPaktXGGvl5v6FK2mmQ17gzUqGLoOaR0=) 12: 326131323a616638303a3a2f33322d3332203d3e203536383833.roa (hash: SqpLdUzG49Jud64fYEC0hiT3rT/sz4nQsAd6iQkoKk8=) 13: 3138352e38362e3232342e302f32342d3234203d3e203439313932.roa (hash: R1iDu9WCL0q2IrJGzq/wt63LOyBWhh9M6puThqaZhTQ=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.crl rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.mft rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 10 Sep 2025 06:53:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:50:47:5c:b2:62:c3:6b:cc:23:4f:2b:a4:c8:8e:0a:ce:c9:15:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fac4708d7e265db1044f9bb0ee8728587f48b484 Validity Not Before: Sep 9 05:38:45 2025 GMT Not After : Sep 10 06:53:45 2025 GMT Subject: CN=1B96099C14D900BFE18A7F0D114EEC46F634ECD6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:6b:27:f2:8c:af:49:a6:59:1c:ad:06:d1:14: 2a:83:cb:fd:80:7f:6f:b9:bb:01:c2:c3:83:ba:8b: 03:c3:18:c4:0b:10:46:32:73:78:be:fc:2e:27:d2: c6:8a:8d:02:fc:c5:f5:be:f7:29:6c:1d:4b:e6:f8: fe:0c:b8:0a:4a:c4:c0:41:88:3a:16:c2:f4:03:ae: 0a:c3:e3:d8:cc:6f:ac:47:b8:84:d6:0e:9a:63:67: fb:32:96:14:3c:3d:16:76:6d:97:1c:49:1d:6f:d4: 7a:d3:52:f4:a8:59:4d:3f:89:0a:c9:36:ee:1e:04: e3:d5:46:00:d6:bc:fa:8d:6c:ee:72:a0:0f:17:69: 36:9e:95:8a:90:a8:15:c6:2b:e7:80:b0:c1:b7:d4: b2:ca:1f:d5:5c:4f:85:ba:bb:65:e7:75:b5:ea:54: 70:f0:e9:20:31:e2:74:72:c2:43:98:59:93:20:07: 4b:36:9b:3f:eb:f2:a6:b1:d1:99:72:27:9e:10:72: fb:4d:4e:14:e9:0f:06:b3:88:f6:9c:a3:16:f6:37: 57:64:2a:27:9d:31:1e:b3:b9:15:55:1e:6e:41:de: ef:45:c2:1f:fd:fe:2f:3c:95:ac:de:db:3b:75:3c: d1:b9:29:7e:59:d1:09:6c:c5:98:81:0d:04:70:38: 1c:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:96:09:9C:14:D9:00:BF:E1:8A:7F:0D:11:4E:EC:46:F6:34:EC:D6 X509v3 Authority Key Identifier: keyid:FA:C4:70:8D:7E:26:5D:B1:04:4F:9B:B0:EE:87:28:58:7F:48:B4:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b1:84:82:55:69:56:9d:9b:f1:14:cd:eb:60:dc:66:0f:e8:70: e7:e2:c5:76:c4:df:3f:cc:ed:8b:85:38:77:4d:58:31:66:70: e7:8c:36:72:d8:f0:a0:3b:bd:6b:ae:9b:76:66:75:09:28:39: a9:83:ed:47:10:a3:cb:6a:ad:ca:c0:94:29:eb:a7:cf:d9:9e: 2e:4c:93:ac:6d:0c:5d:e3:38:fb:45:a7:c4:7d:d5:6a:23:4e: 7f:1e:76:a3:8e:bc:0b:f2:f1:12:fd:54:d8:30:32:bc:ee:a6: b0:04:ef:0f:00:a9:ee:d9:df:10:66:e7:39:4d:c3:f0:87:e3: 4d:6a:d2:62:ec:1c:d3:71:e6:6d:8c:3b:60:d9:28:fe:b3:f4: 62:b1:cb:b0:4a:98:35:2c:64:39:01:2f:13:6e:ad:ed:80:83: ad:f5:eb:4e:08:ee:02:d3:28:d7:ff:28:d1:80:35:5e:26:60: 49:1f:05:0a:0c:fc:9e:14:aa:45:a8:34:cd:64:e5:bd:e5:21: 17:6e:e9:12:be:4e:f3:e0:3a:6f:e7:8a:92:e2:5f:4e:ff:86: 74:4e:78:bf:a2:e6:17:6c:26:f0:dd:fe:99:2f:2e:c7:c0:12: 8f:04:64:52:ff:bb:f1:7a:d3:16:88:d2:25:74:2a:3b:2b:2b: ab:ec:bf:fe -----BEGIN CERTIFICATE----- MIIFPjCCBCagAwIBAgIUMFBHXLJiw2vMI08rpMiOCs7JFYwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoZmFjNDcwOGQ3ZTI2NWRiMTA0NGY5YmIwZWU4NzI4NTg3 ZjQ4YjQ4NDAeFw0yNTA5MDkwNTM4NDVaFw0yNTA5MTAwNjUzNDVaMDMxMTAvBgNV BAMTKDFCOTYwOTlDMTREOTAwQkZFMThBN0YwRDExNEVFQzQ2RjYzNEVDRDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCPayfyjK9JplkcrQbRFCqDy/2A f2+5uwHCw4O6iwPDGMQLEEYyc3i+/C4n0saKjQL8xfW+9ylsHUvm+P4MuApKxMBB iDoWwvQDrgrD49jMb6xHuITWDppjZ/sylhQ8PRZ2bZccSR1v1HrTUvSoWU0/iQrJ Nu4eBOPVRgDWvPqNbO5yoA8XaTaelYqQqBXGK+eAsMG31LLKH9VcT4W6u2XndbXq VHDw6SAx4nRywkOYWZMgB0s2mz/r8qax0ZlyJ54QcvtNThTpDwaziPacoxb2N1dk KiedMR6zuRVVHm5B3u9Fwh/9/i88laze2zt1PNG5KX5Z0QlsxZiBDQRwOBzFAgMB AAGjggJIMIICRDAdBgNVHQ4EFgQUG5YJnBTZAL/hin8NEU7sRvY07NYwHwYDVR0j BBgwFoAU+sRwjX4mXbEET5uw7ocoWH9ItIQwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNWI1OGU2NDYtZTdhMi00NjVjLTg3YzUtNDNjMzU5YWQ5 MzY5LzAvRkFDNDcwOEQ3RTI2NURCMTA0NEY5QkIwRUU4NzI4NTg3RjQ4QjQ4NC5j cmwwZQYIKwYBBQUHAQEEWTBXMFUGCCsGAQUFBzAChklyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzEtc1J3alg0bVhiRUVUNXV3N29jb1dI OUl0SVEuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNWI1OGU2NDYt ZTdhMi00NjVjLTg3YzUtNDNjMzU5YWQ5MzY5LzAvRkFDNDcwOEQ3RTI2NURCMTA0 NEY5QkIwRUU4NzI4NTg3RjQ4QjQ4NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBALGEglVpVp2b8RTN62Dc Zg/ocOfixXbE3z/M7YuFOHdNWDFmcOeMNnLY8KA7vWuum3ZmdQkoOamD7UcQo8tq rcrAlCnrp8/Zni5Mk6xtDF3jOPtFp8R91WojTn8edqOOvAvy8RL9VNgwMrzuprAE 7w8Aqe7Z3xBm5zlNw/CH401q0mLsHNNx5m2MO2DZKP6z9GKxy7BKmDUsZDkBLxNu re2Ag631604I7gLTKNf/KNGANV4mYEkfBQoM/J4UqkWoNM1k5b3lIRdu6RK+TvPg Om/nipLiX07/hnROeL+i5hdsJvDd/pkvLsfAEo8EZFL/u/F60xaI0iV0KjsrK6vs v/4= -----END CERTIFICATE-----Generated at Tue Sep 9 18:50:55 2025 by rpki-client