$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/705b1897-d907-4dfc-b68b-77f485f58d6c/0/FDEE16BDC5420A60A3D6A8A29BD302650937B88C.mft File: FDEE16BDC5420A60A3D6A8A29BD302650937B88C.mft (raw, json) Hash identifier: jVBJgvFHpkw32+TXo3ThQYlvGTN+4fjY0NBzT9CPVSU= Subject key identifier: BA:79:7B:F7:EC:6D:65:7A:B7:61:13:11:DE:6B:F3:93:61:70:04:20 Authority key identifier: FD:EE:16:BD:C5:42:0A:60:A3:D6:A8:A2:9B:D3:02:65:09:37:B8:8C Certificate issuer: /CN=FDEE16BDC5420A60A3D6A8A29BD302650937B88C Certificate serial: 0A74019864E15BF7BAA609B55D966DDE1FF048F9 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/FDEE16BDC5420A60A3D6A8A29BD302650937B88C.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/705b1897-d907-4dfc-b68b-77f485f58d6c/0/FDEE16BDC5420A60A3D6A8A29BD302650937B88C.mft Manifest number: 5C Signing time: Sat 06 Sep 2025 20:13:20 +0000 Manifest this update: Sat 06 Sep 2025 20:08:20 +0000 Manifest next update: Sun 07 Sep 2025 21:23:20 +0000 Files and hashes: 1: 326131343a373538333a313030303a3a2f33362d3336203d3e20323135313038.roa (hash: Uc2wuWBne08reeuhGMV9FbwTFk0eKIo5Ei95b36hJuE=) 2: 326131343a373538303a373030303a3a2f33362d3336203d3e20323135313038.roa (hash: bvyg3HtIyqBCxLiPY89KCRG9IWT8nd/t/MqdudiybDI=) 3: FDEE16BDC5420A60A3D6A8A29BD302650937B88C.crl (hash: fxC9pxXjdAQyX9lXmDVPJhv5E7MJKYlz5t+bAveOBQE=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/705b1897-d907-4dfc-b68b-77f485f58d6c/0/FDEE16BDC5420A60A3D6A8A29BD302650937B88C.crl rsync://rsync.paas.rpki.ripe.net/repository/705b1897-d907-4dfc-b68b-77f485f58d6c/0/FDEE16BDC5420A60A3D6A8A29BD302650937B88C.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/FDEE16BDC5420A60A3D6A8A29BD302650937B88C.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Sep 2025 21:23:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:74:01:98:64:e1:5b:f7:ba:a6:09:b5:5d:96:6d:de:1f:f0:48:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FDEE16BDC5420A60A3D6A8A29BD302650937B88C Validity Not Before: Sep 6 20:08:20 2025 GMT Not After : Sep 7 21:23:20 2025 GMT Subject: CN=BA797BF7EC6D657AB7611311DE6BF39361700420 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:41:12:dc:12:cd:90:10:04:92:81:92:e8:45: fd:88:7e:a0:8a:38:42:60:60:80:3a:02:f1:f0:c1: 03:ae:9f:50:c1:34:44:d5:d2:b9:20:21:9f:53:b5: bf:d7:4f:7f:33:37:b6:0f:c9:8e:66:b2:bc:10:af: 52:68:82:75:d0:d4:5e:b4:2f:94:b6:cc:0d:27:cd: 59:69:4f:84:ca:89:b8:8e:52:8c:f7:94:d0:a5:ce: fc:34:7f:14:e5:03:2b:e4:40:64:98:3c:18:f3:b7: 23:00:42:7a:55:55:82:04:d8:94:e9:7e:ac:31:71: b2:72:e8:45:ac:97:53:6b:63:3a:81:3b:8f:df:1b: 4c:e4:6e:b1:03:f8:47:1d:51:e9:f0:62:28:43:38: e5:36:cd:63:07:b0:b2:59:49:67:e6:e4:be:8d:4f: 91:fb:8b:89:15:e1:43:16:0f:ca:39:60:c7:aa:e1: c0:05:ba:49:a8:00:85:4f:33:04:85:89:ae:9b:87: ec:40:cb:5a:b9:d7:1d:0d:73:39:18:34:28:c6:e1: ef:dd:bb:bf:d7:0a:eb:a4:c2:bf:03:19:cc:27:cd: 0f:89:4c:aa:4e:88:79:49:83:11:cb:7c:e1:34:8c: f2:64:d2:c8:1a:ee:57:a3:43:1b:8d:da:5f:0d:8d: 93:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:79:7B:F7:EC:6D:65:7A:B7:61:13:11:DE:6B:F3:93:61:70:04:20 X509v3 Authority Key Identifier: keyid:FD:EE:16:BD:C5:42:0A:60:A3:D6:A8:A2:9B:D3:02:65:09:37:B8:8C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/705b1897-d907-4dfc-b68b-77f485f58d6c/0/FDEE16BDC5420A60A3D6A8A29BD302650937B88C.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/FDEE16BDC5420A60A3D6A8A29BD302650937B88C.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/705b1897-d907-4dfc-b68b-77f485f58d6c/0/FDEE16BDC5420A60A3D6A8A29BD302650937B88C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:dd:91:2b:f5:a3:6a:c1:38:11:17:b9:9f:a6:33:b9:48:93: 52:99:8e:b2:9d:90:fd:86:06:5a:1f:fc:da:37:0f:30:be:cf: 30:5e:fa:6c:f7:90:7b:25:87:56:6c:5a:15:00:da:c2:d0:f1: f6:4f:7d:03:75:42:ee:88:18:ad:5f:9f:a6:9a:fa:15:8e:18: fe:b5:8d:14:8d:04:58:fc:89:fb:81:82:0e:d3:83:13:60:6d: e0:06:19:1e:b5:49:da:9d:ac:5b:81:b3:4b:66:15:e3:67:cd: 2e:8c:ba:bc:37:8b:19:99:93:3e:1f:cf:9d:6c:b1:12:83:cf: 72:f2:33:b6:f4:34:94:fc:a7:50:d1:22:6c:71:5c:9f:02:a0: 7c:a8:7b:04:f4:41:87:d5:62:83:bf:32:0d:91:30:7b:81:53: 76:44:96:5c:b5:1f:e9:bb:c0:f9:c4:ae:0b:e6:4f:4e:c8:4e: f3:ad:be:e5:4b:82:33:62:8c:a8:b8:b8:72:8a:aa:07:27:10: 17:fb:6c:38:e9:78:a7:f6:34:5b:3c:df:a9:7f:a8:c6:12:3a: 12:86:72:75:34:24:63:ef:09:e2:d6:31:ab:02:a2:f5:72:14: 75:b4:06:54:16:23:b2:53:93:ae:81:39:68:e8:df:3e:03:2e: b1:b9:a9:7b -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUCnQBmGThW/e6pgm1XZZt3h/wSPkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkRFRTE2QkRDNTQyMEE2MEEzRDZBOEEyOUJEMzAyNjUw OTM3Qjg4QzAeFw0yNTA5MDYyMDA4MjBaFw0yNTA5MDcyMTIzMjBaMDMxMTAvBgNV BAMTKEJBNzk3QkY3RUM2RDY1N0FCNzYxMTMxMURFNkJGMzkzNjE3MDA0MjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfQRLcEs2QEASSgZLoRf2IfqCK OEJgYIA6AvHwwQOun1DBNETV0rkgIZ9Ttb/XT38zN7YPyY5msrwQr1JognXQ1F60 L5S2zA0nzVlpT4TKibiOUoz3lNClzvw0fxTlAyvkQGSYPBjztyMAQnpVVYIE2JTp fqwxcbJy6EWsl1NrYzqBO4/fG0zkbrED+EcdUenwYihDOOU2zWMHsLJZSWfm5L6N T5H7i4kV4UMWD8o5YMeq4cAFukmoAIVPMwSFia6bh+xAy1q51x0NczkYNCjG4e/d u7/XCuukwr8DGcwnzQ+JTKpOiHlJgxHLfOE0jPJk0sga7lejQxuN2l8NjZMLAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUunl79+xtZXq3YRMR3mvzk2FwBCAwHwYDVR0j BBgwFoAU/e4WvcVCCmCj1qiim9MCZQk3uIwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNzA1YjE4OTctZDkwNy00ZGZjLWI2OGItNzdmNDg1ZjU4 ZDZjLzAvRkRFRTE2QkRDNTQyMEE2MEEzRDZBOEEyOUJEMzAyNjUwOTM3Qjg4Qy5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC9GREVFMTZCREM1NDIwQTYwQTNENkE4QTI5 QkQzMDI2NTA5MzdCODhDLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzcwNWIxODk3LWQ5MDctNGRmYy1iNjhiLTc3ZjQ4NWY1OGQ2Yy8wL0ZERUUxNkJE QzU0MjBBNjBBM0Q2QThBMjlCRDMwMjY1MDkzN0I4OEMubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBw3ZEr 9aNqwTgRF7mfpjO5SJNSmY6ynZD9hgZaH/zaNw8wvs8wXvps95B7JYdWbFoVANrC 0PH2T30DdULuiBitX5+mmvoVjhj+tY0UjQRY/In7gYIO04MTYG3gBhketUnanaxb gbNLZhXjZ80ujLq8N4sZmZM+H8+dbLESg89y8jO29DSU/KdQ0SJscVyfAqB8qHsE 9EGH1WKDvzINkTB7gVN2RJZctR/pu8D5xK4L5k9OyE7zrb7lS4IzYoyouLhyiqoH JxAX+2w46Xin9jRbPN+pf6jGEjoShnJ1NCRj7wni1jGrAqL1chR1tAZUFiOyU5Ou gTlo6N8+Ay6xual7 -----END CERTIFICATE-----Generated at Sun Sep 7 06:43:10 2025 by rpki-client