$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/705b1897-d907-4dfc-b68b-77f485f58d6c/0/FDEE16BDC5420A60A3D6A8A29BD302650937B88C.mft File: FDEE16BDC5420A60A3D6A8A29BD302650937B88C.mft (raw, json) Hash identifier: FJ8YmCS9/eFX/fDarrWUnFUf6uwO0HQ7+NVGVudIX3c= Subject key identifier: 6C:33:F6:A2:15:6D:E1:36:01:39:63:01:4B:EF:7F:63:E9:8E:DA:56 Authority key identifier: FD:EE:16:BD:C5:42:0A:60:A3:D6:A8:A2:9B:D3:02:65:09:37:B8:8C Certificate issuer: /CN=FDEE16BDC5420A60A3D6A8A29BD302650937B88C Certificate serial: 1C0549E31ECF1ECBB5AF54D0A36414B8F03E389A Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/FDEE16BDC5420A60A3D6A8A29BD302650937B88C.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/705b1897-d907-4dfc-b68b-77f485f58d6c/0/FDEE16BDC5420A60A3D6A8A29BD302650937B88C.mft Manifest number: 9B Signing time: Thu 23 Oct 2025 10:08:42 +0000 Manifest this update: Thu 23 Oct 2025 10:03:42 +0000 Manifest next update: Fri 24 Oct 2025 11:53:42 +0000 Files and hashes: 1: FDEE16BDC5420A60A3D6A8A29BD302650937B88C.crl (hash: ZV8MYrnWdzW1f6fKKestv6kYDZldV8+Ix8lxiTppoeQ=) 2: 326131343a373538303a373030303a3a2f33362d3336203d3e20323135313038.roa (hash: bvyg3HtIyqBCxLiPY89KCRG9IWT8nd/t/MqdudiybDI=) 3: 326131343a373538333a313030303a3a2f33362d3336203d3e20323135313038.roa (hash: Uc2wuWBne08reeuhGMV9FbwTFk0eKIo5Ei95b36hJuE=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/705b1897-d907-4dfc-b68b-77f485f58d6c/0/FDEE16BDC5420A60A3D6A8A29BD302650937B88C.crl rsync://rsync.paas.rpki.ripe.net/repository/705b1897-d907-4dfc-b68b-77f485f58d6c/0/FDEE16BDC5420A60A3D6A8A29BD302650937B88C.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/FDEE16BDC5420A60A3D6A8A29BD302650937B88C.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 24 Oct 2025 11:53:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:05:49:e3:1e:cf:1e:cb:b5:af:54:d0:a3:64:14:b8:f0:3e:38:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FDEE16BDC5420A60A3D6A8A29BD302650937B88C Validity Not Before: Oct 23 10:03:42 2025 GMT Not After : Oct 24 11:53:42 2025 GMT Subject: CN=6C33F6A2156DE136013963014BEF7F63E98EDA56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:92:4d:0d:4e:0c:22:d1:dc:06:1a:dd:7e:79: 27:dc:5a:d1:2a:ea:f8:27:ab:12:cf:28:77:66:ea: 7d:f7:f8:7a:30:11:17:4f:9c:62:92:b9:4d:ea:73: d4:e8:fe:75:78:6e:f4:45:52:d9:90:90:02:91:6e: 7c:1b:00:e5:84:56:b1:f4:50:29:a7:bb:ed:c8:e0: c9:c8:c9:93:70:dc:22:b1:3c:58:eb:8d:83:5c:3d: 63:21:4d:04:31:4e:78:d5:f4:ef:88:d2:54:d3:bc: 00:b3:a4:dc:ee:a0:a9:bc:d6:52:da:53:f1:7e:e9: 10:84:4d:f1:e3:52:b7:77:7e:e7:b4:80:1e:68:39: fa:37:b0:29:6f:74:8a:d3:ec:c9:d8:9a:0c:b3:7a: ff:8d:3a:fa:2e:91:1a:93:b8:b3:c7:12:9b:34:fc: 11:23:f4:2b:81:e7:38:60:b5:8d:dd:7f:ae:41:e4: 54:2a:f4:b4:6d:a3:df:50:c0:51:73:d1:f9:48:e4: b1:2b:20:83:50:59:87:1a:52:6b:4d:78:30:81:9c: ca:9d:5f:21:2b:28:a0:4b:0d:ac:6f:a0:5a:17:7c: fc:81:da:68:2c:e9:49:c2:12:1a:1d:b7:51:df:28: 90:19:ae:08:8e:df:c0:1e:87:ef:69:83:11:30:0c: 36:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:33:F6:A2:15:6D:E1:36:01:39:63:01:4B:EF:7F:63:E9:8E:DA:56 X509v3 Authority Key Identifier: keyid:FD:EE:16:BD:C5:42:0A:60:A3:D6:A8:A2:9B:D3:02:65:09:37:B8:8C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/705b1897-d907-4dfc-b68b-77f485f58d6c/0/FDEE16BDC5420A60A3D6A8A29BD302650937B88C.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/FDEE16BDC5420A60A3D6A8A29BD302650937B88C.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/705b1897-d907-4dfc-b68b-77f485f58d6c/0/FDEE16BDC5420A60A3D6A8A29BD302650937B88C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:b2:87:de:54:7f:62:bf:db:d5:50:78:05:2f:4b:2b:ee:0a: ee:02:ee:d7:78:82:b0:4e:93:d3:30:cf:c1:c2:d7:75:d2:cb: 90:c8:1b:ed:a6:fd:68:7a:2a:90:66:b3:8f:4e:10:28:7d:ab: 6e:c1:d0:4d:b6:6c:6c:18:bb:ed:75:3c:cb:c3:77:26:75:98: 8c:c7:e6:16:0e:af:41:6f:68:bd:1d:f6:2a:e7:17:68:74:7a: ed:b6:96:70:8a:de:a5:5b:92:f2:48:d4:de:5f:6e:02:a0:79: ef:94:bb:20:49:4c:16:69:96:9b:48:d0:97:dd:eb:17:15:74: 89:27:00:b3:ec:1b:e5:01:b8:21:a0:c3:cb:1a:3e:a8:38:5b: f2:d1:00:46:7b:97:32:0c:44:51:c8:52:cc:74:76:1f:44:8c: 6d:b7:41:30:c9:72:fb:10:09:a0:31:7f:00:e0:36:22:ee:c1: 49:85:5b:d8:e0:be:b9:a8:1e:6b:52:8c:d5:c0:ed:5d:bb:5e: f6:0e:fd:22:06:b0:e6:2a:d1:7e:87:02:e0:da:5a:2f:7f:05: 5c:4f:6e:93:56:a6:d3:0b:98:46:49:c5:23:18:89:6c:9a:ba: 9b:02:d5:1d:75:7c:c6:65:49:68:83:ee:48:d9:e8:3a:21:3d: 54:46:80:c3 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUHAVJ4x7PHsu1r1TQo2QUuPA+OJowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkRFRTE2QkRDNTQyMEE2MEEzRDZBOEEyOUJEMzAyNjUw OTM3Qjg4QzAeFw0yNTEwMjMxMDAzNDJaFw0yNTEwMjQxMTUzNDJaMDMxMTAvBgNV BAMTKDZDMzNGNkEyMTU2REUxMzYwMTM5NjMwMTRCRUY3RjYzRTk4RURBNTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6kk0NTgwi0dwGGt1+eSfcWtEq 6vgnqxLPKHdm6n33+HowERdPnGKSuU3qc9To/nV4bvRFUtmQkAKRbnwbAOWEVrH0 UCmnu+3I4MnIyZNw3CKxPFjrjYNcPWMhTQQxTnjV9O+I0lTTvACzpNzuoKm81lLa U/F+6RCETfHjUrd3fue0gB5oOfo3sClvdIrT7MnYmgyzev+NOvoukRqTuLPHEps0 /BEj9CuB5zhgtY3df65B5FQq9LRto99QwFFz0flI5LErIINQWYcaUmtNeDCBnMqd XyErKKBLDaxvoFoXfPyB2mgs6UnCEhodt1HfKJAZrgiO38Aeh+9pgxEwDDbPAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUbDP2ohVt4TYBOWMBS+9/Y+mO2lYwHwYDVR0j BBgwFoAU/e4WvcVCCmCj1qiim9MCZQk3uIwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNzA1YjE4OTctZDkwNy00ZGZjLWI2OGItNzdmNDg1ZjU4 ZDZjLzAvRkRFRTE2QkRDNTQyMEE2MEEzRDZBOEEyOUJEMzAyNjUwOTM3Qjg4Qy5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC9GREVFMTZCREM1NDIwQTYwQTNENkE4QTI5 QkQzMDI2NTA5MzdCODhDLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzcwNWIxODk3LWQ5MDctNGRmYy1iNjhiLTc3ZjQ4NWY1OGQ2Yy8wL0ZERUUxNkJE QzU0MjBBNjBBM0Q2QThBMjlCRDMwMjY1MDkzN0I4OEMubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBWsofe VH9iv9vVUHgFL0sr7gruAu7XeIKwTpPTMM/Bwtd10suQyBvtpv1oeiqQZrOPThAo fatuwdBNtmxsGLvtdTzLw3cmdZiMx+YWDq9Bb2i9HfYq5xdodHrttpZwit6lW5Ly SNTeX24CoHnvlLsgSUwWaZabSNCX3esXFXSJJwCz7BvlAbghoMPLGj6oOFvy0QBG e5cyDERRyFLMdHYfRIxtt0EwyXL7EAmgMX8A4DYi7sFJhVvY4L65qB5rUozVwO1d u172Dv0iBrDmKtF+hwLg2lovfwVcT26TVqbTC5hGScUjGIlsmrqbAtUddXzGZUlo g+5I2eg6IT1URoDD -----END CERTIFICATE-----Generated at Fri Oct 24 04:30:03 2025 by rpki-client