$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/1/FA8F32A0B21DD2779315422B5A2184C649E03C0B.mft File: FA8F32A0B21DD2779315422B5A2184C649E03C0B.mft (raw, json) Hash identifier: PeQPtoJIJhhJf/uCiIh/JCML+16m6E0bo3G6eMBKk9w= Subject key identifier: 7F:0C:8A:7F:CC:45:41:DB:E8:89:2B:0B:41:52:59:D0:AB:38:01:FF Authority key identifier: FA:8F:32:A0:B2:1D:D2:77:93:15:42:2B:5A:21:84:C6:49:E0:3C:0B Certificate issuer: /CN=FA8F32A0B21DD2779315422B5A2184C649E03C0B Certificate serial: 324F07F45F1D54B566EDA9A252573C63CB86311E Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/FA8F32A0B21DD2779315422B5A2184C649E03C0B.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/1/FA8F32A0B21DD2779315422B5A2184C649E03C0B.mft Manifest number: 03FB Signing time: Mon 02 Jun 2025 21:20:30 +0000 Manifest this update: Mon 02 Jun 2025 21:15:30 +0000 Manifest next update: Tue 03 Jun 2025 23:56:30 +0000 Files and hashes: 1: FA8F32A0B21DD2779315422B5A2184C649E03C0B.crl (hash: LZ9PcfiMRatZEWiRM7U3lobbLY5h4tD9hvPo/8LV1Dw=) 2: 326130373a353463313a663030303a3a2f33362d3438203d3e20323038343533.roa (hash: /CFUhpNUUZNwoRgflpnALQIis6DpR20ZsBTAXpcqHGA=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/1/FA8F32A0B21DD2779315422B5A2184C649E03C0B.crl rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/1/FA8F32A0B21DD2779315422B5A2184C649E03C0B.mft rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/FA8F32A0B21DD2779315422B5A2184C649E03C0B.cer rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.crl rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 03 Jun 2025 14:14:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:4f:07:f4:5f:1d:54:b5:66:ed:a9:a2:52:57:3c:63:cb:86:31:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FA8F32A0B21DD2779315422B5A2184C649E03C0B Validity Not Before: Jun 2 21:15:30 2025 GMT Not After : Jun 3 23:56:30 2025 GMT Subject: CN=7F0C8A7FCC4541DBE8892B0B415259D0AB3801FF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:b4:a7:11:6e:7c:1e:e1:73:90:8b:e1:1a:52: b7:70:c4:ea:86:b6:fd:a1:0d:bc:bf:2c:a2:14:7d: d3:b3:f6:99:3a:3d:94:f7:5a:82:e7:14:1d:e0:49: 7a:3d:b6:c1:7b:09:51:7e:f0:24:ae:9a:42:3d:e0: 6d:28:87:cc:88:55:9b:5d:bf:12:4c:56:96:2e:24: a7:83:24:8d:52:25:73:11:44:5b:00:8f:55:be:87: 01:c2:b6:d0:23:36:60:cd:63:b1:f2:f5:cd:80:70: 3f:d5:50:33:54:ae:67:da:b2:76:5b:31:75:e3:73: 25:24:62:05:5a:61:39:a7:d2:01:1c:9c:24:e8:51: 7a:c2:01:62:c4:dc:89:e2:ff:1c:75:ad:0f:d4:38: a9:36:fe:d5:80:15:8f:76:fb:b7:09:12:20:51:ad: ea:d2:b6:2d:43:66:9b:85:2c:01:98:72:78:e2:fd: d5:57:e6:99:4d:9c:32:2c:3e:8a:0c:70:3c:71:94: 05:0a:9a:c8:68:75:0b:52:13:32:a5:48:58:7a:c3: 9a:4a:f0:01:4d:1f:8d:72:2c:0e:77:e3:bb:25:bd: 32:fe:29:cc:d3:b9:e8:78:c7:04:27:42:ac:bf:72: 04:50:93:4e:72:a1:4e:8b:83:ce:7a:4e:77:fc:38: 5c:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:0C:8A:7F:CC:45:41:DB:E8:89:2B:0B:41:52:59:D0:AB:38:01:FF X509v3 Authority Key Identifier: keyid:FA:8F:32:A0:B2:1D:D2:77:93:15:42:2B:5A:21:84:C6:49:E0:3C:0B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/1/FA8F32A0B21DD2779315422B5A2184C649E03C0B.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/FA8F32A0B21DD2779315422B5A2184C649E03C0B.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/1/FA8F32A0B21DD2779315422B5A2184C649E03C0B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:d7:75:09:b9:07:0f:22:3e:a2:b0:dc:61:64:81:e7:60:e9: 23:cf:f6:61:ec:52:94:0f:08:db:a3:46:ab:8d:aa:7f:fc:90: ae:47:8f:e2:11:d2:57:66:91:0d:99:35:32:50:64:2a:5e:2f: 0f:8b:bd:8b:5a:9c:01:fa:04:51:09:2f:02:0f:8b:b4:46:dc: e5:8c:a8:83:85:12:42:a4:d7:9a:74:91:98:b5:9e:3c:0c:3e: ff:9d:25:3b:f0:a6:2b:bb:e9:c3:ff:4b:91:c2:2f:ac:c5:99: c6:d7:e0:68:76:a8:0d:92:8c:60:f4:07:fe:fe:1c:30:61:2f: 1f:89:cd:d1:54:59:30:da:fb:49:c8:f8:49:43:bc:4e:be:72: 51:3f:e9:dc:3f:00:2e:2b:29:e6:35:73:9a:b5:90:f2:0d:1e: 4f:42:8d:64:5f:96:0c:52:b5:8f:1d:3d:22:4d:95:ff:a5:2a: ba:98:16:bf:6a:be:df:db:30:7a:45:98:e7:fb:0a:33:40:67: 69:38:6f:f8:b4:94:24:09:64:3d:bf:87:84:ed:83:c1:c1:67: 14:74:0d:27:2e:73:5d:a6:81:cd:70:eb:6f:74:98:bb:70:30: 2d:fa:23:fc:a3:8d:cc:b1:d9:e2:33:48:14:b6:79:13:a7:be: 20:46:b0:45 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUMk8H9F8dVLVm7amiUlc8Y8uGMR4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkE4RjMyQTBCMjFERDI3NzkzMTU0MjJCNUEyMTg0QzY0 OUUwM0MwQjAeFw0yNTA2MDIyMTE1MzBaFw0yNTA2MDMyMzU2MzBaMDMxMTAvBgNV BAMTKDdGMEM4QTdGQ0M0NTQxREJFODg5MkIwQjQxNTI1OUQwQUIzODAxRkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCotKcRbnwe4XOQi+EaUrdwxOqG tv2hDby/LKIUfdOz9pk6PZT3WoLnFB3gSXo9tsF7CVF+8CSumkI94G0oh8yIVZtd vxJMVpYuJKeDJI1SJXMRRFsAj1W+hwHCttAjNmDNY7Hy9c2AcD/VUDNUrmfasnZb MXXjcyUkYgVaYTmn0gEcnCToUXrCAWLE3Ini/xx1rQ/UOKk2/tWAFY92+7cJEiBR rerSti1DZpuFLAGYcnji/dVX5plNnDIsPooMcDxxlAUKmshodQtSEzKlSFh6w5pK 8AFNH41yLA5347slvTL+KczTueh4xwQnQqy/cgRQk05yoU6Lg856Tnf8OFzFAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUfwyKf8xFQdvoiSsLQVJZ0Ks4Af8wHwYDVR0j BBgwFoAU+o8yoLId0neTFUIrWiGExkngPAswDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNzE0NzZkNjItOWNmYS00ODcxLWEyZDktZmFkZjU3ODFj MTFiLzEvRkE4RjMyQTBCMjFERDI3NzkzMTU0MjJCNUEyMTg0QzY0OUUwM0MwQi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9hYTAwNGJhMS00MTliLTRk YjUtYmJkMy01Y2NhNjMzY2FlM2YvMC9GQThGMzJBMEIyMUREMjc3OTMxNTQyMkI1 QTIxODRDNjQ5RTAzQzBCLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzcxNDc2ZDYyLTljZmEtNDg3MS1hMmQ5LWZhZGY1NzgxYzExYi8xL0ZBOEYzMkEw QjIxREQyNzc5MzE1NDIyQjVBMjE4NEM2NDlFMDNDMEIubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCR13UJ uQcPIj6isNxhZIHnYOkjz/Zh7FKUDwjbo0arjap//JCuR4/iEdJXZpENmTUyUGQq Xi8Pi72LWpwB+gRRCS8CD4u0RtzljKiDhRJCpNeadJGYtZ48DD7/nSU78KYru+nD /0uRwi+sxZnG1+BodqgNkoxg9Af+/hwwYS8fic3RVFkw2vtJyPhJQ7xOvnJRP+nc PwAuKynmNXOatZDyDR5PQo1kX5YMUrWPHT0iTZX/pSq6mBa/ar7f2zB6RZjn+woz QGdpOG/4tJQkCWQ9v4eE7YPBwWcUdA0nLnNdpoHNcOtvdJi7cDAt+iP8o43Msdni M0gUtnkTp74gRrBF -----END CERTIFICATE-----Generated at Tue Jun 3 03:41:23 2025 by rpki-client