$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09456214-8d25-4b5e-9e04-35c0a7a26470/0/FB2E043F755DA1329FB66347D17DC2B79A73C3FA.mft File: FB2E043F755DA1329FB66347D17DC2B79A73C3FA.mft (raw, json) Hash identifier: oYnmn+cfP2xQfZu/KDaaQ3sSSBbsXFHQgG9C9MbBw88= Subject key identifier: 30:EC:D0:D7:01:2E:AD:6A:37:8D:3E:07:4B:FB:F4:EB:46:60:19:88 Authority key identifier: FB:2E:04:3F:75:5D:A1:32:9F:B6:63:47:D1:7D:C2:B7:9A:73:C3:FA Certificate issuer: /CN=FB2E043F755DA1329FB66347D17DC2B79A73C3FA Certificate serial: 48E3750C7B26C1035B370D31E5EC4F790CFA0C08 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/FB2E043F755DA1329FB66347D17DC2B79A73C3FA.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09456214-8d25-4b5e-9e04-35c0a7a26470/0/FB2E043F755DA1329FB66347D17DC2B79A73C3FA.mft Manifest number: 0C Signing time: Sat 23 Aug 2025 17:50:12 +0000 Manifest this update: Sat 23 Aug 2025 17:45:12 +0000 Manifest next update: Sun 24 Aug 2025 21:01:12 +0000 Files and hashes: 1: FB2E043F755DA1329FB66347D17DC2B79A73C3FA.crl (hash: 0Lh8rn1QIdLdnlkAjR04mC6TNqLe9K93BzmpitaBFDE=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09456214-8d25-4b5e-9e04-35c0a7a26470/0/FB2E043F755DA1329FB66347D17DC2B79A73C3FA.crl rsync://rsync.paas.rpki.ripe.net/repository/09456214-8d25-4b5e-9e04-35c0a7a26470/0/FB2E043F755DA1329FB66347D17DC2B79A73C3FA.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/FB2E043F755DA1329FB66347D17DC2B79A73C3FA.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 24 Aug 2025 12:25:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:e3:75:0c:7b:26:c1:03:5b:37:0d:31:e5:ec:4f:79:0c:fa:0c:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FB2E043F755DA1329FB66347D17DC2B79A73C3FA Validity Not Before: Aug 23 17:45:12 2025 GMT Not After : Aug 24 21:01:12 2025 GMT Subject: CN=30ECD0D7012EAD6A378D3E074BFBF4EB46601988 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:87:25:09:49:b5:06:c5:11:0c:b0:63:1e:a4: 2a:e2:4d:2f:81:68:ae:8b:ff:f8:60:1e:36:75:04: 21:96:7f:71:8a:7f:70:72:45:63:15:48:68:41:52: 2c:b9:17:69:b6:dc:fd:c1:5e:f4:21:e1:47:73:e4: aa:78:5a:21:78:d3:c7:33:47:be:d3:ff:a9:5b:66: 1a:87:12:2c:bc:75:c8:f4:03:47:03:10:10:25:77: 40:d5:9b:de:f7:88:c2:41:f6:d3:fc:ab:61:08:4b: 61:fd:40:52:e7:be:5a:d2:f8:9b:0f:50:bb:83:21: 04:98:f8:dc:f6:29:f7:cd:93:44:8f:3d:e9:cc:f2: 2c:45:c3:3c:eb:be:c7:22:ef:d2:54:96:85:2b:49: cf:ee:09:90:7e:8d:3d:45:7c:85:52:35:f8:ed:5a: 75:0d:ee:13:35:ab:9c:7b:7f:cf:7d:08:7c:7e:f4: 11:2f:3b:e2:fb:72:7d:27:85:6a:a1:f7:0c:65:4e: 1e:96:7b:71:5c:77:da:41:5e:78:b3:49:bd:65:ce: 62:43:89:73:79:81:8d:74:e1:cd:b3:41:35:a2:c7: c6:7b:47:0a:7f:f6:98:a3:28:a4:a7:64:fa:fe:f2: c1:3d:0e:cc:5f:1a:27:46:44:d8:b6:74:a8:f7:7e: 6a:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:EC:D0:D7:01:2E:AD:6A:37:8D:3E:07:4B:FB:F4:EB:46:60:19:88 X509v3 Authority Key Identifier: keyid:FB:2E:04:3F:75:5D:A1:32:9F:B6:63:47:D1:7D:C2:B7:9A:73:C3:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/09456214-8d25-4b5e-9e04-35c0a7a26470/0/FB2E043F755DA1329FB66347D17DC2B79A73C3FA.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/FB2E043F755DA1329FB66347D17DC2B79A73C3FA.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09456214-8d25-4b5e-9e04-35c0a7a26470/0/FB2E043F755DA1329FB66347D17DC2B79A73C3FA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 62:d9:ab:59:ac:11:05:01:46:2e:31:89:8e:c1:d0:44:cf:c7: 85:30:b8:0b:f2:8e:e9:7e:85:6d:f5:14:24:be:dd:9d:bf:71: 35:7e:f4:60:f8:c7:e7:cd:aa:87:e7:f2:b6:1f:8e:73:41:77: 28:e7:a5:51:24:77:1d:27:5e:e8:9b:28:6a:12:44:df:97:c4: c1:12:9e:30:2a:14:19:76:d0:76:3f:ae:af:ca:84:c3:a1:06: d9:a6:5a:ac:0e:cb:4a:d1:67:c5:9f:2d:46:8f:ff:10:32:e9: 6c:30:b4:e1:e8:d6:df:26:14:bd:8b:d8:53:6b:b9:68:9c:71: cc:41:c3:89:67:d2:cc:b2:4c:d7:ac:ce:e2:66:f1:0e:c2:88: 59:82:39:08:15:16:b8:07:f4:c5:48:db:86:f1:dc:00:1f:3a: af:0d:7c:63:8c:08:c6:ff:bc:0f:87:6a:05:18:bd:1e:f6:95: 4c:9b:fd:71:73:f3:fb:20:16:2f:67:14:94:62:6e:ba:d6:8a: 53:ce:79:07:67:af:4d:66:cd:2f:e1:06:5d:bf:0f:ac:11:00: 72:73:8b:9a:fe:9f:77:3a:00:49:86:84:a5:81:e9:f8:a9:12: fb:aa:5b:17:1e:cb:7f:b6:23:7d:3f:bc:d7:c5:96:50:f7:d0: 3a:07:11:11 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUSON1DHsmwQNbNw0x5exPeQz6DAgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkIyRTA0M0Y3NTVEQTEzMjlGQjY2MzQ3RDE3REMyQjc5 QTczQzNGQTAeFw0yNTA4MjMxNzQ1MTJaFw0yNTA4MjQyMTAxMTJaMDMxMTAvBgNV BAMTKDMwRUNEMEQ3MDEyRUFENkEzNzhEM0UwNzRCRkJGNEVCNDY2MDE5ODgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDThyUJSbUGxREMsGMepCriTS+B aK6L//hgHjZ1BCGWf3GKf3ByRWMVSGhBUiy5F2m23P3BXvQh4Udz5Kp4WiF408cz R77T/6lbZhqHEiy8dcj0A0cDEBAld0DVm973iMJB9tP8q2EIS2H9QFLnvlrS+JsP ULuDIQSY+Nz2KffNk0SPPenM8ixFwzzrvsci79JUloUrSc/uCZB+jT1FfIVSNfjt WnUN7hM1q5x7f899CHx+9BEvO+L7cn0nhWqh9wxlTh6We3Fcd9pBXnizSb1lzmJD iXN5gY104c2zQTWix8Z7Rwp/9pijKKSnZPr+8sE9DsxfGidGRNi2dKj3fmqfAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUMOzQ1wEurWo3jT4HS/v060ZgGYgwHwYDVR0j BBgwFoAU+y4EP3VdoTKftmNH0X3Ct5pzw/owDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMDk0NTYyMTQtOGQyNS00YjVlLTllMDQtMzVjMGE3YTI2 NDcwLzAvRkIyRTA0M0Y3NTVEQTEzMjlGQjY2MzQ3RDE3REMyQjc5QTczQzNGQS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC9GQjJFMDQzRjc1NURBMTMyOUZCNjYzNDdE MTdEQzJCNzlBNzNDM0ZBLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzA5NDU2MjE0LThkMjUtNGI1ZS05ZTA0LTM1YzBhN2EyNjQ3MC8wL0ZCMkUwNDNG NzU1REExMzI5RkI2NjM0N0QxN0RDMkI3OUE3M0MzRkEubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBi2atZ rBEFAUYuMYmOwdBEz8eFMLgL8o7pfoVt9RQkvt2dv3E1fvRg+MfnzaqH5/K2H45z QXco56VRJHcdJ17omyhqEkTfl8TBEp4wKhQZdtB2P66vyoTDoQbZplqsDstK0WfF ny1Gj/8QMulsMLTh6NbfJhS9i9hTa7lonHHMQcOJZ9LMskzXrM7iZvEOwohZgjkI FRa4B/TFSNuG8dwAHzqvDXxjjAjG/7wPh2oFGL0e9pVMm/1xc/P7IBYvZxSUYm66 1opTznkHZ69NZs0v4QZdvw+sEQByc4ua/p93OgBJhoSlgen4qRL7qlsXHst/tiN9 P7zXxZZQ99A6BxER -----END CERTIFICATE-----Generated at Sat Aug 23 21:48:33 2025 by rpki-client