$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09456214-8d25-4b5e-9e04-35c0a7a26470/0/FB2E043F755DA1329FB66347D17DC2B79A73C3FA.mft File: FB2E043F755DA1329FB66347D17DC2B79A73C3FA.mft (raw, json) Hash identifier: 1BBNr6wj8qr8N2FR+G6e9qFXccvb5WTCDCRIiSKhiRY= Subject key identifier: 8B:2B:D1:B8:BC:A5:1C:6B:F7:ED:C0:E2:EE:A9:06:A9:B0:A6:23:5E Authority key identifier: FB:2E:04:3F:75:5D:A1:32:9F:B6:63:47:D1:7D:C2:B7:9A:73:C3:FA Certificate issuer: /CN=FB2E043F755DA1329FB66347D17DC2B79A73C3FA Certificate serial: 62240809C7C3A1235DD966F5BA08D76E7F71EFC0 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/FB2E043F755DA1329FB66347D17DC2B79A73C3FA.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09456214-8d25-4b5e-9e04-35c0a7a26470/0/FB2E043F755DA1329FB66347D17DC2B79A73C3FA.mft Manifest number: 5A Signing time: Sun 19 Oct 2025 22:49:22 +0000 Manifest this update: Sun 19 Oct 2025 22:44:22 +0000 Manifest next update: Tue 21 Oct 2025 01:24:22 +0000 Files and hashes: 1: FB2E043F755DA1329FB66347D17DC2B79A73C3FA.crl (hash: rRi2J0qcTm55Bd9667Nu4b4h7+wwApyYkpXq7cYLdPw=) 2: 326131343a373538343a653339303a3a2f34342d3434203d3e20333937303332.roa (hash: lLg4au3IVvnSiHqBxXRTNckohkijbwJ1gyWVOIjX72Q=) 3: 326131343a373538343a653361303a3a2f34342d3434203d3e20333937303332.roa (hash: JCyGJNLuGhm2G7yv8F0G1yT21Qa/DAGdxn1vxIgtXH8=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09456214-8d25-4b5e-9e04-35c0a7a26470/0/FB2E043F755DA1329FB66347D17DC2B79A73C3FA.crl rsync://rsync.paas.rpki.ripe.net/repository/09456214-8d25-4b5e-9e04-35c0a7a26470/0/FB2E043F755DA1329FB66347D17DC2B79A73C3FA.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/FB2E043F755DA1329FB66347D17DC2B79A73C3FA.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 20 Oct 2025 21:16:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:24:08:09:c7:c3:a1:23:5d:d9:66:f5:ba:08:d7:6e:7f:71:ef:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FB2E043F755DA1329FB66347D17DC2B79A73C3FA Validity Not Before: Oct 19 22:44:22 2025 GMT Not After : Oct 21 01:24:22 2025 GMT Subject: CN=8B2BD1B8BCA51C6BF7EDC0E2EEA906A9B0A6235E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:77:d9:3a:68:ce:0f:7c:ff:06:88:7b:17:24: c0:76:12:ed:37:55:5f:8b:0f:4b:d9:fb:ed:22:91: f5:eb:03:b0:c6:83:43:8b:ab:02:e4:6f:5d:48:5c: a2:5f:f5:ef:5c:fb:e9:58:57:aa:46:da:41:32:c1: 44:c9:1a:66:ba:06:78:78:1b:cb:71:cd:c0:e8:bc: dd:e2:0b:86:d8:3c:69:df:85:70:a8:12:9e:2b:8e: 04:4a:b9:85:7e:8c:13:2b:a5:b0:d3:57:8c:1d:49: 70:c8:39:6f:72:3c:14:0d:5a:10:37:83:fa:0b:21: 52:ae:8d:56:90:0b:27:04:eb:0b:09:e2:3f:8f:5c: ee:c7:71:9b:5e:4e:db:f8:1f:0d:43:41:d3:42:23: 6e:d9:f6:03:52:37:06:db:10:1f:a0:0a:f9:de:4e: f5:c3:f0:9f:cf:8a:ee:44:c1:79:42:08:d4:d4:53: b0:f3:76:0f:82:49:60:2c:40:77:38:ac:89:d5:2d: e2:bb:61:a0:3d:7c:04:ff:ae:8b:bb:0e:0b:51:82: e2:1e:80:26:ec:ef:b8:4e:c3:72:80:18:24:16:11: 58:73:93:a5:4f:68:1f:c1:6a:2b:44:be:6d:d6:f5: 6a:df:af:17:f8:f2:6b:fb:04:41:63:d7:57:42:ec: 46:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:2B:D1:B8:BC:A5:1C:6B:F7:ED:C0:E2:EE:A9:06:A9:B0:A6:23:5E X509v3 Authority Key Identifier: keyid:FB:2E:04:3F:75:5D:A1:32:9F:B6:63:47:D1:7D:C2:B7:9A:73:C3:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/09456214-8d25-4b5e-9e04-35c0a7a26470/0/FB2E043F755DA1329FB66347D17DC2B79A73C3FA.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/FB2E043F755DA1329FB66347D17DC2B79A73C3FA.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09456214-8d25-4b5e-9e04-35c0a7a26470/0/FB2E043F755DA1329FB66347D17DC2B79A73C3FA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:51:5b:5f:1f:33:86:fb:00:70:06:28:0f:26:27:1d:ee:29: af:52:e2:20:b8:79:57:39:66:d0:48:ea:26:a3:8f:68:4e:7b: 9e:46:9d:7a:ce:7e:f5:9c:d6:b2:2f:50:38:0a:63:89:2b:57: 6c:6d:63:59:18:95:ff:07:ef:c0:cd:a1:e0:f6:62:ee:4f:a2: 20:4c:97:d7:41:63:17:c8:dd:13:0a:f9:e3:15:66:04:76:bf: db:9a:72:00:c1:57:e4:33:31:11:2f:e6:b6:ee:6e:fc:03:38: 3b:17:4a:c2:6e:25:c3:95:ac:9d:5a:30:2e:16:5a:09:eb:f6: 9a:2b:06:9a:0b:fb:a1:c0:81:60:4a:5a:74:5a:40:01:22:2a: f6:ab:56:95:76:84:a0:20:5a:07:37:c9:b9:08:9c:48:a9:4b: 50:63:57:60:0e:a2:aa:87:d5:a8:00:71:0f:53:32:4e:92:96: 70:82:55:7f:e1:4d:fc:56:e6:7f:8d:d9:0f:76:6e:ad:d4:57: 88:2f:92:ea:f4:d4:af:63:83:a4:52:9c:aa:fc:34:e0:02:93: 93:44:16:c7:78:38:cd:79:3a:d0:e4:b4:40:d9:05:dd:7d:28: de:78:5f:76:fe:1c:4a:6a:6b:71:f7:43:1d:1d:03:14:1b:4c: 60:15:7c:69 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUYiQICcfDoSNd2Wb1ugjXbn9x78AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkIyRTA0M0Y3NTVEQTEzMjlGQjY2MzQ3RDE3REMyQjc5 QTczQzNGQTAeFw0yNTEwMTkyMjQ0MjJaFw0yNTEwMjEwMTI0MjJaMDMxMTAvBgNV BAMTKDhCMkJEMUI4QkNBNTFDNkJGN0VEQzBFMkVFQTkwNkE5QjBBNjIzNUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQd9k6aM4PfP8GiHsXJMB2Eu03 VV+LD0vZ++0ikfXrA7DGg0OLqwLkb11IXKJf9e9c++lYV6pG2kEywUTJGma6Bnh4 G8txzcDovN3iC4bYPGnfhXCoEp4rjgRKuYV+jBMrpbDTV4wdSXDIOW9yPBQNWhA3 g/oLIVKujVaQCycE6wsJ4j+PXO7HcZteTtv4Hw1DQdNCI27Z9gNSNwbbEB+gCvne TvXD8J/Piu5EwXlCCNTUU7Dzdg+CSWAsQHc4rInVLeK7YaA9fAT/rou7DgtRguIe gCbs77hOw3KAGCQWEVhzk6VPaB/BaitEvm3W9Wrfrxf48mv7BEFj11dC7EbDAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUiyvRuLylHGv37cDi7qkGqbCmI14wHwYDVR0j BBgwFoAU+y4EP3VdoTKftmNH0X3Ct5pzw/owDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMDk0NTYyMTQtOGQyNS00YjVlLTllMDQtMzVjMGE3YTI2 NDcwLzAvRkIyRTA0M0Y3NTVEQTEzMjlGQjY2MzQ3RDE3REMyQjc5QTczQzNGQS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC9GQjJFMDQzRjc1NURBMTMyOUZCNjYzNDdE MTdEQzJCNzlBNzNDM0ZBLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzA5NDU2MjE0LThkMjUtNGI1ZS05ZTA0LTM1YzBhN2EyNjQ3MC8wL0ZCMkUwNDNG NzU1REExMzI5RkI2NjM0N0QxN0RDMkI3OUE3M0MzRkEubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAYUVtf HzOG+wBwBigPJicd7imvUuIguHlXOWbQSOomo49oTnueRp16zn71nNayL1A4CmOJ K1dsbWNZGJX/B+/AzaHg9mLuT6IgTJfXQWMXyN0TCvnjFWYEdr/bmnIAwVfkMzER L+a27m78Azg7F0rCbiXDlaydWjAuFloJ6/aaKwaaC/uhwIFgSlp0WkABIir2q1aV doSgIFoHN8m5CJxIqUtQY1dgDqKqh9WoAHEPUzJOkpZwglV/4U38VuZ/jdkPdm6t 1FeIL5Lq9NSvY4OkUpyq/DTgApOTRBbHeDjNeTrQ5LRA2QXdfSjeeF92/hxKamtx 90MdHQMUG0xgFXxp -----END CERTIFICATE-----Generated at Mon Oct 20 09:56:09 2025 by rpki-client