$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/59c83e5c-4b55-4a1a-8003-1b7ecc51d47a/3/FA710E21BC41E9827D52D66DE98EF8E9ACE9B1E8.mft File: FA710E21BC41E9827D52D66DE98EF8E9ACE9B1E8.mft (raw, json) Hash identifier: zPo9bLrjzC9szb+7nTfzy8qL3Y1uCq3ar90qFe7iEIs= Subject key identifier: AE:B8:CB:04:A0:BF:30:6F:03:B0:E5:0C:48:68:1C:56:5D:3B:EE:7A Authority key identifier: FA:71:0E:21:BC:41:E9:82:7D:52:D6:6D:E9:8E:F8:E9:AC:E9:B1:E8 Certificate issuer: /CN=FA710E21BC41E9827D52D66DE98EF8E9ACE9B1E8 Certificate serial: 7693293ED67E6D6E4554CACEFBF0718CA88D93C3 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/FA710E21BC41E9827D52D66DE98EF8E9ACE9B1E8.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/59c83e5c-4b55-4a1a-8003-1b7ecc51d47a/3/FA710E21BC41E9827D52D66DE98EF8E9ACE9B1E8.mft Manifest number: 30 Signing time: Sat 23 Aug 2025 05:18:18 +0000 Manifest this update: Sat 23 Aug 2025 05:13:18 +0000 Manifest next update: Sun 24 Aug 2025 06:56:18 +0000 Files and hashes: 1: 326131343a373538343a343830303a3a2f34382d3438203d3e20323131333538.roa (hash: dxI70qoTw8AqT4GSbNKeSr6HFS9kuFZrrwUT/py32Kc=) 2: 326131343a373538343a343130303a3a2f34302d3438203d3e20323136333039.roa (hash: J9Fi36nQGqAgueP6UU6iZv8HlrGSaFogPoGVrEhPYYg=) 3: 326131343a373538343a343030303a3a2f33362d3438203d3e2036353137.roa (hash: 9qxxzty+nI98+cY44+m4DwmBg2WIZrsDW0snWoFPb+U=) 4: 326131343a373538343a346630303a3a2f34302d3430203d3e20323132353136.roa (hash: CNfVsinVsceZGjOaXQsHUjsBZSefgQTBz85mK3PRJtU=) 5: FA710E21BC41E9827D52D66DE98EF8E9ACE9B1E8.crl (hash: 8EoTSaOpL1hY3wEY1XZ0XShugmI6l/U97fHiC1tENNE=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/59c83e5c-4b55-4a1a-8003-1b7ecc51d47a/3/FA710E21BC41E9827D52D66DE98EF8E9ACE9B1E8.crl rsync://rsync.paas.rpki.ripe.net/repository/59c83e5c-4b55-4a1a-8003-1b7ecc51d47a/3/FA710E21BC41E9827D52D66DE98EF8E9ACE9B1E8.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/FA710E21BC41E9827D52D66DE98EF8E9ACE9B1E8.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 24 Aug 2025 06:56:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:93:29:3e:d6:7e:6d:6e:45:54:ca:ce:fb:f0:71:8c:a8:8d:93:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FA710E21BC41E9827D52D66DE98EF8E9ACE9B1E8 Validity Not Before: Aug 23 05:13:18 2025 GMT Not After : Aug 24 06:56:18 2025 GMT Subject: CN=AEB8CB04A0BF306F03B0E50C48681C565D3BEE7A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:b9:95:ed:77:be:05:79:ab:eb:59:de:0a:6a: cc:b8:51:b6:c6:e8:20:00:3b:4a:5c:8f:a5:e6:d2: 02:1f:b8:da:8b:df:be:72:a9:8b:7a:ed:b9:2c:0d: 17:0e:9a:41:76:e2:c9:7b:17:e4:ee:6f:ec:6c:0a: 58:f9:a4:ea:31:51:9e:95:7f:16:b5:79:08:c4:c3: a5:07:82:2f:02:28:24:1d:71:7a:84:67:bd:08:2e: d3:56:4d:58:5f:e0:b4:e4:21:3d:9c:b0:9b:8e:ec: 63:f6:53:d1:17:24:42:9c:40:98:5a:09:d4:4e:f4: 9f:0d:78:15:29:aa:50:74:73:c5:22:7e:44:ad:4d: c6:a7:21:68:00:72:fb:f9:45:58:0c:d3:15:4a:d6: e4:45:50:13:50:03:a6:50:18:00:06:8d:92:8f:c0: 8d:9c:9e:d6:9e:0e:bf:72:ed:19:27:c1:6a:3f:2a: 7f:10:4b:81:35:66:26:3a:43:b1:b3:16:02:4b:60: 9c:28:2c:da:37:3d:44:7c:22:82:14:ac:e8:93:68: 95:67:9f:d0:5f:b4:19:9c:1b:98:a3:15:52:10:54: 72:8c:e7:23:47:6a:18:78:0b:c8:5e:20:4c:2e:94: e4:2c:8b:73:7a:84:dd:30:39:31:2f:5e:4f:19:53: 21:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:B8:CB:04:A0:BF:30:6F:03:B0:E5:0C:48:68:1C:56:5D:3B:EE:7A X509v3 Authority Key Identifier: keyid:FA:71:0E:21:BC:41:E9:82:7D:52:D6:6D:E9:8E:F8:E9:AC:E9:B1:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/59c83e5c-4b55-4a1a-8003-1b7ecc51d47a/3/FA710E21BC41E9827D52D66DE98EF8E9ACE9B1E8.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/FA710E21BC41E9827D52D66DE98EF8E9ACE9B1E8.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/59c83e5c-4b55-4a1a-8003-1b7ecc51d47a/3/FA710E21BC41E9827D52D66DE98EF8E9ACE9B1E8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:db:7e:fe:ab:d2:54:d2:a8:0b:a1:5c:27:b5:a4:b8:fc:c1: 7c:e6:f7:fa:89:a7:e6:ee:24:8f:7e:75:dc:20:2a:1e:5d:91: 9e:83:7a:be:3d:ea:dc:f1:ca:e6:b5:a9:90:14:da:40:0d:76: c6:4b:d6:9f:20:af:bd:69:8b:5c:57:b6:46:ac:93:df:95:f6: 60:e3:54:9a:f5:ca:34:dd:ef:b2:dd:a3:03:bf:6b:ff:52:26: 95:1d:0d:2e:2c:48:b3:cc:14:52:9b:b5:8e:3c:15:8b:73:2a: 3c:d5:8b:d6:0f:70:5b:e5:6f:b2:6b:71:55:b6:3a:8a:f2:c5: 7d:e8:82:8c:08:74:d1:b3:54:28:09:4e:b4:7b:5e:70:8a:46: c3:98:b2:4d:6c:1a:4b:56:91:ee:4e:df:de:96:b5:73:21:23: 49:df:f3:03:bf:c5:ea:3e:33:bb:a0:66:bf:fa:f9:db:99:e9: 3a:ff:7c:f3:4b:10:75:07:f7:60:c1:6e:f8:ed:1d:6d:b8:b4: a6:ea:cd:a3:2d:d1:ee:8d:0b:ca:e5:5e:30:e9:31:b9:28:da: 69:4b:8c:b2:2f:a6:60:c8:6c:ad:36:02:2e:66:05:d7:2d:25: 59:df:12:e0:9c:db:00:ca:ea:b6:6e:e5:74:e9:f6:f0:b2:00: a4:af:35:5f -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUdpMpPtZ+bW5FVMrO+/BxjKiNk8MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkE3MTBFMjFCQzQxRTk4MjdENTJENjZERTk4RUY4RTlB Q0U5QjFFODAeFw0yNTA4MjMwNTEzMThaFw0yNTA4MjQwNjU2MThaMDMxMTAvBgNV BAMTKEFFQjhDQjA0QTBCRjMwNkYwM0IwRTUwQzQ4NjgxQzU2NUQzQkVFN0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuuZXtd74FeavrWd4Kasy4UbbG 6CAAO0pcj6Xm0gIfuNqL375yqYt67bksDRcOmkF24sl7F+Tub+xsClj5pOoxUZ6V fxa1eQjEw6UHgi8CKCQdcXqEZ70ILtNWTVhf4LTkIT2csJuO7GP2U9EXJEKcQJha CdRO9J8NeBUpqlB0c8UifkStTcanIWgAcvv5RVgM0xVK1uRFUBNQA6ZQGAAGjZKP wI2cntaeDr9y7RknwWo/Kn8QS4E1ZiY6Q7GzFgJLYJwoLNo3PUR8IoIUrOiTaJVn n9BftBmcG5ijFVIQVHKM5yNHahh4C8heIEwulOQsi3N6hN0wOTEvXk8ZUyHhAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUrrjLBKC/MG8DsOUMSGgcVl077nowHwYDVR0j BBgwFoAU+nEOIbxB6YJ9UtZt6Y746azpsegwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNTljODNlNWMtNGI1NS00YTFhLTgwMDMtMWI3ZWNjNTFk NDdhLzMvRkE3MTBFMjFCQzQxRTk4MjdENTJENjZERTk4RUY4RTlBQ0U5QjFFOC5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC9GQTcxMEUyMUJDNDFFOTgyN0Q1MkQ2NkRF OThFRjhFOUFDRTlCMUU4LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzU5YzgzZTVjLTRiNTUtNGExYS04MDAzLTFiN2VjYzUxZDQ3YS8zL0ZBNzEwRTIx QkM0MUU5ODI3RDUyRDY2REU5OEVGOEU5QUNFOUIxRTgubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAN237+ q9JU0qgLoVwntaS4/MF85vf6iafm7iSPfnXcICoeXZGeg3q+Perc8crmtamQFNpA DXbGS9afIK+9aYtcV7ZGrJPflfZg41Sa9co03e+y3aMDv2v/UiaVHQ0uLEizzBRS m7WOPBWLcyo81YvWD3Bb5W+ya3FVtjqK8sV96IKMCHTRs1QoCU60e15wikbDmLJN bBpLVpHuTt/elrVzISNJ3/MDv8XqPjO7oGa/+vnbmek6/3zzSxB1B/dgwW747R1t uLSm6s2jLdHujQvK5V4w6TG5KNppS4yyL6ZgyGytNgIuZgXXLSVZ3xLgnNsAyuq2 buV06fbwsgCkrzVf -----END CERTIFICATE-----Generated at Sat Aug 23 23:56:08 2025 by rpki-client