$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/59c83e5c-4b55-4a1a-8003-1b7ecc51d47a/3/FA710E21BC41E9827D52D66DE98EF8E9ACE9B1E8.mft File: FA710E21BC41E9827D52D66DE98EF8E9ACE9B1E8.mft (raw, json) Hash identifier: 4ATZ+peLemW0jabwiNpgFEN0EA7KZYIewbAGMEjS9KQ= Subject key identifier: 56:EA:BD:40:6A:1C:4D:44:50:F7:CA:99:27:58:1A:E3:75:D3:94:4B Authority key identifier: FA:71:0E:21:BC:41:E9:82:7D:52:D6:6D:E9:8E:F8:E9:AC:E9:B1:E8 Certificate issuer: /CN=FA710E21BC41E9827D52D66DE98EF8E9ACE9B1E8 Certificate serial: 3EB5684117525252ACBFD96ECF6E77D4FA93323F Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/FA710E21BC41E9827D52D66DE98EF8E9ACE9B1E8.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/59c83e5c-4b55-4a1a-8003-1b7ecc51d47a/3/FA710E21BC41E9827D52D66DE98EF8E9ACE9B1E8.mft Manifest number: 7D Signing time: Sun 19 Oct 2025 18:09:52 +0000 Manifest this update: Sun 19 Oct 2025 18:04:52 +0000 Manifest next update: Mon 20 Oct 2025 18:58:52 +0000 Files and hashes: 1: 326131343a373538343a343830303a3a2f34382d3438203d3e20323131333538.roa (hash: dxI70qoTw8AqT4GSbNKeSr6HFS9kuFZrrwUT/py32Kc=) 2: 326131343a373538343a343030303a3a2f33362d3438203d3e2036353137.roa (hash: 9qxxzty+nI98+cY44+m4DwmBg2WIZrsDW0snWoFPb+U=) 3: FA710E21BC41E9827D52D66DE98EF8E9ACE9B1E8.crl (hash: wL/Ckuw2ZSBPCca267/gJOWvdfhd1v4SyA9QCicdwvk=) 4: 326131343a373538343a343130303a3a2f34302d3438203d3e20323136333039.roa (hash: J9Fi36nQGqAgueP6UU6iZv8HlrGSaFogPoGVrEhPYYg=) 5: 326131343a373538343a346630303a3a2f34302d3430203d3e20323132353136.roa (hash: CNfVsinVsceZGjOaXQsHUjsBZSefgQTBz85mK3PRJtU=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/59c83e5c-4b55-4a1a-8003-1b7ecc51d47a/3/FA710E21BC41E9827D52D66DE98EF8E9ACE9B1E8.crl rsync://rsync.paas.rpki.ripe.net/repository/59c83e5c-4b55-4a1a-8003-1b7ecc51d47a/3/FA710E21BC41E9827D52D66DE98EF8E9ACE9B1E8.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/FA710E21BC41E9827D52D66DE98EF8E9ACE9B1E8.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 20 Oct 2025 18:58:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:b5:68:41:17:52:52:52:ac:bf:d9:6e:cf:6e:77:d4:fa:93:32:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FA710E21BC41E9827D52D66DE98EF8E9ACE9B1E8 Validity Not Before: Oct 19 18:04:52 2025 GMT Not After : Oct 20 18:58:52 2025 GMT Subject: CN=56EABD406A1C4D4450F7CA9927581AE375D3944B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:0f:55:7b:fa:33:d1:28:b2:33:19:cd:3e:2d: 93:5c:de:01:b9:b8:aa:57:7b:ef:b0:a8:e9:55:c9: 52:7b:10:35:2e:d8:fc:b5:e5:ed:6e:1d:10:35:9e: ab:20:65:c1:77:84:af:ab:5d:7f:60:a1:93:10:43: 69:33:df:6f:aa:96:e5:3e:e0:4b:4c:01:c7:76:e3: 63:ab:e0:12:14:55:82:de:d0:7b:f0:0a:5f:98:55: 3c:b8:dd:dc:c9:6b:d5:26:a6:0e:dd:b9:64:ca:41: b8:98:d3:dd:56:01:52:99:d2:f6:4d:b0:40:92:5a: d3:e8:f1:e8:61:b4:03:7a:32:2d:a2:5f:03:d7:da: f6:f4:f6:57:12:05:31:35:cd:90:4b:7f:42:73:17: 56:ff:4e:01:cc:5c:84:55:ce:71:7c:46:23:94:4f: 9a:03:25:8a:8d:15:58:f1:ad:3e:60:c4:68:db:69: 92:1a:fa:45:64:8a:9b:e6:a4:3a:19:14:e3:7b:21: 0c:84:e2:4c:40:2c:7b:c3:47:5e:7d:06:83:ac:3a: 9c:31:4b:17:94:d2:ed:17:9b:18:88:0a:6b:8f:fd: 2e:cf:59:66:17:ee:2e:5e:b4:1e:2e:da:ca:3f:6d: 45:46:8b:4f:b8:33:b3:ca:95:9e:e0:31:31:73:4f: ad:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:EA:BD:40:6A:1C:4D:44:50:F7:CA:99:27:58:1A:E3:75:D3:94:4B X509v3 Authority Key Identifier: keyid:FA:71:0E:21:BC:41:E9:82:7D:52:D6:6D:E9:8E:F8:E9:AC:E9:B1:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/59c83e5c-4b55-4a1a-8003-1b7ecc51d47a/3/FA710E21BC41E9827D52D66DE98EF8E9ACE9B1E8.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/FA710E21BC41E9827D52D66DE98EF8E9ACE9B1E8.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/59c83e5c-4b55-4a1a-8003-1b7ecc51d47a/3/FA710E21BC41E9827D52D66DE98EF8E9ACE9B1E8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c6:2a:e3:6f:78:c1:6c:0a:e4:ae:01:42:dd:b5:86:88:ce:3c: c5:e9:84:24:28:69:d8:62:e4:72:a9:59:6b:fb:11:82:7e:ae: 18:69:3b:18:ad:22:68:60:4b:e5:ce:e6:17:28:b8:16:f2:33: 5f:d3:95:35:59:14:8c:39:a3:6a:40:b2:87:e9:52:44:84:63: b7:4c:13:df:f9:d7:dd:b6:b9:d6:8a:e9:28:6d:10:d0:1c:48: 9e:8d:dc:23:b1:1f:af:d7:9b:f2:2c:5f:4a:d0:be:7e:19:40: 8e:34:fc:a5:19:96:64:7e:6b:a7:b7:ed:16:a0:09:f4:7c:f9: 5e:3f:ab:87:fd:3f:b1:4a:d1:e3:69:37:31:2d:4a:e2:d8:b5: ce:3f:94:bc:d9:18:07:01:d2:e7:3e:80:09:7e:72:fe:e9:6f: 24:ce:95:8d:1b:40:b0:61:76:70:f1:f9:e6:c2:b0:b9:1b:cc: cf:2c:e1:53:af:1e:ad:ed:75:97:b4:95:54:ef:b4:df:c5:d3: 89:3b:bb:ce:f0:e8:f4:d5:5a:2a:1c:01:62:4e:04:83:88:38: c3:2f:4c:49:78:de:2e:56:3a:ee:3e:81:a5:52:6e:70:bb:67: 15:67:82:49:34:50:55:55:d5:80:71:03:65:83:90:12:d7:04: e0:de:9c:23 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUPrVoQRdSUlKsv9luz2531PqTMj8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkE3MTBFMjFCQzQxRTk4MjdENTJENjZERTk4RUY4RTlB Q0U5QjFFODAeFw0yNTEwMTkxODA0NTJaFw0yNTEwMjAxODU4NTJaMDMxMTAvBgNV BAMTKDU2RUFCRDQwNkExQzRENDQ1MEY3Q0E5OTI3NTgxQUUzNzVEMzk0NEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5D1V7+jPRKLIzGc0+LZNc3gG5 uKpXe++wqOlVyVJ7EDUu2Py15e1uHRA1nqsgZcF3hK+rXX9goZMQQ2kz32+qluU+ 4EtMAcd242Or4BIUVYLe0HvwCl+YVTy43dzJa9Umpg7duWTKQbiY091WAVKZ0vZN sECSWtPo8ehhtAN6Mi2iXwPX2vb09lcSBTE1zZBLf0JzF1b/TgHMXIRVznF8RiOU T5oDJYqNFVjxrT5gxGjbaZIa+kVkipvmpDoZFON7IQyE4kxALHvDR159BoOsOpwx SxeU0u0XmxiICmuP/S7PWWYX7i5etB4u2so/bUVGi0+4M7PKlZ7gMTFzT62xAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUVuq9QGocTURQ98qZJ1ga43XTlEswHwYDVR0j BBgwFoAU+nEOIbxB6YJ9UtZt6Y746azpsegwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNTljODNlNWMtNGI1NS00YTFhLTgwMDMtMWI3ZWNjNTFk NDdhLzMvRkE3MTBFMjFCQzQxRTk4MjdENTJENjZERTk4RUY4RTlBQ0U5QjFFOC5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC9GQTcxMEUyMUJDNDFFOTgyN0Q1MkQ2NkRF OThFRjhFOUFDRTlCMUU4LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzU5YzgzZTVjLTRiNTUtNGExYS04MDAzLTFiN2VjYzUxZDQ3YS8zL0ZBNzEwRTIx QkM0MUU5ODI3RDUyRDY2REU5OEVGOEU5QUNFOUIxRTgubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQDGKuNv eMFsCuSuAULdtYaIzjzF6YQkKGnYYuRyqVlr+xGCfq4YaTsYrSJoYEvlzuYXKLgW 8jNf05U1WRSMOaNqQLKH6VJEhGO3TBPf+dfdtrnWiukobRDQHEiejdwjsR+v15vy LF9K0L5+GUCONPylGZZkfmunt+0WoAn0fPleP6uH/T+xStHjaTcxLUri2LXOP5S8 2RgHAdLnPoAJfnL+6W8kzpWNG0CwYXZw8fnmwrC5G8zPLOFTrx6t7XWXtJVU77Tf xdOJO7vO8Oj01VoqHAFiTgSDiDjDL0xJeN4uVjruPoGlUm5wu2cVZ4JJNFBVVdWA cQNlg5AS1wTg3pwj -----END CERTIFICATE-----Generated at Mon Oct 20 10:45:52 2025 by rpki-client