$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.mft File: FAC4708D7E265DB1044F9BB0EE8728587F48B484.mft (raw, json) Hash identifier: aly97bVP/FbPa6uWR2qJKOfFNysw1KwTixvd7r92oYs= Subject key identifier: 4B:E7:A1:99:95:C6:B2:AD:B8:A7:70:B4:9E:FC:3C:DE:48:5C:4E:18 Authority key identifier: FA:C4:70:8D:7E:26:5D:B1:04:4F:9B:B0:EE:87:28:58:7F:48:B4:84 Certificate issuer: /CN=fac4708d7e265db1044f9bb0ee8728587f48b484 Certificate serial: 3272FF1DE514669DD43DF751BE9FC1BF6D604D2A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.mft Manifest number: 6B Signing time: Sat 23 Aug 2025 00:18:38 +0000 Manifest this update: Sat 23 Aug 2025 00:13:38 +0000 Manifest next update: Sun 24 Aug 2025 02:37:38 +0000 Files and hashes: 1: 352e3232362e3134362e302f32342d3234203d3e203538323939.roa (hash: qNr0TnWXn91io5Kf4S/eUzwAUX/WkTOzXp+VxijVCjY=) 2: 326130313a3230653a3a2f33322d3332203d3e203431303531.roa (hash: dHo42eRURsQRPaktXGGvl5v6FK2mmQ17gzUqGLoOaR0=) 3: 352e3232362e3134342e302f32312d3231203d3e203538323939.roa (hash: fo9Lh+tNo20hmXbMUCX4eNXLCfhJfwiBBGLGaQ6kzuA=) 4: 3138352e3231312e34332e302f32342d3234203d3e203536383833.roa (hash: 0GGtulQgh58mdaZy9i43/jGy8cDbbjgf1fqq974LzcM=) 5: 3138352e38362e3232342e302f32342d3234203d3e203439313932.roa (hash: R1iDu9WCL0q2IrJGzq/wt63LOyBWhh9M6puThqaZhTQ=) 6: 3138352e34342e38302e302f32342d3234203d3e203339343231.roa (hash: UQetgJ8gkrizZ8Ee9Cz8vW5vh9g+HY6FYRsN52DUj8Y=) 7: FAC4708D7E265DB1044F9BB0EE8728587F48B484.crl (hash: BPUnTXeYtITKUZzL+U7pqO7qzq7VvCPONJ+7vXLlcO4=) 8: 323030313a3637633a323634383a3a2f34382d3438203d3e203133303330.roa (hash: gJcgXZCcNvkeeSlp/fGn07D0YciYEry1v6B6cF0VIYA=) 9: 3138352e34342e38312e302f32342d3234203d3e203339343231.roa (hash: BF6S2GfzcRLVtvnyZ19+5dCLfsNDbMuOlEIUiJ5+jzQ=) 10: 326130303a363334303a343030303a3a2f34382d3438203d3e203538323939.roa (hash: 2cIUBbXFtw6TIW3gtkGzSlPyISGn3/RYjHd6OQ6VrYU=) 11: 326131323a616638303a3a2f33322d3332203d3e203536383833.roa (hash: SqpLdUzG49Jud64fYEC0hiT3rT/sz4nQsAd6iQkoKk8=) 12: 326130303a363334303a3a2f33322d3332203d3e203538323939.roa (hash: r7Nz5sTQ0srB/YDhKbCNr13tvMGVCwAnxfmWfTPFEmA=) 13: 3138352e38362e3232382e302f32332d3234203d3e203538323939.roa (hash: 890AdEnFU4YBNlCNp/5Ad5R0sKIy6AzHzJmChUqZzls=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.crl rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.mft rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 24 Aug 2025 02:37:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:72:ff:1d:e5:14:66:9d:d4:3d:f7:51:be:9f:c1:bf:6d:60:4d:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fac4708d7e265db1044f9bb0ee8728587f48b484 Validity Not Before: Aug 23 00:13:38 2025 GMT Not After : Aug 24 02:37:38 2025 GMT Subject: CN=4BE7A19995C6B2ADB8A770B49EFC3CDE485C4E18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:a3:a0:f1:70:03:4a:6f:c7:e1:60:33:e3:13: 14:1d:35:ce:b7:0e:3b:4f:1d:60:41:5e:e8:89:b6: 46:ba:44:49:59:ca:b1:17:0c:74:5e:21:29:f3:9c: 85:20:bd:2d:ad:17:4b:a1:b0:7d:d4:ec:8b:67:29: f2:cd:f1:ee:03:88:bd:80:fa:46:2a:48:11:f2:f8: 40:21:2d:ed:b5:65:ca:81:c9:a7:47:fd:e9:b8:e1: ea:f9:1b:77:d5:1b:e0:4d:4e:9d:ca:40:69:01:2d: af:f7:57:7e:37:cc:42:a7:1a:b7:b7:02:9d:51:91: 67:d7:4a:08:f5:f2:38:4f:52:07:c0:89:fe:e8:20: 36:04:23:d3:5c:8a:51:4d:85:c3:f4:97:b8:40:16: 04:b5:59:a2:bd:57:e0:58:e2:7d:d4:59:07:f0:3c: f1:8e:8a:42:9c:b1:42:94:4d:81:46:b4:af:5a:28: 46:c9:a7:8a:04:a6:02:2e:3c:0f:e4:7f:9a:52:61: 26:2f:98:68:a3:b6:d5:32:18:fc:f8:12:16:c3:de: 95:ea:5e:88:03:73:32:88:d7:7c:9e:4b:0b:c6:e4: 3d:74:7f:f8:9d:aa:a6:33:e4:05:82:0b:d4:50:36: 6b:97:95:9a:d9:53:04:54:3c:a3:73:aa:34:0c:56: 33:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:E7:A1:99:95:C6:B2:AD:B8:A7:70:B4:9E:FC:3C:DE:48:5C:4E:18 X509v3 Authority Key Identifier: keyid:FA:C4:70:8D:7E:26:5D:B1:04:4F:9B:B0:EE:87:28:58:7F:48:B4:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:c5:b5:05:f2:9b:64:f5:b3:8f:75:e1:42:b9:2b:c3:6b:cd: ed:1b:6d:d1:47:27:2e:20:8c:91:3c:88:d9:97:af:27:8a:a9: 09:50:b9:2d:9d:cb:96:4a:60:4c:6c:d5:1d:90:b4:48:b1:fd: 4b:6e:eb:f4:76:85:b0:f0:3c:84:b0:e8:0a:bc:c5:00:38:6d: 9c:98:d4:05:de:a3:a4:e8:25:7c:b4:f7:cc:a7:f6:76:93:97: 44:e2:13:90:b9:8f:ff:92:5f:5b:ce:60:99:a7:e0:49:13:da: d3:3b:43:04:fd:33:2f:4a:e3:a9:6a:a1:51:73:df:a5:d2:b8: 63:5e:19:43:9b:46:47:08:1d:07:1e:ef:9b:ba:d6:36:69:e9: 7f:a6:af:95:4a:6b:6e:fb:8e:e7:b5:0d:11:2d:65:6c:fc:dd: 75:05:a9:9f:4d:08:32:8a:0a:bb:e1:df:4d:f8:18:d4:32:d8: db:e5:b6:be:ac:e9:9c:85:cc:d5:81:4f:09:0d:c0:13:5c:82: b6:13:49:02:f5:aa:ba:d1:55:28:ea:60:0b:85:77:db:25:d6: 09:f6:aa:62:a4:ad:14:13:fe:86:68:b8:ef:12:93:78:e3:00: bb:b7:86:15:67:64:b2:49:38:65:cb:aa:e6:f7:89:2d:ee:c7: 45:84:06:f8 -----BEGIN CERTIFICATE----- MIIFPjCCBCagAwIBAgIUMnL/HeUUZp3UPfdRvp/Bv21gTSowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoZmFjNDcwOGQ3ZTI2NWRiMTA0NGY5YmIwZWU4NzI4NTg3 ZjQ4YjQ4NDAeFw0yNTA4MjMwMDEzMzhaFw0yNTA4MjQwMjM3MzhaMDMxMTAvBgNV BAMTKDRCRTdBMTk5OTVDNkIyQURCOEE3NzBCNDlFRkMzQ0RFNDg1QzRFMTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFo6DxcANKb8fhYDPjExQdNc63 DjtPHWBBXuiJtka6RElZyrEXDHReISnznIUgvS2tF0uhsH3U7ItnKfLN8e4DiL2A +kYqSBHy+EAhLe21ZcqByadH/em44er5G3fVG+BNTp3KQGkBLa/3V343zEKnGre3 Ap1RkWfXSgj18jhPUgfAif7oIDYEI9NcilFNhcP0l7hAFgS1WaK9V+BY4n3UWQfw PPGOikKcsUKUTYFGtK9aKEbJp4oEpgIuPA/kf5pSYSYvmGijttUyGPz4EhbD3pXq XogDczKI13yeSwvG5D10f/idqqYz5AWCC9RQNmuXlZrZUwRUPKNzqjQMVjN1AgMB AAGjggJIMIICRDAdBgNVHQ4EFgQUS+ehmZXGsq24p3C0nvw83khcThgwHwYDVR0j BBgwFoAU+sRwjX4mXbEET5uw7ocoWH9ItIQwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNWI1OGU2NDYtZTdhMi00NjVjLTg3YzUtNDNjMzU5YWQ5 MzY5LzAvRkFDNDcwOEQ3RTI2NURCMTA0NEY5QkIwRUU4NzI4NTg3RjQ4QjQ4NC5j cmwwZQYIKwYBBQUHAQEEWTBXMFUGCCsGAQUFBzAChklyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzEtc1J3alg0bVhiRUVUNXV3N29jb1dI OUl0SVEuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNWI1OGU2NDYt ZTdhMi00NjVjLTg3YzUtNDNjMzU5YWQ5MzY5LzAvRkFDNDcwOEQ3RTI2NURCMTA0 NEY5QkIwRUU4NzI4NTg3RjQ4QjQ4NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAHHFtQXym2T1s4914UK5 K8Nrze0bbdFHJy4gjJE8iNmXryeKqQlQuS2dy5ZKYExs1R2QtEix/Utu6/R2hbDw PISw6Aq8xQA4bZyY1AXeo6ToJXy098yn9naTl0TiE5C5j/+SX1vOYJmn4EkT2tM7 QwT9My9K46lqoVFz36XSuGNeGUObRkcIHQce75u61jZp6X+mr5VKa277jue1DREt ZWz83XUFqZ9NCDKKCrvh3034GNQy2Nvltr6s6ZyFzNWBTwkNwBNcgrYTSQL1qrrR VSjqYAuFd9sl1gn2qmKkrRQT/oZouO8Sk3jjALu3hhVnZLJJOGXLqub3iS3ux0WE Bvg= -----END CERTIFICATE-----Generated at Sat Aug 23 13:33:10 2025 by rpki-client