$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/705b1897-d907-4dfc-b68b-77f485f58d6c/0/FDEE16BDC5420A60A3D6A8A29BD302650937B88C.mft File: FDEE16BDC5420A60A3D6A8A29BD302650937B88C.mft (raw, json) Hash identifier: ImJpHUvTxEck8bherQOWh5Tpp4grXaqu3SuBEc98APo= Subject key identifier: 85:39:99:F4:5A:EE:15:76:88:51:AB:29:F5:62:10:FE:32:75:17:E9 Authority key identifier: FD:EE:16:BD:C5:42:0A:60:A3:D6:A8:A2:9B:D3:02:65:09:37:B8:8C Certificate issuer: /CN=FDEE16BDC5420A60A3D6A8A29BD302650937B88C Certificate serial: 3DE417FA2F86D0AB585415E090335A1E485D9A69 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/FDEE16BDC5420A60A3D6A8A29BD302650937B88C.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/705b1897-d907-4dfc-b68b-77f485f58d6c/0/FDEE16BDC5420A60A3D6A8A29BD302650937B88C.mft Manifest number: 96 Signing time: Sun 19 Oct 2025 16:48:42 +0000 Manifest this update: Sun 19 Oct 2025 16:43:42 +0000 Manifest next update: Mon 20 Oct 2025 19:38:42 +0000 Files and hashes: 1: 326131343a373538333a313030303a3a2f33362d3336203d3e20323135313038.roa (hash: Uc2wuWBne08reeuhGMV9FbwTFk0eKIo5Ei95b36hJuE=) 2: 326131343a373538303a373030303a3a2f33362d3336203d3e20323135313038.roa (hash: bvyg3HtIyqBCxLiPY89KCRG9IWT8nd/t/MqdudiybDI=) 3: FDEE16BDC5420A60A3D6A8A29BD302650937B88C.crl (hash: wkNteAHFElLwNkyU70ipRnyJ7BXZz7ywzvFsHvAw59M=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/705b1897-d907-4dfc-b68b-77f485f58d6c/0/FDEE16BDC5420A60A3D6A8A29BD302650937B88C.crl rsync://rsync.paas.rpki.ripe.net/repository/705b1897-d907-4dfc-b68b-77f485f58d6c/0/FDEE16BDC5420A60A3D6A8A29BD302650937B88C.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/FDEE16BDC5420A60A3D6A8A29BD302650937B88C.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 20 Oct 2025 19:38:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:e4:17:fa:2f:86:d0:ab:58:54:15:e0:90:33:5a:1e:48:5d:9a:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FDEE16BDC5420A60A3D6A8A29BD302650937B88C Validity Not Before: Oct 19 16:43:42 2025 GMT Not After : Oct 20 19:38:42 2025 GMT Subject: CN=853999F45AEE15768851AB29F56210FE327517E9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:64:73:f0:d6:6d:f8:ca:16:c5:09:0b:cd:a1: 2c:20:b9:1b:08:90:82:b0:c2:5b:51:c7:00:34:06: a2:2e:53:9c:df:63:f1:43:43:04:be:bb:bc:60:fb: b2:d3:96:ff:50:82:39:4b:9f:cb:a4:cb:e0:bf:97: 3c:03:56:a7:b1:8a:32:74:65:f4:ec:1c:c2:29:1f: a3:04:7f:40:ef:58:29:96:bf:22:c0:9b:27:e1:0a: 9b:2b:d5:a3:0e:54:2b:2d:a2:d0:fb:7d:3b:78:e7: 06:bf:cf:d9:07:16:7d:e3:50:9a:36:d0:f3:d2:bc: 9a:ad:c5:fc:ec:70:94:13:a8:c0:02:d0:52:91:e2: 0d:ad:ea:cc:89:05:e2:72:8f:fe:ba:7e:01:74:71: 3a:27:5b:86:64:e3:35:7b:04:35:a6:e6:f1:2f:a4: 2a:dc:49:8b:1d:29:95:fd:4c:ce:1a:cf:eb:9d:bc: f5:2f:dc:61:bf:31:cb:39:0a:b6:1c:a2:1b:ac:c4: ee:0d:79:7b:0e:93:c4:85:00:3a:c2:e0:c0:f6:7d: d7:21:3e:9f:c4:b0:4f:26:af:07:5f:17:b9:14:7b: 97:1c:68:9e:e7:19:d5:c2:73:86:e9:e3:4d:4f:cc: c2:3d:37:a2:db:70:40:82:93:82:51:41:08:05:6c: 84:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:39:99:F4:5A:EE:15:76:88:51:AB:29:F5:62:10:FE:32:75:17:E9 X509v3 Authority Key Identifier: keyid:FD:EE:16:BD:C5:42:0A:60:A3:D6:A8:A2:9B:D3:02:65:09:37:B8:8C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/705b1897-d907-4dfc-b68b-77f485f58d6c/0/FDEE16BDC5420A60A3D6A8A29BD302650937B88C.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/FDEE16BDC5420A60A3D6A8A29BD302650937B88C.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/705b1897-d907-4dfc-b68b-77f485f58d6c/0/FDEE16BDC5420A60A3D6A8A29BD302650937B88C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:71:0e:0e:06:63:82:c8:c4:30:5c:4b:fb:bb:3c:84:93:0c: 78:4e:cf:5e:db:df:e3:ec:7a:07:4a:44:a3:87:7a:8e:f5:b5: c2:cd:4b:4f:f2:c6:34:de:a4:5f:aa:42:80:90:53:67:b8:4e: 1c:d8:a2:0f:3d:c5:64:28:51:d5:82:b3:06:34:b3:59:0b:5a: fe:5d:ff:af:eb:8f:ce:44:7b:d7:e5:64:a0:27:05:23:25:fa: e1:1c:b0:d0:dc:4b:cf:a4:69:3b:4e:59:0a:7c:fe:eb:ed:96: fb:89:71:9e:4f:1f:e3:35:90:19:4a:90:ab:59:34:1d:8b:8e: b4:6d:43:9c:a9:1a:7b:cb:ef:12:0f:84:63:09:ad:2b:17:8e: 9e:96:fa:95:79:5b:f7:5a:6a:36:36:04:aa:66:cb:fc:1f:e1: 43:1a:1b:a2:9c:23:1b:f5:60:35:19:42:10:98:aa:a9:cd:0d: 6a:a9:82:7e:f9:cb:53:5d:b3:18:6a:2b:3a:ae:84:11:5e:e0: fd:38:46:2f:95:70:db:32:31:06:29:21:40:08:1f:f8:0a:7a: 92:77:61:5a:8a:77:1a:07:6e:df:c3:0a:5c:56:4c:33:be:96: 9b:01:bc:87:c8:62:c1:ce:02:aa:48:89:45:65:7f:07:9b:f6: 50:ca:84:c8 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUPeQX+i+G0KtYVBXgkDNaHkhdmmkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkRFRTE2QkRDNTQyMEE2MEEzRDZBOEEyOUJEMzAyNjUw OTM3Qjg4QzAeFw0yNTEwMTkxNjQzNDJaFw0yNTEwMjAxOTM4NDJaMDMxMTAvBgNV BAMTKDg1Mzk5OUY0NUFFRTE1NzY4ODUxQUIyOUY1NjIxMEZFMzI3NTE3RTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDhZHPw1m34yhbFCQvNoSwguRsI kIKwwltRxwA0BqIuU5zfY/FDQwS+u7xg+7LTlv9QgjlLn8uky+C/lzwDVqexijJ0 ZfTsHMIpH6MEf0DvWCmWvyLAmyfhCpsr1aMOVCstotD7fTt45wa/z9kHFn3jUJo2 0PPSvJqtxfzscJQTqMAC0FKR4g2t6syJBeJyj/66fgF0cTonW4Zk4zV7BDWm5vEv pCrcSYsdKZX9TM4az+udvPUv3GG/Mcs5CrYcohusxO4NeXsOk8SFADrC4MD2fdch Pp/EsE8mrwdfF7kUe5ccaJ7nGdXCc4bp401PzMI9N6LbcECCk4JRQQgFbIT/AgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUhTmZ9FruFXaIUasp9WIQ/jJ1F+kwHwYDVR0j BBgwFoAU/e4WvcVCCmCj1qiim9MCZQk3uIwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNzA1YjE4OTctZDkwNy00ZGZjLWI2OGItNzdmNDg1ZjU4 ZDZjLzAvRkRFRTE2QkRDNTQyMEE2MEEzRDZBOEEyOUJEMzAyNjUwOTM3Qjg4Qy5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC9GREVFMTZCREM1NDIwQTYwQTNENkE4QTI5 QkQzMDI2NTA5MzdCODhDLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzcwNWIxODk3LWQ5MDctNGRmYy1iNjhiLTc3ZjQ4NWY1OGQ2Yy8wL0ZERUUxNkJE QzU0MjBBNjBBM0Q2QThBMjlCRDMwMjY1MDkzN0I4OEMubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAlcQ4O BmOCyMQwXEv7uzyEkwx4Ts9e29/j7HoHSkSjh3qO9bXCzUtP8sY03qRfqkKAkFNn uE4c2KIPPcVkKFHVgrMGNLNZC1r+Xf+v64/ORHvX5WSgJwUjJfrhHLDQ3EvPpGk7 TlkKfP7r7Zb7iXGeTx/jNZAZSpCrWTQdi460bUOcqRp7y+8SD4RjCa0rF46elvqV eVv3Wmo2NgSqZsv8H+FDGhuinCMb9WA1GUIQmKqpzQ1qqYJ++ctTXbMYais6roQR XuD9OEYvlXDbMjEGKSFACB/4CnqSd2FaincaB27fwwpcVkwzvpabAbyHyGLBzgKq SIlFZX8Hm/ZQyoTI -----END CERTIFICATE-----Generated at Mon Oct 20 07:22:34 2025 by rpki-client