$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/705b1897-d907-4dfc-b68b-77f485f58d6c/0/FDEE16BDC5420A60A3D6A8A29BD302650937B88C.mft File: FDEE16BDC5420A60A3D6A8A29BD302650937B88C.mft (raw, json) Hash identifier: 2XIJgR+yYtLtzoL7IZMKPTvTXEC0aDwf87js/yU5D58= Subject key identifier: 8B:EB:41:F9:02:F6:0D:8C:BA:F5:5D:FF:26:E1:5B:85:A4:A0:AD:26 Authority key identifier: FD:EE:16:BD:C5:42:0A:60:A3:D6:A8:A2:9B:D3:02:65:09:37:B8:8C Certificate issuer: /CN=FDEE16BDC5420A60A3D6A8A29BD302650937B88C Certificate serial: 7EE89459BE9D0AB227727621EC67FC12F9078B0E Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/FDEE16BDC5420A60A3D6A8A29BD302650937B88C.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/705b1897-d907-4dfc-b68b-77f485f58d6c/0/FDEE16BDC5420A60A3D6A8A29BD302650937B88C.mft Manifest number: 49 Signing time: Sat 23 Aug 2025 09:13:17 +0000 Manifest this update: Sat 23 Aug 2025 09:08:17 +0000 Manifest next update: Sun 24 Aug 2025 11:28:17 +0000 Files and hashes: 1: FDEE16BDC5420A60A3D6A8A29BD302650937B88C.crl (hash: /f9AGIsQmxokxQHXRFyjm/eYIVxf/htSN6ZfZKE7XqU=) 2: 326131343a373538303a373030303a3a2f33362d3336203d3e20323135313038.roa (hash: bvyg3HtIyqBCxLiPY89KCRG9IWT8nd/t/MqdudiybDI=) 3: 326131343a373538333a313030303a3a2f33362d3336203d3e20323135313038.roa (hash: Uc2wuWBne08reeuhGMV9FbwTFk0eKIo5Ei95b36hJuE=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/705b1897-d907-4dfc-b68b-77f485f58d6c/0/FDEE16BDC5420A60A3D6A8A29BD302650937B88C.crl rsync://rsync.paas.rpki.ripe.net/repository/705b1897-d907-4dfc-b68b-77f485f58d6c/0/FDEE16BDC5420A60A3D6A8A29BD302650937B88C.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/FDEE16BDC5420A60A3D6A8A29BD302650937B88C.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 24 Aug 2025 11:28:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:e8:94:59:be:9d:0a:b2:27:72:76:21:ec:67:fc:12:f9:07:8b:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FDEE16BDC5420A60A3D6A8A29BD302650937B88C Validity Not Before: Aug 23 09:08:17 2025 GMT Not After : Aug 24 11:28:17 2025 GMT Subject: CN=8BEB41F902F60D8CBAF55DFF26E15B85A4A0AD26 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:a4:10:74:c9:f6:cd:d9:ad:f8:d6:69:9a:28: ed:03:ea:68:28:85:3e:21:75:a4:f8:11:04:02:cf: 55:5d:a6:9a:8c:9d:f4:d1:fc:ac:73:07:96:ef:72: e7:c5:a1:0c:96:ec:56:14:15:ec:2c:d2:0c:67:cf: 7c:9d:da:e8:bf:30:32:5d:44:d0:68:4a:4f:9b:b1: 4c:e5:f2:e0:f8:0d:2e:36:4c:a1:67:0f:0c:ae:81: 86:af:cb:37:ea:d1:43:77:56:03:e8:0a:b6:bf:42: b9:1a:30:fc:6d:c8:c4:d5:4d:76:78:f2:b4:22:eb: 9a:2d:55:1c:3d:3e:ab:1c:5b:a5:dd:8e:8b:d4:5d: 4f:d1:9f:93:4e:94:52:10:c9:64:aa:b7:c6:9b:6c: 35:2a:33:cf:4e:48:a2:54:bd:ce:b7:ae:e5:dc:12: ee:09:c5:e6:31:3c:16:96:f8:71:5f:3f:3d:8d:e8: fc:42:b3:c3:9f:c6:60:47:ac:92:a7:c1:46:64:a5: a4:70:d6:e4:7b:aa:cd:5c:76:5b:ec:9f:c8:ac:92: ef:4e:aa:60:d9:91:13:12:9f:c1:b1:e1:f4:36:7a: 53:ce:51:1e:ab:08:b7:29:b5:5c:a7:8c:5f:31:1e: 08:77:35:58:e2:d0:c5:4a:fb:89:12:b9:c7:ff:07: be:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:EB:41:F9:02:F6:0D:8C:BA:F5:5D:FF:26:E1:5B:85:A4:A0:AD:26 X509v3 Authority Key Identifier: keyid:FD:EE:16:BD:C5:42:0A:60:A3:D6:A8:A2:9B:D3:02:65:09:37:B8:8C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/705b1897-d907-4dfc-b68b-77f485f58d6c/0/FDEE16BDC5420A60A3D6A8A29BD302650937B88C.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/FDEE16BDC5420A60A3D6A8A29BD302650937B88C.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/705b1897-d907-4dfc-b68b-77f485f58d6c/0/FDEE16BDC5420A60A3D6A8A29BD302650937B88C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:99:1c:72:3c:24:8f:08:ce:ab:c8:4a:5e:36:e1:57:ca:a4: ed:13:c4:b8:31:79:ef:49:84:e8:4d:da:a7:96:cb:cd:d0:33: 38:d2:42:1c:15:f2:29:4d:a4:e3:08:bc:be:72:12:80:3e:c9: 6e:61:98:db:0f:06:50:65:a3:dc:8b:79:43:11:4a:00:ef:04: 02:6b:d7:74:b8:01:33:9e:49:77:ba:59:d4:bb:4a:0c:f3:32: 21:ad:b6:40:a2:7d:be:c2:48:b0:2d:43:e8:55:de:10:7a:fb: 80:59:43:9f:b0:7e:bf:f8:13:bc:eb:eb:31:61:03:cc:77:b4: 31:39:cb:7b:82:1c:5b:d9:86:b8:97:c1:0a:83:4d:7f:1d:0d: a5:10:03:80:77:72:73:93:2a:23:6c:24:92:58:16:c8:3e:7f: be:37:01:a6:0a:c9:9b:18:31:bf:65:e8:8a:6a:71:73:16:a9: 08:54:ac:43:d8:8f:75:cd:ff:ba:11:6a:49:23:6b:59:5c:21: 0d:de:9e:35:56:7e:2d:96:6f:74:af:2a:4c:b2:37:3c:98:ee: 8a:8c:f3:de:c8:36:4e:88:41:dd:08:e6:1a:88:0a:7e:6d:67: 4e:c7:f2:29:4f:bd:e5:57:fe:0e:93:53:f5:6e:22:2f:7e:16: 45:7d:01:7f -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUfuiUWb6dCrIncnYh7Gf8EvkHiw4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkRFRTE2QkRDNTQyMEE2MEEzRDZBOEEyOUJEMzAyNjUw OTM3Qjg4QzAeFw0yNTA4MjMwOTA4MTdaFw0yNTA4MjQxMTI4MTdaMDMxMTAvBgNV BAMTKDhCRUI0MUY5MDJGNjBEOENCQUY1NURGRjI2RTE1Qjg1QTRBMEFEMjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7pBB0yfbN2a341mmaKO0D6mgo hT4hdaT4EQQCz1VdppqMnfTR/KxzB5bvcufFoQyW7FYUFews0gxnz3yd2ui/MDJd RNBoSk+bsUzl8uD4DS42TKFnDwyugYavyzfq0UN3VgPoCra/QrkaMPxtyMTVTXZ4 8rQi65otVRw9PqscW6XdjovUXU/Rn5NOlFIQyWSqt8abbDUqM89OSKJUvc63ruXc Eu4JxeYxPBaW+HFfPz2N6PxCs8OfxmBHrJKnwUZkpaRw1uR7qs1cdlvsn8isku9O qmDZkRMSn8Gx4fQ2elPOUR6rCLcptVynjF8xHgh3NVji0MVK+4kSucf/B757AgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUi+tB+QL2DYy69V3/JuFbhaSgrSYwHwYDVR0j BBgwFoAU/e4WvcVCCmCj1qiim9MCZQk3uIwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNzA1YjE4OTctZDkwNy00ZGZjLWI2OGItNzdmNDg1ZjU4 ZDZjLzAvRkRFRTE2QkRDNTQyMEE2MEEzRDZBOEEyOUJEMzAyNjUwOTM3Qjg4Qy5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC9GREVFMTZCREM1NDIwQTYwQTNENkE4QTI5 QkQzMDI2NTA5MzdCODhDLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzcwNWIxODk3LWQ5MDctNGRmYy1iNjhiLTc3ZjQ4NWY1OGQ2Yy8wL0ZERUUxNkJE QzU0MjBBNjBBM0Q2QThBMjlCRDMwMjY1MDkzN0I4OEMubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAgmRxy PCSPCM6ryEpeNuFXyqTtE8S4MXnvSYToTdqnlsvN0DM40kIcFfIpTaTjCLy+chKA PsluYZjbDwZQZaPci3lDEUoA7wQCa9d0uAEznkl3ulnUu0oM8zIhrbZAon2+wkiw LUPoVd4QevuAWUOfsH6/+BO86+sxYQPMd7QxOct7ghxb2Ya4l8EKg01/HQ2lEAOA d3JzkyojbCSSWBbIPn++NwGmCsmbGDG/ZeiKanFzFqkIVKxD2I91zf+6EWpJI2tZ XCEN3p41Vn4tlm90rypMsjc8mO6KjPPeyDZOiEHdCOYaiAp+bWdOx/IpT73lV/4O k1P1biIvfhZFfQF/ -----END CERTIFICATE-----Generated at Sat Aug 23 17:28:39 2025 by rpki-client