$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/1/FA8F32A0B21DD2779315422B5A2184C649E03C0B.mft File: FA8F32A0B21DD2779315422B5A2184C649E03C0B.mft (raw, json) Hash identifier: Grk9h1qkJqz9j4vIanWQMHZLLi9bF2JPWIagB0w9bv8= Subject key identifier: 13:5C:BF:6E:32:DE:AA:0C:97:FD:E9:5A:4C:50:6D:D7:1F:EC:FF:B1 Authority key identifier: FA:8F:32:A0:B2:1D:D2:77:93:15:42:2B:5A:21:84:C6:49:E0:3C:0B Certificate issuer: /CN=FA8F32A0B21DD2779315422B5A2184C649E03C0B Certificate serial: 2AAD7E8968D4D222C0A28D9C4E26279089DC0475 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/FA8F32A0B21DD2779315422B5A2184C649E03C0B.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/1/FA8F32A0B21DD2779315422B5A2184C649E03C0B.mft Manifest number: 041E Signing time: Sun 29 Jun 2025 22:41:35 +0000 Manifest this update: Sun 29 Jun 2025 22:36:35 +0000 Manifest next update: Mon 30 Jun 2025 22:47:35 +0000 Files and hashes: 1: FA8F32A0B21DD2779315422B5A2184C649E03C0B.crl (hash: bbmVLQPPy+BhsdQ9CaqMJXKDMyfStmtmvGZ1uNZcNQU=) 2: 326130373a353463313a663030303a3a2f33362d3438203d3e20323038343533.roa (hash: /CFUhpNUUZNwoRgflpnALQIis6DpR20ZsBTAXpcqHGA=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/1/FA8F32A0B21DD2779315422B5A2184C649E03C0B.crl rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/1/FA8F32A0B21DD2779315422B5A2184C649E03C0B.mft rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/FA8F32A0B21DD2779315422B5A2184C649E03C0B.cer rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.crl rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 30 Jun 2025 22:47:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:ad:7e:89:68:d4:d2:22:c0:a2:8d:9c:4e:26:27:90:89:dc:04:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FA8F32A0B21DD2779315422B5A2184C649E03C0B Validity Not Before: Jun 29 22:36:35 2025 GMT Not After : Jun 30 22:47:35 2025 GMT Subject: CN=135CBF6E32DEAA0C97FDE95A4C506DD71FECFFB1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:71:4f:c4:fb:49:de:59:81:85:1c:85:7b:a9: 31:34:8c:49:eb:cb:f4:2e:51:0c:58:23:27:02:86: fd:04:dc:7f:4c:3f:01:9b:99:e1:1e:b4:cf:74:02: 16:85:a9:61:50:af:69:ab:27:3c:a3:ab:38:04:7d: be:14:e2:81:ed:75:e3:e1:18:6c:ed:65:0c:e0:71: 16:26:b4:56:a2:7d:71:5c:31:7f:7b:fa:80:75:5a: cc:db:cd:e4:cb:d2:98:fc:d5:ee:b0:01:ee:17:8d: bf:34:db:c7:5f:68:bf:fd:11:4c:75:57:bb:41:2e: e2:65:29:8b:4b:4f:46:5f:22:ec:56:dc:b6:2d:5a: f0:83:0f:36:8f:9f:51:26:d4:85:65:1d:95:f7:a7: 4e:6c:0e:ab:55:3b:3a:50:bd:f3:d4:fa:ed:4f:d3: fa:02:28:82:da:aa:c5:98:99:2a:af:05:4b:5f:c7: df:90:3e:2c:e4:fb:5b:e1:88:6e:86:c7:27:d6:be: 86:92:32:b6:91:86:e2:ca:b2:d3:eb:6c:59:fd:07: cd:5a:fd:50:b9:fa:df:97:28:ab:a4:0f:31:05:7a: 41:dd:aa:8e:e8:0e:ee:96:d4:fb:80:5f:6f:d7:cb: f1:b8:ba:e0:20:04:90:1a:8e:4b:fb:ad:bc:ae:a4: fb:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:5C:BF:6E:32:DE:AA:0C:97:FD:E9:5A:4C:50:6D:D7:1F:EC:FF:B1 X509v3 Authority Key Identifier: keyid:FA:8F:32:A0:B2:1D:D2:77:93:15:42:2B:5A:21:84:C6:49:E0:3C:0B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/1/FA8F32A0B21DD2779315422B5A2184C649E03C0B.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/FA8F32A0B21DD2779315422B5A2184C649E03C0B.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/1/FA8F32A0B21DD2779315422B5A2184C649E03C0B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:2c:ef:b0:a5:7d:07:50:a5:6f:6d:3d:68:6e:d7:84:b3:6f: d4:7f:a6:23:dd:b0:ce:85:77:6f:6c:78:9c:10:c0:3c:58:73: 0a:f3:60:d0:e9:14:9a:61:fb:97:ac:e0:d7:2c:11:7c:54:b3: 5b:73:b5:b7:12:78:70:5e:ac:e9:5c:1f:50:02:37:13:74:2e: e2:25:4f:2c:a8:4d:e0:40:b1:d2:6c:76:e1:e3:51:5c:81:78: f5:a5:47:72:a0:2f:2a:34:d6:0b:4e:58:5d:cb:19:fe:d4:8f: ba:17:5b:26:c5:b7:b3:1a:69:22:20:fb:19:2e:e5:8a:04:db: 30:18:3b:2a:a3:15:32:d4:68:ee:04:f2:43:27:3f:d8:c9:81: 3d:d0:12:8f:b3:e2:c3:e2:2a:8a:8e:95:4f:06:49:b1:45:1b: 12:8c:95:49:c8:83:2a:b4:ee:87:05:1a:c8:12:ff:3d:12:4b: b5:a9:1e:67:30:50:c2:e4:56:6c:e2:65:0f:57:98:2f:17:8c: 55:5a:9f:2b:ac:90:6a:53:cf:31:2f:de:15:de:89:4e:96:d0: e8:58:73:7e:5e:d8:b2:a5:ce:c1:53:93:3b:de:ba:58:81:9f: 5b:8b:c5:8a:1c:8f:cc:e7:ad:60:4e:f1:4c:36:af:e5:66:2d: cc:ea:b7:b0 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUKq1+iWjU0iLAoo2cTiYnkIncBHUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkE4RjMyQTBCMjFERDI3NzkzMTU0MjJCNUEyMTg0QzY0 OUUwM0MwQjAeFw0yNTA2MjkyMjM2MzVaFw0yNTA2MzAyMjQ3MzVaMDMxMTAvBgNV BAMTKDEzNUNCRjZFMzJERUFBMEM5N0ZERTk1QTRDNTA2REQ3MUZFQ0ZGQjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCecU/E+0neWYGFHIV7qTE0jEnr y/QuUQxYIycChv0E3H9MPwGbmeEetM90AhaFqWFQr2mrJzyjqzgEfb4U4oHtdePh GGztZQzgcRYmtFaifXFcMX97+oB1WszbzeTL0pj81e6wAe4Xjb8028dfaL/9EUx1 V7tBLuJlKYtLT0ZfIuxW3LYtWvCDDzaPn1Em1IVlHZX3p05sDqtVOzpQvfPU+u1P 0/oCKILaqsWYmSqvBUtfx9+QPizk+1vhiG6GxyfWvoaSMraRhuLKstPrbFn9B81a /VC5+t+XKKukDzEFekHdqo7oDu6W1PuAX2/Xy/G4uuAgBJAajkv7rbyupPsdAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUE1y/bjLeqgyX/elaTFBt1x/s/7EwHwYDVR0j BBgwFoAU+o8yoLId0neTFUIrWiGExkngPAswDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNzE0NzZkNjItOWNmYS00ODcxLWEyZDktZmFkZjU3ODFj MTFiLzEvRkE4RjMyQTBCMjFERDI3NzkzMTU0MjJCNUEyMTg0QzY0OUUwM0MwQi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9hYTAwNGJhMS00MTliLTRk YjUtYmJkMy01Y2NhNjMzY2FlM2YvMC9GQThGMzJBMEIyMUREMjc3OTMxNTQyMkI1 QTIxODRDNjQ5RTAzQzBCLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzcxNDc2ZDYyLTljZmEtNDg3MS1hMmQ5LWZhZGY1NzgxYzExYi8xL0ZBOEYzMkEw QjIxREQyNzc5MzE1NDIyQjVBMjE4NEM2NDlFMDNDMEIubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQB5LO+w pX0HUKVvbT1obteEs2/Uf6Yj3bDOhXdvbHicEMA8WHMK82DQ6RSaYfuXrODXLBF8 VLNbc7W3EnhwXqzpXB9QAjcTdC7iJU8sqE3gQLHSbHbh41FcgXj1pUdyoC8qNNYL Tlhdyxn+1I+6F1smxbezGmkiIPsZLuWKBNswGDsqoxUy1GjuBPJDJz/YyYE90BKP s+LD4iqKjpVPBkmxRRsSjJVJyIMqtO6HBRrIEv89Eku1qR5nMFDC5FZs4mUPV5gv F4xVWp8rrJBqU88xL94V3olOltDoWHN+Xtiypc7BU5M73rpYgZ9bi8WKHI/M561g TvFMNq/lZi3M6rew -----END CERTIFICATE-----Generated at Mon Jun 30 14:30:19 2025 by rpki-client