$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/3/D615ABCBA5015564ADE9B473D64F1E34A0BA8D4A.mft File: D615ABCBA5015564ADE9B473D64F1E34A0BA8D4A.mft (raw, json) Hash identifier: iuij4WNoeWJLITNogxdwD0xQE8U1GcMxJ1dPi+AAXks= Subject key identifier: 5F:EA:EC:69:E4:A8:59:16:CC:77:B2:B7:61:F4:31:70:0D:A0:77:25 Authority key identifier: D6:15:AB:CB:A5:01:55:64:AD:E9:B4:73:D6:4F:1E:34:A0:BA:8D:4A Certificate issuer: /CN=D615ABCBA5015564ADE9B473D64F1E34A0BA8D4A Certificate serial: 3E1A851527D87184CEE35A26B7EA189227EA57FC Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/D615ABCBA5015564ADE9B473D64F1E34A0BA8D4A.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/3/D615ABCBA5015564ADE9B473D64F1E34A0BA8D4A.mft Manifest number: 96 Signing time: Sun 20 Jul 2025 07:13:53 +0000 Manifest this update: Sun 20 Jul 2025 07:08:53 +0000 Manifest next update: Mon 21 Jul 2025 09:48:53 +0000 Files and hashes: 1: 326131343a373538303a3930323a3a2f34382d3438203d3e20323033383433.roa (hash: BFT8GbG7CSJ9YmzS1PjnMDrg1nwAcfXEJPEfuo5FzQk=) 2: 326131343a373538303a3930313a3a2f34382d3438203d3e20323033383433.roa (hash: XxS9zprV7IX1JjrBQQ+JptkD2bW89WKl615fH9J1hzc=) 3: 326131343a373538303a3930333a3a2f34382d3438203d3e203331383938.roa (hash: ypgUGD6Euz3HGS0A9GoVgCiVtLF78aI6ZX/YlUyvGd8=) 4: D615ABCBA5015564ADE9B473D64F1E34A0BA8D4A.crl (hash: TPB0TLi9mD8ZBsnXo8KFsC9uo9mROTh91VScjX9etEQ=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/3/D615ABCBA5015564ADE9B473D64F1E34A0BA8D4A.crl rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/3/D615ABCBA5015564ADE9B473D64F1E34A0BA8D4A.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/D615ABCBA5015564ADE9B473D64F1E34A0BA8D4A.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 21 Jul 2025 09:48:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:1a:85:15:27:d8:71:84:ce:e3:5a:26:b7:ea:18:92:27:ea:57:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D615ABCBA5015564ADE9B473D64F1E34A0BA8D4A Validity Not Before: Jul 20 07:08:53 2025 GMT Not After : Jul 21 09:48:53 2025 GMT Subject: CN=5FEAEC69E4A85916CC77B2B761F431700DA07725 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:5e:91:09:8c:8e:4f:f4:bb:2d:08:8a:bf:86: 8a:44:70:90:6f:f6:89:49:de:66:dc:20:b0:3c:9f: 43:83:b0:1e:be:51:34:0f:af:6b:db:d2:ff:00:0a: 4a:2a:56:2b:1a:56:64:ff:37:e0:d2:13:e9:59:c2: cf:42:89:e7:06:30:e0:d5:ff:6f:ec:ce:94:cf:9d: ad:d0:9d:51:bb:ae:be:13:f5:9c:e7:55:a9:9f:c8: 6f:af:04:ac:38:98:cb:a3:28:77:f1:ab:c6:78:bf: 6f:d4:85:96:e3:f5:29:80:82:0e:f2:ca:bc:36:60: d5:55:3a:4f:68:fa:be:87:9a:d7:14:3b:ae:b3:57: ca:ef:3a:7c:3f:69:59:a4:1d:40:68:54:94:2d:41: f6:6c:81:63:e2:aa:af:f1:36:9b:b7:8d:bd:9e:3e: d7:d7:98:e0:db:fb:90:30:e2:b0:2f:ea:13:a4:b0: b3:f4:27:5d:c6:7c:7f:ff:b9:8e:63:70:73:41:8a: a4:fa:38:3d:6c:d7:f4:57:fe:21:86:1d:df:4a:f1: 98:f0:36:d1:7b:92:7a:a7:6c:09:ff:b8:7e:3e:b0: 23:cf:61:bd:08:3d:e2:7f:d4:9a:db:a0:e9:e0:d8: 33:98:19:52:29:4d:f3:e8:86:94:ae:16:d7:5d:84: 6c:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:EA:EC:69:E4:A8:59:16:CC:77:B2:B7:61:F4:31:70:0D:A0:77:25 X509v3 Authority Key Identifier: keyid:D6:15:AB:CB:A5:01:55:64:AD:E9:B4:73:D6:4F:1E:34:A0:BA:8D:4A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/3/D615ABCBA5015564ADE9B473D64F1E34A0BA8D4A.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/D615ABCBA5015564ADE9B473D64F1E34A0BA8D4A.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/3/D615ABCBA5015564ADE9B473D64F1E34A0BA8D4A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:b6:bd:13:e1:4f:21:87:89:c5:85:47:51:fb:78:a1:e3:23: 57:10:88:d2:b8:98:a3:11:10:0a:70:2b:ea:6f:45:cc:62:bf: 12:eb:60:1b:fb:73:94:18:23:ad:ab:1d:d3:cb:6d:06:c0:72: 85:ae:fc:a0:fb:06:3c:1f:44:96:89:9e:90:69:03:c5:02:55: d1:2a:19:49:16:bf:58:a9:9a:69:c3:27:27:8c:41:b2:09:70: 7e:c7:c7:b6:c5:7a:af:81:47:fd:44:f6:e5:69:f8:74:96:70: 5a:0e:c0:5c:97:9f:92:12:15:85:51:f4:30:76:cd:cf:23:be: 65:7d:c0:24:64:ac:2f:46:e9:83:fb:53:51:f0:56:02:98:c3: 9c:09:17:ea:9c:e6:f7:22:ad:6e:ef:66:95:4d:26:da:20:9c: b6:1e:c8:8e:1f:8c:8d:86:96:6d:31:08:de:5e:ba:86:06:93: dd:ba:5a:cd:5a:da:01:6c:e3:a3:87:45:c1:c5:09:ef:cf:2f: 05:d2:30:1d:14:d2:1a:40:ef:a0:62:9b:fd:ec:ce:a6:87:b4: fb:52:22:51:4a:00:65:5b:22:c7:c8:41:9a:29:33:11:60:71: 7c:a8:36:b4:9e:32:45:12:76:fc:26:ea:af:4a:af:74:10:87: 2f:10:7d:20 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUPhqFFSfYcYTO41omt+oYkifqV/wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDYxNUFCQ0JBNTAxNTU2NEFERTlCNDczRDY0RjFFMzRB MEJBOEQ0QTAeFw0yNTA3MjAwNzA4NTNaFw0yNTA3MjEwOTQ4NTNaMDMxMTAvBgNV BAMTKDVGRUFFQzY5RTRBODU5MTZDQzc3QjJCNzYxRjQzMTcwMERBMDc3MjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCIXpEJjI5P9LstCIq/hopEcJBv 9olJ3mbcILA8n0ODsB6+UTQPr2vb0v8ACkoqVisaVmT/N+DSE+lZws9CiecGMODV /2/szpTPna3QnVG7rr4T9ZznVamfyG+vBKw4mMujKHfxq8Z4v2/UhZbj9SmAgg7y yrw2YNVVOk9o+r6HmtcUO66zV8rvOnw/aVmkHUBoVJQtQfZsgWPiqq/xNpu3jb2e PtfXmODb+5Aw4rAv6hOksLP0J13GfH//uY5jcHNBiqT6OD1s1/RX/iGGHd9K8Zjw NtF7knqnbAn/uH4+sCPPYb0IPeJ/1JrboOng2DOYGVIpTfPohpSuFtddhGwhAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUX+rsaeSoWRbMd7K3YfQxcA2gdyUwHwYDVR0j BBgwFoAU1hWry6UBVWSt6bRz1k8eNKC6jUowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMTNmNjg1NjEtMGE3NC00Y2NhLWJmOGYtMTJmYWFhZmM4 ZWI4LzMvRDYxNUFCQ0JBNTAxNTU2NEFERTlCNDczRDY0RjFFMzRBMEJBOEQ0QS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC9ENjE1QUJDQkE1MDE1NTY0QURFOUI0NzNE NjRGMUUzNEEwQkE4RDRBLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzEzZjY4NTYxLTBhNzQtNGNjYS1iZjhmLTEyZmFhYWZjOGViOC8zL0Q2MTVBQkNC QTUwMTU1NjRBREU5QjQ3M0Q2NEYxRTM0QTBCQThENEEubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBxtr0T 4U8hh4nFhUdR+3ih4yNXEIjSuJijERAKcCvqb0XMYr8S62Ab+3OUGCOtqx3Ty20G wHKFrvyg+wY8H0SWiZ6QaQPFAlXRKhlJFr9YqZppwycnjEGyCXB+x8e2xXqvgUf9 RPblafh0lnBaDsBcl5+SEhWFUfQwds3PI75lfcAkZKwvRumD+1NR8FYCmMOcCRfq nOb3Iq1u72aVTSbaIJy2HsiOH4yNhpZtMQjeXrqGBpPdulrNWtoBbOOjh0XBxQnv zy8F0jAdFNIaQO+gYpv97M6mh7T7UiJRSgBlWyLHyEGaKTMRYHF8qDa0njJFEnb8 JuqvSq90EIcvEH0g -----END CERTIFICATE-----Generated at Sun Jul 20 23:55:15 2025 by rpki-client