$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b6746901-23d3-4301-b28d-8b0982b06c08/1/15BCD75E02E085EB08A3D2F22C872972154D76C5.mft File: 15BCD75E02E085EB08A3D2F22C872972154D76C5.mft (raw, json) Hash identifier: WjoTlYNLL5MfS7K4E9Rw8K8lJdkNh+GJX2kc2w96OXQ= Subject key identifier: E9:AA:4C:DF:58:99:53:42:02:6C:3A:C9:D8:00:EB:A8:7E:A4:C8:DF Authority key identifier: 15:BC:D7:5E:02:E0:85:EB:08:A3:D2:F2:2C:87:29:72:15:4D:76:C5 Certificate issuer: /CN=15BCD75E02E085EB08A3D2F22C872972154D76C5 Certificate serial: 7A75A36CB3B016D75AD05212B10FE6812C98F392 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/15BCD75E02E085EB08A3D2F22C872972154D76C5.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b6746901-23d3-4301-b28d-8b0982b06c08/1/15BCD75E02E085EB08A3D2F22C872972154D76C5.mft Manifest number: C1 Signing time: Tue 22 Jul 2025 18:42:00 +0000 Manifest this update: Tue 22 Jul 2025 18:37:00 +0000 Manifest next update: Wed 23 Jul 2025 18:45:00 +0000 Files and hashes: 1: 15BCD75E02E085EB08A3D2F22C872972154D76C5.crl (hash: 7Zusivz2i2iX7tE+GI6nHqpg2nc5WZPqZBBXVMf7vec=) 2: 326131343a373538313a396662303a3a2f34342d3434203d3e20323133343330.roa (hash: 7syqL2b6B4hFc1tTh/9QPvKN2SjHSufNn4c9hT7wZns=) 3: 326131343a373538313a396663303a3a2f34342d3434203d3e20323133343330.roa (hash: MUq020p8NbAnolAB9zdSK3Cpj1AnGomUMMut2k1LbJE=) 4: 326131343a373538313a396661303a3a2f34342d3434203d3e20323133343330.roa (hash: oAF6XMqIQIjZqny73zZ9bZTjumil+o5WHhatNbG2YqU=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/b6746901-23d3-4301-b28d-8b0982b06c08/1/15BCD75E02E085EB08A3D2F22C872972154D76C5.crl rsync://rsync.paas.rpki.ripe.net/repository/b6746901-23d3-4301-b28d-8b0982b06c08/1/15BCD75E02E085EB08A3D2F22C872972154D76C5.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/15BCD75E02E085EB08A3D2F22C872972154D76C5.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 23 Jul 2025 18:45:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:75:a3:6c:b3:b0:16:d7:5a:d0:52:12:b1:0f:e6:81:2c:98:f3:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=15BCD75E02E085EB08A3D2F22C872972154D76C5 Validity Not Before: Jul 22 18:37:00 2025 GMT Not After : Jul 23 18:45:00 2025 GMT Subject: CN=E9AA4CDF58995342026C3AC9D800EBA87EA4C8DF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:bf:fb:cc:2a:5b:51:71:70:c9:1a:0e:75:5d: 7d:d4:42:e7:c9:e5:91:3f:40:6e:9e:09:d3:23:ce: 48:ba:85:9d:e8:c7:fe:6d:65:05:63:e1:76:41:c2: 32:ea:a2:32:80:4e:8e:a3:39:3e:cb:83:3d:b6:91: 0a:66:b1:10:3c:1b:8c:fc:4a:c8:99:9f:8f:5d:3b: ad:0f:9f:e6:04:76:df:22:0a:95:7f:ea:b9:2b:7b: 99:96:69:81:6f:70:25:47:75:9b:e8:c6:95:71:9d: c0:c4:3f:65:aa:ea:30:3b:48:da:52:d7:f9:fc:9a: 0f:60:1b:74:77:d5:2d:72:c7:c7:70:8f:df:c3:63: 03:48:fa:61:12:6b:da:3e:3b:d2:31:71:52:0a:4f: b8:1f:eb:b3:23:96:56:93:2f:19:07:2f:08:6f:73: 8d:7c:08:4d:9f:34:e4:21:a6:ca:ff:e7:61:77:fd: 6d:7a:cf:0e:45:a4:83:aa:35:99:4c:f4:c0:df:95: f0:21:b3:75:f0:f4:77:e4:82:3e:bc:e0:c7:da:5c: ea:6c:48:53:f5:0d:40:c5:ad:3d:2e:10:80:16:1e: e1:03:2f:ea:6d:63:fd:04:45:37:b0:e2:45:de:22: 80:11:8f:94:b9:32:de:51:5c:93:d2:4b:b2:6c:0f: 33:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:AA:4C:DF:58:99:53:42:02:6C:3A:C9:D8:00:EB:A8:7E:A4:C8:DF X509v3 Authority Key Identifier: keyid:15:BC:D7:5E:02:E0:85:EB:08:A3:D2:F2:2C:87:29:72:15:4D:76:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/b6746901-23d3-4301-b28d-8b0982b06c08/1/15BCD75E02E085EB08A3D2F22C872972154D76C5.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/15BCD75E02E085EB08A3D2F22C872972154D76C5.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b6746901-23d3-4301-b28d-8b0982b06c08/1/15BCD75E02E085EB08A3D2F22C872972154D76C5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:f1:2a:2d:68:ce:3c:3b:6b:ab:6d:d7:d8:cf:8f:04:f0:6c: d3:53:b5:5c:38:a0:2d:6e:b1:e4:8b:89:4f:9a:99:d0:d5:93: 91:67:70:5d:05:9b:eb:9d:c8:ab:09:af:b3:ab:13:3d:89:2c: ec:33:c2:35:7b:7c:2a:5d:28:88:6a:d5:49:05:38:7b:0c:07: 23:78:eb:f3:d5:7d:10:5e:80:37:7b:03:cf:56:a9:e5:fc:07: 05:66:aa:04:be:0c:98:c5:d5:c8:a4:f8:4a:59:05:d8:1d:ba: 66:62:21:4f:75:d1:98:23:41:54:eb:fd:ba:50:8c:fe:a3:44: 79:88:aa:41:ac:9e:e6:83:2b:d2:1e:5f:dd:fd:b0:a8:fd:53: 34:c7:95:46:e7:80:4a:52:66:36:2c:d1:b7:1f:8e:1f:5a:51: ef:43:77:d3:59:b2:d2:62:52:1f:83:39:99:df:54:e9:ff:8b: a9:88:78:77:e6:d5:30:a3:44:6e:a8:e1:49:71:60:8a:e1:66: 22:9c:ba:2a:69:ee:37:3c:ac:84:35:a5:66:a1:cb:96:14:f1: b9:c8:5e:2c:91:6b:83:3d:c2:40:9a:5f:7c:24:0f:1d:09:6c: ea:50:4b:db:2f:3d:d0:fa:fb:cc:5d:ad:b5:26:07:bb:fb:8a: ab:3b:1a:51 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUenWjbLOwFtda0FISsQ/mgSyY85IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTVCQ0Q3NUUwMkUwODVFQjA4QTNEMkYyMkM4NzI5NzIx NTRENzZDNTAeFw0yNTA3MjIxODM3MDBaFw0yNTA3MjMxODQ1MDBaMDMxMTAvBgNV BAMTKEU5QUE0Q0RGNTg5OTUzNDIwMjZDM0FDOUQ4MDBFQkE4N0VBNEM4REYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjv/vMKltRcXDJGg51XX3UQufJ 5ZE/QG6eCdMjzki6hZ3ox/5tZQVj4XZBwjLqojKATo6jOT7Lgz22kQpmsRA8G4z8 SsiZn49dO60Pn+YEdt8iCpV/6rkre5mWaYFvcCVHdZvoxpVxncDEP2Wq6jA7SNpS 1/n8mg9gG3R31S1yx8dwj9/DYwNI+mESa9o+O9IxcVIKT7gf67MjllaTLxkHLwhv c418CE2fNOQhpsr/52F3/W16zw5FpIOqNZlM9MDflfAhs3Xw9Hfkgj684MfaXOps SFP1DUDFrT0uEIAWHuEDL+ptY/0ERTew4kXeIoARj5S5Mt5RXJPSS7JsDzPZAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQU6apM31iZU0ICbDrJ2ADrqH6kyN8wHwYDVR0j BBgwFoAUFbzXXgLghesIo9LyLIcpchVNdsUwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYjY3NDY5MDEtMjNkMy00MzAxLWIyOGQtOGIwOTgyYjA2 YzA4LzEvMTVCQ0Q3NUUwMkUwODVFQjA4QTNEMkYyMkM4NzI5NzIxNTRENzZDNS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC8xNUJDRDc1RTAyRTA4NUVCMDhBM0QyRjIy Qzg3Mjk3MjE1NEQ3NkM1LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2I2NzQ2OTAxLTIzZDMtNDMwMS1iMjhkLThiMDk4MmIwNmMwOC8xLzE1QkNENzVF MDJFMDg1RUIwOEEzRDJGMjJDODcyOTcyMTU0RDc2QzUubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBM8Sot aM48O2urbdfYz48E8GzTU7VcOKAtbrHki4lPmpnQ1ZORZ3BdBZvrncirCa+zqxM9 iSzsM8I1e3wqXSiIatVJBTh7DAcjeOvz1X0QXoA3ewPPVqnl/AcFZqoEvgyYxdXI pPhKWQXYHbpmYiFPddGYI0FU6/26UIz+o0R5iKpBrJ7mgyvSHl/d/bCo/VM0x5VG 54BKUmY2LNG3H44fWlHvQ3fTWbLSYlIfgzmZ31Tp/4upiHh35tUwo0RuqOFJcWCK 4WYinLoqae43PKyENaVmocuWFPG5yF4skWuDPcJAml98JA8dCWzqUEvbLz3Q+vvM Xa21Jge7+4qrOxpR -----END CERTIFICATE-----Generated at Wed Jul 23 06:34:48 2025 by rpki-client