$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/3/D615ABCBA5015564ADE9B473D64F1E34A0BA8D4A.mft File: D615ABCBA5015564ADE9B473D64F1E34A0BA8D4A.mft (raw, json) Hash identifier: n0gwOaA1N3kYMn6jSwaE/0Z1Rc9fkpfU334iK8A8cfo= Subject key identifier: D8:CA:F3:51:13:AC:BD:6D:8C:F2:52:AA:E3:6C:68:A1:06:05:D5:7E Authority key identifier: D6:15:AB:CB:A5:01:55:64:AD:E9:B4:73:D6:4F:1E:34:A0:BA:8D:4A Certificate issuer: /CN=D615ABCBA5015564ADE9B473D64F1E34A0BA8D4A Certificate serial: 66669E8E295053747B9FF8ABF4F30E924362D60D Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/D615ABCBA5015564ADE9B473D64F1E34A0BA8D4A.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/3/D615ABCBA5015564ADE9B473D64F1E34A0BA8D4A.mft Manifest number: 02D9 Signing time: Fri 25 Sep 2026 15:08:54 +0000 Manifest this update: Fri 25 Sep 2026 15:03:54 +0000 Manifest next update: Sat 26 Sep 2026 17:45:54 +0000 Files and hashes: 1: 326131343a373538303a3930313a3a2f34382d3438203d3e20323033383433.roa (hash: Ou/BuV6DNjxZqmppmI1GfTQOuzQIj3w4635LcGfFjnQ=) 2: 326131343a373538303a3930303a3a2f34372d3437203d3e20323033383433.roa (hash: FrDNupKDARVlRRNCBCc/O4jmFlJqhvZjjWnPHeQbISc=) 3: D615ABCBA5015564ADE9B473D64F1E34A0BA8D4A.crl (hash: 3sjBpYoZy6NHuiHM2wTbXyAUFycPTK1zWZPWNVrek54=) 4: 326131343a373538303a3930333a3a2f34382d3438203d3e203331383938.roa (hash: cxJ2EfGW3Gw41SsKZJkYgUq6pKjZBBiREvTQVJOiK1o=) 5: 326131343a373538303a3930323a3a2f34382d3438203d3e20323033383433.roa (hash: DyehTUsfk21Hj5Xq64+F+F4A1oaphKt7e4+bcF+X09M=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/3/D615ABCBA5015564ADE9B473D64F1E34A0BA8D4A.crl rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/3/D615ABCBA5015564ADE9B473D64F1E34A0BA8D4A.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/D615ABCBA5015564ADE9B473D64F1E34A0BA8D4A.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 26 Sep 2026 17:45:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:66:9e:8e:29:50:53:74:7b:9f:f8:ab:f4:f3:0e:92:43:62:d6:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D615ABCBA5015564ADE9B473D64F1E34A0BA8D4A Validity Not Before: Sep 25 15:03:54 2026 GMT Not After : Sep 26 17:45:54 2026 GMT Subject: CN=D8CAF35113ACBD6D8CF252AAE36C68A10605D57E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:99:b2:50:37:fc:96:e4:ca:9c:e3:84:d0:1f: 3a:16:dc:56:0a:bd:75:a0:fb:a0:34:5a:d6:57:5e: e6:9d:bc:d0:e6:65:e6:ae:a8:94:57:0a:b4:dc:a6: cf:8d:8b:a2:8b:7c:de:00:cb:d1:f4:f9:4a:b2:d5: 5d:ac:d8:a7:20:1a:bf:9d:80:3c:0f:cb:b5:78:18: ae:b3:cf:5c:08:00:fe:82:4a:7a:d1:6d:31:d1:d2: 2a:ef:7f:80:6f:f9:2e:f8:dd:3b:62:36:2d:cd:87: 5a:da:c2:ad:4e:15:e8:08:3a:91:26:4b:e8:1c:20: 15:1a:e4:ca:dd:b0:b6:7e:c0:ed:f3:40:1e:4b:35: 54:d1:c9:47:28:a3:77:97:ad:e9:10:ef:f3:cd:86: 07:66:77:b7:56:01:72:03:cb:7c:2f:ea:3b:e2:5c: 99:b4:02:92:31:9a:8e:73:62:bb:ad:13:38:5c:c7: 92:d7:69:0e:31:46:84:14:d2:b7:4f:3e:3d:f6:8b: 66:27:ce:74:48:a8:fc:0a:7a:cc:3c:6f:8e:ac:fa: 12:dd:ce:51:2d:07:e0:d4:a6:02:ae:34:94:f0:7c: 68:73:9a:4d:78:de:1d:41:bd:76:a9:63:ac:1b:c4: 42:18:38:d4:80:74:c8:c2:f0:2d:d5:02:a8:f3:6e: b5:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:CA:F3:51:13:AC:BD:6D:8C:F2:52:AA:E3:6C:68:A1:06:05:D5:7E X509v3 Authority Key Identifier: keyid:D6:15:AB:CB:A5:01:55:64:AD:E9:B4:73:D6:4F:1E:34:A0:BA:8D:4A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/3/D615ABCBA5015564ADE9B473D64F1E34A0BA8D4A.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/D615ABCBA5015564ADE9B473D64F1E34A0BA8D4A.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/3/D615ABCBA5015564ADE9B473D64F1E34A0BA8D4A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 10:97:ee:32:ef:61:d5:9e:68:55:53:06:42:38:bd:0d:9f:5f: c0:dd:9f:8c:e5:36:cd:54:97:d2:da:a3:44:8d:09:79:8f:89: c7:e6:5f:00:26:cc:06:b5:7d:a2:8f:f7:21:a6:5b:a4:69:5a: cc:a9:89:13:d9:5f:db:9f:f9:4d:49:c5:0a:d4:49:8e:e8:46: 03:9e:0b:db:b1:ad:d9:10:2e:db:66:d5:09:9a:92:3f:a9:65: 96:22:83:83:ed:c0:5d:08:cb:72:a0:0a:89:5a:29:59:70:3d: 75:f8:dd:17:ab:40:79:fe:31:46:1a:46:64:0c:e3:6b:cd:cb: 04:ef:7e:0b:52:89:e5:a1:af:7e:f4:28:76:46:51:a4:8d:7d: db:15:4e:02:1b:5d:8b:78:5e:0b:c7:08:9a:4f:c7:af:78:27: 1e:d4:30:9e:2e:0c:76:52:03:b7:2a:72:51:a3:2e:71:5c:eb: 7b:ab:0b:28:41:57:55:8e:bc:a0:3c:32:7a:67:f4:3b:c6:9d: 35:07:a5:0b:36:ff:05:db:0f:59:c2:b8:9f:66:ed:89:b4:d5: db:60:e2:fe:32:cd:3c:ff:50:e3:4a:54:24:0d:10:c0:14:db: b9:9c:2b:76:df:f5:12:46:6e:f4:28:0d:ae:57:ab:99:09:96: 52:b4:d0:8c -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUZmaejilQU3R7n/ir9PMOkkNi1g0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDYxNUFCQ0JBNTAxNTU2NEFERTlCNDczRDY0RjFFMzRB MEJBOEQ0QTAeFw0yNjA5MjUxNTAzNTRaFw0yNjA5MjYxNzQ1NTRaMDMxMTAvBgNV BAMTKEQ4Q0FGMzUxMTNBQ0JENkQ4Q0YyNTJBQUUzNkM2OEExMDYwNUQ1N0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCXmbJQN/yW5Mqc44TQHzoW3FYK vXWg+6A0WtZXXuadvNDmZeauqJRXCrTcps+Ni6KLfN4Ay9H0+Uqy1V2s2KcgGr+d gDwPy7V4GK6zz1wIAP6CSnrRbTHR0irvf4Bv+S743TtiNi3Nh1rawq1OFegIOpEm S+gcIBUa5MrdsLZ+wO3zQB5LNVTRyUcoo3eXrekQ7/PNhgdmd7dWAXIDy3wv6jvi XJm0ApIxmo5zYrutEzhcx5LXaQ4xRoQU0rdPPj32i2YnznRIqPwKesw8b46s+hLd zlEtB+DUpgKuNJTwfGhzmk143h1BvXapY6wbxEIYONSAdMjC8C3VAqjzbrUtAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQU2MrzUROsvW2M8lKq42xooQYF1X4wHwYDVR0j BBgwFoAU1hWry6UBVWSt6bRz1k8eNKC6jUowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMTNmNjg1NjEtMGE3NC00Y2NhLWJmOGYtMTJmYWFhZmM4 ZWI4LzMvRDYxNUFCQ0JBNTAxNTU2NEFERTlCNDczRDY0RjFFMzRBMEJBOEQ0QS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC9ENjE1QUJDQkE1MDE1NTY0QURFOUI0NzNE NjRGMUUzNEEwQkE4RDRBLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzEzZjY4NTYxLTBhNzQtNGNjYS1iZjhmLTEyZmFhYWZjOGViOC8zL0Q2MTVBQkNC QTUwMTU1NjRBREU5QjQ3M0Q2NEYxRTM0QTBCQThENEEubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAQl+4y 72HVnmhVUwZCOL0Nn1/A3Z+M5TbNVJfS2qNEjQl5j4nH5l8AJswGtX2ij/chpluk aVrMqYkT2V/bn/lNScUK1EmO6EYDngvbsa3ZEC7bZtUJmpI/qWWWIoOD7cBdCMty oAqJWilZcD11+N0Xq0B5/jFGGkZkDONrzcsE734LUonloa9+9Ch2RlGkjX3bFU4C G12LeF4LxwiaT8eveCce1DCeLgx2UgO3KnJRoy5xXOt7qwsoQVdVjrygPDJ6Z/Q7 xp01B6ULNv8F2w9ZwrifZu2JtNXbYOL+Ms08/1DjSlQkDRDAFNu5nCt23/USRm70 KA2uV6uZCZZStNCM -----END CERTIFICATE-----Generated at Sat Sep 26 08:41:33 2026 by rpki-client