$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/3/D615ABCBA5015564ADE9B473D64F1E34A0BA8D4A.mft File: D615ABCBA5015564ADE9B473D64F1E34A0BA8D4A.mft (raw, json) Hash identifier: ltmM3glija/RqpQy23oWNWzfepnDryP3Db3zNPbrEyk= Subject key identifier: C1:F7:A7:0E:D9:6F:2B:56:8C:C8:97:C5:CD:FD:A1:54:62:E7:79:A6 Authority key identifier: D6:15:AB:CB:A5:01:55:64:AD:E9:B4:73:D6:4F:1E:34:A0:BA:8D:4A Certificate issuer: /CN=D615ABCBA5015564ADE9B473D64F1E34A0BA8D4A Certificate serial: 098D7C76FCFE1229B3657FF9DC20978012AB4F2D Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/D615ABCBA5015564ADE9B473D64F1E34A0BA8D4A.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/3/D615ABCBA5015564ADE9B473D64F1E34A0BA8D4A.mft Manifest number: D8 Signing time: Sun 07 Sep 2025 08:51:46 +0000 Manifest this update: Sun 07 Sep 2025 08:46:46 +0000 Manifest next update: Mon 08 Sep 2025 12:00:46 +0000 Files and hashes: 1: D615ABCBA5015564ADE9B473D64F1E34A0BA8D4A.crl (hash: sApVjN0l36cyLD6MHEOohHxWUDMAWB47cWDilwjZD7I=) 2: 326131343a373538303a3930323a3a2f34382d3438203d3e20323033383433.roa (hash: BFT8GbG7CSJ9YmzS1PjnMDrg1nwAcfXEJPEfuo5FzQk=) 3: 326131343a373538303a3930313a3a2f34382d3438203d3e20323033383433.roa (hash: XxS9zprV7IX1JjrBQQ+JptkD2bW89WKl615fH9J1hzc=) 4: 326131343a373538303a3930333a3a2f34382d3438203d3e203331383938.roa (hash: ypgUGD6Euz3HGS0A9GoVgCiVtLF78aI6ZX/YlUyvGd8=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/3/D615ABCBA5015564ADE9B473D64F1E34A0BA8D4A.crl rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/3/D615ABCBA5015564ADE9B473D64F1E34A0BA8D4A.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/D615ABCBA5015564ADE9B473D64F1E34A0BA8D4A.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 08 Sep 2025 09:27:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:8d:7c:76:fc:fe:12:29:b3:65:7f:f9:dc:20:97:80:12:ab:4f:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D615ABCBA5015564ADE9B473D64F1E34A0BA8D4A Validity Not Before: Sep 7 08:46:46 2025 GMT Not After : Sep 8 12:00:46 2025 GMT Subject: CN=C1F7A70ED96F2B568CC897C5CDFDA15462E779A6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:bd:49:6b:52:39:5f:8f:f5:37:ab:1b:44:42: eb:72:99:bd:26:96:4a:cf:95:9e:ae:67:15:3f:1a: 28:09:07:6f:ff:58:41:ea:9b:4c:19:56:7e:0d:f6: 88:74:6a:31:f5:e5:57:9a:96:89:e2:b5:cb:33:7a: 7d:04:02:1c:03:d3:1e:0c:de:c3:1c:f9:fa:c3:93: 9c:a6:93:58:71:97:f1:54:04:e5:10:52:2f:7d:0a: 15:a5:ae:13:8e:7f:1e:c1:7e:df:04:53:66:47:5e: 62:4b:2d:89:9d:a6:d9:d6:4d:be:41:40:48:f5:a1: bf:8d:f9:93:fb:c2:32:1b:f2:09:c8:2b:f2:6f:6c: 82:86:96:cb:08:a6:24:3a:91:98:c4:68:d2:8a:3d: b4:e2:29:1d:04:1e:59:1c:3d:a0:04:fe:5d:4d:9a: 00:0f:99:37:38:2b:3f:0b:72:c8:80:fb:25:da:3d: c1:d3:41:78:93:05:e0:5e:73:e2:3d:5e:c4:fd:3a: cb:a0:71:2b:fd:02:da:36:2b:ad:a3:99:fd:de:21: 6c:77:d2:a8:60:40:35:d2:c3:a4:a1:1c:9d:f3:8a: 65:0d:75:07:c8:a9:d4:83:4a:48:3a:26:a2:8c:91: e6:3c:7f:3f:19:f4:83:12:6e:5c:74:c6:d1:b9:eb: 02:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:F7:A7:0E:D9:6F:2B:56:8C:C8:97:C5:CD:FD:A1:54:62:E7:79:A6 X509v3 Authority Key Identifier: keyid:D6:15:AB:CB:A5:01:55:64:AD:E9:B4:73:D6:4F:1E:34:A0:BA:8D:4A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/3/D615ABCBA5015564ADE9B473D64F1E34A0BA8D4A.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/D615ABCBA5015564ADE9B473D64F1E34A0BA8D4A.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/3/D615ABCBA5015564ADE9B473D64F1E34A0BA8D4A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:32:64:03:d6:75:40:32:e6:c2:56:68:13:07:65:f1:6b:2c: c6:bf:db:45:3c:9f:1c:c6:17:bb:fe:48:b7:3a:1f:9a:ac:a7: 8b:e3:d9:1f:7a:e9:61:50:b2:26:86:ce:c8:27:51:3c:13:c4: 25:bb:50:5b:18:fc:1e:6f:26:08:12:dd:ac:d2:c8:4b:07:77: eb:01:86:bd:66:ca:7f:20:d0:1a:e1:59:e9:8c:af:3b:4b:d4: 8e:8f:8b:26:64:fd:6b:54:02:e6:ce:6a:ea:3e:82:08:e6:00: 22:b6:08:c9:b1:75:20:b0:0a:8c:b0:93:19:b0:fb:43:11:ca: 1f:5e:fa:79:01:2d:b0:9c:ac:ef:1c:a2:dd:a6:56:a4:34:93: 5a:fb:88:e1:c0:db:26:f5:57:14:4d:fd:ab:61:4b:0a:3a:ae: f6:8b:da:e0:07:c3:06:8b:4b:3d:80:3f:fc:9c:e9:3c:70:c1: 91:c9:f7:32:60:67:b7:f6:45:4a:55:3e:20:99:52:99:a3:da: f4:17:92:25:cb:6a:63:11:de:69:98:9e:51:98:f4:f3:69:a4: bb:04:78:7a:4b:2e:06:4b:ea:2c:d9:1e:04:19:0b:09:60:ce: f6:37:27:60:5b:b4:83:31:14:23:f5:6e:c5:14:8c:44:86:d9: b7:e8:0d:d1 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUCY18dvz+EimzZX/53CCXgBKrTy0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDYxNUFCQ0JBNTAxNTU2NEFERTlCNDczRDY0RjFFMzRB MEJBOEQ0QTAeFw0yNTA5MDcwODQ2NDZaFw0yNTA5MDgxMjAwNDZaMDMxMTAvBgNV BAMTKEMxRjdBNzBFRDk2RjJCNTY4Q0M4OTdDNUNERkRBMTU0NjJFNzc5QTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvvUlrUjlfj/U3qxtEQutymb0m lkrPlZ6uZxU/GigJB2//WEHqm0wZVn4N9oh0ajH15Vealonitcszen0EAhwD0x4M 3sMc+frDk5ymk1hxl/FUBOUQUi99ChWlrhOOfx7Bft8EU2ZHXmJLLYmdptnWTb5B QEj1ob+N+ZP7wjIb8gnIK/JvbIKGlssIpiQ6kZjEaNKKPbTiKR0EHlkcPaAE/l1N mgAPmTc4Kz8LcsiA+yXaPcHTQXiTBeBec+I9XsT9OsugcSv9Ato2K62jmf3eIWx3 0qhgQDXSw6ShHJ3zimUNdQfIqdSDSkg6JqKMkeY8fz8Z9IMSblx0xtG56wJFAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUwfenDtlvK1aMyJfFzf2hVGLneaYwHwYDVR0j BBgwFoAU1hWry6UBVWSt6bRz1k8eNKC6jUowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMTNmNjg1NjEtMGE3NC00Y2NhLWJmOGYtMTJmYWFhZmM4 ZWI4LzMvRDYxNUFCQ0JBNTAxNTU2NEFERTlCNDczRDY0RjFFMzRBMEJBOEQ0QS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC9ENjE1QUJDQkE1MDE1NTY0QURFOUI0NzNE NjRGMUUzNEEwQkE4RDRBLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzEzZjY4NTYxLTBhNzQtNGNjYS1iZjhmLTEyZmFhYWZjOGViOC8zL0Q2MTVBQkNC QTUwMTU1NjRBREU5QjQ3M0Q2NEYxRTM0QTBCQThENEEubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQA2MmQD 1nVAMubCVmgTB2XxayzGv9tFPJ8cxhe7/ki3Oh+arKeL49kfeulhULImhs7IJ1E8 E8Qlu1BbGPwebyYIEt2s0shLB3frAYa9Zsp/INAa4VnpjK87S9SOj4smZP1rVALm zmrqPoII5gAitgjJsXUgsAqMsJMZsPtDEcofXvp5AS2wnKzvHKLdplakNJNa+4jh wNsm9VcUTf2rYUsKOq72i9rgB8MGi0s9gD/8nOk8cMGRyfcyYGe39kVKVT4gmVKZ o9r0F5Ily2pjEd5pmJ5RmPTzaaS7BHh6Sy4GS+os2R4EGQsJYM72NydgW7SDMRQj 9W7FFIxEhtm36A3R -----END CERTIFICATE-----Generated at Sun Sep 7 23:27:17 2025 by rpki-client