$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/3/D615ABCBA5015564ADE9B473D64F1E34A0BA8D4A.mft File: D615ABCBA5015564ADE9B473D64F1E34A0BA8D4A.mft (raw, json) Hash identifier: sC2CD/Uf0YAwk6wf4OKpVftbxKBzh2lwyuTmNL+6iyQ= Subject key identifier: 15:D2:DF:E5:81:12:14:A0:9F:31:5E:6B:F3:1A:56:3A:04:92:5A:A1 Authority key identifier: D6:15:AB:CB:A5:01:55:64:AD:E9:B4:73:D6:4F:1E:34:A0:BA:8D:4A Certificate issuer: /CN=D615ABCBA5015564ADE9B473D64F1E34A0BA8D4A Certificate serial: 5F92EF9FF09D463EC50CBA1FFE65E821621961F4 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/D615ABCBA5015564ADE9B473D64F1E34A0BA8D4A.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/3/D615ABCBA5015564ADE9B473D64F1E34A0BA8D4A.mft Manifest number: 0252 Signing time: Tue 16 Jun 2026 11:35:02 +0000 Manifest this update: Tue 16 Jun 2026 11:30:02 +0000 Manifest next update: Wed 17 Jun 2026 13:26:02 +0000 Files and hashes: 1: D615ABCBA5015564ADE9B473D64F1E34A0BA8D4A.crl (hash: fiBiMg8Ge6yM5uC6Y+jiEudiZqSrHJDXdgApKxajC8E=) 2: 326131343a373538303a3930323a3a2f34382d3438203d3e20323033383433.roa (hash: DyehTUsfk21Hj5Xq64+F+F4A1oaphKt7e4+bcF+X09M=) 3: 326131343a373538303a3930333a3a2f34382d3438203d3e203331383938.roa (hash: cxJ2EfGW3Gw41SsKZJkYgUq6pKjZBBiREvTQVJOiK1o=) 4: 326131343a373538303a3930303a3a2f34372d3437203d3e20323033383433.roa (hash: FrDNupKDARVlRRNCBCc/O4jmFlJqhvZjjWnPHeQbISc=) 5: 326131343a373538303a3930313a3a2f34382d3438203d3e20323033383433.roa (hash: Ou/BuV6DNjxZqmppmI1GfTQOuzQIj3w4635LcGfFjnQ=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/3/D615ABCBA5015564ADE9B473D64F1E34A0BA8D4A.crl rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/3/D615ABCBA5015564ADE9B473D64F1E34A0BA8D4A.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/D615ABCBA5015564ADE9B473D64F1E34A0BA8D4A.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Jun 2026 13:26:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:92:ef:9f:f0:9d:46:3e:c5:0c:ba:1f:fe:65:e8:21:62:19:61:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D615ABCBA5015564ADE9B473D64F1E34A0BA8D4A Validity Not Before: Jun 16 11:30:02 2026 GMT Not After : Jun 17 13:26:02 2026 GMT Subject: CN=15D2DFE5811214A09F315E6BF31A563A04925AA1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:92:87:cf:d7:32:31:b8:a1:8d:46:4e:6d:09: c8:89:c3:44:ff:54:49:f4:d3:70:07:7e:9d:9d:7e: 9c:89:ab:cc:cf:23:0d:80:de:6f:7e:8e:e5:a0:fd: 50:49:8a:3d:ef:38:06:26:fd:52:9a:a1:a5:7d:eb: 30:de:ed:c6:c0:5f:2e:c6:1c:ac:76:3e:dd:7b:cf: 94:66:aa:19:3e:f7:ff:57:82:6b:4d:21:38:44:47: 16:38:25:fb:0b:44:43:38:ac:99:f5:26:5b:fb:22: cc:94:73:8f:5d:11:1a:36:a7:c6:a6:54:8c:57:01: 6b:54:09:ac:60:8c:ae:d4:b1:09:fc:c5:b4:29:07: 4a:55:90:e9:55:88:94:f3:bf:d7:dd:81:dc:c3:f8: 09:e2:c7:f6:14:90:41:25:85:64:96:f8:4d:7a:3b: 95:43:50:6f:85:87:de:db:4a:c1:28:87:d0:20:1d: 6a:5f:95:da:98:cb:7c:cb:34:29:11:be:fe:65:5e: 02:03:3d:8b:c3:aa:22:3a:ba:be:29:f9:a5:9d:83: dc:94:c4:38:36:de:4a:e5:ee:b7:d0:76:46:60:80: 58:76:2b:1e:1b:35:2c:f8:08:eb:13:02:c6:ae:7c: 4b:df:64:90:47:48:47:80:ae:8b:9d:e1:7e:f3:bf: 27:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:D2:DF:E5:81:12:14:A0:9F:31:5E:6B:F3:1A:56:3A:04:92:5A:A1 X509v3 Authority Key Identifier: keyid:D6:15:AB:CB:A5:01:55:64:AD:E9:B4:73:D6:4F:1E:34:A0:BA:8D:4A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/3/D615ABCBA5015564ADE9B473D64F1E34A0BA8D4A.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/D615ABCBA5015564ADE9B473D64F1E34A0BA8D4A.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/3/D615ABCBA5015564ADE9B473D64F1E34A0BA8D4A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:88:07:6c:b6:a6:7e:c4:45:d2:79:35:a7:8c:0b:1e:23:64: eb:0d:74:fe:cd:58:5e:e6:38:50:10:9f:50:54:bd:35:24:09: 6a:77:42:38:6c:4f:40:0e:65:4f:0c:b5:03:b1:2a:3c:19:3f: b9:63:0a:2b:60:a7:60:da:bf:7b:a8:05:c9:9b:20:fe:b8:ec: 52:77:85:e5:69:87:07:d1:1d:af:af:78:84:f1:a3:2a:66:e6: 5b:09:68:7d:41:48:75:1a:fa:8f:d9:e8:99:b9:0d:d0:7f:ac: 6e:ec:1c:44:70:df:99:2b:43:4c:e9:c4:cc:52:f3:55:92:1f: 66:f1:51:06:ff:06:3b:73:51:ad:12:33:f7:e9:93:28:3f:9e: eb:15:58:68:c6:19:d8:99:c3:15:06:3f:2d:6c:bc:4f:54:b1: a2:d5:8a:6a:1a:40:19:a2:18:76:89:a4:f3:84:1e:69:a8:8b: a2:8d:c8:55:f1:5b:ec:9e:9a:9e:f3:16:6a:08:2d:fd:c1:ae: 55:5f:54:99:24:0c:97:01:de:81:48:58:18:66:05:c0:39:30: 23:cc:92:4a:53:59:0f:68:c1:73:65:90:f4:1a:34:f6:d5:f9: 31:a3:48:43:5e:71:9b:ad:bf:aa:ab:78:42:76:7c:37:8b:b2: ca:3a:ce:d5 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUX5Lvn/CdRj7FDLof/mXoIWIZYfQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDYxNUFCQ0JBNTAxNTU2NEFERTlCNDczRDY0RjFFMzRB MEJBOEQ0QTAeFw0yNjA2MTYxMTMwMDJaFw0yNjA2MTcxMzI2MDJaMDMxMTAvBgNV BAMTKDE1RDJERkU1ODExMjE0QTA5RjMxNUU2QkYzMUE1NjNBMDQ5MjVBQTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXkofP1zIxuKGNRk5tCciJw0T/ VEn003AHfp2dfpyJq8zPIw2A3m9+juWg/VBJij3vOAYm/VKaoaV96zDe7cbAXy7G HKx2Pt17z5Rmqhk+9/9XgmtNIThERxY4JfsLREM4rJn1Jlv7IsyUc49dERo2p8am VIxXAWtUCaxgjK7UsQn8xbQpB0pVkOlViJTzv9fdgdzD+Anix/YUkEElhWSW+E16 O5VDUG+Fh97bSsEoh9AgHWpfldqYy3zLNCkRvv5lXgIDPYvDqiI6ur4p+aWdg9yU xDg23krl7rfQdkZggFh2Kx4bNSz4COsTAsaufEvfZJBHSEeAroud4X7zvyclAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUFdLf5YESFKCfMV5r8xpWOgSSWqEwHwYDVR0j BBgwFoAU1hWry6UBVWSt6bRz1k8eNKC6jUowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMTNmNjg1NjEtMGE3NC00Y2NhLWJmOGYtMTJmYWFhZmM4 ZWI4LzMvRDYxNUFCQ0JBNTAxNTU2NEFERTlCNDczRDY0RjFFMzRBMEJBOEQ0QS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC9ENjE1QUJDQkE1MDE1NTY0QURFOUI0NzNE NjRGMUUzNEEwQkE4RDRBLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzEzZjY4NTYxLTBhNzQtNGNjYS1iZjhmLTEyZmFhYWZjOGViOC8zL0Q2MTVBQkNC QTUwMTU1NjRBREU5QjQ3M0Q2NEYxRTM0QTBCQThENEEubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAdiAds tqZ+xEXSeTWnjAseI2TrDXT+zVhe5jhQEJ9QVL01JAlqd0I4bE9ADmVPDLUDsSo8 GT+5YworYKdg2r97qAXJmyD+uOxSd4XlaYcH0R2vr3iE8aMqZuZbCWh9QUh1GvqP 2eiZuQ3Qf6xu7BxEcN+ZK0NM6cTMUvNVkh9m8VEG/wY7c1GtEjP36ZMoP57rFVho xhnYmcMVBj8tbLxPVLGi1YpqGkAZohh2iaTzhB5pqIuijchV8Vvsnpqe8xZqCC39 wa5VX1SZJAyXAd6BSFgYZgXAOTAjzJJKU1kPaMFzZZD0GjT21fkxo0hDXnGbrb+q q3hCdnw3i7LKOs7V -----END CERTIFICATE-----Generated at Tue Jun 16 23:50:00 2026 by rpki-client