$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/3/D615ABCBA5015564ADE9B473D64F1E34A0BA8D4A.mft File: D615ABCBA5015564ADE9B473D64F1E34A0BA8D4A.mft (raw, json) Hash identifier: Y1EEDdliG4cI+sUZhlEcVfhUF0uDkBvJQYJMdurNoBs= Subject key identifier: 44:2F:D8:F1:F5:08:13:BA:FB:2F:66:E7:98:4D:B1:03:F0:E6:2A:0C Authority key identifier: D6:15:AB:CB:A5:01:55:64:AD:E9:B4:73:D6:4F:1E:34:A0:BA:8D:4A Certificate issuer: /CN=D615ABCBA5015564ADE9B473D64F1E34A0BA8D4A Certificate serial: 511195D7E0470FDD183159ED5156301A9EA397A2 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/D615ABCBA5015564ADE9B473D64F1E34A0BA8D4A.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/3/D615ABCBA5015564ADE9B473D64F1E34A0BA8D4A.mft Manifest number: 0116 Signing time: Thu 23 Oct 2025 14:35:16 +0000 Manifest this update: Thu 23 Oct 2025 14:30:16 +0000 Manifest next update: Fri 24 Oct 2025 14:50:16 +0000 Files and hashes: 1: 326131343a373538303a3930323a3a2f34382d3438203d3e20323033383433.roa (hash: BFT8GbG7CSJ9YmzS1PjnMDrg1nwAcfXEJPEfuo5FzQk=) 2: D615ABCBA5015564ADE9B473D64F1E34A0BA8D4A.crl (hash: nl1IyCES5CR4sbEhq25fDIb8YbT0tlCwur4MF780fDo=) 3: 326131343a373538303a3930333a3a2f34382d3438203d3e203331383938.roa (hash: ypgUGD6Euz3HGS0A9GoVgCiVtLF78aI6ZX/YlUyvGd8=) 4: 326131343a373538303a3930313a3a2f34382d3438203d3e20323033383433.roa (hash: XxS9zprV7IX1JjrBQQ+JptkD2bW89WKl615fH9J1hzc=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/3/D615ABCBA5015564ADE9B473D64F1E34A0BA8D4A.crl rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/3/D615ABCBA5015564ADE9B473D64F1E34A0BA8D4A.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/D615ABCBA5015564ADE9B473D64F1E34A0BA8D4A.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 24 Oct 2025 14:50:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:11:95:d7:e0:47:0f:dd:18:31:59:ed:51:56:30:1a:9e:a3:97:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D615ABCBA5015564ADE9B473D64F1E34A0BA8D4A Validity Not Before: Oct 23 14:30:16 2025 GMT Not After : Oct 24 14:50:16 2025 GMT Subject: CN=442FD8F1F50813BAFB2F66E7984DB103F0E62A0C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:6d:26:0f:f1:d9:3a:29:c1:c4:d0:7d:27:7b: e4:79:22:26:f2:e7:e1:d9:07:eb:ba:d0:b1:c0:5d: b6:ea:fa:3b:6e:79:ec:eb:fd:ee:82:fc:79:64:d3: 20:59:50:07:8b:36:6f:91:49:8a:e8:e9:29:65:87: d1:6c:ee:86:dd:be:a6:a7:ff:f0:d1:8a:a9:2c:d9: b2:a3:c4:9e:09:7f:75:12:0b:8f:49:91:81:e9:bb: 5a:3a:d7:b5:ae:de:13:c3:52:b2:8f:a8:a2:ca:44: 74:f4:c5:dc:db:17:4b:39:2d:08:37:d3:af:5b:e1: 87:24:70:83:ed:1a:19:70:6e:38:a9:a7:88:64:1f: 56:71:26:90:26:ce:a5:41:ef:86:c3:ec:75:72:9f: 6f:e4:64:6b:64:09:59:c6:65:c2:28:b4:8e:92:be: 90:73:ce:4e:08:be:8f:f8:cc:80:f9:9e:d3:ef:bb: ea:69:55:95:fa:30:5d:21:51:ae:cd:79:eb:02:bf: 1c:2d:33:e5:07:eb:78:88:e4:b1:76:a6:2e:be:c9: da:fa:26:53:b1:ce:3a:d0:ff:71:0c:91:ae:a2:38: 76:ad:b1:f7:dc:9e:63:f1:31:23:01:17:9f:d6:0d: 10:78:1c:16:4b:15:ee:c5:22:76:1e:31:cf:c5:c5: 1e:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:2F:D8:F1:F5:08:13:BA:FB:2F:66:E7:98:4D:B1:03:F0:E6:2A:0C X509v3 Authority Key Identifier: keyid:D6:15:AB:CB:A5:01:55:64:AD:E9:B4:73:D6:4F:1E:34:A0:BA:8D:4A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/3/D615ABCBA5015564ADE9B473D64F1E34A0BA8D4A.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/D615ABCBA5015564ADE9B473D64F1E34A0BA8D4A.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/3/D615ABCBA5015564ADE9B473D64F1E34A0BA8D4A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cc:10:26:d9:80:e8:b3:53:b5:55:97:f0:f0:ac:e9:1e:41:60: b2:32:30:c2:e6:70:3d:c4:a4:5b:db:f1:91:47:87:61:6c:a9: 4b:0f:39:63:78:42:7a:5b:43:f6:30:75:02:44:11:f3:94:84: 72:cb:26:a3:01:55:cd:e5:01:d5:d3:11:d0:40:95:08:f7:bf: d2:ff:c9:90:8b:55:7b:b0:35:6c:b5:3e:b0:6c:7a:66:03:89: 54:5b:db:26:34:4c:33:e6:04:b4:01:e0:c2:f7:0b:56:45:b9: 71:49:0c:71:d1:c0:aa:6f:0d:41:79:bf:14:9f:27:1d:1b:d9: 88:28:64:c7:0a:3a:9c:88:8c:6d:a0:5a:95:a5:19:a8:74:03: 58:e2:03:8c:ab:b6:59:1c:15:59:ac:20:27:68:87:83:64:ef: 90:80:d5:1b:cf:5d:66:67:2e:c4:7b:96:ac:50:b0:96:18:cc: 10:6b:13:57:89:dd:9a:d8:18:8d:8b:7f:80:e4:cc:12:5e:e4: 09:0d:88:3c:53:b3:ef:60:ea:13:50:af:eb:55:83:34:3f:9b: 41:af:c1:f1:1b:26:ae:f7:e5:a6:24:73:45:27:87:91:af:e2: 48:bb:8b:52:79:0f:70:77:15:d3:85:dd:46:ae:7a:ba:22:11: 96:10:6a:56 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUURGV1+BHD90YMVntUVYwGp6jl6IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDYxNUFCQ0JBNTAxNTU2NEFERTlCNDczRDY0RjFFMzRB MEJBOEQ0QTAeFw0yNTEwMjMxNDMwMTZaFw0yNTEwMjQxNDUwMTZaMDMxMTAvBgNV BAMTKDQ0MkZEOEYxRjUwODEzQkFGQjJGNjZFNzk4NERCMTAzRjBFNjJBMEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEbSYP8dk6KcHE0H0ne+R5Iiby 5+HZB+u60LHAXbbq+jtueezr/e6C/Hlk0yBZUAeLNm+RSYro6Sllh9Fs7obdvqan //DRiqks2bKjxJ4Jf3USC49JkYHpu1o617Wu3hPDUrKPqKLKRHT0xdzbF0s5LQg3 069b4YckcIPtGhlwbjipp4hkH1ZxJpAmzqVB74bD7HVyn2/kZGtkCVnGZcIotI6S vpBzzk4Ivo/4zID5ntPvu+ppVZX6MF0hUa7NeesCvxwtM+UH63iI5LF2pi6+ydr6 JlOxzjrQ/3EMka6iOHatsffcnmPxMSMBF5/WDRB4HBZLFe7FInYeMc/FxR6PAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQURC/Y8fUIE7r7L2bnmE2xA/DmKgwwHwYDVR0j BBgwFoAU1hWry6UBVWSt6bRz1k8eNKC6jUowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMTNmNjg1NjEtMGE3NC00Y2NhLWJmOGYtMTJmYWFhZmM4 ZWI4LzMvRDYxNUFCQ0JBNTAxNTU2NEFERTlCNDczRDY0RjFFMzRBMEJBOEQ0QS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC9ENjE1QUJDQkE1MDE1NTY0QURFOUI0NzNE NjRGMUUzNEEwQkE4RDRBLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzEzZjY4NTYxLTBhNzQtNGNjYS1iZjhmLTEyZmFhYWZjOGViOC8zL0Q2MTVBQkNC QTUwMTU1NjRBREU5QjQ3M0Q2NEYxRTM0QTBCQThENEEubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQDMECbZ gOizU7VVl/DwrOkeQWCyMjDC5nA9xKRb2/GRR4dhbKlLDzljeEJ6W0P2MHUCRBHz lIRyyyajAVXN5QHV0xHQQJUI97/S/8mQi1V7sDVstT6wbHpmA4lUW9smNEwz5gS0 AeDC9wtWRblxSQxx0cCqbw1Beb8UnycdG9mIKGTHCjqciIxtoFqVpRmodANY4gOM q7ZZHBVZrCAnaIeDZO+QgNUbz11mZy7Ee5asULCWGMwQaxNXid2a2BiNi3+A5MwS XuQJDYg8U7PvYOoTUK/rVYM0P5tBr8HxGyau9+WmJHNFJ4eRr+JIu4tSeQ9wdxXT hd1Grnq6IhGWEGpW -----END CERTIFICATE-----Generated at Fri Oct 24 04:33:56 2025 by rpki-client