$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/3/D615ABCBA5015564ADE9B473D64F1E34A0BA8D4A.mft File: D615ABCBA5015564ADE9B473D64F1E34A0BA8D4A.mft (raw, json) Hash identifier: K84VWQuVDqNzgDSpvxQbT4OEzCGy39LY5ZMZnjOW7KI= Subject key identifier: A3:54:DA:43:A5:18:8D:22:E5:F3:9F:41:DD:6B:06:C7:0E:49:39:CE Authority key identifier: D6:15:AB:CB:A5:01:55:64:AD:E9:B4:73:D6:4F:1E:34:A0:BA:8D:4A Certificate issuer: /CN=D615ABCBA5015564ADE9B473D64F1E34A0BA8D4A Certificate serial: 6672D2086357E0467FB2BB2BDEE32E8A46D9C14B Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/D615ABCBA5015564ADE9B473D64F1E34A0BA8D4A.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/3/D615ABCBA5015564ADE9B473D64F1E34A0BA8D4A.mft Manifest number: 01D1 Signing time: Thu 12 Mar 2026 20:48:50 +0000 Manifest this update: Thu 12 Mar 2026 20:43:50 +0000 Manifest next update: Sat 14 Mar 2026 00:21:50 +0000 Files and hashes: 1: D615ABCBA5015564ADE9B473D64F1E34A0BA8D4A.crl (hash: 5TRRp414jKkRvjLxA6PXJcYe+2t7DSxjq+bSOR5WHfQ=) 2: 326131343a373538303a3930323a3a2f34382d3438203d3e20323033383433.roa (hash: BFT8GbG7CSJ9YmzS1PjnMDrg1nwAcfXEJPEfuo5FzQk=) 3: 326131343a373538303a3930333a3a2f34382d3438203d3e203331383938.roa (hash: ypgUGD6Euz3HGS0A9GoVgCiVtLF78aI6ZX/YlUyvGd8=) 4: 326131343a373538303a3930313a3a2f34382d3438203d3e20323033383433.roa (hash: XxS9zprV7IX1JjrBQQ+JptkD2bW89WKl615fH9J1hzc=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/3/D615ABCBA5015564ADE9B473D64F1E34A0BA8D4A.crl rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/3/D615ABCBA5015564ADE9B473D64F1E34A0BA8D4A.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/D615ABCBA5015564ADE9B473D64F1E34A0BA8D4A.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 14 Mar 2026 00:00:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:72:d2:08:63:57:e0:46:7f:b2:bb:2b:de:e3:2e:8a:46:d9:c1:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D615ABCBA5015564ADE9B473D64F1E34A0BA8D4A Validity Not Before: Mar 12 20:43:50 2026 GMT Not After : Mar 14 00:21:50 2026 GMT Subject: CN=A354DA43A5188D22E5F39F41DD6B06C70E4939CE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:f4:e2:d1:e7:42:ed:ee:4b:e1:d1:39:0f:b2: c8:5c:e3:86:0b:72:e8:6b:ed:97:5b:cb:6c:72:3b: 10:bf:55:34:bb:2b:7e:95:a2:d4:f6:5d:ad:b6:31: 22:2d:f2:2f:e2:bf:e7:db:7f:f4:d4:b5:10:08:22: a3:61:19:67:48:48:a9:fa:98:55:40:56:e7:27:3d: 09:1c:8a:7f:31:4e:b1:9f:ac:f8:98:bd:72:7a:20: c1:91:14:48:84:09:0c:d1:9c:d7:fa:74:96:20:b4: 22:2c:42:fe:cd:94:42:bc:f7:ac:a4:97:17:c3:4c: ca:d0:fe:2a:5f:f6:0b:94:85:56:c4:d2:a2:98:55: 8c:fa:7d:00:fc:72:48:d9:1c:08:1e:e5:af:e4:4a: af:5b:93:a5:89:13:14:a4:49:ed:35:35:f6:d6:ec: f3:d1:d1:f1:5f:01:c9:01:9b:27:d0:3a:a1:19:db: 08:4c:b8:62:7b:60:43:d6:41:a4:fe:1d:eb:56:4e: 2a:f9:7f:52:9c:da:d0:b4:d8:f7:b1:2a:11:15:77: 42:27:a7:35:4b:b1:99:76:2a:c2:ec:33:c9:75:b2: c8:b7:cf:e9:23:d1:e4:c1:6e:70:41:cd:70:ef:4c: 99:59:1e:ce:7f:17:c5:2e:b1:9c:b9:e7:d7:e3:c7: 69:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:54:DA:43:A5:18:8D:22:E5:F3:9F:41:DD:6B:06:C7:0E:49:39:CE X509v3 Authority Key Identifier: keyid:D6:15:AB:CB:A5:01:55:64:AD:E9:B4:73:D6:4F:1E:34:A0:BA:8D:4A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/3/D615ABCBA5015564ADE9B473D64F1E34A0BA8D4A.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/D615ABCBA5015564ADE9B473D64F1E34A0BA8D4A.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/3/D615ABCBA5015564ADE9B473D64F1E34A0BA8D4A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ac:2b:87:fa:37:8f:b8:df:47:b9:da:26:89:0e:e0:08:c7:be: 7a:0c:7e:b0:16:3c:86:f7:ba:6e:c5:65:da:42:e1:20:93:1a: 32:a9:15:5d:11:3c:19:c0:0a:29:f2:24:16:f4:25:c5:84:3a: 14:42:a2:41:57:ca:ea:2a:ef:09:fa:d9:68:9d:df:34:af:c0: 4f:c1:f8:e9:10:d7:dd:54:a9:bc:67:32:fc:29:94:10:d8:79: 72:12:d8:4e:05:33:7d:92:c5:b3:c1:23:47:56:8a:dc:d1:3e: 2e:63:23:ca:86:cc:d0:d6:1d:a1:28:ac:dd:1b:ee:9f:d3:80: 12:f0:fd:ec:80:44:c2:ac:bf:94:45:cf:3a:f3:af:6a:8f:f5: 50:85:4d:98:1c:81:4e:76:d8:3d:87:bf:51:60:36:81:e7:9a: b4:6d:15:5d:07:b7:4b:50:be:de:b3:eb:0e:15:f0:c6:11:52: 5c:6b:d0:da:9d:85:01:07:40:15:62:37:43:d0:5d:2d:fd:31: 6e:8d:99:4a:78:21:03:d6:3d:00:9c:2a:e0:a3:7f:12:6f:2e: 0f:74:11:c9:b1:97:b7:5c:de:fd:51:71:a1:cf:7e:09:0e:a0: 70:fa:75:2d:f8:d3:d5:55:ea:5d:10:22:dd:4c:3d:1d:2a:2a: e8:22:5d:b7 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUZnLSCGNX4EZ/srsr3uMuikbZwUswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDYxNUFCQ0JBNTAxNTU2NEFERTlCNDczRDY0RjFFMzRB MEJBOEQ0QTAeFw0yNjAzMTIyMDQzNTBaFw0yNjAzMTQwMDIxNTBaMDMxMTAvBgNV BAMTKEEzNTREQTQzQTUxODhEMjJFNUYzOUY0MURENkIwNkM3MEU0OTM5Q0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCy9OLR50Lt7kvh0TkPsshc44YL cuhr7Zdby2xyOxC/VTS7K36VotT2Xa22MSIt8i/iv+fbf/TUtRAIIqNhGWdISKn6 mFVAVucnPQkcin8xTrGfrPiYvXJ6IMGRFEiECQzRnNf6dJYgtCIsQv7NlEK896yk lxfDTMrQ/ipf9guUhVbE0qKYVYz6fQD8ckjZHAge5a/kSq9bk6WJExSkSe01NfbW 7PPR0fFfAckBmyfQOqEZ2whMuGJ7YEPWQaT+HetWTir5f1Kc2tC02PexKhEVd0In pzVLsZl2KsLsM8l1ssi3z+kj0eTBbnBBzXDvTJlZHs5/F8UusZy559fjx2mlAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUo1TaQ6UYjSLl859B3WsGxw5JOc4wHwYDVR0j BBgwFoAU1hWry6UBVWSt6bRz1k8eNKC6jUowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMTNmNjg1NjEtMGE3NC00Y2NhLWJmOGYtMTJmYWFhZmM4 ZWI4LzMvRDYxNUFCQ0JBNTAxNTU2NEFERTlCNDczRDY0RjFFMzRBMEJBOEQ0QS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC9ENjE1QUJDQkE1MDE1NTY0QURFOUI0NzNE NjRGMUUzNEEwQkE4RDRBLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzEzZjY4NTYxLTBhNzQtNGNjYS1iZjhmLTEyZmFhYWZjOGViOC8zL0Q2MTVBQkNC QTUwMTU1NjRBREU5QjQ3M0Q2NEYxRTM0QTBCQThENEEubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCsK4f6 N4+430e52iaJDuAIx756DH6wFjyG97puxWXaQuEgkxoyqRVdETwZwAop8iQW9CXF hDoUQqJBV8rqKu8J+tlond80r8BPwfjpENfdVKm8ZzL8KZQQ2HlyEthOBTN9ksWz wSNHVorc0T4uYyPKhszQ1h2hKKzdG+6f04AS8P3sgETCrL+URc86869qj/VQhU2Y HIFOdtg9h79RYDaB55q0bRVdB7dLUL7es+sOFfDGEVJca9DanYUBB0AVYjdD0F0t /TFujZlKeCED1j0AnCrgo38Sby4PdBHJsZe3XN79UXGhz34JDqBw+nUt+NPVVepd ECLdTD0dKiroIl23 -----END CERTIFICATE-----Generated at Fri Mar 13 09:54:23 2026 by rpki-client