$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b6746901-23d3-4301-b28d-8b0982b06c08/1/15BCD75E02E085EB08A3D2F22C872972154D76C5.mft File: 15BCD75E02E085EB08A3D2F22C872972154D76C5.mft (raw, json) Hash identifier: cZuDRLWPJek4D/LH3O6DCuUjSfinFAthuC5tGJd5LGo= Subject key identifier: 81:34:67:47:E0:B6:DA:AE:94:F3:57:DA:B6:65:40:1F:0D:97:E2:9C Authority key identifier: 15:BC:D7:5E:02:E0:85:EB:08:A3:D2:F2:2C:87:29:72:15:4D:76:C5 Certificate issuer: /CN=15BCD75E02E085EB08A3D2F22C872972154D76C5 Certificate serial: 2B5E877624830428FB532EA64581F31A738B030C Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/15BCD75E02E085EB08A3D2F22C872972154D76C5.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b6746901-23d3-4301-b28d-8b0982b06c08/1/15BCD75E02E085EB08A3D2F22C872972154D76C5.mft Manifest number: F3 Signing time: Sun 07 Sep 2025 02:41:01 +0000 Manifest this update: Sun 07 Sep 2025 02:36:01 +0000 Manifest next update: Mon 08 Sep 2025 03:22:01 +0000 Files and hashes: 1: 15BCD75E02E085EB08A3D2F22C872972154D76C5.crl (hash: icgpOZMuQ8ypp+JGkN3dkIXFBvz5GMFQ/2vqQYaEI/Y=) 2: 326131343a373538313a396662303a3a2f34342d3434203d3e20323133343330.roa (hash: 7syqL2b6B4hFc1tTh/9QPvKN2SjHSufNn4c9hT7wZns=) 3: 326131343a373538313a396663303a3a2f34342d3434203d3e20313338393937.roa (hash: MP3BXH+cEdg2jDul1eXBObK+VY5O3nkvLjmhV1shnog=) 4: 326131343a373538313a396661303a3a2f34342d3434203d3e20323133343330.roa (hash: oAF6XMqIQIjZqny73zZ9bZTjumil+o5WHhatNbG2YqU=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/b6746901-23d3-4301-b28d-8b0982b06c08/1/15BCD75E02E085EB08A3D2F22C872972154D76C5.crl rsync://rsync.paas.rpki.ripe.net/repository/b6746901-23d3-4301-b28d-8b0982b06c08/1/15BCD75E02E085EB08A3D2F22C872972154D76C5.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/15BCD75E02E085EB08A3D2F22C872972154D76C5.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Sep 2025 13:22:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:5e:87:76:24:83:04:28:fb:53:2e:a6:45:81:f3:1a:73:8b:03:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=15BCD75E02E085EB08A3D2F22C872972154D76C5 Validity Not Before: Sep 7 02:36:01 2025 GMT Not After : Sep 8 03:22:01 2025 GMT Subject: CN=81346747E0B6DAAE94F357DAB665401F0D97E29C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:56:ff:e1:38:2b:51:4a:78:09:5d:bd:1e:01: 31:44:7b:fd:6f:d7:da:3f:bd:7e:85:77:94:0f:07: b1:d5:7b:8d:21:f3:59:e7:c0:5d:7d:79:c4:67:a5: d9:c2:3b:7a:be:ae:2b:96:f5:60:92:85:9e:7e:4e: 9f:86:61:f1:7b:71:f9:d3:67:d7:f5:39:64:b4:2c: 82:f5:23:25:c1:34:d1:4e:82:0c:09:d0:16:97:26: f8:36:c3:e1:6c:7e:fd:f2:c0:4a:4c:f0:d8:58:48: 0f:c6:39:48:7c:ba:61:f9:fd:49:76:87:91:7d:00: 0b:c3:3b:e0:92:c3:73:ff:60:20:81:00:a5:5c:86: a4:96:dc:e8:78:79:da:01:78:09:12:90:e7:aa:ab: c9:e4:01:90:99:b3:ad:ca:5f:d9:27:83:28:d1:5a: 78:0e:2b:ea:74:41:c5:7d:a6:71:32:e3:a1:20:ee: 61:df:82:7c:74:74:6b:a0:76:a4:09:75:50:03:13: e0:14:fd:e7:15:2e:32:0e:83:62:0b:b4:1a:39:34: 50:dc:2d:8f:3e:dc:fa:0a:86:f5:bc:67:ea:42:08: 38:1e:6e:f4:2a:4d:68:bb:28:e3:23:a9:6d:ed:28: ca:38:8d:46:05:a1:c6:a6:47:c0:fe:b4:33:43:27: 7a:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:34:67:47:E0:B6:DA:AE:94:F3:57:DA:B6:65:40:1F:0D:97:E2:9C X509v3 Authority Key Identifier: keyid:15:BC:D7:5E:02:E0:85:EB:08:A3:D2:F2:2C:87:29:72:15:4D:76:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/b6746901-23d3-4301-b28d-8b0982b06c08/1/15BCD75E02E085EB08A3D2F22C872972154D76C5.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/15BCD75E02E085EB08A3D2F22C872972154D76C5.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b6746901-23d3-4301-b28d-8b0982b06c08/1/15BCD75E02E085EB08A3D2F22C872972154D76C5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:9e:a9:59:90:6c:4d:bb:68:65:06:d9:c4:17:5a:f7:47:4c: 25:64:bf:ac:70:d2:b0:9d:92:95:a0:14:fc:f0:91:3f:aa:19: cb:cf:83:1a:65:9d:e1:81:73:bf:57:13:ec:c2:6b:e3:dd:a3: b0:59:4f:f7:e0:a7:12:b3:9b:1e:00:51:7e:a3:4e:34:24:6b: b0:dd:11:7b:ca:e6:a9:58:36:50:63:d6:44:ef:53:31:30:9d: eb:a1:e7:c6:eb:a2:4c:6b:d0:36:8f:1e:93:fb:13:25:d1:e2: 18:a1:c2:53:f4:30:37:e9:87:81:29:b7:4a:9d:26:6a:76:41: c9:64:26:b1:44:c5:76:9c:d0:af:25:a1:9c:67:2f:65:d6:7a: b9:ed:f7:38:a9:22:f5:13:13:44:32:2d:02:2a:5f:0c:95:d9: 96:67:4c:81:23:a6:82:a5:1a:3b:72:e8:01:db:47:13:3f:4e: 85:71:2b:9c:0d:88:1e:49:6f:1c:c4:64:2c:bb:d9:80:69:bf: b3:48:c6:c7:6a:08:9d:50:fc:4b:8d:12:35:c0:a8:79:ed:ed: 6c:a1:9e:a1:c6:44:f3:78:bd:dd:85:98:00:c4:de:cb:1f:9e: 08:65:48:83:c5:d6:e9:aa:52:dc:58:f6:c5:c0:4f:bb:be:a2: b1:bd:2d:81 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUK16HdiSDBCj7Uy6mRYHzGnOLAwwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTVCQ0Q3NUUwMkUwODVFQjA4QTNEMkYyMkM4NzI5NzIx NTRENzZDNTAeFw0yNTA5MDcwMjM2MDFaFw0yNTA5MDgwMzIyMDFaMDMxMTAvBgNV BAMTKDgxMzQ2NzQ3RTBCNkRBQUU5NEYzNTdEQUI2NjU0MDFGMEQ5N0UyOUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoVv/hOCtRSngJXb0eATFEe/1v 19o/vX6Fd5QPB7HVe40h81nnwF19ecRnpdnCO3q+riuW9WCShZ5+Tp+GYfF7cfnT Z9f1OWS0LIL1IyXBNNFOggwJ0BaXJvg2w+Fsfv3ywEpM8NhYSA/GOUh8umH5/Ul2 h5F9AAvDO+CSw3P/YCCBAKVchqSW3Oh4edoBeAkSkOeqq8nkAZCZs63KX9kngyjR WngOK+p0QcV9pnEy46Eg7mHfgnx0dGugdqQJdVADE+AU/ecVLjIOg2ILtBo5NFDc LY8+3PoKhvW8Z+pCCDgebvQqTWi7KOMjqW3tKMo4jUYFocamR8D+tDNDJ3ovAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUgTRnR+C22q6U81fatmVAHw2X4pwwHwYDVR0j BBgwFoAUFbzXXgLghesIo9LyLIcpchVNdsUwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYjY3NDY5MDEtMjNkMy00MzAxLWIyOGQtOGIwOTgyYjA2 YzA4LzEvMTVCQ0Q3NUUwMkUwODVFQjA4QTNEMkYyMkM4NzI5NzIxNTRENzZDNS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC8xNUJDRDc1RTAyRTA4NUVCMDhBM0QyRjIy Qzg3Mjk3MjE1NEQ3NkM1LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2I2NzQ2OTAxLTIzZDMtNDMwMS1iMjhkLThiMDk4MmIwNmMwOC8xLzE1QkNENzVF MDJFMDg1RUIwOEEzRDJGMjJDODcyOTcyMTU0RDc2QzUubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBcnqlZ kGxNu2hlBtnEF1r3R0wlZL+scNKwnZKVoBT88JE/qhnLz4MaZZ3hgXO/VxPswmvj 3aOwWU/34KcSs5seAFF+o040JGuw3RF7yuapWDZQY9ZE71MxMJ3roefG66JMa9A2 jx6T+xMl0eIYocJT9DA36YeBKbdKnSZqdkHJZCaxRMV2nNCvJaGcZy9l1nq57fc4 qSL1ExNEMi0CKl8MldmWZ0yBI6aCpRo7cugB20cTP06FcSucDYgeSW8cxGQsu9mA ab+zSMbHagidUPxLjRI1wKh57e1soZ6hxkTzeL3dhZgAxN7LH54IZUiDxdbpqlLc WPbFwE+7vqKxvS2B -----END CERTIFICATE-----Generated at Sun Sep 7 06:43:08 2025 by rpki-client