$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b6746901-23d3-4301-b28d-8b0982b06c08/1/15BCD75E02E085EB08A3D2F22C872972154D76C5.mft File: 15BCD75E02E085EB08A3D2F22C872972154D76C5.mft (raw, json) Hash identifier: CPt/83MHXW/VF8DUfg2amUkgCNZHrgzuquMFosYL154= Subject key identifier: BD:37:AA:0F:22:28:0A:40:84:80:D4:EE:A9:2A:40:E5:1A:B9:D6:6C Authority key identifier: 15:BC:D7:5E:02:E0:85:EB:08:A3:D2:F2:2C:87:29:72:15:4D:76:C5 Certificate issuer: /CN=15BCD75E02E085EB08A3D2F22C872972154D76C5 Certificate serial: 4DECA024195D9B4254B8FF306C2906C21B19FD25 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/15BCD75E02E085EB08A3D2F22C872972154D76C5.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b6746901-23d3-4301-b28d-8b0982b06c08/1/15BCD75E02E085EB08A3D2F22C872972154D76C5.mft Manifest number: 85 Signing time: Fri 06 Jun 2025 13:13:36 +0000 Manifest this update: Fri 06 Jun 2025 13:08:36 +0000 Manifest next update: Sat 07 Jun 2025 16:57:36 +0000 Files and hashes: 1: 326131343a373538313a396663303a3a2f34342d3434203d3e20323133343330.roa (hash: MUq020p8NbAnolAB9zdSK3Cpj1AnGomUMMut2k1LbJE=) 2: 326131343a373538313a396661303a3a2f34342d3434203d3e20323133343330.roa (hash: oAF6XMqIQIjZqny73zZ9bZTjumil+o5WHhatNbG2YqU=) 3: 15BCD75E02E085EB08A3D2F22C872972154D76C5.crl (hash: JGYG5J1QrGBlOhdsmXV4BsTyCZMTneZBm54b/o4yDCw=) 4: 326131343a373538313a396662303a3a2f34342d3434203d3e20323133343330.roa (hash: 7syqL2b6B4hFc1tTh/9QPvKN2SjHSufNn4c9hT7wZns=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/b6746901-23d3-4301-b28d-8b0982b06c08/1/15BCD75E02E085EB08A3D2F22C872972154D76C5.crl rsync://rsync.paas.rpki.ripe.net/repository/b6746901-23d3-4301-b28d-8b0982b06c08/1/15BCD75E02E085EB08A3D2F22C872972154D76C5.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/15BCD75E02E085EB08A3D2F22C872972154D76C5.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 07 Jun 2025 15:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:ec:a0:24:19:5d:9b:42:54:b8:ff:30:6c:29:06:c2:1b:19:fd:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=15BCD75E02E085EB08A3D2F22C872972154D76C5 Validity Not Before: Jun 6 13:08:36 2025 GMT Not After : Jun 7 16:57:36 2025 GMT Subject: CN=BD37AA0F22280A408480D4EEA92A40E51AB9D66C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:c9:82:38:64:ff:78:9e:5d:e1:20:d4:4d:ae: 22:db:b9:91:14:24:fc:34:8a:f4:0a:90:81:1c:cd: 6e:44:d0:7e:02:b2:2e:78:86:ce:01:cf:41:58:1c: 30:fe:5d:83:18:d5:30:0d:79:83:de:eb:af:97:65: 44:6a:da:41:ef:04:65:6c:2e:c6:25:f0:e2:07:fa: ae:17:38:c2:ef:c2:59:c5:37:05:19:1b:b0:21:81: 0c:ee:04:49:42:6c:be:41:bc:6b:f3:9d:4f:99:c4: 5d:d4:71:3e:c7:29:a6:07:d5:b3:7c:58:8c:22:83: 90:9c:f0:29:14:60:ea:3a:a0:29:89:48:ea:7f:ae: aa:b0:84:56:c3:65:98:fa:a4:8f:70:73:b1:28:a8: a7:84:8d:c4:2a:44:99:2c:52:5b:e0:2e:83:fb:ed: dd:05:36:f6:30:3e:49:37:c1:0e:d5:06:3c:9c:ff: 20:09:cb:37:01:2b:67:c3:6e:f2:9e:74:dc:36:87: ea:93:19:1f:96:b7:77:cf:27:ea:80:b0:70:5f:a2: c3:2a:70:e5:5e:e0:e6:2c:de:ca:ab:e7:4e:97:41: 53:9b:38:50:5f:db:69:cc:b8:af:6c:fd:12:bb:9e: 73:85:da:22:00:d6:0b:60:25:86:09:c0:3c:ef:98: 60:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:37:AA:0F:22:28:0A:40:84:80:D4:EE:A9:2A:40:E5:1A:B9:D6:6C X509v3 Authority Key Identifier: keyid:15:BC:D7:5E:02:E0:85:EB:08:A3:D2:F2:2C:87:29:72:15:4D:76:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/b6746901-23d3-4301-b28d-8b0982b06c08/1/15BCD75E02E085EB08A3D2F22C872972154D76C5.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/15BCD75E02E085EB08A3D2F22C872972154D76C5.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b6746901-23d3-4301-b28d-8b0982b06c08/1/15BCD75E02E085EB08A3D2F22C872972154D76C5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:6d:8e:ec:fd:a9:7b:4d:9e:c2:01:57:20:94:99:18:83:fb: 26:80:ce:38:7d:bd:5a:24:fb:3e:97:7c:35:ee:81:cd:6a:bb: d2:45:9b:04:98:4f:8c:e5:88:46:6c:25:1c:7b:19:fd:56:6e: ce:23:44:50:55:05:28:ad:23:73:57:7b:94:2b:d5:67:9f:96: 86:3c:dc:0e:24:74:fa:89:30:d1:65:3b:a6:1e:21:2c:89:19: 7f:c4:dd:b1:85:19:2b:df:96:0e:01:d8:70:8a:47:16:e4:1d: 66:89:98:92:02:6b:f2:39:65:ac:2a:92:9e:eb:91:4a:83:f9: d4:f3:7a:f8:14:0b:ed:28:e8:10:0e:ce:da:c3:48:d3:3b:96: 37:0e:a6:fe:1a:1b:2b:a7:4a:8e:2d:70:47:4c:42:9c:d4:7b: 9b:b8:54:82:9b:fd:36:c7:14:55:cf:2e:9d:af:a0:b6:79:71: 73:66:7c:80:d1:ad:d1:b5:f8:02:38:5a:0c:0b:fa:9d:38:ed: 61:09:c4:14:d7:c8:05:45:60:b4:e3:c2:bf:94:39:2f:68:17: ba:2b:b0:f1:4b:f4:ca:6b:c6:ad:a4:da:0c:d2:ec:98:0e:2c: 3b:0a:fd:1a:59:51:44:cb:12:51:f2:8d:69:2e:d4:70:b9:8d: 0d:1f:d9:fe -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUTeygJBldm0JUuP8wbCkGwhsZ/SUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTVCQ0Q3NUUwMkUwODVFQjA4QTNEMkYyMkM4NzI5NzIx NTRENzZDNTAeFw0yNTA2MDYxMzA4MzZaFw0yNTA2MDcxNjU3MzZaMDMxMTAvBgNV BAMTKEJEMzdBQTBGMjIyODBBNDA4NDgwRDRFRUE5MkE0MEU1MUFCOUQ2NkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyyYI4ZP94nl3hINRNriLbuZEU JPw0ivQKkIEczW5E0H4Csi54hs4Bz0FYHDD+XYMY1TANeYPe66+XZURq2kHvBGVs LsYl8OIH+q4XOMLvwlnFNwUZG7AhgQzuBElCbL5BvGvznU+ZxF3UcT7HKaYH1bN8 WIwig5Cc8CkUYOo6oCmJSOp/rqqwhFbDZZj6pI9wc7EoqKeEjcQqRJksUlvgLoP7 7d0FNvYwPkk3wQ7VBjyc/yAJyzcBK2fDbvKedNw2h+qTGR+Wt3fPJ+qAsHBfosMq cOVe4OYs3sqr506XQVObOFBf22nMuK9s/RK7nnOF2iIA1gtgJYYJwDzvmGCfAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUvTeqDyIoCkCEgNTuqSpA5Rq51mwwHwYDVR0j BBgwFoAUFbzXXgLghesIo9LyLIcpchVNdsUwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYjY3NDY5MDEtMjNkMy00MzAxLWIyOGQtOGIwOTgyYjA2 YzA4LzEvMTVCQ0Q3NUUwMkUwODVFQjA4QTNEMkYyMkM4NzI5NzIxNTRENzZDNS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC8xNUJDRDc1RTAyRTA4NUVCMDhBM0QyRjIy Qzg3Mjk3MjE1NEQ3NkM1LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2I2NzQ2OTAxLTIzZDMtNDMwMS1iMjhkLThiMDk4MmIwNmMwOC8xLzE1QkNENzVF MDJFMDg1RUIwOEEzRDJGMjJDODcyOTcyMTU0RDc2QzUubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCHbY7s /al7TZ7CAVcglJkYg/smgM44fb1aJPs+l3w17oHNarvSRZsEmE+M5YhGbCUcexn9 Vm7OI0RQVQUorSNzV3uUK9Vnn5aGPNwOJHT6iTDRZTumHiEsiRl/xN2xhRkr35YO AdhwikcW5B1miZiSAmvyOWWsKpKe65FKg/nU83r4FAvtKOgQDs7aw0jTO5Y3Dqb+ Ghsrp0qOLXBHTEKc1HubuFSCm/02xxRVzy6dr6C2eXFzZnyA0a3RtfgCOFoMC/qd OO1hCcQU18gFRWC048K/lDkvaBe6K7DxS/TKa8atpNoM0uyYDiw7Cv0aWVFEyxJR 8o1pLtRwuY0NH9n+ -----END CERTIFICATE-----Generated at Fri Jun 6 22:43:11 2025 by rpki-client