$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d9bd3888-9302-4b6f-a017-2b4bba5e57bb/2/315EC08E540BCBC870FEB38832274E048E2E1F80.mft File: 315EC08E540BCBC870FEB38832274E048E2E1F80.mft (raw, json) Hash identifier: SsQS7SIMg0yB2W2WQstRFaOat2QRxLsvr7tHkRaqMf8= Subject key identifier: 56:97:26:5E:5C:14:5A:5E:72:F2:08:5F:1E:C7:D1:A7:FE:93:84:EE Authority key identifier: 31:5E:C0:8E:54:0B:CB:C8:70:FE:B3:88:32:27:4E:04:8E:2E:1F:80 Certificate issuer: /CN=315EC08E540BCBC870FEB38832274E048E2E1F80 Certificate serial: 1D5FB6A4FF11BEBEB0DD15F7D1F4B4DE6197DE32 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/5/315EC08E540BCBC870FEB38832274E048E2E1F80.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d9bd3888-9302-4b6f-a017-2b4bba5e57bb/2/315EC08E540BCBC870FEB38832274E048E2E1F80.mft Manifest number: 01 Signing time: Sat 06 Jun 2026 03:19:39 +0000 Manifest this update: Sat 06 Jun 2026 03:14:39 +0000 Manifest next update: Sun 07 Jun 2026 03:33:39 +0000 Files and hashes: 1: 315EC08E540BCBC870FEB38832274E048E2E1F80.crl (hash: f+MQFr3XWkkEA8gDzlQxeIiKLkxzDwIBeUVxnwH3YIU=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/d9bd3888-9302-4b6f-a017-2b4bba5e57bb/2/315EC08E540BCBC870FEB38832274E048E2E1F80.crl rsync://rsync.paas.rpki.ripe.net/repository/d9bd3888-9302-4b6f-a017-2b4bba5e57bb/2/315EC08E540BCBC870FEB38832274E048E2E1F80.mft rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/5/315EC08E540BCBC870FEB38832274E048E2E1F80.cer rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/5/80838673ED291DC1ACFAE037E88F9C7A78B7127E.crl rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/5/80838673ED291DC1ACFAE037E88F9C7A78B7127E.mft rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/0/80838673ED291DC1ACFAE037E88F9C7A78B7127E.cer rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/0/0E70AE0ACD0BE83D2D458CA207B1D4FFA3C3E4EA.crl rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/0/0E70AE0ACD0BE83D2D458CA207B1D4FFA3C3E4EA.mft rsync://rpki.ripe.net/repository/DEFAULT/DnCuCs0L6D0tRYyiB7HU_6PD5Oo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Jun 2026 19:11:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:5f:b6:a4:ff:11:be:be:b0:dd:15:f7:d1:f4:b4:de:61:97:de:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=315EC08E540BCBC870FEB38832274E048E2E1F80 Validity Not Before: Jun 6 03:14:39 2026 GMT Not After : Jun 7 03:33:39 2026 GMT Subject: CN=5697265E5C145A5E72F2085F1EC7D1A7FE9384EE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:0e:43:02:56:15:d9:a6:87:24:f5:e0:fc:24: ae:be:86:bd:33:98:7f:ac:5c:d3:f3:f0:e5:da:b4: 07:c3:85:28:0e:78:be:34:e6:90:67:dc:85:2e:c0: 65:8a:cb:42:9e:63:78:f5:5e:c0:c5:17:36:a0:6f: b1:70:48:2f:b8:fa:2a:3b:17:41:a6:95:e8:d2:a4: cc:fb:3a:5a:bd:14:be:a4:30:71:20:a8:0f:1e:39: da:3c:71:03:35:ff:03:fe:ae:b1:48:81:8a:30:12: c4:d1:b0:eb:fd:14:47:37:80:10:70:20:e0:1d:fb: 78:f1:27:31:7a:50:9d:f6:04:70:67:5b:29:3b:f4: 56:c0:87:b5:49:bb:c2:31:29:39:a6:1c:98:36:a3: fa:62:90:2a:1a:b9:82:7f:6c:79:dc:f9:92:8d:72: 9d:e0:8b:b8:5b:ca:65:bf:ed:28:30:b1:01:b5:02: 5f:7c:d2:dd:81:bb:b4:1c:63:c1:2b:09:20:0f:97: 93:78:3c:08:9d:4e:e8:f1:cc:5b:30:68:f3:a7:c6: e1:24:6b:33:51:bf:94:e8:3b:91:ca:63:ce:a3:cd: 03:00:a9:06:43:17:2b:1e:e8:1b:db:b3:fc:5c:38: b6:e7:0b:72:bb:18:a9:b1:32:d6:c0:2d:4c:f6:fa: 70:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:97:26:5E:5C:14:5A:5E:72:F2:08:5F:1E:C7:D1:A7:FE:93:84:EE X509v3 Authority Key Identifier: keyid:31:5E:C0:8E:54:0B:CB:C8:70:FE:B3:88:32:27:4E:04:8E:2E:1F:80 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/d9bd3888-9302-4b6f-a017-2b4bba5e57bb/2/315EC08E540BCBC870FEB38832274E048E2E1F80.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/5/315EC08E540BCBC870FEB38832274E048E2E1F80.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d9bd3888-9302-4b6f-a017-2b4bba5e57bb/2/315EC08E540BCBC870FEB38832274E048E2E1F80.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:d0:b9:db:21:f3:da:70:d7:54:e6:82:e8:65:f3:73:5e:09: f5:e0:89:e9:e4:78:1d:38:b5:d6:10:89:d7:97:a4:a4:f2:7b: 8e:f3:6f:58:9c:b7:da:48:36:6e:97:99:69:dc:13:4f:c6:6d: e9:94:e4:73:7a:9f:b4:6e:2e:d5:98:ca:0d:4a:23:b2:fb:18: a8:3d:57:43:3e:e7:c7:66:7f:f4:54:3e:e9:d5:be:21:47:bf: 00:f7:90:cc:9e:3c:c3:81:cc:6c:d6:c7:4c:eb:65:8e:7b:c1: 16:f2:06:fd:8e:de:c0:e1:f8:a0:79:8d:a4:11:6f:e0:fb:61: c4:0b:0d:a8:d1:61:05:23:5d:97:32:07:95:71:eb:0c:b1:c4: ef:e9:01:c8:84:7b:bc:06:40:c8:72:14:d8:af:34:93:fa:05: fe:49:3d:d8:7b:4b:ab:c3:36:39:b1:cd:67:6d:f9:50:b6:cf: 1d:0b:e0:76:c8:f4:6e:02:2c:cb:6d:31:71:2c:48:61:39:bb: 24:48:d6:57:54:3b:87:7f:f6:1b:54:bb:c8:cd:a4:6e:fb:78: 75:73:5c:6f:33:91:93:b8:6c:0b:46:74:ea:93:3c:c0:b5:61: 59:9a:45:35:63:68:d1:db:83:d3:97:6d:2f:3c:6a:4e:3d:eb: ee:f1:24:16 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUHV+2pP8Rvr6w3RX30fS03mGX3jIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzE1RUMwOEU1NDBCQ0JDODcwRkVCMzg4MzIyNzRFMDQ4 RTJFMUY4MDAeFw0yNjA2MDYwMzE0MzlaFw0yNjA2MDcwMzMzMzlaMDMxMTAvBgNV BAMTKDU2OTcyNjVFNUMxNDVBNUU3MkYyMDg1RjFFQzdEMUE3RkU5Mzg0RUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3DkMCVhXZpock9eD8JK6+hr0z mH+sXNPz8OXatAfDhSgOeL405pBn3IUuwGWKy0KeY3j1XsDFFzagb7FwSC+4+io7 F0GmlejSpMz7Olq9FL6kMHEgqA8eOdo8cQM1/wP+rrFIgYowEsTRsOv9FEc3gBBw IOAd+3jxJzF6UJ32BHBnWyk79FbAh7VJu8IxKTmmHJg2o/pikCoauYJ/bHnc+ZKN cp3gi7hbymW/7SgwsQG1Al980t2Bu7QcY8ErCSAPl5N4PAidTujxzFswaPOnxuEk azNRv5ToO5HKY86jzQMAqQZDFyse6Bvbs/xcOLbnC3K7GKmxMtbALUz2+nCXAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUVpcmXlwUWl5y8ghfHsfRp/6ThO4wHwYDVR0j BBgwFoAUMV7AjlQLy8hw/rOIMidOBI4uH4AwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZDliZDM4ODgtOTMwMi00YjZmLWEwMTctMmI0YmJhNWU1 N2JiLzIvMzE1RUMwOEU1NDBCQ0JDODcwRkVCMzg4MzIyNzRFMDQ4RTJFMUY4MC5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9mNTMyYjllYi0yZmFlLTQ4 YTgtOTc5My0zM2VlYzA2N2NlMzkvNS8zMTVFQzA4RTU0MEJDQkM4NzBGRUIzODgz MjI3NEUwNDhFMkUxRjgwLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2Q5YmQzODg4LTkzMDItNGI2Zi1hMDE3LTJiNGJiYTVlNTdiYi8yLzMxNUVDMDhF NTQwQkNCQzg3MEZFQjM4ODMyMjc0RTA0OEUyRTFGODAubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAa0Lnb IfPacNdU5oLoZfNzXgn14Inp5HgdOLXWEInXl6Sk8nuO829YnLfaSDZul5lp3BNP xm3plORzep+0bi7VmMoNSiOy+xioPVdDPufHZn/0VD7p1b4hR78A95DMnjzDgcxs 1sdM62WOe8EW8gb9jt7A4figeY2kEW/g+2HECw2o0WEFI12XMgeVcesMscTv6QHI hHu8BkDIchTYrzST+gX+ST3Ye0urwzY5sc1nbflQts8dC+B2yPRuAizLbTFxLEhh ObskSNZXVDuHf/YbVLvIzaRu+3h1c1xvM5GTuGwLRnTqkzzAtWFZmkU1Y2jR24PT l20vPGpOPevu8SQW -----END CERTIFICATE-----Generated at Sat Jun 6 12:03:56 2026 by rpki-client