$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/3/D615ABCBA5015564ADE9B473D64F1E34A0BA8D4A.mft File: D615ABCBA5015564ADE9B473D64F1E34A0BA8D4A.mft (raw, json) Hash identifier: FqN+5NjsdxbQPJW2ScTEnrh1sxAl/UsZ1/XaZ+bIkto= Subject key identifier: 6D:CA:14:E3:86:D3:29:43:8A:FB:A8:B8:93:BF:6E:D3:A2:0E:42:1D Authority key identifier: D6:15:AB:CB:A5:01:55:64:AD:E9:B4:73:D6:4F:1E:34:A0:BA:8D:4A Certificate issuer: /CN=D615ABCBA5015564ADE9B473D64F1E34A0BA8D4A Certificate serial: 34337A5292E3895CF2332A7FCE817ADCE46F4C5F Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/D615ABCBA5015564ADE9B473D64F1E34A0BA8D4A.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/3/D615ABCBA5015564ADE9B473D64F1E34A0BA8D4A.mft Manifest number: AA Signing time: Mon 04 Aug 2025 02:09:01 +0000 Manifest this update: Mon 04 Aug 2025 02:04:01 +0000 Manifest next update: Tue 05 Aug 2025 05:39:01 +0000 Files and hashes: 1: 326131343a373538303a3930323a3a2f34382d3438203d3e20323033383433.roa (hash: BFT8GbG7CSJ9YmzS1PjnMDrg1nwAcfXEJPEfuo5FzQk=) 2: 326131343a373538303a3930313a3a2f34382d3438203d3e20323033383433.roa (hash: XxS9zprV7IX1JjrBQQ+JptkD2bW89WKl615fH9J1hzc=) 3: 326131343a373538303a3930333a3a2f34382d3438203d3e203331383938.roa (hash: ypgUGD6Euz3HGS0A9GoVgCiVtLF78aI6ZX/YlUyvGd8=) 4: D615ABCBA5015564ADE9B473D64F1E34A0BA8D4A.crl (hash: a9kEGUDke4nJOw1drudstuuM8x4pq1nnHjkgPWsF3Wk=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/3/D615ABCBA5015564ADE9B473D64F1E34A0BA8D4A.crl rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/3/D615ABCBA5015564ADE9B473D64F1E34A0BA8D4A.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/D615ABCBA5015564ADE9B473D64F1E34A0BA8D4A.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 05 Aug 2025 03:52:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:33:7a:52:92:e3:89:5c:f2:33:2a:7f:ce:81:7a:dc:e4:6f:4c:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D615ABCBA5015564ADE9B473D64F1E34A0BA8D4A Validity Not Before: Aug 4 02:04:01 2025 GMT Not After : Aug 5 05:39:01 2025 GMT Subject: CN=6DCA14E386D329438AFBA8B893BF6ED3A20E421D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:63:25:f8:f0:d2:a3:80:32:9c:e9:98:ae:10: 12:de:41:67:bf:e2:52:f6:db:89:8a:44:7b:90:8a: 57:3d:d2:13:92:4a:d9:86:8e:da:9c:0d:bf:f8:cb: fd:dc:ee:a2:71:97:c2:22:0c:c4:00:90:ab:fb:a4: 0c:4e:49:63:a0:42:28:d7:73:9c:3b:48:87:e3:4b: 1f:a0:69:a9:25:69:e0:ba:c7:cb:73:d6:34:8f:52: bf:d2:1b:b5:ff:d8:ce:60:86:c5:04:3a:41:bf:b5: 4b:f3:35:fe:3b:d6:e3:7d:84:f1:27:4f:02:ac:70: f4:d9:08:2b:17:1b:85:88:a7:47:de:8e:73:e8:53: 18:15:88:aa:de:60:39:b3:81:a0:79:90:3c:14:48: d0:5e:81:51:79:70:ab:66:a5:3b:9a:d1:f2:61:1b: 99:6d:67:ea:6a:d8:84:fb:fb:ab:5b:bf:5e:45:33: 96:f7:89:62:93:86:90:e4:cc:18:5c:b9:63:f0:24: a1:12:ed:15:9f:76:bf:1d:eb:7d:94:e8:71:a3:a0: c5:51:16:39:fd:bd:b7:cc:5f:07:05:e9:4c:60:ed: ca:33:10:d9:59:e3:0e:18:a1:86:b1:fb:a2:5e:3f: 20:7a:06:b7:38:75:e6:6c:10:f1:21:1a:65:5a:2d: 0d:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:CA:14:E3:86:D3:29:43:8A:FB:A8:B8:93:BF:6E:D3:A2:0E:42:1D X509v3 Authority Key Identifier: keyid:D6:15:AB:CB:A5:01:55:64:AD:E9:B4:73:D6:4F:1E:34:A0:BA:8D:4A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/3/D615ABCBA5015564ADE9B473D64F1E34A0BA8D4A.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/D615ABCBA5015564ADE9B473D64F1E34A0BA8D4A.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/3/D615ABCBA5015564ADE9B473D64F1E34A0BA8D4A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 10:f1:0f:eb:7d:04:79:fd:ac:73:b1:6a:06:96:6c:ff:d7:8c: a4:d6:9d:f2:d2:2f:b7:09:ec:b0:ef:ba:4e:71:87:19:16:11: 32:9c:e2:37:66:ae:72:79:13:c2:80:1b:70:ec:60:75:31:2b: d1:d5:11:86:ae:c2:5a:4d:77:cd:b8:db:4d:59:3c:40:c0:75: 95:25:e2:1c:f0:ad:18:9c:06:29:06:7d:18:74:19:2d:92:11: 47:72:23:97:b4:0e:5d:31:da:e1:8f:e9:f8:70:ba:30:85:01: f7:59:6f:9d:ad:9d:88:3f:4b:6d:e4:a4:e2:f0:78:1c:77:7a: 6a:ab:20:95:d7:54:69:bf:b9:32:e4:61:c2:a5:62:10:c0:41: ca:e4:14:f1:fb:1b:9a:de:c0:e2:da:c8:46:d0:49:95:41:ef: b4:6c:c5:d0:68:84:93:cb:ca:fa:32:0d:be:4a:0c:e8:df:15: 0d:41:2b:cb:26:bb:c3:f7:6f:c8:d5:d5:74:cd:8f:75:f5:4c: d6:21:af:53:e6:ae:f2:3c:f0:1f:54:38:da:5e:2d:8b:cc:86: 9a:d4:05:6c:8a:56:f4:a6:4f:8b:75:cf:60:1d:f4:94:00:6d: f5:93:23:d4:27:7b:ed:a0:03:01:de:d1:17:b2:f9:29:61:45: 64:53:7a:c6 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUNDN6UpLjiVzyMyp/zoF63ORvTF8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDYxNUFCQ0JBNTAxNTU2NEFERTlCNDczRDY0RjFFMzRB MEJBOEQ0QTAeFw0yNTA4MDQwMjA0MDFaFw0yNTA4MDUwNTM5MDFaMDMxMTAvBgNV BAMTKDZEQ0ExNEUzODZEMzI5NDM4QUZCQThCODkzQkY2RUQzQTIwRTQyMUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjYyX48NKjgDKc6ZiuEBLeQWe/ 4lL224mKRHuQilc90hOSStmGjtqcDb/4y/3c7qJxl8IiDMQAkKv7pAxOSWOgQijX c5w7SIfjSx+gaaklaeC6x8tz1jSPUr/SG7X/2M5ghsUEOkG/tUvzNf471uN9hPEn TwKscPTZCCsXG4WIp0fejnPoUxgViKreYDmzgaB5kDwUSNBegVF5cKtmpTua0fJh G5ltZ+pq2IT7+6tbv15FM5b3iWKThpDkzBhcuWPwJKES7RWfdr8d632U6HGjoMVR Fjn9vbfMXwcF6Uxg7cozENlZ4w4YoYax+6JePyB6Brc4deZsEPEhGmVaLQ1HAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUbcoU44bTKUOK+6i4k79u06IOQh0wHwYDVR0j BBgwFoAU1hWry6UBVWSt6bRz1k8eNKC6jUowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMTNmNjg1NjEtMGE3NC00Y2NhLWJmOGYtMTJmYWFhZmM4 ZWI4LzMvRDYxNUFCQ0JBNTAxNTU2NEFERTlCNDczRDY0RjFFMzRBMEJBOEQ0QS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC9ENjE1QUJDQkE1MDE1NTY0QURFOUI0NzNE NjRGMUUzNEEwQkE4RDRBLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzEzZjY4NTYxLTBhNzQtNGNjYS1iZjhmLTEyZmFhYWZjOGViOC8zL0Q2MTVBQkNC QTUwMTU1NjRBREU5QjQ3M0Q2NEYxRTM0QTBCQThENEEubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAQ8Q/r fQR5/axzsWoGlmz/14yk1p3y0i+3Ceyw77pOcYcZFhEynOI3Zq5yeRPCgBtw7GB1 MSvR1RGGrsJaTXfNuNtNWTxAwHWVJeIc8K0YnAYpBn0YdBktkhFHciOXtA5dMdrh j+n4cLowhQH3WW+drZ2IP0tt5KTi8Hgcd3pqqyCV11Rpv7ky5GHCpWIQwEHK5BTx +xua3sDi2shG0EmVQe+0bMXQaISTy8r6Mg2+Sgzo3xUNQSvLJrvD92/I1dV0zY91 9UzWIa9T5q7yPPAfVDjaXi2LzIaa1AVsilb0pk+Ldc9gHfSUAG31kyPUJ3vtoAMB 3tEXsvkpYUVkU3rG -----END CERTIFICATE-----Generated at Mon Aug 4 18:12:26 2025 by rpki-client