$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/3/D615ABCBA5015564ADE9B473D64F1E34A0BA8D4A.mft File: D615ABCBA5015564ADE9B473D64F1E34A0BA8D4A.mft (raw, json) Hash identifier: 16l1Mgoy8Yc3gpvju5vdbwQwdAWfe2t4FQmWrBM8vV4= Subject key identifier: 53:43:03:82:02:AA:17:C1:90:73:8B:4D:8B:52:F7:50:26:AC:94:AD Authority key identifier: D6:15:AB:CB:A5:01:55:64:AD:E9:B4:73:D6:4F:1E:34:A0:BA:8D:4A Certificate issuer: /CN=D615ABCBA5015564ADE9B473D64F1E34A0BA8D4A Certificate serial: 45EDDA13C37C8864C8B7B612942DA460B4918F64 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/D615ABCBA5015564ADE9B473D64F1E34A0BA8D4A.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/3/D615ABCBA5015564ADE9B473D64F1E34A0BA8D4A.mft Manifest number: 62 Signing time: Sun 15 Jun 2025 06:49:57 +0000 Manifest this update: Sun 15 Jun 2025 06:44:57 +0000 Manifest next update: Mon 16 Jun 2025 09:21:57 +0000 Files and hashes: 1: 326131343a373538303a3930313a3a2f34382d3438203d3e20323033383433.roa (hash: XxS9zprV7IX1JjrBQQ+JptkD2bW89WKl615fH9J1hzc=) 2: D615ABCBA5015564ADE9B473D64F1E34A0BA8D4A.crl (hash: SdUO7b9cRet7+aPDSLKPaf/Bhub9XwWniDtzIzfXNoM=) 3: 326131343a373538303a3930333a3a2f34382d3438203d3e203331383938.roa (hash: ypgUGD6Euz3HGS0A9GoVgCiVtLF78aI6ZX/YlUyvGd8=) 4: 326131343a373538303a3930323a3a2f34382d3438203d3e20323033383433.roa (hash: BFT8GbG7CSJ9YmzS1PjnMDrg1nwAcfXEJPEfuo5FzQk=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/3/D615ABCBA5015564ADE9B473D64F1E34A0BA8D4A.crl rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/3/D615ABCBA5015564ADE9B473D64F1E34A0BA8D4A.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/D615ABCBA5015564ADE9B473D64F1E34A0BA8D4A.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 16 Jun 2025 09:21:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:ed:da:13:c3:7c:88:64:c8:b7:b6:12:94:2d:a4:60:b4:91:8f:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D615ABCBA5015564ADE9B473D64F1E34A0BA8D4A Validity Not Before: Jun 15 06:44:57 2025 GMT Not After : Jun 16 09:21:57 2025 GMT Subject: CN=5343038202AA17C190738B4D8B52F75026AC94AD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:07:9a:91:15:b2:49:18:6c:08:85:8f:3f:0a: 7e:9f:64:0d:5e:ba:21:07:bd:88:ee:57:ab:b4:6c: eb:0b:6e:00:87:cf:cf:d2:83:94:c7:4a:1f:5f:3c: 05:f3:7f:fb:75:48:a0:3c:b8:1e:87:dd:a9:0b:8b: 1c:6c:7e:66:dc:9b:a7:25:b8:09:de:3e:4e:94:9f: e4:e4:e7:1e:c9:d5:82:f8:00:82:03:e4:a6:a0:63: 34:40:b0:25:4b:d7:f5:22:0c:59:cd:54:b0:16:4b: 31:f7:23:7b:80:db:63:8c:0a:56:4c:0c:e5:e0:01: 7b:dd:de:db:f7:87:ae:b3:de:ec:5b:82:ac:ad:5a: c7:8b:e7:a1:8c:af:36:84:ae:3d:f8:6c:ee:b7:51: 09:a7:50:8e:51:9e:96:2e:30:f2:4e:60:10:1c:18: a5:29:84:c7:90:5c:a2:5f:6f:3c:51:cb:4a:89:49: 9b:6e:9f:e4:5f:5e:3e:29:58:06:a1:fd:d5:1d:91: 70:d0:77:ff:62:b4:b8:5f:01:a3:d5:8d:7e:61:15: 63:98:7a:4a:9f:45:62:30:9c:49:a7:4b:9c:90:db: da:6b:00:aa:4b:25:07:8d:ca:b8:49:d7:c6:6a:fc: 6b:aa:0f:43:77:fd:cd:c1:9e:a6:47:bf:53:2f:41: ff:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:43:03:82:02:AA:17:C1:90:73:8B:4D:8B:52:F7:50:26:AC:94:AD X509v3 Authority Key Identifier: keyid:D6:15:AB:CB:A5:01:55:64:AD:E9:B4:73:D6:4F:1E:34:A0:BA:8D:4A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/3/D615ABCBA5015564ADE9B473D64F1E34A0BA8D4A.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/D615ABCBA5015564ADE9B473D64F1E34A0BA8D4A.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/3/D615ABCBA5015564ADE9B473D64F1E34A0BA8D4A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:99:85:6e:df:1c:87:8d:16:60:b2:de:32:cc:1f:85:09:2c: a9:47:ae:9d:7d:50:3e:09:1e:63:88:84:8c:10:6d:63:3d:e1: 44:82:7f:73:01:91:56:01:6a:a8:4b:5d:84:0b:1b:17:a2:bb: 5e:9a:ad:28:cc:dc:40:80:66:ae:65:23:cb:7f:25:fd:b4:96: 3c:52:81:ba:7b:40:36:e8:fb:c9:c6:ce:8e:e8:e9:fd:07:ff: f9:df:85:7d:f0:94:2e:42:db:de:9a:ca:21:37:29:79:10:a7: 32:63:10:56:85:3e:4d:b8:b9:0c:0b:59:fa:b7:5c:76:fb:ce: e9:12:ef:a4:16:da:fb:9d:7d:ee:7f:33:ed:20:6b:47:22:54: 41:54:3d:dd:d5:06:d8:dd:60:0d:f6:98:29:29:0d:b0:0d:f4: ec:69:af:0e:7b:8d:d0:db:46:25:3e:dd:38:b9:c2:47:ed:7b: d6:19:2a:b3:a8:f7:8a:d7:65:30:b2:18:00:64:a9:ad:59:24: 6b:ed:d4:88:05:8e:89:87:6a:58:c6:00:2e:ad:ce:39:4c:0a: f1:d8:68:0c:22:94:4c:3c:29:6d:98:7e:5d:76:cf:78:a7:8e: 55:83:e9:d7:8f:2e:c4:d6:cf:6b:d4:e1:64:d0:dc:fb:26:b0: 88:65:22:f4 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIURe3aE8N8iGTIt7YSlC2kYLSRj2QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDYxNUFCQ0JBNTAxNTU2NEFERTlCNDczRDY0RjFFMzRB MEJBOEQ0QTAeFw0yNTA2MTUwNjQ0NTdaFw0yNTA2MTYwOTIxNTdaMDMxMTAvBgNV BAMTKDUzNDMwMzgyMDJBQTE3QzE5MDczOEI0RDhCNTJGNzUwMjZBQzk0QUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBB5qRFbJJGGwIhY8/Cn6fZA1e uiEHvYjuV6u0bOsLbgCHz8/Sg5THSh9fPAXzf/t1SKA8uB6H3akLixxsfmbcm6cl uAnePk6Un+Tk5x7J1YL4AIID5KagYzRAsCVL1/UiDFnNVLAWSzH3I3uA22OMClZM DOXgAXvd3tv3h66z3uxbgqytWseL56GMrzaErj34bO63UQmnUI5RnpYuMPJOYBAc GKUphMeQXKJfbzxRy0qJSZtun+RfXj4pWAah/dUdkXDQd/9itLhfAaPVjX5hFWOY ekqfRWIwnEmnS5yQ29prAKpLJQeNyrhJ18Zq/GuqD0N3/c3BnqZHv1MvQf/vAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUU0MDggKqF8GQc4tNi1L3UCaslK0wHwYDVR0j BBgwFoAU1hWry6UBVWSt6bRz1k8eNKC6jUowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMTNmNjg1NjEtMGE3NC00Y2NhLWJmOGYtMTJmYWFhZmM4 ZWI4LzMvRDYxNUFCQ0JBNTAxNTU2NEFERTlCNDczRDY0RjFFMzRBMEJBOEQ0QS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC9ENjE1QUJDQkE1MDE1NTY0QURFOUI0NzNE NjRGMUUzNEEwQkE4RDRBLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzEzZjY4NTYxLTBhNzQtNGNjYS1iZjhmLTEyZmFhYWZjOGViOC8zL0Q2MTVBQkNC QTUwMTU1NjRBREU5QjQ3M0Q2NEYxRTM0QTBCQThENEEubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBbmYVu 3xyHjRZgst4yzB+FCSypR66dfVA+CR5jiISMEG1jPeFEgn9zAZFWAWqoS12ECxsX ortemq0ozNxAgGauZSPLfyX9tJY8UoG6e0A26PvJxs6O6On9B//534V98JQuQtve msohNyl5EKcyYxBWhT5NuLkMC1n6t1x2+87pEu+kFtr7nX3ufzPtIGtHIlRBVD3d 1QbY3WAN9pgpKQ2wDfTsaa8Oe43Q20YlPt04ucJH7XvWGSqzqPeK12UwshgAZKmt WSRr7dSIBY6Jh2pYxgAurc45TArx2GgMIpRMPCltmH5dds94p45Vg+nXjy7E1s9r 1OFk0Nz7JrCIZSL0 -----END CERTIFICATE-----Generated at Sun Jun 15 16:49:12 2025 by rpki-client