$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/3/D615ABCBA5015564ADE9B473D64F1E34A0BA8D4A.mft File: D615ABCBA5015564ADE9B473D64F1E34A0BA8D4A.mft (raw, json) Hash identifier: JJblpKVHSxFmukhVT1x66rL3BQCXDo1R+kyCQAG1h9M= Subject key identifier: 00:5D:FE:B8:8A:2B:09:42:69:9E:F0:BB:35:12:F1:53:67:A7:18:ED Authority key identifier: D6:15:AB:CB:A5:01:55:64:AD:E9:B4:73:D6:4F:1E:34:A0:BA:8D:4A Certificate issuer: /CN=D615ABCBA5015564ADE9B473D64F1E34A0BA8D4A Certificate serial: 4AEAA96A79FFE9D6C5296A67FF1C12184E10836F Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/D615ABCBA5015564ADE9B473D64F1E34A0BA8D4A.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/3/D615ABCBA5015564ADE9B473D64F1E34A0BA8D4A.mft Manifest number: 02D2 Signing time: Sun 20 Sep 2026 07:43:48 +0000 Manifest this update: Sun 20 Sep 2026 07:38:48 +0000 Manifest next update: Mon 21 Sep 2026 09:48:48 +0000 Files and hashes: 1: D615ABCBA5015564ADE9B473D64F1E34A0BA8D4A.crl (hash: i3Z64F3NjAZrC31PTEgE8h22q3QzVQ3bRqRkzr0JlJw=) 2: 326131343a373538303a3930333a3a2f34382d3438203d3e203331383938.roa (hash: cxJ2EfGW3Gw41SsKZJkYgUq6pKjZBBiREvTQVJOiK1o=) 3: 326131343a373538303a3930313a3a2f34382d3438203d3e20323033383433.roa (hash: Ou/BuV6DNjxZqmppmI1GfTQOuzQIj3w4635LcGfFjnQ=) 4: 326131343a373538303a3930323a3a2f34382d3438203d3e20323033383433.roa (hash: DyehTUsfk21Hj5Xq64+F+F4A1oaphKt7e4+bcF+X09M=) 5: 326131343a373538303a3930303a3a2f34372d3437203d3e20323033383433.roa (hash: FrDNupKDARVlRRNCBCc/O4jmFlJqhvZjjWnPHeQbISc=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/3/D615ABCBA5015564ADE9B473D64F1E34A0BA8D4A.crl rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/3/D615ABCBA5015564ADE9B473D64F1E34A0BA8D4A.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/D615ABCBA5015564ADE9B473D64F1E34A0BA8D4A.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 21 Sep 2026 09:48:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:ea:a9:6a:79:ff:e9:d6:c5:29:6a:67:ff:1c:12:18:4e:10:83:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D615ABCBA5015564ADE9B473D64F1E34A0BA8D4A Validity Not Before: Sep 20 07:38:48 2026 GMT Not After : Sep 21 09:48:48 2026 GMT Subject: CN=005DFEB88A2B0942699EF0BB3512F15367A718ED Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:9e:37:aa:99:34:b8:f6:07:8c:4f:2b:d4:ab: 38:10:53:5b:f9:b9:4b:78:5b:29:f5:36:cc:35:e0: 4d:09:cd:ef:0c:ed:a0:2f:a8:69:e5:e1:36:44:05: e8:25:89:1a:d5:13:c6:53:79:14:40:b4:3a:36:44: 04:46:8e:56:3c:be:3b:70:dd:60:af:d7:a8:93:c4: 6e:fb:32:fe:4f:54:d1:2d:70:a2:6b:b7:95:06:db: fa:f9:f3:fb:b9:fb:4f:f9:cf:79:ad:0f:38:19:e9: dc:74:ea:6c:03:2c:5b:f5:46:6d:81:00:07:8b:39: 74:bd:60:fc:d8:65:d2:ff:fb:87:57:ab:90:83:b1: e6:6c:b9:a3:9f:1c:33:f2:a7:80:28:01:43:61:1d: 7f:03:8e:97:5a:65:59:ba:c7:eb:79:e2:2c:f8:84: 1a:02:74:d0:e6:6e:cc:ba:5f:6f:4c:f2:42:73:99: 9b:d1:63:41:e4:08:96:81:25:5e:f9:99:ca:ed:b9: cc:a3:fc:07:87:2e:28:b1:d4:09:9e:47:04:6a:66: 66:5c:d5:3f:8b:d5:8d:4d:04:05:71:24:7e:6d:07: 91:26:47:ee:3c:48:3c:9a:5e:bf:97:1b:f9:3d:72: 72:e1:2c:e5:aa:83:fc:02:d4:31:27:b9:7e:7c:3a: ef:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:5D:FE:B8:8A:2B:09:42:69:9E:F0:BB:35:12:F1:53:67:A7:18:ED X509v3 Authority Key Identifier: keyid:D6:15:AB:CB:A5:01:55:64:AD:E9:B4:73:D6:4F:1E:34:A0:BA:8D:4A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/3/D615ABCBA5015564ADE9B473D64F1E34A0BA8D4A.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/D615ABCBA5015564ADE9B473D64F1E34A0BA8D4A.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/3/D615ABCBA5015564ADE9B473D64F1E34A0BA8D4A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:dc:9b:22:d3:4b:30:ff:5c:7e:70:09:6c:71:91:bb:7c:b4: 2d:17:7d:ed:3e:06:1d:f9:e1:64:d8:aa:6c:6f:cf:f8:f2:2f: 06:30:46:a1:cb:20:6c:fb:15:8b:f3:9d:c3:d6:3d:c4:a4:fe: bf:a0:52:fa:de:9a:f5:ae:29:a2:52:b5:26:c0:31:f1:3b:c2: f7:12:30:4f:8a:9a:4f:1a:c4:36:33:c8:6b:d4:d1:d4:9e:ff: 11:48:3a:23:8e:fb:d3:58:ab:5c:05:ed:62:64:6f:fe:38:11: 23:eb:5a:d7:5c:6f:7b:b8:87:44:02:7d:4f:e9:c3:ea:da:5b: 2f:22:fa:81:69:53:1f:cc:54:ec:36:85:01:ea:86:91:be:df: 4f:69:cc:33:99:9a:d9:91:eb:e0:cd:5e:4f:d5:90:7b:92:5b: 3e:ee:49:01:e6:c8:57:22:07:7e:b8:ec:01:ae:3e:02:96:12: eb:2f:35:95:ea:64:1b:6a:72:b6:7c:8f:e4:27:ab:18:01:ff: 2a:05:0b:06:38:e2:fc:13:9e:49:eb:fb:94:80:7a:4b:76:95: f8:44:58:9d:75:87:f6:0d:e1:98:13:0e:9f:53:bf:67:af:c7: 58:f8:ee:a3:6f:bf:2d:af:9a:af:92:c6:32:a4:28:f0:26:cb: 93:a7:91:68 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUSuqpann/6dbFKWpn/xwSGE4Qg28wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDYxNUFCQ0JBNTAxNTU2NEFERTlCNDczRDY0RjFFMzRB MEJBOEQ0QTAeFw0yNjA5MjAwNzM4NDhaFw0yNjA5MjEwOTQ4NDhaMDMxMTAvBgNV BAMTKDAwNURGRUI4OEEyQjA5NDI2OTlFRjBCQjM1MTJGMTUzNjdBNzE4RUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvnjeqmTS49geMTyvUqzgQU1v5 uUt4Wyn1Nsw14E0Jze8M7aAvqGnl4TZEBegliRrVE8ZTeRRAtDo2RARGjlY8vjtw 3WCv16iTxG77Mv5PVNEtcKJrt5UG2/r58/u5+0/5z3mtDzgZ6dx06mwDLFv1Rm2B AAeLOXS9YPzYZdL/+4dXq5CDseZsuaOfHDPyp4AoAUNhHX8DjpdaZVm6x+t54iz4 hBoCdNDmbsy6X29M8kJzmZvRY0HkCJaBJV75mcrtucyj/AeHLiix1AmeRwRqZmZc 1T+L1Y1NBAVxJH5tB5EmR+48SDyaXr+XG/k9cnLhLOWqg/wC1DEnuX58Ou/JAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUAF3+uIorCUJpnvC7NRLxU2enGO0wHwYDVR0j BBgwFoAU1hWry6UBVWSt6bRz1k8eNKC6jUowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMTNmNjg1NjEtMGE3NC00Y2NhLWJmOGYtMTJmYWFhZmM4 ZWI4LzMvRDYxNUFCQ0JBNTAxNTU2NEFERTlCNDczRDY0RjFFMzRBMEJBOEQ0QS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC9ENjE1QUJDQkE1MDE1NTY0QURFOUI0NzNE NjRGMUUzNEEwQkE4RDRBLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzEzZjY4NTYxLTBhNzQtNGNjYS1iZjhmLTEyZmFhYWZjOGViOC8zL0Q2MTVBQkNC QTUwMTU1NjRBREU5QjQ3M0Q2NEYxRTM0QTBCQThENEEubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAx3Jsi 00sw/1x+cAlscZG7fLQtF33tPgYd+eFk2Kpsb8/48i8GMEahyyBs+xWL853D1j3E pP6/oFL63pr1rimiUrUmwDHxO8L3EjBPippPGsQ2M8hr1NHUnv8RSDojjvvTWKtc Be1iZG/+OBEj61rXXG97uIdEAn1P6cPq2lsvIvqBaVMfzFTsNoUB6oaRvt9Pacwz mZrZkevgzV5P1ZB7kls+7kkB5shXIgd+uOwBrj4ClhLrLzWV6mQbanK2fI/kJ6sY Af8qBQsGOOL8E55J6/uUgHpLdpX4RFiddYf2DeGYEw6fU79nr8dY+O6jb78tr5qv ksYypCjwJsuTp5Fo -----END CERTIFICATE-----Generated at Sun Sep 20 23:47:37 2026 by rpki-client