$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/3/D615ABCBA5015564ADE9B473D64F1E34A0BA8D4A.mft File: D615ABCBA5015564ADE9B473D64F1E34A0BA8D4A.mft (raw, json) Hash identifier: kcfcZCwBpRGV+INIC0/U9p3RA+BGLZUxPxMu5blWNZo= Subject key identifier: 8B:95:5E:B2:58:AE:70:2E:8B:1D:3D:F3:DA:F6:DD:8D:E1:F5:22:4A Authority key identifier: D6:15:AB:CB:A5:01:55:64:AD:E9:B4:73:D6:4F:1E:34:A0:BA:8D:4A Certificate issuer: /CN=D615ABCBA5015564ADE9B473D64F1E34A0BA8D4A Certificate serial: 49094AEFB69BDBE660792892EF990AD93C5EF219 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/D615ABCBA5015564ADE9B473D64F1E34A0BA8D4A.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/3/D615ABCBA5015564ADE9B473D64F1E34A0BA8D4A.mft Manifest number: 01C1 Signing time: Sat 28 Feb 2026 22:18:40 +0000 Manifest this update: Sat 28 Feb 2026 22:13:40 +0000 Manifest next update: Sun 01 Mar 2026 23:17:40 +0000 Files and hashes: 1: D615ABCBA5015564ADE9B473D64F1E34A0BA8D4A.crl (hash: +fPqE+PLbvvQ5+1hCQwveOcavSRuQaEhutwzzizvUSU=) 2: 326131343a373538303a3930333a3a2f34382d3438203d3e203331383938.roa (hash: ypgUGD6Euz3HGS0A9GoVgCiVtLF78aI6ZX/YlUyvGd8=) 3: 326131343a373538303a3930323a3a2f34382d3438203d3e20323033383433.roa (hash: BFT8GbG7CSJ9YmzS1PjnMDrg1nwAcfXEJPEfuo5FzQk=) 4: 326131343a373538303a3930313a3a2f34382d3438203d3e20323033383433.roa (hash: XxS9zprV7IX1JjrBQQ+JptkD2bW89WKl615fH9J1hzc=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/3/D615ABCBA5015564ADE9B473D64F1E34A0BA8D4A.crl rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/3/D615ABCBA5015564ADE9B473D64F1E34A0BA8D4A.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/D615ABCBA5015564ADE9B473D64F1E34A0BA8D4A.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 01 Mar 2026 23:17:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:09:4a:ef:b6:9b:db:e6:60:79:28:92:ef:99:0a:d9:3c:5e:f2:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D615ABCBA5015564ADE9B473D64F1E34A0BA8D4A Validity Not Before: Feb 28 22:13:40 2026 GMT Not After : Mar 1 23:17:40 2026 GMT Subject: CN=8B955EB258AE702E8B1D3DF3DAF6DD8DE1F5224A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:25:e9:25:cf:f1:d9:81:b7:a6:f2:99:93:c4: 6f:25:df:a4:d0:51:5c:39:1e:02:0a:93:74:ee:12: 48:c8:1d:b9:e1:b5:01:5d:47:d9:74:3d:35:a7:4f: a2:1a:b8:1b:6f:5f:41:3c:f5:80:a0:91:1f:ca:fc: c7:fa:d4:50:18:d5:21:d8:cd:cd:e5:c8:a4:9f:8c: 0f:18:0d:fd:19:ca:0a:a9:f9:c3:9d:4b:dd:c6:97: 53:f8:4a:73:32:7c:1c:bb:1a:73:eb:cb:05:2e:a6: 25:a1:45:a8:a1:27:26:dc:69:8c:b2:c4:a1:b2:c7: 40:44:2f:83:05:13:17:99:07:0a:99:2f:22:7c:12: a2:3f:81:d1:22:be:72:63:e8:6e:43:b7:c4:53:14: f9:90:76:2a:0f:d8:0a:87:dd:bb:7c:eb:60:55:a7: 89:fb:0b:e3:4c:7f:62:df:26:aa:4e:b9:6e:14:67: 9f:fd:0e:1d:9f:59:d6:28:d9:4c:79:bf:8d:6a:38: f2:bc:1a:3c:36:28:57:c8:64:d8:95:fb:4d:0a:72: d7:8a:a8:9c:9b:b9:dc:a9:2b:3d:73:00:0c:61:53: 2c:15:18:19:fa:c8:1e:98:d7:25:9d:78:d8:3b:6b: f1:2a:c8:71:0c:8e:c8:ee:4d:9c:f0:02:bf:f8:6b: 57:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:95:5E:B2:58:AE:70:2E:8B:1D:3D:F3:DA:F6:DD:8D:E1:F5:22:4A X509v3 Authority Key Identifier: keyid:D6:15:AB:CB:A5:01:55:64:AD:E9:B4:73:D6:4F:1E:34:A0:BA:8D:4A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/3/D615ABCBA5015564ADE9B473D64F1E34A0BA8D4A.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/D615ABCBA5015564ADE9B473D64F1E34A0BA8D4A.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/3/D615ABCBA5015564ADE9B473D64F1E34A0BA8D4A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:26:90:ef:b3:bc:2e:2e:ad:2f:25:37:32:e2:a0:dd:ff:9f: db:52:ab:75:35:fc:95:00:b8:cf:59:62:f9:07:51:22:18:fe: ec:f6:bb:eb:08:d3:b3:bc:f3:39:6e:bf:00:3c:32:e4:aa:c1: 69:4b:19:4e:90:94:37:3a:00:ba:11:8e:64:2e:6b:aa:56:de: 35:ce:c9:f1:e6:a4:54:ed:d9:cb:c8:7d:15:a2:64:5f:16:9c: 1c:4d:d8:d2:86:ba:d3:3c:c2:c6:96:70:80:8b:8e:c9:19:06: 35:2a:81:2c:36:ef:23:b5:a4:f7:16:a4:4b:bc:26:42:73:d1: d7:96:4f:17:03:de:ae:39:57:27:82:0d:1a:1d:e0:49:08:13: 5c:dc:56:16:c5:63:1b:f4:bf:3c:97:d7:cb:e7:2e:4b:aa:9a: 4f:dc:75:14:cc:ba:b6:74:88:f0:f0:eb:76:2b:67:9f:50:90: b8:aa:49:63:13:ce:14:5f:47:f3:c6:68:0d:6d:39:5f:d5:68: fe:d3:46:73:da:c5:e0:73:c4:f8:5c:81:15:e3:b1:e3:06:48: 47:35:9c:30:e7:19:7e:77:48:07:81:1b:21:96:00:e9:53:d0: f1:3d:cc:7f:49:33:cd:97:1c:84:f1:9c:24:26:50:54:c7:9d: ff:3c:6a:f4 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUSQlK77ab2+ZgeSiS75kK2Txe8hkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDYxNUFCQ0JBNTAxNTU2NEFERTlCNDczRDY0RjFFMzRB MEJBOEQ0QTAeFw0yNjAyMjgyMjEzNDBaFw0yNjAzMDEyMzE3NDBaMDMxMTAvBgNV BAMTKDhCOTU1RUIyNThBRTcwMkU4QjFEM0RGM0RBRjZERDhERTFGNTIyNEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9Jeklz/HZgbem8pmTxG8l36TQ UVw5HgIKk3TuEkjIHbnhtQFdR9l0PTWnT6IauBtvX0E89YCgkR/K/Mf61FAY1SHY zc3lyKSfjA8YDf0Zygqp+cOdS93Gl1P4SnMyfBy7GnPrywUupiWhRaihJybcaYyy xKGyx0BEL4MFExeZBwqZLyJ8EqI/gdEivnJj6G5Dt8RTFPmQdioP2AqH3bt862BV p4n7C+NMf2LfJqpOuW4UZ5/9Dh2fWdYo2Ux5v41qOPK8Gjw2KFfIZNiV+00KcteK qJybudypKz1zAAxhUywVGBn6yB6Y1yWdeNg7a/EqyHEMjsjuTZzwAr/4a1dzAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUi5VesliucC6LHT3z2vbdjeH1IkowHwYDVR0j BBgwFoAU1hWry6UBVWSt6bRz1k8eNKC6jUowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMTNmNjg1NjEtMGE3NC00Y2NhLWJmOGYtMTJmYWFhZmM4 ZWI4LzMvRDYxNUFCQ0JBNTAxNTU2NEFERTlCNDczRDY0RjFFMzRBMEJBOEQ0QS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC9ENjE1QUJDQkE1MDE1NTY0QURFOUI0NzNE NjRGMUUzNEEwQkE4RDRBLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzEzZjY4NTYxLTBhNzQtNGNjYS1iZjhmLTEyZmFhYWZjOGViOC8zL0Q2MTVBQkNC QTUwMTU1NjRBREU5QjQ3M0Q2NEYxRTM0QTBCQThENEEubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQB1JpDv s7wuLq0vJTcy4qDd/5/bUqt1NfyVALjPWWL5B1EiGP7s9rvrCNOzvPM5br8APDLk qsFpSxlOkJQ3OgC6EY5kLmuqVt41zsnx5qRU7dnLyH0VomRfFpwcTdjShrrTPMLG lnCAi47JGQY1KoEsNu8jtaT3FqRLvCZCc9HXlk8XA96uOVcngg0aHeBJCBNc3FYW xWMb9L88l9fL5y5LqppP3HUUzLq2dIjw8Ot2K2efUJC4qkljE84UX0fzxmgNbTlf 1Wj+00Zz2sXgc8T4XIEV47HjBkhHNZww5xl+d0gHgRshlgDpU9DxPcx/STPNlxyE 8ZwkJlBUx53/PGr0 -----END CERTIFICATE-----Generated at Sun Mar 1 16:36:33 2026 by rpki-client