$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b6746901-23d3-4301-b28d-8b0982b06c08/1/15BCD75E02E085EB08A3D2F22C872972154D76C5.mft File: 15BCD75E02E085EB08A3D2F22C872972154D76C5.mft (raw, json) Hash identifier: YR/4PQusyD8gTqP/R9gKvKIEWyJQxQSo6gn49OoNbqU= Subject key identifier: 52:3B:B1:74:C9:25:E3:1B:7A:77:14:44:F6:DF:E9:54:AC:0A:14:D5 Authority key identifier: 15:BC:D7:5E:02:E0:85:EB:08:A3:D2:F2:2C:87:29:72:15:4D:76:C5 Certificate issuer: /CN=15BCD75E02E085EB08A3D2F22C872972154D76C5 Certificate serial: 2D1F5DE0B8AE3D24A6A3E99FB004EBB827BE198C Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/15BCD75E02E085EB08A3D2F22C872972154D76C5.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b6746901-23d3-4301-b28d-8b0982b06c08/1/15BCD75E02E085EB08A3D2F22C872972154D76C5.mft Manifest number: 8F Signing time: Sat 14 Jun 2025 21:57:33 +0000 Manifest this update: Sat 14 Jun 2025 21:52:33 +0000 Manifest next update: Mon 16 Jun 2025 00:05:33 +0000 Files and hashes: 1: 326131343a373538313a396661303a3a2f34342d3434203d3e20323133343330.roa (hash: oAF6XMqIQIjZqny73zZ9bZTjumil+o5WHhatNbG2YqU=) 2: 15BCD75E02E085EB08A3D2F22C872972154D76C5.crl (hash: 88XbXbHAioFWdq/wBdkr3VgmqM2AxCJg1tolFDZzwME=) 3: 326131343a373538313a396662303a3a2f34342d3434203d3e20323133343330.roa (hash: 7syqL2b6B4hFc1tTh/9QPvKN2SjHSufNn4c9hT7wZns=) 4: 326131343a373538313a396663303a3a2f34342d3434203d3e20323133343330.roa (hash: MUq020p8NbAnolAB9zdSK3Cpj1AnGomUMMut2k1LbJE=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/b6746901-23d3-4301-b28d-8b0982b06c08/1/15BCD75E02E085EB08A3D2F22C872972154D76C5.crl rsync://rsync.paas.rpki.ripe.net/repository/b6746901-23d3-4301-b28d-8b0982b06c08/1/15BCD75E02E085EB08A3D2F22C872972154D76C5.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/15BCD75E02E085EB08A3D2F22C872972154D76C5.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 15 Jun 2025 16:41:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:1f:5d:e0:b8:ae:3d:24:a6:a3:e9:9f:b0:04:eb:b8:27:be:19:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=15BCD75E02E085EB08A3D2F22C872972154D76C5 Validity Not Before: Jun 14 21:52:33 2025 GMT Not After : Jun 16 00:05:33 2025 GMT Subject: CN=523BB174C925E31B7A771444F6DFE954AC0A14D5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:c1:6d:6c:97:8c:aa:bb:5c:98:cd:de:49:e0: ff:21:61:84:73:d1:1b:50:46:5f:aa:97:8e:87:2d: 92:37:07:55:de:2f:67:80:77:2f:f2:50:ad:0d:3d: 77:5c:a2:df:6c:99:93:92:d5:76:68:bc:1c:90:be: cb:4f:12:39:a8:39:1c:a7:2f:6a:c5:41:f9:bf:2f: 91:fd:79:3b:10:ca:c2:fd:03:7d:e8:3a:88:9e:f8: 1c:9e:58:ba:b6:40:32:e1:ae:f5:c4:cf:a2:1f:c9: ea:66:75:ae:4a:00:47:d0:ff:ad:4c:92:09:3f:a7: 41:a8:eb:ab:c6:61:cb:15:b3:a5:d5:f1:f3:ac:21: 3a:ba:09:a5:43:22:c3:08:a2:09:e5:63:4c:2b:a0: 27:d4:10:9b:ea:ef:cf:af:6c:94:c5:cc:e9:cf:b6: ff:67:a0:6d:13:c6:f5:df:55:63:cb:e1:dd:b8:ac: d9:d3:5b:20:f5:69:77:0c:0e:a4:f4:00:fb:77:d4: 87:e9:d5:6b:0e:89:66:d6:9f:eb:53:45:28:09:60: 36:24:4d:17:ba:75:23:17:21:8e:4d:4a:1b:1a:5e: c8:18:5f:0a:3a:78:62:cc:9f:a6:0f:01:ec:04:e6: 38:ea:59:d8:c0:9a:0f:87:68:49:86:68:3c:b4:ed: 7b:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:3B:B1:74:C9:25:E3:1B:7A:77:14:44:F6:DF:E9:54:AC:0A:14:D5 X509v3 Authority Key Identifier: keyid:15:BC:D7:5E:02:E0:85:EB:08:A3:D2:F2:2C:87:29:72:15:4D:76:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/b6746901-23d3-4301-b28d-8b0982b06c08/1/15BCD75E02E085EB08A3D2F22C872972154D76C5.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/15BCD75E02E085EB08A3D2F22C872972154D76C5.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b6746901-23d3-4301-b28d-8b0982b06c08/1/15BCD75E02E085EB08A3D2F22C872972154D76C5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:c8:87:de:97:db:b6:35:f0:4e:10:d1:48:fc:70:5b:df:73: 38:50:6b:3c:7c:fd:3a:a0:48:02:85:af:5d:1a:13:c4:17:c6: 47:4b:b9:78:66:09:02:b7:67:77:d4:17:a0:0c:e0:1a:3f:9b: 16:14:23:7c:02:82:f5:89:5e:ad:55:8f:93:05:37:d4:e9:ca: 53:8a:36:35:6a:f5:e0:15:7e:85:87:fb:35:59:d5:88:1e:0a: 6e:07:53:a8:16:4d:51:e6:e9:83:49:5d:2e:1a:9d:6e:24:44: a0:7a:49:c2:c9:3b:76:09:03:59:89:94:2b:c0:14:b8:05:07: 28:98:aa:95:4a:ed:05:4f:b1:94:c8:53:d8:93:21:a1:b7:64: e0:84:86:e7:d1:a8:3d:9f:5c:9c:65:5c:93:37:05:8a:b6:7a: 2c:ef:bb:e1:f6:61:68:37:70:6e:8c:d6:56:a9:6b:ae:0c:8d: d6:eb:10:33:06:fb:25:6e:0f:34:92:ad:38:2a:55:13:b5:31: 67:2a:a2:d8:34:07:89:c3:82:aa:46:0e:57:55:59:45:3f:43: 87:8a:02:91:7f:f4:9c:5e:3c:ce:ad:ac:67:0f:52:9b:cc:dd: b5:9d:9a:bd:29:54:14:36:9d:4d:f3:9b:15:95:cd:ae:3b:ab: 7a:37:ca:be -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIULR9d4LiuPSSmo+mfsATruCe+GYwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTVCQ0Q3NUUwMkUwODVFQjA4QTNEMkYyMkM4NzI5NzIx NTRENzZDNTAeFw0yNTA2MTQyMTUyMzNaFw0yNTA2MTYwMDA1MzNaMDMxMTAvBgNV BAMTKDUyM0JCMTc0QzkyNUUzMUI3QTc3MTQ0NEY2REZFOTU0QUMwQTE0RDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCCwW1sl4yqu1yYzd5J4P8hYYRz 0RtQRl+ql46HLZI3B1XeL2eAdy/yUK0NPXdcot9smZOS1XZovByQvstPEjmoORyn L2rFQfm/L5H9eTsQysL9A33oOoie+ByeWLq2QDLhrvXEz6Ifyepmda5KAEfQ/61M kgk/p0Go66vGYcsVs6XV8fOsITq6CaVDIsMIognlY0wroCfUEJvq78+vbJTFzOnP tv9noG0TxvXfVWPL4d24rNnTWyD1aXcMDqT0APt31Ifp1WsOiWbWn+tTRSgJYDYk TRe6dSMXIY5NShsaXsgYXwo6eGLMn6YPAewE5jjqWdjAmg+HaEmGaDy07XsbAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUUjuxdMkl4xt6dxRE9t/pVKwKFNUwHwYDVR0j BBgwFoAUFbzXXgLghesIo9LyLIcpchVNdsUwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYjY3NDY5MDEtMjNkMy00MzAxLWIyOGQtOGIwOTgyYjA2 YzA4LzEvMTVCQ0Q3NUUwMkUwODVFQjA4QTNEMkYyMkM4NzI5NzIxNTRENzZDNS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC8xNUJDRDc1RTAyRTA4NUVCMDhBM0QyRjIy Qzg3Mjk3MjE1NEQ3NkM1LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2I2NzQ2OTAxLTIzZDMtNDMwMS1iMjhkLThiMDk4MmIwNmMwOC8xLzE1QkNENzVF MDJFMDg1RUIwOEEzRDJGMjJDODcyOTcyMTU0RDc2QzUubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBcyIfe l9u2NfBOENFI/HBb33M4UGs8fP06oEgCha9dGhPEF8ZHS7l4ZgkCt2d31BegDOAa P5sWFCN8AoL1iV6tVY+TBTfU6cpTijY1avXgFX6Fh/s1WdWIHgpuB1OoFk1R5umD SV0uGp1uJESgeknCyTt2CQNZiZQrwBS4BQcomKqVSu0FT7GUyFPYkyGht2TghIbn 0ag9n1ycZVyTNwWKtnos77vh9mFoN3BujNZWqWuuDI3W6xAzBvslbg80kq04KlUT tTFnKqLYNAeJw4KqRg5XVVlFP0OHigKRf/ScXjzOraxnD1KbzN21nZq9KVQUNp1N 85sVlc2uO6t6N8q+ -----END CERTIFICATE-----Generated at Sun Jun 15 09:02:52 2025 by rpki-client