$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d9bd3888-9302-4b6f-a017-2b4bba5e57bb/2/315EC08E540BCBC870FEB38832274E048E2E1F80.mft File: 315EC08E540BCBC870FEB38832274E048E2E1F80.mft (raw, json) Hash identifier: Iq7bJ/UgTHeOwLXOOOyGeAAFSaPlM1HbFBGEUtM8joM= Subject key identifier: F9:C7:8D:89:7C:03:86:ED:90:6B:E6:B1:86:35:BF:63:D8:70:08:BB Authority key identifier: 31:5E:C0:8E:54:0B:CB:C8:70:FE:B3:88:32:27:4E:04:8E:2E:1F:80 Certificate issuer: /CN=315EC08E540BCBC870FEB38832274E048E2E1F80 Certificate serial: 271735DA353A49F75DE5BD7E1F5CD32D1B313B79 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/5/315EC08E540BCBC870FEB38832274E048E2E1F80.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d9bd3888-9302-4b6f-a017-2b4bba5e57bb/2/315EC08E540BCBC870FEB38832274E048E2E1F80.mft Manifest number: 0B Signing time: Sat 13 Jun 2026 04:04:36 +0000 Manifest this update: Sat 13 Jun 2026 03:59:36 +0000 Manifest next update: Sun 14 Jun 2026 05:23:36 +0000 Files and hashes: 1: 315EC08E540BCBC870FEB38832274E048E2E1F80.crl (hash: Q8khdjOEU5xe4lZsH/dKI/kzbP1qKIDgIQg7f9P6c9g=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/d9bd3888-9302-4b6f-a017-2b4bba5e57bb/2/315EC08E540BCBC870FEB38832274E048E2E1F80.crl rsync://rsync.paas.rpki.ripe.net/repository/d9bd3888-9302-4b6f-a017-2b4bba5e57bb/2/315EC08E540BCBC870FEB38832274E048E2E1F80.mft rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/5/315EC08E540BCBC870FEB38832274E048E2E1F80.cer rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/5/80838673ED291DC1ACFAE037E88F9C7A78B7127E.crl rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/5/80838673ED291DC1ACFAE037E88F9C7A78B7127E.mft rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/0/80838673ED291DC1ACFAE037E88F9C7A78B7127E.cer rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/0/0E70AE0ACD0BE83D2D458CA207B1D4FFA3C3E4EA.crl rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/0/0E70AE0ACD0BE83D2D458CA207B1D4FFA3C3E4EA.mft rsync://rpki.ripe.net/repository/DEFAULT/DnCuCs0L6D0tRYyiB7HU_6PD5Oo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Jun 2026 05:23:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:17:35:da:35:3a:49:f7:5d:e5:bd:7e:1f:5c:d3:2d:1b:31:3b:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=315EC08E540BCBC870FEB38832274E048E2E1F80 Validity Not Before: Jun 13 03:59:36 2026 GMT Not After : Jun 14 05:23:36 2026 GMT Subject: CN=F9C78D897C0386ED906BE6B18635BF63D87008BB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:95:39:cb:aa:bc:bb:a0:bd:b2:99:93:9c:dc: 95:48:9b:32:c1:e8:bb:9c:01:68:7f:1a:62:d0:1a: 6a:e1:82:03:72:9e:52:15:71:4e:3c:b9:d7:d6:62: 19:fc:45:7e:ce:9e:03:8f:02:6c:15:d7:e3:67:06: a7:ca:41:7a:d0:60:c6:7a:9a:26:8c:22:4d:b3:0a: c9:16:7d:dd:c7:0c:e5:5c:09:e6:8d:84:b6:2a:8a: 26:c3:76:66:47:42:50:44:6d:f6:f3:16:fc:9f:55: 06:b8:55:5a:79:4b:a3:b1:a7:88:08:85:37:67:6f: 87:ec:56:70:e2:e2:40:d2:bc:e4:9f:60:f1:ac:6f: d5:d3:5a:69:6d:11:d2:a1:3f:1b:a3:ec:92:8f:38: 7e:4a:b8:11:a0:3d:12:0c:38:2d:f4:2b:af:e0:d3: 9e:6b:df:28:7d:5e:fc:95:20:eb:aa:14:da:49:7b: 89:62:43:0c:5b:d3:30:2a:60:6c:47:b1:42:89:e3: 11:10:47:19:35:43:28:99:19:56:b7:d2:1a:7e:a7: 76:a7:41:6d:42:5d:5c:5b:42:58:47:e6:cd:25:7f: df:72:c4:29:e0:be:0d:21:d0:05:b5:10:8c:2a:0b: 2e:4a:49:e4:04:8f:30:2d:25:36:37:39:8a:61:9a: 73:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:C7:8D:89:7C:03:86:ED:90:6B:E6:B1:86:35:BF:63:D8:70:08:BB X509v3 Authority Key Identifier: keyid:31:5E:C0:8E:54:0B:CB:C8:70:FE:B3:88:32:27:4E:04:8E:2E:1F:80 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/d9bd3888-9302-4b6f-a017-2b4bba5e57bb/2/315EC08E540BCBC870FEB38832274E048E2E1F80.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/5/315EC08E540BCBC870FEB38832274E048E2E1F80.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d9bd3888-9302-4b6f-a017-2b4bba5e57bb/2/315EC08E540BCBC870FEB38832274E048E2E1F80.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b1:c7:1d:99:1c:9e:10:04:f4:9a:39:65:f1:84:8f:e6:4e:79: 61:35:18:24:56:9c:f6:80:78:71:be:42:72:72:06:72:29:0f: 38:4e:90:16:e0:e6:5a:c2:53:56:2c:bf:a1:6a:0e:66:11:d2: ac:b1:b4:84:7b:a9:a6:ad:a9:6d:d2:2b:7d:87:66:74:64:4e: 76:af:1d:fb:ca:86:f2:ad:f7:8c:cf:96:53:8b:e8:3f:6a:6d: aa:78:25:1a:47:ba:4c:f2:09:fd:b0:a0:14:c5:21:d0:1c:da: 66:e5:73:50:2b:1a:88:69:6c:ac:d4:00:40:7e:87:34:ae:8e: e4:3b:48:4c:05:30:df:3e:7b:a0:a9:98:1e:d4:14:d1:84:db: c2:03:be:9d:b4:a6:62:0d:08:40:f0:4b:4e:4a:d7:0b:fc:10: ea:d7:ee:6d:4f:9d:94:7d:66:08:0c:fd:d7:ca:42:da:dd:47: de:b4:cb:70:87:79:89:39:5f:c1:97:fa:de:7e:42:42:fd:09: c9:cb:28:f0:3c:34:18:97:3e:a1:2f:1e:cf:c9:54:85:91:af: 96:31:07:50:2e:75:9b:82:cf:ce:d0:19:42:b7:64:45:5b:29: 98:f0:6b:29:f5:3d:8f:4d:d4:2e:c6:d7:24:fb:e9:13:3b:97: 7c:34:6b:a6 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUJxc12jU6Sfdd5b1+H1zTLRsxO3kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzE1RUMwOEU1NDBCQ0JDODcwRkVCMzg4MzIyNzRFMDQ4 RTJFMUY4MDAeFw0yNjA2MTMwMzU5MzZaFw0yNjA2MTQwNTIzMzZaMDMxMTAvBgNV BAMTKEY5Qzc4RDg5N0MwMzg2RUQ5MDZCRTZCMTg2MzVCRjYzRDg3MDA4QkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCLlTnLqry7oL2ymZOc3JVImzLB 6LucAWh/GmLQGmrhggNynlIVcU48udfWYhn8RX7OngOPAmwV1+NnBqfKQXrQYMZ6 miaMIk2zCskWfd3HDOVcCeaNhLYqiibDdmZHQlBEbfbzFvyfVQa4VVp5S6Oxp4gI hTdnb4fsVnDi4kDSvOSfYPGsb9XTWmltEdKhPxuj7JKPOH5KuBGgPRIMOC30K6/g 055r3yh9XvyVIOuqFNpJe4liQwxb0zAqYGxHsUKJ4xEQRxk1QyiZGVa30hp+p3an QW1CXVxbQlhH5s0lf99yxCngvg0h0AW1EIwqCy5KSeQEjzAtJTY3OYphmnPfAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQU+ceNiXwDhu2Qa+axhjW/Y9hwCLswHwYDVR0j BBgwFoAUMV7AjlQLy8hw/rOIMidOBI4uH4AwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZDliZDM4ODgtOTMwMi00YjZmLWEwMTctMmI0YmJhNWU1 N2JiLzIvMzE1RUMwOEU1NDBCQ0JDODcwRkVCMzg4MzIyNzRFMDQ4RTJFMUY4MC5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9mNTMyYjllYi0yZmFlLTQ4 YTgtOTc5My0zM2VlYzA2N2NlMzkvNS8zMTVFQzA4RTU0MEJDQkM4NzBGRUIzODgz MjI3NEUwNDhFMkUxRjgwLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2Q5YmQzODg4LTkzMDItNGI2Zi1hMDE3LTJiNGJiYTVlNTdiYi8yLzMxNUVDMDhF NTQwQkNCQzg3MEZFQjM4ODMyMjc0RTA0OEUyRTFGODAubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCxxx2Z HJ4QBPSaOWXxhI/mTnlhNRgkVpz2gHhxvkJycgZyKQ84TpAW4OZawlNWLL+hag5m EdKssbSEe6mmralt0it9h2Z0ZE52rx37yobyrfeMz5ZTi+g/am2qeCUaR7pM8gn9 sKAUxSHQHNpm5XNQKxqIaWys1ABAfoc0ro7kO0hMBTDfPnugqZge1BTRhNvCA76d tKZiDQhA8EtOStcL/BDq1+5tT52UfWYIDP3XykLa3UfetMtwh3mJOV/Bl/refkJC /QnJyyjwPDQYlz6hLx7PyVSFka+WMQdQLnWbgs/O0BlCt2RFWymY8Gsp9T2PTdQu xtck++kTO5d8NGum -----END CERTIFICATE-----Generated at Sat Jun 13 11:30:40 2026 by rpki-client