$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/3/D615ABCBA5015564ADE9B473D64F1E34A0BA8D4A.mft File: D615ABCBA5015564ADE9B473D64F1E34A0BA8D4A.mft (raw, json) Hash identifier: +MH0P9+yFrBX4Vcrz6UjDY0OTsBohmeX7+AGBD3Ix94= Subject key identifier: 57:EC:AD:F8:40:9D:65:19:15:08:66:24:3D:DD:18:51:81:CE:4E:33 Authority key identifier: D6:15:AB:CB:A5:01:55:64:AD:E9:B4:73:D6:4F:1E:34:A0:BA:8D:4A Certificate issuer: /CN=D615ABCBA5015564ADE9B473D64F1E34A0BA8D4A Certificate serial: 3357BC6595A509CD0F6BDE20D64C9FA195BD1C3C Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/D615ABCBA5015564ADE9B473D64F1E34A0BA8D4A.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/3/D615ABCBA5015564ADE9B473D64F1E34A0BA8D4A.mft Manifest number: 79 Signing time: Sun 29 Jun 2025 09:51:13 +0000 Manifest this update: Sun 29 Jun 2025 09:46:13 +0000 Manifest next update: Mon 30 Jun 2025 12:31:13 +0000 Files and hashes: 1: 326131343a373538303a3930313a3a2f34382d3438203d3e20323033383433.roa (hash: XxS9zprV7IX1JjrBQQ+JptkD2bW89WKl615fH9J1hzc=) 2: 326131343a373538303a3930323a3a2f34382d3438203d3e20323033383433.roa (hash: BFT8GbG7CSJ9YmzS1PjnMDrg1nwAcfXEJPEfuo5FzQk=) 3: 326131343a373538303a3930333a3a2f34382d3438203d3e203331383938.roa (hash: ypgUGD6Euz3HGS0A9GoVgCiVtLF78aI6ZX/YlUyvGd8=) 4: D615ABCBA5015564ADE9B473D64F1E34A0BA8D4A.crl (hash: CpvqH4Dh70tgR0p8URaOyKDa3sdXjZlIKGOrDhrzlQI=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/3/D615ABCBA5015564ADE9B473D64F1E34A0BA8D4A.crl rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/3/D615ABCBA5015564ADE9B473D64F1E34A0BA8D4A.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/D615ABCBA5015564ADE9B473D64F1E34A0BA8D4A.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 30 Jun 2025 04:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:57:bc:65:95:a5:09:cd:0f:6b:de:20:d6:4c:9f:a1:95:bd:1c:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D615ABCBA5015564ADE9B473D64F1E34A0BA8D4A Validity Not Before: Jun 29 09:46:13 2025 GMT Not After : Jun 30 12:31:13 2025 GMT Subject: CN=57ECADF8409D6519150866243DDD185181CE4E33 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:2b:f3:30:35:e2:67:c7:26:ef:d4:c6:d3:b8: 11:40:19:e9:ee:fd:d4:6e:7b:b0:0c:3f:0c:a8:d7: 09:df:96:49:b1:e1:30:39:58:23:da:19:a0:37:fc: 92:2c:bd:3c:42:2f:c0:b9:91:95:67:74:d1:47:26: a9:c9:d0:69:05:67:9c:0e:d3:b5:f6:96:ce:29:1c: 73:94:a2:96:7e:c7:d3:90:94:41:c9:c1:a3:72:8a: d2:ee:e8:cb:2a:8d:2c:0e:ef:46:f3:a0:7f:56:0d: c4:82:4f:8d:50:f3:32:e0:3e:67:d1:19:ef:d5:b5: 83:b8:bf:62:cd:f3:a9:9e:4d:02:ec:0c:ae:d6:35: 15:78:6f:60:42:92:08:c4:23:ac:b0:c4:cb:cd:30: f5:e7:1b:2d:15:60:05:0e:3e:79:e8:66:63:b9:93: 71:e2:4f:55:54:8a:aa:43:42:9b:19:51:0b:1d:74: 5f:39:6f:b9:c7:37:b4:b6:9d:b9:c8:54:27:ed:e1: fc:31:58:b2:67:d4:47:db:c2:d6:4a:b4:3c:28:8b: fd:2c:b1:87:fa:2b:ae:6f:ee:6b:e0:3b:0f:c3:28: 08:24:15:fc:66:56:59:23:9b:3f:68:2e:70:ca:97: a7:a0:f2:f3:33:80:d1:31:bc:ec:3f:0a:a9:99:e7: 04:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:EC:AD:F8:40:9D:65:19:15:08:66:24:3D:DD:18:51:81:CE:4E:33 X509v3 Authority Key Identifier: keyid:D6:15:AB:CB:A5:01:55:64:AD:E9:B4:73:D6:4F:1E:34:A0:BA:8D:4A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/3/D615ABCBA5015564ADE9B473D64F1E34A0BA8D4A.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/D615ABCBA5015564ADE9B473D64F1E34A0BA8D4A.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/3/D615ABCBA5015564ADE9B473D64F1E34A0BA8D4A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:12:a2:84:79:b1:c9:72:33:cd:fd:b1:58:0f:00:82:77:c7: 51:3e:de:64:a8:df:e1:c8:e6:f2:e0:cb:c2:01:33:fa:b1:7e: 56:9c:61:70:b3:71:83:d2:1c:b4:d7:33:26:70:4d:71:13:ef: 81:fa:98:78:ae:2f:43:82:bd:ac:2b:40:74:d4:d1:6c:8a:42: e8:29:50:4c:35:2f:39:92:6f:b9:44:cf:44:81:e7:ee:4c:de: 6b:52:af:1b:9b:b9:eb:64:74:16:52:c2:1c:d3:bc:5b:2d:b2: 42:42:9b:d8:8d:d1:f1:69:fa:b4:fd:45:1c:a3:59:1f:96:99: 77:e3:24:84:a9:6d:23:45:76:75:5f:13:60:1b:1e:b3:26:1b: de:8f:06:d4:a0:98:33:73:e1:e0:b3:4e:c9:36:02:3b:d9:1d: 38:b9:a2:9d:cd:75:72:f7:45:a2:5a:7a:80:55:16:82:15:f5: 51:87:f3:21:98:f9:46:ff:33:ba:55:d2:9e:5e:f4:17:eb:4f: bf:2d:16:d7:d5:a5:4a:41:77:af:50:7a:fd:b0:37:f7:4d:1c: 61:51:d2:35:ed:ab:35:c8:97:4a:19:ca:cf:32:c4:33:8c:35: 94:2b:59:0f:2f:03:33:2f:1d:6a:27:62:22:89:a0:dc:ef:e8: e2:ec:9e:d3 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUM1e8ZZWlCc0Pa94g1kyfoZW9HDwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDYxNUFCQ0JBNTAxNTU2NEFERTlCNDczRDY0RjFFMzRB MEJBOEQ0QTAeFw0yNTA2MjkwOTQ2MTNaFw0yNTA2MzAxMjMxMTNaMDMxMTAvBgNV BAMTKDU3RUNBREY4NDA5RDY1MTkxNTA4NjYyNDNEREQxODUxODFDRTRFMzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyK/MwNeJnxybv1MbTuBFAGenu /dRue7AMPwyo1wnflkmx4TA5WCPaGaA3/JIsvTxCL8C5kZVndNFHJqnJ0GkFZ5wO 07X2ls4pHHOUopZ+x9OQlEHJwaNyitLu6MsqjSwO70bzoH9WDcSCT41Q8zLgPmfR Ge/VtYO4v2LN86meTQLsDK7WNRV4b2BCkgjEI6ywxMvNMPXnGy0VYAUOPnnoZmO5 k3HiT1VUiqpDQpsZUQsddF85b7nHN7S2nbnIVCft4fwxWLJn1EfbwtZKtDwoi/0s sYf6K65v7mvgOw/DKAgkFfxmVlkjmz9oLnDKl6eg8vMzgNExvOw/CqmZ5wQRAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUV+yt+ECdZRkVCGYkPd0YUYHOTjMwHwYDVR0j BBgwFoAU1hWry6UBVWSt6bRz1k8eNKC6jUowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMTNmNjg1NjEtMGE3NC00Y2NhLWJmOGYtMTJmYWFhZmM4 ZWI4LzMvRDYxNUFCQ0JBNTAxNTU2NEFERTlCNDczRDY0RjFFMzRBMEJBOEQ0QS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC9ENjE1QUJDQkE1MDE1NTY0QURFOUI0NzNE NjRGMUUzNEEwQkE4RDRBLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzEzZjY4NTYxLTBhNzQtNGNjYS1iZjhmLTEyZmFhYWZjOGViOC8zL0Q2MTVBQkNC QTUwMTU1NjRBREU5QjQ3M0Q2NEYxRTM0QTBCQThENEEubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAwEqKE ebHJcjPN/bFYDwCCd8dRPt5kqN/hyOby4MvCATP6sX5WnGFws3GD0hy01zMmcE1x E++B+ph4ri9Dgr2sK0B01NFsikLoKVBMNS85km+5RM9EgefuTN5rUq8bm7nrZHQW UsIc07xbLbJCQpvYjdHxafq0/UUco1kflpl34ySEqW0jRXZ1XxNgGx6zJhvejwbU oJgzc+Hgs07JNgI72R04uaKdzXVy90WiWnqAVRaCFfVRh/MhmPlG/zO6VdKeXvQX 60+/LRbX1aVKQXevUHr9sDf3TRxhUdI17as1yJdKGcrPMsQzjDWUK1kPLwMzLx1q J2IiiaDc7+ji7J7T -----END CERTIFICATE-----Generated at Sun Jun 29 12:09:39 2025 by rpki-client