$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/3/D615ABCBA5015564ADE9B473D64F1E34A0BA8D4A.mft File: D615ABCBA5015564ADE9B473D64F1E34A0BA8D4A.mft (raw, json) Hash identifier: dUNFfkqsFmEtYAVLIiQpVTFlcIPlLTd5iWiPtiSfwFM= Subject key identifier: 35:7D:82:FD:34:4B:2F:F4:8C:47:E1:E2:38:69:3F:15:FF:B0:EE:B6 Authority key identifier: D6:15:AB:CB:A5:01:55:64:AD:E9:B4:73:D6:4F:1E:34:A0:BA:8D:4A Certificate issuer: /CN=D615ABCBA5015564ADE9B473D64F1E34A0BA8D4A Certificate serial: 39AE317BEA2F39C0E9FE30FE5617ACAF36DF4B5C Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/D615ABCBA5015564ADE9B473D64F1E34A0BA8D4A.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/3/D615ABCBA5015564ADE9B473D64F1E34A0BA8D4A.mft Manifest number: C3 Signing time: Sat 23 Aug 2025 00:06:46 +0000 Manifest this update: Sat 23 Aug 2025 00:01:46 +0000 Manifest next update: Sun 24 Aug 2025 02:48:46 +0000 Files and hashes: 1: 326131343a373538303a3930323a3a2f34382d3438203d3e20323033383433.roa (hash: BFT8GbG7CSJ9YmzS1PjnMDrg1nwAcfXEJPEfuo5FzQk=) 2: 326131343a373538303a3930333a3a2f34382d3438203d3e203331383938.roa (hash: ypgUGD6Euz3HGS0A9GoVgCiVtLF78aI6ZX/YlUyvGd8=) 3: D615ABCBA5015564ADE9B473D64F1E34A0BA8D4A.crl (hash: nF74bpk/H5pr8FPjkrhUOZ55T7wnkk150I9TxFNLzAw=) 4: 326131343a373538303a3930313a3a2f34382d3438203d3e20323033383433.roa (hash: XxS9zprV7IX1JjrBQQ+JptkD2bW89WKl615fH9J1hzc=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/3/D615ABCBA5015564ADE9B473D64F1E34A0BA8D4A.crl rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/3/D615ABCBA5015564ADE9B473D64F1E34A0BA8D4A.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/D615ABCBA5015564ADE9B473D64F1E34A0BA8D4A.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 24 Aug 2025 02:48:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:ae:31:7b:ea:2f:39:c0:e9:fe:30:fe:56:17:ac:af:36:df:4b:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D615ABCBA5015564ADE9B473D64F1E34A0BA8D4A Validity Not Before: Aug 23 00:01:46 2025 GMT Not After : Aug 24 02:48:46 2025 GMT Subject: CN=357D82FD344B2FF48C47E1E238693F15FFB0EEB6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:96:15:91:16:d4:1f:02:14:9f:a5:2b:a7:4b: ae:e5:74:fc:f1:12:d5:75:0f:9b:e6:5d:dd:3c:8d: d5:4d:77:dc:37:01:10:9e:8d:d1:9b:0a:6c:06:fb: 68:6f:f9:bc:6b:52:45:21:1f:b2:f7:2a:f7:09:5a: 26:d8:44:77:53:9e:f2:35:e8:21:ff:26:d1:71:06: 44:d7:5d:33:8e:31:75:2f:35:ac:9f:b8:1c:53:f1: 08:bd:70:2d:92:c2:0b:dc:9a:9f:30:e6:1f:6d:09: 99:2d:93:3c:e6:06:cb:b8:68:66:0c:bc:cf:dc:b0: 88:02:06:bf:21:70:1c:a5:37:bc:ba:98:de:fe:58: 1b:61:ab:b3:0d:1b:e8:84:0e:da:3d:cf:31:a9:6a: 87:d9:74:94:0f:89:f4:eb:ae:25:2e:56:6c:b3:c2: ab:e1:f8:94:8e:a1:9f:5a:6d:72:fa:3e:3e:fa:29: 9a:f4:04:fd:7d:77:97:85:0e:dc:9e:2d:2b:16:6f: 58:ff:ce:7b:97:b8:25:e1:1c:16:ac:5a:d9:c8:d9: e3:f1:80:21:3a:3b:59:e5:4b:c0:e2:34:d4:69:f5: 42:06:16:26:22:2c:66:07:93:8b:c4:1f:3d:71:6a: 44:76:0e:5d:c4:c6:81:8a:a6:dc:db:e5:d4:88:66: 06:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:7D:82:FD:34:4B:2F:F4:8C:47:E1:E2:38:69:3F:15:FF:B0:EE:B6 X509v3 Authority Key Identifier: keyid:D6:15:AB:CB:A5:01:55:64:AD:E9:B4:73:D6:4F:1E:34:A0:BA:8D:4A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/3/D615ABCBA5015564ADE9B473D64F1E34A0BA8D4A.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/D615ABCBA5015564ADE9B473D64F1E34A0BA8D4A.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/3/D615ABCBA5015564ADE9B473D64F1E34A0BA8D4A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b5:9c:66:d6:fc:84:39:59:bd:ce:c9:fd:97:de:0a:0d:87:6b: 1e:01:9b:04:35:7e:00:50:d6:5b:1d:6c:04:02:5a:e3:07:12: f6:43:9c:52:17:1f:63:9d:87:53:8d:1f:bc:cb:13:d4:6b:8e: e7:47:13:b5:dc:6b:22:21:3d:7f:89:e9:fb:7a:e3:e1:49:38: ef:26:3b:d4:e2:67:73:6f:1a:44:10:32:fa:c0:1a:7e:42:b2: 6c:31:b6:1d:63:35:80:e6:9d:62:df:b0:86:0e:8e:5e:6a:ac: 42:56:3b:61:1b:a0:2f:56:f5:54:4d:d9:0c:86:90:04:7f:75: 90:4d:8d:a1:3a:7d:d3:0e:1c:74:f7:fc:62:4b:35:be:4d:c7: bd:56:c7:ab:8c:31:66:e7:03:10:21:7c:71:b2:c2:0f:65:20: 68:d4:37:57:ad:a4:e4:ad:02:35:a7:15:d6:76:6d:a2:8d:76: f8:ba:2a:5e:26:fe:07:30:de:c5:9b:12:0a:ab:b1:38:90:69: c1:5b:7c:d7:35:44:08:c7:13:e0:42:05:48:2e:ac:ed:d8:ed: 72:71:c3:56:6c:01:90:18:4e:6d:24:0b:89:e0:72:da:50:1d: be:c4:bd:fc:33:23:67:bc:26:3c:ca:12:ed:77:03:d1:a9:b8: 97:46:22:84 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUOa4xe+ovOcDp/jD+VhesrzbfS1wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDYxNUFCQ0JBNTAxNTU2NEFERTlCNDczRDY0RjFFMzRB MEJBOEQ0QTAeFw0yNTA4MjMwMDAxNDZaFw0yNTA4MjQwMjQ4NDZaMDMxMTAvBgNV BAMTKDM1N0Q4MkZEMzQ0QjJGRjQ4QzQ3RTFFMjM4NjkzRjE1RkZCMEVFQjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCklhWRFtQfAhSfpSunS67ldPzx EtV1D5vmXd08jdVNd9w3ARCejdGbCmwG+2hv+bxrUkUhH7L3KvcJWibYRHdTnvI1 6CH/JtFxBkTXXTOOMXUvNayfuBxT8Qi9cC2Swgvcmp8w5h9tCZktkzzmBsu4aGYM vM/csIgCBr8hcBylN7y6mN7+WBthq7MNG+iEDto9zzGpaofZdJQPifTrriUuVmyz wqvh+JSOoZ9abXL6Pj76KZr0BP19d5eFDtyeLSsWb1j/znuXuCXhHBasWtnI2ePx gCE6O1nlS8DiNNRp9UIGFiYiLGYHk4vEHz1xakR2Dl3ExoGKptzb5dSIZgY7AgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUNX2C/TRLL/SMR+HiOGk/Ff+w7rYwHwYDVR0j BBgwFoAU1hWry6UBVWSt6bRz1k8eNKC6jUowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMTNmNjg1NjEtMGE3NC00Y2NhLWJmOGYtMTJmYWFhZmM4 ZWI4LzMvRDYxNUFCQ0JBNTAxNTU2NEFERTlCNDczRDY0RjFFMzRBMEJBOEQ0QS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC9ENjE1QUJDQkE1MDE1NTY0QURFOUI0NzNE NjRGMUUzNEEwQkE4RDRBLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzEzZjY4NTYxLTBhNzQtNGNjYS1iZjhmLTEyZmFhYWZjOGViOC8zL0Q2MTVBQkNC QTUwMTU1NjRBREU5QjQ3M0Q2NEYxRTM0QTBCQThENEEubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQC1nGbW /IQ5Wb3Oyf2X3goNh2seAZsENX4AUNZbHWwEAlrjBxL2Q5xSFx9jnYdTjR+8yxPU a47nRxO13GsiIT1/ien7euPhSTjvJjvU4mdzbxpEEDL6wBp+QrJsMbYdYzWA5p1i 37CGDo5eaqxCVjthG6AvVvVUTdkMhpAEf3WQTY2hOn3TDhx09/xiSzW+Tce9Vser jDFm5wMQIXxxssIPZSBo1DdXraTkrQI1pxXWdm2ijXb4uipeJv4HMN7FmxIKq7E4 kGnBW3zXNUQIxxPgQgVILqzt2O1yccNWbAGQGE5tJAuJ4HLaUB2+xL38MyNnvCY8 yhLtdwPRqbiXRiKE -----END CERTIFICATE-----Generated at Sat Aug 23 19:19:39 2025 by rpki-client