$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/3/D615ABCBA5015564ADE9B473D64F1E34A0BA8D4A.mft File: D615ABCBA5015564ADE9B473D64F1E34A0BA8D4A.mft (raw, json) Hash identifier: zCg9DReQwmC8KjKcvep/8rdcK2lJFr+sMLGAn+1CBOU= Subject key identifier: 98:0D:F0:40:8F:BD:60:3F:37:92:21:DA:FE:58:A5:4E:73:8A:45:D3 Authority key identifier: D6:15:AB:CB:A5:01:55:64:AD:E9:B4:73:D6:4F:1E:34:A0:BA:8D:4A Certificate issuer: /CN=D615ABCBA5015564ADE9B473D64F1E34A0BA8D4A Certificate serial: 780E6F8C509CF551FD063BBD2C8394E6619FFCC2 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/D615ABCBA5015564ADE9B473D64F1E34A0BA8D4A.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/3/D615ABCBA5015564ADE9B473D64F1E34A0BA8D4A.mft Manifest number: 0110 Signing time: Sun 19 Oct 2025 05:15:16 +0000 Manifest this update: Sun 19 Oct 2025 05:10:16 +0000 Manifest next update: Mon 20 Oct 2025 08:54:16 +0000 Files and hashes: 1: 326131343a373538303a3930333a3a2f34382d3438203d3e203331383938.roa (hash: ypgUGD6Euz3HGS0A9GoVgCiVtLF78aI6ZX/YlUyvGd8=) 2: 326131343a373538303a3930323a3a2f34382d3438203d3e20323033383433.roa (hash: BFT8GbG7CSJ9YmzS1PjnMDrg1nwAcfXEJPEfuo5FzQk=) 3: 326131343a373538303a3930313a3a2f34382d3438203d3e20323033383433.roa (hash: XxS9zprV7IX1JjrBQQ+JptkD2bW89WKl615fH9J1hzc=) 4: D615ABCBA5015564ADE9B473D64F1E34A0BA8D4A.crl (hash: rSLOnrz5+ubY1B8hxaRCXjbml+slH0eLOCeZ2qFTkXU=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/3/D615ABCBA5015564ADE9B473D64F1E34A0BA8D4A.crl rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/3/D615ABCBA5015564ADE9B473D64F1E34A0BA8D4A.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/D615ABCBA5015564ADE9B473D64F1E34A0BA8D4A.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 20 Oct 2025 08:54:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:0e:6f:8c:50:9c:f5:51:fd:06:3b:bd:2c:83:94:e6:61:9f:fc:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D615ABCBA5015564ADE9B473D64F1E34A0BA8D4A Validity Not Before: Oct 19 05:10:16 2025 GMT Not After : Oct 20 08:54:16 2025 GMT Subject: CN=980DF0408FBD603F379221DAFE58A54E738A45D3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:51:ae:3a:0a:7c:62:87:1d:e2:7f:80:5b:1f: a8:9c:32:fa:2c:78:f0:ff:18:25:4b:5b:16:4e:ac: 33:73:6b:db:3f:55:23:f1:08:f9:6e:79:86:0f:4c: 8c:52:09:9a:77:17:1f:a4:a2:d3:c9:74:bf:27:e9: 41:c0:ff:12:5e:3b:a8:ec:31:11:48:f4:2f:91:f0: 50:18:6d:26:30:0a:0d:65:1b:12:d4:39:c0:20:4a: 00:8a:09:49:99:40:a2:c2:83:c2:9f:fd:20:dc:73: de:e4:aa:de:8d:6a:fa:65:80:70:b4:9d:bb:0e:4e: a7:0d:a3:92:d5:4a:48:5b:b2:c6:e3:e9:0a:86:58: 23:59:a1:16:f9:19:23:77:72:e0:a8:25:1b:52:3d: 8e:6c:56:3c:45:ba:9d:cf:cd:c1:c7:a0:d2:50:1c: e2:fd:3b:5a:57:ea:d5:8b:29:2e:79:b1:c0:a0:21: 8a:84:99:ae:27:25:65:de:6f:18:3e:82:14:aa:e9: 8f:2b:3b:17:df:cf:16:4e:8f:82:80:3d:a6:da:73: b9:74:7a:0b:cc:1a:b4:4d:39:de:a1:87:cd:c2:fd: 29:73:4d:d3:43:f6:b4:4d:7f:13:61:fc:c1:ff:bf: 3e:6b:71:46:e5:6a:3f:32:71:a5:e4:01:b7:bd:df: 97:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:0D:F0:40:8F:BD:60:3F:37:92:21:DA:FE:58:A5:4E:73:8A:45:D3 X509v3 Authority Key Identifier: keyid:D6:15:AB:CB:A5:01:55:64:AD:E9:B4:73:D6:4F:1E:34:A0:BA:8D:4A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/3/D615ABCBA5015564ADE9B473D64F1E34A0BA8D4A.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/D615ABCBA5015564ADE9B473D64F1E34A0BA8D4A.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/3/D615ABCBA5015564ADE9B473D64F1E34A0BA8D4A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2d:c6:c1:11:71:fe:13:31:77:f8:be:94:e9:30:54:7b:48:1c: d4:09:33:97:7c:fc:86:aa:78:ce:bb:f4:c5:56:15:76:ce:5d: 1f:3b:ee:c0:7d:bc:41:de:7c:cb:15:61:10:52:4b:40:4d:38: f6:54:f3:2f:b5:30:48:fc:04:8a:7d:e2:be:44:73:78:d1:63: a2:28:b2:d2:eb:33:ef:f5:ba:09:4e:b3:bb:e7:f2:7a:81:6a: 07:9f:c6:b7:33:c6:50:c4:9d:e7:9b:59:89:5d:cc:62:0a:83: 27:7a:4f:31:ac:df:7a:8b:3f:19:80:0c:18:ae:4a:cb:2e:69: 5e:bf:cd:84:ad:5e:3c:77:7b:78:2a:f4:12:33:23:f6:3e:b0: b6:82:f0:54:67:38:27:74:f6:83:f5:34:45:7a:74:b8:f8:2f: d6:50:35:e4:12:03:02:36:9f:73:94:15:72:0b:bf:3a:d5:c4: 67:67:e4:d9:b7:3b:ad:ae:06:c7:97:64:4b:33:f1:91:bd:5b: f3:2f:41:b7:f1:cd:c7:87:98:36:98:b3:35:76:34:f2:74:a8: e6:73:d0:8e:4e:cd:2d:f3:bc:49:e3:3b:f8:07:a3:d0:9f:af: 12:68:c9:29:c1:6b:41:84:32:2c:34:7f:ef:d0:94:f4:48:64: d5:8e:14:d8 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUeA5vjFCc9VH9Bju9LIOU5mGf/MIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDYxNUFCQ0JBNTAxNTU2NEFERTlCNDczRDY0RjFFMzRB MEJBOEQ0QTAeFw0yNTEwMTkwNTEwMTZaFw0yNTEwMjAwODU0MTZaMDMxMTAvBgNV BAMTKDk4MERGMDQwOEZCRDYwM0YzNzkyMjFEQUZFNThBNTRFNzM4QTQ1RDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrUa46Cnxihx3if4BbH6icMvos ePD/GCVLWxZOrDNza9s/VSPxCPlueYYPTIxSCZp3Fx+kotPJdL8n6UHA/xJeO6js MRFI9C+R8FAYbSYwCg1lGxLUOcAgSgCKCUmZQKLCg8Kf/SDcc97kqt6NavplgHC0 nbsOTqcNo5LVSkhbssbj6QqGWCNZoRb5GSN3cuCoJRtSPY5sVjxFup3PzcHHoNJQ HOL9O1pX6tWLKS55scCgIYqEma4nJWXebxg+ghSq6Y8rOxffzxZOj4KAPabac7l0 egvMGrRNOd6hh83C/SlzTdND9rRNfxNh/MH/vz5rcUblaj8ycaXkAbe935cZAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUmA3wQI+9YD83kiHa/lilTnOKRdMwHwYDVR0j BBgwFoAU1hWry6UBVWSt6bRz1k8eNKC6jUowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMTNmNjg1NjEtMGE3NC00Y2NhLWJmOGYtMTJmYWFhZmM4 ZWI4LzMvRDYxNUFCQ0JBNTAxNTU2NEFERTlCNDczRDY0RjFFMzRBMEJBOEQ0QS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC9ENjE1QUJDQkE1MDE1NTY0QURFOUI0NzNE NjRGMUUzNEEwQkE4RDRBLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzEzZjY4NTYxLTBhNzQtNGNjYS1iZjhmLTEyZmFhYWZjOGViOC8zL0Q2MTVBQkNC QTUwMTU1NjRBREU5QjQ3M0Q2NEYxRTM0QTBCQThENEEubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAtxsER cf4TMXf4vpTpMFR7SBzUCTOXfPyGqnjOu/TFVhV2zl0fO+7AfbxB3nzLFWEQUktA TTj2VPMvtTBI/ASKfeK+RHN40WOiKLLS6zPv9boJTrO75/J6gWoHn8a3M8ZQxJ3n m1mJXcxiCoMnek8xrN96iz8ZgAwYrkrLLmlev82ErV48d3t4KvQSMyP2PrC2gvBU ZzgndPaD9TRFenS4+C/WUDXkEgMCNp9zlBVyC7861cRnZ+TZtzutrgbHl2RLM/GR vVvzL0G38c3Hh5g2mLM1djTydKjmc9COTs0t87xJ4zv4B6PQn68SaMkpwWtBhDIs NH/v0JT0SGTVjhTY -----END CERTIFICATE-----Generated at Sun Oct 19 23:46:03 2025 by rpki-client