$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/3/D615ABCBA5015564ADE9B473D64F1E34A0BA8D4A.mft File: D615ABCBA5015564ADE9B473D64F1E34A0BA8D4A.mft (raw, json) Hash identifier: 90LFW0OxwEt/x8ube4SEHs6VVn/+brmoDjINn0HqLmA= Subject key identifier: BF:53:65:D0:98:62:E3:29:A8:A1:ED:F8:63:AC:AA:09:92:D7:84:EF Authority key identifier: D6:15:AB:CB:A5:01:55:64:AD:E9:B4:73:D6:4F:1E:34:A0:BA:8D:4A Certificate issuer: /CN=D615ABCBA5015564ADE9B473D64F1E34A0BA8D4A Certificate serial: 4670E28041785BB7E67F70D399DF5E8392386639 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/D615ABCBA5015564ADE9B473D64F1E34A0BA8D4A.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/3/D615ABCBA5015564ADE9B473D64F1E34A0BA8D4A.mft Manifest number: 0224 Signing time: Tue 12 May 2026 22:38:31 +0000 Manifest this update: Tue 12 May 2026 22:33:31 +0000 Manifest next update: Thu 14 May 2026 00:18:31 +0000 Files and hashes: 1: D615ABCBA5015564ADE9B473D64F1E34A0BA8D4A.crl (hash: xACKIvTSXKo1vNSfnvXIou72L18HV7hGB3mssjbu5Ac=) 2: 326131343a373538303a3930333a3a2f34382d3438203d3e203331383938.roa (hash: cxJ2EfGW3Gw41SsKZJkYgUq6pKjZBBiREvTQVJOiK1o=) 3: 326131343a373538303a3930323a3a2f34382d3438203d3e20323033383433.roa (hash: DyehTUsfk21Hj5Xq64+F+F4A1oaphKt7e4+bcF+X09M=) 4: 326131343a373538303a3930313a3a2f34382d3438203d3e20323033383433.roa (hash: Ou/BuV6DNjxZqmppmI1GfTQOuzQIj3w4635LcGfFjnQ=) 5: 326131343a373538303a3930303a3a2f34372d3437203d3e20323033383433.roa (hash: FrDNupKDARVlRRNCBCc/O4jmFlJqhvZjjWnPHeQbISc=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/3/D615ABCBA5015564ADE9B473D64F1E34A0BA8D4A.crl rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/3/D615ABCBA5015564ADE9B473D64F1E34A0BA8D4A.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/D615ABCBA5015564ADE9B473D64F1E34A0BA8D4A.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 13 May 2026 23:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:70:e2:80:41:78:5b:b7:e6:7f:70:d3:99:df:5e:83:92:38:66:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D615ABCBA5015564ADE9B473D64F1E34A0BA8D4A Validity Not Before: May 12 22:33:31 2026 GMT Not After : May 14 00:18:31 2026 GMT Subject: CN=BF5365D09862E329A8A1EDF863ACAA0992D784EF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:83:1f:76:21:8c:b1:72:28:7e:22:51:ca:e7: ca:d7:9c:85:f7:34:2c:11:87:be:99:93:7f:7b:65: 30:f5:b4:89:ef:66:b8:da:22:c1:9e:2d:69:82:ff: 3f:9a:75:16:ab:83:bf:96:37:a9:b2:57:b4:28:02: a3:41:1c:de:14:10:bc:a1:7d:ea:43:dc:45:5a:59: 76:17:48:c3:56:cc:89:c6:d0:6c:a4:9b:d8:10:15: af:3d:12:13:cc:af:ec:99:db:14:10:8c:58:47:6c: 67:ef:f2:a0:d1:b9:dd:d3:29:2c:84:00:cb:fe:cc: bc:25:2b:9d:ff:1d:cb:1b:81:00:1e:3b:ca:4f:61: 9d:34:ba:ab:66:ca:32:3b:2a:49:2a:a4:a1:54:c6: 2b:18:90:aa:7c:a6:be:57:91:88:2e:9d:1a:40:6b: 4c:a8:12:12:a8:63:69:17:63:3f:29:fb:2c:b9:ed: b7:00:5a:7d:68:93:81:04:ae:89:2a:d5:11:17:3c: 05:63:db:6b:3d:39:80:37:d8:b9:71:74:55:90:44: 31:e2:da:9b:cd:00:8f:de:f0:f1:2e:ef:37:7e:41: 26:23:65:a3:ae:78:4d:0a:e8:7d:52:82:c8:ba:42: e2:f0:ec:8d:0b:51:c1:63:66:4e:9e:a6:39:c9:4b: f1:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:53:65:D0:98:62:E3:29:A8:A1:ED:F8:63:AC:AA:09:92:D7:84:EF X509v3 Authority Key Identifier: keyid:D6:15:AB:CB:A5:01:55:64:AD:E9:B4:73:D6:4F:1E:34:A0:BA:8D:4A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/3/D615ABCBA5015564ADE9B473D64F1E34A0BA8D4A.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/D615ABCBA5015564ADE9B473D64F1E34A0BA8D4A.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/3/D615ABCBA5015564ADE9B473D64F1E34A0BA8D4A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:ac:5f:10:7f:50:07:9f:9f:73:bd:cb:b3:29:19:52:a7:c9: 63:2a:52:43:7c:bd:b4:0c:ea:bc:bc:2a:27:2e:4b:ac:8a:b6: f5:53:35:ab:a9:f9:57:d5:b6:7a:4c:ee:61:0d:10:05:16:7c: 13:6d:de:39:0e:d2:22:e8:32:4c:87:6f:91:8b:e5:9f:17:a1: bf:4e:98:2e:05:ef:bf:55:5b:bd:46:7c:10:67:44:22:cc:0e: 64:c3:20:22:39:eb:c6:1b:36:50:33:10:73:79:42:66:cc:c0: c3:e9:5f:a8:7f:20:1d:c2:51:c8:45:ee:57:32:70:4c:c3:11: 95:cb:da:ac:61:84:e2:55:ee:4a:8c:7e:24:fb:46:c3:7a:b2: f4:b2:a3:e2:90:94:ab:4e:46:8b:e7:41:c6:d2:3a:cb:7f:bf: 33:5a:c8:d6:f8:65:50:25:07:05:b3:6a:78:4a:6f:c6:a5:31: 32:12:ff:51:d8:5e:9c:a5:25:04:52:f6:05:7a:6c:84:43:4b: 3a:69:2a:f7:bc:b8:32:61:93:c7:c6:ca:6f:ab:e1:3a:81:af: 06:90:89:6d:e0:5b:d5:a7:9d:cc:3f:28:7a:8d:b7:a0:bf:1a: ae:ec:fb:d5:44:f5:5f:c8:0c:6a:26:a1:c6:31:34:51:a2:04: 8d:ae:f1:1c -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIURnDigEF4W7fmf3DTmd9eg5I4ZjkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDYxNUFCQ0JBNTAxNTU2NEFERTlCNDczRDY0RjFFMzRB MEJBOEQ0QTAeFw0yNjA1MTIyMjMzMzFaFw0yNjA1MTQwMDE4MzFaMDMxMTAvBgNV BAMTKEJGNTM2NUQwOTg2MkUzMjlBOEExRURGODYzQUNBQTA5OTJENzg0RUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8gx92IYyxcih+IlHK58rXnIX3 NCwRh76Zk397ZTD1tInvZrjaIsGeLWmC/z+adRarg7+WN6myV7QoAqNBHN4UELyh fepD3EVaWXYXSMNWzInG0Gykm9gQFa89EhPMr+yZ2xQQjFhHbGfv8qDRud3TKSyE AMv+zLwlK53/HcsbgQAeO8pPYZ00uqtmyjI7KkkqpKFUxisYkKp8pr5XkYgunRpA a0yoEhKoY2kXYz8p+yy57bcAWn1ok4EErokq1REXPAVj22s9OYA32LlxdFWQRDHi 2pvNAI/e8PEu7zd+QSYjZaOueE0K6H1Sgsi6QuLw7I0LUcFjZk6epjnJS/H5AgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUv1Nl0Jhi4ymooe34Y6yqCZLXhO8wHwYDVR0j BBgwFoAU1hWry6UBVWSt6bRz1k8eNKC6jUowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMTNmNjg1NjEtMGE3NC00Y2NhLWJmOGYtMTJmYWFhZmM4 ZWI4LzMvRDYxNUFCQ0JBNTAxNTU2NEFERTlCNDczRDY0RjFFMzRBMEJBOEQ0QS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC9ENjE1QUJDQkE1MDE1NTY0QURFOUI0NzNE NjRGMUUzNEEwQkE4RDRBLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzEzZjY4NTYxLTBhNzQtNGNjYS1iZjhmLTEyZmFhYWZjOGViOC8zL0Q2MTVBQkNC QTUwMTU1NjRBREU5QjQ3M0Q2NEYxRTM0QTBCQThENEEubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBtrF8Q f1AHn59zvcuzKRlSp8ljKlJDfL20DOq8vConLkusirb1UzWrqflX1bZ6TO5hDRAF FnwTbd45DtIi6DJMh2+Ri+WfF6G/TpguBe+/VVu9RnwQZ0QizA5kwyAiOevGGzZQ MxBzeUJmzMDD6V+ofyAdwlHIRe5XMnBMwxGVy9qsYYTiVe5KjH4k+0bDerL0sqPi kJSrTkaL50HG0jrLf78zWsjW+GVQJQcFs2p4Sm/GpTEyEv9R2F6cpSUEUvYFemyE Q0s6aSr3vLgyYZPHxspvq+E6ga8GkIlt4FvVp53MPyh6jbegvxqu7PvVRPVfyAxq JqHGMTRRogSNrvEc -----END CERTIFICATE-----Generated at Wed May 13 05:11:43 2026 by rpki-client