$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b6746901-23d3-4301-b28d-8b0982b06c08/1/15BCD75E02E085EB08A3D2F22C872972154D76C5.mft File: 15BCD75E02E085EB08A3D2F22C872972154D76C5.mft (raw, json) Hash identifier: mzBF4yaj3B/oyNrObvt9u0m64kSvNX7frSB1WoN4c+Q= Subject key identifier: D3:3D:95:86:91:EC:3C:FA:7D:A1:85:31:AE:42:5D:86:E0:D7:FA:9A Authority key identifier: 15:BC:D7:5E:02:E0:85:EB:08:A3:D2:F2:2C:87:29:72:15:4D:76:C5 Certificate issuer: /CN=15BCD75E02E085EB08A3D2F22C872972154D76C5 Certificate serial: 102AD8D37F6F7C3779313355DCB9B8DB14B45CFC Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/15BCD75E02E085EB08A3D2F22C872972154D76C5.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b6746901-23d3-4301-b28d-8b0982b06c08/1/15BCD75E02E085EB08A3D2F22C872972154D76C5.mft Manifest number: A2 Signing time: Sun 29 Jun 2025 08:23:35 +0000 Manifest this update: Sun 29 Jun 2025 08:18:35 +0000 Manifest next update: Mon 30 Jun 2025 12:04:35 +0000 Files and hashes: 1: 326131343a373538313a396663303a3a2f34342d3434203d3e20323133343330.roa (hash: MUq020p8NbAnolAB9zdSK3Cpj1AnGomUMMut2k1LbJE=) 2: 326131343a373538313a396661303a3a2f34342d3434203d3e20323133343330.roa (hash: oAF6XMqIQIjZqny73zZ9bZTjumil+o5WHhatNbG2YqU=) 3: 326131343a373538313a396662303a3a2f34342d3434203d3e20323133343330.roa (hash: 7syqL2b6B4hFc1tTh/9QPvKN2SjHSufNn4c9hT7wZns=) 4: 15BCD75E02E085EB08A3D2F22C872972154D76C5.crl (hash: udRQ2gGCfw604MVve8TfOkY26YgnY67+E85MbH/sNSY=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/b6746901-23d3-4301-b28d-8b0982b06c08/1/15BCD75E02E085EB08A3D2F22C872972154D76C5.crl rsync://rsync.paas.rpki.ripe.net/repository/b6746901-23d3-4301-b28d-8b0982b06c08/1/15BCD75E02E085EB08A3D2F22C872972154D76C5.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/15BCD75E02E085EB08A3D2F22C872972154D76C5.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 30 Jun 2025 12:04:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:2a:d8:d3:7f:6f:7c:37:79:31:33:55:dc:b9:b8:db:14:b4:5c:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=15BCD75E02E085EB08A3D2F22C872972154D76C5 Validity Not Before: Jun 29 08:18:35 2025 GMT Not After : Jun 30 12:04:35 2025 GMT Subject: CN=D33D958691EC3CFA7DA18531AE425D86E0D7FA9A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:7c:58:46:60:e5:ce:ac:e4:e5:2b:83:75:28: 19:12:63:70:83:f9:74:c5:bd:a1:03:7b:f1:1a:d1: 91:bd:8d:aa:cb:84:e5:b7:a9:81:08:5c:ac:70:e2: a7:95:35:4c:e7:fc:60:b9:be:cc:ca:cb:64:60:38: 27:ce:30:75:a8:01:e5:e4:f5:51:1e:aa:f4:1c:74: a7:c5:8b:3a:af:2d:a3:0a:89:32:a6:66:f4:bd:82: 51:b4:36:4a:b5:ee:47:29:c1:cd:69:62:c5:3c:75: 5b:9b:b0:47:1e:d4:50:57:b8:0d:9a:60:f4:33:9d: b2:b8:60:fa:9c:5b:d7:cf:5c:1d:8a:84:73:38:67: 3b:ff:1a:95:5a:03:66:f9:2c:29:44:8d:1a:67:2a: 90:ee:6e:a0:be:d4:22:1c:34:30:4b:5c:b6:18:c8: 4e:4a:e4:2c:ca:27:7b:53:6b:67:e2:8d:47:9c:27: 58:82:98:5b:de:2b:11:bc:a5:22:90:b9:1a:3e:3a: 68:58:25:6c:7e:b4:ac:02:b2:3d:b4:b7:b1:af:dc: 09:18:f7:4d:bf:81:ac:59:34:b6:4a:0c:eb:81:df: 4a:ba:75:9b:9d:b4:e5:9d:55:12:7d:2e:e3:6b:03: 80:02:12:d9:42:d9:08:e4:54:4a:8d:d7:49:a1:00: 66:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:3D:95:86:91:EC:3C:FA:7D:A1:85:31:AE:42:5D:86:E0:D7:FA:9A X509v3 Authority Key Identifier: keyid:15:BC:D7:5E:02:E0:85:EB:08:A3:D2:F2:2C:87:29:72:15:4D:76:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/b6746901-23d3-4301-b28d-8b0982b06c08/1/15BCD75E02E085EB08A3D2F22C872972154D76C5.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/15BCD75E02E085EB08A3D2F22C872972154D76C5.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b6746901-23d3-4301-b28d-8b0982b06c08/1/15BCD75E02E085EB08A3D2F22C872972154D76C5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:e1:16:38:10:34:69:aa:a4:d8:4c:ae:f2:e3:e2:32:4a:cb: 4f:ba:6e:56:77:d1:ef:50:8b:52:dc:d6:bf:25:9b:d9:82:83: 4c:5f:07:9a:09:a5:1b:0b:83:9c:2d:2f:bb:7a:47:54:f7:00: 42:76:9e:ed:49:8b:72:fa:8c:73:28:6c:2f:2f:b5:b8:27:e1: 10:61:95:06:c4:eb:b1:c7:04:26:df:cd:e9:51:82:c3:a9:26: 29:aa:26:2a:39:92:2a:17:ea:fe:ef:6d:01:42:e0:f8:ce:44: 0c:9a:c2:ac:1d:63:66:ff:c7:b4:f1:1d:49:45:77:3b:54:a8: 4a:6c:59:29:59:f5:58:b1:58:8c:00:29:d6:e7:2e:da:f9:11: a6:28:d4:8c:83:83:82:4c:34:68:28:d3:70:4d:37:6c:de:87: 6b:f5:fc:b8:51:c6:85:b5:24:26:cf:cf:42:24:d4:f7:e5:49: 85:ab:fe:b4:84:d4:da:52:e1:7f:6c:ee:11:aa:2d:0d:fa:3c: 73:91:85:f1:8c:9d:1a:6a:7e:c5:b9:4f:61:89:f0:e2:78:cf: c0:89:c5:98:26:a8:a1:d9:60:ea:0c:57:b6:50:91:ff:73:73: c5:30:b9:42:af:c5:23:fa:94:ff:cc:be:71:f2:13:ea:ea:ce: aa:64:a5:5d -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUECrY039vfDd5MTNV3Lm42xS0XPwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTVCQ0Q3NUUwMkUwODVFQjA4QTNEMkYyMkM4NzI5NzIx NTRENzZDNTAeFw0yNTA2MjkwODE4MzVaFw0yNTA2MzAxMjA0MzVaMDMxMTAvBgNV BAMTKEQzM0Q5NTg2OTFFQzNDRkE3REExODUzMUFFNDI1RDg2RTBEN0ZBOUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnfFhGYOXOrOTlK4N1KBkSY3CD +XTFvaEDe/Ea0ZG9jarLhOW3qYEIXKxw4qeVNUzn/GC5vszKy2RgOCfOMHWoAeXk 9VEeqvQcdKfFizqvLaMKiTKmZvS9glG0Nkq17kcpwc1pYsU8dVubsEce1FBXuA2a YPQznbK4YPqcW9fPXB2KhHM4Zzv/GpVaA2b5LClEjRpnKpDubqC+1CIcNDBLXLYY yE5K5CzKJ3tTa2fijUecJ1iCmFveKxG8pSKQuRo+OmhYJWx+tKwCsj20t7Gv3AkY 902/gaxZNLZKDOuB30q6dZudtOWdVRJ9LuNrA4ACEtlC2QjkVEqN10mhAGYrAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQU0z2VhpHsPPp9oYUxrkJdhuDX+powHwYDVR0j BBgwFoAUFbzXXgLghesIo9LyLIcpchVNdsUwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYjY3NDY5MDEtMjNkMy00MzAxLWIyOGQtOGIwOTgyYjA2 YzA4LzEvMTVCQ0Q3NUUwMkUwODVFQjA4QTNEMkYyMkM4NzI5NzIxNTRENzZDNS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC8xNUJDRDc1RTAyRTA4NUVCMDhBM0QyRjIy Qzg3Mjk3MjE1NEQ3NkM1LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2I2NzQ2OTAxLTIzZDMtNDMwMS1iMjhkLThiMDk4MmIwNmMwOC8xLzE1QkNENzVF MDJFMDg1RUIwOEEzRDJGMjJDODcyOTcyMTU0RDc2QzUubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCJ4RY4 EDRpqqTYTK7y4+IySstPum5Wd9HvUItS3Na/JZvZgoNMXweaCaUbC4OcLS+7ekdU 9wBCdp7tSYty+oxzKGwvL7W4J+EQYZUGxOuxxwQm383pUYLDqSYpqiYqOZIqF+r+ 720BQuD4zkQMmsKsHWNm/8e08R1JRXc7VKhKbFkpWfVYsViMACnW5y7a+RGmKNSM g4OCTDRoKNNwTTds3odr9fy4UcaFtSQmz89CJNT35UmFq/60hNTaUuF/bO4Rqi0N +jxzkYXxjJ0aan7FuU9hifDieM/AicWYJqih2WDqDFe2UJH/c3PFMLlCr8Uj+pT/ zL5x8hPq6s6qZKVd -----END CERTIFICATE-----Generated at Sun Jun 29 19:28:36 2025 by rpki-client