$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d9bd3888-9302-4b6f-a017-2b4bba5e57bb/2/315EC08E540BCBC870FEB38832274E048E2E1F80.mft File: 315EC08E540BCBC870FEB38832274E048E2E1F80.mft (raw, json) Hash identifier: 10OYjLmdOlWcYB9x0pM4L2nYQp/7KZdB+UyU9PNZg54= Subject key identifier: 1E:86:0E:DA:0B:26:20:B4:27:8B:B8:76:46:2C:02:C7:26:62:2B:EB Authority key identifier: 31:5E:C0:8E:54:0B:CB:C8:70:FE:B3:88:32:27:4E:04:8E:2E:1F:80 Certificate issuer: /CN=315EC08E540BCBC870FEB38832274E048E2E1F80 Certificate serial: 5D20A9E5A3BDB722AD40E6461ABE9A4F130DAB38 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/5/315EC08E540BCBC870FEB38832274E048E2E1F80.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d9bd3888-9302-4b6f-a017-2b4bba5e57bb/2/315EC08E540BCBC870FEB38832274E048E2E1F80.mft Manifest number: 41 Signing time: Thu 23 Jul 2026 19:17:06 +0000 Manifest this update: Thu 23 Jul 2026 19:12:06 +0000 Manifest next update: Fri 24 Jul 2026 20:00:06 +0000 Files and hashes: 1: 315EC08E540BCBC870FEB38832274E048E2E1F80.crl (hash: Ut8ozSP1F9OwX1LPH9BC4fbayd2UC5/YXkCBbE98hIA=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/d9bd3888-9302-4b6f-a017-2b4bba5e57bb/2/315EC08E540BCBC870FEB38832274E048E2E1F80.crl rsync://rsync.paas.rpki.ripe.net/repository/d9bd3888-9302-4b6f-a017-2b4bba5e57bb/2/315EC08E540BCBC870FEB38832274E048E2E1F80.mft rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/5/315EC08E540BCBC870FEB38832274E048E2E1F80.cer rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/5/80838673ED291DC1ACFAE037E88F9C7A78B7127E.crl rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/5/80838673ED291DC1ACFAE037E88F9C7A78B7127E.mft rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/0/80838673ED291DC1ACFAE037E88F9C7A78B7127E.cer rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/0/0E70AE0ACD0BE83D2D458CA207B1D4FFA3C3E4EA.crl rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/0/0E70AE0ACD0BE83D2D458CA207B1D4FFA3C3E4EA.mft rsync://rpki.ripe.net/repository/DEFAULT/DnCuCs0L6D0tRYyiB7HU_6PD5Oo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 24 Jul 2026 10:53:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:20:a9:e5:a3:bd:b7:22:ad:40:e6:46:1a:be:9a:4f:13:0d:ab:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=315EC08E540BCBC870FEB38832274E048E2E1F80 Validity Not Before: Jul 23 19:12:06 2026 GMT Not After : Jul 24 20:00:06 2026 GMT Subject: CN=1E860EDA0B2620B4278BB876462C02C726622BEB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:d1:20:fe:a1:6b:45:21:96:7d:49:8a:59:af: a9:6a:10:26:f8:68:f0:d0:88:ed:a4:82:19:1a:d7: b1:e5:da:73:b9:5c:c4:47:5a:65:42:48:4c:d1:50: f4:61:88:9c:7f:8f:9c:ad:6d:7d:b5:4a:7d:a1:62: b0:6e:92:33:e4:59:72:9f:fc:0d:39:7f:ed:a7:e1: b5:e3:7f:32:8c:97:0e:21:6a:cf:c3:d4:75:74:d3: e8:8b:13:20:2f:81:ee:bb:64:1e:c4:02:55:58:3c: 92:4e:87:60:56:43:9b:59:3f:ca:23:28:dd:86:e2: ec:de:2b:60:59:8d:ba:f6:65:ee:f4:ab:dc:38:f9: 46:30:e3:a9:74:89:cd:95:16:74:4e:51:36:d3:ea: 0c:a5:9d:1a:43:01:04:8d:15:86:09:d7:09:8a:49: e7:ab:2c:5c:97:41:1d:93:71:59:c3:6e:6a:ac:d0: 3f:37:81:e2:83:97:98:fe:3a:70:d8:bd:e9:ed:87: 70:17:19:3c:69:81:38:a4:c4:d7:ef:c6:c3:88:cf: 18:82:16:00:33:b2:5d:b5:26:9f:5c:b3:8e:28:e3: d0:51:ad:82:30:ba:e6:cf:6b:a3:5f:e4:f0:ba:f7: 53:81:78:46:9a:ee:29:82:ef:1d:24:a0:21:54:c7: f2:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:86:0E:DA:0B:26:20:B4:27:8B:B8:76:46:2C:02:C7:26:62:2B:EB X509v3 Authority Key Identifier: keyid:31:5E:C0:8E:54:0B:CB:C8:70:FE:B3:88:32:27:4E:04:8E:2E:1F:80 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/d9bd3888-9302-4b6f-a017-2b4bba5e57bb/2/315EC08E540BCBC870FEB38832274E048E2E1F80.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/5/315EC08E540BCBC870FEB38832274E048E2E1F80.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d9bd3888-9302-4b6f-a017-2b4bba5e57bb/2/315EC08E540BCBC870FEB38832274E048E2E1F80.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:67:51:b5:39:d6:62:3a:31:de:4b:72:c4:77:a3:22:3c:cb: 75:a1:ee:cc:53:1e:2f:eb:93:f5:c6:17:a3:35:2d:ac:fb:47: c1:53:4e:59:1b:68:d9:3f:22:ef:69:18:c6:1f:8d:a7:b7:68: 0f:7d:e6:16:f3:09:85:32:dc:86:1a:3a:1a:e1:a9:ba:79:d3: 8c:b9:54:ac:b9:13:0a:5b:78:d7:e7:06:3b:53:5e:a8:2b:5d: 0b:3d:00:d9:15:b4:84:82:dc:de:d9:ac:ef:33:c7:33:61:f4: 0d:1b:df:5d:69:c4:df:26:b9:be:f5:17:26:eb:fb:4a:bb:12: ee:1b:81:dd:b0:36:63:7e:8a:f4:10:01:7e:01:e2:10:cd:ea: 89:26:92:61:57:8d:5f:aa:35:1b:e0:44:b0:7a:92:26:e2:a7: 54:30:53:ee:c8:4b:61:91:7b:fb:34:cc:ee:47:c7:25:17:81: 65:f3:bb:85:98:11:07:55:85:d9:6a:6b:f8:e7:69:8a:c2:38: 39:73:5f:e8:fb:85:c0:f9:8d:ae:23:92:75:07:17:c9:89:21: 7c:5f:27:a9:85:db:6e:46:77:b5:ed:de:71:6d:96:e0:4e:a7: 23:cc:95:8a:d3:88:f8:19:bb:a0:ee:61:1e:9f:a6:61:2d:7e: 51:68:a7:8c -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUXSCp5aO9tyKtQOZGGr6aTxMNqzgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzE1RUMwOEU1NDBCQ0JDODcwRkVCMzg4MzIyNzRFMDQ4 RTJFMUY4MDAeFw0yNjA3MjMxOTEyMDZaFw0yNjA3MjQyMDAwMDZaMDMxMTAvBgNV BAMTKDFFODYwRURBMEIyNjIwQjQyNzhCQjg3NjQ2MkMwMkM3MjY2MjJCRUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC50SD+oWtFIZZ9SYpZr6lqECb4 aPDQiO2kghka17Hl2nO5XMRHWmVCSEzRUPRhiJx/j5ytbX21Sn2hYrBukjPkWXKf /A05f+2n4bXjfzKMlw4has/D1HV00+iLEyAvge67ZB7EAlVYPJJOh2BWQ5tZP8oj KN2G4uzeK2BZjbr2Ze70q9w4+UYw46l0ic2VFnROUTbT6gylnRpDAQSNFYYJ1wmK SeerLFyXQR2TcVnDbmqs0D83geKDl5j+OnDYventh3AXGTxpgTikxNfvxsOIzxiC FgAzsl21Jp9cs44o49BRrYIwuubPa6Nf5PC691OBeEaa7imC7x0koCFUx/JPAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUHoYO2gsmILQni7h2RiwCxyZiK+swHwYDVR0j BBgwFoAUMV7AjlQLy8hw/rOIMidOBI4uH4AwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZDliZDM4ODgtOTMwMi00YjZmLWEwMTctMmI0YmJhNWU1 N2JiLzIvMzE1RUMwOEU1NDBCQ0JDODcwRkVCMzg4MzIyNzRFMDQ4RTJFMUY4MC5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9mNTMyYjllYi0yZmFlLTQ4 YTgtOTc5My0zM2VlYzA2N2NlMzkvNS8zMTVFQzA4RTU0MEJDQkM4NzBGRUIzODgz MjI3NEUwNDhFMkUxRjgwLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2Q5YmQzODg4LTkzMDItNGI2Zi1hMDE3LTJiNGJiYTVlNTdiYi8yLzMxNUVDMDhF NTQwQkNCQzg3MEZFQjM4ODMyMjc0RTA0OEUyRTFGODAubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQB5Z1G1 OdZiOjHeS3LEd6MiPMt1oe7MUx4v65P1xhejNS2s+0fBU05ZG2jZPyLvaRjGH42n t2gPfeYW8wmFMtyGGjoa4am6edOMuVSsuRMKW3jX5wY7U16oK10LPQDZFbSEgtze 2azvM8czYfQNG99dacTfJrm+9Rcm6/tKuxLuG4HdsDZjfor0EAF+AeIQzeqJJpJh V41fqjUb4ESwepIm4qdUMFPuyEthkXv7NMzuR8clF4Fl87uFmBEHVYXZamv452mK wjg5c1/o+4XA+Y2uI5J1BxfJiSF8XyephdtuRne17d5xbZbgTqcjzJWK04j4Gbug 7mEen6ZhLX5RaKeM -----END CERTIFICATE-----Generated at Thu Jul 23 23:46:37 2026 by rpki-client