$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/d9bd3888-9302-4b6f-a017-2b4bba5e57bb/2/315EC08E540BCBC870FEB38832274E048E2E1F80.mft File: 315EC08E540BCBC870FEB38832274E048E2E1F80.mft (raw, json) Hash identifier: XcNyQFITMAlTRi8Gdj/Q+xw7Co9HPMs8Q22YjNRRKYw= Subject key identifier: DB:0E:32:77:45:C7:48:15:99:3C:02:15:4A:87:1A:36:19:6E:55:FF Authority key identifier: 31:5E:C0:8E:54:0B:CB:C8:70:FE:B3:88:32:27:4E:04:8E:2E:1F:80 Certificate issuer: /CN=315EC08E540BCBC870FEB38832274E048E2E1F80 Certificate serial: 784504DCF5EE4BC6880149E12FA67F0892A82DE2 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/e805ea5c-d7a3-4848-837b-4697ccdd6efe/5/315EC08E540BCBC870FEB38832274E048E2E1F80.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d9bd3888-9302-4b6f-a017-2b4bba5e57bb/2/315EC08E540BCBC870FEB38832274E048E2E1F80.mft Manifest number: D5 Signing time: Sun 15 Nov 2026 11:34:10 +0000 Manifest this update: Sun 15 Nov 2026 11:29:09 +0000 Manifest next update: Mon 16 Nov 2026 11:36:09 +0000 Files and hashes: 1: 315EC08E540BCBC870FEB38832274E048E2E1F80.crl (hash: F99Vh5sEihgldW8RoYetVpNBZCNjot2F9TnmvjI3Npc=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/d9bd3888-9302-4b6f-a017-2b4bba5e57bb/2/315EC08E540BCBC870FEB38832274E048E2E1F80.crl rsync://rsync.paas.rpki.ripe.net/repository/d9bd3888-9302-4b6f-a017-2b4bba5e57bb/2/315EC08E540BCBC870FEB38832274E048E2E1F80.mft rsync://rsync.paas.rpki.ripe.net/repository/e805ea5c-d7a3-4848-837b-4697ccdd6efe/5/315EC08E540BCBC870FEB38832274E048E2E1F80.cer rsync://rsync.paas.rpki.ripe.net/repository/e805ea5c-d7a3-4848-837b-4697ccdd6efe/5/238A11AE245357E72FEB39785C7BC03A973A44E1.crl rsync://rsync.paas.rpki.ripe.net/repository/e805ea5c-d7a3-4848-837b-4697ccdd6efe/5/238A11AE245357E72FEB39785C7BC03A973A44E1.mft rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/0/238A11AE245357E72FEB39785C7BC03A973A44E1.cer rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/0/0E70AE0ACD0BE83D2D458CA207B1D4FFA3C3E4EA.crl rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/0/0E70AE0ACD0BE83D2D458CA207B1D4FFA3C3E4EA.mft rsync://rpki.ripe.net/repository/DEFAULT/DnCuCs0L6D0tRYyiB7HU_6PD5Oo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 16 Nov 2026 08:31:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:45:04:dc:f5:ee:4b:c6:88:01:49:e1:2f:a6:7f:08:92:a8:2d:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=315EC08E540BCBC870FEB38832274E048E2E1F80 Validity Not Before: Nov 15 11:29:09 2026 GMT Not After : Nov 16 11:36:09 2026 GMT Subject: CN=DB0E327745C74815993C02154A871A36196E55FF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:0a:ec:ba:fd:6e:d6:b5:52:72:4e:bc:99:2e: 69:21:7c:a6:34:a2:a0:ee:b5:ce:ec:04:29:06:07: 47:0b:c0:50:af:68:19:48:ad:2f:5b:8a:e6:2d:7f: 20:16:1b:76:dc:c7:d2:14:d1:91:3c:00:98:80:02: 11:ed:be:a3:7c:57:66:45:a1:cd:fe:2e:da:3f:01: 00:62:41:65:74:7c:c8:ae:9e:7d:ef:73:c8:ab:2c: 8b:29:65:19:8c:8f:24:9a:4a:63:d8:ea:fd:31:40: e2:8c:75:d4:e9:39:c4:f7:1f:ee:cd:8b:ae:58:e3: b2:10:31:8b:96:f4:52:ea:3b:a7:8f:a3:c4:5f:eb: fd:ca:8d:d1:95:a6:c3:b6:e1:43:ee:f2:79:c7:7d: db:90:8c:ca:05:23:33:7e:a2:9c:89:94:6a:12:4c: 75:17:2d:30:36:ed:59:48:de:ab:53:cf:4a:14:02: de:bb:08:e7:ec:80:19:99:c7:ad:69:45:76:f2:98: 90:50:58:6e:f2:58:99:f6:da:94:dc:ef:c4:fc:4f: 29:aa:d2:cb:5a:91:52:6b:81:ae:cd:c7:3d:12:21: 4e:c9:ed:03:4b:f3:c3:6e:15:ce:7a:65:c1:1d:09: 49:0e:2b:4e:8d:0b:e2:ec:c7:3d:c0:ee:1e:3a:90: 1f:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:0E:32:77:45:C7:48:15:99:3C:02:15:4A:87:1A:36:19:6E:55:FF X509v3 Authority Key Identifier: keyid:31:5E:C0:8E:54:0B:CB:C8:70:FE:B3:88:32:27:4E:04:8E:2E:1F:80 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/d9bd3888-9302-4b6f-a017-2b4bba5e57bb/2/315EC08E540BCBC870FEB38832274E048E2E1F80.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/e805ea5c-d7a3-4848-837b-4697ccdd6efe/5/315EC08E540BCBC870FEB38832274E048E2E1F80.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d9bd3888-9302-4b6f-a017-2b4bba5e57bb/2/315EC08E540BCBC870FEB38832274E048E2E1F80.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9f:f5:3a:da:2a:8d:2a:d7:2a:1a:8f:01:95:ce:b3:fc:08:98: a8:06:92:9d:72:2d:c1:e9:31:c0:11:49:f7:67:d8:e4:b4:93: 97:4c:2a:0c:4b:77:67:36:13:26:26:63:71:b8:c7:60:49:b6: 59:b2:9f:9c:76:cf:df:46:18:fc:90:e4:76:2a:60:ac:83:68: b7:8e:54:7b:cd:e5:3e:42:88:20:ed:31:1e:a6:24:9e:cb:96: 65:8f:36:3c:cb:08:9d:8f:51:ae:8d:4a:37:b5:87:94:5e:10: 85:8f:d6:56:78:6e:e3:ea:a7:66:96:c8:22:df:e4:39:83:9b: ff:23:ed:f6:3b:1e:d4:21:a0:50:ca:2d:b4:6c:6a:66:4c:77: 93:0f:b0:ed:6f:59:e9:79:5a:0d:ba:0c:1d:2c:4f:ee:63:87: dd:ac:d6:f9:40:7f:03:f8:cc:d0:41:8d:3a:13:4e:5a:8a:82: 27:1f:25:e5:3a:cd:a8:59:8a:85:65:67:44:81:4f:00:17:4b: a2:d8:39:a7:15:e4:3e:9a:cc:de:0d:da:de:45:2e:23:5b:be: e6:98:bd:d7:e5:23:41:89:dc:a9:ac:34:ce:30:4f:c9:14:3f: 21:9d:ba:20:5f:7d:97:c7:2f:39:cf:e1:38:15:57:56:a1:da: 46:fe:d3:c4 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUeEUE3PXuS8aIAUnhL6Z/CJKoLeIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzE1RUMwOEU1NDBCQ0JDODcwRkVCMzg4MzIyNzRFMDQ4 RTJFMUY4MDAeFw0yNjExMTUxMTI5MDlaFw0yNjExMTYxMTM2MDlaMDMxMTAvBgNV BAMTKERCMEUzMjc3NDVDNzQ4MTU5OTNDMDIxNTRBODcxQTM2MTk2RTU1RkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGCuy6/W7WtVJyTryZLmkhfKY0 oqDutc7sBCkGB0cLwFCvaBlIrS9biuYtfyAWG3bcx9IU0ZE8AJiAAhHtvqN8V2ZF oc3+Lto/AQBiQWV0fMiunn3vc8irLIspZRmMjySaSmPY6v0xQOKMddTpOcT3H+7N i65Y47IQMYuW9FLqO6ePo8Rf6/3KjdGVpsO24UPu8nnHfduQjMoFIzN+opyJlGoS THUXLTA27VlI3qtTz0oUAt67COfsgBmZx61pRXbymJBQWG7yWJn22pTc78T8Tymq 0stakVJrga7Nxz0SIU7J7QNL88NuFc56ZcEdCUkOK06NC+Lsxz3A7h46kB+lAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQU2w4yd0XHSBWZPAIVSocaNhluVf8wHwYDVR0j BBgwFoAUMV7AjlQLy8hw/rOIMidOBI4uH4AwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZDliZDM4ODgtOTMwMi00YjZmLWEwMTctMmI0YmJhNWU1 N2JiLzIvMzE1RUMwOEU1NDBCQ0JDODcwRkVCMzg4MzIyNzRFMDQ4RTJFMUY4MC5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9lODA1ZWE1Yy1kN2EzLTQ4 NDgtODM3Yi00Njk3Y2NkZDZlZmUvNS8zMTVFQzA4RTU0MEJDQkM4NzBGRUIzODgz MjI3NEUwNDhFMkUxRjgwLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2Q5YmQzODg4LTkzMDItNGI2Zi1hMDE3LTJiNGJiYTVlNTdiYi8yLzMxNUVDMDhF NTQwQkNCQzg3MEZFQjM4ODMyMjc0RTA0OEUyRTFGODAubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCf9Tra Ko0q1yoajwGVzrP8CJioBpKdci3B6THAEUn3Z9jktJOXTCoMS3dnNhMmJmNxuMdg SbZZsp+cds/fRhj8kOR2KmCsg2i3jlR7zeU+Qogg7TEepiSey5ZljzY8ywidj1Gu jUo3tYeUXhCFj9ZWeG7j6qdmlsgi3+Q5g5v/I+32Ox7UIaBQyi20bGpmTHeTD7Dt b1npeVoNugwdLE/uY4fdrNb5QH8D+MzQQY06E05aioInHyXlOs2oWYqFZWdEgU8A F0ui2DmnFeQ+mszeDdreRS4jW77mmL3X5SNBidyprDTOME/JFD8hnbogX32Xxy85 z+E4FVdWodpG/tPE -----END CERTIFICATE-----Generated at Sun Nov 15 18:56:06 2026 by rpki-client