$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/CF0631D33A3C9DC5C45424D55C3E7663838657A3.mft File: CF0631D33A3C9DC5C45424D55C3E7663838657A3.mft (raw, json) Hash identifier: eP3pinoSJ8oyak8XJ2GjCZqGbHNuPoHxw/ZI3WC8tr4= Subject key identifier: A3:FD:9D:B8:8B:E3:C7:5A:9F:E1:D2:45:2A:C4:50:C1:39:AE:A1:68 Authority key identifier: CF:06:31:D3:3A:3C:9D:C5:C4:54:24:D5:5C:3E:76:63:83:86:57:A3 Certificate issuer: /CN=cf0631d33a3c9dc5c45424d55c3e7663838657a3 Certificate serial: 7B7D4F3EBD9F6D894E7065ECBD72A1D79CAD330D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zwYx0zo8ncXEVCTVXD52Y4OGV6M.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/CF0631D33A3C9DC5C45424D55C3E7663838657A3.mft Manifest number: B4 Signing time: Mon 02 Mar 2026 00:58:24 +0000 Manifest this update: Mon 02 Mar 2026 00:53:24 +0000 Manifest next update: Tue 03 Mar 2026 02:47:24 +0000 Files and hashes: 1: 3130392e37322e3132322e302f32342d3234203d3e203630383630.roa (hash: 2mjBtJiNX2GgtlTBc9elrwUynjPTbiI/Km0f5EIklUM=) 2: 38392e3138352e31322e302f32342d3234203d3e203630383630.roa (hash: KsOBm/IW9m6wYWtDKEPIq17pdU+n9YXSV9XxpyK0qLc=) 3: 3138352e33302e3230332e302f32342d3234203d3e203630383630.roa (hash: +hLj8/wzU4ALLxe4Xdt3WSnzJEJQWXiNiu+hY32JK2w=) 4: C972E8671DEDC43FE908B548531C969A051CD34C.cer (hash: d7NBPzoR5U51KQ6xM8aVu3af+Il1XYsfzuoeH65sh5k=) 5: CF0631D33A3C9DC5C45424D55C3E7663838657A3.crl (hash: p0P8t30sPyEieg6fUGbCfd56hCr1CkYpJWqEWKqaTrU=) 6: 38392e3138352e382e302f32342d3234203d3e203630383630.roa (hash: uuMWj0BWrTugTcot2BIIjLN4CmKo0TjrBWjA0TJKmTM=) 7: 3138352e33302e3230322e302f32342d3234203d3e203630383630.roa (hash: tBh4T597HLyGCSugLkif66QABd9ufnpWRf3NI++UCNc=) 8: 39332e3138352e3231342e302f32342d3234203d3e203630383630.roa (hash: I4ydkJ2r2j2i1g1xPyPsffo9hUpPo3RLQo6MfTdRh1Q=) 9: 3138352e33302e3230302e302f32332d3233203d3e203630383630.roa (hash: EjHevTTMahznqtckt7aLMDXLh3y0kx9bdoI4UFB/hKw=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/CF0631D33A3C9DC5C45424D55C3E7663838657A3.crl rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/CF0631D33A3C9DC5C45424D55C3E7663838657A3.mft rsync://rpki.ripe.net/repository/DEFAULT/zwYx0zo8ncXEVCTVXD52Y4OGV6M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Mar 2026 18:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:7d:4f:3e:bd:9f:6d:89:4e:70:65:ec:bd:72:a1:d7:9c:ad:33:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cf0631d33a3c9dc5c45424d55c3e7663838657a3 Validity Not Before: Mar 2 00:53:24 2026 GMT Not After : Mar 3 02:47:24 2026 GMT Subject: CN=A3FD9DB88BE3C75A9FE1D2452AC450C139AEA168 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:64:5f:df:00:52:c0:6b:35:75:76:48:4a:b7: 90:ee:45:67:c1:2f:a0:6e:da:72:f3:35:b5:39:fd: 80:27:05:ba:80:75:f5:0d:cc:b0:5f:91:62:5a:de: 63:23:aa:bd:f9:11:d3:05:15:96:b3:cd:27:f0:37: bb:e7:49:c1:c8:f3:e3:41:06:1d:6a:b0:74:d7:4b: 2d:90:2e:60:ae:16:34:9a:a2:0c:49:5a:c3:0d:ce: 52:57:a8:01:c2:51:aa:c1:3f:90:db:ce:f3:b2:62: 35:72:b8:e0:97:76:ca:2f:a0:11:cf:a6:cf:2e:9e: 3e:96:8c:bc:69:28:27:57:05:45:c7:40:78:33:58: fe:c7:b2:16:09:cc:18:bc:1f:c4:19:75:c0:56:1f: 5e:03:5e:0b:f8:ca:08:cc:92:2b:2b:1f:45:64:56: c4:73:b8:ee:a3:70:9a:87:df:49:75:f4:ad:3a:34: 5a:98:72:48:cb:b9:f3:3d:33:3e:6e:52:2a:e5:5e: 48:be:a9:04:d9:47:d0:e4:5c:2e:7f:14:63:e7:af: 21:40:db:42:57:2f:6e:0d:5b:b5:fa:25:63:83:93: e6:96:dc:94:aa:7e:3b:a2:a3:1b:6e:16:b5:dd:46: 6d:26:3b:bb:92:c9:d3:7c:04:fc:e9:3b:20:de:75: 9a:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:FD:9D:B8:8B:E3:C7:5A:9F:E1:D2:45:2A:C4:50:C1:39:AE:A1:68 X509v3 Authority Key Identifier: keyid:CF:06:31:D3:3A:3C:9D:C5:C4:54:24:D5:5C:3E:76:63:83:86:57:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/CF0631D33A3C9DC5C45424D55C3E7663838657A3.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zwYx0zo8ncXEVCTVXD52Y4OGV6M.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/CF0631D33A3C9DC5C45424D55C3E7663838657A3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:50:a8:63:b6:4d:ae:2a:37:10:a1:a5:1d:a3:f3:07:fb:5c: cc:18:bc:2c:7f:dd:80:ec:7e:cf:8f:61:75:22:82:8c:83:5e: fd:bf:84:6a:31:45:02:4d:93:63:95:a4:02:10:df:85:f6:4e: 71:6f:49:f2:54:04:96:78:9d:0e:30:cc:74:31:2a:95:7d:4e: e1:69:6a:bf:76:88:a2:a7:15:c1:38:5c:6f:e8:6e:c2:e2:0b: 62:34:e1:2a:b8:bc:d9:20:24:11:bd:c2:ca:39:98:4a:f6:68: ba:6c:39:53:a2:18:4e:37:8b:db:10:f7:20:c7:8f:fe:4e:29: 80:64:97:01:ca:ab:78:8d:64:80:be:65:9b:05:43:30:ab:7d: 2d:0a:37:c5:e8:e8:58:d0:40:f8:99:7e:41:a9:9f:a2:49:c2: 23:e9:d4:a6:28:1a:87:4f:d2:64:6a:16:60:8a:a6:47:31:7b: 8d:b4:d1:85:f7:9f:1a:17:b4:e3:cc:7c:29:a1:50:ad:ae:78: 51:4c:99:d5:d8:83:42:81:d4:3a:58:78:a2:77:e3:72:99:61: f8:5b:a5:69:0e:58:02:5d:b5:06:f4:ab:dd:12:9b:46:c7:0f: 9b:1d:d7:1d:10:a2:cb:c5:ea:63:86:43:d2:35:c8:03:91:45: fa:5e:e0:c0 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUe31PPr2fbYlOcGXsvXKh15ytMw0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoY2YwNjMxZDMzYTNjOWRjNWM0NTQyNGQ1NWMzZTc2NjM4 Mzg2NTdhMzAeFw0yNjAzMDIwMDUzMjRaFw0yNjAzMDMwMjQ3MjRaMDMxMTAvBgNV BAMTKEEzRkQ5REI4OEJFM0M3NUE5RkUxRDI0NTJBQzQ1MEMxMzlBRUExNjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDZF/fAFLAazV1dkhKt5DuRWfB L6Bu2nLzNbU5/YAnBbqAdfUNzLBfkWJa3mMjqr35EdMFFZazzSfwN7vnScHI8+NB Bh1qsHTXSy2QLmCuFjSaogxJWsMNzlJXqAHCUarBP5DbzvOyYjVyuOCXdsovoBHP ps8unj6WjLxpKCdXBUXHQHgzWP7HshYJzBi8H8QZdcBWH14DXgv4ygjMkisrH0Vk VsRzuO6jcJqH30l19K06NFqYckjLufM9Mz5uUirlXki+qQTZR9DkXC5/FGPnryFA 20JXL24NW7X6JWODk+aW3JSqfjuioxtuFrXdRm0mO7uSydN8BPzpOyDedZrNAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUo/2duIvjx1qf4dJFKsRQwTmuoWgwHwYDVR0j BBgwFoAUzwYx0zo8ncXEVCTVXD52Y4OGV6MwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNjE3MDhhNmItNmMzYS00MGEwLWEzMDItNTk1ZWNjMTc4 NDhjLzIvQ0YwNjMxRDMzQTNDOURDNUM0NTQyNEQ1NUMzRTc2NjM4Mzg2NTdBMy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3p3WXgwem84bmNYRVZDVFZYRDUyWTRP R1Y2TS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS82MTcwOGE2Yi02 YzNhLTQwYTAtYTMwMi01OTVlY2MxNzg0OGMvMi9DRjA2MzFEMzNBM0M5REM1QzQ1 NDI0RDU1QzNFNzY2MzgzODY1N0EzLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKlCoY7ZNrio3EKGlHaPz B/tczBi8LH/dgOx+z49hdSKCjINe/b+EajFFAk2TY5WkAhDfhfZOcW9J8lQElnid DjDMdDEqlX1O4Wlqv3aIoqcVwThcb+huwuILYjThKri82SAkEb3CyjmYSvZoumw5 U6IYTjeL2xD3IMeP/k4pgGSXAcqreI1kgL5lmwVDMKt9LQo3xejoWNBA+Jl+Qamf oknCI+nUpigah0/SZGoWYIqmRzF7jbTRhfefGhe048x8KaFQra54UUyZ1diDQoHU Olh4onfjcplh+FulaQ5YAl21BvSr3RKbRscPmx3XHRCiy8XqY4ZD0jXIA5FF+l7g wA== -----END CERTIFICATE-----Generated at Mon Mar 2 05:11:34 2026 by rpki-client