$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/CF0631D33A3C9DC5C45424D55C3E7663838657A3.mft File: CF0631D33A3C9DC5C45424D55C3E7663838657A3.mft (raw, json) Hash identifier: WJ+5izhkXCxmsyvD3rnDJlq0Qk4kYn6TYBnNJieTZ18= Subject key identifier: 13:17:EB:D2:E0:BE:91:8D:AD:9E:69:2B:ED:3B:A6:33:59:B3:D2:BF Authority key identifier: CF:06:31:D3:3A:3C:9D:C5:C4:54:24:D5:5C:3E:76:63:83:86:57:A3 Certificate issuer: /CN=cf0631d33a3c9dc5c45424d55c3e7663838657a3 Certificate serial: 72C23A3821B49130A5B3D01A9AE0D5773FDB5483 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zwYx0zo8ncXEVCTVXD52Y4OGV6M.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/CF0631D33A3C9DC5C45424D55C3E7663838657A3.mft Manifest number: 013F Signing time: Fri 12 Jun 2026 17:53:25 +0000 Manifest this update: Fri 12 Jun 2026 17:48:25 +0000 Manifest next update: Sat 13 Jun 2026 18:21:25 +0000 Files and hashes: 1: 38392e3138352e31322e302f32342d3234203d3e203630383630.roa (hash: KsOBm/IW9m6wYWtDKEPIq17pdU+n9YXSV9XxpyK0qLc=) 2: 3130392e37322e3132322e302f32342d3234203d3e203630383630.roa (hash: 2mjBtJiNX2GgtlTBc9elrwUynjPTbiI/Km0f5EIklUM=) 3: CF0631D33A3C9DC5C45424D55C3E7663838657A3.crl (hash: jCe3CQ72I1hm1HqOwOdt/DeSBkSFtSWddFohbrlWp2I=) 4: 3138352e33302e3230332e302f32342d3234203d3e203630383630.roa (hash: +hLj8/wzU4ALLxe4Xdt3WSnzJEJQWXiNiu+hY32JK2w=) 5: 3138352e33302e3230302e302f32332d3233203d3e203630383630.roa (hash: EjHevTTMahznqtckt7aLMDXLh3y0kx9bdoI4UFB/hKw=) 6: 38392e3138352e382e302f32342d3234203d3e203630383630.roa (hash: uuMWj0BWrTugTcot2BIIjLN4CmKo0TjrBWjA0TJKmTM=) 7: C972E8671DEDC43FE908B548531C969A051CD34C.cer (hash: d7NBPzoR5U51KQ6xM8aVu3af+Il1XYsfzuoeH65sh5k=) 8: 3138352e33302e3230322e302f32342d3234203d3e203630383630.roa (hash: tBh4T597HLyGCSugLkif66QABd9ufnpWRf3NI++UCNc=) 9: 39332e3138352e3231342e302f32342d3234203d3e203630383630.roa (hash: I4ydkJ2r2j2i1g1xPyPsffo9hUpPo3RLQo6MfTdRh1Q=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/CF0631D33A3C9DC5C45424D55C3E7663838657A3.crl rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/CF0631D33A3C9DC5C45424D55C3E7663838657A3.mft rsync://rpki.ripe.net/repository/DEFAULT/zwYx0zo8ncXEVCTVXD52Y4OGV6M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 13 Jun 2026 18:21:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:c2:3a:38:21:b4:91:30:a5:b3:d0:1a:9a:e0:d5:77:3f:db:54:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cf0631d33a3c9dc5c45424d55c3e7663838657a3 Validity Not Before: Jun 12 17:48:25 2026 GMT Not After : Jun 13 18:21:25 2026 GMT Subject: CN=1317EBD2E0BE918DAD9E692BED3BA63359B3D2BF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:91:6a:e6:c7:7a:bd:4b:60:bd:47:3f:8d:5d: 36:bd:a0:e3:c3:8d:06:ae:7f:af:96:20:dc:bd:1a: 24:a0:de:b5:4d:33:2f:d9:4d:01:c9:8b:1f:05:05: be:ba:07:f5:ad:04:dc:4d:93:77:a7:32:fa:87:9d: 14:62:8c:96:78:9f:96:19:12:ef:3f:82:74:16:bc: 41:b8:04:bf:70:a3:0d:db:b3:da:28:3d:6e:1b:05: 91:b1:e7:0f:97:15:56:b1:8a:f1:62:44:df:df:ee: 7a:76:6f:0a:fb:a2:f4:a1:1b:dc:28:e0:40:de:55: a7:c7:c4:7f:28:60:8d:cd:dc:2f:5d:17:e5:ae:a1: 85:c2:4f:30:64:e0:a5:57:3e:69:a6:a8:34:17:6e: 7e:19:2a:f6:ec:1d:3a:1f:a8:96:94:14:5c:f0:a4: d6:53:23:ac:af:43:07:8a:a6:6e:5a:45:90:d9:9a: 45:c5:f8:4e:ae:0c:9b:bd:91:e8:92:f1:ff:5e:76: 0d:e6:fb:86:bf:5a:a1:6c:88:cc:58:be:18:dd:05: 04:b2:27:02:37:85:6c:a1:a0:70:61:ba:21:b2:96: d1:88:62:2c:b9:ad:dc:e7:dc:1b:74:0d:c9:5d:ad: 24:aa:62:e7:9b:63:b4:6c:51:83:09:ee:92:b3:84: be:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:17:EB:D2:E0:BE:91:8D:AD:9E:69:2B:ED:3B:A6:33:59:B3:D2:BF X509v3 Authority Key Identifier: keyid:CF:06:31:D3:3A:3C:9D:C5:C4:54:24:D5:5C:3E:76:63:83:86:57:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/CF0631D33A3C9DC5C45424D55C3E7663838657A3.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zwYx0zo8ncXEVCTVXD52Y4OGV6M.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/CF0631D33A3C9DC5C45424D55C3E7663838657A3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ae:65:1c:cc:3e:6e:3a:dc:0e:22:a4:00:0d:5e:53:dd:ed:42: c5:d0:56:89:16:34:19:a7:00:f8:b7:b1:78:d0:e2:50:92:44: c9:13:f6:92:85:52:bc:c1:ce:73:47:71:d7:a6:ca:70:fe:7d: 9b:32:93:0c:d2:8c:49:ce:64:12:d6:ec:6f:66:a3:ca:ef:19: 66:3d:6d:a8:1e:cf:86:32:b9:8b:fe:83:0a:79:51:b0:93:2a: 02:a5:79:21:0f:a7:c4:e8:2a:1c:57:9f:2c:c8:a5:01:a2:92: fa:0c:17:ab:aa:6d:bd:2b:13:99:ad:b3:d8:50:65:e4:6a:7c: 93:1a:53:54:fb:ec:26:49:df:56:d8:dc:52:87:90:c2:04:5f: af:e1:42:52:17:89:ea:10:b3:93:c3:e6:56:5b:ca:29:3c:cd: 14:31:a5:5e:fb:9d:be:37:5c:84:c5:06:48:fd:2b:cc:45:73: ca:f2:0f:4b:4c:78:27:82:0b:44:34:b3:80:6d:d0:e3:70:76: 24:ab:ca:2f:1a:e8:7a:b5:cd:17:40:71:b8:53:57:15:07:6e: 35:d2:7c:28:c9:4d:16:e3:ab:fd:e5:33:57:c1:4a:c1:d2:58: d0:8a:95:a1:de:63:3d:92:20:a5:40:9c:c9:f4:10:33:8c:bb: ea:65:38:ce -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUcsI6OCG0kTCls9AamuDVdz/bVIMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoY2YwNjMxZDMzYTNjOWRjNWM0NTQyNGQ1NWMzZTc2NjM4 Mzg2NTdhMzAeFw0yNjA2MTIxNzQ4MjVaFw0yNjA2MTMxODIxMjVaMDMxMTAvBgNV BAMTKDEzMTdFQkQyRTBCRTkxOERBRDlFNjkyQkVEM0JBNjMzNTlCM0QyQkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDnkWrmx3q9S2C9Rz+NXTa9oOPD jQauf6+WINy9GiSg3rVNMy/ZTQHJix8FBb66B/WtBNxNk3enMvqHnRRijJZ4n5YZ Eu8/gnQWvEG4BL9wow3bs9ooPW4bBZGx5w+XFVaxivFiRN/f7np2bwr7ovShG9wo 4EDeVafHxH8oYI3N3C9dF+WuoYXCTzBk4KVXPmmmqDQXbn4ZKvbsHTofqJaUFFzw pNZTI6yvQweKpm5aRZDZmkXF+E6uDJu9keiS8f9edg3m+4a/WqFsiMxYvhjdBQSy JwI3hWyhoHBhuiGyltGIYiy5rdzn3Bt0DcldrSSqYuebY7RsUYMJ7pKzhL4tAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUExfr0uC+kY2tnmkr7TumM1mz0r8wHwYDVR0j BBgwFoAUzwYx0zo8ncXEVCTVXD52Y4OGV6MwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNjE3MDhhNmItNmMzYS00MGEwLWEzMDItNTk1ZWNjMTc4 NDhjLzIvQ0YwNjMxRDMzQTNDOURDNUM0NTQyNEQ1NUMzRTc2NjM4Mzg2NTdBMy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3p3WXgwem84bmNYRVZDVFZYRDUyWTRP R1Y2TS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS82MTcwOGE2Yi02 YzNhLTQwYTAtYTMwMi01OTVlY2MxNzg0OGMvMi9DRjA2MzFEMzNBM0M5REM1QzQ1 NDI0RDU1QzNFNzY2MzgzODY1N0EzLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArmUczD5uOtwOIqQADV5T 3e1CxdBWiRY0GacA+LexeNDiUJJEyRP2koVSvMHOc0dx16bKcP59mzKTDNKMSc5k Etbsb2ajyu8ZZj1tqB7PhjK5i/6DCnlRsJMqAqV5IQ+nxOgqHFefLMilAaKS+gwX q6ptvSsTma2z2FBl5Gp8kxpTVPvsJknfVtjcUoeQwgRfr+FCUheJ6hCzk8PmVlvK KTzNFDGlXvudvjdchMUGSP0rzEVzyvIPS0x4J4ILRDSzgG3Q43B2JKvKLxroerXN F0BxuFNXFQduNdJ8KMlNFuOr/eUzV8FKwdJY0IqVod5jPZIgpUCcyfQQM4y76mU4 zg== -----END CERTIFICATE-----Generated at Sat Jun 13 10:01:58 2026 by rpki-client