$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/CF0631D33A3C9DC5C45424D55C3E7663838657A3.mft File: CF0631D33A3C9DC5C45424D55C3E7663838657A3.mft (raw, json) Hash identifier: 0XiA4jmNEOIKXPjplRaay5aWQTy8Br8R6Hp1MGssK60= Subject key identifier: 7A:57:93:05:AD:28:8B:E3:FE:7F:E5:C4:30:F7:7E:F8:D3:2F:36:A7 Authority key identifier: CF:06:31:D3:3A:3C:9D:C5:C4:54:24:D5:5C:3E:76:63:83:86:57:A3 Certificate issuer: /CN=cf0631d33a3c9dc5c45424d55c3e7663838657a3 Certificate serial: 28C1317DA6F965325208DB2FAF656CA5FC625B45 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zwYx0zo8ncXEVCTVXD52Y4OGV6M.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/CF0631D33A3C9DC5C45424D55C3E7663838657A3.mft Manifest number: F4 Signing time: Sat 18 Apr 2026 22:33:34 +0000 Manifest this update: Sat 18 Apr 2026 22:28:34 +0000 Manifest next update: Mon 20 Apr 2026 02:22:34 +0000 Files and hashes: 1: 38392e3138352e31322e302f32342d3234203d3e203630383630.roa (hash: KsOBm/IW9m6wYWtDKEPIq17pdU+n9YXSV9XxpyK0qLc=) 2: CF0631D33A3C9DC5C45424D55C3E7663838657A3.crl (hash: nsRN1mPetRGm9YmwHrIhX8YLazh0gpbDa0lsxL8oITU=) 3: C972E8671DEDC43FE908B548531C969A051CD34C.cer (hash: d7NBPzoR5U51KQ6xM8aVu3af+Il1XYsfzuoeH65sh5k=) 4: 3138352e33302e3230302e302f32332d3233203d3e203630383630.roa (hash: EjHevTTMahznqtckt7aLMDXLh3y0kx9bdoI4UFB/hKw=) 5: 3138352e33302e3230322e302f32342d3234203d3e203630383630.roa (hash: tBh4T597HLyGCSugLkif66QABd9ufnpWRf3NI++UCNc=) 6: 39332e3138352e3231342e302f32342d3234203d3e203630383630.roa (hash: I4ydkJ2r2j2i1g1xPyPsffo9hUpPo3RLQo6MfTdRh1Q=) 7: 38392e3138352e382e302f32342d3234203d3e203630383630.roa (hash: uuMWj0BWrTugTcot2BIIjLN4CmKo0TjrBWjA0TJKmTM=) 8: 3138352e33302e3230332e302f32342d3234203d3e203630383630.roa (hash: +hLj8/wzU4ALLxe4Xdt3WSnzJEJQWXiNiu+hY32JK2w=) 9: 3130392e37322e3132322e302f32342d3234203d3e203630383630.roa (hash: 2mjBtJiNX2GgtlTBc9elrwUynjPTbiI/Km0f5EIklUM=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/CF0631D33A3C9DC5C45424D55C3E7663838657A3.crl rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/CF0631D33A3C9DC5C45424D55C3E7663838657A3.mft rsync://rpki.ripe.net/repository/DEFAULT/zwYx0zo8ncXEVCTVXD52Y4OGV6M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 20 Apr 2026 02:00:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:c1:31:7d:a6:f9:65:32:52:08:db:2f:af:65:6c:a5:fc:62:5b:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cf0631d33a3c9dc5c45424d55c3e7663838657a3 Validity Not Before: Apr 18 22:28:34 2026 GMT Not After : Apr 20 02:22:34 2026 GMT Subject: CN=7A579305AD288BE3FE7FE5C430F77EF8D32F36A7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:3d:8c:ac:23:c2:24:4f:cb:a9:39:07:42:3a: 01:9d:9d:d9:db:17:11:95:9f:d6:3e:49:71:46:35: 92:05:5c:f0:e2:eb:e2:21:c7:6d:ca:aa:7b:8c:2e: 79:89:95:b8:d9:0e:fe:b7:51:42:02:b9:97:82:d9: fa:20:4a:3a:d9:f3:83:39:7b:63:27:85:ee:4f:da: 0a:41:61:53:cd:11:9e:26:99:3e:c4:d2:cf:1a:7f: 35:7b:1c:1e:e4:e6:6d:00:dd:89:ba:23:42:62:eb: f7:b4:c4:4f:70:7e:69:4c:89:72:86:48:b1:41:4a: 37:b7:a9:46:f2:b2:48:8c:9e:91:fc:64:72:88:02: 73:c3:ab:4f:bd:ab:fc:3e:61:61:74:ec:d8:e1:41: 94:83:5f:06:a9:dd:11:d2:7b:3b:7c:4b:ea:6d:ad: 66:41:c5:b7:4f:a6:2e:49:6c:81:fc:03:cd:90:92: fb:81:9c:c5:5d:70:01:23:86:3c:b0:ba:38:7d:d4: f0:e0:10:42:13:67:bc:0f:0f:a0:5d:a5:7b:46:a4: bf:3b:8f:5a:0a:45:9c:8e:ab:cf:42:e7:4e:0c:a2: 14:20:88:93:34:ac:91:7d:c9:95:7a:ba:e9:34:e4: fa:48:8f:90:e5:0c:89:01:63:f7:62:2a:79:d9:6a: a9:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:57:93:05:AD:28:8B:E3:FE:7F:E5:C4:30:F7:7E:F8:D3:2F:36:A7 X509v3 Authority Key Identifier: keyid:CF:06:31:D3:3A:3C:9D:C5:C4:54:24:D5:5C:3E:76:63:83:86:57:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/CF0631D33A3C9DC5C45424D55C3E7663838657A3.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zwYx0zo8ncXEVCTVXD52Y4OGV6M.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/CF0631D33A3C9DC5C45424D55C3E7663838657A3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:2d:b5:4a:ff:bb:13:df:ff:6e:c1:4a:e4:c5:d3:84:58:ce: 68:db:3c:08:e9:69:86:a0:db:89:14:a5:d7:0c:1c:32:b9:56: c4:1f:93:6a:a4:e1:58:17:93:3d:22:b6:62:29:f8:32:74:88: 65:30:94:ee:51:b1:eb:e4:84:37:1f:c0:73:8b:7c:bb:1c:8a: 7f:3f:51:d7:2a:fb:e9:b4:39:0c:1c:6a:54:f0:dd:6b:10:71: 5b:ef:aa:bf:a2:4c:0b:4f:1a:6a:5b:78:fd:cf:9f:a1:29:f3: 1c:f5:9c:36:99:73:b8:9e:42:19:91:a7:22:be:92:2b:c1:b3: 69:cf:a4:be:2a:a4:37:4b:9d:91:a5:72:8e:24:cd:3f:e8:a6: 34:a9:76:6f:f2:a7:c1:53:dc:23:64:0e:3b:e0:b3:56:ba:b1: 10:af:63:26:48:46:03:06:e1:14:a3:e2:cc:56:c2:a4:81:3e: 1c:c0:a1:5b:8b:ed:94:56:85:1b:dd:a0:d1:71:35:49:5c:a9: f5:cc:47:2b:6f:0d:14:8e:af:8d:41:b6:5a:c7:25:9a:08:f8: 30:31:5c:05:4b:e1:a3:28:ba:87:1c:4f:ac:a5:8e:f1:6e:b2: 3a:9f:88:6e:fc:1e:a4:13:b7:18:cc:92:4a:b2:d2:a9:af:6e: 1e:c3:78:4c -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUKMExfab5ZTJSCNsvr2VspfxiW0UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoY2YwNjMxZDMzYTNjOWRjNWM0NTQyNGQ1NWMzZTc2NjM4 Mzg2NTdhMzAeFw0yNjA0MTgyMjI4MzRaFw0yNjA0MjAwMjIyMzRaMDMxMTAvBgNV BAMTKDdBNTc5MzA1QUQyODhCRTNGRTdGRTVDNDMwRjc3RUY4RDMyRjM2QTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBPYysI8IkT8upOQdCOgGdndnb FxGVn9Y+SXFGNZIFXPDi6+Ihx23KqnuMLnmJlbjZDv63UUICuZeC2fogSjrZ84M5 e2Mnhe5P2gpBYVPNEZ4mmT7E0s8afzV7HB7k5m0A3Ym6I0Ji6/e0xE9wfmlMiXKG SLFBSje3qUbyskiMnpH8ZHKIAnPDq0+9q/w+YWF07NjhQZSDXwap3RHSezt8S+pt rWZBxbdPpi5JbIH8A82QkvuBnMVdcAEjhjywujh91PDgEEITZ7wPD6BdpXtGpL87 j1oKRZyOq89C504MohQgiJM0rJF9yZV6uuk05PpIj5DlDIkBY/diKnnZaqmVAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUeleTBa0oi+P+f+XEMPd++NMvNqcwHwYDVR0j BBgwFoAUzwYx0zo8ncXEVCTVXD52Y4OGV6MwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNjE3MDhhNmItNmMzYS00MGEwLWEzMDItNTk1ZWNjMTc4 NDhjLzIvQ0YwNjMxRDMzQTNDOURDNUM0NTQyNEQ1NUMzRTc2NjM4Mzg2NTdBMy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3p3WXgwem84bmNYRVZDVFZYRDUyWTRP R1Y2TS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS82MTcwOGE2Yi02 YzNhLTQwYTAtYTMwMi01OTVlY2MxNzg0OGMvMi9DRjA2MzFEMzNBM0M5REM1QzQ1 NDI0RDU1QzNFNzY2MzgzODY1N0EzLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANS21Sv+7E9//bsFK5MXT hFjOaNs8COlphqDbiRSl1wwcMrlWxB+TaqThWBeTPSK2Yin4MnSIZTCU7lGx6+SE Nx/Ac4t8uxyKfz9R1yr76bQ5DBxqVPDdaxBxW++qv6JMC08aalt4/c+foSnzHPWc NplzuJ5CGZGnIr6SK8Gzac+kviqkN0udkaVyjiTNP+imNKl2b/KnwVPcI2QOO+Cz VrqxEK9jJkhGAwbhFKPizFbCpIE+HMChW4vtlFaFG92g0XE1SVyp9cxHK28NFI6v jUG2Wsclmgj4MDFcBUvhoyi6hxxPrKWO8W6yOp+IbvwepBO3GMySSrLSqa9uHsN4 TA== -----END CERTIFICATE-----Generated at Sun Apr 19 08:59:05 2026 by rpki-client