$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/CF0631D33A3C9DC5C45424D55C3E7663838657A3.mft File: CF0631D33A3C9DC5C45424D55C3E7663838657A3.mft (raw, json) Hash identifier: W153DeEYmiGbsACdoAybGc3jrB3wl8zPmW58GIkIAF4= Subject key identifier: E1:55:F7:07:8B:E3:D7:52:0D:B4:36:3E:56:0E:F9:6B:AE:8F:65:57 Authority key identifier: CF:06:31:D3:3A:3C:9D:C5:C4:54:24:D5:5C:3E:76:63:83:86:57:A3 Certificate issuer: /CN=cf0631d33a3c9dc5c45424d55c3e7663838657a3 Certificate serial: 0999F464439045352305D71E1B766C7A3A10A398 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zwYx0zo8ncXEVCTVXD52Y4OGV6M.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/CF0631D33A3C9DC5C45424D55C3E7663838657A3.mft Manifest number: F1 Signing time: Thu 16 Apr 2026 13:38:34 +0000 Manifest this update: Thu 16 Apr 2026 13:33:34 +0000 Manifest next update: Fri 17 Apr 2026 16:16:34 +0000 Files and hashes: 1: 3138352e33302e3230302e302f32332d3233203d3e203630383630.roa (hash: EjHevTTMahznqtckt7aLMDXLh3y0kx9bdoI4UFB/hKw=) 2: 3138352e33302e3230322e302f32342d3234203d3e203630383630.roa (hash: tBh4T597HLyGCSugLkif66QABd9ufnpWRf3NI++UCNc=) 3: CF0631D33A3C9DC5C45424D55C3E7663838657A3.crl (hash: cyMWXOLqAFCs/gd/V5MDHyM9LkJDwIWG9rcJ8cCsbTY=) 4: 39332e3138352e3231342e302f32342d3234203d3e203630383630.roa (hash: I4ydkJ2r2j2i1g1xPyPsffo9hUpPo3RLQo6MfTdRh1Q=) 5: 38392e3138352e382e302f32342d3234203d3e203630383630.roa (hash: uuMWj0BWrTugTcot2BIIjLN4CmKo0TjrBWjA0TJKmTM=) 6: 3138352e33302e3230332e302f32342d3234203d3e203630383630.roa (hash: +hLj8/wzU4ALLxe4Xdt3WSnzJEJQWXiNiu+hY32JK2w=) 7: C972E8671DEDC43FE908B548531C969A051CD34C.cer (hash: d7NBPzoR5U51KQ6xM8aVu3af+Il1XYsfzuoeH65sh5k=) 8: 38392e3138352e31322e302f32342d3234203d3e203630383630.roa (hash: KsOBm/IW9m6wYWtDKEPIq17pdU+n9YXSV9XxpyK0qLc=) 9: 3130392e37322e3132322e302f32342d3234203d3e203630383630.roa (hash: 2mjBtJiNX2GgtlTBc9elrwUynjPTbiI/Km0f5EIklUM=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/CF0631D33A3C9DC5C45424D55C3E7663838657A3.crl rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/CF0631D33A3C9DC5C45424D55C3E7663838657A3.mft rsync://rpki.ripe.net/repository/DEFAULT/zwYx0zo8ncXEVCTVXD52Y4OGV6M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 17 Apr 2026 16:16:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:99:f4:64:43:90:45:35:23:05:d7:1e:1b:76:6c:7a:3a:10:a3:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cf0631d33a3c9dc5c45424d55c3e7663838657a3 Validity Not Before: Apr 16 13:33:34 2026 GMT Not After : Apr 17 16:16:34 2026 GMT Subject: CN=E155F7078BE3D7520DB4363E560EF96BAE8F6557 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:74:5c:b2:be:ed:bd:df:e9:60:44:97:62:04: 0c:55:a9:85:c5:76:93:84:59:5a:4a:21:78:7c:13: 07:b4:85:03:6a:2c:28:74:ed:71:a7:2e:84:15:81: 2c:b8:84:53:5d:51:b7:9b:42:82:4f:fc:45:d0:15: b1:dc:2b:79:a8:f1:02:f4:25:aa:2b:87:c1:11:1b: 68:3a:cb:f1:4f:8d:cc:22:87:bd:80:b8:bb:bd:b6: 85:97:c5:96:e7:52:59:ee:7a:45:cb:2e:64:2f:2d: 74:e2:3e:2d:31:94:aa:7b:5c:3f:50:a1:cd:95:fa: 5d:0a:ae:bb:d1:51:21:fc:27:81:a4:4c:4c:b7:dd: 27:71:d0:b9:ed:f8:19:35:c9:ab:35:f7:da:59:a1: 01:7b:31:f0:9b:7d:2d:f6:e7:30:a9:46:c8:c3:b7: 1d:60:7f:41:c7:ad:0b:02:e4:d6:24:39:99:b8:af: a2:10:35:8e:61:b0:4f:80:0f:3a:bf:6e:92:83:3a: e3:56:9c:f7:f9:e7:bb:67:aa:d1:98:5c:f4:ca:ac: c6:c9:18:73:0d:37:44:41:eb:fd:95:94:7d:ee:3d: fc:af:7b:66:28:96:45:ba:38:65:97:69:ff:52:d9: 61:13:a4:c6:99:2d:1f:fa:5b:51:6a:e8:e6:f0:65: 6d:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:55:F7:07:8B:E3:D7:52:0D:B4:36:3E:56:0E:F9:6B:AE:8F:65:57 X509v3 Authority Key Identifier: keyid:CF:06:31:D3:3A:3C:9D:C5:C4:54:24:D5:5C:3E:76:63:83:86:57:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/CF0631D33A3C9DC5C45424D55C3E7663838657A3.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zwYx0zo8ncXEVCTVXD52Y4OGV6M.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/CF0631D33A3C9DC5C45424D55C3E7663838657A3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cb:13:11:38:ef:2a:e5:4b:41:f0:5b:ea:c2:d3:66:e8:e3:f1: 76:e1:6c:7b:65:5f:62:fb:36:35:2a:94:ec:74:0c:f3:89:95: 72:97:a3:68:17:3e:ae:6a:1b:ba:ee:15:0d:35:64:7d:8b:dd: 2d:a4:f2:5a:6f:54:6e:8f:16:e9:f9:09:e4:6b:e7:2f:61:50: dc:46:ee:cb:7c:4a:21:7b:9a:6e:38:90:56:b3:61:ce:74:28: 61:5e:15:cd:70:96:e1:ae:10:fc:19:61:39:96:31:39:99:a3: 04:42:74:a9:06:c3:17:c6:ec:d9:52:b2:75:30:00:07:73:87: 44:24:2f:5a:ec:00:82:02:b6:22:e2:81:8c:8b:09:29:23:69: b6:86:a6:5a:13:ef:9a:42:57:23:6b:c1:d4:4c:1d:6a:4c:ca: 2e:4f:50:c1:8d:b7:5c:f0:12:da:53:98:ed:d2:25:7f:ea:c6: 72:ec:33:d3:b6:10:5e:4c:a8:b2:c0:eb:34:24:63:75:d8:ee: 31:d9:cc:83:6d:1c:01:85:3a:bb:ec:8b:c2:d9:9f:a3:6e:dd: fa:dc:ff:00:03:de:45:f1:95:bf:67:5d:48:8e:53:2e:38:31: 24:e0:9a:96:64:07:98:ba:c3:4c:0e:9b:83:6e:8a:e7:9d:12: 77:53:c3:b3 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUCZn0ZEOQRTUjBdceG3ZsejoQo5gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoY2YwNjMxZDMzYTNjOWRjNWM0NTQyNGQ1NWMzZTc2NjM4 Mzg2NTdhMzAeFw0yNjA0MTYxMzMzMzRaFw0yNjA0MTcxNjE2MzRaMDMxMTAvBgNV BAMTKEUxNTVGNzA3OEJFM0Q3NTIwREI0MzYzRTU2MEVGOTZCQUU4RjY1NTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfdFyyvu293+lgRJdiBAxVqYXF dpOEWVpKIXh8Ewe0hQNqLCh07XGnLoQVgSy4hFNdUbebQoJP/EXQFbHcK3mo8QL0 Jaorh8ERG2g6y/FPjcwih72AuLu9toWXxZbnUlnuekXLLmQvLXTiPi0xlKp7XD9Q oc2V+l0KrrvRUSH8J4GkTEy33Sdx0Lnt+Bk1yas199pZoQF7MfCbfS325zCpRsjD tx1gf0HHrQsC5NYkOZm4r6IQNY5hsE+ADzq/bpKDOuNWnPf557tnqtGYXPTKrMbJ GHMNN0RB6/2VlH3uPfyve2YolkW6OGWXaf9S2WETpMaZLR/6W1Fq6ObwZW0JAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQU4VX3B4vj11INtDY+Vg75a66PZVcwHwYDVR0j BBgwFoAUzwYx0zo8ncXEVCTVXD52Y4OGV6MwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNjE3MDhhNmItNmMzYS00MGEwLWEzMDItNTk1ZWNjMTc4 NDhjLzIvQ0YwNjMxRDMzQTNDOURDNUM0NTQyNEQ1NUMzRTc2NjM4Mzg2NTdBMy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3p3WXgwem84bmNYRVZDVFZYRDUyWTRP R1Y2TS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS82MTcwOGE2Yi02 YzNhLTQwYTAtYTMwMi01OTVlY2MxNzg0OGMvMi9DRjA2MzFEMzNBM0M5REM1QzQ1 NDI0RDU1QzNFNzY2MzgzODY1N0EzLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAyxMROO8q5UtB8FvqwtNm 6OPxduFse2VfYvs2NSqU7HQM84mVcpejaBc+rmobuu4VDTVkfYvdLaTyWm9Ubo8W 6fkJ5GvnL2FQ3Ebuy3xKIXuabjiQVrNhznQoYV4VzXCW4a4Q/BlhOZYxOZmjBEJ0 qQbDF8bs2VKydTAAB3OHRCQvWuwAggK2IuKBjIsJKSNptoamWhPvmkJXI2vB1Ewd akzKLk9QwY23XPAS2lOY7dIlf+rGcuwz07YQXkyossDrNCRjddjuMdnMg20cAYU6 u+yLwtmfo27d+tz/AAPeRfGVv2ddSI5TLjgxJOCalmQHmLrDTA6bg26K550Sd1PD sw== -----END CERTIFICATE-----Generated at Fri Apr 17 04:53:30 2026 by rpki-client