$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/CF0631D33A3C9DC5C45424D55C3E7663838657A3.mft File: CF0631D33A3C9DC5C45424D55C3E7663838657A3.mft (raw, json) Hash identifier: i3u5ZiHKeXAks/G8OJd09JPj58HGiPmEI0CXrldprcE= Subject key identifier: 4A:3C:6B:37:4C:59:C9:57:40:94:9F:BC:0A:FE:BC:09:FB:0D:C9:71 Authority key identifier: CF:06:31:D3:3A:3C:9D:C5:C4:54:24:D5:5C:3E:76:63:83:86:57:A3 Certificate issuer: /CN=cf0631d33a3c9dc5c45424d55c3e7663838657a3 Certificate serial: 378E4EAC88E68F9B1EB52CEB07418AD3085D57C9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zwYx0zo8ncXEVCTVXD52Y4OGV6M.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/CF0631D33A3C9DC5C45424D55C3E7663838657A3.mft Manifest number: 017B Signing time: Tue 28 Jul 2026 02:19:33 +0000 Manifest this update: Tue 28 Jul 2026 02:14:33 +0000 Manifest next update: Wed 29 Jul 2026 05:59:33 +0000 Files and hashes: 1: CF0631D33A3C9DC5C45424D55C3E7663838657A3.crl (hash: NiNJNCP9+6MvRAEL1AP8FU5KrkSRsxfFALZDpbX0DxA=) 2: 3138352e33302e3230322e302f32342d3234203d3e203630383630.roa (hash: tBh4T597HLyGCSugLkif66QABd9ufnpWRf3NI++UCNc=) 3: 38392e3138352e31322e302f32342d3234203d3e203630383630.roa (hash: KsOBm/IW9m6wYWtDKEPIq17pdU+n9YXSV9XxpyK0qLc=) 4: 39332e3138352e3231342e302f32342d3234203d3e203630383630.roa (hash: I4ydkJ2r2j2i1g1xPyPsffo9hUpPo3RLQo6MfTdRh1Q=) 5: C972E8671DEDC43FE908B548531C969A051CD34C.cer (hash: d7NBPzoR5U51KQ6xM8aVu3af+Il1XYsfzuoeH65sh5k=) 6: 38392e3138352e382e302f32342d3234203d3e203630383630.roa (hash: uuMWj0BWrTugTcot2BIIjLN4CmKo0TjrBWjA0TJKmTM=) 7: 3130392e37322e3132322e302f32342d3234203d3e203630383630.roa (hash: 2mjBtJiNX2GgtlTBc9elrwUynjPTbiI/Km0f5EIklUM=) 8: 3138352e33302e3230302e302f32332d3233203d3e203630383630.roa (hash: EjHevTTMahznqtckt7aLMDXLh3y0kx9bdoI4UFB/hKw=) 9: 3138352e33302e3230332e302f32342d3234203d3e203630383630.roa (hash: +hLj8/wzU4ALLxe4Xdt3WSnzJEJQWXiNiu+hY32JK2w=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/CF0631D33A3C9DC5C45424D55C3E7663838657A3.crl rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/CF0631D33A3C9DC5C45424D55C3E7663838657A3.mft rsync://rpki.ripe.net/repository/DEFAULT/zwYx0zo8ncXEVCTVXD52Y4OGV6M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 29 Jul 2026 05:59:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:8e:4e:ac:88:e6:8f:9b:1e:b5:2c:eb:07:41:8a:d3:08:5d:57:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cf0631d33a3c9dc5c45424d55c3e7663838657a3 Validity Not Before: Jul 28 02:14:33 2026 GMT Not After : Jul 29 05:59:33 2026 GMT Subject: CN=4A3C6B374C59C95740949FBC0AFEBC09FB0DC971 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:70:68:b0:7d:1d:7d:09:57:b4:c6:2d:ac:e6: c6:08:97:3d:b5:13:26:46:72:f5:01:ca:39:b6:d2: 7f:27:97:41:30:23:3f:c5:19:1c:d8:d8:b1:57:f4: 8c:17:f5:16:37:8d:9a:98:29:90:e2:7c:30:0c:c6: c4:7d:73:19:e0:7f:5e:0c:0c:47:41:fc:f1:dd:bf: 8b:85:74:b4:35:e3:4f:eb:df:b2:64:14:ef:67:39: f5:91:00:4b:bb:c8:98:39:5b:0c:8d:d9:9b:59:20: b8:a5:7c:0e:42:27:8a:a0:49:7b:b9:6a:dc:28:92: 37:52:93:d3:7f:93:ca:06:83:72:1c:6d:57:d1:f0: d7:26:a8:23:c0:5a:9a:1a:a7:34:98:17:34:c2:30: 47:77:83:52:77:79:25:32:58:72:db:bb:c0:af:5c: 03:c4:54:f3:fa:94:81:cf:32:83:9f:23:02:f0:c3: e3:29:ae:83:72:56:d4:bd:65:3e:27:35:b4:4a:4b: d3:f1:e4:eb:43:37:1a:95:0a:dc:ba:de:a0:c2:60: 62:4e:da:60:71:e2:d3:2b:cb:d7:e5:90:7c:43:d8: 5f:61:e1:de:c9:e9:f5:cd:5e:bb:53:08:50:eb:03: ac:b6:44:b8:dd:c7:8d:9b:79:3c:3d:dd:b7:2c:16: 75:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:3C:6B:37:4C:59:C9:57:40:94:9F:BC:0A:FE:BC:09:FB:0D:C9:71 X509v3 Authority Key Identifier: keyid:CF:06:31:D3:3A:3C:9D:C5:C4:54:24:D5:5C:3E:76:63:83:86:57:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/CF0631D33A3C9DC5C45424D55C3E7663838657A3.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zwYx0zo8ncXEVCTVXD52Y4OGV6M.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/CF0631D33A3C9DC5C45424D55C3E7663838657A3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:3d:6d:8d:62:70:a3:14:d2:7b:58:87:73:f9:1b:fc:0b:05: 47:e8:26:cd:5e:71:11:d5:4e:dd:43:97:1f:8b:62:a7:4d:d0: 1d:8e:c7:d3:db:32:31:87:23:1d:13:91:3f:de:0f:83:f2:70: 99:49:d8:54:45:7a:89:45:88:92:1e:0c:29:10:3a:6e:30:0a: 2c:1d:6a:c6:8b:59:50:88:b6:3a:a8:0b:9e:90:80:37:f8:0a: 55:7e:c4:db:43:d7:c1:b7:c9:db:43:df:ef:3e:77:0f:f2:3c: 15:0d:1b:c9:c3:a4:71:5c:08:0b:b4:58:48:4b:3f:5f:b6:68: 6d:ea:14:f6:27:dd:99:08:b1:05:a9:e9:59:14:28:1a:bd:6c: 35:68:fa:99:b2:dc:32:79:87:0f:44:53:19:84:42:21:14:ee: 3d:c6:d6:d3:7b:76:2e:78:d5:de:02:1a:78:59:ae:78:a9:01: 45:82:37:84:c2:ff:64:36:3a:73:9e:dc:e5:9e:39:29:f2:1e: 63:7c:0a:59:00:0d:79:da:a6:f7:24:9d:30:8f:15:21:4c:42: c8:6a:cd:74:d7:e9:1b:ec:29:89:d3:26:b2:6a:55:87:f4:10: d1:17:87:15:49:89:76:ad:14:1c:bf:f8:f2:e3:30:2e:c3:2b: 22:fc:90:ff -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUN45OrIjmj5setSzrB0GK0whdV8kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoY2YwNjMxZDMzYTNjOWRjNWM0NTQyNGQ1NWMzZTc2NjM4 Mzg2NTdhMzAeFw0yNjA3MjgwMjE0MzNaFw0yNjA3MjkwNTU5MzNaMDMxMTAvBgNV BAMTKDRBM0M2QjM3NEM1OUM5NTc0MDk0OUZCQzBBRkVCQzA5RkIwREM5NzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFcGiwfR19CVe0xi2s5sYIlz21 EyZGcvUByjm20n8nl0EwIz/FGRzY2LFX9IwX9RY3jZqYKZDifDAMxsR9cxngf14M DEdB/PHdv4uFdLQ140/r37JkFO9nOfWRAEu7yJg5WwyN2ZtZILilfA5CJ4qgSXu5 atwokjdSk9N/k8oGg3IcbVfR8NcmqCPAWpoapzSYFzTCMEd3g1J3eSUyWHLbu8Cv XAPEVPP6lIHPMoOfIwLww+MproNyVtS9ZT4nNbRKS9Px5OtDNxqVCty63qDCYGJO 2mBx4tMry9flkHxD2F9h4d7J6fXNXrtTCFDrA6y2RLjdx42beTw93bcsFnV/AgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUSjxrN0xZyVdAlJ+8Cv68CfsNyXEwHwYDVR0j BBgwFoAUzwYx0zo8ncXEVCTVXD52Y4OGV6MwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNjE3MDhhNmItNmMzYS00MGEwLWEzMDItNTk1ZWNjMTc4 NDhjLzIvQ0YwNjMxRDMzQTNDOURDNUM0NTQyNEQ1NUMzRTc2NjM4Mzg2NTdBMy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3p3WXgwem84bmNYRVZDVFZYRDUyWTRP R1Y2TS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS82MTcwOGE2Yi02 YzNhLTQwYTAtYTMwMi01OTVlY2MxNzg0OGMvMi9DRjA2MzFEMzNBM0M5REM1QzQ1 NDI0RDU1QzNFNzY2MzgzODY1N0EzLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlT1tjWJwoxTSe1iHc/kb /AsFR+gmzV5xEdVO3UOXH4tip03QHY7H09syMYcjHRORP94Pg/JwmUnYVEV6iUWI kh4MKRA6bjAKLB1qxotZUIi2OqgLnpCAN/gKVX7E20PXwbfJ20Pf7z53D/I8FQ0b ycOkcVwIC7RYSEs/X7ZobeoU9ifdmQixBanpWRQoGr1sNWj6mbLcMnmHD0RTGYRC IRTuPcbW03t2LnjV3gIaeFmueKkBRYI3hML/ZDY6c57c5Z45KfIeY3wKWQANedqm 9ySdMI8VIUxCyGrNdNfpG+wpidMmsmpVh/QQ0ReHFUmJdq0UHL/48uMwLsMrIvyQ /w== -----END CERTIFICATE-----Generated at Tue Jul 28 22:06:50 2026 by rpki-client