$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/CF0631D33A3C9DC5C45424D55C3E7663838657A3.mft File: CF0631D33A3C9DC5C45424D55C3E7663838657A3.mft (raw, json) Hash identifier: 9kKnoMEnku+hmlfSdrUeLBBhOg9FazPKz0MHLZj/BxM= Subject key identifier: 31:83:FC:18:4D:80:59:8D:83:9F:06:9F:FA:1C:23:E0:AA:8E:41:62 Authority key identifier: CF:06:31:D3:3A:3C:9D:C5:C4:54:24:D5:5C:3E:76:63:83:86:57:A3 Certificate issuer: /CN=cf0631d33a3c9dc5c45424d55c3e7663838657a3 Certificate serial: 65C50EDDFC335B2A9DA1E28F05238E2186F60DEA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zwYx0zo8ncXEVCTVXD52Y4OGV6M.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/CF0631D33A3C9DC5C45424D55C3E7663838657A3.mft Manifest number: 01C4 Signing time: Sun 20 Sep 2026 16:46:28 +0000 Manifest this update: Sun 20 Sep 2026 16:41:28 +0000 Manifest next update: Mon 21 Sep 2026 18:04:28 +0000 Files and hashes: 1: 3138352e33302e3230322e302f32342d3234203d3e203630383630.roa (hash: tBh4T597HLyGCSugLkif66QABd9ufnpWRf3NI++UCNc=) 2: CF0631D33A3C9DC5C45424D55C3E7663838657A3.crl (hash: 0pOP6LFUx0edei8Jqz35gdnymdU8mHyLabOeZsB7o7A=) 3: 39332e3138352e3231342e302f32342d3234203d3e203630383630.roa (hash: I4ydkJ2r2j2i1g1xPyPsffo9hUpPo3RLQo6MfTdRh1Q=) 4: 3138352e33302e3230302e302f32332d3233203d3e203630383630.roa (hash: EjHevTTMahznqtckt7aLMDXLh3y0kx9bdoI4UFB/hKw=) 5: 38392e3138352e31322e302f32342d3234203d3e203630383630.roa (hash: KsOBm/IW9m6wYWtDKEPIq17pdU+n9YXSV9XxpyK0qLc=) 6: 3138352e33302e3230332e302f32342d3234203d3e203630383630.roa (hash: +hLj8/wzU4ALLxe4Xdt3WSnzJEJQWXiNiu+hY32JK2w=) 7: C972E8671DEDC43FE908B548531C969A051CD34C.cer (hash: d7NBPzoR5U51KQ6xM8aVu3af+Il1XYsfzuoeH65sh5k=) 8: 3130392e37322e3132322e302f32342d3234203d3e203630383630.roa (hash: 2mjBtJiNX2GgtlTBc9elrwUynjPTbiI/Km0f5EIklUM=) 9: 38392e3138352e382e302f32342d3234203d3e203630383630.roa (hash: uuMWj0BWrTugTcot2BIIjLN4CmKo0TjrBWjA0TJKmTM=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/CF0631D33A3C9DC5C45424D55C3E7663838657A3.crl rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/CF0631D33A3C9DC5C45424D55C3E7663838657A3.mft rsync://rpki.ripe.net/repository/DEFAULT/zwYx0zo8ncXEVCTVXD52Y4OGV6M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 21 Sep 2026 18:04:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:c5:0e:dd:fc:33:5b:2a:9d:a1:e2:8f:05:23:8e:21:86:f6:0d:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cf0631d33a3c9dc5c45424d55c3e7663838657a3 Validity Not Before: Sep 20 16:41:28 2026 GMT Not After : Sep 21 18:04:28 2026 GMT Subject: CN=3183FC184D80598D839F069FFA1C23E0AA8E4162 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:2f:5c:7a:d9:10:dc:cc:78:14:e8:17:5c:22: a7:c0:b6:e2:57:60:06:b0:77:c5:65:38:bc:5b:0a: 5d:5d:3b:92:c0:ac:f2:95:ba:fc:ad:c3:8c:07:17: 26:08:9d:3b:fd:e2:db:52:1e:c5:87:9b:87:f2:51: cb:2f:cf:2b:bd:ad:2c:ad:85:8d:01:5c:78:66:33: 6c:81:ed:61:c5:d0:53:57:ba:00:bc:0d:6d:62:d2: 0d:9e:8d:45:1c:50:0e:d4:cc:2a:65:0d:41:11:76: 10:be:1d:23:a3:69:64:22:fa:b1:af:74:49:7d:57: 3c:f7:59:e1:ba:db:a3:77:47:0c:97:29:31:9c:66: f5:27:3b:94:25:76:08:30:2e:e5:7a:c0:40:54:69: f9:24:b2:db:14:43:00:cb:70:df:aa:0d:53:27:0f: aa:f8:3d:25:8b:58:86:b6:fc:e5:cb:98:05:21:aa: c8:29:8b:75:59:ba:ab:54:51:c1:c3:f2:ad:bc:74: ce:a3:68:f7:48:47:fc:49:1e:fa:c5:98:5f:61:f8: a7:33:c3:25:39:c9:ab:f5:bd:4e:dc:c0:fc:c0:ad: e7:17:88:19:61:75:fe:b3:a7:62:d7:df:ec:c6:5c: 3b:8c:f5:11:8c:e7:f0:2f:40:43:62:16:cc:d9:6d: 64:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:83:FC:18:4D:80:59:8D:83:9F:06:9F:FA:1C:23:E0:AA:8E:41:62 X509v3 Authority Key Identifier: keyid:CF:06:31:D3:3A:3C:9D:C5:C4:54:24:D5:5C:3E:76:63:83:86:57:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/CF0631D33A3C9DC5C45424D55C3E7663838657A3.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zwYx0zo8ncXEVCTVXD52Y4OGV6M.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/CF0631D33A3C9DC5C45424D55C3E7663838657A3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6f:92:66:a9:f7:17:72:13:c5:d6:87:ef:a1:8c:3d:ab:e7:d8: 3d:c7:51:43:50:08:43:7a:2b:8e:b2:2a:82:45:ef:96:29:6e: 56:cc:68:7a:0c:f8:cd:86:2f:34:4d:80:64:14:0f:23:2a:4b: 94:9e:76:00:59:8a:67:a0:de:1c:49:95:8f:8c:14:18:c8:76: 1d:46:ee:a4:45:ce:47:dc:39:66:34:75:ab:a7:fd:f7:53:ad: d2:b3:1d:1d:15:9c:ad:e6:dd:b3:4f:bf:9d:b4:8a:ac:b0:a7: 71:0c:5b:bd:b8:a9:46:13:44:9f:99:bd:45:58:ef:42:cd:15: 94:c6:97:8c:6b:07:ad:f6:6a:46:59:97:52:1d:8f:fa:c6:da: d2:d3:44:f0:f3:72:5e:65:3d:9b:d8:2e:a0:20:53:33:f2:b8: 66:85:d0:0f:25:8b:91:9a:1e:37:4b:01:b2:a3:a0:f8:40:d4: 2b:bc:70:e4:f1:5d:bc:e7:88:f0:c4:2b:e2:0f:4c:e1:13:4c: b1:fd:22:1c:23:ab:86:c7:72:11:c4:ee:0a:69:da:85:47:e7: b5:de:a8:1a:f9:14:dd:24:de:22:80:73:30:ac:4e:ad:c5:d6: c8:44:73:9a:c1:ae:5f:07:16:35:6e:17:e8:f0:fc:fd:fc:29: e3:07:18:0b -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUZcUO3fwzWyqdoeKPBSOOIYb2DeowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoY2YwNjMxZDMzYTNjOWRjNWM0NTQyNGQ1NWMzZTc2NjM4 Mzg2NTdhMzAeFw0yNjA5MjAxNjQxMjhaFw0yNjA5MjExODA0MjhaMDMxMTAvBgNV BAMTKDMxODNGQzE4NEQ4MDU5OEQ4MzlGMDY5RkZBMUMyM0UwQUE4RTQxNjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoL1x62RDczHgU6BdcIqfAtuJX YAawd8VlOLxbCl1dO5LArPKVuvytw4wHFyYInTv94ttSHsWHm4fyUcsvzyu9rSyt hY0BXHhmM2yB7WHF0FNXugC8DW1i0g2ejUUcUA7UzCplDUERdhC+HSOjaWQi+rGv dEl9Vzz3WeG626N3RwyXKTGcZvUnO5QldggwLuV6wEBUafkkstsUQwDLcN+qDVMn D6r4PSWLWIa2/OXLmAUhqsgpi3VZuqtUUcHD8q28dM6jaPdIR/xJHvrFmF9h+Kcz wyU5yav1vU7cwPzArecXiBlhdf6zp2LX3+zGXDuM9RGM5/AvQENiFszZbWRrAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUMYP8GE2AWY2Dnwaf+hwj4KqOQWIwHwYDVR0j BBgwFoAUzwYx0zo8ncXEVCTVXD52Y4OGV6MwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNjE3MDhhNmItNmMzYS00MGEwLWEzMDItNTk1ZWNjMTc4 NDhjLzIvQ0YwNjMxRDMzQTNDOURDNUM0NTQyNEQ1NUMzRTc2NjM4Mzg2NTdBMy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3p3WXgwem84bmNYRVZDVFZYRDUyWTRP R1Y2TS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS82MTcwOGE2Yi02 YzNhLTQwYTAtYTMwMi01OTVlY2MxNzg0OGMvMi9DRjA2MzFEMzNBM0M5REM1QzQ1 NDI0RDU1QzNFNzY2MzgzODY1N0EzLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAb5JmqfcXchPF1ofvoYw9 q+fYPcdRQ1AIQ3orjrIqgkXvliluVsxoegz4zYYvNE2AZBQPIypLlJ52AFmKZ6De HEmVj4wUGMh2HUbupEXOR9w5ZjR1q6f991Ot0rMdHRWcrebds0+/nbSKrLCncQxb vbipRhNEn5m9RVjvQs0VlMaXjGsHrfZqRlmXUh2P+sba0tNE8PNyXmU9m9guoCBT M/K4ZoXQDyWLkZoeN0sBsqOg+EDUK7xw5PFdvOeI8MQr4g9M4RNMsf0iHCOrhsdy EcTuCmnahUfntd6oGvkU3STeIoBzMKxOrcXWyERzmsGuXwcWNW4X6PD8/fwp4wcY Cw== -----END CERTIFICATE-----Generated at Mon Sep 21 03:43:41 2026 by rpki-client