$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/CF0631D33A3C9DC5C45424D55C3E7663838657A3.mft File: CF0631D33A3C9DC5C45424D55C3E7663838657A3.mft (raw, json) Hash identifier: 42n8Vp1ffnDHSPRRNzgPpTzhK7hNWFMEwchh9i6xYGo= Subject key identifier: FF:A2:60:F3:97:47:70:14:EF:72:37:A8:26:45:AC:61:4C:A6:FF:3B Authority key identifier: CF:06:31:D3:3A:3C:9D:C5:C4:54:24:D5:5C:3E:76:63:83:86:57:A3 Certificate issuer: /CN=cf0631d33a3c9dc5c45424d55c3e7663838657a3 Certificate serial: 208207720AF6585DDD33CD5F252C04FBF52A9BE3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zwYx0zo8ncXEVCTVXD52Y4OGV6M.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/CF0631D33A3C9DC5C45424D55C3E7663838657A3.mft Manifest number: 0140 Signing time: Sat 13 Jun 2026 10:23:25 +0000 Manifest this update: Sat 13 Jun 2026 10:18:25 +0000 Manifest next update: Sun 14 Jun 2026 11:45:25 +0000 Files and hashes: 1: 3130392e37322e3132322e302f32342d3234203d3e203630383630.roa (hash: 2mjBtJiNX2GgtlTBc9elrwUynjPTbiI/Km0f5EIklUM=) 2: 3138352e33302e3230332e302f32342d3234203d3e203630383630.roa (hash: +hLj8/wzU4ALLxe4Xdt3WSnzJEJQWXiNiu+hY32JK2w=) 3: 3138352e33302e3230322e302f32342d3234203d3e203630383630.roa (hash: tBh4T597HLyGCSugLkif66QABd9ufnpWRf3NI++UCNc=) 4: 39332e3138352e3231342e302f32342d3234203d3e203630383630.roa (hash: I4ydkJ2r2j2i1g1xPyPsffo9hUpPo3RLQo6MfTdRh1Q=) 5: 38392e3138352e382e302f32342d3234203d3e203630383630.roa (hash: uuMWj0BWrTugTcot2BIIjLN4CmKo0TjrBWjA0TJKmTM=) 6: 38392e3138352e31322e302f32342d3234203d3e203630383630.roa (hash: KsOBm/IW9m6wYWtDKEPIq17pdU+n9YXSV9XxpyK0qLc=) 7: C972E8671DEDC43FE908B548531C969A051CD34C.cer (hash: d7NBPzoR5U51KQ6xM8aVu3af+Il1XYsfzuoeH65sh5k=) 8: CF0631D33A3C9DC5C45424D55C3E7663838657A3.crl (hash: RLZD5GAqYwi+yhc6ZrQxsWEtMKtfdA2/yQQmOcbrHNg=) 9: 3138352e33302e3230302e302f32332d3233203d3e203630383630.roa (hash: EjHevTTMahznqtckt7aLMDXLh3y0kx9bdoI4UFB/hKw=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/CF0631D33A3C9DC5C45424D55C3E7663838657A3.crl rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/CF0631D33A3C9DC5C45424D55C3E7663838657A3.mft rsync://rpki.ripe.net/repository/DEFAULT/zwYx0zo8ncXEVCTVXD52Y4OGV6M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Jun 2026 08:43:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:82:07:72:0a:f6:58:5d:dd:33:cd:5f:25:2c:04:fb:f5:2a:9b:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cf0631d33a3c9dc5c45424d55c3e7663838657a3 Validity Not Before: Jun 13 10:18:25 2026 GMT Not After : Jun 14 11:45:25 2026 GMT Subject: CN=FFA260F397477014EF7237A82645AC614CA6FF3B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:07:56:b4:d3:46:b3:ae:c5:74:12:09:54:81: 0d:66:db:79:7a:b5:43:a4:5f:ac:fb:20:6e:81:35: 35:dc:40:60:a5:84:05:a3:1a:5f:3e:fc:d7:c8:69: 4d:84:76:0b:d5:c9:d5:e1:2f:7c:4c:f7:a5:03:3b: df:f6:31:ef:14:bf:16:0f:00:d0:ce:1e:33:44:d3: 24:53:4b:03:88:5b:a6:c6:df:27:70:81:b6:a2:08: ae:a6:dc:ec:bd:11:d2:00:6a:76:79:22:0b:d6:ef: 20:c0:14:fb:c0:25:89:d6:bb:d9:a1:b7:27:82:ec: 92:4b:b0:ad:58:ce:d1:4f:2c:ba:4a:d1:bf:5a:2c: 2c:8a:e3:2e:77:9a:cc:24:8f:b0:cb:a8:82:9c:6f: c1:cc:23:ee:36:d7:63:de:8d:04:0a:06:02:4f:61: 85:57:81:32:1e:70:49:8d:3d:c7:9b:37:f6:9e:e6: a5:5a:ae:ed:ec:d4:7b:da:14:83:40:0d:3c:2c:fb: d0:06:39:eb:ba:05:fd:88:e3:ef:ab:82:84:2a:6c: f7:8f:df:0b:76:a6:d3:90:02:59:d7:7a:35:ca:08: d3:a7:37:47:bd:fb:4e:8c:d0:aa:4c:35:c5:88:fd: 2b:f0:14:14:7f:a4:4c:61:77:0a:32:a9:78:07:07: 20:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:A2:60:F3:97:47:70:14:EF:72:37:A8:26:45:AC:61:4C:A6:FF:3B X509v3 Authority Key Identifier: keyid:CF:06:31:D3:3A:3C:9D:C5:C4:54:24:D5:5C:3E:76:63:83:86:57:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/CF0631D33A3C9DC5C45424D55C3E7663838657A3.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zwYx0zo8ncXEVCTVXD52Y4OGV6M.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/CF0631D33A3C9DC5C45424D55C3E7663838657A3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 62:52:96:cb:c1:6a:55:33:3b:eb:b3:93:f6:3e:30:42:4a:34: db:a4:14:e6:f9:b6:3a:cd:67:8c:d4:5b:ec:d1:e0:f5:e6:78: 40:02:c5:50:ec:02:80:54:a6:bd:a4:cc:fa:d2:51:74:82:67: 24:ae:04:8c:51:51:29:6f:9c:b2:a7:ef:68:70:57:37:55:de: 58:d4:13:fb:e4:fb:da:e5:f2:24:54:79:8a:e4:ce:18:ba:47: 33:85:dc:53:0c:92:09:c7:e6:d2:b9:e3:e7:e2:8b:4f:3a:2a: d9:53:74:31:dc:25:98:ed:3e:ad:ee:6a:2c:16:a5:96:6b:66: 6d:92:b3:ba:50:42:6a:07:46:60:9f:ec:e3:7a:e6:20:4c:67: ed:66:90:6b:0f:83:8a:ad:c1:20:f6:47:e7:c6:d8:69:31:0e: 87:04:53:e9:d4:65:10:cd:70:8e:1e:31:0d:2b:9a:dd:71:ff: 10:77:8a:06:35:f9:0c:ab:ba:4e:48:12:99:8c:62:43:9d:b3: dd:b9:60:b7:b8:cc:f5:a6:b6:2a:5d:02:ef:c4:fe:39:39:58: 71:5d:90:21:99:24:d5:0c:e3:50:0f:f4:88:11:03:8d:43:49: 60:6b:04:ba:10:3c:98:38:d4:4d:5b:ad:6c:e7:39:cb:e6:39: 67:ca:16:21 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUIIIHcgr2WF3dM81fJSwE+/Uqm+MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoY2YwNjMxZDMzYTNjOWRjNWM0NTQyNGQ1NWMzZTc2NjM4 Mzg2NTdhMzAeFw0yNjA2MTMxMDE4MjVaFw0yNjA2MTQxMTQ1MjVaMDMxMTAvBgNV BAMTKEZGQTI2MEYzOTc0NzcwMTRFRjcyMzdBODI2NDVBQzYxNENBNkZGM0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDsB1a000azrsV0EglUgQ1m23l6 tUOkX6z7IG6BNTXcQGClhAWjGl8+/NfIaU2EdgvVydXhL3xM96UDO9/2Me8UvxYP ANDOHjNE0yRTSwOIW6bG3ydwgbaiCK6m3Oy9EdIAanZ5IgvW7yDAFPvAJYnWu9mh tyeC7JJLsK1YztFPLLpK0b9aLCyK4y53mswkj7DLqIKcb8HMI+4212PejQQKBgJP YYVXgTIecEmNPcebN/ae5qVaru3s1HvaFINADTws+9AGOeu6Bf2I4++rgoQqbPeP 3wt2ptOQAlnXejXKCNOnN0e9+06M0KpMNcWI/SvwFBR/pExhdwoyqXgHByABAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQU/6Jg85dHcBTvcjeoJkWsYUym/zswHwYDVR0j BBgwFoAUzwYx0zo8ncXEVCTVXD52Y4OGV6MwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNjE3MDhhNmItNmMzYS00MGEwLWEzMDItNTk1ZWNjMTc4 NDhjLzIvQ0YwNjMxRDMzQTNDOURDNUM0NTQyNEQ1NUMzRTc2NjM4Mzg2NTdBMy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3p3WXgwem84bmNYRVZDVFZYRDUyWTRP R1Y2TS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS82MTcwOGE2Yi02 YzNhLTQwYTAtYTMwMi01OTVlY2MxNzg0OGMvMi9DRjA2MzFEMzNBM0M5REM1QzQ1 NDI0RDU1QzNFNzY2MzgzODY1N0EzLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYlKWy8FqVTM767OT9j4w Qko026QU5vm2Os1njNRb7NHg9eZ4QALFUOwCgFSmvaTM+tJRdIJnJK4EjFFRKW+c sqfvaHBXN1XeWNQT++T72uXyJFR5iuTOGLpHM4XcUwySCcfm0rnj5+KLTzoq2VN0 MdwlmO0+re5qLBallmtmbZKzulBCagdGYJ/s43rmIExn7WaQaw+Diq3BIPZH58bY aTEOhwRT6dRlEM1wjh4xDSua3XH/EHeKBjX5DKu6TkgSmYxiQ52z3blgt7jM9aa2 Kl0C78T+OTlYcV2QIZkk1QzjUA/0iBEDjUNJYGsEuhA8mDjUTVutbOc5y+Y5Z8oW IQ== -----END CERTIFICATE-----Generated at Sat Jun 13 15:06:50 2026 by rpki-client