$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ebb6890d-0d6b-4ea9-a2ef-92d34a3ae64d/0/31F76CE2EF4D020F925E37D7A9D8E35398C7C017.mft File: 31F76CE2EF4D020F925E37D7A9D8E35398C7C017.mft (raw, json) Hash identifier: qom5Djh6gBSJ5av923OCSMKVCAV/sVfmSp+0gD/Kcq8= Subject key identifier: 5E:AC:BF:6F:27:7A:A6:CC:FB:E0:13:E3:27:8F:CC:6B:20:4F:B4:68 Authority key identifier: 31:F7:6C:E2:EF:4D:02:0F:92:5E:37:D7:A9:D8:E3:53:98:C7:C0:17 Certificate issuer: /CN=31F76CE2EF4D020F925E37D7A9D8E35398C7C017 Certificate serial: 7BF4957DCC73933C3DE407A33CD833F8B42F7471 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/31F76CE2EF4D020F925E37D7A9D8E35398C7C017.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ebb6890d-0d6b-4ea9-a2ef-92d34a3ae64d/0/31F76CE2EF4D020F925E37D7A9D8E35398C7C017.mft Manifest number: 1E Signing time: Mon 03 Nov 2025 23:45:30 +0000 Manifest this update: Mon 03 Nov 2025 23:40:30 +0000 Manifest next update: Wed 05 Nov 2025 03:38:30 +0000 Files and hashes: 1: 326131343a373538313a3730303a3a2f34382d3438203d3e20323034383731.roa (hash: u8e0eoyomRFMkD/JcQQfwJ+uqGsBt5QX6wzg4Fq5J9M=) 2: 326131343a373538313a3738363a3a2f34382d3438203d3e20323034383731.roa (hash: d7JuEn5B8KAwVz8SpkU4AMcAJkaWbbl+bWkksQthj/k=) 3: 31F76CE2EF4D020F925E37D7A9D8E35398C7C017.crl (hash: gboU8htpRx2Eyb1+1FyYzqDh/fyKq71JbN9LyWOH1OY=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ebb6890d-0d6b-4ea9-a2ef-92d34a3ae64d/0/31F76CE2EF4D020F925E37D7A9D8E35398C7C017.crl rsync://rsync.paas.rpki.ripe.net/repository/ebb6890d-0d6b-4ea9-a2ef-92d34a3ae64d/0/31F76CE2EF4D020F925E37D7A9D8E35398C7C017.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/31F76CE2EF4D020F925E37D7A9D8E35398C7C017.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 05 Nov 2025 03:38:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:f4:95:7d:cc:73:93:3c:3d:e4:07:a3:3c:d8:33:f8:b4:2f:74:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=31F76CE2EF4D020F925E37D7A9D8E35398C7C017 Validity Not Before: Nov 3 23:40:30 2025 GMT Not After : Nov 5 03:38:30 2025 GMT Subject: CN=5EACBF6F277AA6CCFBE013E3278FCC6B204FB468 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:79:93:2f:49:51:b8:5f:d7:0f:15:95:56:e7: f8:61:dd:aa:37:bf:57:07:f2:be:c2:cc:a4:a8:0f: f8:00:1b:f4:29:83:f1:57:8d:6a:b5:d4:e4:a6:77: 73:93:90:dd:8e:55:c6:12:4a:8e:ee:cd:86:06:66: 34:c8:4c:0d:c6:07:37:62:2f:43:de:6e:43:08:f3: 7e:2d:e5:26:08:ea:91:08:0e:0b:64:f0:2a:e3:24: ef:50:be:70:85:ab:1f:cf:f2:1b:e8:af:6f:53:59: 28:d5:d7:f6:ef:37:22:6e:54:3d:1c:d3:03:44:4a: 0a:c3:f4:48:62:0f:20:e7:e4:c8:ba:b6:8f:e3:0b: 1b:24:17:c3:f5:6e:80:75:a3:7c:e8:c9:64:1b:67: 2b:2a:d7:15:23:09:04:ab:06:6e:0f:cd:9e:16:2c: 81:8f:c8:28:7c:6f:68:26:8f:be:e7:ce:47:9c:12: f3:28:d2:d2:51:ac:20:c4:d7:ef:7f:98:fc:b9:8f: f7:fa:2d:10:63:67:02:f8:77:a0:27:12:c5:35:ad: 00:91:2c:68:97:c1:60:ee:5d:2e:2f:0d:02:d1:f1: bd:3d:ce:e2:9c:33:82:0c:18:83:10:73:4a:d1:f1: 2f:13:66:23:0c:36:35:c7:0c:f1:9d:cd:21:5d:fb: cb:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:AC:BF:6F:27:7A:A6:CC:FB:E0:13:E3:27:8F:CC:6B:20:4F:B4:68 X509v3 Authority Key Identifier: keyid:31:F7:6C:E2:EF:4D:02:0F:92:5E:37:D7:A9:D8:E3:53:98:C7:C0:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/ebb6890d-0d6b-4ea9-a2ef-92d34a3ae64d/0/31F76CE2EF4D020F925E37D7A9D8E35398C7C017.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/31F76CE2EF4D020F925E37D7A9D8E35398C7C017.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ebb6890d-0d6b-4ea9-a2ef-92d34a3ae64d/0/31F76CE2EF4D020F925E37D7A9D8E35398C7C017.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:73:86:dd:09:7f:75:98:78:5d:e8:c0:70:1c:de:78:8c:bc: 91:01:2a:14:4e:af:6b:b3:98:a2:5d:84:58:9a:ea:88:81:d6: 46:0e:ea:20:e5:6a:53:1f:69:d9:a5:2c:85:08:c8:14:92:d8: 87:d8:ed:28:85:cd:54:eb:75:83:49:df:14:cb:2c:51:b6:af: 48:42:4d:45:85:02:97:bd:db:e1:cd:91:b4:01:65:1f:f2:01: 21:50:73:7e:b3:7b:a6:70:02:92:24:3f:03:26:26:ca:b5:a9: 12:8b:a1:47:66:e2:0d:6b:69:e9:7b:c6:9a:d3:b0:6a:d3:52: 85:46:41:f8:02:21:69:04:1c:03:75:c1:a5:8b:25:e8:c8:b0: 30:dc:a0:bc:67:b4:5b:4e:b0:82:f2:87:1a:9e:55:10:a7:fc: e5:0c:76:33:35:4a:bb:c3:7a:88:f8:91:4e:6f:f7:08:23:a1: 91:59:9b:90:e4:5b:89:a2:5a:6d:29:35:36:44:dd:d9:17:a4: d5:da:a5:84:da:10:13:99:1e:7c:e5:08:c3:9f:4b:02:ce:70: ef:4a:2d:f5:f8:5d:d2:30:fa:69:d6:8d:57:ee:fb:a8:6e:cb: 3a:41:d3:f7:5f:8e:2c:b7:1c:02:a0:4a:16:42:ec:0c:30:d4: 95:62:87:77 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUe/SVfcxzkzw95AejPNgz+LQvdHEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzFGNzZDRTJFRjREMDIwRjkyNUUzN0Q3QTlEOEUzNTM5 OEM3QzAxNzAeFw0yNTExMDMyMzQwMzBaFw0yNTExMDUwMzM4MzBaMDMxMTAvBgNV BAMTKDVFQUNCRjZGMjc3QUE2Q0NGQkUwMTNFMzI3OEZDQzZCMjA0RkI0NjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCXeZMvSVG4X9cPFZVW5/hh3ao3 v1cH8r7CzKSoD/gAG/Qpg/FXjWq11OSmd3OTkN2OVcYSSo7uzYYGZjTITA3GBzdi L0PebkMI834t5SYI6pEIDgtk8CrjJO9QvnCFqx/P8hvor29TWSjV1/bvNyJuVD0c 0wNESgrD9EhiDyDn5Mi6to/jCxskF8P1boB1o3zoyWQbZysq1xUjCQSrBm4PzZ4W LIGPyCh8b2gmj77nzkecEvMo0tJRrCDE1+9/mPy5j/f6LRBjZwL4d6AnEsU1rQCR LGiXwWDuXS4vDQLR8b09zuKcM4IMGIMQc0rR8S8TZiMMNjXHDPGdzSFd+8vzAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUXqy/byd6psz74BPjJ4/MayBPtGgwHwYDVR0j BBgwFoAUMfds4u9NAg+SXjfXqdjjU5jHwBcwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZWJiNjg5MGQtMGQ2Yi00ZWE5LWEyZWYtOTJkMzRhM2Fl NjRkLzAvMzFGNzZDRTJFRjREMDIwRjkyNUUzN0Q3QTlEOEUzNTM5OEM3QzAxNy5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC8zMUY3NkNFMkVGNEQwMjBGOTI1RTM3RDdB OUQ4RTM1Mzk4QzdDMDE3LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2ViYjY4OTBkLTBkNmItNGVhOS1hMmVmLTkyZDM0YTNhZTY0ZC8wLzMxRjc2Q0Uy RUY0RDAyMEY5MjVFMzdEN0E5RDhFMzUzOThDN0MwMTcubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQARc4bd CX91mHhd6MBwHN54jLyRASoUTq9rs5iiXYRYmuqIgdZGDuog5WpTH2nZpSyFCMgU ktiH2O0ohc1U63WDSd8UyyxRtq9IQk1FhQKXvdvhzZG0AWUf8gEhUHN+s3umcAKS JD8DJibKtakSi6FHZuINa2npe8aa07Bq01KFRkH4AiFpBBwDdcGliyXoyLAw3KC8 Z7RbTrCC8ocanlUQp/zlDHYzNUq7w3qI+JFOb/cII6GRWZuQ5FuJolptKTU2RN3Z F6TV2qWE2hATmR585QjDn0sCznDvSi31+F3SMPpp1o1X7vuobss6QdP3X44stxwC oEoWQuwMMNSVYod3 -----END CERTIFICATE-----Generated at Tue Nov 4 10:55:25 2025 by rpki-client