$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ebb6890d-0d6b-4ea9-a2ef-92d34a3ae64d/0/31F76CE2EF4D020F925E37D7A9D8E35398C7C017.mft File: 31F76CE2EF4D020F925E37D7A9D8E35398C7C017.mft (raw, json) Hash identifier: TEwlcCwTGezIbFd/m1f1xgT0Q2Is8k7B2jtmhOhv0KQ= Subject key identifier: 42:5E:6D:03:3F:AF:AE:13:2E:7A:EC:EB:7D:8E:35:86:52:B3:A1:FE Authority key identifier: 31:F7:6C:E2:EF:4D:02:0F:92:5E:37:D7:A9:D8:E3:53:98:C7:C0:17 Certificate issuer: /CN=31F76CE2EF4D020F925E37D7A9D8E35398C7C017 Certificate serial: 37B7635E5A91191261FD8C27F0655DDC6AB2674D Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/31F76CE2EF4D020F925E37D7A9D8E35398C7C017.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ebb6890d-0d6b-4ea9-a2ef-92d34a3ae64d/0/31F76CE2EF4D020F925E37D7A9D8E35398C7C017.mft Manifest number: BC Signing time: Sun 01 Mar 2026 23:29:11 +0000 Manifest this update: Sun 01 Mar 2026 23:24:11 +0000 Manifest next update: Tue 03 Mar 2026 00:50:11 +0000 Files and hashes: 1: 326131343a373538313a3738363a3a2f34382d3438203d3e20323034383731.roa (hash: d7JuEn5B8KAwVz8SpkU4AMcAJkaWbbl+bWkksQthj/k=) 2: 31F76CE2EF4D020F925E37D7A9D8E35398C7C017.crl (hash: PjeGQXm2e6Dc2cTqMvzpwUxRtfUfHVjwTCRCSzGgOt0=) 3: 326131343a373538313a3730303a3a2f34382d3438203d3e20323034383731.roa (hash: u8e0eoyomRFMkD/JcQQfwJ+uqGsBt5QX6wzg4Fq5J9M=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ebb6890d-0d6b-4ea9-a2ef-92d34a3ae64d/0/31F76CE2EF4D020F925E37D7A9D8E35398C7C017.crl rsync://rsync.paas.rpki.ripe.net/repository/ebb6890d-0d6b-4ea9-a2ef-92d34a3ae64d/0/31F76CE2EF4D020F925E37D7A9D8E35398C7C017.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/31F76CE2EF4D020F925E37D7A9D8E35398C7C017.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Mar 2026 18:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:b7:63:5e:5a:91:19:12:61:fd:8c:27:f0:65:5d:dc:6a:b2:67:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=31F76CE2EF4D020F925E37D7A9D8E35398C7C017 Validity Not Before: Mar 1 23:24:11 2026 GMT Not After : Mar 3 00:50:11 2026 GMT Subject: CN=425E6D033FAFAE132E7AECEB7D8E358652B3A1FE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:de:8e:d3:4c:e4:72:22:56:e4:79:5b:00:f3: cd:6f:e7:1a:66:34:93:b5:44:02:28:ce:3d:ed:d0: c5:9b:2c:0b:92:ff:de:80:25:e4:1a:e0:dc:48:27: 00:07:6f:80:ca:42:05:df:87:5e:0c:36:10:2b:77: 42:80:cf:ab:fc:78:52:fd:29:b8:c7:f7:c2:19:02: 56:12:5c:f9:0a:71:86:b3:6a:36:83:d8:12:a9:98: 54:bf:d8:0e:24:5d:b4:87:e2:04:ee:07:f2:bb:0e: 99:97:b6:fd:68:40:2b:8a:b4:e8:21:32:6d:90:91: 0b:4e:af:67:ce:3c:a1:f8:cc:10:5a:6b:95:f2:44: cc:05:a3:b5:8c:5a:73:02:c2:06:52:93:f5:df:2c: de:bb:ef:ff:2f:69:33:e5:89:7f:0b:81:bc:8a:30: 4f:f4:2e:b2:d5:a0:0d:46:95:97:b4:b0:13:d5:d3: 4c:83:39:9d:a4:78:4b:4c:95:45:c1:0e:20:b5:d1: a4:d5:a6:c4:5d:01:02:19:32:0e:45:22:53:8a:3e: 32:4c:80:ac:e8:4e:05:6f:1c:40:a8:0f:7f:23:35: 93:5f:61:f0:dc:65:64:da:a3:d7:ad:e6:3a:b0:cf: 89:87:03:f4:f1:8f:05:57:e4:84:37:ff:59:f2:f3: 72:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:5E:6D:03:3F:AF:AE:13:2E:7A:EC:EB:7D:8E:35:86:52:B3:A1:FE X509v3 Authority Key Identifier: keyid:31:F7:6C:E2:EF:4D:02:0F:92:5E:37:D7:A9:D8:E3:53:98:C7:C0:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/ebb6890d-0d6b-4ea9-a2ef-92d34a3ae64d/0/31F76CE2EF4D020F925E37D7A9D8E35398C7C017.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/31F76CE2EF4D020F925E37D7A9D8E35398C7C017.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ebb6890d-0d6b-4ea9-a2ef-92d34a3ae64d/0/31F76CE2EF4D020F925E37D7A9D8E35398C7C017.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:18:41:44:15:fa:2d:b3:86:68:c1:31:89:db:b6:7b:e9:fd: 2f:6a:10:4a:bf:3e:3e:9d:68:42:3b:84:39:64:db:ae:a1:13: f7:e1:05:bb:f6:ab:8d:c6:2c:9e:24:88:c9:53:15:fa:b0:57: 41:ff:16:9d:28:bd:ae:4f:00:02:34:71:a7:29:ca:22:61:93: 87:90:a7:c3:8e:01:f7:22:10:41:2d:e4:9d:e2:d9:93:b7:b1: a8:1c:b9:00:b5:37:c6:df:1c:1c:b8:7d:98:00:ec:13:41:50: 36:57:8f:fc:41:e6:91:40:2f:09:dd:f1:3b:ef:7b:08:90:35: bb:d0:52:16:15:84:06:f2:8c:f7:c1:8f:d8:2d:0f:ca:87:73: 39:50:91:13:39:df:e2:9a:6c:1f:97:3d:b3:40:87:05:26:91: 76:42:11:92:77:ef:37:0d:4a:6c:3a:a3:57:97:dd:b2:82:dc: f1:2e:75:33:0e:41:46:3e:7c:ef:c1:91:f7:ac:0d:b9:ec:9b: 1e:3b:a7:96:70:23:c1:8f:3b:81:6c:4b:6b:af:28:3d:b6:0f: bb:fd:d9:9d:c2:82:4a:2b:d7:90:95:6e:67:4c:32:cf:fd:a1: d6:54:b1:ea:fd:84:47:a3:38:62:5a:83:40:36:bd:7e:40:84: f2:07:d1:b3 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUN7djXlqRGRJh/Ywn8GVd3GqyZ00wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzFGNzZDRTJFRjREMDIwRjkyNUUzN0Q3QTlEOEUzNTM5 OEM3QzAxNzAeFw0yNjAzMDEyMzI0MTFaFw0yNjAzMDMwMDUwMTFaMDMxMTAvBgNV BAMTKDQyNUU2RDAzM0ZBRkFFMTMyRTdBRUNFQjdEOEUzNTg2NTJCM0ExRkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC33o7TTORyIlbkeVsA881v5xpm NJO1RAIozj3t0MWbLAuS/96AJeQa4NxIJwAHb4DKQgXfh14MNhArd0KAz6v8eFL9 KbjH98IZAlYSXPkKcYazajaD2BKpmFS/2A4kXbSH4gTuB/K7DpmXtv1oQCuKtOgh Mm2QkQtOr2fOPKH4zBBaa5XyRMwFo7WMWnMCwgZSk/XfLN677/8vaTPliX8LgbyK ME/0LrLVoA1GlZe0sBPV00yDOZ2keEtMlUXBDiC10aTVpsRdAQIZMg5FIlOKPjJM gKzoTgVvHECoD38jNZNfYfDcZWTao9et5jqwz4mHA/TxjwVX5IQ3/1ny83KHAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUQl5tAz+vrhMueuzrfY41hlKzof4wHwYDVR0j BBgwFoAUMfds4u9NAg+SXjfXqdjjU5jHwBcwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZWJiNjg5MGQtMGQ2Yi00ZWE5LWEyZWYtOTJkMzRhM2Fl NjRkLzAvMzFGNzZDRTJFRjREMDIwRjkyNUUzN0Q3QTlEOEUzNTM5OEM3QzAxNy5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC8zMUY3NkNFMkVGNEQwMjBGOTI1RTM3RDdB OUQ4RTM1Mzk4QzdDMDE3LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2ViYjY4OTBkLTBkNmItNGVhOS1hMmVmLTkyZDM0YTNhZTY0ZC8wLzMxRjc2Q0Uy RUY0RDAyMEY5MjVFMzdEN0E5RDhFMzUzOThDN0MwMTcubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAaGEFE Ffots4ZowTGJ27Z76f0vahBKvz4+nWhCO4Q5ZNuuoRP34QW79quNxiyeJIjJUxX6 sFdB/xadKL2uTwACNHGnKcoiYZOHkKfDjgH3IhBBLeSd4tmTt7GoHLkAtTfG3xwc uH2YAOwTQVA2V4/8QeaRQC8J3fE773sIkDW70FIWFYQG8oz3wY/YLQ/Kh3M5UJET Od/immwflz2zQIcFJpF2QhGSd+83DUpsOqNXl92ygtzxLnUzDkFGPnzvwZH3rA25 7JseO6eWcCPBjzuBbEtrryg9tg+7/dmdwoJKK9eQlW5nTDLP/aHWVLHq/YRHozhi WoNANr1+QITyB9Gz -----END CERTIFICATE-----Generated at Mon Mar 2 03:06:44 2026 by rpki-client