$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/CF0631D33A3C9DC5C45424D55C3E7663838657A3.mft File: CF0631D33A3C9DC5C45424D55C3E7663838657A3.mft (raw, json) Hash identifier: 3o9/DZY/5wRnD/GcI4kRwntvmlDVZYIoG91muVKCOX4= Subject key identifier: F8:29:73:7D:0C:65:3C:A1:10:C2:75:98:EA:9C:99:D4:22:EE:87:41 Authority key identifier: CF:06:31:D3:3A:3C:9D:C5:C4:54:24:D5:5C:3E:76:63:83:86:57:A3 Certificate issuer: /CN=cf0631d33a3c9dc5c45424d55c3e7663838657a3 Certificate serial: 54460D560AA4143C5BFE5E32D7B6FBA9EF680022 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zwYx0zo8ncXEVCTVXD52Y4OGV6M.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/CF0631D33A3C9DC5C45424D55C3E7663838657A3.mft Manifest number: 01E1 Signing time: Mon 12 Oct 2026 06:48:33 +0000 Manifest this update: Mon 12 Oct 2026 06:43:33 +0000 Manifest next update: Tue 13 Oct 2026 08:25:33 +0000 Files and hashes: 1: C972E8671DEDC43FE908B548531C969A051CD34C.cer (hash: d7NBPzoR5U51KQ6xM8aVu3af+Il1XYsfzuoeH65sh5k=) 2: 3138352e33302e3230322e302f32342d3234203d3e203630383630.roa (hash: tBh4T597HLyGCSugLkif66QABd9ufnpWRf3NI++UCNc=) 3: 3130392e37322e3132322e302f32342d3234203d3e203630383630.roa (hash: 2mjBtJiNX2GgtlTBc9elrwUynjPTbiI/Km0f5EIklUM=) 4: 38392e3138352e31322e302f32342d3234203d3e203630383630.roa (hash: KsOBm/IW9m6wYWtDKEPIq17pdU+n9YXSV9XxpyK0qLc=) 5: 38392e3138352e382e302f32342d3234203d3e203630383630.roa (hash: uuMWj0BWrTugTcot2BIIjLN4CmKo0TjrBWjA0TJKmTM=) 6: 3138352e33302e3230332e302f32342d3234203d3e203630383630.roa (hash: +hLj8/wzU4ALLxe4Xdt3WSnzJEJQWXiNiu+hY32JK2w=) 7: 3138352e33302e3230302e302f32332d3233203d3e203630383630.roa (hash: EjHevTTMahznqtckt7aLMDXLh3y0kx9bdoI4UFB/hKw=) 8: CF0631D33A3C9DC5C45424D55C3E7663838657A3.crl (hash: IUgcNoYHpE7wokApQW2bT+TdT+6KLEp9XDUs9aQ/5AI=) 9: 39332e3138352e3231342e302f32342d3234203d3e203630383630.roa (hash: I4ydkJ2r2j2i1g1xPyPsffo9hUpPo3RLQo6MfTdRh1Q=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/CF0631D33A3C9DC5C45424D55C3E7663838657A3.crl rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/CF0631D33A3C9DC5C45424D55C3E7663838657A3.mft rsync://rpki.ripe.net/repository/DEFAULT/zwYx0zo8ncXEVCTVXD52Y4OGV6M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 13 Oct 2026 08:25:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:46:0d:56:0a:a4:14:3c:5b:fe:5e:32:d7:b6:fb:a9:ef:68:00:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cf0631d33a3c9dc5c45424d55c3e7663838657a3 Validity Not Before: Oct 12 06:43:33 2026 GMT Not After : Oct 13 08:25:33 2026 GMT Subject: CN=F829737D0C653CA110C27598EA9C99D422EE8741 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:ce:4a:47:2f:11:ae:59:07:21:4b:47:3b:80: fd:1a:03:ca:e9:21:ee:cb:5b:0a:47:2c:4e:e2:8b: 10:66:49:a6:c7:a1:c2:74:92:ee:6e:09:f7:9c:77: e6:f5:e7:1a:d8:36:03:0c:b1:80:3a:55:3b:dc:28: 3c:d4:b0:3c:4b:ad:2a:ed:0a:ef:a0:96:0c:d1:3c: 07:8d:b0:fe:74:92:b2:24:eb:8b:9a:e3:56:c1:4c: 84:03:3c:86:d6:37:63:9e:c9:54:fb:ce:4f:dd:41: cf:40:3b:4f:d6:39:82:9d:ec:0c:7e:aa:ea:2d:f9: 07:e0:df:5a:a3:ff:91:13:f8:10:97:8a:3e:7f:b5: b4:80:99:aa:84:d1:eb:aa:5f:c2:b1:6f:55:19:60: 33:60:2b:fc:dc:53:7a:40:45:f2:c7:a6:9d:c3:71: c8:0d:25:d0:56:1a:43:32:ac:84:cb:d0:48:7c:ea: 4a:46:08:0e:1a:c6:36:9e:47:df:46:31:4e:b9:25: 2e:91:29:73:77:be:5b:fd:fe:d8:c2:a6:35:03:b8: 51:9c:bf:e7:92:d9:46:cb:9f:38:91:06:47:4c:d0: 4d:1e:2a:db:1c:68:26:94:f4:bb:a3:a4:e3:93:15: e9:29:4d:9c:3b:02:15:fd:f1:60:01:32:1d:ed:94: 67:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:29:73:7D:0C:65:3C:A1:10:C2:75:98:EA:9C:99:D4:22:EE:87:41 X509v3 Authority Key Identifier: keyid:CF:06:31:D3:3A:3C:9D:C5:C4:54:24:D5:5C:3E:76:63:83:86:57:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/CF0631D33A3C9DC5C45424D55C3E7663838657A3.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zwYx0zo8ncXEVCTVXD52Y4OGV6M.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/CF0631D33A3C9DC5C45424D55C3E7663838657A3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bb:fe:f4:d0:1d:30:c3:3c:74:18:44:11:d1:3b:00:ec:38:bf: e4:85:e8:8f:d4:e1:2e:57:39:30:e8:f8:38:d2:40:08:b5:5b: d5:ad:09:e1:f7:58:0b:b8:fc:ab:c2:ad:2c:54:12:9b:2c:c8: e7:0b:3f:c8:3d:80:ff:a5:7f:3d:57:74:8b:a6:a8:46:80:63: 8e:8c:48:dd:92:c2:b8:b4:c0:e7:36:e8:c7:f8:28:3c:38:a5: a5:49:2d:47:44:94:f9:57:03:71:c0:76:a3:12:6c:52:5e:cc: 3c:79:5c:b0:1f:a6:9b:50:1e:7d:e3:b7:46:ac:6f:0a:d8:da: 6c:94:c6:8d:46:58:9d:b9:28:b5:e6:37:ce:0b:9d:1f:86:2e: 5f:8b:32:98:2e:28:1a:dc:82:92:af:05:0d:1f:dd:bb:65:d8: aa:8f:0a:a7:a6:8c:c3:bb:30:fd:38:75:4c:b9:2d:9c:c8:0e: 72:bd:1d:18:21:f8:4d:96:29:ad:e6:66:bc:6f:07:00:e9:96: 43:32:d1:32:a2:9e:0d:78:e1:14:6d:d2:dc:8a:80:a8:8f:64: 6d:54:6a:c2:df:00:c2:74:c0:bf:ea:77:49:70:4b:04:76:f0: 44:0f:33:ed:24:94:10:7e:59:83:bd:91:f1:8d:53:2e:6b:da: d2:89:0a:9a -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUVEYNVgqkFDxb/l4y17b7qe9oACIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoY2YwNjMxZDMzYTNjOWRjNWM0NTQyNGQ1NWMzZTc2NjM4 Mzg2NTdhMzAeFw0yNjEwMTIwNjQzMzNaFw0yNjEwMTMwODI1MzNaMDMxMTAvBgNV BAMTKEY4Mjk3MzdEMEM2NTNDQTExMEMyNzU5OEVBOUM5OUQ0MjJFRTg3NDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/zkpHLxGuWQchS0c7gP0aA8rp Ie7LWwpHLE7iixBmSabHocJ0ku5uCfecd+b15xrYNgMMsYA6VTvcKDzUsDxLrSrt Cu+glgzRPAeNsP50krIk64ua41bBTIQDPIbWN2OeyVT7zk/dQc9AO0/WOYKd7Ax+ quot+Qfg31qj/5ET+BCXij5/tbSAmaqE0euqX8Kxb1UZYDNgK/zcU3pARfLHpp3D ccgNJdBWGkMyrITL0Eh86kpGCA4axjaeR99GMU65JS6RKXN3vlv9/tjCpjUDuFGc v+eS2UbLnziRBkdM0E0eKtscaCaU9LujpOOTFekpTZw7AhX98WABMh3tlGc9AgMB AAGjggJHMIICQzAdBgNVHQ4EFgQU+ClzfQxlPKEQwnWY6pyZ1CLuh0EwHwYDVR0j BBgwFoAUzwYx0zo8ncXEVCTVXD52Y4OGV6MwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNjE3MDhhNmItNmMzYS00MGEwLWEzMDItNTk1ZWNjMTc4 NDhjLzIvQ0YwNjMxRDMzQTNDOURDNUM0NTQyNEQ1NUMzRTc2NjM4Mzg2NTdBMy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3p3WXgwem84bmNYRVZDVFZYRDUyWTRP R1Y2TS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS82MTcwOGE2Yi02 YzNhLTQwYTAtYTMwMi01OTVlY2MxNzg0OGMvMi9DRjA2MzFEMzNBM0M5REM1QzQ1 NDI0RDU1QzNFNzY2MzgzODY1N0EzLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAu/700B0wwzx0GEQR0TsA 7Di/5IXoj9ThLlc5MOj4ONJACLVb1a0J4fdYC7j8q8KtLFQSmyzI5ws/yD2A/6V/ PVd0i6aoRoBjjoxI3ZLCuLTA5zbox/goPDilpUktR0SU+VcDccB2oxJsUl7MPHlc sB+mm1AefeO3RqxvCtjabJTGjUZYnbkoteY3zgudH4YuX4symC4oGtyCkq8FDR/d u2XYqo8Kp6aMw7sw/Th1TLktnMgOcr0dGCH4TZYpreZmvG8HAOmWQzLRMqKeDXjh FG3S3IqAqI9kbVRqwt8AwnTAv+p3SXBLBHbwRA8z7SSUEH5Zg72R8Y1TLmva0okK mg== -----END CERTIFICATE-----Generated at Mon Oct 12 19:08:30 2026 by rpki-client