$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/CF0631D33A3C9DC5C45424D55C3E7663838657A3.mft File: CF0631D33A3C9DC5C45424D55C3E7663838657A3.mft (raw, json) Hash identifier: FcatNnYuD+6/dykxgrHWSEX/kF5RuxxO+9APkGTJwao= Subject key identifier: BE:69:75:3F:C8:80:26:61:FF:3B:FF:1D:B1:0B:A2:02:92:01:9C:81 Authority key identifier: CF:06:31:D3:3A:3C:9D:C5:C4:54:24:D5:5C:3E:76:63:83:86:57:A3 Certificate issuer: /CN=cf0631d33a3c9dc5c45424d55c3e7663838657a3 Certificate serial: 5887CA027B02F2C43620538D2F4AA283861C033A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zwYx0zo8ncXEVCTVXD52Y4OGV6M.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/CF0631D33A3C9DC5C45424D55C3E7663838657A3.mft Manifest number: 01A0 Signing time: Mon 24 Aug 2026 17:20:38 +0000 Manifest this update: Mon 24 Aug 2026 17:15:38 +0000 Manifest next update: Tue 25 Aug 2026 20:25:38 +0000 Files and hashes: 1: 38392e3138352e382e302f32342d3234203d3e203630383630.roa (hash: uuMWj0BWrTugTcot2BIIjLN4CmKo0TjrBWjA0TJKmTM=) 2: 3138352e33302e3230322e302f32342d3234203d3e203630383630.roa (hash: tBh4T597HLyGCSugLkif66QABd9ufnpWRf3NI++UCNc=) 3: C972E8671DEDC43FE908B548531C969A051CD34C.cer (hash: d7NBPzoR5U51KQ6xM8aVu3af+Il1XYsfzuoeH65sh5k=) 4: 39332e3138352e3231342e302f32342d3234203d3e203630383630.roa (hash: I4ydkJ2r2j2i1g1xPyPsffo9hUpPo3RLQo6MfTdRh1Q=) 5: CF0631D33A3C9DC5C45424D55C3E7663838657A3.crl (hash: 7s72G/z/C4cL1CVmG0jm+mUkoklcYZULWDbxvDjkLrY=) 6: 3138352e33302e3230302e302f32332d3233203d3e203630383630.roa (hash: EjHevTTMahznqtckt7aLMDXLh3y0kx9bdoI4UFB/hKw=) 7: 3138352e33302e3230332e302f32342d3234203d3e203630383630.roa (hash: +hLj8/wzU4ALLxe4Xdt3WSnzJEJQWXiNiu+hY32JK2w=) 8: 3130392e37322e3132322e302f32342d3234203d3e203630383630.roa (hash: 2mjBtJiNX2GgtlTBc9elrwUynjPTbiI/Km0f5EIklUM=) 9: 38392e3138352e31322e302f32342d3234203d3e203630383630.roa (hash: KsOBm/IW9m6wYWtDKEPIq17pdU+n9YXSV9XxpyK0qLc=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/CF0631D33A3C9DC5C45424D55C3E7663838657A3.crl rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/CF0631D33A3C9DC5C45424D55C3E7663838657A3.mft rsync://rpki.ripe.net/repository/DEFAULT/zwYx0zo8ncXEVCTVXD52Y4OGV6M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 25 Aug 2026 20:25:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:87:ca:02:7b:02:f2:c4:36:20:53:8d:2f:4a:a2:83:86:1c:03:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cf0631d33a3c9dc5c45424d55c3e7663838657a3 Validity Not Before: Aug 24 17:15:38 2026 GMT Not After : Aug 25 20:25:38 2026 GMT Subject: CN=BE69753FC8802661FF3BFF1DB10BA20292019C81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:74:d7:66:bc:1a:d7:f8:a1:d3:48:1e:10:97: ee:24:e2:aa:f8:a1:83:ab:64:69:11:91:45:13:b9: b1:eb:7d:f6:7f:26:c4:31:11:62:37:cf:db:ee:b8: fa:aa:9c:6b:5e:6f:e8:99:4f:1d:b3:dd:29:d2:f1: a3:12:12:7c:4e:b6:34:16:bc:d4:4b:4c:9e:d6:61: d7:d9:cc:32:7d:1f:68:18:f9:4a:99:95:16:a6:7e: 1b:d0:f3:fd:a4:71:aa:5a:90:b3:be:d7:44:b1:69: 66:a0:88:ed:a2:45:f1:56:4a:fc:64:27:fb:55:26: 2d:93:bd:9b:c3:4d:c9:3d:b9:ed:7c:e4:6c:48:a4: 49:0c:3a:bd:8c:3a:93:fa:4f:6c:ca:ab:03:1a:23: d5:77:18:a8:72:ba:cf:7e:90:4e:57:d5:f9:f5:70: 3f:49:d9:4f:3c:35:73:b6:46:92:49:b8:d8:77:7e: 2a:05:74:48:41:f3:be:7a:db:a4:df:9f:8a:a4:96: 05:b2:d9:f9:ca:e2:48:86:e2:90:a0:4a:15:fa:bc: ae:96:6d:cd:2f:54:ee:4d:a8:7a:b2:06:76:6b:01: d1:fd:a6:6d:1e:1f:79:55:a8:ee:a4:03:51:92:d5: 85:d2:21:87:9c:31:5b:7e:c2:ac:53:5f:45:a6:1f: ae:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:69:75:3F:C8:80:26:61:FF:3B:FF:1D:B1:0B:A2:02:92:01:9C:81 X509v3 Authority Key Identifier: keyid:CF:06:31:D3:3A:3C:9D:C5:C4:54:24:D5:5C:3E:76:63:83:86:57:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/CF0631D33A3C9DC5C45424D55C3E7663838657A3.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zwYx0zo8ncXEVCTVXD52Y4OGV6M.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/CF0631D33A3C9DC5C45424D55C3E7663838657A3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:bf:c1:df:f8:73:50:3c:45:a5:35:e3:66:6a:76:68:e0:3a: 2c:0c:43:06:9d:19:a8:6e:51:6d:f8:dc:3c:e9:2b:b6:8f:f4: 8f:4a:d7:b0:8c:c7:02:0f:cd:61:7f:89:cb:dd:95:bd:4c:d4: da:ec:64:2d:0c:58:09:43:c9:6a:51:a6:25:de:10:d4:c0:09: a1:de:26:92:d0:c0:6f:83:86:b8:16:ad:46:d3:3f:e0:35:44: d3:89:3a:ed:36:60:97:cf:57:1f:39:a3:8c:21:e1:e8:e9:c5: 03:c8:e1:cf:82:4c:0e:af:74:c8:27:b5:4e:0b:89:20:7e:34: 9c:32:52:1a:2a:57:67:d5:20:a1:c2:04:c3:d9:fe:bf:f2:f1: e9:90:a7:e4:66:35:11:fa:ee:1a:3a:d0:68:07:c0:7b:25:e4: 26:ec:4c:ca:03:28:81:c4:a8:cc:ce:cc:ed:48:56:90:28:0a: 34:f1:06:67:16:eb:a1:ba:ff:6f:97:55:a2:7f:e7:86:bf:83: f8:bf:98:ef:f2:dc:82:b2:e5:97:cc:71:49:8e:84:cc:33:97: 39:b0:97:36:3e:f1:4c:24:e0:e9:9b:94:9d:ea:34:c8:8f:44: 8e:7e:7a:4f:89:b1:73:51:22:19:ec:0e:ea:d2:32:0a:9b:44: 52:2e:d0:24 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUWIfKAnsC8sQ2IFONL0qig4YcAzowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoY2YwNjMxZDMzYTNjOWRjNWM0NTQyNGQ1NWMzZTc2NjM4 Mzg2NTdhMzAeFw0yNjA4MjQxNzE1MzhaFw0yNjA4MjUyMDI1MzhaMDMxMTAvBgNV BAMTKEJFNjk3NTNGQzg4MDI2NjFGRjNCRkYxREIxMEJBMjAyOTIwMTlDODEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpdNdmvBrX+KHTSB4Ql+4k4qr4 oYOrZGkRkUUTubHrffZ/JsQxEWI3z9vuuPqqnGteb+iZTx2z3SnS8aMSEnxOtjQW vNRLTJ7WYdfZzDJ9H2gY+UqZlRamfhvQ8/2kcapakLO+10SxaWagiO2iRfFWSvxk J/tVJi2TvZvDTck9ue185GxIpEkMOr2MOpP6T2zKqwMaI9V3GKhyus9+kE5X1fn1 cD9J2U88NXO2RpJJuNh3fioFdEhB875626Tfn4qklgWy2fnK4kiG4pCgShX6vK6W bc0vVO5NqHqyBnZrAdH9pm0eH3lVqO6kA1GS1YXSIYecMVt+wqxTX0WmH66hAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUvml1P8iAJmH/O/8dsQuiApIBnIEwHwYDVR0j BBgwFoAUzwYx0zo8ncXEVCTVXD52Y4OGV6MwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNjE3MDhhNmItNmMzYS00MGEwLWEzMDItNTk1ZWNjMTc4 NDhjLzIvQ0YwNjMxRDMzQTNDOURDNUM0NTQyNEQ1NUMzRTc2NjM4Mzg2NTdBMy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3p3WXgwem84bmNYRVZDVFZYRDUyWTRP R1Y2TS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS82MTcwOGE2Yi02 YzNhLTQwYTAtYTMwMi01OTVlY2MxNzg0OGMvMi9DRjA2MzFEMzNBM0M5REM1QzQ1 NDI0RDU1QzNFNzY2MzgzODY1N0EzLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY7/B3/hzUDxFpTXjZmp2 aOA6LAxDBp0ZqG5RbfjcPOkrto/0j0rXsIzHAg/NYX+Jy92VvUzU2uxkLQxYCUPJ alGmJd4Q1MAJod4mktDAb4OGuBatRtM/4DVE04k67TZgl89XHzmjjCHh6OnFA8jh z4JMDq90yCe1TguJIH40nDJSGipXZ9UgocIEw9n+v/Lx6ZCn5GY1EfruGjrQaAfA eyXkJuxMygMogcSozM7M7UhWkCgKNPEGZxbrobr/b5dVon/nhr+D+L+Y7/LcgrLl l8xxSY6EzDOXObCXNj7xTCTg6ZuUneo0yI9Ejn56T4mxc1EiGewO6tIyCptEUi7Q JA== -----END CERTIFICATE-----Generated at Tue Aug 25 05:35:50 2026 by rpki-client