$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/CF0631D33A3C9DC5C45424D55C3E7663838657A3.mft File: CF0631D33A3C9DC5C45424D55C3E7663838657A3.mft (raw, json) Hash identifier: ZcBXKbqe+m/PTgiexbbEf5mXzNaRHw40LyNCyEV+eYk= Subject key identifier: 1F:53:F1:64:A7:B6:0C:FF:18:4A:B6:FE:43:A2:FF:58:C0:BD:37:42 Authority key identifier: CF:06:31:D3:3A:3C:9D:C5:C4:54:24:D5:5C:3E:76:63:83:86:57:A3 Certificate issuer: /CN=cf0631d33a3c9dc5c45424d55c3e7663838657a3 Certificate serial: 2BE126D37EFDBD0F8112073D3E5D9897DD3D6E41 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zwYx0zo8ncXEVCTVXD52Y4OGV6M.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/CF0631D33A3C9DC5C45424D55C3E7663838657A3.mft Manifest number: 0127 Signing time: Mon 25 May 2026 21:02:54 +0000 Manifest this update: Mon 25 May 2026 20:57:54 +0000 Manifest next update: Wed 27 May 2026 00:30:54 +0000 Files and hashes: 1: 3138352e33302e3230332e302f32342d3234203d3e203630383630.roa (hash: +hLj8/wzU4ALLxe4Xdt3WSnzJEJQWXiNiu+hY32JK2w=) 2: C972E8671DEDC43FE908B548531C969A051CD34C.cer (hash: d7NBPzoR5U51KQ6xM8aVu3af+Il1XYsfzuoeH65sh5k=) 3: 38392e3138352e31322e302f32342d3234203d3e203630383630.roa (hash: KsOBm/IW9m6wYWtDKEPIq17pdU+n9YXSV9XxpyK0qLc=) 4: 39332e3138352e3231342e302f32342d3234203d3e203630383630.roa (hash: I4ydkJ2r2j2i1g1xPyPsffo9hUpPo3RLQo6MfTdRh1Q=) 5: 3130392e37322e3132322e302f32342d3234203d3e203630383630.roa (hash: 2mjBtJiNX2GgtlTBc9elrwUynjPTbiI/Km0f5EIklUM=) 6: 38392e3138352e382e302f32342d3234203d3e203630383630.roa (hash: uuMWj0BWrTugTcot2BIIjLN4CmKo0TjrBWjA0TJKmTM=) 7: CF0631D33A3C9DC5C45424D55C3E7663838657A3.crl (hash: fS4VsQ5pECKKhLs+3PgRf28FVeHFGDAmEEQ9zEPRUa4=) 8: 3138352e33302e3230302e302f32332d3233203d3e203630383630.roa (hash: EjHevTTMahznqtckt7aLMDXLh3y0kx9bdoI4UFB/hKw=) 9: 3138352e33302e3230322e302f32342d3234203d3e203630383630.roa (hash: tBh4T597HLyGCSugLkif66QABd9ufnpWRf3NI++UCNc=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/CF0631D33A3C9DC5C45424D55C3E7663838657A3.crl rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/CF0631D33A3C9DC5C45424D55C3E7663838657A3.mft rsync://rpki.ripe.net/repository/DEFAULT/zwYx0zo8ncXEVCTVXD52Y4OGV6M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 26 May 2026 21:16:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:e1:26:d3:7e:fd:bd:0f:81:12:07:3d:3e:5d:98:97:dd:3d:6e:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cf0631d33a3c9dc5c45424d55c3e7663838657a3 Validity Not Before: May 25 20:57:54 2026 GMT Not After : May 27 00:30:54 2026 GMT Subject: CN=1F53F164A7B60CFF184AB6FE43A2FF58C0BD3742 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:42:e3:5c:30:fa:63:cf:f8:dc:2a:bb:da:3e: 29:98:90:a3:c2:3b:34:f7:6d:3b:7d:5e:4b:ae:da: 64:97:27:1f:91:8c:25:2b:77:fc:a9:75:5b:fe:fb: fe:26:8f:cd:bd:f4:87:37:8e:32:bc:f4:ca:b2:dd: 6c:b2:6c:b6:b6:8b:54:92:93:c2:35:58:0c:f8:68: 58:11:5f:30:af:e0:2e:90:1d:7e:15:82:6a:e3:28: 0d:77:af:85:f7:ed:23:71:1c:a5:1c:b5:f1:fb:c9: 03:28:df:68:2a:5b:d1:99:ec:d3:3a:fe:87:96:e0: ed:69:f9:44:01:0f:1f:66:3a:ce:0f:56:f0:91:77: fa:3e:c6:0b:24:b9:cd:b8:bb:e9:b7:2b:1e:f7:93: 8b:fc:39:9e:2d:77:ec:16:be:11:3b:41:2a:b2:26: 6e:5f:c6:d6:1e:b0:53:ed:ae:4b:b8:22:9e:88:57: cc:0e:89:a8:fe:44:03:e1:86:d2:96:b3:ef:ba:1e: cb:0d:df:0c:57:da:f1:c2:86:c3:73:28:88:1d:1c: 03:88:24:b5:9c:db:20:c7:67:39:5d:c7:2e:57:0a: bd:fc:db:b5:7e:d8:3b:47:80:fb:06:16:64:de:6f: 04:20:fd:b1:2f:46:88:59:1b:90:25:59:9c:c4:fc: 4b:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:53:F1:64:A7:B6:0C:FF:18:4A:B6:FE:43:A2:FF:58:C0:BD:37:42 X509v3 Authority Key Identifier: keyid:CF:06:31:D3:3A:3C:9D:C5:C4:54:24:D5:5C:3E:76:63:83:86:57:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/CF0631D33A3C9DC5C45424D55C3E7663838657A3.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zwYx0zo8ncXEVCTVXD52Y4OGV6M.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/CF0631D33A3C9DC5C45424D55C3E7663838657A3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:05:b8:a6:40:40:25:e4:e4:10:46:29:3f:b1:b4:96:4c:6b: d5:ff:10:fa:08:94:4e:3f:94:a7:99:23:18:82:93:ba:a1:1e: 83:72:5f:8a:59:03:c9:36:f5:ac:e4:e1:10:f5:2c:2a:18:7d: 96:71:07:34:53:03:16:c8:cd:54:0d:79:5a:44:4b:e5:a1:20: ca:c7:15:5e:ad:1d:13:a0:15:36:d5:a3:9e:17:90:b0:52:58: 78:ef:97:d8:97:da:eb:ff:ae:c4:2e:bc:b6:2e:e1:31:2d:c8: 1c:b4:b8:37:49:36:39:a5:46:17:3b:2e:62:ff:42:20:c0:03: 71:09:3a:9a:cb:82:28:29:80:a2:4e:8e:0c:33:9d:2b:d7:98: a5:be:e7:86:58:08:41:b6:d2:78:52:8f:98:dc:99:f2:9c:31: c6:7f:a9:d0:cb:cd:16:f8:6c:59:da:72:fa:7a:5a:72:77:5a: 1c:60:c0:a7:2c:94:93:1b:a4:9d:13:fc:81:d2:67:71:f0:91: a6:64:29:58:2a:a2:7d:05:46:c2:45:2e:8a:24:fd:a5:d6:06: 2a:ed:72:4d:47:a7:ba:bf:bf:e5:4a:dd:40:a5:39:70:71:c0: 54:a8:f4:e9:e9:3a:b3:b4:6c:c7:5d:c9:aa:5b:94:55:20:89: 69:48:93:c8 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUK+Em0379vQ+BEgc9Pl2Yl909bkEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoY2YwNjMxZDMzYTNjOWRjNWM0NTQyNGQ1NWMzZTc2NjM4 Mzg2NTdhMzAeFw0yNjA1MjUyMDU3NTRaFw0yNjA1MjcwMDMwNTRaMDMxMTAvBgNV BAMTKDFGNTNGMTY0QTdCNjBDRkYxODRBQjZGRTQzQTJGRjU4QzBCRDM3NDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8QuNcMPpjz/jcKrvaPimYkKPC OzT3bTt9Xkuu2mSXJx+RjCUrd/ypdVv++/4mj8299Ic3jjK89Mqy3WyybLa2i1SS k8I1WAz4aFgRXzCv4C6QHX4VgmrjKA13r4X37SNxHKUctfH7yQMo32gqW9GZ7NM6 /oeW4O1p+UQBDx9mOs4PVvCRd/o+xgskuc24u+m3Kx73k4v8OZ4td+wWvhE7QSqy Jm5fxtYesFPtrku4Ip6IV8wOiaj+RAPhhtKWs++6HssN3wxX2vHChsNzKIgdHAOI JLWc2yDHZzldxy5XCr3827V+2DtHgPsGFmTebwQg/bEvRohZG5AlWZzE/EsxAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUH1PxZKe2DP8YSrb+Q6L/WMC9N0IwHwYDVR0j BBgwFoAUzwYx0zo8ncXEVCTVXD52Y4OGV6MwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNjE3MDhhNmItNmMzYS00MGEwLWEzMDItNTk1ZWNjMTc4 NDhjLzIvQ0YwNjMxRDMzQTNDOURDNUM0NTQyNEQ1NUMzRTc2NjM4Mzg2NTdBMy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3p3WXgwem84bmNYRVZDVFZYRDUyWTRP R1Y2TS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS82MTcwOGE2Yi02 YzNhLTQwYTAtYTMwMi01OTVlY2MxNzg0OGMvMi9DRjA2MzFEMzNBM0M5REM1QzQ1 NDI0RDU1QzNFNzY2MzgzODY1N0EzLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiAW4pkBAJeTkEEYpP7G0 lkxr1f8Q+giUTj+Up5kjGIKTuqEeg3JfilkDyTb1rOThEPUsKhh9lnEHNFMDFsjN VA15WkRL5aEgyscVXq0dE6AVNtWjnheQsFJYeO+X2Jfa6/+uxC68ti7hMS3IHLS4 N0k2OaVGFzsuYv9CIMADcQk6msuCKCmAok6ODDOdK9eYpb7nhlgIQbbSeFKPmNyZ 8pwxxn+p0MvNFvhsWdpy+npacndaHGDApyyUkxuknRP8gdJncfCRpmQpWCqifQVG wkUuiiT9pdYGKu1yTUenur+/5UrdQKU5cHHAVKj06ek6s7Rsx13JqluUVSCJaUiT yA== -----END CERTIFICATE-----Generated at Tue May 26 04:50:38 2026 by rpki-client