$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/CF0631D33A3C9DC5C45424D55C3E7663838657A3.mft File: CF0631D33A3C9DC5C45424D55C3E7663838657A3.mft (raw, json) Hash identifier: saSdN7h8be8sI0WolMurlblmO1/QYbbodh5Lem6+KbA= Subject key identifier: 1E:11:82:29:74:68:6D:7E:3F:78:C1:42:5B:B3:D2:38:09:E0:12:0C Authority key identifier: CF:06:31:D3:3A:3C:9D:C5:C4:54:24:D5:5C:3E:76:63:83:86:57:A3 Certificate issuer: /CN=cf0631d33a3c9dc5c45424d55c3e7663838657a3 Certificate serial: 3CCDED77B992BACB84B762889CC3AB50135AE414 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zwYx0zo8ncXEVCTVXD52Y4OGV6M.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/CF0631D33A3C9DC5C45424D55C3E7663838657A3.mft Manifest number: 0163 Signing time: Thu 09 Jul 2026 22:14:22 +0000 Manifest this update: Thu 09 Jul 2026 22:09:22 +0000 Manifest next update: Sat 11 Jul 2026 02:13:22 +0000 Files and hashes: 1: 3138352e33302e3230332e302f32342d3234203d3e203630383630.roa (hash: +hLj8/wzU4ALLxe4Xdt3WSnzJEJQWXiNiu+hY32JK2w=) 2: CF0631D33A3C9DC5C45424D55C3E7663838657A3.crl (hash: wFCtt7FabVpj6ljuQ7Z2e89Ozadm07fQpDo6EOY/Z8Q=) 3: 38392e3138352e31322e302f32342d3234203d3e203630383630.roa (hash: KsOBm/IW9m6wYWtDKEPIq17pdU+n9YXSV9XxpyK0qLc=) 4: 38392e3138352e382e302f32342d3234203d3e203630383630.roa (hash: uuMWj0BWrTugTcot2BIIjLN4CmKo0TjrBWjA0TJKmTM=) 5: 3138352e33302e3230322e302f32342d3234203d3e203630383630.roa (hash: tBh4T597HLyGCSugLkif66QABd9ufnpWRf3NI++UCNc=) 6: C972E8671DEDC43FE908B548531C969A051CD34C.cer (hash: d7NBPzoR5U51KQ6xM8aVu3af+Il1XYsfzuoeH65sh5k=) 7: 39332e3138352e3231342e302f32342d3234203d3e203630383630.roa (hash: I4ydkJ2r2j2i1g1xPyPsffo9hUpPo3RLQo6MfTdRh1Q=) 8: 3130392e37322e3132322e302f32342d3234203d3e203630383630.roa (hash: 2mjBtJiNX2GgtlTBc9elrwUynjPTbiI/Km0f5EIklUM=) 9: 3138352e33302e3230302e302f32332d3233203d3e203630383630.roa (hash: EjHevTTMahznqtckt7aLMDXLh3y0kx9bdoI4UFB/hKw=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/CF0631D33A3C9DC5C45424D55C3E7663838657A3.crl rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/CF0631D33A3C9DC5C45424D55C3E7663838657A3.mft rsync://rpki.ripe.net/repository/DEFAULT/zwYx0zo8ncXEVCTVXD52Y4OGV6M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 11 Jul 2026 02:13:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:cd:ed:77:b9:92:ba:cb:84:b7:62:88:9c:c3:ab:50:13:5a:e4:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cf0631d33a3c9dc5c45424d55c3e7663838657a3 Validity Not Before: Jul 9 22:09:22 2026 GMT Not After : Jul 11 02:13:22 2026 GMT Subject: CN=1E11822974686D7E3F78C1425BB3D23809E0120C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:07:54:1c:a8:05:9e:3e:53:22:24:9c:52:aa: 73:76:9c:d2:27:45:d4:48:87:93:92:d3:d8:41:91: e8:84:cd:15:75:48:4d:5d:32:ca:27:67:24:04:c4: ed:e5:14:71:fa:81:42:e0:85:21:c8:79:e5:ae:b6: 7b:48:19:3c:4e:61:56:2f:5d:0d:42:9e:df:b0:dd: cc:aa:2a:42:cb:05:e6:9d:1a:10:33:d1:a1:92:fd: 42:37:1c:c6:64:e9:1e:d6:86:bf:b7:68:2b:07:9e: be:d3:7f:30:c7:62:d8:bf:df:b4:f7:a0:29:77:64: 8a:ce:cf:76:56:b1:55:07:1c:63:7d:be:5e:19:a7: 79:08:cc:c1:18:0a:32:3e:15:2c:57:ef:5b:ef:86: 25:e2:a1:9f:6b:53:85:d5:de:17:64:64:08:ec:07: 43:0a:3f:f1:e8:c0:07:3f:9f:59:b1:4d:38:69:bc: 51:9e:0f:cb:10:3b:3a:33:13:9b:7c:4e:e9:0c:14: 35:91:68:49:23:ac:e1:72:bf:ee:6f:17:62:9b:8c: 50:71:b6:1c:4d:84:60:49:81:79:3d:10:6e:91:0c: e4:95:13:4e:17:79:d9:c7:82:f7:2a:86:28:eb:d6: bb:1b:7c:76:ce:54:da:11:f8:e4:7a:a4:40:6b:8d: 03:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:11:82:29:74:68:6D:7E:3F:78:C1:42:5B:B3:D2:38:09:E0:12:0C X509v3 Authority Key Identifier: keyid:CF:06:31:D3:3A:3C:9D:C5:C4:54:24:D5:5C:3E:76:63:83:86:57:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/CF0631D33A3C9DC5C45424D55C3E7663838657A3.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zwYx0zo8ncXEVCTVXD52Y4OGV6M.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/CF0631D33A3C9DC5C45424D55C3E7663838657A3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:a6:14:d7:3f:be:63:f0:48:89:1e:d6:58:a7:1c:cb:31:63: d3:86:f2:1d:26:15:37:91:10:83:21:8b:57:67:6f:15:65:0c: 63:b2:ad:02:4c:bc:12:1e:65:f1:8f:04:0c:1a:44:e7:56:42: 88:5e:32:19:15:86:ba:5a:5d:58:c5:c9:51:d7:12:51:c6:0a: af:4a:95:4f:fd:6b:6a:fa:f6:7a:d0:50:33:1e:dd:42:aa:52: f0:96:85:f5:88:1f:6f:0a:4d:88:e6:8a:4b:fa:f0:2b:f8:a5: a8:fb:58:20:13:8d:a4:f4:03:53:25:b0:1b:ce:25:93:52:17: 4f:9c:dc:48:23:a8:c6:d0:38:83:00:16:b6:28:b2:78:1b:65: d1:ed:25:a0:ad:18:bd:c0:71:7b:91:c6:88:e3:f4:6d:62:01: d7:c8:7f:da:f6:6d:78:c5:b0:aa:82:51:09:40:2b:90:10:ba: 1f:ff:b2:5b:53:9c:a4:5a:33:fb:e7:1d:7a:52:4d:ed:e0:0f: 42:5f:06:81:f2:1c:ed:32:d9:fe:ec:49:e2:72:78:e9:ef:18: 6f:a2:b8:ca:45:09:ad:c5:a4:77:ca:a5:08:d0:06:39:8b:b2: 46:b7:5a:54:45:88:2a:13:8a:d3:38:55:82:72:0a:ec:cc:04: 2f:e1:a4:02 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUPM3td7mSusuEt2KInMOrUBNa5BQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoY2YwNjMxZDMzYTNjOWRjNWM0NTQyNGQ1NWMzZTc2NjM4 Mzg2NTdhMzAeFw0yNjA3MDkyMjA5MjJaFw0yNjA3MTEwMjEzMjJaMDMxMTAvBgNV BAMTKDFFMTE4MjI5NzQ2ODZEN0UzRjc4QzE0MjVCQjNEMjM4MDlFMDEyMEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgB1QcqAWePlMiJJxSqnN2nNIn RdRIh5OS09hBkeiEzRV1SE1dMsonZyQExO3lFHH6gULghSHIeeWutntIGTxOYVYv XQ1Cnt+w3cyqKkLLBeadGhAz0aGS/UI3HMZk6R7Whr+3aCsHnr7TfzDHYti/37T3 oCl3ZIrOz3ZWsVUHHGN9vl4Zp3kIzMEYCjI+FSxX71vvhiXioZ9rU4XV3hdkZAjs B0MKP/HowAc/n1mxTThpvFGeD8sQOzozE5t8TukMFDWRaEkjrOFyv+5vF2KbjFBx thxNhGBJgXk9EG6RDOSVE04XednHgvcqhijr1rsbfHbOVNoR+OR6pEBrjQPjAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUHhGCKXRobX4/eMFCW7PSOAngEgwwHwYDVR0j BBgwFoAUzwYx0zo8ncXEVCTVXD52Y4OGV6MwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNjE3MDhhNmItNmMzYS00MGEwLWEzMDItNTk1ZWNjMTc4 NDhjLzIvQ0YwNjMxRDMzQTNDOURDNUM0NTQyNEQ1NUMzRTc2NjM4Mzg2NTdBMy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3p3WXgwem84bmNYRVZDVFZYRDUyWTRP R1Y2TS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS82MTcwOGE2Yi02 YzNhLTQwYTAtYTMwMi01OTVlY2MxNzg0OGMvMi9DRjA2MzFEMzNBM0M5REM1QzQ1 NDI0RDU1QzNFNzY2MzgzODY1N0EzLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcKYU1z++Y/BIiR7WWKcc yzFj04byHSYVN5EQgyGLV2dvFWUMY7KtAky8Eh5l8Y8EDBpE51ZCiF4yGRWGulpd WMXJUdcSUcYKr0qVT/1ravr2etBQMx7dQqpS8JaF9YgfbwpNiOaKS/rwK/ilqPtY IBONpPQDUyWwG84lk1IXT5zcSCOoxtA4gwAWtiiyeBtl0e0loK0YvcBxe5HGiOP0 bWIB18h/2vZteMWwqoJRCUArkBC6H/+yW1OcpFoz++cdelJN7eAPQl8GgfIc7TLZ /uxJ4nJ46e8Yb6K4ykUJrcWkd8qlCNAGOYuyRrdaVEWIKhOK0zhVgnIK7MwEL+Gk Ag== -----END CERTIFICATE-----Generated at Fri Jul 10 12:49:08 2026 by rpki-client