$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ebb6890d-0d6b-4ea9-a2ef-92d34a3ae64d/0/31F76CE2EF4D020F925E37D7A9D8E35398C7C017.mft File: 31F76CE2EF4D020F925E37D7A9D8E35398C7C017.mft (raw, json) Hash identifier: gi385eMgbdHFSmhCkLrzrC9h/jSsIQqsJ5BbBWWnhHc= Subject key identifier: 8C:CF:6B:2C:D5:06:F3:2E:35:68:FE:E8:E0:2D:D1:18:85:8B:61:42 Authority key identifier: 31:F7:6C:E2:EF:4D:02:0F:92:5E:37:D7:A9:D8:E3:53:98:C7:C0:17 Certificate issuer: /CN=31F76CE2EF4D020F925E37D7A9D8E35398C7C017 Certificate serial: 564749FEA9BF5A70AFB17EC012F6804FF0FEE443 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/31F76CE2EF4D020F925E37D7A9D8E35398C7C017.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ebb6890d-0d6b-4ea9-a2ef-92d34a3ae64d/0/31F76CE2EF4D020F925E37D7A9D8E35398C7C017.mft Manifest number: 0F Signing time: Thu 23 Oct 2025 13:48:30 +0000 Manifest this update: Thu 23 Oct 2025 13:43:30 +0000 Manifest next update: Fri 24 Oct 2025 15:26:30 +0000 Files and hashes: 1: 326131343a373538313a3730303a3a2f34382d3438203d3e20323034383731.roa (hash: u8e0eoyomRFMkD/JcQQfwJ+uqGsBt5QX6wzg4Fq5J9M=) 2: 31F76CE2EF4D020F925E37D7A9D8E35398C7C017.crl (hash: pzswdeHCMQXhv7DSm+qI+7HpZqL8GzKTSvNmBLdZKvo=) 3: 326131343a373538313a3738363a3a2f34382d3438203d3e20323034383731.roa (hash: d7JuEn5B8KAwVz8SpkU4AMcAJkaWbbl+bWkksQthj/k=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ebb6890d-0d6b-4ea9-a2ef-92d34a3ae64d/0/31F76CE2EF4D020F925E37D7A9D8E35398C7C017.crl rsync://rsync.paas.rpki.ripe.net/repository/ebb6890d-0d6b-4ea9-a2ef-92d34a3ae64d/0/31F76CE2EF4D020F925E37D7A9D8E35398C7C017.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/31F76CE2EF4D020F925E37D7A9D8E35398C7C017.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 24 Oct 2025 15:26:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:47:49:fe:a9:bf:5a:70:af:b1:7e:c0:12:f6:80:4f:f0:fe:e4:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=31F76CE2EF4D020F925E37D7A9D8E35398C7C017 Validity Not Before: Oct 23 13:43:30 2025 GMT Not After : Oct 24 15:26:30 2025 GMT Subject: CN=8CCF6B2CD506F32E3568FEE8E02DD118858B6142 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:47:5a:f8:d5:02:5b:77:c0:20:9a:b7:d6:19: 64:9e:81:8a:00:c3:88:c5:18:01:21:c5:93:d5:80: 62:7a:a3:08:b7:2a:22:40:09:42:90:1a:be:75:4c: 42:c7:6d:75:bf:97:9c:7e:19:56:02:43:6c:e2:cb: 4e:4c:d5:dc:a4:3a:05:68:91:d7:31:52:d2:bf:97: e4:56:b6:e2:5f:ab:50:7e:6e:09:98:31:13:7f:7d: 07:4f:de:58:a0:c9:12:ae:c8:05:73:89:63:f8:c2: 79:4e:14:a7:fd:2c:c3:5d:5d:0b:75:6e:16:0a:40: 82:d9:b1:0b:58:93:bd:2e:3d:ec:ad:47:40:8d:d3: 5e:c7:4e:ed:38:9b:2a:fe:c9:66:3f:ca:6b:d8:9c: 94:fb:5f:eb:3d:cc:ae:54:72:c3:af:a6:01:b3:38: 6b:a8:75:15:a9:f8:66:1a:07:03:9c:43:23:5e:1e: 0e:54:64:fd:2b:42:45:ed:32:03:dc:df:cc:ca:7a: 39:d2:63:75:47:ab:28:9f:6a:ad:e5:c8:4a:2f:cc: 49:ca:e7:7c:37:ea:76:91:9c:f1:c6:5f:b4:ac:cb: 7f:eb:ad:ef:27:7b:6e:01:e9:44:ef:b8:ef:c6:40: 2e:3f:1a:16:b8:06:3c:97:d1:63:8c:35:4b:a9:0b: e4:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:CF:6B:2C:D5:06:F3:2E:35:68:FE:E8:E0:2D:D1:18:85:8B:61:42 X509v3 Authority Key Identifier: keyid:31:F7:6C:E2:EF:4D:02:0F:92:5E:37:D7:A9:D8:E3:53:98:C7:C0:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/ebb6890d-0d6b-4ea9-a2ef-92d34a3ae64d/0/31F76CE2EF4D020F925E37D7A9D8E35398C7C017.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/31F76CE2EF4D020F925E37D7A9D8E35398C7C017.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ebb6890d-0d6b-4ea9-a2ef-92d34a3ae64d/0/31F76CE2EF4D020F925E37D7A9D8E35398C7C017.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:6c:1b:9f:f7:dd:1a:13:47:ae:da:5f:78:fe:63:1b:f6:bc: ac:d2:67:cb:cb:1b:b2:dc:7e:d7:d6:b1:bf:0e:e5:83:59:6c: 88:6f:ca:f1:fe:16:77:35:08:51:1d:f8:49:87:0d:09:83:a3: 4f:f3:ce:9e:49:d9:c8:03:fd:ba:6d:08:09:b6:c9:42:cf:d1: 25:40:a1:5d:15:1c:1c:5d:8e:70:3f:eb:03:dc:be:46:cf:b4: ca:dd:9a:32:dc:85:02:a1:2c:65:e9:ff:6d:4a:c0:f9:a3:bb: e1:70:01:5a:9e:a8:3a:c4:ba:47:0a:04:ba:93:88:41:df:64: d3:66:52:05:06:ad:26:5d:de:d9:0f:c3:02:d7:72:e0:da:b7: e2:68:82:31:b6:43:47:52:72:35:df:30:5e:8e:2f:ec:be:37: 98:5e:93:02:e0:82:7b:d0:b2:e0:c6:f4:ba:6e:d0:a5:f4:69: 17:e6:a2:1e:e2:de:4e:50:9f:e6:f5:ea:1d:94:29:ac:87:e2: 24:b6:8d:a6:15:88:29:5f:6c:bd:27:a8:7f:2c:03:fe:46:27: f6:7b:c3:60:6e:18:77:60:41:97:64:0c:33:14:0c:24:cb:76: 22:d9:41:0c:46:bf:c0:9a:3b:ca:74:35:14:e0:31:69:ee:b4: 9e:aa:f6:87 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUVkdJ/qm/WnCvsX7AEvaAT/D+5EMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzFGNzZDRTJFRjREMDIwRjkyNUUzN0Q3QTlEOEUzNTM5 OEM3QzAxNzAeFw0yNTEwMjMxMzQzMzBaFw0yNTEwMjQxNTI2MzBaMDMxMTAvBgNV BAMTKDhDQ0Y2QjJDRDUwNkYzMkUzNTY4RkVFOEUwMkREMTE4ODU4QjYxNDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjR1r41QJbd8AgmrfWGWSegYoA w4jFGAEhxZPVgGJ6owi3KiJACUKQGr51TELHbXW/l5x+GVYCQ2ziy05M1dykOgVo kdcxUtK/l+RWtuJfq1B+bgmYMRN/fQdP3ligyRKuyAVziWP4wnlOFKf9LMNdXQt1 bhYKQILZsQtYk70uPeytR0CN017HTu04myr+yWY/ymvYnJT7X+s9zK5UcsOvpgGz OGuodRWp+GYaBwOcQyNeHg5UZP0rQkXtMgPc38zKejnSY3VHqyifaq3lyEovzEnK 53w36naRnPHGX7Ssy3/rre8ne24B6UTvuO/GQC4/Gha4BjyX0WOMNUupC+SpAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUjM9rLNUG8y41aP7o4C3RGIWLYUIwHwYDVR0j BBgwFoAUMfds4u9NAg+SXjfXqdjjU5jHwBcwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZWJiNjg5MGQtMGQ2Yi00ZWE5LWEyZWYtOTJkMzRhM2Fl NjRkLzAvMzFGNzZDRTJFRjREMDIwRjkyNUUzN0Q3QTlEOEUzNTM5OEM3QzAxNy5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC8zMUY3NkNFMkVGNEQwMjBGOTI1RTM3RDdB OUQ4RTM1Mzk4QzdDMDE3LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2ViYjY4OTBkLTBkNmItNGVhOS1hMmVmLTkyZDM0YTNhZTY0ZC8wLzMxRjc2Q0Uy RUY0RDAyMEY5MjVFMzdEN0E5RDhFMzUzOThDN0MwMTcubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQATbBuf 990aE0eu2l94/mMb9rys0mfLyxuy3H7X1rG/DuWDWWyIb8rx/hZ3NQhRHfhJhw0J g6NP886eSdnIA/26bQgJtslCz9ElQKFdFRwcXY5wP+sD3L5Gz7TK3Zoy3IUCoSxl 6f9tSsD5o7vhcAFanqg6xLpHCgS6k4hB32TTZlIFBq0mXd7ZD8MC13Lg2rfiaIIx tkNHUnI13zBeji/svjeYXpMC4IJ70LLgxvS6btCl9GkX5qIe4t5OUJ/m9eodlCms h+Ikto2mFYgpX2y9J6h/LAP+Rif2e8Ngbhh3YEGXZAwzFAwky3Yi2UEMRr/AmjvK dDUU4DFp7rSeqvaH -----END CERTIFICATE-----Generated at Fri Oct 24 04:27:00 2025 by rpki-client