$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ebb6890d-0d6b-4ea9-a2ef-92d34a3ae64d/0/31F76CE2EF4D020F925E37D7A9D8E35398C7C017.mft File: 31F76CE2EF4D020F925E37D7A9D8E35398C7C017.mft (raw, json) Hash identifier: 6nw7RHyR0MbyXh+TL7M1+zh9oVyQ/eC6OTZA7HzDj0A= Subject key identifier: 47:68:66:21:B7:EC:9E:CF:79:86:6F:61:E7:A5:DD:C1:62:B3:2D:1E Authority key identifier: 31:F7:6C:E2:EF:4D:02:0F:92:5E:37:D7:A9:D8:E3:53:98:C7:C0:17 Certificate issuer: /CN=31F76CE2EF4D020F925E37D7A9D8E35398C7C017 Certificate serial: 3AAA2CEF6FA0BD78EDD27A7A38FD9834B5BA4518 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/31F76CE2EF4D020F925E37D7A9D8E35398C7C017.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ebb6890d-0d6b-4ea9-a2ef-92d34a3ae64d/0/31F76CE2EF4D020F925E37D7A9D8E35398C7C017.mft Manifest number: 013C Signing time: Fri 05 Jun 2026 17:11:40 +0000 Manifest this update: Fri 05 Jun 2026 17:06:40 +0000 Manifest next update: Sat 06 Jun 2026 19:35:40 +0000 Files and hashes: 1: 31F76CE2EF4D020F925E37D7A9D8E35398C7C017.crl (hash: IEyIQElnXzraZ+MKNsIVqz4HWeZ38FRUpbv2vRmu2WE=) 2: 326131343a373538313a3730303a3a2f34382d3438203d3e20323034383731.roa (hash: u8e0eoyomRFMkD/JcQQfwJ+uqGsBt5QX6wzg4Fq5J9M=) 3: 326131343a373538313a3738363a3a2f34382d3438203d3e20323034383731.roa (hash: d7JuEn5B8KAwVz8SpkU4AMcAJkaWbbl+bWkksQthj/k=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ebb6890d-0d6b-4ea9-a2ef-92d34a3ae64d/0/31F76CE2EF4D020F925E37D7A9D8E35398C7C017.crl rsync://rsync.paas.rpki.ripe.net/repository/ebb6890d-0d6b-4ea9-a2ef-92d34a3ae64d/0/31F76CE2EF4D020F925E37D7A9D8E35398C7C017.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/31F76CE2EF4D020F925E37D7A9D8E35398C7C017.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Jun 2026 19:00:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:aa:2c:ef:6f:a0:bd:78:ed:d2:7a:7a:38:fd:98:34:b5:ba:45:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=31F76CE2EF4D020F925E37D7A9D8E35398C7C017 Validity Not Before: Jun 5 17:06:40 2026 GMT Not After : Jun 6 19:35:40 2026 GMT Subject: CN=47686621B7EC9ECF79866F61E7A5DDC162B32D1E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:39:eb:b8:ed:77:cb:3c:59:f2:82:3a:03:b4: d2:e8:8e:26:28:07:38:26:90:4b:0b:7c:c6:93:72: d7:a0:14:75:ac:34:9d:2b:3f:a3:ce:5d:ee:79:a9: 4b:8d:01:74:3c:9c:cd:ed:0a:36:bd:ed:74:f0:bc: 3d:c2:74:dc:7d:c5:39:54:b8:5d:8d:e5:4c:e6:ac: 03:ca:df:f0:58:a5:c0:ce:cf:83:11:b6:48:8e:7c: 73:19:a2:a1:d8:75:f9:7a:45:d6:2b:bb:e2:54:5a: 8e:00:9d:84:13:65:1a:c3:1c:74:c7:f3:e6:d2:10: f2:4a:57:8d:76:a8:22:42:68:e4:e4:c3:a7:6f:ce: 4e:b1:d2:44:2e:d9:cb:44:74:b0:1d:05:34:9a:92: c6:41:88:68:05:35:2a:b5:be:96:f1:c6:b6:6e:ec: a4:a3:d0:3c:e9:de:a5:66:a5:9c:0c:fb:01:06:0d: b2:78:91:01:55:5c:e1:cb:d2:d6:88:76:9d:3c:41: 5f:81:39:b5:94:da:07:e3:3a:60:9b:93:4b:40:92: ab:10:89:6e:e7:45:06:1c:f2:49:db:19:02:f3:2c: e1:cf:f2:83:74:48:0c:90:f8:98:1e:48:7e:29:78: 56:63:5d:10:92:3c:74:c4:7a:ea:8b:de:22:54:f7: 49:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:68:66:21:B7:EC:9E:CF:79:86:6F:61:E7:A5:DD:C1:62:B3:2D:1E X509v3 Authority Key Identifier: keyid:31:F7:6C:E2:EF:4D:02:0F:92:5E:37:D7:A9:D8:E3:53:98:C7:C0:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/ebb6890d-0d6b-4ea9-a2ef-92d34a3ae64d/0/31F76CE2EF4D020F925E37D7A9D8E35398C7C017.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/31F76CE2EF4D020F925E37D7A9D8E35398C7C017.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ebb6890d-0d6b-4ea9-a2ef-92d34a3ae64d/0/31F76CE2EF4D020F925E37D7A9D8E35398C7C017.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:79:21:d7:9a:a3:01:a1:74:b9:2b:aa:d8:dd:ff:0d:8d:c1: 1f:ec:fb:e8:fd:b2:fd:6d:eb:0a:a2:e0:0b:3b:24:7f:1d:17: 59:5c:b1:ff:ba:4e:02:77:61:0e:ff:0a:27:2f:2e:25:74:cf: 88:04:9c:a4:52:55:ce:15:03:f6:d7:a3:92:b9:31:50:41:f6: 8c:db:16:e9:93:fe:28:69:99:84:dd:ed:08:7a:3c:ac:3e:15: c4:7f:b5:39:02:c6:fe:ea:8c:3f:29:32:4c:48:02:06:2e:a3: 2c:b0:d8:01:6c:2a:6c:94:55:13:d7:31:c0:7c:43:29:2c:05: bb:bd:0e:b5:bf:05:d6:4e:72:81:4a:e8:1d:5d:4e:fa:99:de: 21:47:db:2a:b5:41:7d:8e:a3:52:97:57:dd:0d:7b:3f:c5:c7: 0d:04:8e:57:c3:19:16:c6:8b:6f:11:2a:98:17:a3:fa:14:64: 96:fc:5c:b7:48:99:63:00:68:99:76:05:74:f4:ac:0d:ed:f9: f2:6c:8f:70:1d:a9:5f:da:c0:0e:5e:8f:d5:d3:78:23:ef:d6: d6:d7:f1:d7:ef:cc:85:95:41:db:f6:17:f5:53:2e:16:d6:db: 3e:10:fc:8c:21:75:67:83:76:e4:32:60:ba:5d:55:2e:a2:d7: 4c:17:be:66 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUOqos72+gvXjt0np6OP2YNLW6RRgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzFGNzZDRTJFRjREMDIwRjkyNUUzN0Q3QTlEOEUzNTM5 OEM3QzAxNzAeFw0yNjA2MDUxNzA2NDBaFw0yNjA2MDYxOTM1NDBaMDMxMTAvBgNV BAMTKDQ3Njg2NjIxQjdFQzlFQ0Y3OTg2NkY2MUU3QTVEREMxNjJCMzJEMUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2Oeu47XfLPFnygjoDtNLojiYo BzgmkEsLfMaTctegFHWsNJ0rP6POXe55qUuNAXQ8nM3tCja97XTwvD3CdNx9xTlU uF2N5UzmrAPK3/BYpcDOz4MRtkiOfHMZoqHYdfl6RdYru+JUWo4AnYQTZRrDHHTH 8+bSEPJKV412qCJCaOTkw6dvzk6x0kQu2ctEdLAdBTSaksZBiGgFNSq1vpbxxrZu 7KSj0Dzp3qVmpZwM+wEGDbJ4kQFVXOHL0taIdp08QV+BObWU2gfjOmCbk0tAkqsQ iW7nRQYc8knbGQLzLOHP8oN0SAyQ+JgeSH4peFZjXRCSPHTEeuqL3iJU90ntAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUR2hmIbfsns95hm9h56XdwWKzLR4wHwYDVR0j BBgwFoAUMfds4u9NAg+SXjfXqdjjU5jHwBcwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZWJiNjg5MGQtMGQ2Yi00ZWE5LWEyZWYtOTJkMzRhM2Fl NjRkLzAvMzFGNzZDRTJFRjREMDIwRjkyNUUzN0Q3QTlEOEUzNTM5OEM3QzAxNy5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC8zMUY3NkNFMkVGNEQwMjBGOTI1RTM3RDdB OUQ4RTM1Mzk4QzdDMDE3LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2ViYjY4OTBkLTBkNmItNGVhOS1hMmVmLTkyZDM0YTNhZTY0ZC8wLzMxRjc2Q0Uy RUY0RDAyMEY5MjVFMzdEN0E5RDhFMzUzOThDN0MwMTcubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAceSHX mqMBoXS5K6rY3f8NjcEf7Pvo/bL9besKouALOyR/HRdZXLH/uk4Cd2EO/wonLy4l dM+IBJykUlXOFQP216OSuTFQQfaM2xbpk/4oaZmE3e0IejysPhXEf7U5Asb+6ow/ KTJMSAIGLqMssNgBbCpslFUT1zHAfEMpLAW7vQ61vwXWTnKBSugdXU76md4hR9sq tUF9jqNSl1fdDXs/xccNBI5XwxkWxotvESqYF6P6FGSW/Fy3SJljAGiZdgV09KwN 7fnybI9wHalf2sAOXo/V03gj79bW1/HX78yFlUHb9hf1Uy4W1ts+EPyMIXVng3bk MmC6XVUuotdMF75m -----END CERTIFICATE-----Generated at Sat Jun 6 04:03:35 2026 by rpki-client