$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ebb6890d-0d6b-4ea9-a2ef-92d34a3ae64d/0/31F76CE2EF4D020F925E37D7A9D8E35398C7C017.mft File: 31F76CE2EF4D020F925E37D7A9D8E35398C7C017.mft (raw, json) Hash identifier: 6QwevYyr7pNKOrD0XNTfvovyep2ovgSVJg6Uq5qxols= Subject key identifier: 80:8C:14:D1:F1:C4:3B:6B:C9:34:67:63:7E:F1:28:A8:01:FA:AA:E9 Authority key identifier: 31:F7:6C:E2:EF:4D:02:0F:92:5E:37:D7:A9:D8:E3:53:98:C7:C0:17 Certificate issuer: /CN=31F76CE2EF4D020F925E37D7A9D8E35398C7C017 Certificate serial: 21175BC234D3095DC0E99E32C8C69C606C970403 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/31F76CE2EF4D020F925E37D7A9D8E35398C7C017.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ebb6890d-0d6b-4ea9-a2ef-92d34a3ae64d/0/31F76CE2EF4D020F925E37D7A9D8E35398C7C017.mft Manifest number: CC Signing time: Fri 13 Mar 2026 20:15:32 +0000 Manifest this update: Fri 13 Mar 2026 20:10:32 +0000 Manifest next update: Sat 14 Mar 2026 22:49:32 +0000 Files and hashes: 1: 31F76CE2EF4D020F925E37D7A9D8E35398C7C017.crl (hash: /snEG93oHYXqUw2I6GrjpHZ2dhMbFDzj5EcAxEW8tEo=) 2: 326131343a373538313a3738363a3a2f34382d3438203d3e20323034383731.roa (hash: d7JuEn5B8KAwVz8SpkU4AMcAJkaWbbl+bWkksQthj/k=) 3: 326131343a373538313a3730303a3a2f34382d3438203d3e20323034383731.roa (hash: u8e0eoyomRFMkD/JcQQfwJ+uqGsBt5QX6wzg4Fq5J9M=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ebb6890d-0d6b-4ea9-a2ef-92d34a3ae64d/0/31F76CE2EF4D020F925E37D7A9D8E35398C7C017.crl rsync://rsync.paas.rpki.ripe.net/repository/ebb6890d-0d6b-4ea9-a2ef-92d34a3ae64d/0/31F76CE2EF4D020F925E37D7A9D8E35398C7C017.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/31F76CE2EF4D020F925E37D7A9D8E35398C7C017.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 14 Mar 2026 22:49:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:17:5b:c2:34:d3:09:5d:c0:e9:9e:32:c8:c6:9c:60:6c:97:04:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=31F76CE2EF4D020F925E37D7A9D8E35398C7C017 Validity Not Before: Mar 13 20:10:32 2026 GMT Not After : Mar 14 22:49:32 2026 GMT Subject: CN=808C14D1F1C43B6BC93467637EF128A801FAAAE9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:82:92:64:2d:8e:27:ff:cb:b1:db:43:ca:f9: e2:db:d4:41:d0:b4:f5:fc:ae:de:c2:6a:01:32:1d: fc:2b:4f:a1:9d:12:16:09:a2:e1:26:9c:7e:40:76: b4:c3:99:43:89:1a:4a:eb:48:62:f4:c4:95:65:b9: 70:05:50:38:39:37:5c:8f:01:bc:25:56:61:86:aa: 61:be:d1:b7:e5:7c:65:7e:3d:e3:92:42:41:4f:9f: 84:01:4b:33:78:31:f2:b5:be:2b:cd:37:48:87:99: bf:7a:29:ce:2b:f9:10:d3:c9:30:78:19:37:b9:96: a8:3e:7f:f1:f4:75:ca:7d:05:77:dd:55:d6:07:5e: 16:76:82:5f:b6:de:f4:33:03:5d:e4:10:e5:c0:d1: 65:7b:2a:61:48:aa:84:a8:72:ab:30:30:63:cf:93: e8:da:e5:ab:ac:f8:59:11:43:7c:ab:6e:7c:1b:8a: 47:57:7e:9c:87:21:23:18:b6:da:61:16:a6:29:7d: 93:dc:45:0c:83:f0:ee:93:81:d3:f0:38:54:4f:b2: 82:7f:0a:7b:55:74:0b:be:7c:64:96:b6:e8:2f:b0: 05:5f:df:8b:3e:22:c6:ed:7c:6e:25:53:c7:b8:a3: 64:c6:fe:58:77:3c:b8:ba:f7:95:53:d2:9b:49:62: 15:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:8C:14:D1:F1:C4:3B:6B:C9:34:67:63:7E:F1:28:A8:01:FA:AA:E9 X509v3 Authority Key Identifier: keyid:31:F7:6C:E2:EF:4D:02:0F:92:5E:37:D7:A9:D8:E3:53:98:C7:C0:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/ebb6890d-0d6b-4ea9-a2ef-92d34a3ae64d/0/31F76CE2EF4D020F925E37D7A9D8E35398C7C017.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/31F76CE2EF4D020F925E37D7A9D8E35398C7C017.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ebb6890d-0d6b-4ea9-a2ef-92d34a3ae64d/0/31F76CE2EF4D020F925E37D7A9D8E35398C7C017.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:15:5d:c8:81:18:ca:14:d5:3d:c4:ac:d5:f1:cd:20:8e:6a: d8:45:a6:b6:2f:1a:6f:f5:b5:69:2c:6e:c2:4e:39:30:c7:57: 3e:de:68:12:e5:51:2b:75:01:42:0d:be:ed:ad:ed:67:d5:2f: dc:59:cc:48:d3:1c:a1:36:11:b3:f6:ae:c0:04:26:b4:c4:d2: ab:ab:f0:d6:14:eb:54:c1:3e:17:97:84:16:a9:51:db:7c:98: 7c:ab:92:a4:e5:f4:88:2f:00:02:2b:20:9c:4a:cb:88:00:ee: 42:c0:85:c5:d1:ae:be:a4:c4:df:5f:27:0f:b7:0c:7a:8e:8c: 08:ce:b5:3f:c2:c7:bb:7f:42:e0:b0:cf:9f:21:03:cc:00:c2: 42:71:e0:66:7e:2d:01:f6:ba:8c:ac:ef:5f:62:59:36:69:8d: ec:29:c6:c5:5c:31:3d:4d:b5:40:ed:e3:b7:d8:c2:43:64:cb: 9b:d9:e6:b5:e0:80:fb:40:17:7f:f2:27:3e:e0:1e:b5:b3:9d: a8:84:fc:43:bd:e9:6e:7c:d4:93:20:55:8d:d4:bb:6a:05:e2: 71:39:1a:6f:b1:cb:6b:db:81:95:49:d1:3a:5b:91:bc:2a:71: 52:09:2a:1f:33:76:b4:20:9c:4c:2a:06:05:0c:18:83:e9:00: 37:2d:14:1d -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUIRdbwjTTCV3A6Z4yyMacYGyXBAMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzFGNzZDRTJFRjREMDIwRjkyNUUzN0Q3QTlEOEUzNTM5 OEM3QzAxNzAeFw0yNjAzMTMyMDEwMzJaFw0yNjAzMTQyMjQ5MzJaMDMxMTAvBgNV BAMTKDgwOEMxNEQxRjFDNDNCNkJDOTM0Njc2MzdFRjEyOEE4MDFGQUFBRTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDjgpJkLY4n/8ux20PK+eLb1EHQ tPX8rt7CagEyHfwrT6GdEhYJouEmnH5AdrTDmUOJGkrrSGL0xJVluXAFUDg5N1yP AbwlVmGGqmG+0bflfGV+PeOSQkFPn4QBSzN4MfK1vivNN0iHmb96Kc4r+RDTyTB4 GTe5lqg+f/H0dcp9BXfdVdYHXhZ2gl+23vQzA13kEOXA0WV7KmFIqoSocqswMGPP k+ja5aus+FkRQ3yrbnwbikdXfpyHISMYttphFqYpfZPcRQyD8O6TgdPwOFRPsoJ/ CntVdAu+fGSWtugvsAVf34s+IsbtfG4lU8e4o2TG/lh3PLi695VT0ptJYhVzAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUgIwU0fHEO2vJNGdjfvEoqAH6qukwHwYDVR0j BBgwFoAUMfds4u9NAg+SXjfXqdjjU5jHwBcwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZWJiNjg5MGQtMGQ2Yi00ZWE5LWEyZWYtOTJkMzRhM2Fl NjRkLzAvMzFGNzZDRTJFRjREMDIwRjkyNUUzN0Q3QTlEOEUzNTM5OEM3QzAxNy5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC8zMUY3NkNFMkVGNEQwMjBGOTI1RTM3RDdB OUQ4RTM1Mzk4QzdDMDE3LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2ViYjY4OTBkLTBkNmItNGVhOS1hMmVmLTkyZDM0YTNhZTY0ZC8wLzMxRjc2Q0Uy RUY0RDAyMEY5MjVFMzdEN0E5RDhFMzUzOThDN0MwMTcubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBlFV3I gRjKFNU9xKzV8c0gjmrYRaa2Lxpv9bVpLG7CTjkwx1c+3mgS5VErdQFCDb7tre1n 1S/cWcxI0xyhNhGz9q7ABCa0xNKrq/DWFOtUwT4Xl4QWqVHbfJh8q5Kk5fSILwAC KyCcSsuIAO5CwIXF0a6+pMTfXycPtwx6jowIzrU/wse7f0LgsM+fIQPMAMJCceBm fi0B9rqMrO9fYlk2aY3sKcbFXDE9TbVA7eO32MJDZMub2ea14ID7QBd/8ic+4B61 s52ohPxDvelufNSTIFWN1LtqBeJxORpvsctr24GVSdE6W5G8KnFSCSofM3a0IJxM KgYFDBiD6QA3LRQd -----END CERTIFICATE-----Generated at Sat Mar 14 14:37:16 2026 by rpki-client