$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/ebb6890d-0d6b-4ea9-a2ef-92d34a3ae64d/0/31F76CE2EF4D020F925E37D7A9D8E35398C7C017.mft File: 31F76CE2EF4D020F925E37D7A9D8E35398C7C017.mft (raw, json) Hash identifier: Cdf/o/P9wJGWUhxy/n7CFDmeWRb/0nCEFfh1X6GNLiM= Subject key identifier: C7:31:9A:01:94:36:73:B9:B7:97:3B:93:60:10:B6:45:0B:B3:DD:72 Authority key identifier: 31:F7:6C:E2:EF:4D:02:0F:92:5E:37:D7:A9:D8:E3:53:98:C7:C0:17 Certificate issuer: /CN=31F76CE2EF4D020F925E37D7A9D8E35398C7C017 Certificate serial: 55835C8F6AA4A984A502A60BB33D785BF5306641 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/31F76CE2EF4D020F925E37D7A9D8E35398C7C017.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ebb6890d-0d6b-4ea9-a2ef-92d34a3ae64d/0/31F76CE2EF4D020F925E37D7A9D8E35398C7C017.mft Manifest number: 01B5 Signing time: Fri 04 Sep 2026 08:26:01 +0000 Manifest this update: Fri 04 Sep 2026 08:21:01 +0000 Manifest next update: Sat 05 Sep 2026 11:13:01 +0000 Files and hashes: 1: 31F76CE2EF4D020F925E37D7A9D8E35398C7C017.crl (hash: FsWLeCHer8AQrRg8wEgP6M8BwOZOyNS+jjmEi+qxn+Q=) 2: 326131343a373538313a3730303a3a2f34382d3438203d3e20323034383731.roa (hash: u8e0eoyomRFMkD/JcQQfwJ+uqGsBt5QX6wzg4Fq5J9M=) 3: 326131343a373538313a3738363a3a2f34382d3438203d3e20323034383731.roa (hash: d7JuEn5B8KAwVz8SpkU4AMcAJkaWbbl+bWkksQthj/k=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ebb6890d-0d6b-4ea9-a2ef-92d34a3ae64d/0/31F76CE2EF4D020F925E37D7A9D8E35398C7C017.crl rsync://rsync.paas.rpki.ripe.net/repository/ebb6890d-0d6b-4ea9-a2ef-92d34a3ae64d/0/31F76CE2EF4D020F925E37D7A9D8E35398C7C017.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/31F76CE2EF4D020F925E37D7A9D8E35398C7C017.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 05 Sep 2026 11:13:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:83:5c:8f:6a:a4:a9:84:a5:02:a6:0b:b3:3d:78:5b:f5:30:66:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=31F76CE2EF4D020F925E37D7A9D8E35398C7C017 Validity Not Before: Sep 4 08:21:01 2026 GMT Not After : Sep 5 11:13:01 2026 GMT Subject: CN=C7319A01943673B9B7973B936010B6450BB3DD72 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:28:2b:f0:4a:1b:5d:f1:a2:c7:fb:f6:df:7c: 39:1c:23:65:aa:db:65:8e:8b:85:45:a4:e1:53:24: 3d:2e:36:85:dd:cc:95:33:a6:8e:f6:ec:f3:af:af: 6a:ea:8b:95:b7:12:a3:f2:67:c1:91:4a:2b:10:63: 73:b7:a6:7d:c6:c0:c8:43:dd:17:8f:05:1d:f7:69: 29:d8:aa:ad:97:70:dc:45:cd:58:34:2b:61:26:9d: 20:1f:04:32:c2:7b:aa:bd:f9:84:53:ec:6a:3b:38: af:53:a9:68:d2:7c:f2:80:0c:fe:6a:b3:f4:3a:e0: 93:c7:d6:7a:6f:7e:74:b1:a2:cb:c4:28:22:aa:59: 8f:c7:c1:26:22:62:44:eb:19:a3:0e:c7:ef:52:81: 32:18:bc:9f:b1:60:bb:21:ba:60:c9:74:68:40:93: 7b:32:90:cf:d2:a0:58:e8:0a:28:30:49:79:55:ba: b0:bf:ac:ed:6e:72:10:cd:12:ce:3a:96:c6:e9:a9: 09:bf:ad:f9:ea:e4:33:d6:69:c3:32:33:22:2c:6c: 9a:84:8e:54:1e:ce:cb:61:77:ce:b4:8c:27:17:9a: 16:cd:ee:9e:22:c9:ae:f2:1e:e5:09:f4:aa:37:4f: 0f:18:e2:d0:cb:e2:bf:19:03:03:8a:ee:03:fd:f3: 81:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:31:9A:01:94:36:73:B9:B7:97:3B:93:60:10:B6:45:0B:B3:DD:72 X509v3 Authority Key Identifier: keyid:31:F7:6C:E2:EF:4D:02:0F:92:5E:37:D7:A9:D8:E3:53:98:C7:C0:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/ebb6890d-0d6b-4ea9-a2ef-92d34a3ae64d/0/31F76CE2EF4D020F925E37D7A9D8E35398C7C017.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/31F76CE2EF4D020F925E37D7A9D8E35398C7C017.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ebb6890d-0d6b-4ea9-a2ef-92d34a3ae64d/0/31F76CE2EF4D020F925E37D7A9D8E35398C7C017.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:27:1c:d8:37:d3:e7:65:ea:dc:83:24:82:ae:5d:85:66:a1: a6:01:ac:90:53:70:9e:83:4f:05:fe:80:5d:6e:a0:d3:17:08: 28:40:89:ce:b8:55:ba:bb:91:3a:4e:9f:ec:b2:72:c3:9e:00: 5e:a0:3d:08:fa:0d:f5:26:43:28:bf:c1:e2:eb:ef:f7:39:ae: fb:24:66:b0:d8:05:95:4c:57:5e:dc:69:bd:8e:ce:b4:8f:00: 41:0d:d7:00:2a:8d:e1:b1:6c:18:65:d6:21:e3:4a:dc:35:ea: 19:49:b4:1b:84:2a:7b:96:1e:e7:14:92:7a:15:20:40:94:2a: 41:e6:99:92:18:46:5c:dc:86:c0:af:e9:3a:ff:34:86:87:e5: 36:b1:38:73:7b:ad:f9:72:fe:f4:98:b6:c4:28:f2:c1:91:89: ea:16:6d:1f:9e:c8:56:a3:29:f1:6c:88:65:24:b9:ce:59:c0: b8:2c:a2:3b:e1:f2:d1:97:15:59:4a:a1:1c:2c:e7:a9:63:25: 54:ba:35:92:a7:bc:fb:fe:89:30:4c:09:f0:af:3c:c9:c1:67: d9:a3:1e:d7:a9:83:49:2a:67:40:58:73:54:71:b4:2b:2d:7e: 28:fa:e8:83:f7:fd:83:5f:c5:df:0e:62:d9:8b:90:20:c9:ff: cb:44:19:ee -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUVYNcj2qkqYSlAqYLsz14W/UwZkEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzFGNzZDRTJFRjREMDIwRjkyNUUzN0Q3QTlEOEUzNTM5 OEM3QzAxNzAeFw0yNjA5MDQwODIxMDFaFw0yNjA5MDUxMTEzMDFaMDMxMTAvBgNV BAMTKEM3MzE5QTAxOTQzNjczQjlCNzk3M0I5MzYwMTBCNjQ1MEJCM0RENzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnKCvwShtd8aLH+/bffDkcI2Wq 22WOi4VFpOFTJD0uNoXdzJUzpo727POvr2rqi5W3EqPyZ8GRSisQY3O3pn3GwMhD 3RePBR33aSnYqq2XcNxFzVg0K2EmnSAfBDLCe6q9+YRT7Go7OK9TqWjSfPKADP5q s/Q64JPH1npvfnSxosvEKCKqWY/HwSYiYkTrGaMOx+9SgTIYvJ+xYLshumDJdGhA k3sykM/SoFjoCigwSXlVurC/rO1uchDNEs46lsbpqQm/rfnq5DPWacMyMyIsbJqE jlQezsthd860jCcXmhbN7p4iya7yHuUJ9Ko3Tw8Y4tDL4r8ZAwOK7gP984GLAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUxzGaAZQ2c7m3lzuTYBC2RQuz3XIwHwYDVR0j BBgwFoAUMfds4u9NAg+SXjfXqdjjU5jHwBcwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZWJiNjg5MGQtMGQ2Yi00ZWE5LWEyZWYtOTJkMzRhM2Fl NjRkLzAvMzFGNzZDRTJFRjREMDIwRjkyNUUzN0Q3QTlEOEUzNTM5OEM3QzAxNy5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC8zMUY3NkNFMkVGNEQwMjBGOTI1RTM3RDdB OUQ4RTM1Mzk4QzdDMDE3LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2ViYjY4OTBkLTBkNmItNGVhOS1hMmVmLTkyZDM0YTNhZTY0ZC8wLzMxRjc2Q0Uy RUY0RDAyMEY5MjVFMzdEN0E5RDhFMzUzOThDN0MwMTcubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCIJxzY N9PnZercgySCrl2FZqGmAayQU3Ceg08F/oBdbqDTFwgoQInOuFW6u5E6Tp/ssnLD ngBeoD0I+g31JkMov8Hi6+/3Oa77JGaw2AWVTFde3Gm9js60jwBBDdcAKo3hsWwY ZdYh40rcNeoZSbQbhCp7lh7nFJJ6FSBAlCpB5pmSGEZc3IbAr+k6/zSGh+U2sThz e635cv70mLbEKPLBkYnqFm0fnshWoynxbIhlJLnOWcC4LKI74fLRlxVZSqEcLOep YyVUujWSp7z7/okwTAnwrzzJwWfZox7XqYNJKmdAWHNUcbQrLX4o+uiD9/2DX8Xf DmLZi5Agyf/LRBnu -----END CERTIFICATE-----Generated at Fri Sep 4 22:12:48 2026 by rpki-client