$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/ebb6890d-0d6b-4ea9-a2ef-92d34a3ae64d/0/31F76CE2EF4D020F925E37D7A9D8E35398C7C017.mft File: 31F76CE2EF4D020F925E37D7A9D8E35398C7C017.mft (raw, json) Hash identifier: HatYh6CKEW/fzzMSX8JNZ8o2Z3eshfyQxRRTByYyYhw= Subject key identifier: 92:35:05:BD:DC:53:77:2E:AB:A9:DA:87:C1:AE:45:DC:C6:DB:32:9E Authority key identifier: 31:F7:6C:E2:EF:4D:02:0F:92:5E:37:D7:A9:D8:E3:53:98:C7:C0:17 Certificate issuer: /CN=31F76CE2EF4D020F925E37D7A9D8E35398C7C017 Certificate serial: 72F1BCF254D4476BC3AF698F018DCAED9AFD1561 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/31F76CE2EF4D020F925E37D7A9D8E35398C7C017.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ebb6890d-0d6b-4ea9-a2ef-92d34a3ae64d/0/31F76CE2EF4D020F925E37D7A9D8E35398C7C017.mft Manifest number: 01F9 Signing time: Mon 26 Oct 2026 21:44:55 +0000 Manifest this update: Mon 26 Oct 2026 21:39:55 +0000 Manifest next update: Wed 28 Oct 2026 01:31:55 +0000 Files and hashes: 1: 31F76CE2EF4D020F925E37D7A9D8E35398C7C017.crl (hash: brlx3z9l+gzATEj+edu/AnSbopV437dONEFwkcXx8Ew=) 2: 326131343a373538313a3730303a3a2f34382d3438203d3e20323034383731.roa (hash: JXehGAGbOBOHwTU/V09hXrcXEdlOBAJOY83kYkmYZm8=) 3: 326131343a373538313a3738363a3a2f34382d3438203d3e20323034383731.roa (hash: tGvt7Se01XwijlH0xJfhQXd0kFm91aUEgeT7V3OGe7U=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ebb6890d-0d6b-4ea9-a2ef-92d34a3ae64d/0/31F76CE2EF4D020F925E37D7A9D8E35398C7C017.crl rsync://rsync.paas.rpki.ripe.net/repository/ebb6890d-0d6b-4ea9-a2ef-92d34a3ae64d/0/31F76CE2EF4D020F925E37D7A9D8E35398C7C017.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/31F76CE2EF4D020F925E37D7A9D8E35398C7C017.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Oct 2026 01:31:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:f1:bc:f2:54:d4:47:6b:c3:af:69:8f:01:8d:ca:ed:9a:fd:15:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=31F76CE2EF4D020F925E37D7A9D8E35398C7C017 Validity Not Before: Oct 26 21:39:55 2026 GMT Not After : Oct 28 01:31:55 2026 GMT Subject: CN=923505BDDC53772EABA9DA87C1AE45DCC6DB329E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:d0:33:25:49:40:b1:d2:c4:8d:fc:2b:d9:cd: c8:69:4b:b5:6c:af:d6:f3:09:52:3c:bb:7d:cc:79: 7b:0f:40:ed:51:06:21:2b:f6:66:93:79:6a:86:dc: ff:61:e2:6f:ba:ee:f1:37:0c:8a:91:67:bc:54:4e: 0b:2b:d3:c0:90:93:17:0a:5f:1c:4b:87:be:c1:23: 8f:2c:f0:8c:01:49:d2:45:d2:6a:0f:76:55:50:60: 76:3b:a8:96:3c:59:e2:97:04:f8:a6:b7:43:11:df: 33:19:76:8d:65:bf:34:0a:be:19:96:4a:e4:81:16: 79:bd:36:e9:de:76:41:cf:79:7d:68:6d:51:62:e5: 63:83:09:72:08:47:16:73:9e:08:5a:e5:d8:ad:bb: 18:40:3f:71:61:86:3c:87:91:ea:59:89:3d:2c:0c: 0b:05:1f:53:6c:8d:10:8e:65:4d:67:5d:5f:14:8e: 11:a3:37:60:b3:63:46:d1:2b:19:a8:45:7a:98:cc: 68:55:8f:8f:16:3b:1c:ac:b4:96:c5:ec:c9:a8:68: 22:b2:bc:ec:76:eb:1e:e6:0a:92:86:f6:59:f3:36: 9a:9a:dc:5a:66:32:05:84:20:ed:94:42:03:c3:f6: aa:ed:e7:b3:60:fd:c6:fb:f4:2c:26:bf:cf:c9:d6: 6f:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:35:05:BD:DC:53:77:2E:AB:A9:DA:87:C1:AE:45:DC:C6:DB:32:9E X509v3 Authority Key Identifier: keyid:31:F7:6C:E2:EF:4D:02:0F:92:5E:37:D7:A9:D8:E3:53:98:C7:C0:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/ebb6890d-0d6b-4ea9-a2ef-92d34a3ae64d/0/31F76CE2EF4D020F925E37D7A9D8E35398C7C017.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/31F76CE2EF4D020F925E37D7A9D8E35398C7C017.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ebb6890d-0d6b-4ea9-a2ef-92d34a3ae64d/0/31F76CE2EF4D020F925E37D7A9D8E35398C7C017.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:d5:3f:36:58:18:b7:28:cb:a1:d1:2f:82:65:0c:a1:aa:1d: c2:fa:3c:13:ed:1f:26:84:61:4d:46:6d:15:f3:ed:1e:93:b8: 8b:28:d5:dc:33:e4:ca:d3:b9:3e:be:2f:be:3e:70:be:7b:74: 26:73:1a:d5:f7:91:11:5d:0e:09:65:6a:5a:52:dd:18:76:2f: 8a:ac:b6:f9:01:ff:e5:8a:c9:1c:84:a9:12:08:3c:39:10:fb: 43:6f:fe:a7:99:c5:27:7b:a2:0d:c6:f4:0e:ec:85:63:c7:0c: 4b:b1:9d:66:3c:35:6c:79:30:22:ae:05:8e:de:2d:cb:92:e3: f5:49:5d:1b:b3:a0:d8:36:de:be:77:b4:2d:31:a9:3e:d7:a2: 1f:0a:7c:dc:7d:7d:10:99:b4:58:82:1e:a5:15:f0:43:39:cf: d0:d2:44:07:e3:c3:b7:31:40:0c:38:72:ce:83:b0:50:e3:b7: 0a:f8:7c:70:60:97:43:7b:50:a1:f3:5b:8e:c1:5e:5e:ac:5b: 65:17:fc:1d:c7:cb:5f:7b:7b:1c:c0:06:3a:c8:ee:00:73:e8: 18:eb:b6:70:0e:ed:db:48:83:57:b5:35:26:35:dd:72:01:df: ff:54:64:3b:82:0d:d2:8c:e9:f8:d1:1a:9a:2d:e6:b8:27:70: 6f:d4:a2:a3 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUcvG88lTUR2vDr2mPAY3K7Zr9FWEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzFGNzZDRTJFRjREMDIwRjkyNUUzN0Q3QTlEOEUzNTM5 OEM3QzAxNzAeFw0yNjEwMjYyMTM5NTVaFw0yNjEwMjgwMTMxNTVaMDMxMTAvBgNV BAMTKDkyMzUwNUJEREM1Mzc3MkVBQkE5REE4N0MxQUU0NURDQzZEQjMyOUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCF0DMlSUCx0sSN/CvZzchpS7Vs r9bzCVI8u33MeXsPQO1RBiEr9maTeWqG3P9h4m+67vE3DIqRZ7xUTgsr08CQkxcK XxxLh77BI48s8IwBSdJF0moPdlVQYHY7qJY8WeKXBPimt0MR3zMZdo1lvzQKvhmW SuSBFnm9NunedkHPeX1obVFi5WODCXIIRxZzngha5dituxhAP3FhhjyHkepZiT0s DAsFH1NsjRCOZU1nXV8UjhGjN2CzY0bRKxmoRXqYzGhVj48WOxystJbF7MmoaCKy vOx26x7mCpKG9lnzNpqa3FpmMgWEIO2UQgPD9qrt57Ng/cb79Cwmv8/J1m/bAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUkjUFvdxTdy6rqdqHwa5F3MbbMp4wHwYDVR0j BBgwFoAUMfds4u9NAg+SXjfXqdjjU5jHwBcwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZWJiNjg5MGQtMGQ2Yi00ZWE5LWEyZWYtOTJkMzRhM2Fl NjRkLzAvMzFGNzZDRTJFRjREMDIwRjkyNUUzN0Q3QTlEOEUzNTM5OEM3QzAxNy5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC8zMUY3NkNFMkVGNEQwMjBGOTI1RTM3RDdB OUQ4RTM1Mzk4QzdDMDE3LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2ViYjY4OTBkLTBkNmItNGVhOS1hMmVmLTkyZDM0YTNhZTY0ZC8wLzMxRjc2Q0Uy RUY0RDAyMEY5MjVFMzdEN0E5RDhFMzUzOThDN0MwMTcubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQA21T82 WBi3KMuh0S+CZQyhqh3C+jwT7R8mhGFNRm0V8+0ek7iLKNXcM+TK07k+vi++PnC+ e3QmcxrV95ERXQ4JZWpaUt0Ydi+KrLb5Af/liskchKkSCDw5EPtDb/6nmcUne6IN xvQO7IVjxwxLsZ1mPDVseTAirgWO3i3LkuP1SV0bs6DYNt6+d7QtMak+16IfCnzc fX0QmbRYgh6lFfBDOc/Q0kQH48O3MUAMOHLOg7BQ47cK+HxwYJdDe1Ch81uOwV5e rFtlF/wdx8tfe3scwAY6yO4Ac+gY67ZwDu3bSINXtTUmNd1yAd//VGQ7gg3SjOn4 0RqaLea4J3Bv1KKj -----END CERTIFICATE-----Generated at Tue Oct 27 15:33:13 2026 by rpki-client