$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/CF0631D33A3C9DC5C45424D55C3E7663838657A3.mft File: CF0631D33A3C9DC5C45424D55C3E7663838657A3.mft (raw, json) Hash identifier: /imMiVpG9C7pNiEF6NjTNsdgr1u2sdBUgj56lGG6pJw= Subject key identifier: 22:E6:2B:F6:E7:E9:96:BC:7F:2A:B2:67:8B:09:89:CF:E6:59:57:95 Authority key identifier: CF:06:31:D3:3A:3C:9D:C5:C4:54:24:D5:5C:3E:76:63:83:86:57:A3 Certificate issuer: /CN=cf0631d33a3c9dc5c45424d55c3e7663838657a3 Certificate serial: 08C03E7B090F1F9B7748769BC09F9D44B810F4BF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zwYx0zo8ncXEVCTVXD52Y4OGV6M.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/CF0631D33A3C9DC5C45424D55C3E7663838657A3.mft Manifest number: 0175 Signing time: Thu 23 Jul 2026 13:59:33 +0000 Manifest this update: Thu 23 Jul 2026 13:54:33 +0000 Manifest next update: Fri 24 Jul 2026 16:15:33 +0000 Files and hashes: 1: 38392e3138352e382e302f32342d3234203d3e203630383630.roa (hash: uuMWj0BWrTugTcot2BIIjLN4CmKo0TjrBWjA0TJKmTM=) 2: 39332e3138352e3231342e302f32342d3234203d3e203630383630.roa (hash: I4ydkJ2r2j2i1g1xPyPsffo9hUpPo3RLQo6MfTdRh1Q=) 3: 3138352e33302e3230332e302f32342d3234203d3e203630383630.roa (hash: +hLj8/wzU4ALLxe4Xdt3WSnzJEJQWXiNiu+hY32JK2w=) 4: CF0631D33A3C9DC5C45424D55C3E7663838657A3.crl (hash: TKbcKlMOVp5uFqoUAal12rC/eIsdBXUtygKeZT4wqjw=) 5: 3138352e33302e3230302e302f32332d3233203d3e203630383630.roa (hash: EjHevTTMahznqtckt7aLMDXLh3y0kx9bdoI4UFB/hKw=) 6: 3138352e33302e3230322e302f32342d3234203d3e203630383630.roa (hash: tBh4T597HLyGCSugLkif66QABd9ufnpWRf3NI++UCNc=) 7: 38392e3138352e31322e302f32342d3234203d3e203630383630.roa (hash: KsOBm/IW9m6wYWtDKEPIq17pdU+n9YXSV9XxpyK0qLc=) 8: C972E8671DEDC43FE908B548531C969A051CD34C.cer (hash: d7NBPzoR5U51KQ6xM8aVu3af+Il1XYsfzuoeH65sh5k=) 9: 3130392e37322e3132322e302f32342d3234203d3e203630383630.roa (hash: 2mjBtJiNX2GgtlTBc9elrwUynjPTbiI/Km0f5EIklUM=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/CF0631D33A3C9DC5C45424D55C3E7663838657A3.crl rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/CF0631D33A3C9DC5C45424D55C3E7663838657A3.mft rsync://rpki.ripe.net/repository/DEFAULT/zwYx0zo8ncXEVCTVXD52Y4OGV6M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 24 Jul 2026 14:03:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:c0:3e:7b:09:0f:1f:9b:77:48:76:9b:c0:9f:9d:44:b8:10:f4:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cf0631d33a3c9dc5c45424d55c3e7663838657a3 Validity Not Before: Jul 23 13:54:33 2026 GMT Not After : Jul 24 16:15:33 2026 GMT Subject: CN=22E62BF6E7E996BC7F2AB2678B0989CFE6595795 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:29:04:d2:01:48:9a:86:90:bf:ce:21:8d:1e: 2a:ee:23:72:91:2c:13:83:bd:93:b5:25:54:d0:1c: 1c:d0:3a:02:33:9a:0f:72:14:23:1d:98:c5:01:9f: ee:0d:02:62:cc:20:63:8a:8a:69:78:d4:73:01:cd: 8b:29:5a:69:59:58:7b:51:3e:c0:66:69:1b:6c:25: a8:ea:d6:d2:bb:41:1d:61:0a:8f:e5:2e:32:ca:88: 4b:2f:48:5f:62:e9:7d:43:fc:72:9b:71:83:56:d1: 9e:33:0b:73:20:72:fa:1a:ca:f9:23:6f:0b:28:ba: 38:f0:fb:71:0d:2c:c5:39:53:de:40:14:94:06:e0: a4:13:f6:40:ae:14:31:80:62:6d:f8:4f:d7:93:a1: 2e:74:11:02:6e:fa:5f:99:ce:bb:96:4a:a9:a4:0c: 69:f1:3b:87:fb:4a:6b:7d:3c:68:1d:46:00:46:db: a6:9b:b7:c9:2b:26:91:a3:b9:6f:57:2b:d9:bd:4b: 4a:0d:4e:07:3c:af:d4:d2:6e:71:93:d0:ff:7e:13: 5b:9b:5c:0e:34:db:bc:dd:a9:bf:a9:c8:12:d7:38: 94:8a:0c:08:d6:7f:bb:d7:9d:05:cf:7e:4c:27:8a: b0:34:e1:8f:df:72:85:92:f8:21:4d:64:02:d1:a1: 5d:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:E6:2B:F6:E7:E9:96:BC:7F:2A:B2:67:8B:09:89:CF:E6:59:57:95 X509v3 Authority Key Identifier: keyid:CF:06:31:D3:3A:3C:9D:C5:C4:54:24:D5:5C:3E:76:63:83:86:57:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/CF0631D33A3C9DC5C45424D55C3E7663838657A3.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zwYx0zo8ncXEVCTVXD52Y4OGV6M.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/CF0631D33A3C9DC5C45424D55C3E7663838657A3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:69:04:b4:e3:d5:f2:e8:87:2b:cd:3d:88:ef:63:32:31:2b: 3f:b6:e5:71:8f:30:ce:d0:b1:8e:ef:bc:84:d9:95:d0:35:fc: 82:cc:76:36:ef:1a:84:02:c0:57:7a:5b:25:cb:ed:5a:68:c8: cd:7c:d6:27:59:1a:b9:38:cb:06:36:b1:57:22:a3:34:03:fb: ed:d2:25:ce:8d:c0:88:d0:4f:c5:08:60:ac:c2:4f:43:cb:32: 2b:f8:22:ac:54:ac:73:bc:41:5a:8c:cc:6d:21:91:33:14:0c: 64:5a:7b:45:ae:7c:39:ff:02:d8:4e:ac:99:53:b7:a9:39:d8: 6c:24:66:81:24:d1:e3:4d:af:42:ec:e1:e6:84:70:2b:8a:1e: 76:12:1c:43:e5:4a:87:8e:56:fd:bc:e2:32:e2:df:e1:e0:c8: 23:50:e3:d1:ce:e8:c5:dd:4d:ab:c1:f1:1f:f7:07:fa:87:fb: 90:a6:dd:e5:60:ca:cf:6d:bf:8a:fe:d6:29:ce:bd:48:b2:7b: 03:17:25:bd:c5:a4:21:f6:9e:b3:fd:d0:f1:cc:68:0c:75:6d: 64:6f:74:9b:82:e6:db:fa:be:d9:16:ea:4d:fc:78:29:f8:13: d1:a2:e4:57:12:94:e4:35:8f:88:df:c7:3d:5b:ef:87:f6:fd: e8:2e:1a:26 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUCMA+ewkPH5t3SHabwJ+dRLgQ9L8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoY2YwNjMxZDMzYTNjOWRjNWM0NTQyNGQ1NWMzZTc2NjM4 Mzg2NTdhMzAeFw0yNjA3MjMxMzU0MzNaFw0yNjA3MjQxNjE1MzNaMDMxMTAvBgNV BAMTKDIyRTYyQkY2RTdFOTk2QkM3RjJBQjI2NzhCMDk4OUNGRTY1OTU3OTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBKQTSAUiahpC/ziGNHiruI3KR LBODvZO1JVTQHBzQOgIzmg9yFCMdmMUBn+4NAmLMIGOKiml41HMBzYspWmlZWHtR PsBmaRtsJajq1tK7QR1hCo/lLjLKiEsvSF9i6X1D/HKbcYNW0Z4zC3Mgcvoayvkj bwsoujjw+3ENLMU5U95AFJQG4KQT9kCuFDGAYm34T9eToS50EQJu+l+ZzruWSqmk DGnxO4f7Smt9PGgdRgBG26abt8krJpGjuW9XK9m9S0oNTgc8r9TSbnGT0P9+E1ub XA4027zdqb+pyBLXOJSKDAjWf7vXnQXPfkwnirA04Y/fcoWS+CFNZALRoV0VAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUIuYr9ufplrx/KrJniwmJz+ZZV5UwHwYDVR0j BBgwFoAUzwYx0zo8ncXEVCTVXD52Y4OGV6MwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNjE3MDhhNmItNmMzYS00MGEwLWEzMDItNTk1ZWNjMTc4 NDhjLzIvQ0YwNjMxRDMzQTNDOURDNUM0NTQyNEQ1NUMzRTc2NjM4Mzg2NTdBMy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3p3WXgwem84bmNYRVZDVFZYRDUyWTRP R1Y2TS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS82MTcwOGE2Yi02 YzNhLTQwYTAtYTMwMi01OTVlY2MxNzg0OGMvMi9DRjA2MzFEMzNBM0M5REM1QzQ1 NDI0RDU1QzNFNzY2MzgzODY1N0EzLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWmkEtOPV8uiHK809iO9j MjErP7blcY8wztCxju+8hNmV0DX8gsx2Nu8ahALAV3pbJcvtWmjIzXzWJ1kauTjL BjaxVyKjNAP77dIlzo3AiNBPxQhgrMJPQ8syK/girFSsc7xBWozMbSGRMxQMZFp7 Ra58Of8C2E6smVO3qTnYbCRmgSTR402vQuzh5oRwK4oedhIcQ+VKh45W/bziMuLf 4eDII1Dj0c7oxd1Nq8HxH/cH+of7kKbd5WDKz22/iv7WKc69SLJ7AxclvcWkIfae s/3Q8cxoDHVtZG90m4Lm2/q+2RbqTfx4KfgT0aLkVxKU5DWPiN/HPVvvh/b96C4a Jg== -----END CERTIFICATE-----Generated at Fri Jul 24 00:18:01 2026 by rpki-client