$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/CF0631D33A3C9DC5C45424D55C3E7663838657A3.mft File: CF0631D33A3C9DC5C45424D55C3E7663838657A3.mft (raw, json) Hash identifier: zT7fefye2Ldzu0MyL9X+yFSvglrzLcWC9rsZ36iqlto= Subject key identifier: 08:45:21:0A:2E:9D:F3:6D:31:54:F6:97:A6:84:85:67:4D:75:3C:F0 Authority key identifier: CF:06:31:D3:3A:3C:9D:C5:C4:54:24:D5:5C:3E:76:63:83:86:57:A3 Certificate issuer: /CN=cf0631d33a3c9dc5c45424d55c3e7663838657a3 Certificate serial: 51A2FD4A43E4D23D4E0CE064D8E3E76A78964A54 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zwYx0zo8ncXEVCTVXD52Y4OGV6M.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/CF0631D33A3C9DC5C45424D55C3E7663838657A3.mft Manifest number: 020D Signing time: Sat 14 Nov 2026 11:48:38 +0000 Manifest this update: Sat 14 Nov 2026 11:43:38 +0000 Manifest next update: Sun 15 Nov 2026 13:21:38 +0000 Files and hashes: 1: 39332e3138352e3231342e302f32342d3234203d3e203630383630.roa (hash: I4ydkJ2r2j2i1g1xPyPsffo9hUpPo3RLQo6MfTdRh1Q=) 2: 3138352e33302e3230302e302f32332d3233203d3e203630383630.roa (hash: EjHevTTMahznqtckt7aLMDXLh3y0kx9bdoI4UFB/hKw=) 3: C972E8671DEDC43FE908B548531C969A051CD34C.cer (hash: d7NBPzoR5U51KQ6xM8aVu3af+Il1XYsfzuoeH65sh5k=) 4: 3138352e33302e3230332e302f32342d3234203d3e203630383630.roa (hash: +hLj8/wzU4ALLxe4Xdt3WSnzJEJQWXiNiu+hY32JK2w=) 5: 38392e3138352e31322e302f32342d3234203d3e203630383630.roa (hash: KsOBm/IW9m6wYWtDKEPIq17pdU+n9YXSV9XxpyK0qLc=) 6: 38392e3138352e382e302f32342d3234203d3e203630383630.roa (hash: uuMWj0BWrTugTcot2BIIjLN4CmKo0TjrBWjA0TJKmTM=) 7: 3130392e37322e3132322e302f32342d3234203d3e203630383630.roa (hash: 2mjBtJiNX2GgtlTBc9elrwUynjPTbiI/Km0f5EIklUM=) 8: 3138352e33302e3230322e302f32342d3234203d3e203630383630.roa (hash: tBh4T597HLyGCSugLkif66QABd9ufnpWRf3NI++UCNc=) 9: CF0631D33A3C9DC5C45424D55C3E7663838657A3.crl (hash: mZ9MUCaOUQh5P4OO7dbNcmxx7QJasexCzDwYB6gL5E0=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/CF0631D33A3C9DC5C45424D55C3E7663838657A3.crl rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/CF0631D33A3C9DC5C45424D55C3E7663838657A3.mft rsync://rpki.ripe.net/repository/DEFAULT/zwYx0zo8ncXEVCTVXD52Y4OGV6M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 15 Nov 2026 10:37:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:a2:fd:4a:43:e4:d2:3d:4e:0c:e0:64:d8:e3:e7:6a:78:96:4a:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cf0631d33a3c9dc5c45424d55c3e7663838657a3 Validity Not Before: Nov 14 11:43:38 2026 GMT Not After : Nov 15 13:21:38 2026 GMT Subject: CN=0845210A2E9DF36D3154F697A68485674D753CF0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:f3:66:1e:7a:85:9d:fe:6a:5d:a2:65:4d:65: 1f:18:82:a8:38:81:64:c6:3e:56:df:ad:0c:db:af: 2d:55:2b:27:42:38:86:f1:7a:90:b6:53:50:04:65: e2:ff:4c:45:54:f2:eb:08:0b:98:23:1e:b0:b9:53: ec:41:15:72:e1:97:a3:27:53:24:b3:c9:d4:ae:d1: 4a:56:b0:e0:01:2a:49:c4:49:1b:e1:7d:b3:d3:4f: 9a:0c:1b:2c:91:f0:86:74:4f:1b:0e:89:b8:06:88: 67:e3:ad:b3:81:bc:c1:1c:0c:36:cd:a5:09:bb:2a: a4:9b:a8:76:94:93:99:0d:9b:61:f1:de:a3:1e:77: 9c:50:61:fd:ec:3a:eb:49:5f:84:0d:aa:6b:1c:7e: 6f:c0:49:f6:52:d8:93:5e:5f:06:35:12:76:6d:cf: b5:65:d0:97:e7:66:d7:50:6c:45:ac:e0:0d:5f:b6: 99:0e:d3:b3:66:01:e8:a3:24:82:2c:d1:86:1f:cf: 3e:37:36:47:8e:fb:35:dd:2f:20:8c:90:60:d3:dc: 6a:7d:45:a6:c9:57:df:9a:aa:0c:24:9f:8a:07:f4: d5:8f:0d:8b:bb:f8:25:f3:f0:99:4a:45:c3:10:58: 33:ce:79:b1:41:52:78:87:6a:c0:96:37:2b:b6:f6: af:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:45:21:0A:2E:9D:F3:6D:31:54:F6:97:A6:84:85:67:4D:75:3C:F0 X509v3 Authority Key Identifier: keyid:CF:06:31:D3:3A:3C:9D:C5:C4:54:24:D5:5C:3E:76:63:83:86:57:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/CF0631D33A3C9DC5C45424D55C3E7663838657A3.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zwYx0zo8ncXEVCTVXD52Y4OGV6M.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/CF0631D33A3C9DC5C45424D55C3E7663838657A3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:e2:9f:da:b8:c8:c8:8c:23:f5:fd:13:b2:83:12:d1:f4:3a: f0:99:13:51:98:f3:f7:6a:5f:7f:56:d6:63:33:9a:81:9e:b3: 94:72:96:99:a8:0b:15:6b:3c:8b:28:45:be:47:3e:83:0d:85: 19:53:6e:f5:78:55:9d:3b:15:61:a1:ce:ba:e9:66:16:f4:a9: 09:02:3a:d9:4f:41:3e:fc:79:a7:4d:2a:36:11:2b:45:0e:14: d6:90:b0:48:40:83:a7:63:f4:b2:72:67:59:f1:49:5a:62:d1: 5f:6d:7f:9c:eb:5d:7a:25:93:bb:7b:1d:90:1a:d7:11:40:3f: 9e:ab:99:48:ef:89:8d:e5:97:69:39:c0:38:45:1c:76:ee:f3: 28:7c:1d:8d:b6:52:c6:bb:6e:45:41:1a:fe:43:36:40:1d:4f: ec:54:dc:c9:a0:75:a1:a6:b5:3f:0f:d1:0d:bb:f1:85:b9:6e: 6d:fb:ec:d1:4d:1b:b7:71:c3:7f:91:31:d6:61:50:e1:c7:12: b7:1a:12:d5:99:47:cb:91:ab:3d:28:c7:b6:86:b8:e2:fc:65: e4:de:ee:a4:0f:4f:8c:f3:12:51:46:90:81:ca:5f:f1:a6:80: 81:36:3a:59:4b:b6:3a:5d:7f:79:a3:35:3b:87:e6:6c:44:4a: 6d:f0:73:2b -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUUaL9SkPk0j1ODOBk2OPnaniWSlQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoY2YwNjMxZDMzYTNjOWRjNWM0NTQyNGQ1NWMzZTc2NjM4 Mzg2NTdhMzAeFw0yNjExMTQxMTQzMzhaFw0yNjExMTUxMzIxMzhaMDMxMTAvBgNV BAMTKDA4NDUyMTBBMkU5REYzNkQzMTU0RjY5N0E2ODQ4NTY3NEQ3NTNDRjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC582YeeoWd/mpdomVNZR8Ygqg4 gWTGPlbfrQzbry1VKydCOIbxepC2U1AEZeL/TEVU8usIC5gjHrC5U+xBFXLhl6Mn UySzydSu0UpWsOABKknESRvhfbPTT5oMGyyR8IZ0TxsOibgGiGfjrbOBvMEcDDbN pQm7KqSbqHaUk5kNm2Hx3qMed5xQYf3sOutJX4QNqmscfm/ASfZS2JNeXwY1EnZt z7Vl0JfnZtdQbEWs4A1ftpkO07NmAeijJIIs0YYfzz43NkeO+zXdLyCMkGDT3Gp9 RabJV9+aqgwkn4oH9NWPDYu7+CXz8JlKRcMQWDPOebFBUniHasCWNyu29q8lAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUCEUhCi6d820xVPaXpoSFZ011PPAwHwYDVR0j BBgwFoAUzwYx0zo8ncXEVCTVXD52Y4OGV6MwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNjE3MDhhNmItNmMzYS00MGEwLWEzMDItNTk1ZWNjMTc4 NDhjLzIvQ0YwNjMxRDMzQTNDOURDNUM0NTQyNEQ1NUMzRTc2NjM4Mzg2NTdBMy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3p3WXgwem84bmNYRVZDVFZYRDUyWTRP R1Y2TS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS82MTcwOGE2Yi02 YzNhLTQwYTAtYTMwMi01OTVlY2MxNzg0OGMvMi9DRjA2MzFEMzNBM0M5REM1QzQ1 NDI0RDU1QzNFNzY2MzgzODY1N0EzLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmuKf2rjIyIwj9f0TsoMS 0fQ68JkTUZjz92pff1bWYzOagZ6zlHKWmagLFWs8iyhFvkc+gw2FGVNu9XhVnTsV YaHOuulmFvSpCQI62U9BPvx5p00qNhErRQ4U1pCwSECDp2P0snJnWfFJWmLRX21/ nOtdeiWTu3sdkBrXEUA/nquZSO+JjeWXaTnAOEUcdu7zKHwdjbZSxrtuRUEa/kM2 QB1P7FTcyaB1oaa1Pw/RDbvxhblubfvs0U0bt3HDf5Ex1mFQ4ccStxoS1ZlHy5Gr PSjHtoa44vxl5N7upA9PjPMSUUaQgcpf8aaAgTY6WUu2Ol1/eaM1O4fmbERKbfBz Kw== -----END CERTIFICATE-----Generated at Sat Nov 14 20:54:30 2026 by rpki-client