$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/CF0631D33A3C9DC5C45424D55C3E7663838657A3.mft File: CF0631D33A3C9DC5C45424D55C3E7663838657A3.mft (raw, json) Hash identifier: 3tnzNqkwbXOmaRetoO1mZq4/aZo9fFkQJQtXKv1Ad94= Subject key identifier: AC:1A:29:BC:66:70:41:31:17:3E:15:4C:F6:86:38:0D:04:A1:15:F0 Authority key identifier: CF:06:31:D3:3A:3C:9D:C5:C4:54:24:D5:5C:3E:76:63:83:86:57:A3 Certificate issuer: /CN=cf0631d33a3c9dc5c45424d55c3e7663838657a3 Certificate serial: 79FC87E0CB448B23C7BB57AEDDB531D4FABB3EA7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zwYx0zo8ncXEVCTVXD52Y4OGV6M.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/CF0631D33A3C9DC5C45424D55C3E7663838657A3.mft Manifest number: D3 Signing time: Wed 25 Mar 2026 09:48:34 +0000 Manifest this update: Wed 25 Mar 2026 09:43:34 +0000 Manifest next update: Thu 26 Mar 2026 12:51:34 +0000 Files and hashes: 1: 38392e3138352e31322e302f32342d3234203d3e203630383630.roa (hash: KsOBm/IW9m6wYWtDKEPIq17pdU+n9YXSV9XxpyK0qLc=) 2: C972E8671DEDC43FE908B548531C969A051CD34C.cer (hash: d7NBPzoR5U51KQ6xM8aVu3af+Il1XYsfzuoeH65sh5k=) 3: 39332e3138352e3231342e302f32342d3234203d3e203630383630.roa (hash: I4ydkJ2r2j2i1g1xPyPsffo9hUpPo3RLQo6MfTdRh1Q=) 4: 3130392e37322e3132322e302f32342d3234203d3e203630383630.roa (hash: 2mjBtJiNX2GgtlTBc9elrwUynjPTbiI/Km0f5EIklUM=) 5: 38392e3138352e382e302f32342d3234203d3e203630383630.roa (hash: uuMWj0BWrTugTcot2BIIjLN4CmKo0TjrBWjA0TJKmTM=) 6: 3138352e33302e3230302e302f32332d3233203d3e203630383630.roa (hash: EjHevTTMahznqtckt7aLMDXLh3y0kx9bdoI4UFB/hKw=) 7: 3138352e33302e3230322e302f32342d3234203d3e203630383630.roa (hash: tBh4T597HLyGCSugLkif66QABd9ufnpWRf3NI++UCNc=) 8: 3138352e33302e3230332e302f32342d3234203d3e203630383630.roa (hash: +hLj8/wzU4ALLxe4Xdt3WSnzJEJQWXiNiu+hY32JK2w=) 9: CF0631D33A3C9DC5C45424D55C3E7663838657A3.crl (hash: SM4VtU69+7CvzsEwSoLGaoPix8HqxBvx4avGquCt9d0=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/CF0631D33A3C9DC5C45424D55C3E7663838657A3.crl rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/CF0631D33A3C9DC5C45424D55C3E7663838657A3.mft rsync://rpki.ripe.net/repository/DEFAULT/zwYx0zo8ncXEVCTVXD52Y4OGV6M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 26 Mar 2026 12:51:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:fc:87:e0:cb:44:8b:23:c7:bb:57:ae:dd:b5:31:d4:fa:bb:3e:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cf0631d33a3c9dc5c45424d55c3e7663838657a3 Validity Not Before: Mar 25 09:43:34 2026 GMT Not After : Mar 26 12:51:34 2026 GMT Subject: CN=AC1A29BC66704131173E154CF686380D04A115F0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:93:e7:37:c9:e7:b7:6f:33:d3:81:9b:44:f2: 5b:7b:73:b9:56:ef:33:48:7f:33:5f:ba:34:37:69: a0:16:21:ec:50:14:f4:31:3d:bf:16:a1:5d:9b:4a: fd:76:2a:9a:95:94:30:2d:82:98:f9:94:d1:aa:e9: db:89:9b:6b:ab:59:a4:58:4d:f4:c2:cb:0b:e3:86: c4:09:81:c4:94:f0:1e:56:7d:5b:82:f8:31:92:6c: ca:59:6f:34:6c:9e:0f:8d:3c:72:1a:91:7f:8b:14: 6a:8e:03:37:b3:cf:28:ac:44:fa:ee:fe:43:c1:90: 52:9f:4c:bd:3f:87:d3:6f:31:b5:ea:8d:cd:de:fe: b1:43:5c:34:70:5a:38:93:5f:ba:70:57:f3:79:c2: 82:55:31:04:03:ea:39:e8:82:90:59:36:68:93:a3: 50:3d:3b:8e:f1:ff:dc:16:9c:a1:ae:f4:a9:21:72: 62:60:20:51:b8:ba:8b:0a:0b:fb:79:ee:f3:e1:b6: 20:c4:55:59:fe:e1:f7:50:25:55:8a:21:6f:9d:6b: 52:27:18:95:ea:c1:59:9f:d3:8e:af:2b:65:c5:79: ff:37:f1:59:ad:bc:f4:a1:ae:a2:e8:44:fc:df:b7: 98:6f:10:bb:f7:b6:c6:e2:2b:0c:ed:b7:c7:2a:69: 28:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:1A:29:BC:66:70:41:31:17:3E:15:4C:F6:86:38:0D:04:A1:15:F0 X509v3 Authority Key Identifier: keyid:CF:06:31:D3:3A:3C:9D:C5:C4:54:24:D5:5C:3E:76:63:83:86:57:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/CF0631D33A3C9DC5C45424D55C3E7663838657A3.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zwYx0zo8ncXEVCTVXD52Y4OGV6M.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/CF0631D33A3C9DC5C45424D55C3E7663838657A3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:dd:36:e0:0c:e3:56:2a:94:05:b8:28:a2:40:e8:57:e1:5f: a5:5c:d6:38:54:9e:6a:a3:45:ee:b4:cc:ea:21:52:11:3d:4d: f0:6d:b6:19:17:ba:6c:a6:3e:1b:06:fd:19:c5:16:eb:69:64: f4:73:c2:83:f4:aa:08:bb:cb:58:8a:8f:4a:85:80:6f:42:72: 61:9c:c3:9f:44:24:78:87:b3:47:ce:70:a0:20:83:7a:ba:83: 81:be:ed:75:45:d7:d6:a5:95:54:f6:17:35:58:79:49:4f:97: 62:74:c5:cb:4d:71:bf:24:a6:cf:d2:d7:9c:90:81:a8:31:88: 37:37:18:82:e8:26:52:dc:7a:c8:d8:92:e3:71:4a:4c:d7:3f: b5:d2:03:c0:29:07:1d:e6:69:1a:6c:8c:1e:01:be:2e:24:f3: f1:cd:66:d3:cb:32:c8:34:be:93:2d:42:06:49:fd:08:55:4d: 0d:44:de:94:85:77:90:e5:bc:c9:dd:c9:1c:53:a9:2f:d4:59: 87:d7:a1:f2:69:ce:e5:10:b5:7c:7c:6f:3b:a6:45:5b:5b:66: fe:18:ae:88:23:2d:64:75:65:7c:33:cc:8e:05:3e:4b:fb:e8: ae:63:66:01:37:7f:a0:0d:ac:89:6c:75:76:3a:90:e7:69:42: f6:fb:67:01 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUefyH4MtEiyPHu1eu3bUx1Pq7PqcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoY2YwNjMxZDMzYTNjOWRjNWM0NTQyNGQ1NWMzZTc2NjM4 Mzg2NTdhMzAeFw0yNjAzMjUwOTQzMzRaFw0yNjAzMjYxMjUxMzRaMDMxMTAvBgNV BAMTKEFDMUEyOUJDNjY3MDQxMzExNzNFMTU0Q0Y2ODYzODBEMDRBMTE1RjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRk+c3yee3bzPTgZtE8lt7c7lW 7zNIfzNfujQ3aaAWIexQFPQxPb8WoV2bSv12KpqVlDAtgpj5lNGq6duJm2urWaRY TfTCywvjhsQJgcSU8B5WfVuC+DGSbMpZbzRsng+NPHIakX+LFGqOAzezzyisRPru /kPBkFKfTL0/h9NvMbXqjc3e/rFDXDRwWjiTX7pwV/N5woJVMQQD6jnogpBZNmiT o1A9O47x/9wWnKGu9KkhcmJgIFG4uosKC/t57vPhtiDEVVn+4fdQJVWKIW+da1In GJXqwVmf046vK2XFef838VmtvPShrqLoRPzft5hvELv3tsbiKwztt8cqaShdAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUrBopvGZwQTEXPhVM9oY4DQShFfAwHwYDVR0j BBgwFoAUzwYx0zo8ncXEVCTVXD52Y4OGV6MwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNjE3MDhhNmItNmMzYS00MGEwLWEzMDItNTk1ZWNjMTc4 NDhjLzIvQ0YwNjMxRDMzQTNDOURDNUM0NTQyNEQ1NUMzRTc2NjM4Mzg2NTdBMy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3p3WXgwem84bmNYRVZDVFZYRDUyWTRP R1Y2TS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS82MTcwOGE2Yi02 YzNhLTQwYTAtYTMwMi01OTVlY2MxNzg0OGMvMi9DRjA2MzFEMzNBM0M5REM1QzQ1 NDI0RDU1QzNFNzY2MzgzODY1N0EzLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG9024AzjViqUBbgookDo V+FfpVzWOFSeaqNF7rTM6iFSET1N8G22GRe6bKY+Gwb9GcUW62lk9HPCg/SqCLvL WIqPSoWAb0JyYZzDn0QkeIezR85woCCDerqDgb7tdUXX1qWVVPYXNVh5SU+XYnTF y01xvySmz9LXnJCBqDGINzcYgugmUtx6yNiS43FKTNc/tdIDwCkHHeZpGmyMHgG+ LiTz8c1m08syyDS+ky1CBkn9CFVNDUTelIV3kOW8yd3JHFOpL9RZh9eh8mnO5RC1 fHxvO6ZFW1tm/hiuiCMtZHVlfDPMjgU+S/vormNmATd/oA2siWx1djqQ52lC9vtn AQ== -----END CERTIFICATE-----Generated at Wed Mar 25 23:01:27 2026 by rpki-client