$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/CF0631D33A3C9DC5C45424D55C3E7663838657A3.mft File: CF0631D33A3C9DC5C45424D55C3E7663838657A3.mft (raw, json) Hash identifier: 74qJ25vNG4wcsFKqnJ1z6d999bd+qIE3Z3SPsleU1Ho= Subject key identifier: 93:6B:F4:47:76:35:92:7F:4E:0E:6C:06:17:B9:B6:4E:48:36:3A:50 Authority key identifier: CF:06:31:D3:3A:3C:9D:C5:C4:54:24:D5:5C:3E:76:63:83:86:57:A3 Certificate issuer: /CN=cf0631d33a3c9dc5c45424d55c3e7663838657a3 Certificate serial: 7BA969ABA9DC0BC9EFB047BF4C85E8DF7583AB2E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zwYx0zo8ncXEVCTVXD52Y4OGV6M.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/CF0631D33A3C9DC5C45424D55C3E7663838657A3.mft Manifest number: 0116 Signing time: Wed 13 May 2026 00:17:54 +0000 Manifest this update: Wed 13 May 2026 00:12:54 +0000 Manifest next update: Thu 14 May 2026 00:24:54 +0000 Files and hashes: 1: C972E8671DEDC43FE908B548531C969A051CD34C.cer (hash: d7NBPzoR5U51KQ6xM8aVu3af+Il1XYsfzuoeH65sh5k=) 2: 3138352e33302e3230322e302f32342d3234203d3e203630383630.roa (hash: tBh4T597HLyGCSugLkif66QABd9ufnpWRf3NI++UCNc=) 3: 3130392e37322e3132322e302f32342d3234203d3e203630383630.roa (hash: 2mjBtJiNX2GgtlTBc9elrwUynjPTbiI/Km0f5EIklUM=) 4: CF0631D33A3C9DC5C45424D55C3E7663838657A3.crl (hash: huyNqYKpNdx8+iE5FW228sm1DlI0+D1vX/FDhfP2Bso=) 5: 3138352e33302e3230332e302f32342d3234203d3e203630383630.roa (hash: +hLj8/wzU4ALLxe4Xdt3WSnzJEJQWXiNiu+hY32JK2w=) 6: 3138352e33302e3230302e302f32332d3233203d3e203630383630.roa (hash: EjHevTTMahznqtckt7aLMDXLh3y0kx9bdoI4UFB/hKw=) 7: 38392e3138352e31322e302f32342d3234203d3e203630383630.roa (hash: KsOBm/IW9m6wYWtDKEPIq17pdU+n9YXSV9XxpyK0qLc=) 8: 39332e3138352e3231342e302f32342d3234203d3e203630383630.roa (hash: I4ydkJ2r2j2i1g1xPyPsffo9hUpPo3RLQo6MfTdRh1Q=) 9: 38392e3138352e382e302f32342d3234203d3e203630383630.roa (hash: uuMWj0BWrTugTcot2BIIjLN4CmKo0TjrBWjA0TJKmTM=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/CF0631D33A3C9DC5C45424D55C3E7663838657A3.crl rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/CF0631D33A3C9DC5C45424D55C3E7663838657A3.mft rsync://rpki.ripe.net/repository/DEFAULT/zwYx0zo8ncXEVCTVXD52Y4OGV6M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 13 May 2026 23:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:a9:69:ab:a9:dc:0b:c9:ef:b0:47:bf:4c:85:e8:df:75:83:ab:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cf0631d33a3c9dc5c45424d55c3e7663838657a3 Validity Not Before: May 13 00:12:54 2026 GMT Not After : May 14 00:24:54 2026 GMT Subject: CN=936BF4477635927F4E0E6C0617B9B64E48363A50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:d0:ca:df:7d:6b:30:ab:64:81:27:fe:c5:1f: 33:de:d1:53:56:72:34:91:04:7f:65:95:c4:3b:f3: eb:9a:94:a1:b4:bb:d9:87:eb:b9:81:1f:e7:8c:4c: 7c:b6:00:31:ee:c8:d4:5b:68:0d:63:4b:ea:b2:1e: a5:70:e2:83:44:44:03:ee:97:ff:96:62:d6:7a:2c: 07:4b:5c:d4:a9:5a:ec:35:60:55:81:20:34:a6:b5: a5:f3:6f:0c:b7:7a:ac:7d:16:fc:41:c9:c8:6c:fd: b3:dd:f9:81:27:79:41:4e:25:71:f2:e5:2b:56:ce: ea:d0:c5:07:a1:d4:49:d4:93:34:36:c3:0d:a6:28: 2a:dd:e4:b1:5f:4a:14:59:62:71:7c:6c:fb:1f:83: 1f:6d:f7:37:1c:d6:1a:a7:b2:9e:09:1e:92:9d:06: f9:15:8d:87:4f:23:76:76:a8:cf:74:d7:d2:03:79: 2e:9e:eb:d8:b7:21:8f:a1:34:a7:16:9e:13:d0:1b: f3:9d:08:ae:66:cd:da:73:65:2c:35:61:42:4c:ce: 1d:24:18:b8:49:6e:4e:d8:71:05:4a:13:e2:43:e3: 4e:37:9b:72:97:b0:68:f8:47:ed:97:c0:17:7c:37: 06:4e:e7:7f:df:57:cc:01:9e:01:a5:af:89:e4:69: b0:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:6B:F4:47:76:35:92:7F:4E:0E:6C:06:17:B9:B6:4E:48:36:3A:50 X509v3 Authority Key Identifier: keyid:CF:06:31:D3:3A:3C:9D:C5:C4:54:24:D5:5C:3E:76:63:83:86:57:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/CF0631D33A3C9DC5C45424D55C3E7663838657A3.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zwYx0zo8ncXEVCTVXD52Y4OGV6M.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/CF0631D33A3C9DC5C45424D55C3E7663838657A3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:fe:b9:d0:54:69:7f:73:81:17:76:28:f0:ef:da:64:52:dc: 5b:2e:e3:3e:69:79:67:67:49:2b:65:32:d3:16:1b:b9:1c:6c: 89:18:ee:ca:f1:04:ae:7b:1d:e9:ce:21:04:10:11:74:44:d9: 0b:bc:2f:46:71:ec:27:a3:47:c7:69:13:e8:fd:95:11:6b:d1: 41:95:e8:71:b7:b3:4a:86:d0:19:95:15:3f:34:e3:41:80:f3: 64:fd:a5:84:f9:e8:ab:f2:f1:21:2e:16:4c:a6:b0:2b:f4:3b: 81:99:c0:1d:ee:79:72:e8:aa:62:c4:12:4d:e1:ac:57:60:9b: 6c:af:54:a8:85:59:e3:a0:c7:fc:db:0f:29:cf:77:46:4c:8b: fd:eb:8e:ed:3f:69:e8:44:ac:3f:67:b9:ef:5d:b3:8c:72:1f: 71:9a:3c:67:98:af:d5:d9:a2:9c:0d:dc:d1:2a:ba:b8:87:b0: 00:b5:7f:fb:fb:a8:c1:78:8d:22:aa:03:a9:4e:4b:7a:1c:b9: b5:99:ac:e8:a5:89:a1:d4:ad:7e:87:b7:9b:9d:1c:83:f3:f5: 79:ae:dc:69:be:a6:04:36:42:4b:08:ab:4a:c7:c7:35:4d:b3: c1:c0:d3:c2:32:de:b5:62:05:a1:11:b7:06:ed:f4:7c:c8:01: 89:79:43:2d -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUe6lpq6ncC8nvsEe/TIXo33WDqy4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoY2YwNjMxZDMzYTNjOWRjNWM0NTQyNGQ1NWMzZTc2NjM4 Mzg2NTdhMzAeFw0yNjA1MTMwMDEyNTRaFw0yNjA1MTQwMDI0NTRaMDMxMTAvBgNV BAMTKDkzNkJGNDQ3NzYzNTkyN0Y0RTBFNkMwNjE3QjlCNjRFNDgzNjNBNTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCu0MrffWswq2SBJ/7FHzPe0VNW cjSRBH9llcQ78+ualKG0u9mH67mBH+eMTHy2ADHuyNRbaA1jS+qyHqVw4oNERAPu l/+WYtZ6LAdLXNSpWuw1YFWBIDSmtaXzbwy3eqx9FvxBychs/bPd+YEneUFOJXHy 5StWzurQxQeh1EnUkzQ2ww2mKCrd5LFfShRZYnF8bPsfgx9t9zcc1hqnsp4JHpKd BvkVjYdPI3Z2qM9019IDeS6e69i3IY+hNKcWnhPQG/OdCK5mzdpzZSw1YUJMzh0k GLhJbk7YcQVKE+JD4043m3KXsGj4R+2XwBd8NwZO53/fV8wBngGlr4nkabAJAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUk2v0R3Y1kn9ODmwGF7m2Tkg2OlAwHwYDVR0j BBgwFoAUzwYx0zo8ncXEVCTVXD52Y4OGV6MwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNjE3MDhhNmItNmMzYS00MGEwLWEzMDItNTk1ZWNjMTc4 NDhjLzIvQ0YwNjMxRDMzQTNDOURDNUM0NTQyNEQ1NUMzRTc2NjM4Mzg2NTdBMy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3p3WXgwem84bmNYRVZDVFZYRDUyWTRP R1Y2TS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS82MTcwOGE2Yi02 YzNhLTQwYTAtYTMwMi01OTVlY2MxNzg0OGMvMi9DRjA2MzFEMzNBM0M5REM1QzQ1 NDI0RDU1QzNFNzY2MzgzODY1N0EzLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN/650FRpf3OBF3Yo8O/a ZFLcWy7jPml5Z2dJK2Uy0xYbuRxsiRjuyvEErnsd6c4hBBARdETZC7wvRnHsJ6NH x2kT6P2VEWvRQZXocbezSobQGZUVPzTjQYDzZP2lhPnoq/LxIS4WTKawK/Q7gZnA He55cuiqYsQSTeGsV2CbbK9UqIVZ46DH/NsPKc93RkyL/euO7T9p6ESsP2e5712z jHIfcZo8Z5iv1dminA3c0Sq6uIewALV/+/uowXiNIqoDqU5Lehy5tZms6KWJodSt foe3m50cg/P1ea7cab6mBDZCSwirSsfHNU2zwcDTwjLetWIFoRG3Bu30fMgBiXlD LQ== -----END CERTIFICATE-----Generated at Wed May 13 04:11:13 2026 by rpki-client