$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/4/D18F31B98ED35EC23BE81C3FFFEFD1A354DAD96A.mft File: D18F31B98ED35EC23BE81C3FFFEFD1A354DAD96A.mft (raw, json) Hash identifier: bIteB3uv7E+54nkUJyhhPiRRCMtOV4M9AkKmzbYyMQ4= Subject key identifier: E8:48:F8:EE:92:78:00:9C:DC:F3:DB:3C:4C:AD:1F:71:5D:08:5E:F4 Authority key identifier: D1:8F:31:B9:8E:D3:5E:C2:3B:E8:1C:3F:FF:EF:D1:A3:54:DA:D9:6A Certificate issuer: /CN=d18f31b98ed35ec23be81c3fffefd1a354dad96a Certificate serial: 1531C154B0CB55E54CA9AA3D72302C174C06321B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Y8xuY7TXsI76Bw__-_Ro1Ta2Wo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/4/D18F31B98ED35EC23BE81C3FFFEFD1A354DAD96A.mft Manifest number: B0 Signing time: Wed 25 Mar 2026 15:28:34 +0000 Manifest this update: Wed 25 Mar 2026 15:23:34 +0000 Manifest next update: Thu 26 Mar 2026 18:28:34 +0000 Files and hashes: 1: D18F31B98ED35EC23BE81C3FFFEFD1A354DAD96A.crl (hash: 4Br8Gp117BfudsH40ItBndW2A6+DQIyDB4pSzN1D7HA=) 2: 3139332e3130362e36342e302f32342d3234203d3e203630383630.roa (hash: G3H4jbMqiw5DQSMLQn1fJ6uJtDMGKpTXzheKy4E+Q/Y=) 3: 3139332e3130362e36352e302f32342d3234203d3e203630383630.roa (hash: fqNRaoLtdl8BsIrfiu4PvyRr6AhuFheEHGA8K066NQ0=) 4: 3139332e3130362e36372e302f32342d3234203d3e203630383630.roa (hash: AR/qw0HziLw8HHdQriZPc+gMCtTCe+FKN/BuvJjupJg=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/4/D18F31B98ED35EC23BE81C3FFFEFD1A354DAD96A.crl rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/4/D18F31B98ED35EC23BE81C3FFFEFD1A354DAD96A.mft rsync://rpki.ripe.net/repository/DEFAULT/0Y8xuY7TXsI76Bw__-_Ro1Ta2Wo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 26 Mar 2026 18:28:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:31:c1:54:b0:cb:55:e5:4c:a9:aa:3d:72:30:2c:17:4c:06:32:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d18f31b98ed35ec23be81c3fffefd1a354dad96a Validity Not Before: Mar 25 15:23:34 2026 GMT Not After : Mar 26 18:28:34 2026 GMT Subject: CN=E848F8EE9278009CDCF3DB3C4CAD1F715D085EF4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:40:57:eb:24:ce:6f:ad:d6:7d:a3:27:1b:a9: ba:6e:05:c6:50:ca:e5:9d:80:06:ab:d9:39:17:a2: 26:53:ab:be:ed:6e:1e:d3:53:ce:d4:55:ab:64:14: 24:77:f0:f4:a3:14:39:a3:c6:a4:8a:29:88:86:3f: 1f:0e:bf:cd:b6:1e:2a:bc:50:3c:df:02:86:03:a0: 64:5f:98:8e:bc:3b:11:b9:cd:32:7d:a1:70:0a:a9: 1d:49:ab:42:31:c6:2b:55:a4:fa:50:94:24:d9:cb: a7:87:de:a0:b8:6d:34:44:13:bf:c7:3d:74:b9:ad: 95:e7:a0:aa:61:99:7a:5a:52:8c:eb:d0:f8:da:70: 35:01:1c:df:10:41:6e:cf:e1:a9:eb:1b:ee:87:05: 8f:0f:e4:00:c6:0c:0e:ff:3b:45:2d:94:62:e0:01: f9:c6:e7:ce:cc:ea:02:da:a6:42:e0:5c:5c:e6:1e: 2a:81:5a:66:e1:f2:c0:d2:a8:30:e4:7e:22:af:ba: e9:d5:c7:2d:b6:fc:a1:91:89:bd:98:29:8c:8a:59: 92:a6:e0:8c:97:6f:7e:5e:e7:f0:d9:b9:9e:fb:03: 7e:36:bd:bb:75:22:7d:a7:df:e5:b8:31:0e:78:70: 4f:57:19:49:f0:96:e6:ea:11:b3:c1:f7:40:1c:52: c9:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:48:F8:EE:92:78:00:9C:DC:F3:DB:3C:4C:AD:1F:71:5D:08:5E:F4 X509v3 Authority Key Identifier: keyid:D1:8F:31:B9:8E:D3:5E:C2:3B:E8:1C:3F:FF:EF:D1:A3:54:DA:D9:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/4/D18F31B98ED35EC23BE81C3FFFEFD1A354DAD96A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Y8xuY7TXsI76Bw__-_Ro1Ta2Wo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/4/D18F31B98ED35EC23BE81C3FFFEFD1A354DAD96A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:87:25:78:d7:b8:87:7b:f0:c5:0a:c3:39:96:4e:e9:50:d9: 67:50:a4:20:22:fe:57:d3:23:ac:1c:62:1f:74:04:b6:d6:fb: 58:d5:ae:6c:7d:f1:b6:ce:0d:7c:c2:41:e3:a9:2d:2a:fa:a6: 12:03:56:87:3f:5b:16:90:35:e2:c1:27:a3:e9:f6:15:bf:8f: 10:dd:77:ff:06:58:9b:f3:76:2d:8c:3e:c3:ea:7b:e8:e9:d9: 35:ba:3e:5f:55:81:df:5b:df:45:6f:af:bd:5d:e9:49:9c:7a: c1:77:d8:5c:20:49:fa:c4:6b:30:a3:9c:8d:f2:31:c5:29:44: ae:73:f1:19:e1:14:af:be:43:a4:29:40:0d:7c:7e:d6:ae:80: 4a:a5:91:9b:fa:73:41:72:f9:96:5b:54:83:35:13:69:57:6a: 89:0f:54:96:47:05:f5:0b:d8:89:0d:df:b6:60:d6:3a:91:53: 62:8b:0b:50:6d:62:7c:40:82:4f:f6:40:27:d0:3d:9b:5a:44: 6c:87:ce:32:35:1d:7f:83:56:42:6a:b5:a2:2e:e2:7e:41:72: fa:19:35:76:f6:65:0f:e3:10:ef:2c:73:d3:80:e4:1a:78:79: ad:54:35:a8:43:80:c6:77:cd:a1:73:10:e5:79:91:6f:f4:80: 18:a6:71:f0 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUFTHBVLDLVeVMqao9cjAsF0wGMhswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoZDE4ZjMxYjk4ZWQzNWVjMjNiZTgxYzNmZmZlZmQxYTM1 NGRhZDk2YTAeFw0yNjAzMjUxNTIzMzRaFw0yNjAzMjYxODI4MzRaMDMxMTAvBgNV BAMTKEU4NDhGOEVFOTI3ODAwOUNEQ0YzREIzQzRDQUQxRjcxNUQwODVFRjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXQFfrJM5vrdZ9oycbqbpuBcZQ yuWdgAar2TkXoiZTq77tbh7TU87UVatkFCR38PSjFDmjxqSKKYiGPx8Ov822Hiq8 UDzfAoYDoGRfmI68OxG5zTJ9oXAKqR1Jq0IxxitVpPpQlCTZy6eH3qC4bTREE7/H PXS5rZXnoKphmXpaUozr0PjacDUBHN8QQW7P4anrG+6HBY8P5ADGDA7/O0UtlGLg AfnG587M6gLapkLgXFzmHiqBWmbh8sDSqDDkfiKvuunVxy22/KGRib2YKYyKWZKm 4IyXb35e5/DZuZ77A342vbt1In2n3+W4MQ54cE9XGUnwlubqEbPB90AcUsldAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQU6Ej47pJ4AJzc89s8TK0fcV0IXvQwHwYDVR0j BBgwFoAU0Y8xuY7TXsI76Bw//+/Ro1Ta2WowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNjE3MDhhNmItNmMzYS00MGEwLWEzMDItNTk1ZWNjMTc4 NDhjLzQvRDE4RjMxQjk4RUQzNUVDMjNCRTgxQzNGRkZFRkQxQTM1NERBRDk2QS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzBZOHh1WTdUWHNJNzZCd19fLV9SbzFU YTJXby5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS82MTcwOGE2Yi02 YzNhLTQwYTAtYTMwMi01OTVlY2MxNzg0OGMvNC9EMThGMzFCOThFRDM1RUMyM0JF ODFDM0ZGRkVGRDFBMzU0REFEOTZBLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARIcleNe4h3vwxQrDOZZO 6VDZZ1CkICL+V9MjrBxiH3QEttb7WNWubH3xts4NfMJB46ktKvqmEgNWhz9bFpA1 4sEno+n2Fb+PEN13/wZYm/N2LYw+w+p76OnZNbo+X1WB31vfRW+vvV3pSZx6wXfY XCBJ+sRrMKOcjfIxxSlErnPxGeEUr75DpClADXx+1q6ASqWRm/pzQXL5lltUgzUT aVdqiQ9UlkcF9QvYiQ3ftmDWOpFTYosLUG1ifECCT/ZAJ9A9m1pEbIfOMjUdf4NW Qmq1oi7ifkFy+hk1dvZlD+MQ7yxz04DkGnh5rVQ1qEOAxnfNoXMQ5XmRb/SAGKZx 8A== -----END CERTIFICATE-----Generated at Thu Mar 26 04:30:44 2026 by rpki-client