$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/4/D18F31B98ED35EC23BE81C3FFFEFD1A354DAD96A.mft File: D18F31B98ED35EC23BE81C3FFFEFD1A354DAD96A.mft (raw, json) Hash identifier: GKL8PzBUxJ2KRWg3YNxebqMUfjA2B8eJrFGg5+bA8mM= Subject key identifier: 31:1D:58:E4:21:4E:AB:0F:8C:26:E9:47:D6:BE:E7:A1:71:A3:55:BF Authority key identifier: D1:8F:31:B9:8E:D3:5E:C2:3B:E8:1C:3F:FF:EF:D1:A3:54:DA:D9:6A Certificate issuer: /CN=d18f31b98ed35ec23be81c3fffefd1a354dad96a Certificate serial: 2BEAB386C587522EC101C5379C95528328BBFE8F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Y8xuY7TXsI76Bw__-_Ro1Ta2Wo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/4/D18F31B98ED35EC23BE81C3FFFEFD1A354DAD96A.mft Manifest number: F2 Signing time: Tue 12 May 2026 06:57:54 +0000 Manifest this update: Tue 12 May 2026 06:52:54 +0000 Manifest next update: Wed 13 May 2026 09:56:54 +0000 Files and hashes: 1: 3139332e3130362e36342e302f32342d3234203d3e203630383630.roa (hash: G3H4jbMqiw5DQSMLQn1fJ6uJtDMGKpTXzheKy4E+Q/Y=) 2: 3139332e3130362e36352e302f32342d3234203d3e203630383630.roa (hash: fqNRaoLtdl8BsIrfiu4PvyRr6AhuFheEHGA8K066NQ0=) 3: D18F31B98ED35EC23BE81C3FFFEFD1A354DAD96A.crl (hash: YlHx+zD5m8YEY3HbcQe0TzWYQCxGHaXVPniIHJVCzWI=) 4: 3139332e3130362e36362e302f32342d3234203d3e203630383630.roa (hash: 6C7y+fYBD1VfGU5aOUC6YEoLG1qQiLffBU7c4ztP4Ek=) 5: 3139332e3130362e36372e302f32342d3234203d3e203630383630.roa (hash: AR/qw0HziLw8HHdQriZPc+gMCtTCe+FKN/BuvJjupJg=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/4/D18F31B98ED35EC23BE81C3FFFEFD1A354DAD96A.crl rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/4/D18F31B98ED35EC23BE81C3FFFEFD1A354DAD96A.mft rsync://rpki.ripe.net/repository/DEFAULT/0Y8xuY7TXsI76Bw__-_Ro1Ta2Wo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 13 May 2026 09:56:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:ea:b3:86:c5:87:52:2e:c1:01:c5:37:9c:95:52:83:28:bb:fe:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d18f31b98ed35ec23be81c3fffefd1a354dad96a Validity Not Before: May 12 06:52:54 2026 GMT Not After : May 13 09:56:54 2026 GMT Subject: CN=311D58E4214EAB0F8C26E947D6BEE7A171A355BF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:61:e2:ec:ee:bd:6c:62:40:0f:7e:82:67:0f: 3f:e2:df:0c:1a:ab:e7:49:a0:0d:a4:6a:27:25:73: d0:e9:c4:3b:69:89:f2:26:01:53:08:2b:68:e8:4d: bc:8d:5a:5d:09:72:0d:22:c0:68:d6:96:cc:0a:2f: e0:92:c7:9f:4b:ac:97:91:20:8d:30:d8:9d:36:10: e6:a7:3f:2e:75:ba:ce:72:1a:e1:dd:8b:8a:b0:67: e3:83:16:a6:16:27:0f:a3:40:c3:3d:ee:7d:8f:6e: db:4c:08:6e:9b:6f:98:b6:10:58:b2:4d:c4:32:75: a5:a1:47:6e:c0:8c:64:5b:1e:a2:8e:b6:4c:72:05: 7f:bf:74:83:3b:33:94:f5:d4:a0:76:85:51:b3:52: 28:c4:ef:4f:85:fb:ce:e0:76:d8:97:7c:7c:35:b0: 41:42:7a:2e:1b:8d:fa:6c:ef:24:0b:ea:bb:8a:89: a9:61:48:1c:76:01:4a:96:ba:b5:82:75:c3:8f:98: e0:b5:7b:2a:f9:d6:94:d2:71:26:63:11:42:b8:18: 55:d2:22:f3:48:ba:e9:d5:fa:f2:28:48:51:f9:0f: 91:00:6b:08:ca:63:ed:4a:8c:82:82:9a:a0:7d:a4: 9f:54:0d:1b:e1:a5:05:4c:2a:79:ee:a7:86:15:cc: 49:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:1D:58:E4:21:4E:AB:0F:8C:26:E9:47:D6:BE:E7:A1:71:A3:55:BF X509v3 Authority Key Identifier: keyid:D1:8F:31:B9:8E:D3:5E:C2:3B:E8:1C:3F:FF:EF:D1:A3:54:DA:D9:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/4/D18F31B98ED35EC23BE81C3FFFEFD1A354DAD96A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Y8xuY7TXsI76Bw__-_Ro1Ta2Wo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/4/D18F31B98ED35EC23BE81C3FFFEFD1A354DAD96A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:f7:f9:50:c1:ae:b7:4e:ba:0f:23:fa:b3:e0:d5:6d:4e:f7: 75:74:6d:7c:7d:18:9b:07:9a:66:91:e7:2f:da:d8:5e:e3:9c: c6:35:f1:ac:af:c4:09:08:6a:4d:ef:0b:dd:98:3e:67:ef:1e: 97:b5:5b:74:f3:78:ec:5c:cd:37:80:a6:33:4f:0e:b7:bf:4a: da:55:ec:f8:a7:49:89:8c:ab:8e:7b:55:07:a4:ff:8c:a5:5e: 6f:34:78:e0:c5:ff:c7:8d:e7:98:42:c3:ab:f1:12:14:4a:55: ca:fd:9e:c4:df:1c:e8:c2:8d:7f:76:8a:c1:39:9d:57:40:aa: 95:e2:b3:07:90:44:81:fa:15:61:c7:10:9b:e1:45:41:48:be: 25:d3:e5:e0:09:29:67:99:65:99:93:e1:07:9e:ab:98:c0:9d: 17:34:23:21:91:8a:77:67:d7:5a:c3:a4:c6:f2:96:6e:ef:2f: 5e:60:0d:04:3f:0c:b5:05:f4:74:aa:db:c5:80:0b:b4:c4:40: 43:53:b5:6a:9c:a2:eb:24:6d:d8:6b:6d:be:af:a1:b5:9e:ca: 89:69:13:80:fe:23:2f:b8:c6:dc:d0:70:6b:ac:b1:b3:4f:c0: 5d:13:02:ff:d5:30:dc:c8:36:d5:32:78:b4:55:fa:64:e3:9a: ef:57:e2:fe -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUK+qzhsWHUi7BAcU3nJVSgyi7/o8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoZDE4ZjMxYjk4ZWQzNWVjMjNiZTgxYzNmZmZlZmQxYTM1 NGRhZDk2YTAeFw0yNjA1MTIwNjUyNTRaFw0yNjA1MTMwOTU2NTRaMDMxMTAvBgNV BAMTKDMxMUQ1OEU0MjE0RUFCMEY4QzI2RTk0N0Q2QkVFN0ExNzFBMzU1QkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCQYeLs7r1sYkAPfoJnDz/i3wwa q+dJoA2kaiclc9DpxDtpifImAVMIK2joTbyNWl0Jcg0iwGjWlswKL+CSx59LrJeR II0w2J02EOanPy51us5yGuHdi4qwZ+ODFqYWJw+jQMM97n2PbttMCG6bb5i2EFiy TcQydaWhR27AjGRbHqKOtkxyBX+/dIM7M5T11KB2hVGzUijE70+F+87gdtiXfHw1 sEFCei4bjfps7yQL6ruKialhSBx2AUqWurWCdcOPmOC1eyr51pTScSZjEUK4GFXS IvNIuunV+vIoSFH5D5EAawjKY+1KjIKCmqB9pJ9UDRvhpQVMKnnup4YVzEm1AgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUMR1Y5CFOqw+MJulH1r7noXGjVb8wHwYDVR0j BBgwFoAU0Y8xuY7TXsI76Bw//+/Ro1Ta2WowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNjE3MDhhNmItNmMzYS00MGEwLWEzMDItNTk1ZWNjMTc4 NDhjLzQvRDE4RjMxQjk4RUQzNUVDMjNCRTgxQzNGRkZFRkQxQTM1NERBRDk2QS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzBZOHh1WTdUWHNJNzZCd19fLV9SbzFU YTJXby5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS82MTcwOGE2Yi02 YzNhLTQwYTAtYTMwMi01OTVlY2MxNzg0OGMvNC9EMThGMzFCOThFRDM1RUMyM0JF ODFDM0ZGRkVGRDFBMzU0REFEOTZBLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAg/f5UMGut066DyP6s+DV bU73dXRtfH0YmweaZpHnL9rYXuOcxjXxrK/ECQhqTe8L3Zg+Z+8el7VbdPN47FzN N4CmM08Ot79K2lXs+KdJiYyrjntVB6T/jKVebzR44MX/x43nmELDq/ESFEpVyv2e xN8c6MKNf3aKwTmdV0CqleKzB5BEgfoVYccQm+FFQUi+JdPl4AkpZ5llmZPhB56r mMCdFzQjIZGKd2fXWsOkxvKWbu8vXmANBD8MtQX0dKrbxYALtMRAQ1O1apyi6yRt 2Gttvq+htZ7KiWkTgP4jL7jG3NBwa6yxs0/AXRMC/9Uw3Mg21TJ4tFX6ZOOa71fi /g== -----END CERTIFICATE-----Generated at Tue May 12 21:55:45 2026 by rpki-client