$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ebb6890d-0d6b-4ea9-a2ef-92d34a3ae64d/0/31F76CE2EF4D020F925E37D7A9D8E35398C7C017.mft File: 31F76CE2EF4D020F925E37D7A9D8E35398C7C017.mft (raw, json) Hash identifier: 3yYv0blmuByn+fK6ty1iOllVfc7flyJWH4BW9VCbSFc= Subject key identifier: A8:12:F9:16:A8:F6:84:75:6A:EF:8A:13:10:16:AA:B6:63:43:51:8A Authority key identifier: 31:F7:6C:E2:EF:4D:02:0F:92:5E:37:D7:A9:D8:E3:53:98:C7:C0:17 Certificate issuer: /CN=31F76CE2EF4D020F925E37D7A9D8E35398C7C017 Certificate serial: 5B78428043D49CE7C6428C961277EC43EBF3E4CE Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/31F76CE2EF4D020F925E37D7A9D8E35398C7C017.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ebb6890d-0d6b-4ea9-a2ef-92d34a3ae64d/0/31F76CE2EF4D020F925E37D7A9D8E35398C7C017.mft Manifest number: 017C Signing time: Thu 23 Jul 2026 19:35:59 +0000 Manifest this update: Thu 23 Jul 2026 19:30:59 +0000 Manifest next update: Fri 24 Jul 2026 22:35:59 +0000 Files and hashes: 1: 326131343a373538313a3738363a3a2f34382d3438203d3e20323034383731.roa (hash: d7JuEn5B8KAwVz8SpkU4AMcAJkaWbbl+bWkksQthj/k=) 2: 31F76CE2EF4D020F925E37D7A9D8E35398C7C017.crl (hash: mnTP6bAuzco0T9dQnRBpluUr/ojAxwgcvD83scg/VK4=) 3: 326131343a373538313a3730303a3a2f34382d3438203d3e20323034383731.roa (hash: u8e0eoyomRFMkD/JcQQfwJ+uqGsBt5QX6wzg4Fq5J9M=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ebb6890d-0d6b-4ea9-a2ef-92d34a3ae64d/0/31F76CE2EF4D020F925E37D7A9D8E35398C7C017.crl rsync://rsync.paas.rpki.ripe.net/repository/ebb6890d-0d6b-4ea9-a2ef-92d34a3ae64d/0/31F76CE2EF4D020F925E37D7A9D8E35398C7C017.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/31F76CE2EF4D020F925E37D7A9D8E35398C7C017.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 24 Jul 2026 22:35:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:78:42:80:43:d4:9c:e7:c6:42:8c:96:12:77:ec:43:eb:f3:e4:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=31F76CE2EF4D020F925E37D7A9D8E35398C7C017 Validity Not Before: Jul 23 19:30:59 2026 GMT Not After : Jul 24 22:35:59 2026 GMT Subject: CN=A812F916A8F684756AEF8A131016AAB66343518A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:ea:08:db:f4:c2:b2:a5:90:b0:fc:d1:55:91: 2b:a0:c4:bc:e9:d9:90:b9:6f:00:8b:a2:19:72:56: e8:de:37:42:2d:cc:f4:73:b6:4a:fb:42:ec:c2:90: d6:72:77:87:47:32:a9:91:36:df:70:6e:cf:54:93: 29:4a:fc:11:94:53:49:dd:69:33:89:8e:d3:5e:ad: b0:2b:4f:bb:21:df:73:48:3a:e1:45:3c:94:17:bf: 8d:15:bf:db:ca:0c:e1:0e:e1:53:40:f0:c0:d5:b9: 2c:e1:4d:42:a3:25:38:53:9e:16:a2:ef:6b:c8:b7: 17:04:f8:92:7d:14:59:51:d2:9e:46:0f:8b:d9:6b: 75:7b:6b:68:04:e0:14:01:c8:57:33:45:9b:85:a0: 6f:72:76:11:84:f0:0f:19:66:58:28:a0:13:cf:9e: 45:df:11:15:86:0c:6f:c1:08:a7:25:94:de:b4:7e: f8:8b:87:c6:82:7e:d0:99:12:be:a1:fb:37:86:1f: 5a:2e:cf:88:e2:be:14:c6:97:72:57:cb:ed:24:21: cf:a6:19:a3:72:18:1f:3b:15:ee:69:ed:1d:c0:18: c1:be:50:ea:13:90:12:5e:3b:d8:0a:25:ee:19:41: 69:c6:38:0c:ba:7f:cb:d0:6e:ff:6f:83:91:23:f2: 10:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:12:F9:16:A8:F6:84:75:6A:EF:8A:13:10:16:AA:B6:63:43:51:8A X509v3 Authority Key Identifier: keyid:31:F7:6C:E2:EF:4D:02:0F:92:5E:37:D7:A9:D8:E3:53:98:C7:C0:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/ebb6890d-0d6b-4ea9-a2ef-92d34a3ae64d/0/31F76CE2EF4D020F925E37D7A9D8E35398C7C017.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/31F76CE2EF4D020F925E37D7A9D8E35398C7C017.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ebb6890d-0d6b-4ea9-a2ef-92d34a3ae64d/0/31F76CE2EF4D020F925E37D7A9D8E35398C7C017.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:40:5f:63:02:be:08:58:41:f9:87:bf:47:c2:0b:1d:b1:d5: d6:1b:0a:d6:d8:8e:d9:f6:56:d5:0a:98:23:21:44:02:4f:fd: 30:45:f8:06:c0:7e:f8:86:0b:7f:cf:50:79:a4:ca:a3:34:1c: ac:c1:46:db:fd:ae:86:46:38:9e:41:27:46:a8:cc:02:14:ec: e5:39:0f:36:b3:af:4d:c2:a0:e0:85:ab:14:68:55:23:99:e2: 85:03:3f:d7:83:6a:b8:b5:d6:61:42:bf:5f:94:e5:a6:06:05: 71:95:89:d4:19:13:6c:87:b7:02:f2:22:50:6d:29:75:27:df: f7:98:18:c3:50:31:e0:6d:62:e3:58:97:5b:d0:fe:ae:a9:70: bd:d5:9c:2e:32:f2:14:ed:dc:6f:d4:a2:f8:1e:8a:79:fb:1a: df:94:ba:34:9b:e4:1a:9f:c4:c6:a8:e4:02:e7:49:68:0d:26: 9d:45:b1:c5:77:f3:ee:a0:b8:d1:a7:be:63:23:ec:7f:3f:c7: 74:50:1c:2f:47:3f:d1:5f:72:98:d9:06:50:4e:b1:fc:ac:5a: cc:55:f4:a0:42:29:c1:40:ef:a9:58:4c:ce:2b:c9:6b:0a:14: 92:3a:2c:4d:e4:7d:1f:93:00:71:c2:49:c4:fa:52:fc:e6:c7: 2c:35:70:ed -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUW3hCgEPUnOfGQoyWEnfsQ+vz5M4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzFGNzZDRTJFRjREMDIwRjkyNUUzN0Q3QTlEOEUzNTM5 OEM3QzAxNzAeFw0yNjA3MjMxOTMwNTlaFw0yNjA3MjQyMjM1NTlaMDMxMTAvBgNV BAMTKEE4MTJGOTE2QThGNjg0NzU2QUVGOEExMzEwMTZBQUI2NjM0MzUxOEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCu6gjb9MKypZCw/NFVkSugxLzp 2ZC5bwCLohlyVujeN0ItzPRztkr7QuzCkNZyd4dHMqmRNt9wbs9UkylK/BGUU0nd aTOJjtNerbArT7sh33NIOuFFPJQXv40Vv9vKDOEO4VNA8MDVuSzhTUKjJThTnhai 72vItxcE+JJ9FFlR0p5GD4vZa3V7a2gE4BQByFczRZuFoG9ydhGE8A8ZZlgooBPP nkXfERWGDG/BCKcllN60fviLh8aCftCZEr6h+zeGH1ouz4jivhTGl3JXy+0kIc+m GaNyGB87Fe5p7R3AGMG+UOoTkBJeO9gKJe4ZQWnGOAy6f8vQbv9vg5Ej8hBlAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUqBL5Fqj2hHVq74oTEBaqtmNDUYowHwYDVR0j BBgwFoAUMfds4u9NAg+SXjfXqdjjU5jHwBcwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZWJiNjg5MGQtMGQ2Yi00ZWE5LWEyZWYtOTJkMzRhM2Fl NjRkLzAvMzFGNzZDRTJFRjREMDIwRjkyNUUzN0Q3QTlEOEUzNTM5OEM3QzAxNy5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC8zMUY3NkNFMkVGNEQwMjBGOTI1RTM3RDdB OUQ4RTM1Mzk4QzdDMDE3LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2ViYjY4OTBkLTBkNmItNGVhOS1hMmVmLTkyZDM0YTNhZTY0ZC8wLzMxRjc2Q0Uy RUY0RDAyMEY5MjVFMzdEN0E5RDhFMzUzOThDN0MwMTcubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBEQF9j Ar4IWEH5h79HwgsdsdXWGwrW2I7Z9lbVCpgjIUQCT/0wRfgGwH74hgt/z1B5pMqj NByswUbb/a6GRjieQSdGqMwCFOzlOQ82s69NwqDghasUaFUjmeKFAz/Xg2q4tdZh Qr9flOWmBgVxlYnUGRNsh7cC8iJQbSl1J9/3mBjDUDHgbWLjWJdb0P6uqXC91Zwu MvIU7dxv1KL4Hop5+xrflLo0m+Qan8TGqOQC50loDSadRbHFd/PuoLjRp75jI+x/ P8d0UBwvRz/RX3KY2QZQTrH8rFrMVfSgQinBQO+pWEzOK8lrChSSOixN5H0fkwBx wknE+lL85scsNXDt -----END CERTIFICATE-----Generated at Fri Jul 24 10:06:45 2026 by rpki-client