$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ebb6890d-0d6b-4ea9-a2ef-92d34a3ae64d/0/31F76CE2EF4D020F925E37D7A9D8E35398C7C017.mft File: 31F76CE2EF4D020F925E37D7A9D8E35398C7C017.mft (raw, json) Hash identifier: m9ON5cJc6RmWKYBVKfG6s7iA2EpSAuM/zDvLq/wWRFY= Subject key identifier: 7F:E6:FF:C4:09:39:05:FE:9E:D9:06:F5:2F:04:18:85:99:84:5A:B8 Authority key identifier: 31:F7:6C:E2:EF:4D:02:0F:92:5E:37:D7:A9:D8:E3:53:98:C7:C0:17 Certificate issuer: /CN=31F76CE2EF4D020F925E37D7A9D8E35398C7C017 Certificate serial: 37E58A802B1B50B1D750F760662F06A5A28C8A68 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/31F76CE2EF4D020F925E37D7A9D8E35398C7C017.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ebb6890d-0d6b-4ea9-a2ef-92d34a3ae64d/0/31F76CE2EF4D020F925E37D7A9D8E35398C7C017.mft Manifest number: 011D Signing time: Wed 13 May 2026 05:44:57 +0000 Manifest this update: Wed 13 May 2026 05:39:57 +0000 Manifest next update: Thu 14 May 2026 06:27:57 +0000 Files and hashes: 1: 31F76CE2EF4D020F925E37D7A9D8E35398C7C017.crl (hash: MCs7rqwDHePXmULTSY4u5pbYttxqkkaDkG/iY2ovZ0g=) 2: 326131343a373538313a3730303a3a2f34382d3438203d3e20323034383731.roa (hash: u8e0eoyomRFMkD/JcQQfwJ+uqGsBt5QX6wzg4Fq5J9M=) 3: 326131343a373538313a3738363a3a2f34382d3438203d3e20323034383731.roa (hash: d7JuEn5B8KAwVz8SpkU4AMcAJkaWbbl+bWkksQthj/k=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ebb6890d-0d6b-4ea9-a2ef-92d34a3ae64d/0/31F76CE2EF4D020F925E37D7A9D8E35398C7C017.crl rsync://rsync.paas.rpki.ripe.net/repository/ebb6890d-0d6b-4ea9-a2ef-92d34a3ae64d/0/31F76CE2EF4D020F925E37D7A9D8E35398C7C017.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/31F76CE2EF4D020F925E37D7A9D8E35398C7C017.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 13 May 2026 23:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:e5:8a:80:2b:1b:50:b1:d7:50:f7:60:66:2f:06:a5:a2:8c:8a:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=31F76CE2EF4D020F925E37D7A9D8E35398C7C017 Validity Not Before: May 13 05:39:57 2026 GMT Not After : May 14 06:27:57 2026 GMT Subject: CN=7FE6FFC4093905FE9ED906F52F04188599845AB8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:49:c5:c7:c4:57:06:f7:82:e3:bc:51:24:ed: 53:27:9c:08:ee:cf:f8:e8:41:7b:0c:27:c4:7f:76: 50:f4:d8:72:dd:c1:5c:df:90:08:00:10:07:84:04: e6:42:1f:5a:f5:8a:ed:51:1c:15:2f:d1:6d:77:5e: aa:30:f6:29:fb:ea:63:4f:11:2d:75:cb:09:89:a7: a5:cf:1f:7f:1b:af:97:51:e5:b5:ec:40:8c:a9:29: b6:db:91:38:90:62:bb:94:d9:84:47:27:e2:d5:28: 2f:6e:2e:a7:b8:81:c9:3a:21:94:1c:6d:79:40:38: 12:3d:bc:f0:90:26:27:46:5b:c7:26:0f:27:33:c7: 99:1b:88:6f:88:66:a7:c8:a6:64:09:43:60:75:a7: f5:0a:40:93:a2:e7:bb:ff:69:2a:08:0d:d1:2c:ee: 95:5b:28:c9:89:b0:5a:64:c7:9a:2b:1f:4f:7e:ec: 7b:b4:55:aa:d3:a7:ab:99:b9:63:d6:45:67:f1:55: 0a:70:e0:1f:33:31:ba:8c:2f:a1:87:50:6e:81:5f: 6d:a6:de:71:07:5f:16:00:71:38:bb:57:5b:f7:58: 7d:af:aa:a6:d2:10:5b:9b:e6:9a:14:5a:2f:4d:4a: d7:cc:34:9a:b7:60:d8:fe:5d:cf:10:82:29:74:0c: e5:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:E6:FF:C4:09:39:05:FE:9E:D9:06:F5:2F:04:18:85:99:84:5A:B8 X509v3 Authority Key Identifier: keyid:31:F7:6C:E2:EF:4D:02:0F:92:5E:37:D7:A9:D8:E3:53:98:C7:C0:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/ebb6890d-0d6b-4ea9-a2ef-92d34a3ae64d/0/31F76CE2EF4D020F925E37D7A9D8E35398C7C017.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/31F76CE2EF4D020F925E37D7A9D8E35398C7C017.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ebb6890d-0d6b-4ea9-a2ef-92d34a3ae64d/0/31F76CE2EF4D020F925E37D7A9D8E35398C7C017.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:a3:56:32:21:0e:2a:9a:ab:20:d8:7e:4b:c5:a9:f0:d3:71: 9e:74:71:cd:7f:d1:80:5a:af:9b:37:e0:41:95:52:5b:b9:cb: 1f:75:c1:2f:6a:bb:98:51:62:4e:f9:9a:81:52:aa:00:65:12: 8e:cf:45:4c:30:3f:dc:45:fb:f4:76:50:10:a9:11:32:d5:ae: ca:8d:59:10:04:e4:b0:7f:5f:98:66:20:be:35:c1:7b:92:7c: 6b:e3:18:58:e1:a2:db:7d:b2:a7:5c:15:c3:23:66:a6:d7:c4: 6b:62:f0:f6:74:78:83:a3:ea:23:e3:a9:6e:f4:01:ce:ae:1f: 51:e2:d2:d7:ec:c7:9c:e6:ce:75:e9:6b:1c:21:53:47:ce:7a: 89:10:c8:be:82:8d:3e:22:58:ba:b1:3c:80:55:51:ef:ba:8a: c6:a9:60:4a:cb:03:6f:7b:a1:25:91:00:df:83:1d:da:73:7e: 78:0c:c4:bc:92:fd:ea:69:4f:a0:eb:7c:85:b2:89:9c:cf:32: e3:9f:31:e0:4f:5a:ad:28:af:1e:7b:00:50:be:02:e3:0b:c3: 20:7d:80:85:04:0e:c5:89:c0:e2:a9:27:0b:81:bb:50:9a:ae: 26:09:f5:fc:e8:c3:67:c0:96:59:93:f3:c7:dd:e9:95:95:35: 3e:b5:77:18 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUN+WKgCsbULHXUPdgZi8GpaKMimgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzFGNzZDRTJFRjREMDIwRjkyNUUzN0Q3QTlEOEUzNTM5 OEM3QzAxNzAeFw0yNjA1MTMwNTM5NTdaFw0yNjA1MTQwNjI3NTdaMDMxMTAvBgNV BAMTKDdGRTZGRkM0MDkzOTA1RkU5RUQ5MDZGNTJGMDQxODg1OTk4NDVBQjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgScXHxFcG94LjvFEk7VMnnAju z/joQXsMJ8R/dlD02HLdwVzfkAgAEAeEBOZCH1r1iu1RHBUv0W13Xqow9in76mNP ES11ywmJp6XPH38br5dR5bXsQIypKbbbkTiQYruU2YRHJ+LVKC9uLqe4gck6IZQc bXlAOBI9vPCQJidGW8cmDyczx5kbiG+IZqfIpmQJQ2B1p/UKQJOi57v/aSoIDdEs 7pVbKMmJsFpkx5orH09+7Hu0VarTp6uZuWPWRWfxVQpw4B8zMbqML6GHUG6BX22m 3nEHXxYAcTi7V1v3WH2vqqbSEFub5poUWi9NStfMNJq3YNj+Xc8Qgil0DOXfAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUf+b/xAk5Bf6e2Qb1LwQYhZmEWrgwHwYDVR0j BBgwFoAUMfds4u9NAg+SXjfXqdjjU5jHwBcwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZWJiNjg5MGQtMGQ2Yi00ZWE5LWEyZWYtOTJkMzRhM2Fl NjRkLzAvMzFGNzZDRTJFRjREMDIwRjkyNUUzN0Q3QTlEOEUzNTM5OEM3QzAxNy5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC8zMUY3NkNFMkVGNEQwMjBGOTI1RTM3RDdB OUQ4RTM1Mzk4QzdDMDE3LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2ViYjY4OTBkLTBkNmItNGVhOS1hMmVmLTkyZDM0YTNhZTY0ZC8wLzMxRjc2Q0Uy RUY0RDAyMEY5MjVFMzdEN0E5RDhFMzUzOThDN0MwMTcubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQApo1Yy IQ4qmqsg2H5Lxanw03GedHHNf9GAWq+bN+BBlVJbucsfdcEvaruYUWJO+ZqBUqoA ZRKOz0VMMD/cRfv0dlAQqREy1a7KjVkQBOSwf1+YZiC+NcF7knxr4xhY4aLbfbKn XBXDI2am18RrYvD2dHiDo+oj46lu9AHOrh9R4tLX7Mec5s516WscIVNHznqJEMi+ go0+Ili6sTyAVVHvuorGqWBKywNve6ElkQDfgx3ac354DMS8kv3qaU+g63yFsomc zzLjnzHgT1qtKK8eewBQvgLjC8MgfYCFBA7FicDiqScLgbtQmq4mCfX86MNnwJZZ k/PH3emVlTU+tXcY -----END CERTIFICATE-----Generated at Wed May 13 08:17:02 2026 by rpki-client