$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/ebb6890d-0d6b-4ea9-a2ef-92d34a3ae64d/0/31F76CE2EF4D020F925E37D7A9D8E35398C7C017.mft File: 31F76CE2EF4D020F925E37D7A9D8E35398C7C017.mft (raw, json) Hash identifier: qso7alxIbFDnXIgKyZkqDEFbXOJLq68mqTSWcMnnAu0= Subject key identifier: ED:E0:DE:EE:C5:24:34:7B:52:C3:08:22:AF:74:E2:9C:5F:18:74:C2 Authority key identifier: 31:F7:6C:E2:EF:4D:02:0F:92:5E:37:D7:A9:D8:E3:53:98:C7:C0:17 Certificate issuer: /CN=31F76CE2EF4D020F925E37D7A9D8E35398C7C017 Certificate serial: 3A78B320CC468D7CFEB170EDA84F929A125A3619 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/31F76CE2EF4D020F925E37D7A9D8E35398C7C017.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ebb6890d-0d6b-4ea9-a2ef-92d34a3ae64d/0/31F76CE2EF4D020F925E37D7A9D8E35398C7C017.mft Manifest number: 01D0 Signing time: Thu 24 Sep 2026 14:53:40 +0000 Manifest this update: Thu 24 Sep 2026 14:48:40 +0000 Manifest next update: Fri 25 Sep 2026 16:39:40 +0000 Files and hashes: 1: 31F76CE2EF4D020F925E37D7A9D8E35398C7C017.crl (hash: HtHo0S12NouZCopXROHWp1eG3zFWgEYv+Zar8BpUqq4=) 2: 326131343a373538313a3738363a3a2f34382d3438203d3e20323034383731.roa (hash: tGvt7Se01XwijlH0xJfhQXd0kFm91aUEgeT7V3OGe7U=) 3: 326131343a373538313a3730303a3a2f34382d3438203d3e20323034383731.roa (hash: JXehGAGbOBOHwTU/V09hXrcXEdlOBAJOY83kYkmYZm8=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ebb6890d-0d6b-4ea9-a2ef-92d34a3ae64d/0/31F76CE2EF4D020F925E37D7A9D8E35398C7C017.crl rsync://rsync.paas.rpki.ripe.net/repository/ebb6890d-0d6b-4ea9-a2ef-92d34a3ae64d/0/31F76CE2EF4D020F925E37D7A9D8E35398C7C017.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/31F76CE2EF4D020F925E37D7A9D8E35398C7C017.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 25 Sep 2026 16:39:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:78:b3:20:cc:46:8d:7c:fe:b1:70:ed:a8:4f:92:9a:12:5a:36:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=31F76CE2EF4D020F925E37D7A9D8E35398C7C017 Validity Not Before: Sep 24 14:48:40 2026 GMT Not After : Sep 25 16:39:40 2026 GMT Subject: CN=EDE0DEEEC524347B52C30822AF74E29C5F1874C2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:61:dc:13:6d:a1:e3:f4:47:a7:2c:d1:6c:18: fd:eb:16:f9:ea:9f:b2:fd:bb:8c:d3:90:01:33:ad: ad:74:c1:71:c8:b0:e7:f0:47:82:ec:66:da:79:6e: e8:fb:01:f5:e6:6a:aa:61:d5:c2:62:8c:1a:09:a4: 5f:b3:a5:25:33:3a:66:9c:8a:f9:87:f1:ed:77:72: 39:a3:c8:3d:90:51:cd:5b:7c:61:4c:fe:b3:e7:75: a4:4c:0c:f7:d7:1c:eb:51:75:e8:e8:6f:ad:c0:90: 70:c3:84:74:41:fb:62:48:32:8f:50:73:e3:bc:f8: 69:35:30:ab:cf:3d:05:3b:52:fc:ab:77:b9:78:df: a1:61:cf:30:71:b5:e9:39:5a:15:44:90:56:62:d7: 94:fa:23:52:81:9b:06:35:65:40:fa:fb:89:00:da: 3f:8a:32:98:fc:9e:5f:c5:15:ea:f8:8c:dc:7d:91: 25:97:39:a5:e0:bd:32:f1:08:7f:46:99:c5:2e:ce: f7:13:43:b0:fd:ad:e9:13:bf:00:ba:47:9a:8c:ab: c3:d6:a7:d4:df:2e:e9:87:fb:61:6a:dd:98:6c:bc: 21:87:6f:7c:2c:f1:90:74:a5:30:98:b2:c9:b7:81: e4:29:58:2f:1f:2b:43:d9:f4:57:18:50:8f:ba:ea: 31:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:E0:DE:EE:C5:24:34:7B:52:C3:08:22:AF:74:E2:9C:5F:18:74:C2 X509v3 Authority Key Identifier: keyid:31:F7:6C:E2:EF:4D:02:0F:92:5E:37:D7:A9:D8:E3:53:98:C7:C0:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/ebb6890d-0d6b-4ea9-a2ef-92d34a3ae64d/0/31F76CE2EF4D020F925E37D7A9D8E35398C7C017.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/31F76CE2EF4D020F925E37D7A9D8E35398C7C017.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ebb6890d-0d6b-4ea9-a2ef-92d34a3ae64d/0/31F76CE2EF4D020F925E37D7A9D8E35398C7C017.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:60:82:7d:3e:8b:a3:ab:03:2b:74:a6:6b:06:1a:2f:07:11: a7:11:a1:52:3d:c0:b2:08:b8:0e:e1:bb:2e:32:17:1e:b3:ef: d6:a7:12:cf:a9:ed:c1:65:cd:1f:71:06:73:8b:66:01:dc:f2: 56:10:a5:2b:17:5d:d5:ec:d7:6c:46:ba:d5:c6:bc:65:a3:c5: 11:ce:f4:af:aa:cb:fa:77:d3:26:e8:69:72:94:cf:4c:58:da: c2:c7:19:5f:1d:a8:63:b9:d4:7c:8e:e2:95:61:d3:be:06:9b: bd:80:f5:b9:f7:2b:17:d0:42:94:f3:a8:fb:04:ea:5d:8f:18: 34:3a:7e:b0:63:0d:38:8b:0b:83:44:bd:2c:f1:63:a6:bc:a8: 36:f4:30:ae:31:7c:a6:dc:07:e3:9e:06:cd:eb:21:b7:49:d6: a9:df:15:00:17:91:b0:5d:bb:07:01:8e:72:59:48:08:c6:46: 47:6a:5b:4e:cd:9c:74:c2:cf:42:d7:52:29:5f:5e:db:fa:dc: 62:a0:98:23:b3:20:b5:40:86:1f:e3:98:f7:13:3b:03:8f:04: 16:2b:4a:d9:4c:35:67:0a:8d:3e:2e:97:d6:1b:82:0b:aa:2a: 8c:c0:fc:e5:ed:81:53:77:49:19:ca:3e:1c:ec:9e:5e:9a:00: 99:16:41:39 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUOnizIMxGjXz+sXDtqE+SmhJaNhkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzFGNzZDRTJFRjREMDIwRjkyNUUzN0Q3QTlEOEUzNTM5 OEM3QzAxNzAeFw0yNjA5MjQxNDQ4NDBaFw0yNjA5MjUxNjM5NDBaMDMxMTAvBgNV BAMTKEVERTBERUVFQzUyNDM0N0I1MkMzMDgyMkFGNzRFMjlDNUYxODc0QzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCcYdwTbaHj9EenLNFsGP3rFvnq n7L9u4zTkAEzra10wXHIsOfwR4LsZtp5buj7AfXmaqph1cJijBoJpF+zpSUzOmac ivmH8e13cjmjyD2QUc1bfGFM/rPndaRMDPfXHOtRdejob63AkHDDhHRB+2JIMo9Q c+O8+Gk1MKvPPQU7Uvyrd7l436FhzzBxtek5WhVEkFZi15T6I1KBmwY1ZUD6+4kA 2j+KMpj8nl/FFer4jNx9kSWXOaXgvTLxCH9GmcUuzvcTQ7D9rekTvwC6R5qMq8PW p9TfLumH+2Fq3ZhsvCGHb3ws8ZB0pTCYssm3geQpWC8fK0PZ9FcYUI+66jE3AgMB AAGjggKCMIICfjAdBgNVHQ4EFgQU7eDe7sUkNHtSwwgir3TinF8YdMIwHwYDVR0j BBgwFoAUMfds4u9NAg+SXjfXqdjjU5jHwBcwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZWJiNjg5MGQtMGQ2Yi00ZWE5LWEyZWYtOTJkMzRhM2Fl NjRkLzAvMzFGNzZDRTJFRjREMDIwRjkyNUUzN0Q3QTlEOEUzNTM5OEM3QzAxNy5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC8zMUY3NkNFMkVGNEQwMjBGOTI1RTM3RDdB OUQ4RTM1Mzk4QzdDMDE3LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2ViYjY4OTBkLTBkNmItNGVhOS1hMmVmLTkyZDM0YTNhZTY0ZC8wLzMxRjc2Q0Uy RUY0RDAyMEY5MjVFMzdEN0E5RDhFMzUzOThDN0MwMTcubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCMYIJ9 PoujqwMrdKZrBhovBxGnEaFSPcCyCLgO4bsuMhces+/WpxLPqe3BZc0fcQZzi2YB 3PJWEKUrF13V7NdsRrrVxrxlo8URzvSvqsv6d9Mm6GlylM9MWNrCxxlfHahjudR8 juKVYdO+Bpu9gPW59ysX0EKU86j7BOpdjxg0On6wYw04iwuDRL0s8WOmvKg29DCu MXym3AfjngbN6yG3Sdap3xUAF5GwXbsHAY5yWUgIxkZHaltOzZx0ws9C11IpX17b +txioJgjsyC1QIYf45j3EzsDjwQWK0rZTDVnCo0+LpfWG4ILqiqMwPzl7YFTd0kZ yj4c7J5emgCZFkE5 -----END CERTIFICATE-----Generated at Fri Sep 25 10:55:17 2026 by rpki-client