$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ebb6890d-0d6b-4ea9-a2ef-92d34a3ae64d/0/31F76CE2EF4D020F925E37D7A9D8E35398C7C017.mft File: 31F76CE2EF4D020F925E37D7A9D8E35398C7C017.mft (raw, json) Hash identifier: eMy/inabX3bC+8guhaDU+oZWbnQS1svM2+PGbc+a81o= Subject key identifier: 8D:9C:E3:5A:13:DF:F0:58:8E:6F:CD:80:DA:96:58:B4:F8:49:8D:47 Authority key identifier: 31:F7:6C:E2:EF:4D:02:0F:92:5E:37:D7:A9:D8:E3:53:98:C7:C0:17 Certificate issuer: /CN=31F76CE2EF4D020F925E37D7A9D8E35398C7C017 Certificate serial: 2C76CAEDDD1524B67696840CAF5D18A0FAB2B352 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/31F76CE2EF4D020F925E37D7A9D8E35398C7C017.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ebb6890d-0d6b-4ea9-a2ef-92d34a3ae64d/0/31F76CE2EF4D020F925E37D7A9D8E35398C7C017.mft Manifest number: DC Signing time: Wed 25 Mar 2026 19:40:36 +0000 Manifest this update: Wed 25 Mar 2026 19:35:36 +0000 Manifest next update: Thu 26 Mar 2026 21:12:36 +0000 Files and hashes: 1: 326131343a373538313a3738363a3a2f34382d3438203d3e20323034383731.roa (hash: d7JuEn5B8KAwVz8SpkU4AMcAJkaWbbl+bWkksQthj/k=) 2: 31F76CE2EF4D020F925E37D7A9D8E35398C7C017.crl (hash: WQ/KJ0nste0aJuJG7HxGTRNJbBP2foJPbm/qpr2Zpb0=) 3: 326131343a373538313a3730303a3a2f34382d3438203d3e20323034383731.roa (hash: u8e0eoyomRFMkD/JcQQfwJ+uqGsBt5QX6wzg4Fq5J9M=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ebb6890d-0d6b-4ea9-a2ef-92d34a3ae64d/0/31F76CE2EF4D020F925E37D7A9D8E35398C7C017.crl rsync://rsync.paas.rpki.ripe.net/repository/ebb6890d-0d6b-4ea9-a2ef-92d34a3ae64d/0/31F76CE2EF4D020F925E37D7A9D8E35398C7C017.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/31F76CE2EF4D020F925E37D7A9D8E35398C7C017.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 26 Mar 2026 21:12:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:76:ca:ed:dd:15:24:b6:76:96:84:0c:af:5d:18:a0:fa:b2:b3:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=31F76CE2EF4D020F925E37D7A9D8E35398C7C017 Validity Not Before: Mar 25 19:35:36 2026 GMT Not After : Mar 26 21:12:36 2026 GMT Subject: CN=8D9CE35A13DFF0588E6FCD80DA9658B4F8498D47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:15:83:68:6e:aa:7d:9c:04:e2:f1:33:0f:6f: 4d:2e:ac:dc:5a:0e:b9:a1:16:f7:94:76:43:9e:64: 6d:98:0b:a6:75:67:6e:2e:d6:b6:28:63:b2:b1:76: 92:3c:84:c5:86:69:b2:47:e6:de:54:ad:da:c1:d9: eb:e6:9b:ae:36:f1:76:7d:91:66:c7:4e:6c:f9:07: 7a:98:36:83:50:f1:4a:34:76:52:e5:d4:8e:2c:a3: 6a:a4:09:2d:4e:2b:96:02:97:90:ce:5b:c2:52:9c: 21:fa:c5:c6:9d:3d:2e:4a:bc:8e:3c:a4:fa:57:1d: 59:ab:8b:32:23:da:85:ee:d6:63:53:19:fa:a0:a2: 86:e1:10:8f:f9:5c:83:ff:0b:b9:c5:af:6f:f7:2e: 83:be:6c:80:49:11:2a:2c:68:ed:20:b2:1c:a0:72: bf:18:66:b7:66:bd:a0:9f:6a:f4:6f:87:62:34:3e: e3:cf:f1:9b:4f:00:36:c6:db:d4:0d:d0:b4:ae:b4: 94:af:46:f5:e7:af:ce:0f:8a:20:0f:fd:3f:2c:a4: 20:0d:c8:f2:aa:e6:54:e1:92:f5:1e:c9:7e:60:fc: dc:9b:79:36:ec:e4:f1:04:d7:f4:b5:e2:f4:23:f7: c0:57:22:8e:17:77:ca:b2:54:25:d0:85:02:cb:d4: 90:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:9C:E3:5A:13:DF:F0:58:8E:6F:CD:80:DA:96:58:B4:F8:49:8D:47 X509v3 Authority Key Identifier: keyid:31:F7:6C:E2:EF:4D:02:0F:92:5E:37:D7:A9:D8:E3:53:98:C7:C0:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/ebb6890d-0d6b-4ea9-a2ef-92d34a3ae64d/0/31F76CE2EF4D020F925E37D7A9D8E35398C7C017.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/31F76CE2EF4D020F925E37D7A9D8E35398C7C017.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ebb6890d-0d6b-4ea9-a2ef-92d34a3ae64d/0/31F76CE2EF4D020F925E37D7A9D8E35398C7C017.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:4f:53:9e:44:8a:7b:80:9d:03:da:3f:8a:57:b2:70:41:47: 6b:e1:47:41:c5:c6:56:dc:d9:2a:cc:93:39:94:48:b8:96:4d: 75:11:49:16:49:5f:de:b6:e2:52:03:d0:7f:6c:86:20:4a:3f: 5f:35:e9:5d:90:6d:07:07:20:08:8f:68:63:1a:14:dd:f8:2f: 89:48:1e:39:e8:6f:e7:29:6b:1d:20:9f:99:dc:6e:49:04:40: 1c:f4:74:d9:70:5f:86:36:1f:03:82:ec:80:30:e1:be:40:aa: f2:91:32:9f:bd:a6:4d:68:41:89:d4:b4:ba:45:c8:3c:43:2d: 5c:0e:ba:e9:06:20:f5:f4:17:5f:94:dc:f0:67:b0:30:4b:b5: 3b:31:04:c6:16:30:fb:85:f0:f1:12:97:b0:0c:67:a5:8b:32: a1:72:47:92:9e:e5:65:62:57:55:b7:53:19:c4:b1:de:82:f2: 42:0f:79:de:21:a2:62:52:08:2b:d0:71:fb:20:a6:70:f2:6a: e4:1a:87:66:15:22:ac:5f:d1:f7:f8:7c:99:c0:d4:ac:83:4f: 32:ca:f0:85:87:73:b2:2d:3a:fa:0e:e7:96:8f:a6:17:13:40: f2:ee:d9:17:ee:5a:ba:5c:a1:c5:92:31:95:be:55:18:cc:5a: c9:9a:50:01 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIULHbK7d0VJLZ2loQMr10YoPqys1IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzFGNzZDRTJFRjREMDIwRjkyNUUzN0Q3QTlEOEUzNTM5 OEM3QzAxNzAeFw0yNjAzMjUxOTM1MzZaFw0yNjAzMjYyMTEyMzZaMDMxMTAvBgNV BAMTKDhEOUNFMzVBMTNERkYwNTg4RTZGQ0Q4MERBOTY1OEI0Rjg0OThENDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCNFYNobqp9nATi8TMPb00urNxa DrmhFveUdkOeZG2YC6Z1Z24u1rYoY7KxdpI8hMWGabJH5t5UrdrB2evmm6428XZ9 kWbHTmz5B3qYNoNQ8Uo0dlLl1I4so2qkCS1OK5YCl5DOW8JSnCH6xcadPS5KvI48 pPpXHVmrizIj2oXu1mNTGfqgoobhEI/5XIP/C7nFr2/3LoO+bIBJESosaO0gshyg cr8YZrdmvaCfavRvh2I0PuPP8ZtPADbG29QN0LSutJSvRvXnr84PiiAP/T8spCAN yPKq5lThkvUeyX5g/NybeTbs5PEE1/S14vQj98BXIo4Xd8qyVCXQhQLL1JCVAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUjZzjWhPf8FiOb82A2pZYtPhJjUcwHwYDVR0j BBgwFoAUMfds4u9NAg+SXjfXqdjjU5jHwBcwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZWJiNjg5MGQtMGQ2Yi00ZWE5LWEyZWYtOTJkMzRhM2Fl NjRkLzAvMzFGNzZDRTJFRjREMDIwRjkyNUUzN0Q3QTlEOEUzNTM5OEM3QzAxNy5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC8zMUY3NkNFMkVGNEQwMjBGOTI1RTM3RDdB OUQ4RTM1Mzk4QzdDMDE3LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2ViYjY4OTBkLTBkNmItNGVhOS1hMmVmLTkyZDM0YTNhZTY0ZC8wLzMxRjc2Q0Uy RUY0RDAyMEY5MjVFMzdEN0E5RDhFMzUzOThDN0MwMTcubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCXT1Oe RIp7gJ0D2j+KV7JwQUdr4UdBxcZW3NkqzJM5lEi4lk11EUkWSV/etuJSA9B/bIYg Sj9fNeldkG0HByAIj2hjGhTd+C+JSB456G/nKWsdIJ+Z3G5JBEAc9HTZcF+GNh8D guyAMOG+QKrykTKfvaZNaEGJ1LS6Rcg8Qy1cDrrpBiD19BdflNzwZ7AwS7U7MQTG FjD7hfDxEpewDGelizKhckeSnuVlYldVt1MZxLHegvJCD3neIaJiUggr0HH7IKZw 8mrkGodmFSKsX9H3+HyZwNSsg08yyvCFh3OyLTr6DueWj6YXE0Dy7tkX7lq6XKHF kjGVvlUYzFrJmlAB -----END CERTIFICATE-----Generated at Thu Mar 26 04:18:53 2026 by rpki-client