$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/308f8b3e-051e-4c44-9cb5-7b8331ef9a04/1/8BCE7E72ABBBAD00536393A0840BBA0ABF3AA28E.mft File: 8BCE7E72ABBBAD00536393A0840BBA0ABF3AA28E.mft (raw, json) Hash identifier: P4OdONncZxFK3/pwQ5Hg4S665v/5uAq9v/ran3rT7g4= Subject key identifier: C1:48:83:4C:12:29:DC:0E:6C:52:CB:01:4C:C4:B2:14:90:6A:79:8C Authority key identifier: 8B:CE:7E:72:AB:BB:AD:00:53:63:93:A0:84:0B:BA:0A:BF:3A:A2:8E Certificate issuer: /CN=8BCE7E72ABBBAD00536393A0840BBA0ABF3AA28E Certificate serial: 31A2ED55F7FF603A228A587C235AFE26FCC1887A Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/8BCE7E72ABBBAD00536393A0840BBA0ABF3AA28E.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/308f8b3e-051e-4c44-9cb5-7b8331ef9a04/1/8BCE7E72ABBBAD00536393A0840BBA0ABF3AA28E.mft Manifest number: 6E Signing time: Sun 01 Mar 2026 08:36:49 +0000 Manifest this update: Sun 01 Mar 2026 08:31:49 +0000 Manifest next update: Mon 02 Mar 2026 08:55:49 +0000 Files and hashes: 1: 326130663a316363353a313730303a3a2f34302d3438203d3e20323032393339.roa (hash: UEeOHO3GGvYWxfR4E2Tbh4+FLPM0KvboVmPBm/zMcrM=) 2: 8BCE7E72ABBBAD00536393A0840BBA0ABF3AA28E.crl (hash: +EEX8RWYEjZ5tAaZa1eNC5hCV/iNQ2+G/hwKkCs5BZY=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/308f8b3e-051e-4c44-9cb5-7b8331ef9a04/1/8BCE7E72ABBBAD00536393A0840BBA0ABF3AA28E.crl rsync://rsync.paas.rpki.ripe.net/repository/308f8b3e-051e-4c44-9cb5-7b8331ef9a04/1/8BCE7E72ABBBAD00536393A0840BBA0ABF3AA28E.mft rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/8BCE7E72ABBBAD00536393A0840BBA0ABF3AA28E.cer rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/411E2D411D687BCB4449C3DF45BEEDC041007D94.crl rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/411E2D411D687BCB4449C3DF45BEEDC041007D94.mft rsync://rpki.ripe.net/repository/DEFAULT/QR4tQR1oe8tEScPfRb7twEEAfZQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Mar 2026 08:55:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:a2:ed:55:f7:ff:60:3a:22:8a:58:7c:23:5a:fe:26:fc:c1:88:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8BCE7E72ABBBAD00536393A0840BBA0ABF3AA28E Validity Not Before: Mar 1 08:31:49 2026 GMT Not After : Mar 2 08:55:49 2026 GMT Subject: CN=C148834C1229DC0E6C52CB014CC4B214906A798C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:93:ea:35:7b:b0:ec:80:aa:89:fd:74:b7:ae: 0e:41:70:d3:d8:e4:9f:43:50:72:92:6f:d8:d6:f4: 1d:0f:f4:e8:af:92:f0:6b:53:7e:97:ab:aa:3a:61: 8c:d9:12:59:e2:b6:a3:e2:2d:5c:52:ee:3f:39:0b: 0a:8f:19:76:52:d0:35:d7:20:26:7c:95:6c:1a:5e: 87:ba:35:65:01:fe:35:cc:45:6d:86:09:ef:32:cd: fe:8a:e2:be:3d:46:9b:3f:5b:99:d8:4e:f7:ed:7b: 67:89:5a:39:4c:e1:37:96:7c:79:65:0b:b4:ff:39: 7f:ff:9d:2c:00:cf:2f:1f:ca:6b:5d:16:9f:0b:64: f9:a2:61:84:72:18:f2:de:d1:ec:30:87:63:61:76: 79:c3:c8:93:32:12:42:c5:f9:7f:1b:a0:de:52:36: 62:88:01:a7:e3:dc:2e:c5:99:07:3c:2f:74:64:49: 89:ec:2d:95:76:79:ba:1b:2e:78:b0:97:ca:45:80: 92:89:8a:06:44:fc:35:a7:8e:8d:d0:51:65:8a:59: 4b:81:93:8d:1a:09:22:6b:d0:69:42:c5:22:2c:a8: 02:6f:a1:f0:e9:d0:6c:a6:21:d9:cc:1c:66:ee:26: 46:23:cb:8b:bd:34:78:21:67:31:bb:64:37:0f:21: ad:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:48:83:4C:12:29:DC:0E:6C:52:CB:01:4C:C4:B2:14:90:6A:79:8C X509v3 Authority Key Identifier: keyid:8B:CE:7E:72:AB:BB:AD:00:53:63:93:A0:84:0B:BA:0A:BF:3A:A2:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/308f8b3e-051e-4c44-9cb5-7b8331ef9a04/1/8BCE7E72ABBBAD00536393A0840BBA0ABF3AA28E.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/8BCE7E72ABBBAD00536393A0840BBA0ABF3AA28E.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/308f8b3e-051e-4c44-9cb5-7b8331ef9a04/1/8BCE7E72ABBBAD00536393A0840BBA0ABF3AA28E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:e4:72:22:b4:d9:d2:47:69:f6:2e:f5:5f:c1:1d:83:fd:00: 2c:ab:1d:51:25:f1:1d:8d:c9:eb:9d:20:96:bb:66:4b:58:62: f1:d4:ce:fa:09:12:27:b5:5f:21:95:4a:70:f5:a8:47:65:28: 2e:16:7d:ad:1d:1c:b8:d1:af:52:8d:a2:8f:ab:c4:06:e9:38: 9d:35:fd:94:b8:cd:f8:8d:2a:15:8f:db:32:b9:24:02:eb:e7: c5:b1:0e:9a:de:ac:e2:82:b7:87:d5:ea:bf:68:0b:a1:19:75: 3e:a1:32:4b:04:3a:f0:c2:3a:e3:81:50:c1:f3:5b:cb:3c:5c: 31:0c:3d:a3:86:f8:53:0e:86:a4:04:87:78:a0:ab:fd:1c:74: 04:01:cc:16:9c:d1:38:a7:40:a5:6a:aa:66:61:81:ce:d9:58: e2:6e:48:39:e8:a1:dd:53:3a:8a:77:1e:28:01:40:fd:6c:00: ab:c4:d4:67:e7:68:69:5e:b9:43:5f:63:44:42:2d:8f:22:dc: d5:a1:a1:0a:e0:fd:5f:ea:af:ce:77:57:95:3d:8c:43:c8:5b: 53:95:51:ec:21:79:9d:0e:a4:2a:7e:60:22:46:95:34:f5:b4: 95:8d:4f:ba:f1:da:fb:7c:bb:23:81:22:06:a5:de:fd:35:5d: 6b:87:00:d5 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUMaLtVff/YDoiilh8I1r+JvzBiHowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEJDRTdFNzJBQkJCQUQwMDUzNjM5M0EwODQwQkJBMEFC RjNBQTI4RTAeFw0yNjAzMDEwODMxNDlaFw0yNjAzMDIwODU1NDlaMDMxMTAvBgNV BAMTKEMxNDg4MzRDMTIyOURDMEU2QzUyQ0IwMTRDQzRCMjE0OTA2QTc5OEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvk+o1e7DsgKqJ/XS3rg5BcNPY 5J9DUHKSb9jW9B0P9OivkvBrU36Xq6o6YYzZElnitqPiLVxS7j85CwqPGXZS0DXX ICZ8lWwaXoe6NWUB/jXMRW2GCe8yzf6K4r49Rps/W5nYTvfte2eJWjlM4TeWfHll C7T/OX//nSwAzy8fymtdFp8LZPmiYYRyGPLe0ewwh2NhdnnDyJMyEkLF+X8boN5S NmKIAafj3C7FmQc8L3RkSYnsLZV2ebobLniwl8pFgJKJigZE/DWnjo3QUWWKWUuB k40aCSJr0GlCxSIsqAJvofDp0GymIdnMHGbuJkYjy4u9NHghZzG7ZDcPIa3zAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUwUiDTBIp3A5sUssBTMSyFJBqeYwwHwYDVR0j BBgwFoAUi85+cqu7rQBTY5OghAu6Cr86oo4wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMzA4ZjhiM2UtMDUxZS00YzQ0LTljYjUtN2I4MzMxZWY5 YTA0LzEvOEJDRTdFNzJBQkJCQUQwMDUzNjM5M0EwODQwQkJBMEFCRjNBQTI4RS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84YWZiNWZlMi0zYzJhLTQ5 MzktOTVlOS0wMDc3YjgwYjRmMGUvMC84QkNFN0U3MkFCQkJBRDAwNTM2MzkzQTA4 NDBCQkEwQUJGM0FBMjhFLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzMwOGY4YjNlLTA1MWUtNGM0NC05Y2I1LTdiODMzMWVmOWEwNC8xLzhCQ0U3RTcy QUJCQkFEMDA1MzYzOTNBMDg0MEJCQTBBQkYzQUEyOEUubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBV5HIi tNnSR2n2LvVfwR2D/QAsqx1RJfEdjcnrnSCWu2ZLWGLx1M76CRIntV8hlUpw9ahH ZSguFn2tHRy40a9SjaKPq8QG6TidNf2UuM34jSoVj9syuSQC6+fFsQ6a3qzigreH 1eq/aAuhGXU+oTJLBDrwwjrjgVDB81vLPFwxDD2jhvhTDoakBId4oKv9HHQEAcwW nNE4p0ClaqpmYYHO2Vjibkg56KHdUzqKdx4oAUD9bACrxNRn52hpXrlDX2NEQi2P ItzVoaEK4P1f6q/Od1eVPYxDyFtTlVHsIXmdDqQqfmAiRpU09bSVjU+68dr7fLsj gSIGpd79NV1rhwDV -----END CERTIFICATE-----Generated at Mon Mar 2 00:14:32 2026 by rpki-client