$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/308f8b3e-051e-4c44-9cb5-7b8331ef9a04/1/8BCE7E72ABBBAD00536393A0840BBA0ABF3AA28E.mft File: 8BCE7E72ABBBAD00536393A0840BBA0ABF3AA28E.mft (raw, json) Hash identifier: 8CDPmS25CL8W5bpGEQJONlCgGZAkeI9ggxvfWrcD2Yg= Subject key identifier: 72:A7:02:2D:D4:33:18:6D:D7:DE:60:AA:5D:7C:D3:2A:68:2F:6F:CB Authority key identifier: 8B:CE:7E:72:AB:BB:AD:00:53:63:93:A0:84:0B:BA:0A:BF:3A:A2:8E Certificate issuer: /CN=8BCE7E72ABBBAD00536393A0840BBA0ABF3AA28E Certificate serial: 5082864CAAB1AF686EC57C1C11DDF359A3861BDE Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/8BCE7E72ABBBAD00536393A0840BBA0ABF3AA28E.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/308f8b3e-051e-4c44-9cb5-7b8331ef9a04/1/8BCE7E72ABBBAD00536393A0840BBA0ABF3AA28E.mft Manifest number: AF Signing time: Thu 16 Apr 2026 17:46:58 +0000 Manifest this update: Thu 16 Apr 2026 17:41:58 +0000 Manifest next update: Fri 17 Apr 2026 19:09:58 +0000 Files and hashes: 1: 326130663a316363353a313730303a3a2f34302d3438203d3e20323032393339.roa (hash: UEeOHO3GGvYWxfR4E2Tbh4+FLPM0KvboVmPBm/zMcrM=) 2: 8BCE7E72ABBBAD00536393A0840BBA0ABF3AA28E.crl (hash: bFc1cw0ad/6gwTn9eEVELaZkNLRdgKn8urV7fe4mVpE=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/308f8b3e-051e-4c44-9cb5-7b8331ef9a04/1/8BCE7E72ABBBAD00536393A0840BBA0ABF3AA28E.crl rsync://rsync.paas.rpki.ripe.net/repository/308f8b3e-051e-4c44-9cb5-7b8331ef9a04/1/8BCE7E72ABBBAD00536393A0840BBA0ABF3AA28E.mft rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/8BCE7E72ABBBAD00536393A0840BBA0ABF3AA28E.cer rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/411E2D411D687BCB4449C3DF45BEEDC041007D94.crl rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/411E2D411D687BCB4449C3DF45BEEDC041007D94.mft rsync://rpki.ripe.net/repository/DEFAULT/QR4tQR1oe8tEScPfRb7twEEAfZQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 17 Apr 2026 19:09:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:82:86:4c:aa:b1:af:68:6e:c5:7c:1c:11:dd:f3:59:a3:86:1b:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8BCE7E72ABBBAD00536393A0840BBA0ABF3AA28E Validity Not Before: Apr 16 17:41:58 2026 GMT Not After : Apr 17 19:09:58 2026 GMT Subject: CN=72A7022DD433186DD7DE60AA5D7CD32A682F6FCB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:b1:c2:80:81:a6:59:17:52:07:26:83:8f:dd: db:14:f9:82:48:c0:c1:22:ab:c7:ee:32:4c:5b:a4: f4:71:c7:55:f8:e9:97:18:7d:0e:e8:ea:aa:78:25: ea:3b:a7:ad:a1:77:31:34:a9:05:00:f7:f2:ed:33: 4e:28:5d:c8:11:c8:f2:92:ef:6e:fc:71:3e:93:fa: a1:68:5f:18:bc:31:49:b0:1d:a0:f7:25:ce:21:28: 06:05:96:d4:a8:eb:71:12:d6:a0:a4:93:5c:40:21: 6b:d9:44:53:40:ac:e7:34:f7:b8:fa:81:cb:f0:86: d1:d1:63:15:5b:6d:dd:ff:16:fa:94:e5:55:d4:0a: a7:8c:67:86:fb:a7:27:d5:62:66:47:60:47:59:81: 14:da:a4:71:d8:31:1c:2f:77:2d:48:eb:b6:60:21: 85:84:ba:f2:bb:61:dd:2d:32:2f:01:30:0c:47:47: ca:3b:1a:21:68:0d:28:c9:81:1a:4a:5b:22:d4:e6: 00:8c:42:69:7d:cb:01:4d:3b:d8:3b:24:69:2e:31: 86:0b:6f:21:26:ea:fe:10:f5:5c:65:82:07:cc:d5: c7:29:ee:d1:3d:1c:5e:e7:97:fb:e0:85:b0:21:5b: 11:b6:6b:c5:08:8a:f5:2f:3f:5e:d1:5a:d0:20:c3: ab:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:A7:02:2D:D4:33:18:6D:D7:DE:60:AA:5D:7C:D3:2A:68:2F:6F:CB X509v3 Authority Key Identifier: keyid:8B:CE:7E:72:AB:BB:AD:00:53:63:93:A0:84:0B:BA:0A:BF:3A:A2:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/308f8b3e-051e-4c44-9cb5-7b8331ef9a04/1/8BCE7E72ABBBAD00536393A0840BBA0ABF3AA28E.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/8BCE7E72ABBBAD00536393A0840BBA0ABF3AA28E.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/308f8b3e-051e-4c44-9cb5-7b8331ef9a04/1/8BCE7E72ABBBAD00536393A0840BBA0ABF3AA28E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 93:b7:fe:14:db:30:d2:9a:d9:b0:d9:41:09:d3:e3:c0:3b:88: 9b:d3:30:5c:f5:35:99:f9:71:70:97:8e:7c:14:fe:4e:43:4e: af:7c:df:8c:e8:1c:52:a9:a7:05:c3:27:98:36:88:41:f8:ba: de:53:9b:31:a6:58:19:fe:a6:e0:54:73:cf:84:2d:e8:3a:ef: 6c:51:5e:bb:7b:81:bf:b6:74:1e:0a:14:31:6e:c8:f9:c7:83: 40:70:95:76:4d:33:10:b7:77:7d:1c:98:57:0b:0e:d5:84:e3: 8d:d0:d1:ef:d8:34:8a:fc:22:95:04:71:77:53:17:d7:82:fb: 93:4d:2e:a3:ac:aa:18:2c:1c:d7:ee:d1:7a:85:48:76:5c:bd: 0a:2a:58:50:6b:ce:c5:42:8d:47:ac:e8:ad:fa:9e:cb:47:9e: 1b:69:96:0c:af:d9:08:de:d4:8b:88:c1:9c:f2:7e:42:c8:2b: 7f:72:ec:33:fb:b7:d8:a6:01:8a:0a:6a:67:07:43:dd:87:85: a5:d4:2e:08:42:60:16:67:c3:37:42:2b:de:8e:d5:37:10:20: 87:4f:0c:fd:93:c2:ea:74:c1:df:cd:ca:87:e1:a1:6e:85:7e: 93:78:74:bb:81:7c:56:c5:68:e4:de:fe:6a:3d:68:b5:8d:ff: 9b:3b:df:d3 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUUIKGTKqxr2huxXwcEd3zWaOGG94wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEJDRTdFNzJBQkJCQUQwMDUzNjM5M0EwODQwQkJBMEFC RjNBQTI4RTAeFw0yNjA0MTYxNzQxNThaFw0yNjA0MTcxOTA5NThaMDMxMTAvBgNV BAMTKDcyQTcwMjJERDQzMzE4NkREN0RFNjBBQTVEN0NEMzJBNjgyRjZGQ0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkscKAgaZZF1IHJoOP3dsU+YJI wMEiq8fuMkxbpPRxx1X46ZcYfQ7o6qp4Jeo7p62hdzE0qQUA9/LtM04oXcgRyPKS 7278cT6T+qFoXxi8MUmwHaD3Jc4hKAYFltSo63ES1qCkk1xAIWvZRFNArOc097j6 gcvwhtHRYxVbbd3/FvqU5VXUCqeMZ4b7pyfVYmZHYEdZgRTapHHYMRwvdy1I67Zg IYWEuvK7Yd0tMi8BMAxHR8o7GiFoDSjJgRpKWyLU5gCMQml9ywFNO9g7JGkuMYYL byEm6v4Q9VxlggfM1ccp7tE9HF7nl/vghbAhWxG2a8UIivUvP17RWtAgw6sDAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUcqcCLdQzGG3X3mCqXXzTKmgvb8swHwYDVR0j BBgwFoAUi85+cqu7rQBTY5OghAu6Cr86oo4wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMzA4ZjhiM2UtMDUxZS00YzQ0LTljYjUtN2I4MzMxZWY5 YTA0LzEvOEJDRTdFNzJBQkJCQUQwMDUzNjM5M0EwODQwQkJBMEFCRjNBQTI4RS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84YWZiNWZlMi0zYzJhLTQ5 MzktOTVlOS0wMDc3YjgwYjRmMGUvMC84QkNFN0U3MkFCQkJBRDAwNTM2MzkzQTA4 NDBCQkEwQUJGM0FBMjhFLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzMwOGY4YjNlLTA1MWUtNGM0NC05Y2I1LTdiODMzMWVmOWEwNC8xLzhCQ0U3RTcy QUJCQkFEMDA1MzYzOTNBMDg0MEJCQTBBQkYzQUEyOEUubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCTt/4U 2zDSmtmw2UEJ0+PAO4ib0zBc9TWZ+XFwl458FP5OQ06vfN+M6BxSqacFwyeYNohB +LreU5sxplgZ/qbgVHPPhC3oOu9sUV67e4G/tnQeChQxbsj5x4NAcJV2TTMQt3d9 HJhXCw7VhOON0NHv2DSK/CKVBHF3UxfXgvuTTS6jrKoYLBzX7tF6hUh2XL0KKlhQ a87FQo1HrOit+p7LR54baZYMr9kI3tSLiMGc8n5CyCt/cuwz+7fYpgGKCmpnB0Pd h4Wl1C4IQmAWZ8M3QivejtU3ECCHTwz9k8LqdMHfzcqH4aFuhX6TeHS7gXxWxWjk 3v5qPWi1jf+bO9/T -----END CERTIFICATE-----Generated at Fri Apr 17 12:31:05 2026 by rpki-client