$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/308f8b3e-051e-4c44-9cb5-7b8331ef9a04/1/8BCE7E72ABBBAD00536393A0840BBA0ABF3AA28E.mft File: 8BCE7E72ABBBAD00536393A0840BBA0ABF3AA28E.mft (raw, json) Hash identifier: /ykHmnzo78R8hkhOlv6lq7WlKeR5RwJiSGa799yL6iM= Subject key identifier: 1D:92:16:C1:16:8D:2B:B5:9D:FE:8C:EF:0B:40:44:A3:C5:70:DA:52 Authority key identifier: 8B:CE:7E:72:AB:BB:AD:00:53:63:93:A0:84:0B:BA:0A:BF:3A:A2:8E Certificate issuer: /CN=8BCE7E72ABBBAD00536393A0840BBA0ABF3AA28E Certificate serial: 6C7BD1C73C4F4EC4B739E614C028510629956CEE Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/8BCE7E72ABBBAD00536393A0840BBA0ABF3AA28E.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/308f8b3e-051e-4c44-9cb5-7b8331ef9a04/1/8BCE7E72ABBBAD00536393A0840BBA0ABF3AA28E.mft Manifest number: 013B Signing time: Tue 28 Jul 2026 17:57:43 +0000 Manifest this update: Tue 28 Jul 2026 17:52:43 +0000 Manifest next update: Wed 29 Jul 2026 20:59:43 +0000 Files and hashes: 1: 8BCE7E72ABBBAD00536393A0840BBA0ABF3AA28E.crl (hash: fA98gAlwpCDs7o1rMK7h2ozCfCqcTSV9uZp1ojKhe9c=) 2: 326130663a316363353a313730303a3a2f34302d3438203d3e20323032393339.roa (hash: UEeOHO3GGvYWxfR4E2Tbh4+FLPM0KvboVmPBm/zMcrM=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/308f8b3e-051e-4c44-9cb5-7b8331ef9a04/1/8BCE7E72ABBBAD00536393A0840BBA0ABF3AA28E.crl rsync://rsync.paas.rpki.ripe.net/repository/308f8b3e-051e-4c44-9cb5-7b8331ef9a04/1/8BCE7E72ABBBAD00536393A0840BBA0ABF3AA28E.mft rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/8BCE7E72ABBBAD00536393A0840BBA0ABF3AA28E.cer rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/1BE240021A287F298973D9EA28DFC80735FD5800.crl rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/1BE240021A287F298973D9EA28DFC80735FD5800.mft rsync://rpki.ripe.net/repository/DEFAULT/G-JAAhoofymJc9nqKN_IBzX9WAA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 29 Jul 2026 05:42:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:7b:d1:c7:3c:4f:4e:c4:b7:39:e6:14:c0:28:51:06:29:95:6c:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8BCE7E72ABBBAD00536393A0840BBA0ABF3AA28E Validity Not Before: Jul 28 17:52:43 2026 GMT Not After : Jul 29 20:59:43 2026 GMT Subject: CN=1D9216C1168D2BB59DFE8CEF0B4044A3C570DA52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:d5:04:b5:0b:d1:63:1c:a7:66:5b:81:6d:7f: cd:7b:d8:b1:ba:f1:3b:56:b8:52:1e:1f:a2:a2:71: 26:fb:e0:8e:f3:bd:9f:95:f9:4f:2f:83:59:75:69: d5:71:31:3c:5c:5b:4e:2b:8d:36:33:a7:58:19:5e: 47:88:2e:d6:f6:92:69:bd:ae:1b:e5:f2:62:1c:3d: c1:01:98:45:36:45:bf:e2:94:11:7d:67:58:2d:29: 65:a0:40:55:db:45:b0:60:7f:be:31:6a:e3:92:3d: 58:bb:24:d0:67:07:d2:c6:10:19:42:f8:0d:1f:20: dd:04:52:b9:0b:ad:a8:74:92:c7:f2:51:ad:81:81: 94:84:45:53:5a:1e:a0:c7:a0:c0:8c:8f:fd:68:81: 5c:a6:1a:4e:9a:22:d6:24:9d:93:57:7f:30:6a:aa: a1:17:3c:70:4d:01:cc:41:f2:b0:ee:73:3f:23:b3: 5f:71:49:70:c4:ff:af:44:44:be:db:76:34:db:71: 5d:1e:40:46:9e:df:6b:e5:82:b1:a5:56:1a:f2:d9: 9b:de:7c:02:d6:ff:2b:94:b6:1a:a9:09:6e:d7:b7: 44:b7:45:b5:fe:21:88:7e:0a:2e:6b:4e:0e:ad:fa: 2e:4a:37:8a:1a:a8:6b:c1:6f:6b:1a:b0:e6:24:d0: 3f:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:92:16:C1:16:8D:2B:B5:9D:FE:8C:EF:0B:40:44:A3:C5:70:DA:52 X509v3 Authority Key Identifier: keyid:8B:CE:7E:72:AB:BB:AD:00:53:63:93:A0:84:0B:BA:0A:BF:3A:A2:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/308f8b3e-051e-4c44-9cb5-7b8331ef9a04/1/8BCE7E72ABBBAD00536393A0840BBA0ABF3AA28E.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/8BCE7E72ABBBAD00536393A0840BBA0ABF3AA28E.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/308f8b3e-051e-4c44-9cb5-7b8331ef9a04/1/8BCE7E72ABBBAD00536393A0840BBA0ABF3AA28E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:42:15:60:06:2d:d0:d1:05:9a:32:bd:b2:cd:60:b9:8b:8b: dd:06:d1:fb:e8:9c:c8:eb:a1:3e:69:5a:64:59:9e:94:8f:93: f6:ea:ca:29:58:f5:de:d6:70:81:bb:de:2c:d0:64:c8:a9:90: 71:d7:75:c7:99:02:c5:dd:f4:8a:47:45:9f:54:32:8c:eb:fe: 0d:dd:fa:b9:5c:39:40:0d:f9:26:43:f1:b1:a9:fd:a0:0a:aa: fc:de:d2:63:4d:5a:9b:35:7f:e8:9e:02:4d:8a:f9:bc:8e:23: 68:30:a3:8d:02:c6:9d:15:70:ac:e8:8e:79:4b:d7:5d:8d:c9: ab:d8:ea:8f:15:f6:69:40:10:f0:4b:7a:29:19:60:d8:05:ef: bf:13:79:65:ed:de:b7:87:ee:5e:08:f4:cf:3d:b0:64:a1:13: 2d:7c:0b:56:c9:71:af:c6:44:4d:69:f1:36:d0:f1:d8:7f:24: b0:1a:88:69:b6:5d:a3:d1:a0:cb:ef:b8:2b:51:91:1f:ad:22: f0:c0:92:fe:a7:c8:36:85:32:48:61:41:71:d1:eb:21:f6:3a: 99:76:f8:42:18:23:30:3d:f8:4c:a3:34:23:29:d5:56:53:a3: 6f:f5:9d:a8:b8:b9:73:2b:7f:15:05:36:58:39:0f:73:9c:e8: 9b:1c:52:9a -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUbHvRxzxPTsS3OeYUwChRBimVbO4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEJDRTdFNzJBQkJCQUQwMDUzNjM5M0EwODQwQkJBMEFC RjNBQTI4RTAeFw0yNjA3MjgxNzUyNDNaFw0yNjA3MjkyMDU5NDNaMDMxMTAvBgNV BAMTKDFEOTIxNkMxMTY4RDJCQjU5REZFOENFRjBCNDA0NEEzQzU3MERBNTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCL1QS1C9FjHKdmW4Ftf8172LG6 8TtWuFIeH6KicSb74I7zvZ+V+U8vg1l1adVxMTxcW04rjTYzp1gZXkeILtb2kmm9 rhvl8mIcPcEBmEU2Rb/ilBF9Z1gtKWWgQFXbRbBgf74xauOSPVi7JNBnB9LGEBlC +A0fIN0EUrkLrah0ksfyUa2BgZSERVNaHqDHoMCMj/1ogVymGk6aItYknZNXfzBq qqEXPHBNAcxB8rDucz8js19xSXDE/69ERL7bdjTbcV0eQEae32vlgrGlVhry2Zve fALW/yuUthqpCW7Xt0S3RbX+IYh+Ci5rTg6t+i5KN4oaqGvBb2sasOYk0D+rAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUHZIWwRaNK7Wd/ozvC0BEo8Vw2lIwHwYDVR0j BBgwFoAUi85+cqu7rQBTY5OghAu6Cr86oo4wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMzA4ZjhiM2UtMDUxZS00YzQ0LTljYjUtN2I4MzMxZWY5 YTA0LzEvOEJDRTdFNzJBQkJCQUQwMDUzNjM5M0EwODQwQkJBMEFCRjNBQTI4RS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84YWZiNWZlMi0zYzJhLTQ5 MzktOTVlOS0wMDc3YjgwYjRmMGUvMC84QkNFN0U3MkFCQkJBRDAwNTM2MzkzQTA4 NDBCQkEwQUJGM0FBMjhFLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzMwOGY4YjNlLTA1MWUtNGM0NC05Y2I1LTdiODMzMWVmOWEwNC8xLzhCQ0U3RTcy QUJCQkFEMDA1MzYzOTNBMDg0MEJCQTBBQkYzQUEyOEUubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBYQhVg Bi3Q0QWaMr2yzWC5i4vdBtH76JzI66E+aVpkWZ6Uj5P26sopWPXe1nCBu94s0GTI qZBx13XHmQLF3fSKR0WfVDKM6/4N3fq5XDlADfkmQ/Gxqf2gCqr83tJjTVqbNX/o ngJNivm8jiNoMKONAsadFXCs6I55S9ddjcmr2OqPFfZpQBDwS3opGWDYBe+/E3ll 7d63h+5eCPTPPbBkoRMtfAtWyXGvxkRNafE20PHYfySwGohptl2j0aDL77grUZEf rSLwwJL+p8g2hTJIYUFx0esh9jqZdvhCGCMwPfhMozQjKdVWU6Nv9Z2ouLlzK38V BTZYOQ9znOibHFKa -----END CERTIFICATE-----Generated at Tue Jul 28 21:56:04 2026 by rpki-client