$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/308f8b3e-051e-4c44-9cb5-7b8331ef9a04/1/8BCE7E72ABBBAD00536393A0840BBA0ABF3AA28E.mft File: 8BCE7E72ABBBAD00536393A0840BBA0ABF3AA28E.mft (raw, json) Hash identifier: UNL46MfZe/M4+ReJKCwbqrP8JSkrbGjb8KxAOlQdLQ0= Subject key identifier: 92:D7:12:03:91:51:E6:62:32:24:4E:6B:6B:C5:9C:D2:36:01:86:3F Authority key identifier: 8B:CE:7E:72:AB:BB:AD:00:53:63:93:A0:84:0B:BA:0A:BF:3A:A2:8E Certificate issuer: /CN=8BCE7E72ABBBAD00536393A0840BBA0ABF3AA28E Certificate serial: 03C33787D22A2AE5C5D8E6B57B287DF08E016A51 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/8BCE7E72ABBBAD00536393A0840BBA0ABF3AA28E.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/308f8b3e-051e-4c44-9cb5-7b8331ef9a04/1/8BCE7E72ABBBAD00536393A0840BBA0ABF3AA28E.mft Manifest number: 0187 Signing time: Mon 21 Sep 2026 16:23:03 +0000 Manifest this update: Mon 21 Sep 2026 16:18:03 +0000 Manifest next update: Tue 22 Sep 2026 17:21:03 +0000 Files and hashes: 1: 8BCE7E72ABBBAD00536393A0840BBA0ABF3AA28E.crl (hash: t0dLpBdVZXXMDjvrL3x7juSgM0NPj1fJ8iJyr95+wCI=) 2: 326130663a316363353a313730303a3a2f34302d3438203d3e20323032393339.roa (hash: UEeOHO3GGvYWxfR4E2Tbh4+FLPM0KvboVmPBm/zMcrM=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/308f8b3e-051e-4c44-9cb5-7b8331ef9a04/1/8BCE7E72ABBBAD00536393A0840BBA0ABF3AA28E.crl rsync://rsync.paas.rpki.ripe.net/repository/308f8b3e-051e-4c44-9cb5-7b8331ef9a04/1/8BCE7E72ABBBAD00536393A0840BBA0ABF3AA28E.mft rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/8BCE7E72ABBBAD00536393A0840BBA0ABF3AA28E.cer rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/1BE240021A287F298973D9EA28DFC80735FD5800.crl rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/1BE240021A287F298973D9EA28DFC80735FD5800.mft rsync://rpki.ripe.net/repository/DEFAULT/G-JAAhoofymJc9nqKN_IBzX9WAA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 22 Sep 2026 14:16:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:c3:37:87:d2:2a:2a:e5:c5:d8:e6:b5:7b:28:7d:f0:8e:01:6a:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8BCE7E72ABBBAD00536393A0840BBA0ABF3AA28E Validity Not Before: Sep 21 16:18:03 2026 GMT Not After : Sep 22 17:21:03 2026 GMT Subject: CN=92D712039151E66232244E6B6BC59CD23601863F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:99:4e:8a:a6:84:65:31:91:0f:65:2e:9f:42: 02:71:b6:27:89:c6:df:a4:5b:d1:c4:b0:b3:c5:86: ed:22:cf:47:e2:1e:e7:50:94:9c:82:b2:ed:19:f1: 33:a9:68:81:3f:6c:83:4b:85:0b:06:29:c3:64:f6: 7f:df:48:3e:5e:07:22:ac:d7:ea:c8:f0:0f:22:41: 85:b0:3b:3d:a9:aa:e2:1b:ea:ca:44:a5:fe:66:58: f0:27:2c:8a:13:81:74:43:e4:7d:6d:e0:76:52:6d: 60:c5:64:74:11:af:3d:74:32:16:ce:33:99:ee:66: c4:7f:3a:c0:c7:9b:78:c1:e3:58:cb:f8:9a:7a:a2: 8d:4f:ed:9b:2f:b2:cd:94:ef:35:8e:f8:22:1b:92: d2:4b:68:02:e3:b1:6b:88:4f:b9:39:c5:ec:15:d2: 14:df:56:26:92:8b:51:5b:c6:c2:99:ce:df:f0:d6: e7:5a:a8:4d:09:f8:55:6b:8a:7f:81:ba:ee:d0:ed: 8b:f3:cb:6a:08:fd:1e:2e:7c:ab:d4:d3:c6:d9:ba: fb:82:d8:3a:78:4f:a1:5e:b5:26:13:a1:86:60:08: 1a:6c:e0:b5:77:90:ea:0d:f1:ff:78:5d:80:bd:ab: 30:5a:fc:3a:44:52:da:d1:db:f7:2e:8a:23:52:1d: b8:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:D7:12:03:91:51:E6:62:32:24:4E:6B:6B:C5:9C:D2:36:01:86:3F X509v3 Authority Key Identifier: keyid:8B:CE:7E:72:AB:BB:AD:00:53:63:93:A0:84:0B:BA:0A:BF:3A:A2:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/308f8b3e-051e-4c44-9cb5-7b8331ef9a04/1/8BCE7E72ABBBAD00536393A0840BBA0ABF3AA28E.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/8BCE7E72ABBBAD00536393A0840BBA0ABF3AA28E.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/308f8b3e-051e-4c44-9cb5-7b8331ef9a04/1/8BCE7E72ABBBAD00536393A0840BBA0ABF3AA28E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8e:4b:81:68:9f:eb:ca:5e:c9:23:f6:f3:5e:4d:69:87:0a:91: 2e:e8:c0:f6:71:ad:3d:b1:04:26:15:fd:2e:65:6d:f2:c5:7d: 91:2c:65:ae:48:24:32:ed:fa:5e:37:f1:ba:1b:e1:d3:f0:57: 9c:5d:19:29:bf:64:e9:16:ac:08:07:07:39:d4:f6:3c:ba:ff: 7c:82:98:61:d9:a2:08:5c:e0:dd:f2:a3:62:be:0f:21:3b:64: fb:a4:ef:00:3c:c0:f9:79:1e:bb:8b:d4:ca:74:c7:27:92:6e: 45:bf:eb:96:f4:04:84:fd:e8:97:d6:91:a9:92:13:61:4c:78: 61:d5:e3:35:25:e4:6b:36:72:98:fa:5e:8c:be:4c:c8:c8:c8: b2:ad:d9:45:5a:6a:f2:bf:3d:81:45:65:5a:88:11:ff:ef:46: fc:aa:fb:cb:f6:cc:16:93:69:7e:8a:dc:ef:53:2e:65:d5:ec: ca:21:0b:6a:cc:f0:70:27:1f:11:a7:f7:43:76:64:e4:6b:79: d9:09:f4:30:23:2c:34:d8:5e:53:4a:dc:c0:15:96:2d:85:15: 20:c6:eb:14:45:82:60:bd:2c:66:1f:0a:ac:59:62:a5:6e:0f: ef:79:3a:2c:78:6e:29:93:6f:e7:70:74:e3:0b:3f:07:b2:d3: a1:d5:e0:5a -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUA8M3h9IqKuXF2Oa1eyh98I4BalEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEJDRTdFNzJBQkJCQUQwMDUzNjM5M0EwODQwQkJBMEFC RjNBQTI4RTAeFw0yNjA5MjExNjE4MDNaFw0yNjA5MjIxNzIxMDNaMDMxMTAvBgNV BAMTKDkyRDcxMjAzOTE1MUU2NjIzMjI0NEU2QjZCQzU5Q0QyMzYwMTg2M0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClmU6KpoRlMZEPZS6fQgJxtieJ xt+kW9HEsLPFhu0iz0fiHudQlJyCsu0Z8TOpaIE/bINLhQsGKcNk9n/fSD5eByKs 1+rI8A8iQYWwOz2pquIb6spEpf5mWPAnLIoTgXRD5H1t4HZSbWDFZHQRrz10MhbO M5nuZsR/OsDHm3jB41jL+Jp6oo1P7Zsvss2U7zWO+CIbktJLaALjsWuIT7k5xewV 0hTfViaSi1FbxsKZzt/w1udaqE0J+FVrin+Buu7Q7Yvzy2oI/R4ufKvU08bZuvuC 2Dp4T6FetSYToYZgCBps4LV3kOoN8f94XYC9qzBa/DpEUtrR2/cuiiNSHbj7AgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUktcSA5FR5mIyJE5ra8Wc0jYBhj8wHwYDVR0j BBgwFoAUi85+cqu7rQBTY5OghAu6Cr86oo4wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMzA4ZjhiM2UtMDUxZS00YzQ0LTljYjUtN2I4MzMxZWY5 YTA0LzEvOEJDRTdFNzJBQkJCQUQwMDUzNjM5M0EwODQwQkJBMEFCRjNBQTI4RS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84YWZiNWZlMi0zYzJhLTQ5 MzktOTVlOS0wMDc3YjgwYjRmMGUvMC84QkNFN0U3MkFCQkJBRDAwNTM2MzkzQTA4 NDBCQkEwQUJGM0FBMjhFLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzMwOGY4YjNlLTA1MWUtNGM0NC05Y2I1LTdiODMzMWVmOWEwNC8xLzhCQ0U3RTcy QUJCQkFEMDA1MzYzOTNBMDg0MEJCQTBBQkYzQUEyOEUubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCOS4Fo n+vKXskj9vNeTWmHCpEu6MD2ca09sQQmFf0uZW3yxX2RLGWuSCQy7fpeN/G6G+HT 8FecXRkpv2TpFqwIBwc51PY8uv98gphh2aIIXODd8qNivg8hO2T7pO8APMD5eR67 i9TKdMcnkm5Fv+uW9ASE/eiX1pGpkhNhTHhh1eM1JeRrNnKY+l6MvkzIyMiyrdlF Wmryvz2BRWVaiBH/70b8qvvL9swWk2l+itzvUy5l1ezKIQtqzPBwJx8Rp/dDdmTk a3nZCfQwIyw02F5TStzAFZYthRUgxusURYJgvSxmHwqsWWKlbg/veToseG4pk2/n cHTjCz8HstOh1eBa -----END CERTIFICATE-----Generated at Mon Sep 21 23:34:56 2026 by rpki-client