$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/308f8b3e-051e-4c44-9cb5-7b8331ef9a04/1/8BCE7E72ABBBAD00536393A0840BBA0ABF3AA28E.mft File: 8BCE7E72ABBBAD00536393A0840BBA0ABF3AA28E.mft (raw, json) Hash identifier: owVn4XGQ5Ys/6BSm7wJ9UsqPFjgP3z23nrPLHDRLuB4= Subject key identifier: 38:5D:67:2D:BF:64:73:53:8B:CB:FB:EE:42:5B:37:EF:17:F7:1F:C9 Authority key identifier: 8B:CE:7E:72:AB:BB:AD:00:53:63:93:A0:84:0B:BA:0A:BF:3A:A2:8E Certificate issuer: /CN=8BCE7E72ABBBAD00536393A0840BBA0ABF3AA28E Certificate serial: 69531E05CBC9534DF6E7C37A62B8D8706E28780E Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/8BCE7E72ABBBAD00536393A0840BBA0ABF3AA28E.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/308f8b3e-051e-4c44-9cb5-7b8331ef9a04/1/8BCE7E72ABBBAD00536393A0840BBA0ABF3AA28E.mft Manifest number: FC Signing time: Sat 13 Jun 2026 01:57:25 +0000 Manifest this update: Sat 13 Jun 2026 01:52:25 +0000 Manifest next update: Sun 14 Jun 2026 04:13:25 +0000 Files and hashes: 1: 8BCE7E72ABBBAD00536393A0840BBA0ABF3AA28E.crl (hash: bBs/Ican4/ikaUoWAgBq0a61ixA9DdC1n8g09fWpMGk=) 2: 326130663a316363353a313730303a3a2f34302d3438203d3e20323032393339.roa (hash: UEeOHO3GGvYWxfR4E2Tbh4+FLPM0KvboVmPBm/zMcrM=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/308f8b3e-051e-4c44-9cb5-7b8331ef9a04/1/8BCE7E72ABBBAD00536393A0840BBA0ABF3AA28E.crl rsync://rsync.paas.rpki.ripe.net/repository/308f8b3e-051e-4c44-9cb5-7b8331ef9a04/1/8BCE7E72ABBBAD00536393A0840BBA0ABF3AA28E.mft rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/8BCE7E72ABBBAD00536393A0840BBA0ABF3AA28E.cer rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/1BE240021A287F298973D9EA28DFC80735FD5800.crl rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/1BE240021A287F298973D9EA28DFC80735FD5800.mft rsync://rpki.ripe.net/repository/DEFAULT/G-JAAhoofymJc9nqKN_IBzX9WAA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 13 Jun 2026 22:39:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:53:1e:05:cb:c9:53:4d:f6:e7:c3:7a:62:b8:d8:70:6e:28:78:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8BCE7E72ABBBAD00536393A0840BBA0ABF3AA28E Validity Not Before: Jun 13 01:52:25 2026 GMT Not After : Jun 14 04:13:25 2026 GMT Subject: CN=385D672DBF6473538BCBFBEE425B37EF17F71FC9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:1c:4c:1d:25:b9:93:9c:67:72:e1:70:12:e8: f1:95:af:e4:37:c7:0a:e9:33:6f:bb:00:8d:f3:b7: 1d:57:e8:18:09:c3:2a:a2:76:ae:20:c9:50:ad:1e: bb:25:4b:c9:e8:e1:4d:b4:5d:fe:9c:72:0f:2d:0d: ae:59:52:eb:6a:4e:14:f1:ba:1b:3e:8a:22:05:d3: a3:7b:97:72:c0:03:cb:50:8e:cf:5d:53:fb:60:2b: 6d:4c:64:d9:ee:59:0f:5b:1a:ea:14:d0:e5:7c:4d: 0c:15:4e:33:ec:63:43:ab:e3:9c:a8:bd:ab:ea:81: a5:59:a6:91:5f:0c:85:7f:5f:1e:1b:98:4d:2f:47: 6b:bc:cc:39:8e:0d:3d:49:99:9b:86:05:3f:46:4a: ac:8d:5f:e8:21:fd:70:93:cd:86:e6:7f:71:e3:31: 0e:f3:50:99:92:b3:83:95:6e:50:73:e2:99:63:8d: c8:5d:9c:a6:50:ca:6a:76:09:22:b1:64:0d:49:9e: 41:61:d5:97:e9:6e:e0:5c:e4:f8:25:bf:1f:df:92: dd:55:e5:48:1c:ad:4b:bb:35:ed:ba:ae:31:40:ce: 4f:1c:e0:3f:35:4c:8b:83:34:da:52:ca:e3:4a:dc: 85:3b:d9:6d:a2:e5:16:dd:8e:aa:a7:08:35:c2:9c: 6f:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:5D:67:2D:BF:64:73:53:8B:CB:FB:EE:42:5B:37:EF:17:F7:1F:C9 X509v3 Authority Key Identifier: keyid:8B:CE:7E:72:AB:BB:AD:00:53:63:93:A0:84:0B:BA:0A:BF:3A:A2:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/308f8b3e-051e-4c44-9cb5-7b8331ef9a04/1/8BCE7E72ABBBAD00536393A0840BBA0ABF3AA28E.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/8BCE7E72ABBBAD00536393A0840BBA0ABF3AA28E.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/308f8b3e-051e-4c44-9cb5-7b8331ef9a04/1/8BCE7E72ABBBAD00536393A0840BBA0ABF3AA28E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:49:ab:cb:5a:b2:2f:89:9f:f3:8d:2e:85:68:d1:bd:d0:79: 13:dd:99:15:25:bf:a8:bc:47:ae:08:f5:b1:36:69:07:2f:ca: 88:29:35:74:8f:a7:ed:83:55:c1:33:46:d9:0b:33:b6:03:e4: 02:f1:3f:fa:d0:16:e3:41:ac:b3:e1:5f:fe:41:2c:67:5d:77: 79:85:b4:a1:33:f3:49:2d:2d:83:e2:19:46:f7:6a:1f:2b:f6: 13:b6:be:39:42:b8:7f:73:ab:8c:40:b5:34:37:9f:dd:d9:d2: 49:ab:1b:15:2a:c4:13:69:4c:d7:69:43:fe:ad:ee:ce:19:7b: f0:af:e4:da:f0:39:3b:f5:e6:e3:e9:ee:38:74:5f:7b:4c:06: 57:99:ca:91:78:c2:59:66:aa:49:59:c0:64:11:3d:2f:82:ba: 19:9e:92:94:d0:47:ea:6d:7f:af:a7:e1:e1:57:a4:5c:ec:30: 41:02:40:b8:14:46:66:50:17:a7:c4:07:8b:43:85:72:bb:d9: 48:f5:6f:9c:95:5f:54:c4:49:f9:e1:54:6a:c2:4a:5a:5d:90: d5:8d:b0:c6:72:3e:39:ac:ad:63:3b:5f:68:1b:25:c2:4b:cd: 9a:7e:0b:fb:16:8c:28:9b:c5:81:3a:da:be:37:f9:f6:05:7a: 06:9a:6d:62 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUaVMeBcvJU03258N6YrjYcG4oeA4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEJDRTdFNzJBQkJCQUQwMDUzNjM5M0EwODQwQkJBMEFC RjNBQTI4RTAeFw0yNjA2MTMwMTUyMjVaFw0yNjA2MTQwNDEzMjVaMDMxMTAvBgNV BAMTKDM4NUQ2NzJEQkY2NDczNTM4QkNCRkJFRTQyNUIzN0VGMTdGNzFGQzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDaHEwdJbmTnGdy4XAS6PGVr+Q3 xwrpM2+7AI3ztx1X6BgJwyqidq4gyVCtHrslS8no4U20Xf6ccg8tDa5ZUutqThTx uhs+iiIF06N7l3LAA8tQjs9dU/tgK21MZNnuWQ9bGuoU0OV8TQwVTjPsY0Or45yo vavqgaVZppFfDIV/Xx4bmE0vR2u8zDmODT1JmZuGBT9GSqyNX+gh/XCTzYbmf3Hj MQ7zUJmSs4OVblBz4pljjchdnKZQymp2CSKxZA1JnkFh1ZfpbuBc5Pglvx/fkt1V 5UgcrUu7Ne26rjFAzk8c4D81TIuDNNpSyuNK3IU72W2i5RbdjqqnCDXCnG/BAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUOF1nLb9kc1OLy/vuQls37xf3H8kwHwYDVR0j BBgwFoAUi85+cqu7rQBTY5OghAu6Cr86oo4wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMzA4ZjhiM2UtMDUxZS00YzQ0LTljYjUtN2I4MzMxZWY5 YTA0LzEvOEJDRTdFNzJBQkJCQUQwMDUzNjM5M0EwODQwQkJBMEFCRjNBQTI4RS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84YWZiNWZlMi0zYzJhLTQ5 MzktOTVlOS0wMDc3YjgwYjRmMGUvMC84QkNFN0U3MkFCQkJBRDAwNTM2MzkzQTA4 NDBCQkEwQUJGM0FBMjhFLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzMwOGY4YjNlLTA1MWUtNGM0NC05Y2I1LTdiODMzMWVmOWEwNC8xLzhCQ0U3RTcy QUJCQkFEMDA1MzYzOTNBMDg0MEJCQTBBQkYzQUEyOEUubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQARSavL WrIviZ/zjS6FaNG90HkT3ZkVJb+ovEeuCPWxNmkHL8qIKTV0j6ftg1XBM0bZCzO2 A+QC8T/60BbjQayz4V/+QSxnXXd5hbShM/NJLS2D4hlG92ofK/YTtr45Qrh/c6uM QLU0N5/d2dJJqxsVKsQTaUzXaUP+re7OGXvwr+Ta8Dk79ebj6e44dF97TAZXmcqR eMJZZqpJWcBkET0vgroZnpKU0EfqbX+vp+HhV6Rc7DBBAkC4FEZmUBenxAeLQ4Vy u9lI9W+clV9UxEn54VRqwkpaXZDVjbDGcj45rK1jO19oGyXCS82afgv7Fowom8WB Otq+N/n2BXoGmm1i -----END CERTIFICATE-----Generated at Sat Jun 13 09:49:49 2026 by rpki-client