$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/4/8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C.mft File: 8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C.mft (raw, json) Hash identifier: LIpGyYBtrMeVTLJbPxzTbPo+52doFTCMIo7bQvdKfJg= Subject key identifier: 53:53:E8:E5:6D:66:1B:5E:A3:27:E0:76:76:8D:38:04:1A:9B:83:BB Authority key identifier: 8E:07:D3:1C:64:52:F7:A6:B2:4E:63:CD:DC:49:0E:12:E0:AF:B3:8C Certificate issuer: /CN=8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C Certificate serial: 0967D317326559ED50B00D84A984A016D98E7B38 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/4/8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C.mft Manifest number: 0334 Signing time: Sun 01 Mar 2026 13:25:06 +0000 Manifest this update: Sun 01 Mar 2026 13:20:06 +0000 Manifest next update: Mon 02 Mar 2026 13:39:06 +0000 Files and hashes: 1: 326131343a373538313a343731303a3a2f34342d3438203d3e20313439363930.roa (hash: rLVUcUxyRgJtw6VSAGlKyA8uqmBel4P5gDB+BMhpgCc=) 2: 326131343a373538313a343934303a3a2f34342d3434203d3e20323135313731.roa (hash: 6pSA0kSz3996g9/BXeNESbR6lV0s0HcQ+D2Slss3z5w=) 3: 326131343a373538313a343835653a3a2f34382d3438203d3e20323134363737.roa (hash: iHR6gaBLhEeuJStOmjFzEe4Moo+lPwxxC1xTUcqx6g4=) 4: 326131343a373538313a343832303a3a2f34342d3438203d3e20323135323233.roa (hash: 2UDjxG4RlvjPmviPQqGqAVVrCPWdscmfmRM0j7DODko=) 5: 326131343a373538313a343635303a3a2f34342d3438203d3e20313335363539.roa (hash: iqN0K0kqjE2jNtYdeLoflK5x6Z7cJoriz0IZPsDEpKs=) 6: 326131343a373538313a343836303a3a2f34342d3438203d3e20313531353434.roa (hash: XJo8jS2djpRteJlKSIzBy0GSOcq3Jj/2wBDjV1PmcuQ=) 7: 326131343a373538313a343535303a3a2f34342d3438203d3e20323136333735.roa (hash: 33Hc4k2qb/SFtHgCtF148ZPS40TPUk0mIWne3Kl1fjs=) 8: 326131343a373538313a343030303a3a2f33362d3438203d3e203434383137.roa (hash: fudCQ5HvpSkAFWaORqCftP85E1ijbMZ/SJYbFT8n65o=) 9: 326131343a373538313a343536303a3a2f34342d3438203d3e20323135313731.roa (hash: QP4KPs363lKNvbDMC91nWR64EDb9a5wYXaiiUC4k7Hs=) 10: 326131343a373538313a343835303a3a2f34342d3438203d3e20323135333739.roa (hash: MBbahVlOUY0BFTONMtnmzy3HTHvtjPISBdqoM0Cyb4U=) 11: 326131343a373538313a343535353a3a2f34382d3438203d3e20323136333735.roa (hash: JVdP0q01IdpmOHNHM/8N7QIeZGO9fY1B0zhs290wioo=) 12: 326131343a373538313a343934303a3a2f34342d3438203d3e20313335363539.roa (hash: 8xEoc2WbgF3aR/A4BmGA/5swJlN4eULU8RI9MBQf5A8=) 13: 326131343a373538313a343833303a3a2f34342d3438203d3e20323135323231.roa (hash: Yud6VyEfzu6bUn3ZGGTJfpmlFiOU2yKLbFt5IH7TKH4=) 14: 326131343a373538313a343332303a3a2f34342d3438203d3e2039343232.roa (hash: a74YsL1qU7MZs6Id2KBnat9Mk42FfInZrWbOj9uOpkE=) 15: 326131343a373538313a343331303a3a2f34342d3438203d3e20323135313731.roa (hash: GiP4GD8ggd65aZhgm+mIHhBgcxctP4oM9yKA+INTEK4=) 16: 326131343a373538313a343831303a3a2f34342d3438203d3e20323135363734.roa (hash: iVSqmJC3EENf/XVlR6YpWn7MgLMOJzCIs/ETJKcPCZ0=) 17: 326131343a373538313a343534303a3a2f34342d3438203d3e203434383137.roa (hash: lL21MUDpM3YDFXY+VNPjMEqMt9/EFafQb01ArsWLAjk=) 18: 326131343a373538313a343834303a3a2f34342d3438203d3e20323135323839.roa (hash: TeM7Pek2amM1UgjzSeE/qaGScbmirVVYpr/gbbLkRM4=) 19: 326131343a373538313a343835663a3a2f34382d3438203d3e20323135333739.roa (hash: LiQaiw5undZF8O9ZPrbB+SuBZXPDpvcvnNafAQKgteo=) 20: 326131343a373538313a343835633a3a2f34382d3438203d3e20313431303637.roa (hash: 9VIFUmaELJ+SuXK7+C+ONAUKoDB5ufOLiduhS88tcKE=) 21: 8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C.crl (hash: DgMetwN5F7dsJT1zw+97ZUk7bVnFNIRrmRZjY98VOdQ=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/4/8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C.crl rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/4/8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Mar 2026 06:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:67:d3:17:32:65:59:ed:50:b0:0d:84:a9:84:a0:16:d9:8e:7b:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C Validity Not Before: Mar 1 13:20:06 2026 GMT Not After : Mar 2 13:39:06 2026 GMT Subject: CN=5353E8E56D661B5EA327E076768D38041A9B83BB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:de:b9:9d:16:76:71:48:ea:e6:2b:a1:11:46: 9d:66:f3:36:36:14:88:b9:12:a1:60:d0:52:1d:c5: a6:ae:d9:6a:a3:54:5f:e5:0d:01:7f:d8:b0:a2:69: 68:1f:37:f3:11:fe:c2:12:80:6e:63:6a:c1:a1:79: ef:25:22:39:c7:6d:97:8d:16:db:cc:18:28:68:20: 02:3f:e0:11:1a:b2:96:8b:5d:ae:0a:29:00:a6:0d: ff:af:e6:e8:7b:0f:ed:ae:fb:3c:ea:4a:6c:4b:50: 52:68:4a:f3:b3:94:5a:b5:c0:1d:33:6e:9b:79:25: 81:46:46:84:bc:b9:88:02:23:e4:e0:65:a2:69:bb: 06:43:2d:43:07:e4:94:c4:a4:df:0d:51:c9:e4:bc: be:14:1d:e2:20:d5:07:b9:49:33:d1:06:fc:1e:bd: 8e:18:f5:ba:b2:bc:94:38:98:c3:fa:e9:06:4a:cb: 4e:95:a1:65:cd:da:40:2e:9b:c8:8f:5f:ef:af:e0: 62:25:bf:3b:09:c5:98:a8:7d:a4:9b:c8:fb:88:24: 1c:47:6c:16:64:91:e7:88:8b:b1:99:2f:49:da:d8: 63:31:98:47:1b:0f:80:9b:53:e9:82:64:3f:70:ec: 8a:6e:10:30:63:15:a7:36:4b:76:91:74:6a:56:8f: 08:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:53:E8:E5:6D:66:1B:5E:A3:27:E0:76:76:8D:38:04:1A:9B:83:BB X509v3 Authority Key Identifier: keyid:8E:07:D3:1C:64:52:F7:A6:B2:4E:63:CD:DC:49:0E:12:E0:AF:B3:8C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/4/8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/4/8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:1b:9d:fa:c2:69:a6:b5:1e:59:c8:8d:cc:56:a6:37:3c:4f: 2c:04:f4:16:89:95:dc:14:8a:3c:b5:6d:33:b9:8d:e1:04:a3: fa:69:67:71:ae:a5:4e:ef:fc:88:69:c9:d0:77:4f:6b:25:ee: 7e:18:a7:7c:1c:84:9b:2a:29:64:71:0d:08:c2:b6:f7:81:12: 80:55:5d:ac:82:fd:16:b6:e3:7f:e2:5e:83:32:d9:ec:d7:f8: 20:8f:51:9d:35:c6:ac:a1:c5:a4:e5:3a:42:61:f9:a5:01:bd: 32:6b:e3:06:37:41:40:11:c5:6e:6d:0a:f0:18:bc:73:3d:8a: 05:67:c2:5d:2f:04:00:32:60:e8:44:d6:70:5a:90:8e:7a:62: c7:d2:25:e6:f6:5d:8e:a3:e2:28:11:ae:3f:35:3b:04:29:3e: af:e5:f8:33:a9:19:a5:ab:d6:1f:29:e8:05:56:80:f8:3c:c6: 2f:f0:90:cb:9e:23:9a:53:df:e3:65:72:26:87:18:17:8c:92: bc:c4:21:06:c6:4d:7a:35:41:57:10:4f:2e:97:a0:c0:0e:fd: a1:c8:15:0f:0b:68:3a:04:05:87:af:f0:64:ae:e2:8c:90:5a: 41:06:fb:bf:9f:70:6f:8a:11:c4:f3:df:60:a1:df:f8:97:f1: 1b:c9:9c:7c -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUCWfTFzJlWe1QsA2EqYSgFtmOezgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEUwN0QzMUM2NDUyRjdBNkIyNEU2M0NEREM0OTBFMTJF MEFGQjM4QzAeFw0yNjAzMDExMzIwMDZaFw0yNjAzMDIxMzM5MDZaMDMxMTAvBgNV BAMTKDUzNTNFOEU1NkQ2NjFCNUVBMzI3RTA3Njc2OEQzODA0MUE5QjgzQkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDI3rmdFnZxSOrmK6ERRp1m8zY2 FIi5EqFg0FIdxaau2WqjVF/lDQF/2LCiaWgfN/MR/sISgG5jasGhee8lIjnHbZeN FtvMGChoIAI/4BEaspaLXa4KKQCmDf+v5uh7D+2u+zzqSmxLUFJoSvOzlFq1wB0z bpt5JYFGRoS8uYgCI+TgZaJpuwZDLUMH5JTEpN8NUcnkvL4UHeIg1Qe5STPRBvwe vY4Y9bqyvJQ4mMP66QZKy06VoWXN2kAum8iPX++v4GIlvzsJxZiofaSbyPuIJBxH bBZkkeeIi7GZL0na2GMxmEcbD4CbU+mCZD9w7IpuEDBjFac2S3aRdGpWjwh3AgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUU1Po5W1mG16jJ+B2do04BBqbg7swHwYDVR0j BBgwFoAUjgfTHGRS96ayTmPN3EkOEuCvs4wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMzExZTQ3YzQtMDJmMC00NjU3LTkwMjItZDJiODNjZmY4 NzU1LzQvOEUwN0QzMUM2NDUyRjdBNkIyNEU2M0NEREM0OTBFMTJFMEFGQjM4Qy5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC84RTA3RDMxQzY0NTJGN0E2QjI0RTYzQ0RE QzQ5MEUxMkUwQUZCMzhDLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzMxMWU0N2M0LTAyZjAtNDY1Ny05MDIyLWQyYjgzY2ZmODc1NS80LzhFMDdEMzFD NjQ1MkY3QTZCMjRFNjNDRERDNDkwRTEyRTBBRkIzOEMubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQB+G536 wmmmtR5ZyI3MVqY3PE8sBPQWiZXcFIo8tW0zuY3hBKP6aWdxrqVO7/yIacnQd09r Je5+GKd8HISbKilkcQ0Iwrb3gRKAVV2sgv0WtuN/4l6DMtns1/ggj1GdNcasocWk 5TpCYfmlAb0ya+MGN0FAEcVubQrwGLxzPYoFZ8JdLwQAMmDoRNZwWpCOemLH0iXm 9l2Oo+IoEa4/NTsEKT6v5fgzqRmlq9YfKegFVoD4PMYv8JDLniOaU9/jZXImhxgX jJK8xCEGxk16NUFXEE8ul6DADv2hyBUPC2g6BAWHr/BkruKMkFpBBvu/n3BvihHE 899god/4l/EbyZx8 -----END CERTIFICATE-----Generated at Sun Mar 1 16:37:38 2026 by rpki-client