$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/4/8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C.mft File: 8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C.mft (raw, json) Hash identifier: zL7PqyVtqGGE3ctH6OYQ4H0kBGdcNfPcEVtFXDpiO0I= Subject key identifier: 5E:D3:CF:5C:3D:1A:EF:52:09:84:4F:C5:C9:67:56:1D:C8:DF:45:CC Authority key identifier: 8E:07:D3:1C:64:52:F7:A6:B2:4E:63:CD:DC:49:0E:12:E0:AF:B3:8C Certificate issuer: /CN=8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C Certificate serial: 5305A6617969161BE5DA21A1CB0BA0252A86072B Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/4/8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C.mft Manifest number: 0376 Signing time: Fri 17 Apr 2026 17:01:31 +0000 Manifest this update: Fri 17 Apr 2026 16:56:31 +0000 Manifest next update: Sat 18 Apr 2026 19:04:31 +0000 Files and hashes: 1: 326131343a373538313a343835363a3a2f34382d3438203d3e20313530323439.roa (hash: +BTOyGnB3/SY/p8Ckxmoo0odwD52ixx8ttyy1kP23KM=) 2: 326131343a373538313a343835303a3a2f34342d3438203d3e20323135333739.roa (hash: MBbahVlOUY0BFTONMtnmzy3HTHvtjPISBdqoM0Cyb4U=) 3: 326131343a373538313a343934303a3a2f34342d3438203d3e20313335363539.roa (hash: 8xEoc2WbgF3aR/A4BmGA/5swJlN4eULU8RI9MBQf5A8=) 4: 326131343a373538313a343534303a3a2f34342d3438203d3e203434383137.roa (hash: 7mp0zmnlMvREYQITFuGqaUnQo4881uWLywgG1Fg4GUU=) 5: 326131343a373538313a343834303a3a2f34342d3438203d3e20323135323839.roa (hash: TeM7Pek2amM1UgjzSeE/qaGScbmirVVYpr/gbbLkRM4=) 6: 326131343a373538313a343535353a3a2f34382d3438203d3e20323136333735.roa (hash: JVdP0q01IdpmOHNHM/8N7QIeZGO9fY1B0zhs290wioo=) 7: 326131343a373538313a343535303a3a2f34342d3438203d3e20323136333735.roa (hash: JCFWJgEKOIfNC/UVmwFEJVNgIuAfElA5+DwW/Ff9XGw=) 8: 326131343a373538313a343836303a3a2f34342d3438203d3e20313531353434.roa (hash: OJXw4bailhln27dAWvZZO7aSgL/bQWfg+Oqf5sYF+sE=) 9: 326131343a373538313a343332303a3a2f34342d3438203d3e2039343232.roa (hash: a74YsL1qU7MZs6Id2KBnat9Mk42FfInZrWbOj9uOpkE=) 10: 326131343a373538313a343832303a3a2f34342d3438203d3e20323135323233.roa (hash: 2UDjxG4RlvjPmviPQqGqAVVrCPWdscmfmRM0j7DODko=) 11: 326131343a373538313a343536303a3a2f34342d3438203d3e20323135313731.roa (hash: wlujEilvSGoE2xmgZ9r1cOQVVwj+z/fdPDzPxBXeMcU=) 12: 326131343a373538313a343635303a3a2f34342d3438203d3e20313335363539.roa (hash: iqN0K0kqjE2jNtYdeLoflK5x6Z7cJoriz0IZPsDEpKs=) 13: 326131343a373538313a343731303a3a2f34342d3438203d3e20313439363930.roa (hash: rLVUcUxyRgJtw6VSAGlKyA8uqmBel4P5gDB+BMhpgCc=) 14: 8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C.crl (hash: DLyeXBaPicK05it8MTAgrkM8lP/U4zLebjpzcy6ztHM=) 15: 326131343a373538313a343835653a3a2f34382d3438203d3e20323134363737.roa (hash: iHR6gaBLhEeuJStOmjFzEe4Moo+lPwxxC1xTUcqx6g4=) 16: 326131343a373538313a343934303a3a2f34342d3434203d3e20323135313731.roa (hash: 6pSA0kSz3996g9/BXeNESbR6lV0s0HcQ+D2Slss3z5w=) 17: 326131343a373538313a343835663a3a2f34382d3438203d3e20323135333739.roa (hash: W5Heh9gse8mKUAV/4KyRLY8JwjKj+jz/mhW/8Nexm6w=) 18: 326131343a373538313a343835633a3a2f34382d3438203d3e20313431303637.roa (hash: 9VIFUmaELJ+SuXK7+C+ONAUKoDB5ufOLiduhS88tcKE=) 19: 326131343a373538313a343833303a3a2f34342d3438203d3e20323135323231.roa (hash: Yud6VyEfzu6bUn3ZGGTJfpmlFiOU2yKLbFt5IH7TKH4=) 20: 326131343a373538313a343331303a3a2f34342d3438203d3e20323135313731.roa (hash: GiP4GD8ggd65aZhgm+mIHhBgcxctP4oM9yKA+INTEK4=) 21: 326131343a373538313a343831303a3a2f34342d3438203d3e20323135363734.roa (hash: iVSqmJC3EENf/XVlR6YpWn7MgLMOJzCIs/ETJKcPCZ0=) 22: 326131343a373538313a343030303a3a2f33362d3438203d3e203434383137.roa (hash: fudCQ5HvpSkAFWaORqCftP85E1ijbMZ/SJYbFT8n65o=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/4/8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C.crl rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/4/8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 18 Apr 2026 16:00:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:05:a6:61:79:69:16:1b:e5:da:21:a1:cb:0b:a0:25:2a:86:07:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C Validity Not Before: Apr 17 16:56:31 2026 GMT Not After : Apr 18 19:04:31 2026 GMT Subject: CN=5ED3CF5C3D1AEF5209844FC5C967561DC8DF45CC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:df:93:ea:59:d0:2a:42:bb:73:94:f4:7e:84: 81:00:14:2e:c9:19:d2:a9:b5:e9:56:d0:8c:47:0b: c2:c3:3c:7b:58:4d:14:43:e8:98:2d:30:35:61:f5: 9d:b8:f9:e6:10:e8:e3:49:0a:0d:5c:5b:cb:1f:8c: db:f1:ef:71:5d:ab:85:ca:d4:7a:a0:f6:4c:46:d7: 0a:54:4d:87:f2:e5:ff:8c:30:78:f6:21:50:87:3f: 57:9e:6c:eb:73:a3:b5:1c:80:bf:c7:1c:9a:98:24: 61:03:80:96:93:08:bb:d5:d8:43:51:c8:4e:68:da: cb:42:00:93:4c:c2:b6:a8:0a:26:1b:94:cf:e3:89: aa:8c:23:ad:ee:fe:b8:09:1f:b3:51:d7:4b:26:11: da:1c:a7:22:aa:07:3d:1f:48:f8:68:68:e6:50:1e: 02:d9:17:af:b6:0d:60:36:da:e6:b5:3c:c0:e3:38: b6:b8:b5:8e:3a:b6:99:2b:5a:e8:17:b1:b7:4b:f9: 05:24:36:92:42:19:7b:7b:4b:88:e1:a0:dc:9a:73: 0e:b2:d6:62:d6:9c:9a:8d:d3:7e:27:a6:3d:58:c5: 8c:2c:c7:f6:a6:c1:c4:fe:10:ad:d2:ed:5d:31:af: a2:86:ca:0b:0d:ee:b9:42:19:b3:57:80:b4:72:21: e0:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:D3:CF:5C:3D:1A:EF:52:09:84:4F:C5:C9:67:56:1D:C8:DF:45:CC X509v3 Authority Key Identifier: keyid:8E:07:D3:1C:64:52:F7:A6:B2:4E:63:CD:DC:49:0E:12:E0:AF:B3:8C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/4/8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/4/8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:62:e8:69:4d:4d:8d:55:ae:69:7f:8e:15:c4:ed:e8:32:43: 7f:5f:7a:f0:3b:e2:bf:62:ac:04:fd:0f:32:f9:bc:91:26:b9: 9e:f3:8a:8c:56:48:90:5c:02:a0:0a:15:a8:a2:48:4a:40:3b: d8:93:d6:bf:76:c2:d4:29:3d:fa:63:6a:92:af:9a:2c:50:b2: bd:bb:db:62:71:2f:28:7c:7a:5b:a9:d5:be:84:07:f5:73:10: 6d:0a:b7:99:08:b3:fe:ca:69:de:e4:88:ef:bc:5a:47:09:f5: 8b:b2:b4:f0:51:c1:f9:c2:a0:1c:10:12:74:ff:68:14:6f:cd: 67:61:5a:11:2a:5d:61:8f:91:1a:6b:83:99:73:ea:28:1f:8c: e6:41:e5:27:1a:dc:75:4b:9b:f8:f0:4d:7b:79:dc:9e:52:e2: 1f:ed:6d:cf:da:8e:98:fe:cc:93:dd:de:95:db:87:b8:e4:9c: 63:e3:88:dd:96:de:fa:29:3c:c4:ed:48:54:80:42:f5:d3:cf: cf:9d:02:b7:f0:8d:f3:6d:53:7b:1d:22:bf:f9:09:a1:9b:9f: f7:3a:40:06:e8:5f:95:bb:a6:18:99:ae:bd:fb:f1:76:96:ba: 5d:2e:a3:d4:a2:d3:88:87:a1:37:d5:e3:8b:bd:79:1d:54:74: a4:c7:39:09 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUUwWmYXlpFhvl2iGhywugJSqGByswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEUwN0QzMUM2NDUyRjdBNkIyNEU2M0NEREM0OTBFMTJF MEFGQjM4QzAeFw0yNjA0MTcxNjU2MzFaFw0yNjA0MTgxOTA0MzFaMDMxMTAvBgNV BAMTKDVFRDNDRjVDM0QxQUVGNTIwOTg0NEZDNUM5Njc1NjFEQzhERjQ1Q0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCs35PqWdAqQrtzlPR+hIEAFC7J GdKptelW0IxHC8LDPHtYTRRD6JgtMDVh9Z24+eYQ6ONJCg1cW8sfjNvx73Fdq4XK 1Hqg9kxG1wpUTYfy5f+MMHj2IVCHP1eebOtzo7UcgL/HHJqYJGEDgJaTCLvV2ENR yE5o2stCAJNMwraoCiYblM/jiaqMI63u/rgJH7NR10smEdocpyKqBz0fSPhoaOZQ HgLZF6+2DWA22ua1PMDjOLa4tY46tpkrWugXsbdL+QUkNpJCGXt7S4jhoNyacw6y 1mLWnJqN034npj1YxYwsx/amwcT+EK3S7V0xr6KGygsN7rlCGbNXgLRyIeAjAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUXtPPXD0a71IJhE/FyWdWHcjfRcwwHwYDVR0j BBgwFoAUjgfTHGRS96ayTmPN3EkOEuCvs4wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMzExZTQ3YzQtMDJmMC00NjU3LTkwMjItZDJiODNjZmY4 NzU1LzQvOEUwN0QzMUM2NDUyRjdBNkIyNEU2M0NEREM0OTBFMTJFMEFGQjM4Qy5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC84RTA3RDMxQzY0NTJGN0E2QjI0RTYzQ0RE QzQ5MEUxMkUwQUZCMzhDLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzMxMWU0N2M0LTAyZjAtNDY1Ny05MDIyLWQyYjgzY2ZmODc1NS80LzhFMDdEMzFD NjQ1MkY3QTZCMjRFNjNDRERDNDkwRTEyRTBBRkIzOEMubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAoYuhp TU2NVa5pf44VxO3oMkN/X3rwO+K/YqwE/Q8y+byRJrme84qMVkiQXAKgChWookhK QDvYk9a/dsLUKT36Y2qSr5osULK9u9ticS8ofHpbqdW+hAf1cxBtCreZCLP+ymne 5IjvvFpHCfWLsrTwUcH5wqAcEBJ0/2gUb81nYVoRKl1hj5Eaa4OZc+ooH4zmQeUn Gtx1S5v48E17edyeUuIf7W3P2o6Y/syT3d6V24e45Jxj44jdlt76KTzE7UhUgEL1 08/PnQK38I3zbVN7HSK/+Qmhm5/3OkAG6F+Vu6YYma69+/F2lrpdLqPUotOIh6E3 1eOLvXkdVHSkxzkJ -----END CERTIFICATE-----Generated at Fri Apr 17 22:14:42 2026 by rpki-client