$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/65eae745-8ac9-4e71-bc94-fcb261703f96/1/8BAD307CD4DF11014E40EDDFFFD60F9A09E6E95C.mft File: 8BAD307CD4DF11014E40EDDFFFD60F9A09E6E95C.mft (raw, json) Hash identifier: N4OWcWrf8YcwBcnbkx5So3Yw7jhwL5GBmcpYxiGqNzA= Subject key identifier: 8E:51:D2:13:13:C0:41:A2:FB:C6:F0:09:20:B5:7A:AF:58:AF:F9:2F Authority key identifier: 8B:AD:30:7C:D4:DF:11:01:4E:40:ED:DF:FF:D6:0F:9A:09:E6:E9:5C Certificate issuer: /CN=8BAD307CD4DF11014E40EDDFFFD60F9A09E6E95C Certificate serial: 314FE73A592BBB7C26C33A5660EE1B2251CB6B4E Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/0/8BAD307CD4DF11014E40EDDFFFD60F9A09E6E95C.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/65eae745-8ac9-4e71-bc94-fcb261703f96/1/8BAD307CD4DF11014E40EDDFFFD60F9A09E6E95C.mft Manifest number: 022F Signing time: Wed 05 Nov 2025 00:04:01 +0000 Manifest this update: Tue 04 Nov 2025 23:59:01 +0000 Manifest next update: Thu 06 Nov 2025 03:03:01 +0000 Files and hashes: 1: 8BAD307CD4DF11014E40EDDFFFD60F9A09E6E95C.crl (hash: 5kYhwl/u2Jjst/IoKILK2q8AXq8HrqfV/mPBdHi9aBk=) 2: 326131333a393634343a343061653a3a2f34382d3438203d3e20323034323931.roa (hash: 0Augomo0JPTrdfBB/3ITj/ZgfSBftNdAdE/vOPCbcS0=) 3: 326131333a393634343a343030303a3a2f34302d3430203d3e20323034323931.roa (hash: 1o4m8PJbpPTt/WwCt8wMPBTEbmCl+8vcVtrKZbTYjFM=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/65eae745-8ac9-4e71-bc94-fcb261703f96/1/8BAD307CD4DF11014E40EDDFFFD60F9A09E6E95C.crl rsync://rsync.paas.rpki.ripe.net/repository/65eae745-8ac9-4e71-bc94-fcb261703f96/1/8BAD307CD4DF11014E40EDDFFFD60F9A09E6E95C.mft rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/0/8BAD307CD4DF11014E40EDDFFFD60F9A09E6E95C.cer rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/0/F1D0572FE72991BD32854BAC716676EBDAD22ACE.crl rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/0/F1D0572FE72991BD32854BAC716676EBDAD22ACE.mft rsync://rpki.ripe.net/repository/DEFAULT/8dBXL-cpkb0yhUuscWZ269rSKs4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 06 Nov 2025 03:03:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:4f:e7:3a:59:2b:bb:7c:26:c3:3a:56:60:ee:1b:22:51:cb:6b:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8BAD307CD4DF11014E40EDDFFFD60F9A09E6E95C Validity Not Before: Nov 4 23:59:01 2025 GMT Not After : Nov 6 03:03:01 2025 GMT Subject: CN=8E51D21313C041A2FBC6F00920B57AAF58AFF92F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:ab:db:c6:d1:8b:45:bb:14:8a:86:8f:a6:5e: d6:6e:3f:fd:8e:a9:04:0d:34:58:30:7c:c2:6f:12: f8:78:21:05:72:e1:8f:1a:ad:78:99:b1:45:ac:ea: 2d:ea:6a:ce:1a:f2:16:1a:26:37:bf:2f:df:08:7c: ef:37:3a:f6:97:96:ed:e3:f5:9c:ae:93:d4:73:2d: 00:95:76:23:25:18:00:2c:c4:cc:10:97:9b:95:b7: 8d:22:fa:23:c3:ec:0d:65:e7:18:75:2a:0f:32:82: fb:f0:59:6e:13:65:95:c3:f6:e2:66:1a:2a:13:60: 9b:ec:ab:57:c7:18:aa:22:96:93:7a:45:45:93:c2: c6:31:bf:fe:31:0e:48:5f:75:bb:b7:63:37:f8:73: 24:57:b7:16:25:69:49:af:65:f1:0d:03:61:73:9b: 3b:a6:1e:ef:fc:dc:09:1e:f3:ad:c3:6f:03:f3:fd: a5:06:e1:68:2b:44:57:dd:2f:35:5b:47:3e:b2:99: 46:39:bb:63:f9:96:52:6e:50:64:2c:f2:61:d4:bb: d2:7f:81:dd:16:18:54:fd:f6:94:86:da:8a:9f:69: a5:d4:c4:77:f4:84:6e:69:d7:11:a5:0c:e2:fc:40: 0b:ee:11:2d:b4:8c:c6:40:8e:fb:ed:6f:df:95:08: 8a:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:51:D2:13:13:C0:41:A2:FB:C6:F0:09:20:B5:7A:AF:58:AF:F9:2F X509v3 Authority Key Identifier: keyid:8B:AD:30:7C:D4:DF:11:01:4E:40:ED:DF:FF:D6:0F:9A:09:E6:E9:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/65eae745-8ac9-4e71-bc94-fcb261703f96/1/8BAD307CD4DF11014E40EDDFFFD60F9A09E6E95C.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/0/8BAD307CD4DF11014E40EDDFFFD60F9A09E6E95C.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/65eae745-8ac9-4e71-bc94-fcb261703f96/1/8BAD307CD4DF11014E40EDDFFFD60F9A09E6E95C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:3c:ce:7c:db:4b:b7:c4:4a:eb:0a:38:ee:4b:d8:60:04:63: aa:fe:fd:43:4c:19:93:c0:88:3a:a6:be:74:5a:fa:87:67:13: 63:2b:a9:54:1e:29:cc:12:32:67:b4:f0:4e:08:cf:f6:95:de: e2:f7:cf:b3:fe:5f:8b:1c:ab:3a:94:12:b8:43:38:56:d2:2c: 8a:96:f8:2f:84:05:43:e3:9e:7d:e7:d7:61:74:fe:43:a3:7a: 62:c9:2a:01:91:82:3a:76:af:45:70:bf:4c:11:58:8e:99:e2: 31:e4:b3:51:cb:2f:5f:84:97:f8:14:6f:ed:60:85:28:96:30: a1:5b:30:c8:46:f7:d7:66:0d:e8:08:db:20:e8:25:be:15:2e: 80:00:8b:e2:d2:94:4f:3e:e1:3b:d7:d0:0c:fd:07:04:f0:28: 9f:63:b0:76:64:54:65:06:2f:e7:2e:f8:eb:46:ec:a0:8f:0e: f5:ba:7d:fb:64:b2:51:f6:ab:22:ea:ab:22:ee:5c:de:ee:d2: af:a7:47:4d:66:ba:cf:a6:fb:3e:20:53:bf:60:b1:81:50:7e: 78:41:46:c3:4e:64:6a:4e:62:ed:b5:fc:13:f4:a1:35:c3:7e: 61:48:35:40:c6:76:0f:a1:f4:76:9a:9d:d4:7c:15:e9:49:8c: ce:7f:bb:7d -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUMU/nOlkru3wmwzpWYO4bIlHLa04wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEJBRDMwN0NENERGMTEwMTRFNDBFRERGRkZENjBGOUEw OUU2RTk1QzAeFw0yNTExMDQyMzU5MDFaFw0yNTExMDYwMzAzMDFaMDMxMTAvBgNV BAMTKDhFNTFEMjEzMTNDMDQxQTJGQkM2RjAwOTIwQjU3QUFGNThBRkY5MkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnq9vG0YtFuxSKho+mXtZuP/2O qQQNNFgwfMJvEvh4IQVy4Y8arXiZsUWs6i3qas4a8hYaJje/L98IfO83OvaXlu3j 9Zyuk9RzLQCVdiMlGAAsxMwQl5uVt40i+iPD7A1l5xh1Kg8ygvvwWW4TZZXD9uJm GioTYJvsq1fHGKoilpN6RUWTwsYxv/4xDkhfdbu3Yzf4cyRXtxYlaUmvZfENA2Fz mzumHu/83Ake863DbwPz/aUG4WgrRFfdLzVbRz6ymUY5u2P5llJuUGQs8mHUu9J/ gd0WGFT99pSG2oqfaaXUxHf0hG5p1xGlDOL8QAvuES20jMZAjvvtb9+VCIrRAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUjlHSExPAQaL7xvAJILV6r1iv+S8wHwYDVR0j BBgwFoAUi60wfNTfEQFOQO3f/9YPmgnm6VwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNjVlYWU3NDUtOGFjOS00ZTcxLWJjOTQtZmNiMjYxNzAz Zjk2LzEvOEJBRDMwN0NENERGMTEwMTRFNDBFRERGRkZENjBGOUEwOUU2RTk1Qy5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9lMzBkZTg0Yi00MDBhLTRm ZDEtYWI4YS1lNzYxNmUyNDViNDkvMC84QkFEMzA3Q0Q0REYxMTAxNEU0MEVEREZG RkQ2MEY5QTA5RTZFOTVDLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzY1ZWFlNzQ1LThhYzktNGU3MS1iYzk0LWZjYjI2MTcwM2Y5Ni8xLzhCQUQzMDdD RDRERjExMDE0RTQwRURERkZGRDYwRjlBMDlFNkU5NUMubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAgPM58 20u3xErrCjjuS9hgBGOq/v1DTBmTwIg6pr50WvqHZxNjK6lUHinMEjJntPBOCM/2 ld7i98+z/l+LHKs6lBK4QzhW0iyKlvgvhAVD455959dhdP5Do3piySoBkYI6dq9F cL9MEViOmeIx5LNRyy9fhJf4FG/tYIUoljChWzDIRvfXZg3oCNsg6CW+FS6AAIvi 0pRPPuE719AM/QcE8CifY7B2ZFRlBi/nLvjrRuygjw71un37ZLJR9qsi6qsi7lze 7tKvp0dNZrrPpvs+IFO/YLGBUH54QUbDTmRqTmLttfwT9KE1w35hSDVAxnYPofR2 mp3UfBXpSYzOf7t9 -----END CERTIFICATE-----Generated at Wed Nov 5 16:08:48 2025 by rpki-client