$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/65eae745-8ac9-4e71-bc94-fcb261703f96/1/8BAD307CD4DF11014E40EDDFFFD60F9A09E6E95C.mft File: 8BAD307CD4DF11014E40EDDFFFD60F9A09E6E95C.mft (raw, json) Hash identifier: +EwpMf9LPiwqRAq/Sh/OycJ5RYwpf3F+eq2BkoPaTbk= Subject key identifier: 5E:9B:F6:89:1E:AE:8B:63:BF:53:3C:26:BD:E5:1D:5F:0E:BB:AE:8A Authority key identifier: 8B:AD:30:7C:D4:DF:11:01:4E:40:ED:DF:FF:D6:0F:9A:09:E6:E9:5C Certificate issuer: /CN=8BAD307CD4DF11014E40EDDFFFD60F9A09E6E95C Certificate serial: 3B0901A960760B62EA8FECD75C90DC83C898B8AF Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/0/8BAD307CD4DF11014E40EDDFFFD60F9A09E6E95C.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/65eae745-8ac9-4e71-bc94-fcb261703f96/1/8BAD307CD4DF11014E40EDDFFFD60F9A09E6E95C.mft Manifest number: 0425 Signing time: Sun 15 Nov 2026 03:50:12 +0000 Manifest this update: Sun 15 Nov 2026 03:45:12 +0000 Manifest next update: Mon 16 Nov 2026 04:55:12 +0000 Files and hashes: 1: 326131333a393634343a343061653a3a2f34382d3438203d3e20323034323931.roa (hash: jQCFkL+Yg5XKM0MPVV7/8x7LBw7A1oHq3dyEmyVOQgo=) 2: 8BAD307CD4DF11014E40EDDFFFD60F9A09E6E95C.crl (hash: WphOZl77ULxlp6q8LyLFZuUhh4SK9z5174A0u8Tok04=) 3: 326131333a393634343a343030303a3a2f34302d3430203d3e20323034323931.roa (hash: YgD4FXqTWmPFPjeYHziBG/J6IaO/Hxlen1UWzQrfC/Y=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/65eae745-8ac9-4e71-bc94-fcb261703f96/1/8BAD307CD4DF11014E40EDDFFFD60F9A09E6E95C.crl rsync://rsync.paas.rpki.ripe.net/repository/65eae745-8ac9-4e71-bc94-fcb261703f96/1/8BAD307CD4DF11014E40EDDFFFD60F9A09E6E95C.mft rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/0/8BAD307CD4DF11014E40EDDFFFD60F9A09E6E95C.cer rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/0/F1D0572FE72991BD32854BAC716676EBDAD22ACE.crl rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/0/F1D0572FE72991BD32854BAC716676EBDAD22ACE.mft rsync://rpki.ripe.net/repository/DEFAULT/8dBXL-cpkb0yhUuscWZ269rSKs4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 16 Nov 2026 03:57:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:09:01:a9:60:76:0b:62:ea:8f:ec:d7:5c:90:dc:83:c8:98:b8:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8BAD307CD4DF11014E40EDDFFFD60F9A09E6E95C Validity Not Before: Nov 15 03:45:12 2026 GMT Not After : Nov 16 04:55:12 2026 GMT Subject: CN=5E9BF6891EAE8B63BF533C26BDE51D5F0EBBAE8A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:d0:2d:97:6e:9e:ee:ba:5d:ba:da:66:ca:17: 0d:f6:93:fc:db:5f:b4:22:0a:17:7c:5a:c7:f5:b0: 3d:69:ea:ed:64:aa:92:82:89:f4:a9:95:dd:ad:07: de:07:ae:39:62:58:ac:af:4d:cb:ac:a7:a5:f4:ae: 31:a6:5b:0d:2c:7c:dd:ec:a5:44:3b:ea:89:d2:7b: 31:3e:76:54:ab:f9:47:c6:db:f8:f6:a7:12:b4:0c: e3:93:24:1a:71:86:a5:1c:12:6c:0e:69:58:4e:da: fd:59:ab:7b:59:13:db:26:90:b8:12:74:15:63:71: 6d:41:90:f9:15:d2:60:2a:be:31:94:49:81:c7:40: 3c:90:3b:e0:e1:52:ff:65:c6:71:29:29:65:7a:58: 98:10:5a:00:0b:87:b6:d2:5f:7c:a8:b8:cd:f7:5e: ef:80:3f:4e:b8:5e:10:b6:ba:9a:50:cb:08:08:6d: 4a:d6:36:fd:d3:04:cb:a7:60:46:bf:b0:c2:7f:d6: c5:01:6e:1d:52:0f:c1:2d:f0:d6:d4:a9:b8:34:a1: 6e:5c:9b:51:89:65:45:70:66:7c:3f:e9:50:70:1d: 4c:35:f5:37:b7:b9:f9:42:90:98:2a:82:4e:dc:d3: 05:52:a3:18:35:10:05:a3:44:ee:ff:b0:e3:93:7b: 28:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:9B:F6:89:1E:AE:8B:63:BF:53:3C:26:BD:E5:1D:5F:0E:BB:AE:8A X509v3 Authority Key Identifier: keyid:8B:AD:30:7C:D4:DF:11:01:4E:40:ED:DF:FF:D6:0F:9A:09:E6:E9:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/65eae745-8ac9-4e71-bc94-fcb261703f96/1/8BAD307CD4DF11014E40EDDFFFD60F9A09E6E95C.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/0/8BAD307CD4DF11014E40EDDFFFD60F9A09E6E95C.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/65eae745-8ac9-4e71-bc94-fcb261703f96/1/8BAD307CD4DF11014E40EDDFFFD60F9A09E6E95C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b9:09:f7:4e:5d:b2:ca:e4:b7:a8:38:3a:e6:5e:50:fe:6a:17: b4:17:67:0d:e4:71:ea:10:cd:e2:9b:53:87:e5:40:c3:27:6f: a5:58:1f:bf:b1:ef:38:b0:7f:91:fe:d4:f3:f7:35:61:ad:fb: 0e:14:d3:d1:d6:70:d3:8c:37:0d:a7:a8:ac:63:d3:1c:e6:23: 34:70:5e:7b:31:a2:c9:44:51:a5:66:d9:cd:5d:f9:fd:d3:a7: 94:ab:0f:dc:86:e1:08:a5:9f:ab:cf:62:d8:33:8f:43:17:58: 70:bf:3d:e8:25:0d:2b:77:dd:6b:1b:77:88:91:c9:1f:b4:db: e4:1c:79:02:21:55:92:3b:f3:0a:45:33:c1:d3:f2:de:66:ee: ca:63:3b:06:44:30:eb:a2:f1:43:1b:0e:4e:ed:2f:c5:97:60: 65:e5:4b:b4:8b:63:0f:11:ac:20:11:74:cd:6a:b4:60:68:34: 05:20:5d:35:47:a7:af:a0:89:ca:4f:43:99:03:65:f9:27:81: 4d:b1:13:5c:ef:7a:0d:74:ba:25:d6:b7:3a:00:45:5e:b7:e4: 86:1c:6f:60:9d:c5:ed:f1:0c:07:56:e5:19:f0:62:b3:73:6d: 16:c6:44:f0:41:8c:23:56:10:c6:0e:be:7f:85:cf:f9:80:01: e5:3a:6c:8b -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUOwkBqWB2C2Lqj+zXXJDcg8iYuK8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEJBRDMwN0NENERGMTEwMTRFNDBFRERGRkZENjBGOUEw OUU2RTk1QzAeFw0yNjExMTUwMzQ1MTJaFw0yNjExMTYwNDU1MTJaMDMxMTAvBgNV BAMTKDVFOUJGNjg5MUVBRThCNjNCRjUzM0MyNkJERTUxRDVGMEVCQkFFOEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCS0C2Xbp7uul262mbKFw32k/zb X7QiChd8Wsf1sD1p6u1kqpKCifSpld2tB94HrjliWKyvTcusp6X0rjGmWw0sfN3s pUQ76onSezE+dlSr+UfG2/j2pxK0DOOTJBpxhqUcEmwOaVhO2v1Zq3tZE9smkLgS dBVjcW1BkPkV0mAqvjGUSYHHQDyQO+DhUv9lxnEpKWV6WJgQWgALh7bSX3youM33 Xu+AP064XhC2uppQywgIbUrWNv3TBMunYEa/sMJ/1sUBbh1SD8Et8NbUqbg0oW5c m1GJZUVwZnw/6VBwHUw19Te3uflCkJgqgk7c0wVSoxg1EAWjRO7/sOOTeyg/AgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUXpv2iR6ui2O/UzwmveUdXw67roowHwYDVR0j BBgwFoAUi60wfNTfEQFOQO3f/9YPmgnm6VwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNjVlYWU3NDUtOGFjOS00ZTcxLWJjOTQtZmNiMjYxNzAz Zjk2LzEvOEJBRDMwN0NENERGMTEwMTRFNDBFRERGRkZENjBGOUEwOUU2RTk1Qy5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9lMzBkZTg0Yi00MDBhLTRm ZDEtYWI4YS1lNzYxNmUyNDViNDkvMC84QkFEMzA3Q0Q0REYxMTAxNEU0MEVEREZG RkQ2MEY5QTA5RTZFOTVDLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzY1ZWFlNzQ1LThhYzktNGU3MS1iYzk0LWZjYjI2MTcwM2Y5Ni8xLzhCQUQzMDdD RDRERjExMDE0RTQwRURERkZGRDYwRjlBMDlFNkU5NUMubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQC5CfdO XbLK5LeoODrmXlD+ahe0F2cN5HHqEM3im1OH5UDDJ2+lWB+/se84sH+R/tTz9zVh rfsOFNPR1nDTjDcNp6isY9Mc5iM0cF57MaLJRFGlZtnNXfn906eUqw/chuEIpZ+r z2LYM49DF1hwvz3oJQ0rd91rG3eIkckftNvkHHkCIVWSO/MKRTPB0/LeZu7KYzsG RDDrovFDGw5O7S/Fl2Bl5Uu0i2MPEawgEXTNarRgaDQFIF01R6evoInKT0OZA2X5 J4FNsRNc73oNdLol1rc6AEVet+SGHG9gncXt8QwHVuUZ8GKzc20WxkTwQYwjVhDG Dr5/hc/5gAHlOmyL -----END CERTIFICATE-----Generated at Sun Nov 15 13:08:35 2026 by rpki-client