$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/65eae745-8ac9-4e71-bc94-fcb261703f96/1/8BAD307CD4DF11014E40EDDFFFD60F9A09E6E95C.mft File: 8BAD307CD4DF11014E40EDDFFFD60F9A09E6E95C.mft (raw, json) Hash identifier: BDZHGY/94Tw8TYilhGGC+iVjBdtloM9QGa+KNQc/jlU= Subject key identifier: BC:B8:25:39:D0:EE:F6:17:60:1D:0F:EF:0A:04:2F:FD:D0:C0:19:D1 Authority key identifier: 8B:AD:30:7C:D4:DF:11:01:4E:40:ED:DF:FF:D6:0F:9A:09:E6:E9:5C Certificate issuer: /CN=8BAD307CD4DF11014E40EDDFFFD60F9A09E6E95C Certificate serial: 3C79CA229DE50801D68889F3F14DDD2D1E1D3B48 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/0/8BAD307CD4DF11014E40EDDFFFD60F9A09E6E95C.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/65eae745-8ac9-4e71-bc94-fcb261703f96/1/8BAD307CD4DF11014E40EDDFFFD60F9A09E6E95C.mft Manifest number: 0355 Signing time: Sat 13 Jun 2026 03:23:42 +0000 Manifest this update: Sat 13 Jun 2026 03:18:42 +0000 Manifest next update: Sun 14 Jun 2026 04:13:42 +0000 Files and hashes: 1: 326131333a393634343a343030303a3a2f34302d3430203d3e20323034323931.roa (hash: YgD4FXqTWmPFPjeYHziBG/J6IaO/Hxlen1UWzQrfC/Y=) 2: 8BAD307CD4DF11014E40EDDFFFD60F9A09E6E95C.crl (hash: Aq5fwkNAW7E6Ut/el/zp4zEgpITMdEhFN4vCI6Epzrs=) 3: 326131333a393634343a343061653a3a2f34382d3438203d3e20323034323931.roa (hash: /APvQtIczoMdPeFgS8yLWOSzDbhA86h5Cc1N87vUKRI=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/65eae745-8ac9-4e71-bc94-fcb261703f96/1/8BAD307CD4DF11014E40EDDFFFD60F9A09E6E95C.crl rsync://rsync.paas.rpki.ripe.net/repository/65eae745-8ac9-4e71-bc94-fcb261703f96/1/8BAD307CD4DF11014E40EDDFFFD60F9A09E6E95C.mft rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/0/8BAD307CD4DF11014E40EDDFFFD60F9A09E6E95C.cer rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/0/F1D0572FE72991BD32854BAC716676EBDAD22ACE.crl rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/0/F1D0572FE72991BD32854BAC716676EBDAD22ACE.mft rsync://rpki.ripe.net/repository/DEFAULT/8dBXL-cpkb0yhUuscWZ269rSKs4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Jun 2026 04:13:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:79:ca:22:9d:e5:08:01:d6:88:89:f3:f1:4d:dd:2d:1e:1d:3b:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8BAD307CD4DF11014E40EDDFFFD60F9A09E6E95C Validity Not Before: Jun 13 03:18:42 2026 GMT Not After : Jun 14 04:13:42 2026 GMT Subject: CN=BCB82539D0EEF617601D0FEF0A042FFDD0C019D1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:8d:e6:66:70:f9:f2:bb:5b:70:f8:3a:f5:5b: 60:e8:3b:56:f4:ad:4a:ea:bb:af:cc:64:1f:c3:37: 77:14:84:d6:e1:b8:56:0d:24:20:ff:4f:00:c5:1e: 5f:85:8f:9f:4f:93:6e:35:e8:ae:27:49:62:fa:6c: d6:3d:24:49:29:61:e8:7a:d5:3c:3c:a9:26:0c:af: 0d:83:39:fe:66:b4:bb:f2:5a:b3:cc:48:bc:94:73: 78:6c:18:db:4f:f0:b8:e9:51:7e:0e:0b:45:79:0e: f0:6d:e5:ba:91:e1:cc:26:f0:44:62:73:84:8d:ea: 82:4f:1d:71:8d:2a:76:35:56:c5:b8:54:b4:5f:e7: 1b:ad:7c:db:3c:b8:9d:a8:a9:be:c6:f2:39:32:c8: 33:5c:a8:9e:96:ef:de:6a:f8:5e:6b:ca:38:06:81: a3:30:cc:8e:56:9f:7c:dc:3a:b1:ae:74:9f:dc:72: 1e:1d:7e:39:e6:5c:f9:00:5a:78:17:6f:55:e2:f1: 81:54:9e:23:3a:04:ca:7d:30:ee:17:14:90:d3:63: a6:59:6e:e1:8f:d2:fe:6e:33:72:15:92:ed:40:af: c9:21:1d:b0:be:32:d5:70:f7:2d:0d:19:f0:d6:3c: f3:c3:60:0d:58:e9:d8:89:62:c9:5c:0b:09:3f:98: 3f:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:B8:25:39:D0:EE:F6:17:60:1D:0F:EF:0A:04:2F:FD:D0:C0:19:D1 X509v3 Authority Key Identifier: keyid:8B:AD:30:7C:D4:DF:11:01:4E:40:ED:DF:FF:D6:0F:9A:09:E6:E9:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/65eae745-8ac9-4e71-bc94-fcb261703f96/1/8BAD307CD4DF11014E40EDDFFFD60F9A09E6E95C.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/0/8BAD307CD4DF11014E40EDDFFFD60F9A09E6E95C.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/65eae745-8ac9-4e71-bc94-fcb261703f96/1/8BAD307CD4DF11014E40EDDFFFD60F9A09E6E95C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:40:e1:aa:29:fc:ca:b9:1d:c2:81:7a:de:16:b1:54:73:cf: fb:7e:4d:9a:20:79:48:12:2e:13:f4:fa:82:38:0f:12:b4:b0: 5a:20:6b:b3:10:b9:8f:2d:a0:51:6c:49:bf:67:a1:c5:10:5d: 37:45:9c:b9:4a:e5:e3:ba:3c:32:94:b6:85:e9:65:e0:15:ca: 29:bc:38:cc:b4:82:7f:3a:3a:8a:b5:0c:04:e7:06:cc:98:fd: 01:40:4d:29:90:09:5d:3b:24:b0:a5:11:1b:fc:ef:d9:b5:a0: b5:50:ee:ef:5b:61:04:0d:7a:02:8a:bb:bd:90:c6:7d:4d:75: 45:c5:88:25:fd:72:00:cb:7a:67:32:51:a2:0f:b7:ad:e7:f1: 8a:26:2d:28:a5:34:67:0e:14:12:a1:02:d4:59:88:a0:f7:e6: f6:38:01:26:f7:f0:07:18:9c:7e:4d:e3:dd:ee:04:16:59:ac: 8f:ce:d0:fa:4a:4a:dc:4c:fe:27:b8:32:e3:d4:60:54:1e:37: 07:68:84:fe:bd:f7:32:c3:b0:fa:3b:d7:1f:8b:5e:67:05:41: 49:6a:63:1a:2d:84:2e:5b:df:8f:d1:7b:b5:2f:bf:11:ee:ae: f2:1d:99:c7:88:cf:37:57:73:34:8b:7a:ee:56:ce:8a:4d:23: 13:cf:91:4a -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUPHnKIp3lCAHWiInz8U3dLR4dO0gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEJBRDMwN0NENERGMTEwMTRFNDBFRERGRkZENjBGOUEw OUU2RTk1QzAeFw0yNjA2MTMwMzE4NDJaFw0yNjA2MTQwNDEzNDJaMDMxMTAvBgNV BAMTKEJDQjgyNTM5RDBFRUY2MTc2MDFEMEZFRjBBMDQyRkZERDBDMDE5RDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCljeZmcPnyu1tw+Dr1W2DoO1b0 rUrqu6/MZB/DN3cUhNbhuFYNJCD/TwDFHl+Fj59Pk2416K4nSWL6bNY9JEkpYeh6 1Tw8qSYMrw2DOf5mtLvyWrPMSLyUc3hsGNtP8LjpUX4OC0V5DvBt5bqR4cwm8ERi c4SN6oJPHXGNKnY1VsW4VLRf5xutfNs8uJ2oqb7G8jkyyDNcqJ6W795q+F5ryjgG gaMwzI5Wn3zcOrGudJ/cch4dfjnmXPkAWngXb1Xi8YFUniM6BMp9MO4XFJDTY6ZZ buGP0v5uM3IVku1Ar8khHbC+MtVw9y0NGfDWPPPDYA1Y6diJYslcCwk/mD99AgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUvLglOdDu9hdgHQ/vCgQv/dDAGdEwHwYDVR0j BBgwFoAUi60wfNTfEQFOQO3f/9YPmgnm6VwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNjVlYWU3NDUtOGFjOS00ZTcxLWJjOTQtZmNiMjYxNzAz Zjk2LzEvOEJBRDMwN0NENERGMTEwMTRFNDBFRERGRkZENjBGOUEwOUU2RTk1Qy5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9lMzBkZTg0Yi00MDBhLTRm ZDEtYWI4YS1lNzYxNmUyNDViNDkvMC84QkFEMzA3Q0Q0REYxMTAxNEU0MEVEREZG RkQ2MEY5QTA5RTZFOTVDLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzY1ZWFlNzQ1LThhYzktNGU3MS1iYzk0LWZjYjI2MTcwM2Y5Ni8xLzhCQUQzMDdD RDRERjExMDE0RTQwRURERkZGRDYwRjlBMDlFNkU5NUMubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBXQOGq KfzKuR3CgXreFrFUc8/7fk2aIHlIEi4T9PqCOA8StLBaIGuzELmPLaBRbEm/Z6HF EF03RZy5SuXjujwylLaF6WXgFcopvDjMtIJ/OjqKtQwE5wbMmP0BQE0pkAldOySw pREb/O/ZtaC1UO7vW2EEDXoCiru9kMZ9TXVFxYgl/XIAy3pnMlGiD7et5/GKJi0o pTRnDhQSoQLUWYig9+b2OAEm9/AHGJx+TePd7gQWWayPztD6SkrcTP4nuDLj1GBU HjcHaIT+vfcyw7D6O9cfi15nBUFJamMaLYQuW9+P0Xu1L78R7q7yHZnHiM83V3M0 i3ruVs6KTSMTz5FK -----END CERTIFICATE-----Generated at Sat Jun 13 13:04:41 2026 by rpki-client