$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/65eae745-8ac9-4e71-bc94-fcb261703f96/1/8BAD307CD4DF11014E40EDDFFFD60F9A09E6E95C.mft File: 8BAD307CD4DF11014E40EDDFFFD60F9A09E6E95C.mft (raw, json) Hash identifier: +JxZ4gO8N+LoPmltOZVhsno5JuVE41ihe7cDn/Hk2iU= Subject key identifier: 9C:B9:43:DF:A8:B5:67:FC:64:9C:EE:0C:D6:88:A1:FC:7A:BF:00:EB Authority key identifier: 8B:AD:30:7C:D4:DF:11:01:4E:40:ED:DF:FF:D6:0F:9A:09:E6:E9:5C Certificate issuer: /CN=8BAD307CD4DF11014E40EDDFFFD60F9A09E6E95C Certificate serial: 2336733311BC622A20B44DBD3EEBC1A37FD95062 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/0/8BAD307CD4DF11014E40EDDFFFD60F9A09E6E95C.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/65eae745-8ac9-4e71-bc94-fcb261703f96/1/8BAD307CD4DF11014E40EDDFFFD60F9A09E6E95C.mft Manifest number: 03DE Signing time: Wed 23 Sep 2026 09:26:42 +0000 Manifest this update: Wed 23 Sep 2026 09:21:42 +0000 Manifest next update: Thu 24 Sep 2026 12:21:42 +0000 Files and hashes: 1: 8BAD307CD4DF11014E40EDDFFFD60F9A09E6E95C.crl (hash: RULRjdcjfKMyhsi9hi7AHsmngkrPXgOHnMfq4ihNmwY=) 2: 326131333a393634343a343030303a3a2f34302d3430203d3e20323034323931.roa (hash: YgD4FXqTWmPFPjeYHziBG/J6IaO/Hxlen1UWzQrfC/Y=) 3: 326131333a393634343a343061653a3a2f34382d3438203d3e20323034323931.roa (hash: /APvQtIczoMdPeFgS8yLWOSzDbhA86h5Cc1N87vUKRI=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/65eae745-8ac9-4e71-bc94-fcb261703f96/1/8BAD307CD4DF11014E40EDDFFFD60F9A09E6E95C.crl rsync://rsync.paas.rpki.ripe.net/repository/65eae745-8ac9-4e71-bc94-fcb261703f96/1/8BAD307CD4DF11014E40EDDFFFD60F9A09E6E95C.mft rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/0/8BAD307CD4DF11014E40EDDFFFD60F9A09E6E95C.cer rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/0/F1D0572FE72991BD32854BAC716676EBDAD22ACE.crl rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/0/F1D0572FE72991BD32854BAC716676EBDAD22ACE.mft rsync://rpki.ripe.net/repository/DEFAULT/8dBXL-cpkb0yhUuscWZ269rSKs4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 24 Sep 2026 07:17:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:36:73:33:11:bc:62:2a:20:b4:4d:bd:3e:eb:c1:a3:7f:d9:50:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8BAD307CD4DF11014E40EDDFFFD60F9A09E6E95C Validity Not Before: Sep 23 09:21:42 2026 GMT Not After : Sep 24 12:21:42 2026 GMT Subject: CN=9CB943DFA8B567FC649CEE0CD688A1FC7ABF00EB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:02:b6:32:32:2a:71:c2:a7:45:5a:bc:8a:e8: 54:bc:b3:67:75:92:21:bf:bc:89:a0:35:98:c3:dd: 1e:62:e6:f3:6e:93:21:a2:3c:a4:aa:df:5d:db:75: ee:0f:ec:e1:8d:79:43:50:7f:a0:25:ca:14:19:0a: 71:22:d9:33:53:ac:45:e1:5e:fb:f9:f9:20:ef:99: c9:da:13:1f:c5:1b:c9:e3:81:74:68:05:17:dd:d1: a1:2c:1b:1c:f8:ed:9d:b4:88:5c:df:30:62:41:43: b4:69:a8:bd:3b:bc:44:d1:61:84:75:af:5d:a8:13: 2d:91:73:e8:3c:ba:16:41:6f:12:82:29:d8:1e:6d: 96:ef:22:bc:a1:9d:4c:ec:b5:41:02:19:07:5c:09: 60:02:91:42:08:c0:f7:21:67:af:97:1d:e9:4a:a3: 27:2a:b1:81:0a:73:41:7c:fb:04:85:1d:fa:20:9e: 98:42:7d:29:f1:04:bf:e7:8b:d1:59:77:5d:90:90: 95:f9:65:fa:eb:57:d7:32:c7:13:17:cd:9f:4a:75: 70:b9:63:1f:7f:5f:fd:7c:e8:ed:d8:0e:48:8d:7f: 24:b1:99:ed:c5:0e:6e:d5:05:75:18:6a:ff:a2:e3: 1e:67:92:6b:71:41:ef:d1:79:92:97:d4:f2:4e:4e: 8f:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:B9:43:DF:A8:B5:67:FC:64:9C:EE:0C:D6:88:A1:FC:7A:BF:00:EB X509v3 Authority Key Identifier: keyid:8B:AD:30:7C:D4:DF:11:01:4E:40:ED:DF:FF:D6:0F:9A:09:E6:E9:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/65eae745-8ac9-4e71-bc94-fcb261703f96/1/8BAD307CD4DF11014E40EDDFFFD60F9A09E6E95C.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/0/8BAD307CD4DF11014E40EDDFFFD60F9A09E6E95C.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/65eae745-8ac9-4e71-bc94-fcb261703f96/1/8BAD307CD4DF11014E40EDDFFFD60F9A09E6E95C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:b7:6d:3d:84:25:d6:b3:c8:21:22:9f:30:4a:a2:65:07:bf: c0:9c:d6:72:19:59:09:47:e3:cb:b9:a9:c6:0a:2d:38:cd:e4: 91:36:d5:da:bf:07:84:d0:62:94:91:b6:30:c8:c6:00:57:37: f3:6f:c6:95:f2:4f:1d:69:f1:bb:7c:5f:03:f7:cf:44:5e:03: 91:5e:82:25:e8:d8:00:a8:99:a7:35:77:61:47:ac:be:e3:89: ab:69:8b:02:cf:2e:b0:89:8e:59:a4:77:31:aa:a4:db:3b:5a: 18:a1:29:bd:32:dd:22:26:81:d8:59:67:35:c3:d3:b6:74:7c: e5:48:2d:89:f3:ca:1f:2b:8a:20:8f:75:bc:e2:31:42:0b:64: 7e:bb:cd:f9:a9:62:37:8d:22:a8:9b:aa:ec:54:1e:18:70:47: 65:d1:d8:30:d2:64:49:d4:3e:72:90:ad:a8:3b:fe:b2:05:80: e9:8b:6f:8e:4c:55:f5:b7:62:83:17:ee:2a:a1:d3:76:33:ec: a3:19:00:d9:a5:59:9e:62:5e:dc:c1:2e:95:56:75:8d:06:7a: 4c:06:92:73:42:83:db:ea:73:bb:32:97:85:9f:9f:72:70:4a: 91:06:b0:44:21:ce:d1:1c:cd:3e:62:0a:73:39:d8:4c:88:30: 96:ef:f6:e0 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUIzZzMxG8YiogtE29PuvBo3/ZUGIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEJBRDMwN0NENERGMTEwMTRFNDBFRERGRkZENjBGOUEw OUU2RTk1QzAeFw0yNjA5MjMwOTIxNDJaFw0yNjA5MjQxMjIxNDJaMDMxMTAvBgNV BAMTKDlDQjk0M0RGQThCNTY3RkM2NDlDRUUwQ0Q2ODhBMUZDN0FCRjAwRUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/ArYyMipxwqdFWryK6FS8s2d1 kiG/vImgNZjD3R5i5vNukyGiPKSq313bde4P7OGNeUNQf6AlyhQZCnEi2TNTrEXh Xvv5+SDvmcnaEx/FG8njgXRoBRfd0aEsGxz47Z20iFzfMGJBQ7RpqL07vETRYYR1 r12oEy2Rc+g8uhZBbxKCKdgebZbvIryhnUzstUECGQdcCWACkUIIwPchZ6+XHelK oycqsYEKc0F8+wSFHfognphCfSnxBL/ni9FZd12QkJX5ZfrrV9cyxxMXzZ9KdXC5 Yx9/X/186O3YDkiNfySxme3FDm7VBXUYav+i4x5nkmtxQe/ReZKX1PJOTo+pAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUnLlD36i1Z/xknO4M1oih/Hq/AOswHwYDVR0j BBgwFoAUi60wfNTfEQFOQO3f/9YPmgnm6VwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNjVlYWU3NDUtOGFjOS00ZTcxLWJjOTQtZmNiMjYxNzAz Zjk2LzEvOEJBRDMwN0NENERGMTEwMTRFNDBFRERGRkZENjBGOUEwOUU2RTk1Qy5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9lMzBkZTg0Yi00MDBhLTRm ZDEtYWI4YS1lNzYxNmUyNDViNDkvMC84QkFEMzA3Q0Q0REYxMTAxNEU0MEVEREZG RkQ2MEY5QTA5RTZFOTVDLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzY1ZWFlNzQ1LThhYzktNGU3MS1iYzk0LWZjYjI2MTcwM2Y5Ni8xLzhCQUQzMDdD RDRERjExMDE0RTQwRURERkZGRDYwRjlBMDlFNkU5NUMubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAqt209 hCXWs8ghIp8wSqJlB7/AnNZyGVkJR+PLuanGCi04zeSRNtXavweE0GKUkbYwyMYA Vzfzb8aV8k8dafG7fF8D989EXgORXoIl6NgAqJmnNXdhR6y+44mraYsCzy6wiY5Z pHcxqqTbO1oYoSm9Mt0iJoHYWWc1w9O2dHzlSC2J88ofK4ogj3W84jFCC2R+u835 qWI3jSKom6rsVB4YcEdl0dgw0mRJ1D5ykK2oO/6yBYDpi2+OTFX1t2KDF+4qodN2 M+yjGQDZpVmeYl7cwS6VVnWNBnpMBpJzQoPb6nO7MpeFn59ycEqRBrBEIc7RHM0+ YgpzOdhMiDCW7/bg -----END CERTIFICATE-----Generated at Thu Sep 24 00:25:33 2026 by rpki-client