$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/65eae745-8ac9-4e71-bc94-fcb261703f96/1/8BAD307CD4DF11014E40EDDFFFD60F9A09E6E95C.mft File: 8BAD307CD4DF11014E40EDDFFFD60F9A09E6E95C.mft (raw, json) Hash identifier: EoZWhlx5not3bf0JRJ37xHxZthwlggxRwYC1iThWX9w= Subject key identifier: CC:3B:2C:9F:D9:33:93:6C:25:3B:E9:A4:59:A0:63:83:C3:DD:92:E6 Authority key identifier: 8B:AD:30:7C:D4:DF:11:01:4E:40:ED:DF:FF:D6:0F:9A:09:E6:E9:5C Certificate issuer: /CN=8BAD307CD4DF11014E40EDDFFFD60F9A09E6E95C Certificate serial: 1033C314050718AD3794A693EAA65325DCEB37E5 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/0/8BAD307CD4DF11014E40EDDFFFD60F9A09E6E95C.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/65eae745-8ac9-4e71-bc94-fcb261703f96/1/8BAD307CD4DF11014E40EDDFFFD60F9A09E6E95C.mft Manifest number: 02CB Signing time: Sun 01 Mar 2026 18:12:45 +0000 Manifest this update: Sun 01 Mar 2026 18:07:45 +0000 Manifest next update: Mon 02 Mar 2026 18:55:45 +0000 Files and hashes: 1: 326131333a393634343a343030303a3a2f34302d3430203d3e20323034323931.roa (hash: 1o4m8PJbpPTt/WwCt8wMPBTEbmCl+8vcVtrKZbTYjFM=) 2: 8BAD307CD4DF11014E40EDDFFFD60F9A09E6E95C.crl (hash: vEfoPxJtBG5QJXJKsTsirszLXGrEh5cWKU5R/Pmks6s=) 3: 326131333a393634343a343061653a3a2f34382d3438203d3e20323034323931.roa (hash: /APvQtIczoMdPeFgS8yLWOSzDbhA86h5Cc1N87vUKRI=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/65eae745-8ac9-4e71-bc94-fcb261703f96/1/8BAD307CD4DF11014E40EDDFFFD60F9A09E6E95C.crl rsync://rsync.paas.rpki.ripe.net/repository/65eae745-8ac9-4e71-bc94-fcb261703f96/1/8BAD307CD4DF11014E40EDDFFFD60F9A09E6E95C.mft rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/0/8BAD307CD4DF11014E40EDDFFFD60F9A09E6E95C.cer rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/0/F1D0572FE72991BD32854BAC716676EBDAD22ACE.crl rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/0/F1D0572FE72991BD32854BAC716676EBDAD22ACE.mft rsync://rpki.ripe.net/repository/DEFAULT/8dBXL-cpkb0yhUuscWZ269rSKs4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Mar 2026 18:53:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:33:c3:14:05:07:18:ad:37:94:a6:93:ea:a6:53:25:dc:eb:37:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8BAD307CD4DF11014E40EDDFFFD60F9A09E6E95C Validity Not Before: Mar 1 18:07:45 2026 GMT Not After : Mar 2 18:55:45 2026 GMT Subject: CN=CC3B2C9FD933936C253BE9A459A06383C3DD92E6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:45:dc:32:d6:ed:53:bc:fe:5d:1e:7b:15:c8: c2:34:61:ec:d4:a0:26:65:28:f5:4f:53:51:ae:b4: f3:e7:77:06:8a:c8:a6:40:ee:11:12:09:0f:1f:3c: e3:ee:40:e7:4d:6c:02:4d:39:ab:9d:4b:8f:f8:ae: 0d:bc:26:6a:ce:b8:e0:9c:c9:72:23:35:de:5d:21: 68:3b:34:14:64:e2:77:b9:08:f5:52:d5:82:81:52: 39:04:32:9b:68:ac:67:64:47:d6:da:7c:c0:cb:0e: 9e:19:43:48:d0:61:14:8b:63:72:4d:db:79:ff:ff: a0:e0:bb:28:58:ba:a7:d1:f3:a8:ff:5e:e4:6d:10: f3:94:06:8c:b5:1c:c3:fd:dc:57:cd:75:e0:a5:50: 06:f2:dd:d0:01:f0:14:35:6f:b1:01:55:c7:5e:4b: 18:c2:70:21:ad:5f:71:11:28:9b:be:fb:00:d1:b9: 67:ad:c3:22:b7:7b:08:d7:0d:bc:a1:99:d7:7b:23: 45:1f:7b:7a:aa:64:46:d0:a1:d7:5f:5e:87:fb:b7: 73:11:4b:3f:40:92:45:c3:10:62:03:3e:88:5b:e7: 50:79:2a:02:7b:7d:99:8d:ce:49:ce:8a:86:80:c6: 2f:44:15:5b:fb:03:b2:a9:d7:8a:b9:ee:45:bf:ed: 54:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:3B:2C:9F:D9:33:93:6C:25:3B:E9:A4:59:A0:63:83:C3:DD:92:E6 X509v3 Authority Key Identifier: keyid:8B:AD:30:7C:D4:DF:11:01:4E:40:ED:DF:FF:D6:0F:9A:09:E6:E9:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/65eae745-8ac9-4e71-bc94-fcb261703f96/1/8BAD307CD4DF11014E40EDDFFFD60F9A09E6E95C.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/0/8BAD307CD4DF11014E40EDDFFFD60F9A09E6E95C.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/65eae745-8ac9-4e71-bc94-fcb261703f96/1/8BAD307CD4DF11014E40EDDFFFD60F9A09E6E95C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:67:6f:cd:21:13:6d:a0:80:a3:f5:62:98:00:86:8d:e3:60: 69:e8:0e:04:18:0e:42:fc:d5:50:2f:66:c2:b9:8e:90:e5:e3: 92:fb:c3:98:0d:71:7e:c2:34:e3:0f:54:71:d3:cb:85:a0:d5: 75:c5:b1:59:01:12:1b:95:9e:1d:a9:cd:a5:aa:43:2d:9a:c8: 20:9e:eb:fa:94:d6:9e:82:9a:96:60:b7:c0:2e:81:7f:02:82: 6f:18:f0:b7:c2:a8:15:76:f2:d8:e0:9e:c9:d6:a2:25:75:1a: b4:c4:0e:d2:ec:22:39:fd:50:38:a3:a5:a3:13:59:0a:e6:01: 61:62:7c:84:ae:a8:de:fb:23:9d:1b:76:da:ee:a5:44:c4:00: 48:cc:e1:c1:78:62:4f:ef:84:91:98:a3:0b:18:76:01:5e:f7: b9:3a:9f:e0:44:bd:6b:e6:6b:8a:c9:87:9c:c7:b5:bb:e0:79: 48:6b:d1:dc:73:5a:85:b4:9a:2e:79:4c:ce:5b:d1:4f:da:fd: 6f:99:f8:5a:7a:c3:4d:f1:e5:1b:5a:0f:76:e8:b3:4e:1d:a3: 59:3e:5b:76:c3:8a:63:ff:35:7e:7d:ee:5e:66:07:f7:44:d1: 70:62:4a:4e:5f:78:6c:af:6e:09:63:01:46:6b:52:39:c1:2a: be:a1:7f:6b -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUEDPDFAUHGK03lKaT6qZTJdzrN+UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEJBRDMwN0NENERGMTEwMTRFNDBFRERGRkZENjBGOUEw OUU2RTk1QzAeFw0yNjAzMDExODA3NDVaFw0yNjAzMDIxODU1NDVaMDMxMTAvBgNV BAMTKENDM0IyQzlGRDkzMzkzNkMyNTNCRTlBNDU5QTA2MzgzQzNERDkyRTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjRdwy1u1TvP5dHnsVyMI0YezU oCZlKPVPU1GutPPndwaKyKZA7hESCQ8fPOPuQOdNbAJNOaudS4/4rg28JmrOuOCc yXIjNd5dIWg7NBRk4ne5CPVS1YKBUjkEMptorGdkR9bafMDLDp4ZQ0jQYRSLY3JN 23n//6DguyhYuqfR86j/XuRtEPOUBoy1HMP93FfNdeClUAby3dAB8BQ1b7EBVcde SxjCcCGtX3ERKJu++wDRuWetwyK3ewjXDbyhmdd7I0Ufe3qqZEbQoddfXof7t3MR Sz9AkkXDEGIDPohb51B5KgJ7fZmNzknOioaAxi9EFVv7A7Kp14q57kW/7VQLAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUzDssn9kzk2wlO+mkWaBjg8PdkuYwHwYDVR0j BBgwFoAUi60wfNTfEQFOQO3f/9YPmgnm6VwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNjVlYWU3NDUtOGFjOS00ZTcxLWJjOTQtZmNiMjYxNzAz Zjk2LzEvOEJBRDMwN0NENERGMTEwMTRFNDBFRERGRkZENjBGOUEwOUU2RTk1Qy5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9lMzBkZTg0Yi00MDBhLTRm ZDEtYWI4YS1lNzYxNmUyNDViNDkvMC84QkFEMzA3Q0Q0REYxMTAxNEU0MEVEREZG RkQ2MEY5QTA5RTZFOTVDLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzY1ZWFlNzQ1LThhYzktNGU3MS1iYzk0LWZjYjI2MTcwM2Y5Ni8xLzhCQUQzMDdD RDRERjExMDE0RTQwRURERkZGRDYwRjlBMDlFNkU5NUMubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAmZ2/N IRNtoICj9WKYAIaN42Bp6A4EGA5C/NVQL2bCuY6Q5eOS+8OYDXF+wjTjD1Rx08uF oNV1xbFZARIblZ4dqc2lqkMtmsggnuv6lNaegpqWYLfALoF/AoJvGPC3wqgVdvLY 4J7J1qIldRq0xA7S7CI5/VA4o6WjE1kK5gFhYnyErqje+yOdG3ba7qVExABIzOHB eGJP74SRmKMLGHYBXve5Op/gRL1r5muKyYecx7W74HlIa9Hcc1qFtJoueUzOW9FP 2v1vmfhaesNN8eUbWg926LNOHaNZPlt2w4pj/zV+fe5eZgf3RNFwYkpOX3hsr24J YwFGa1I5wSq+oX9r -----END CERTIFICATE-----Generated at Mon Mar 2 05:39:55 2026 by rpki-client