$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/65eae745-8ac9-4e71-bc94-fcb261703f96/1/8BAD307CD4DF11014E40EDDFFFD60F9A09E6E95C.mft File: 8BAD307CD4DF11014E40EDDFFFD60F9A09E6E95C.mft (raw, json) Hash identifier: myUkg1rAV1IbriV1VlzqDMHSpHkiGORk6XQ01H/4AvM= Subject key identifier: C2:ED:6D:A2:0A:D7:AD:B9:B2:0A:70:F8:CA:1D:C8:86:4B:7C:F3:0F Authority key identifier: 8B:AD:30:7C:D4:DF:11:01:4E:40:ED:DF:FF:D6:0F:9A:09:E6:E9:5C Certificate issuer: /CN=8BAD307CD4DF11014E40EDDFFFD60F9A09E6E95C Certificate serial: 02DF25CECE58838B1AA7662DFDE3F3F875BDE919 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/0/8BAD307CD4DF11014E40EDDFFFD60F9A09E6E95C.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/65eae745-8ac9-4e71-bc94-fcb261703f96/1/8BAD307CD4DF11014E40EDDFFFD60F9A09E6E95C.mft Manifest number: 0309 Signing time: Fri 17 Apr 2026 10:47:52 +0000 Manifest this update: Fri 17 Apr 2026 10:42:52 +0000 Manifest next update: Sat 18 Apr 2026 13:26:52 +0000 Files and hashes: 1: 326131333a393634343a343061653a3a2f34382d3438203d3e20323034323931.roa (hash: /APvQtIczoMdPeFgS8yLWOSzDbhA86h5Cc1N87vUKRI=) 2: 8BAD307CD4DF11014E40EDDFFFD60F9A09E6E95C.crl (hash: jz/sZLUJYAxR+KJUP2we04O1ryDQyDJzbr7jyF91Qow=) 3: 326131333a393634343a343030303a3a2f34302d3430203d3e20323034323931.roa (hash: 1o4m8PJbpPTt/WwCt8wMPBTEbmCl+8vcVtrKZbTYjFM=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/65eae745-8ac9-4e71-bc94-fcb261703f96/1/8BAD307CD4DF11014E40EDDFFFD60F9A09E6E95C.crl rsync://rsync.paas.rpki.ripe.net/repository/65eae745-8ac9-4e71-bc94-fcb261703f96/1/8BAD307CD4DF11014E40EDDFFFD60F9A09E6E95C.mft rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/0/8BAD307CD4DF11014E40EDDFFFD60F9A09E6E95C.cer rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/0/F1D0572FE72991BD32854BAC716676EBDAD22ACE.crl rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/0/F1D0572FE72991BD32854BAC716676EBDAD22ACE.mft rsync://rpki.ripe.net/repository/DEFAULT/8dBXL-cpkb0yhUuscWZ269rSKs4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 18 Apr 2026 13:26:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:df:25:ce:ce:58:83:8b:1a:a7:66:2d:fd:e3:f3:f8:75:bd:e9:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8BAD307CD4DF11014E40EDDFFFD60F9A09E6E95C Validity Not Before: Apr 17 10:42:52 2026 GMT Not After : Apr 18 13:26:52 2026 GMT Subject: CN=C2ED6DA20AD7ADB9B20A70F8CA1DC8864B7CF30F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:6a:e5:7f:ca:b1:6a:7f:68:a8:fc:07:1e:67: 0b:e9:a2:75:a4:90:d1:e5:1c:22:7d:20:5f:99:e3: 3b:65:2c:87:bc:ac:1b:90:c3:6c:5c:c3:3d:78:4e: 5a:28:b6:a7:c6:3a:f5:32:ae:40:5d:a7:0e:2c:3f: ae:f8:1a:19:ff:7a:8d:6a:9b:f7:4d:40:c5:e7:99: 7a:e9:b6:54:1b:be:a9:f7:64:6d:fc:05:16:a6:ed: c1:1a:2c:22:b3:9e:fc:0a:f6:c2:16:1e:ad:cc:af: f4:2c:fa:d8:70:df:b4:66:7a:f4:86:6c:09:fd:dd: 15:aa:28:33:50:b4:03:f7:e9:00:ac:9d:ba:b9:b5: 76:37:2c:c2:23:be:85:3c:d4:6a:8a:f1:c3:15:b7: 51:74:99:c9:73:d7:3b:58:f1:82:cb:b1:49:b7:fb: f3:ff:6a:2b:39:42:f4:b5:86:a6:db:fa:92:25:20: 2e:19:5c:75:2b:bf:1a:6f:80:6b:22:bc:85:6a:f2: 9d:09:40:f9:73:74:08:a7:fc:01:0a:b0:d2:84:36: 21:bb:ae:f0:24:16:42:b5:9b:cc:e6:df:d5:e5:dc: f4:7d:c1:5d:3d:e3:45:fc:27:52:48:19:92:92:e0: 27:4a:95:50:98:33:f9:eb:7e:d5:7e:40:d8:a3:e6: b0:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:ED:6D:A2:0A:D7:AD:B9:B2:0A:70:F8:CA:1D:C8:86:4B:7C:F3:0F X509v3 Authority Key Identifier: keyid:8B:AD:30:7C:D4:DF:11:01:4E:40:ED:DF:FF:D6:0F:9A:09:E6:E9:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/65eae745-8ac9-4e71-bc94-fcb261703f96/1/8BAD307CD4DF11014E40EDDFFFD60F9A09E6E95C.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/0/8BAD307CD4DF11014E40EDDFFFD60F9A09E6E95C.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/65eae745-8ac9-4e71-bc94-fcb261703f96/1/8BAD307CD4DF11014E40EDDFFFD60F9A09E6E95C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:95:74:9a:ff:14:f6:8c:30:8a:2f:af:e3:f9:4b:2d:c4:ea: 9c:4e:68:02:0e:a1:0d:e6:87:3a:d3:0f:a9:77:95:87:ff:5c: bd:79:1e:0a:3e:c9:12:76:e0:94:9d:4b:b3:58:95:07:c1:9e: 1d:08:e8:98:8e:6c:da:63:ec:05:bb:08:eb:a9:97:f2:38:d7: 34:05:e8:0f:cb:90:60:05:c8:00:e4:13:d6:2c:c2:36:8f:3d: d7:5b:12:d6:56:e2:74:2f:9a:fe:3a:db:ca:77:88:fb:33:34: 92:aa:66:d9:92:b2:3b:7f:fb:c0:6b:13:18:fe:4b:51:2f:3d: 6f:18:9d:03:32:c5:b5:76:39:73:df:01:40:50:63:b2:05:28: d8:02:63:3c:ce:f3:c1:e3:08:43:e0:f4:5a:e2:64:ab:ec:d4: a2:b6:d4:4f:ce:41:37:90:69:3e:fb:be:03:f4:04:54:d4:3b: 1c:46:67:cd:1f:29:9d:ef:ea:d8:ff:ce:54:52:2f:9a:cc:5e: 33:e2:9b:21:2d:b7:f7:19:6a:38:71:48:46:bf:cf:5a:c4:a6: 34:b9:45:5a:7d:60:ef:ca:ec:8e:5e:e9:b9:27:7a:ce:95:c2: d7:02:ba:0f:e0:6a:c9:a3:87:8e:b2:f6:70:09:ee:e7:5e:86: b6:95:6a:c6 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUAt8lzs5Yg4sap2Yt/ePz+HW96RkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEJBRDMwN0NENERGMTEwMTRFNDBFRERGRkZENjBGOUEw OUU2RTk1QzAeFw0yNjA0MTcxMDQyNTJaFw0yNjA0MTgxMzI2NTJaMDMxMTAvBgNV BAMTKEMyRUQ2REEyMEFEN0FEQjlCMjBBNzBGOENBMURDODg2NEI3Q0YzMEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9auV/yrFqf2io/AceZwvponWk kNHlHCJ9IF+Z4ztlLIe8rBuQw2xcwz14TlootqfGOvUyrkBdpw4sP674Ghn/eo1q m/dNQMXnmXrptlQbvqn3ZG38BRam7cEaLCKznvwK9sIWHq3Mr/Qs+thw37RmevSG bAn93RWqKDNQtAP36QCsnbq5tXY3LMIjvoU81GqK8cMVt1F0mclz1ztY8YLLsUm3 +/P/ais5QvS1hqbb+pIlIC4ZXHUrvxpvgGsivIVq8p0JQPlzdAin/AEKsNKENiG7 rvAkFkK1m8zm39Xl3PR9wV0940X8J1JIGZKS4CdKlVCYM/nrftV+QNij5rCDAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUwu1togrXrbmyCnD4yh3Ihkt88w8wHwYDVR0j BBgwFoAUi60wfNTfEQFOQO3f/9YPmgnm6VwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNjVlYWU3NDUtOGFjOS00ZTcxLWJjOTQtZmNiMjYxNzAz Zjk2LzEvOEJBRDMwN0NENERGMTEwMTRFNDBFRERGRkZENjBGOUEwOUU2RTk1Qy5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9lMzBkZTg0Yi00MDBhLTRm ZDEtYWI4YS1lNzYxNmUyNDViNDkvMC84QkFEMzA3Q0Q0REYxMTAxNEU0MEVEREZG RkQ2MEY5QTA5RTZFOTVDLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzY1ZWFlNzQ1LThhYzktNGU3MS1iYzk0LWZjYjI2MTcwM2Y5Ni8xLzhCQUQzMDdD RDRERjExMDE0RTQwRURERkZGRDYwRjlBMDlFNkU5NUMubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAilXSa /xT2jDCKL6/j+UstxOqcTmgCDqEN5oc60w+pd5WH/1y9eR4KPskSduCUnUuzWJUH wZ4dCOiYjmzaY+wFuwjrqZfyONc0BegPy5BgBcgA5BPWLMI2jz3XWxLWVuJ0L5r+ OtvKd4j7MzSSqmbZkrI7f/vAaxMY/ktRLz1vGJ0DMsW1djlz3wFAUGOyBSjYAmM8 zvPB4whD4PRa4mSr7NSittRPzkE3kGk++74D9ARU1DscRmfNHymd7+rY/85UUi+a zF4z4pshLbf3GWo4cUhGv89axKY0uUVafWDvyuyOXum5J3rOlcLXAroP4GrJo4eO svZwCe7nXoa2lWrG -----END CERTIFICATE-----Generated at Fri Apr 17 22:14:32 2026 by rpki-client