$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/6c030890-f6e0-410c-bc99-af0921d1c3a4/0/8B9BA9ADDE9635777BF586FD493E14CD30F7C4CA.mft File: 8B9BA9ADDE9635777BF586FD493E14CD30F7C4CA.mft (raw, json) Hash identifier: 1jCPQEyOs93/fqYNPcCdKxPPrUrhQGZ1lpfUi54XN2c= Subject key identifier: 3F:E9:80:05:CB:DA:E2:86:AF:1C:EE:35:18:91:14:BB:C4:AF:A4:98 Authority key identifier: 8B:9B:A9:AD:DE:96:35:77:7B:F5:86:FD:49:3E:14:CD:30:F7:C4:CA Certificate issuer: /CN=8b9ba9adde9635777bf586fd493e14cd30f7c4ca Certificate serial: 617AA72019BDC58C32B59B5951394FA51B0F8A1E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i5uprd6WNXd79Yb9ST4UzTD3xMo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/6c030890-f6e0-410c-bc99-af0921d1c3a4/0/8B9BA9ADDE9635777BF586FD493E14CD30F7C4CA.mft Manifest number: 057C Signing time: Sun 01 Mar 2026 18:02:16 +0000 Manifest this update: Sun 01 Mar 2026 17:57:16 +0000 Manifest next update: Mon 02 Mar 2026 22:00:16 +0000 Files and hashes: 1: 8B9BA9ADDE9635777BF586FD493E14CD30F7C4CA.crl (hash: xc+uuzOUXRVP3uK4jJHnnF0V8Z75d+ddV2yeKNoUx18=) 2: 3138382e3136342e3135342e302f32342d3234203d3e20383334.roa (hash: vvTevjxETDa595QBqFXtPC5dkfNklcd1MuoPmql9OGw=) 3: 3138382e3136342e3135362e302f32342d3234203d3e20383334.roa (hash: 8mF+PQeUzaqKEgfJbIXSTk7hxbEJf0BXKYW39kTGsrg=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/6c030890-f6e0-410c-bc99-af0921d1c3a4/0/8B9BA9ADDE9635777BF586FD493E14CD30F7C4CA.crl rsync://rsync.paas.rpki.ripe.net/repository/6c030890-f6e0-410c-bc99-af0921d1c3a4/0/8B9BA9ADDE9635777BF586FD493E14CD30F7C4CA.mft rsync://rpki.ripe.net/repository/DEFAULT/i5uprd6WNXd79Yb9ST4UzTD3xMo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Mar 2026 22:00:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:7a:a7:20:19:bd:c5:8c:32:b5:9b:59:51:39:4f:a5:1b:0f:8a:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b9ba9adde9635777bf586fd493e14cd30f7c4ca Validity Not Before: Mar 1 17:57:16 2026 GMT Not After : Mar 2 22:00:16 2026 GMT Subject: CN=3FE98005CBDAE286AF1CEE35189114BBC4AFA498 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:a8:0a:65:ab:58:df:2c:3e:e4:14:32:57:cc: 9c:8e:72:fa:13:3d:cb:ea:31:b9:4b:2d:05:4b:6d: 11:cb:50:33:0b:a5:c7:f5:be:18:9f:86:57:e7:ef: e6:33:d0:e1:5e:a0:56:04:b2:19:ab:93:d5:ab:fe: 6e:32:1f:bd:39:f8:9b:92:fb:ab:78:7b:9a:7e:f5: c4:cf:7e:e4:29:6e:d3:c7:2c:c4:ee:27:3e:a4:fd: b4:d6:54:a1:d9:dd:06:65:f0:52:2a:af:23:d8:d4: 5c:7e:f8:95:20:88:28:ed:06:3e:f0:24:02:ab:14: 32:3e:a0:22:52:04:92:38:50:85:9e:a5:b7:67:da: d6:d2:94:c8:28:dd:46:59:a8:53:16:2c:77:53:97: 19:cd:b4:a8:19:34:e8:a8:89:74:84:ea:b7:35:4a: 16:6f:ce:80:c6:60:1b:c5:63:6d:5d:41:88:b7:e3: bf:54:1e:5f:4d:96:43:4c:f8:4e:30:f4:28:c5:59: 36:ab:fe:bf:8f:1d:e9:5b:73:5a:92:71:aa:ae:47: 5d:4f:a2:6e:f1:33:eb:f8:14:54:e1:db:86:76:9a: b8:b3:cb:fd:c8:42:20:7e:3f:99:50:4e:b4:2e:38: 43:a0:45:8d:14:09:2d:0d:0b:6f:bb:b4:8c:ca:32: ed:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:E9:80:05:CB:DA:E2:86:AF:1C:EE:35:18:91:14:BB:C4:AF:A4:98 X509v3 Authority Key Identifier: keyid:8B:9B:A9:AD:DE:96:35:77:7B:F5:86:FD:49:3E:14:CD:30:F7:C4:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/6c030890-f6e0-410c-bc99-af0921d1c3a4/0/8B9BA9ADDE9635777BF586FD493E14CD30F7C4CA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i5uprd6WNXd79Yb9ST4UzTD3xMo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6c030890-f6e0-410c-bc99-af0921d1c3a4/0/8B9BA9ADDE9635777BF586FD493E14CD30F7C4CA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:08:be:07:dc:f2:26:db:d8:78:86:b4:f7:f4:1c:24:12:cf: 0b:28:e4:7e:34:55:a3:9d:7d:f3:14:76:d5:a8:18:8a:da:44: f6:cb:b9:e5:12:88:1c:15:90:c7:57:81:69:5a:f8:26:42:ef: c3:77:20:c2:5b:e3:84:45:01:f1:7c:dc:a4:88:66:5f:84:57: 94:3d:57:e3:06:20:fd:76:a9:59:b9:eb:c4:b2:73:ac:84:40: ad:cf:1c:bc:c7:f0:19:d6:70:95:f0:d6:db:00:86:31:e9:3c: 38:7e:86:88:6b:fa:b4:2f:51:31:06:7c:a2:33:52:95:7f:4e: c2:9a:8b:ec:14:d1:54:83:05:c6:67:cd:f0:0a:d8:9f:8f:68: fb:7e:ed:95:66:ce:87:ba:63:9c:dc:be:59:a9:df:79:83:61: 55:5d:00:08:16:1c:dc:fc:a6:3c:27:25:89:fa:68:c4:7b:67: ca:e6:3c:46:d5:05:f7:a8:89:9c:00:0a:5e:5c:b8:cb:13:b1: bf:a3:fa:1e:75:a9:24:a2:39:39:61:98:47:06:b1:a3:73:72: 44:7a:72:51:41:11:d9:e0:05:ab:cf:02:2c:19:f2:f5:db:9c: b4:95:ec:8b:4d:e4:fd:77:aa:a0:92:bd:be:b5:52:44:15:e9: 8a:f4:09:0a -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUYXqnIBm9xYwytZtZUTlPpRsPih4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOGI5YmE5YWRkZTk2MzU3NzdiZjU4NmZkNDkzZTE0Y2Qz MGY3YzRjYTAeFw0yNjAzMDExNzU3MTZaFw0yNjAzMDIyMjAwMTZaMDMxMTAvBgNV BAMTKDNGRTk4MDA1Q0JEQUUyODZBRjFDRUUzNTE4OTExNEJCQzRBRkE0OTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDiqAplq1jfLD7kFDJXzJyOcvoT PcvqMblLLQVLbRHLUDMLpcf1vhifhlfn7+Yz0OFeoFYEshmrk9Wr/m4yH705+JuS +6t4e5p+9cTPfuQpbtPHLMTuJz6k/bTWVKHZ3QZl8FIqryPY1Fx++JUgiCjtBj7w JAKrFDI+oCJSBJI4UIWepbdn2tbSlMgo3UZZqFMWLHdTlxnNtKgZNOioiXSE6rc1 ShZvzoDGYBvFY21dQYi3479UHl9NlkNM+E4w9CjFWTar/r+PHelbc1qScaquR11P om7xM+v4FFTh24Z2mrizy/3IQiB+P5lQTrQuOEOgRY0UCS0NC2+7tIzKMu11AgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUP+mABcva4oavHO41GJEUu8SvpJgwHwYDVR0j BBgwFoAUi5uprd6WNXd79Yb9ST4UzTD3xMowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNmMwMzA4OTAtZjZlMC00MTBjLWJjOTktYWYwOTIxZDFj M2E0LzAvOEI5QkE5QURERTk2MzU3NzdCRjU4NkZENDkzRTE0Q0QzMEY3QzRDQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2k1dXByZDZXTlhkNzlZYjlTVDRVelRE M3hNby5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS82YzAzMDg5MC1m NmUwLTQxMGMtYmM5OS1hZjA5MjFkMWMzYTQvMC84QjlCQTlBRERFOTYzNTc3N0JG NTg2RkQ0OTNFMTRDRDMwRjdDNENBLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHwi+B9zyJtvYeIa09/Qc JBLPCyjkfjRVo5198xR21agYitpE9su55RKIHBWQx1eBaVr4JkLvw3cgwlvjhEUB 8XzcpIhmX4RXlD1X4wYg/XapWbnrxLJzrIRArc8cvMfwGdZwlfDW2wCGMek8OH6G iGv6tC9RMQZ8ojNSlX9OwpqL7BTRVIMFxmfN8ArYn49o+37tlWbOh7pjnNy+Wanf eYNhVV0ACBYc3PymPCclifpoxHtnyuY8RtUF96iJnAAKXly4yxOxv6P6HnWpJKI5 OWGYRwaxo3NyRHpyUUER2eAFq88CLBny9ductJXsi03k/XeqoJK9vrVSRBXpivQJ Cg== -----END CERTIFICATE-----Generated at Mon Mar 2 09:29:34 2026 by rpki-client