$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/1/0A8B61A844D6C2C7AF38EDCBD165D0EFFB823E45.mft File: 0A8B61A844D6C2C7AF38EDCBD165D0EFFB823E45.mft (raw, json) Hash identifier: sVA5ZuEMYworCPayVJcwK648FgZtTSOIo/cAQIgNsUE= Subject key identifier: BA:D5:78:88:83:A5:D3:E9:6C:84:EE:7F:26:C1:63:FD:05:6E:6A:D5 Authority key identifier: 0A:8B:61:A8:44:D6:C2:C7:AF:38:ED:CB:D1:65:D0:EF:FB:82:3E:45 Certificate issuer: /CN=0A8B61A844D6C2C7AF38EDCBD165D0EFFB823E45 Certificate serial: 22BB6D9B888653D9D5C44878DDA8873C1557B3FD Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/0A8B61A844D6C2C7AF38EDCBD165D0EFFB823E45.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/1/0A8B61A844D6C2C7AF38EDCBD165D0EFFB823E45.mft Manifest number: 02FF Signing time: Mon 02 Mar 2026 11:40:48 +0000 Manifest this update: Mon 02 Mar 2026 11:35:48 +0000 Manifest next update: Tue 03 Mar 2026 14:22:48 +0000 Files and hashes: 1: 326131343a373538313a6430303a3a2f34302d3438203d3e20323136343532.roa (hash: jAqeRW+G0tj75/HjlTu9upVrXQ/2AvwaP0ubMorKA1Q=) 2: 326131343a373538343a373030303a3a2f33362d3434203d3e20323136343532.roa (hash: bjWKUcdJK3JxiL+GqIgQQNiLJnq1CfKPBgs/UuOHrJA=) 3: 0A8B61A844D6C2C7AF38EDCBD165D0EFFB823E45.crl (hash: EYTnvtwTr7ArCqbQNDovMxyMbGLF4yC/fC1aD3FV5eI=) 4: 326131343a373538313a6430303a3a2f34342d3438203d3e203331383938.roa (hash: OYFGGb9dMqAtV18cBeD3NbZ0TuwCvJXmn37LZwaW7zg=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/1/0A8B61A844D6C2C7AF38EDCBD165D0EFFB823E45.crl rsync://rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/1/0A8B61A844D6C2C7AF38EDCBD165D0EFFB823E45.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/0A8B61A844D6C2C7AF38EDCBD165D0EFFB823E45.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 03 Mar 2026 09:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:bb:6d:9b:88:86:53:d9:d5:c4:48:78:dd:a8:87:3c:15:57:b3:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0A8B61A844D6C2C7AF38EDCBD165D0EFFB823E45 Validity Not Before: Mar 2 11:35:48 2026 GMT Not After : Mar 3 14:22:48 2026 GMT Subject: CN=BAD5788883A5D3E96C84EE7F26C163FD056E6AD5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:bf:e1:b9:ea:e7:1e:3f:9d:fb:00:56:ac:f5: 00:9c:2e:fc:05:42:67:0a:e7:06:b1:57:f3:b4:f0: 2b:30:d6:a6:a1:9e:09:cb:7b:a1:f2:04:13:d2:51: 00:a2:96:e1:39:6a:c9:7f:1b:1f:d5:7c:9c:68:3d: 3f:4c:6e:c7:22:5d:72:3f:5d:a5:57:76:3c:f9:b0: 11:b8:e9:3e:78:66:0c:fc:9d:42:12:50:03:30:c6: 11:6b:9c:74:4e:a5:23:7b:91:1c:d5:ae:25:b3:c2: df:ea:d4:df:37:f4:d6:39:6d:81:d7:76:70:5d:e9: 21:06:ae:ef:77:14:72:e5:25:0c:d2:18:9a:43:e7: 3f:60:2e:5c:b6:c9:dd:aa:2d:9c:f1:69:66:c8:8e: 3f:2f:77:f5:aa:16:9c:43:66:62:5b:d0:0c:07:77: 2e:46:8c:95:62:9b:58:3f:0e:2c:7b:0f:18:8f:90: 1d:d3:55:47:59:6e:d6:0f:9a:85:64:c5:a1:ec:07: bf:ba:c3:8e:47:cf:10:69:9c:38:42:b6:36:43:4a: ae:e8:a6:af:15:8e:b7:ac:f7:42:cc:a4:5f:4e:ca: fe:f2:e8:44:cb:98:1a:c7:33:e5:86:9c:c1:bb:4b: ae:07:70:27:cb:cb:a3:ba:8a:19:db:4a:be:9e:b0: 6e:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:D5:78:88:83:A5:D3:E9:6C:84:EE:7F:26:C1:63:FD:05:6E:6A:D5 X509v3 Authority Key Identifier: keyid:0A:8B:61:A8:44:D6:C2:C7:AF:38:ED:CB:D1:65:D0:EF:FB:82:3E:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/1/0A8B61A844D6C2C7AF38EDCBD165D0EFFB823E45.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/0A8B61A844D6C2C7AF38EDCBD165D0EFFB823E45.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/1/0A8B61A844D6C2C7AF38EDCBD165D0EFFB823E45.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:6d:67:7e:80:93:7e:12:dd:e5:1c:18:e4:81:cd:cd:d7:86: ad:29:44:e6:53:85:b3:88:2f:14:73:93:55:b0:d1:c4:44:f9: 36:9e:f6:bb:e1:31:df:25:29:85:fd:39:b1:5c:51:7e:7e:9c: 05:89:61:39:90:9d:00:60:20:33:99:5d:f7:16:e6:80:cb:aa: 22:af:ee:c7:47:bd:93:27:56:71:87:92:e9:7b:37:92:c4:28: d1:0e:0d:cd:a5:6d:f8:d9:9e:14:a7:8c:cf:06:86:06:74:b5: d4:ba:c7:40:b7:3e:43:a2:07:ae:6c:3b:ee:60:37:ed:eb:41: 74:4c:d7:01:89:38:08:55:4a:04:19:0f:26:6f:0d:a9:d4:97: e2:78:40:b0:03:cd:6f:28:70:07:c8:e5:7b:a4:83:a4:f0:2b: 67:4e:d9:e1:b6:cc:e0:19:fc:ac:74:2b:1c:af:5e:46:60:79: 0e:fd:be:79:c4:38:d0:61:78:ff:0d:5b:f9:3d:14:bb:7c:f1: 6c:57:1f:65:62:c3:38:9b:c9:4a:74:69:5e:0f:4e:e6:dc:c2: d8:91:18:32:8f:a7:a9:c8:40:87:80:50:5e:bc:4f:d2:d5:e0: 30:21:df:62:35:58:c8:5f:c6:a1:c1:66:25:00:12:7c:86:94: 1f:94:8c:c0 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUIrttm4iGU9nVxEh43aiHPBVXs/0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEE4QjYxQTg0NEQ2QzJDN0FGMzhFRENCRDE2NUQwRUZG QjgyM0U0NTAeFw0yNjAzMDIxMTM1NDhaFw0yNjAzMDMxNDIyNDhaMDMxMTAvBgNV BAMTKEJBRDU3ODg4ODNBNUQzRTk2Qzg0RUU3RjI2QzE2M0ZEMDU2RTZBRDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBv+G56uceP537AFas9QCcLvwF QmcK5waxV/O08Csw1qahngnLe6HyBBPSUQCiluE5asl/Gx/VfJxoPT9MbsciXXI/ XaVXdjz5sBG46T54Zgz8nUISUAMwxhFrnHROpSN7kRzVriWzwt/q1N839NY5bYHX dnBd6SEGru93FHLlJQzSGJpD5z9gLly2yd2qLZzxaWbIjj8vd/WqFpxDZmJb0AwH dy5GjJVim1g/Dix7DxiPkB3TVUdZbtYPmoVkxaHsB7+6w45HzxBpnDhCtjZDSq7o pq8Vjres90LMpF9Oyv7y6ETLmBrHM+WGnMG7S64HcCfLy6O6ihnbSr6esG4TAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUutV4iIOl0+lshO5/JsFj/QVuatUwHwYDVR0j BBgwFoAUCothqETWwsevOO3L0WXQ7/uCPkUwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNzJjNDA1ZjEtYzMyZC00N2NlLTg5NDMtMDc1MmVkMTNk OGVmLzEvMEE4QjYxQTg0NEQ2QzJDN0FGMzhFRENCRDE2NUQwRUZGQjgyM0U0NS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC8wQThCNjFBODQ0RDZDMkM3QUYzOEVEQ0JE MTY1RDBFRkZCODIzRTQ1LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzcyYzQwNWYxLWMzMmQtNDdjZS04OTQzLTA3NTJlZDEzZDhlZi8xLzBBOEI2MUE4 NDRENkMyQzdBRjM4RURDQkQxNjVEMEVGRkI4MjNFNDUubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBcbWd+ gJN+Et3lHBjkgc3N14atKUTmU4WziC8Uc5NVsNHERPk2nva74THfJSmF/TmxXFF+ fpwFiWE5kJ0AYCAzmV33FuaAy6oir+7HR72TJ1Zxh5LpezeSxCjRDg3NpW342Z4U p4zPBoYGdLXUusdAtz5DogeubDvuYDft60F0TNcBiTgIVUoEGQ8mbw2p1JfieECw A81vKHAHyOV7pIOk8CtnTtnhtszgGfysdCscr15GYHkO/b55xDjQYXj/DVv5PRS7 fPFsVx9lYsM4m8lKdGleD07m3MLYkRgyj6epyECHgFBevE/S1eAwId9iNVjIX8ah wWYlABJ8hpQflIzA -----END CERTIFICATE-----Generated at Mon Mar 2 14:37:10 2026 by rpki-client