$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/1/0A8B61A844D6C2C7AF38EDCBD165D0EFFB823E45.mft File: 0A8B61A844D6C2C7AF38EDCBD165D0EFFB823E45.mft (raw, json) Hash identifier: hdbLY57g3JqP2poCodTcLIKbYcmICqRv1Y5MGAiatlE= Subject key identifier: B2:71:68:AA:57:FA:41:AD:8C:76:34:FC:A0:03:6F:1A:2A:68:E3:38 Authority key identifier: 0A:8B:61:A8:44:D6:C2:C7:AF:38:ED:CB:D1:65:D0:EF:FB:82:3E:45 Certificate issuer: /CN=0A8B61A844D6C2C7AF38EDCBD165D0EFFB823E45 Certificate serial: 7A018A2B1D4960F431DFD0988697BDCCBFB0DDA5 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/0A8B61A844D6C2C7AF38EDCBD165D0EFFB823E45.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/1/0A8B61A844D6C2C7AF38EDCBD165D0EFFB823E45.mft Manifest number: 038A Signing time: Sat 13 Jun 2026 14:41:09 +0000 Manifest this update: Sat 13 Jun 2026 14:36:09 +0000 Manifest next update: Sun 14 Jun 2026 14:43:09 +0000 Files and hashes: 1: 326131343a373538313a6430303a3a2f34302d3438203d3e20323136343532.roa (hash: +2h0a7wgr0VV5Yf9tenQW+2b3nKEqNnM1bACdpjItzE=) 2: 326131343a373538313a6430303a3a2f34342d3438203d3e203331383938.roa (hash: qE8L39SpyoEHdTGvG8S7ZOvpv47dDhK0u7Idd96jQN8=) 3: 0A8B61A844D6C2C7AF38EDCBD165D0EFFB823E45.crl (hash: yZ1b1DSjByYxAQsRliOzCOdB9u3WOF9+XSmZtJWPpwM=) 4: 326131343a373538343a373030303a3a2f33362d3434203d3e20323136343532.roa (hash: rpnwS+Y3sQ4e6qv+Gy6DoJIWfRow73aU7r2O2Z0c3vg=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/1/0A8B61A844D6C2C7AF38EDCBD165D0EFFB823E45.crl rsync://rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/1/0A8B61A844D6C2C7AF38EDCBD165D0EFFB823E45.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/0A8B61A844D6C2C7AF38EDCBD165D0EFFB823E45.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Jun 2026 14:43:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:01:8a:2b:1d:49:60:f4:31:df:d0:98:86:97:bd:cc:bf:b0:dd:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0A8B61A844D6C2C7AF38EDCBD165D0EFFB823E45 Validity Not Before: Jun 13 14:36:09 2026 GMT Not After : Jun 14 14:43:09 2026 GMT Subject: CN=B27168AA57FA41AD8C7634FCA0036F1A2A68E338 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:41:46:c2:fb:e5:42:2f:6a:e6:3e:9c:74:1a: af:e9:fe:ee:71:5f:3b:aa:cf:ba:54:57:0f:a1:c6: 05:b1:cb:a3:6d:5d:7c:9e:1d:05:f9:08:be:c2:0d: 36:28:76:42:cf:61:95:33:70:75:55:1c:11:2c:4d: 8a:f6:ad:9a:81:b4:ee:0b:82:7b:de:77:48:57:57: 75:d2:43:47:41:f0:b0:81:5e:01:11:f8:97:ae:e2: 6a:5d:8d:55:9a:78:dc:ba:2e:58:38:20:30:f7:db: f3:52:b0:c8:53:56:8a:d6:83:81:f4:ba:36:54:b5: d1:1b:41:f7:62:63:39:2a:86:e8:e0:d5:1f:c2:4b: 8d:95:30:ec:8d:e7:95:2e:b8:1b:4c:13:17:b4:ef: 16:55:e5:26:18:09:74:ec:b6:a6:65:48:94:6d:2a: 2b:e0:e7:39:4e:3e:3e:4c:e3:bd:d7:55:39:10:f0: ab:b2:65:25:84:a6:a0:a4:44:03:f0:a0:15:7e:e0: c7:7c:e8:14:79:e4:22:b3:06:9c:79:0d:fd:fb:f3: 6c:33:47:d5:f5:da:80:6b:ec:9f:9f:ed:a9:64:08: b2:cd:36:39:0d:c8:a8:3e:64:19:a0:c4:18:1e:db: 6d:66:5a:ea:93:be:fd:92:5a:1a:d8:18:8e:05:7c: 94:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:71:68:AA:57:FA:41:AD:8C:76:34:FC:A0:03:6F:1A:2A:68:E3:38 X509v3 Authority Key Identifier: keyid:0A:8B:61:A8:44:D6:C2:C7:AF:38:ED:CB:D1:65:D0:EF:FB:82:3E:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/1/0A8B61A844D6C2C7AF38EDCBD165D0EFFB823E45.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/0A8B61A844D6C2C7AF38EDCBD165D0EFFB823E45.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/1/0A8B61A844D6C2C7AF38EDCBD165D0EFFB823E45.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:60:bf:4b:3f:e7:c8:2e:a1:fa:49:93:5e:f7:10:a4:1c:e6: 87:8f:86:68:9f:6b:58:a7:20:13:27:fc:92:4b:4f:07:bd:12: 67:c8:7f:49:1f:d0:23:be:12:82:18:ac:d1:c8:15:e4:fc:33: 5f:8c:80:2e:a0:b5:80:b6:25:72:01:03:78:5d:c1:6f:d5:f2: c9:41:b2:66:a0:d3:de:14:a2:f0:74:b2:91:d1:35:f5:a0:ac: 6b:df:e4:67:e9:f0:c9:b2:25:1e:51:53:b6:84:b8:19:d4:08: 4e:27:25:54:06:a9:0f:d2:b5:69:c5:8a:4e:d0:4d:07:60:cd: 75:4b:99:bd:fe:47:aa:36:08:a8:90:d7:ee:88:80:13:79:94: a7:f5:27:e0:85:35:5d:e2:4a:18:19:a0:fe:8d:7a:3f:d2:51: bf:ff:09:62:75:ac:3c:24:d7:fe:06:be:c9:77:9c:5c:09:1e: 6d:06:73:57:bf:99:52:58:f2:08:37:28:3f:54:a8:3f:a4:b4: 8c:81:d1:2b:18:15:45:e6:a5:74:23:10:1c:50:22:f1:10:b9: 41:54:b0:ec:e9:0f:15:c9:b7:3f:73:4b:44:16:68:d5:a3:13: 27:1b:96:a0:a4:3c:3d:52:c0:57:71:aa:4c:a6:27:09:1e:b3: 7b:8c:cd:13 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUegGKKx1JYPQx39CYhpe9zL+w3aUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEE4QjYxQTg0NEQ2QzJDN0FGMzhFRENCRDE2NUQwRUZG QjgyM0U0NTAeFw0yNjA2MTMxNDM2MDlaFw0yNjA2MTQxNDQzMDlaMDMxMTAvBgNV BAMTKEIyNzE2OEFBNTdGQTQxQUQ4Qzc2MzRGQ0EwMDM2RjFBMkE2OEUzMzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDpQUbC++VCL2rmPpx0Gq/p/u5x Xzuqz7pUVw+hxgWxy6NtXXyeHQX5CL7CDTYodkLPYZUzcHVVHBEsTYr2rZqBtO4L gnved0hXV3XSQ0dB8LCBXgER+Jeu4mpdjVWaeNy6Llg4IDD32/NSsMhTVorWg4H0 ujZUtdEbQfdiYzkqhujg1R/CS42VMOyN55UuuBtMExe07xZV5SYYCXTstqZlSJRt Kivg5zlOPj5M473XVTkQ8KuyZSWEpqCkRAPwoBV+4Md86BR55CKzBpx5Df3782wz R9X12oBr7J+f7alkCLLNNjkNyKg+ZBmgxBge221mWuqTvv2SWhrYGI4FfJQ5AgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUsnFoqlf6Qa2MdjT8oANvGipo4zgwHwYDVR0j BBgwFoAUCothqETWwsevOO3L0WXQ7/uCPkUwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNzJjNDA1ZjEtYzMyZC00N2NlLTg5NDMtMDc1MmVkMTNk OGVmLzEvMEE4QjYxQTg0NEQ2QzJDN0FGMzhFRENCRDE2NUQwRUZGQjgyM0U0NS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC8wQThCNjFBODQ0RDZDMkM3QUYzOEVEQ0JE MTY1RDBFRkZCODIzRTQ1LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzcyYzQwNWYxLWMzMmQtNDdjZS04OTQzLTA3NTJlZDEzZDhlZi8xLzBBOEI2MUE4 NDRENkMyQzdBRjM4RURDQkQxNjVEMEVGRkI4MjNFNDUubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQB3YL9L P+fILqH6SZNe9xCkHOaHj4Zon2tYpyATJ/ySS08HvRJnyH9JH9AjvhKCGKzRyBXk /DNfjIAuoLWAtiVyAQN4XcFv1fLJQbJmoNPeFKLwdLKR0TX1oKxr3+Rn6fDJsiUe UVO2hLgZ1AhOJyVUBqkP0rVpxYpO0E0HYM11S5m9/keqNgiokNfuiIATeZSn9Sfg hTVd4koYGaD+jXo/0lG//wlidaw8JNf+Br7Jd5xcCR5tBnNXv5lSWPIINyg/VKg/ pLSMgdErGBVF5qV0IxAcUCLxELlBVLDs6Q8Vybc/c0tEFmjVoxMnG5agpDw9UsBX capMpicJHrN7jM0T -----END CERTIFICATE-----Generated at Sun Jun 14 01:51:35 2026 by rpki-client