$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8d9062de-f536-445d-ba71-035fbfecaad8/0/8CC300FAF2F6D49186A8B62E08F190107743973D.mft File: 8CC300FAF2F6D49186A8B62E08F190107743973D.mft (raw, json) Hash identifier: kgw9M6ODlB3AB5+yngIzbP4lmODDA7vV0HEUx1zauaI= Subject key identifier: 21:F8:CF:14:6E:5A:6A:A8:4F:2B:22:F7:99:4D:4F:D1:EC:EC:61:5B Authority key identifier: 8C:C3:00:FA:F2:F6:D4:91:86:A8:B6:2E:08:F1:90:10:77:43:97:3D Certificate issuer: /CN=8cc300faf2f6d49186a8b62e08f190107743973d Certificate serial: 27F6A3EC582B9AF60404312A5B8ABFEA12BED493 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jMMA-vL21JGGqLYuCPGQEHdDlz0.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8d9062de-f536-445d-ba71-035fbfecaad8/0/8CC300FAF2F6D49186A8B62E08F190107743973D.mft Manifest number: 0105 Signing time: Tue 28 Jul 2026 01:41:52 +0000 Manifest this update: Tue 28 Jul 2026 01:36:52 +0000 Manifest next update: Wed 29 Jul 2026 04:24:52 +0000 Files and hashes: 1: 326130303a666265343a3161623a3a2f34382d3438203d3e20323035323335.roa (hash: BQDJ5MQBcUAO3DNIndlqGRpqRDYK9vOMV2e/1C55/mU=) 2: AE2E1DEFAD81FF39E0283ED61BC9F9DC6DA9BE96.cer (hash: GFHqWxN9S46J9mAmEiVgStEzFnFl5M2lHDxwpuTvPQs=) 3: 8CC300FAF2F6D49186A8B62E08F190107743973D.crl (hash: LnR4s5MjMu34c3o/Xivos0a+i6ha0Wyv8GaF5gKy2RM=) 4: 326130303a666265303a3a2f33322d3332203d3e203632313133.roa (hash: WNjAJELB/oLrw9Hz4dnzCW0vPcsiMFGJ+BAVSWItBek=) 5: 326130303a666265313a3a2f33322d3332203d3e203632313133.roa (hash: Z+RU3vtzvAe7ynR14QHAUV1/vmbrfJ5VHYPGPd2caBI=) 6: AS62113.asa (hash: Yver10QWMXYIYP5ZY4+AuiARoynXV5PYVi7Q6x7VN9c=) 7: 3138352e33382e32342e302f32342d3234203d3e203632313133.roa (hash: DL9cUbkHdgRd6E9kt0CXscnQjaDpUpLE3Ywus/lXk+w=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8d9062de-f536-445d-ba71-035fbfecaad8/0/8CC300FAF2F6D49186A8B62E08F190107743973D.crl rsync://rsync.paas.rpki.ripe.net/repository/8d9062de-f536-445d-ba71-035fbfecaad8/0/8CC300FAF2F6D49186A8B62E08F190107743973D.mft rsync://rpki.ripe.net/repository/DEFAULT/jMMA-vL21JGGqLYuCPGQEHdDlz0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 29 Jul 2026 04:24:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:f6:a3:ec:58:2b:9a:f6:04:04:31:2a:5b:8a:bf:ea:12:be:d4:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8cc300faf2f6d49186a8b62e08f190107743973d Validity Not Before: Jul 28 01:36:52 2026 GMT Not After : Jul 29 04:24:52 2026 GMT Subject: CN=21F8CF146E5A6AA84F2B22F7994D4FD1ECEC615B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:03:89:11:d1:3b:be:d5:9c:36:60:38:40:d2: ac:ca:d9:b9:07:cb:1d:58:40:34:58:42:a7:e7:f4: 76:4b:a5:bb:d2:f9:7d:85:0b:c6:06:38:ee:d1:0e: 04:21:5a:92:f0:f8:0a:0e:01:f0:0b:c1:ea:9b:10: b6:94:02:61:04:51:c2:a8:a2:09:6b:ad:46:1a:8b: 90:8b:bf:23:c1:35:a6:92:f9:f3:d3:4b:81:18:fb: a8:73:a6:50:2a:ca:6f:b6:90:10:e5:79:01:23:c7: e6:5c:48:d6:83:39:c1:14:f8:5e:b9:b7:c3:ca:c4: 34:e9:e6:f8:f5:68:f9:3c:47:83:5f:23:1a:3e:7c: aa:2b:2b:2e:f8:fe:e5:ea:04:16:dc:d8:b1:a4:3b: 5b:14:67:5a:26:a0:71:78:11:8f:80:72:c5:59:f2: 34:02:e1:b7:22:da:5d:fe:04:df:5c:8d:04:7a:d4: 14:98:3d:cc:c5:ef:4c:dc:5a:c7:9f:a6:80:c0:6b: d4:69:fc:56:07:10:6d:91:70:82:29:af:fb:61:5d: f9:36:69:b3:20:e7:08:ef:08:9e:b9:24:3f:76:32: 31:a4:15:19:cb:54:42:13:22:88:68:e0:b4:5c:77: 92:63:94:c8:1f:97:ec:ed:bd:5e:d2:7c:58:e7:96: 28:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:F8:CF:14:6E:5A:6A:A8:4F:2B:22:F7:99:4D:4F:D1:EC:EC:61:5B X509v3 Authority Key Identifier: keyid:8C:C3:00:FA:F2:F6:D4:91:86:A8:B6:2E:08:F1:90:10:77:43:97:3D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/8d9062de-f536-445d-ba71-035fbfecaad8/0/8CC300FAF2F6D49186A8B62E08F190107743973D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jMMA-vL21JGGqLYuCPGQEHdDlz0.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8d9062de-f536-445d-ba71-035fbfecaad8/0/8CC300FAF2F6D49186A8B62E08F190107743973D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 90:25:86:41:4e:72:d9:2c:3d:26:1d:79:8f:aa:3a:c0:49:7f: c6:f5:d7:65:ad:f2:96:35:df:43:e6:66:44:51:6f:85:6b:45: f9:6f:f9:85:85:b2:01:d6:c3:52:62:28:17:60:6e:ca:cc:c7: 8a:5d:f8:2f:9d:d3:5c:1d:25:48:12:38:ff:29:e0:03:93:7f: 33:cd:96:32:03:1a:2b:4b:67:2e:ba:dc:04:5c:f3:4e:53:89: c7:a8:56:37:5c:e9:57:8e:7c:1c:d5:e1:96:8b:5f:9b:13:1d: c7:2a:14:13:5c:d5:c6:74:c5:ea:a0:87:90:8e:e2:f2:76:30: 56:b1:1f:7f:4c:f4:45:12:2d:2c:85:d3:73:5a:ad:ce:8b:93: d0:3e:df:a9:2e:e1:b6:e9:2f:0a:a2:7d:32:bb:d6:64:ad:d4: 62:0d:98:c1:05:cd:2f:50:6c:29:9b:d3:09:32:c8:4a:7e:38: 3e:71:11:bb:e4:23:0c:58:f7:3e:90:3c:8e:ff:d8:0c:74:63: 85:de:db:76:10:0c:a2:67:37:b0:00:08:cd:b8:b2:c4:4b:32: e9:fe:87:a2:ca:e3:85:cd:39:72:6d:b2:e1:af:db:ce:7a:2d: dd:f1:a2:19:46:99:9e:83:36:67:80:c6:02:55:4c:98:fd:61: 6b:8f:82:4b -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUJ/aj7FgrmvYEBDEqW4q/6hK+1JMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOGNjMzAwZmFmMmY2ZDQ5MTg2YThiNjJlMDhmMTkwMTA3 NzQzOTczZDAeFw0yNjA3MjgwMTM2NTJaFw0yNjA3MjkwNDI0NTJaMDMxMTAvBgNV BAMTKDIxRjhDRjE0NkU1QTZBQTg0RjJCMjJGNzk5NEQ0RkQxRUNFQzYxNUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpA4kR0Tu+1Zw2YDhA0qzK2bkH yx1YQDRYQqfn9HZLpbvS+X2FC8YGOO7RDgQhWpLw+AoOAfALweqbELaUAmEEUcKo oglrrUYai5CLvyPBNaaS+fPTS4EY+6hzplAqym+2kBDleQEjx+ZcSNaDOcEU+F65 t8PKxDTp5vj1aPk8R4NfIxo+fKorKy74/uXqBBbc2LGkO1sUZ1omoHF4EY+AcsVZ 8jQC4bci2l3+BN9cjQR61BSYPczF70zcWsefpoDAa9Rp/FYHEG2RcIIpr/thXfk2 abMg5wjvCJ65JD92MjGkFRnLVEITIoho4LRcd5JjlMgfl+ztvV7SfFjnligxAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUIfjPFG5aaqhPKyL3mU1P0ezsYVswHwYDVR0j BBgwFoAUjMMA+vL21JGGqLYuCPGQEHdDlz0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOGQ5MDYyZGUtZjUzNi00NDVkLWJhNzEtMDM1ZmJmZWNh YWQ4LzAvOENDMzAwRkFGMkY2RDQ5MTg2QThCNjJFMDhGMTkwMTA3NzQzOTczRC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2pNTUEtdkwyMUpHR3FMWXVDUEdRRUhk RGx6MC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84ZDkwNjJkZS1m NTM2LTQ0NWQtYmE3MS0wMzVmYmZlY2FhZDgvMC84Q0MzMDBGQUYyRjZENDkxODZB OEI2MkUwOEYxOTAxMDc3NDM5NzNELm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkCWGQU5y2Sw9Jh15j6o6 wEl/xvXXZa3yljXfQ+ZmRFFvhWtF+W/5hYWyAdbDUmIoF2BuyszHil34L53TXB0l SBI4/yngA5N/M82WMgMaK0tnLrrcBFzzTlOJx6hWN1zpV458HNXhlotfmxMdxyoU E1zVxnTF6qCHkI7i8nYwVrEff0z0RRItLIXTc1qtzouT0D7fqS7htukvCqJ9MrvW ZK3UYg2YwQXNL1BsKZvTCTLISn44PnERu+QjDFj3PpA8jv/YDHRjhd7bdhAMomc3 sAAIzbiyxEsy6f6Hosrjhc05cm2y4a/bznot3fGiGUaZnoM2Z4DGAlVMmP1ha4+C Sw== -----END CERTIFICATE-----Generated at Tue Jul 28 20:53:57 2026 by rpki-client