$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8d9062de-f536-445d-ba71-035fbfecaad8/0/8CC300FAF2F6D49186A8B62E08F190107743973D.mft File: 8CC300FAF2F6D49186A8B62E08F190107743973D.mft (raw, json) Hash identifier: Y3DhRL7nVyMBdhg8CRnTfbw8ttXdOOu2hLG/CiMB1AU= Subject key identifier: FA:93:0B:D4:AA:D7:17:86:7F:C1:9F:55:AE:32:EB:31:86:5D:89:E7 Authority key identifier: 8C:C3:00:FA:F2:F6:D4:91:86:A8:B6:2E:08:F1:90:10:77:43:97:3D Certificate issuer: /CN=8cc300faf2f6d49186a8b62e08f190107743973d Certificate serial: 09B4F0E02D0C298DD96DBCCE0313747B75AEB985 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jMMA-vL21JGGqLYuCPGQEHdDlz0.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8d9062de-f536-445d-ba71-035fbfecaad8/0/8CC300FAF2F6D49186A8B62E08F190107743973D.mft Manifest number: 3E Signing time: Sun 01 Mar 2026 05:39:59 +0000 Manifest this update: Sun 01 Mar 2026 05:34:59 +0000 Manifest next update: Mon 02 Mar 2026 06:11:59 +0000 Files and hashes: 1: AS62113.asa (hash: Yver10QWMXYIYP5ZY4+AuiARoynXV5PYVi7Q6x7VN9c=) 2: 3138352e33382e32342e302f32342d3234203d3e203632313133.roa (hash: DL9cUbkHdgRd6E9kt0CXscnQjaDpUpLE3Ywus/lXk+w=) 3: 8CC300FAF2F6D49186A8B62E08F190107743973D.crl (hash: pAYfmFQZxx23LYuIhricDHD46UZs4p1ACABM2oVZIEo=) 4: 326130303a666265343a3161623a3a2f34382d3438203d3e20323035323335.roa (hash: BQDJ5MQBcUAO3DNIndlqGRpqRDYK9vOMV2e/1C55/mU=) 5: 326130303a666265303a3a2f33322d3332203d3e203632313133.roa (hash: WNjAJELB/oLrw9Hz4dnzCW0vPcsiMFGJ+BAVSWItBek=) 6: AE2E1DEFAD81FF39E0283ED61BC9F9DC6DA9BE96.cer (hash: GFHqWxN9S46J9mAmEiVgStEzFnFl5M2lHDxwpuTvPQs=) 7: 326130303a666265313a3a2f33322d3332203d3e203632313133.roa (hash: Z+RU3vtzvAe7ynR14QHAUV1/vmbrfJ5VHYPGPd2caBI=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8d9062de-f536-445d-ba71-035fbfecaad8/0/8CC300FAF2F6D49186A8B62E08F190107743973D.crl rsync://rsync.paas.rpki.ripe.net/repository/8d9062de-f536-445d-ba71-035fbfecaad8/0/8CC300FAF2F6D49186A8B62E08F190107743973D.mft rsync://rpki.ripe.net/repository/DEFAULT/jMMA-vL21JGGqLYuCPGQEHdDlz0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Mar 2026 06:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:b4:f0:e0:2d:0c:29:8d:d9:6d:bc:ce:03:13:74:7b:75:ae:b9:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8cc300faf2f6d49186a8b62e08f190107743973d Validity Not Before: Mar 1 05:34:59 2026 GMT Not After : Mar 2 06:11:59 2026 GMT Subject: CN=FA930BD4AAD717867FC19F55AE32EB31865D89E7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:3f:e2:36:5b:b8:c4:25:35:ae:89:80:db:49: 6c:5a:81:3d:37:70:f0:d2:80:7a:cc:23:58:51:04: 1e:7c:5d:c2:87:fb:f2:e1:19:a0:37:e7:e9:52:99: 82:15:42:ed:84:d7:cf:ae:8c:93:d4:70:c9:20:1f: f0:82:59:61:92:18:61:32:7c:3c:28:78:49:2e:7c: 78:ed:2d:26:83:f9:4b:ce:25:fb:18:64:92:5d:b1: cf:eb:c9:84:80:e9:3b:90:66:fb:2a:82:28:62:f2: 8f:30:fc:ee:84:d9:1e:c1:8a:89:b3:f5:43:56:f3: fb:3e:9c:dc:7a:05:89:5c:27:0c:86:5e:d7:b6:b7: 49:75:b6:14:c6:bf:7c:dc:b5:b2:01:73:0b:20:6a: 17:eb:2c:2c:34:4a:07:a5:cc:eb:93:8b:eb:36:99: 52:9f:cf:ae:74:5b:2f:4e:8f:0c:0a:8c:9b:ae:5c: 55:fe:ea:8c:ef:de:d7:9c:6b:e6:5f:7e:fc:3f:43: 60:0c:fd:44:aa:f4:8b:6c:4c:fc:e3:b0:c8:31:1e: 41:07:95:9f:bc:2e:e9:1c:b1:a9:85:a3:e1:de:63: 66:bc:6c:d8:82:c9:9f:b6:33:13:59:a1:fd:70:8c: 12:b6:4b:e1:80:c8:03:4a:4e:71:2a:95:72:c3:1e: 73:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:93:0B:D4:AA:D7:17:86:7F:C1:9F:55:AE:32:EB:31:86:5D:89:E7 X509v3 Authority Key Identifier: keyid:8C:C3:00:FA:F2:F6:D4:91:86:A8:B6:2E:08:F1:90:10:77:43:97:3D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/8d9062de-f536-445d-ba71-035fbfecaad8/0/8CC300FAF2F6D49186A8B62E08F190107743973D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jMMA-vL21JGGqLYuCPGQEHdDlz0.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8d9062de-f536-445d-ba71-035fbfecaad8/0/8CC300FAF2F6D49186A8B62E08F190107743973D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:2d:c6:56:78:aa:d2:6d:0b:fe:ff:44:e9:d9:8b:20:63:39: 20:14:fe:2f:bc:2b:2d:2c:81:10:cb:95:50:c9:e2:ac:97:c8: 47:2c:e7:98:11:76:b4:78:7a:b8:84:4c:07:07:75:d2:47:9b: e6:5b:e9:cb:98:fb:f2:f3:a8:58:b8:39:93:ae:56:7a:f0:e9: 9a:6f:17:2e:7c:3c:ac:1b:57:42:f3:9a:c9:1e:ce:ca:3e:b1: e2:21:7e:29:31:7b:95:cd:6c:76:61:2b:cd:31:4c:65:4a:9b: bb:e3:71:2c:81:6d:51:60:27:ef:9d:ff:f2:30:de:7a:b5:9d: f1:cb:a7:03:e4:a2:22:1e:3b:2c:a0:0e:35:0f:24:ab:34:94: fb:57:da:05:ba:c1:72:9a:4e:73:fc:75:d9:88:9d:c9:00:39: 3f:a8:62:76:16:d1:0e:4a:12:a6:cf:12:39:13:36:49:99:70: f9:93:70:35:d3:c9:84:28:30:dd:36:aa:e1:1c:af:db:7f:ad: bb:c8:e5:8c:8d:ae:b9:6b:59:32:b3:05:98:52:fe:ef:d3:3c: a4:35:99:97:84:b1:d7:dd:47:d1:a1:88:9d:70:34:d3:fd:d8: 71:88:65:00:22:34:23:ba:6a:9c:12:79:8b:5a:5d:64:9a:3f: c3:c0:ce:cf -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUCbTw4C0MKY3ZbbzOAxN0e3WuuYUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOGNjMzAwZmFmMmY2ZDQ5MTg2YThiNjJlMDhmMTkwMTA3 NzQzOTczZDAeFw0yNjAzMDEwNTM0NTlaFw0yNjAzMDIwNjExNTlaMDMxMTAvBgNV BAMTKEZBOTMwQkQ0QUFENzE3ODY3RkMxOUY1NUFFMzJFQjMxODY1RDg5RTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZP+I2W7jEJTWuiYDbSWxagT03 cPDSgHrMI1hRBB58XcKH+/LhGaA35+lSmYIVQu2E18+ujJPUcMkgH/CCWWGSGGEy fDwoeEkufHjtLSaD+UvOJfsYZJJdsc/ryYSA6TuQZvsqgihi8o8w/O6E2R7Biomz 9UNW8/s+nNx6BYlcJwyGXte2t0l1thTGv3zctbIBcwsgahfrLCw0SgelzOuTi+s2 mVKfz650Wy9OjwwKjJuuXFX+6ozv3teca+Zffvw/Q2AM/USq9ItsTPzjsMgxHkEH lZ+8LukcsamFo+HeY2a8bNiCyZ+2MxNZof1wjBK2S+GAyANKTnEqlXLDHnPxAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQU+pML1KrXF4Z/wZ9VrjLrMYZdiecwHwYDVR0j BBgwFoAUjMMA+vL21JGGqLYuCPGQEHdDlz0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOGQ5MDYyZGUtZjUzNi00NDVkLWJhNzEtMDM1ZmJmZWNh YWQ4LzAvOENDMzAwRkFGMkY2RDQ5MTg2QThCNjJFMDhGMTkwMTA3NzQzOTczRC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2pNTUEtdkwyMUpHR3FMWXVDUEdRRUhk RGx6MC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84ZDkwNjJkZS1m NTM2LTQ0NWQtYmE3MS0wMzVmYmZlY2FhZDgvMC84Q0MzMDBGQUYyRjZENDkxODZB OEI2MkUwOEYxOTAxMDc3NDM5NzNELm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdC3GVniq0m0L/v9E6dmL IGM5IBT+L7wrLSyBEMuVUMnirJfIRyznmBF2tHh6uIRMBwd10keb5lvpy5j78vOo WLg5k65WevDpmm8XLnw8rBtXQvOayR7Oyj6x4iF+KTF7lc1sdmErzTFMZUqbu+Nx LIFtUWAn753/8jDeerWd8cunA+SiIh47LKAONQ8kqzSU+1faBbrBcppOc/x12Yid yQA5P6hidhbRDkoSps8SORM2SZlw+ZNwNdPJhCgw3Taq4Ryv23+tu8jljI2uuWtZ MrMFmFL+79M8pDWZl4Sx191H0aGInXA00/3YcYhlACI0I7pqnBJ5i1pdZJo/w8DO zw== -----END CERTIFICATE-----Generated at Sun Mar 1 16:23:51 2026 by rpki-client