$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/8d9062de-f536-445d-ba71-035fbfecaad8/0/8CC300FAF2F6D49186A8B62E08F190107743973D.mft File: 8CC300FAF2F6D49186A8B62E08F190107743973D.mft (raw, json) Hash identifier: pYnDsmiAJ4CgO28WJMKnzOwdP0+UxhZeg+SpKAwWJTY= Subject key identifier: 82:90:17:37:F5:71:65:27:3D:72:8C:14:84:28:96:CD:9B:3F:57:32 Authority key identifier: 8C:C3:00:FA:F2:F6:D4:91:86:A8:B6:2E:08:F1:90:10:77:43:97:3D Certificate issuer: /CN=8cc300faf2f6d49186a8b62e08f190107743973d Certificate serial: 79C379045E64B85EE34E9FF5AE41E39DFEE10FC9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jMMA-vL21JGGqLYuCPGQEHdDlz0.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8d9062de-f536-445d-ba71-035fbfecaad8/0/8CC300FAF2F6D49186A8B62E08F190107743973D.mft Manifest number: 014F Signing time: Mon 21 Sep 2026 11:27:20 +0000 Manifest this update: Mon 21 Sep 2026 11:22:20 +0000 Manifest next update: Tue 22 Sep 2026 12:40:20 +0000 Files and hashes: 1: AE2E1DEFAD81FF39E0283ED61BC9F9DC6DA9BE96.cer (hash: GFHqWxN9S46J9mAmEiVgStEzFnFl5M2lHDxwpuTvPQs=) 2: 3138352e33382e32342e302f32342d3234203d3e203632313133.roa (hash: DL9cUbkHdgRd6E9kt0CXscnQjaDpUpLE3Ywus/lXk+w=) 3: 326130303a666265303a3a2f33322d3332203d3e203632313133.roa (hash: WNjAJELB/oLrw9Hz4dnzCW0vPcsiMFGJ+BAVSWItBek=) 4: AS62113.asa (hash: Yver10QWMXYIYP5ZY4+AuiARoynXV5PYVi7Q6x7VN9c=) 5: 326130303a666265343a3161623a3a2f34382d3438203d3e20323035323335.roa (hash: BQDJ5MQBcUAO3DNIndlqGRpqRDYK9vOMV2e/1C55/mU=) 6: 8CC300FAF2F6D49186A8B62E08F190107743973D.crl (hash: sBLoxFC8aQhsU1JpAo7M1W/bfXKsw0zkSeoqsXQiC+s=) 7: 326130303a666265313a3a2f33322d3332203d3e203632313133.roa (hash: Z+RU3vtzvAe7ynR14QHAUV1/vmbrfJ5VHYPGPd2caBI=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8d9062de-f536-445d-ba71-035fbfecaad8/0/8CC300FAF2F6D49186A8B62E08F190107743973D.crl rsync://rsync.paas.rpki.ripe.net/repository/8d9062de-f536-445d-ba71-035fbfecaad8/0/8CC300FAF2F6D49186A8B62E08F190107743973D.mft rsync://rpki.ripe.net/repository/DEFAULT/jMMA-vL21JGGqLYuCPGQEHdDlz0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 22 Sep 2026 12:40:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:c3:79:04:5e:64:b8:5e:e3:4e:9f:f5:ae:41:e3:9d:fe:e1:0f:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8cc300faf2f6d49186a8b62e08f190107743973d Validity Not Before: Sep 21 11:22:20 2026 GMT Not After : Sep 22 12:40:20 2026 GMT Subject: CN=82901737F57165273D728C14842896CD9B3F5732 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:39:27:5b:87:0a:e9:ee:6a:52:75:e4:28:f7: ab:ab:30:97:20:98:38:e5:34:39:cc:53:02:62:6b: e0:ca:b7:c3:88:59:dd:72:7f:07:a2:ef:f9:bf:73: 10:64:cf:dc:92:32:33:f9:f3:c8:07:a5:ab:a8:b3: ac:7f:6b:15:0f:11:13:ca:0e:19:27:16:a8:4b:71: c8:e1:1b:c2:8b:c5:9f:1c:31:88:1e:e7:f9:47:ec: 19:52:3d:6c:cc:13:f9:3d:3b:7f:c8:62:02:0f:4d: c2:66:d4:98:d6:9d:ef:92:67:fa:5e:51:ec:4d:6b: 31:45:4e:a7:62:81:33:8e:76:9d:67:3d:6e:d9:43: 7b:03:82:73:06:56:e9:d5:f6:ad:71:4e:b7:d9:42: 85:96:92:f9:59:df:85:96:f7:9a:49:6a:7c:44:a6: 4b:91:39:a4:78:88:44:26:6f:0a:5e:cb:71:e0:50: 57:47:6e:1f:32:8f:9c:ad:60:9d:56:a1:93:74:25: 82:f5:a1:18:79:1c:fa:53:57:f8:85:cd:e7:ca:a8: 4c:ae:1d:b5:19:34:fd:9d:55:12:64:86:d9:d9:1d: db:bf:ab:83:a7:8d:38:06:63:ce:ce:e3:1c:0e:ff: dd:80:15:8a:8b:9c:c3:34:22:ae:f3:9d:7e:9c:4e: a5:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:90:17:37:F5:71:65:27:3D:72:8C:14:84:28:96:CD:9B:3F:57:32 X509v3 Authority Key Identifier: keyid:8C:C3:00:FA:F2:F6:D4:91:86:A8:B6:2E:08:F1:90:10:77:43:97:3D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/8d9062de-f536-445d-ba71-035fbfecaad8/0/8CC300FAF2F6D49186A8B62E08F190107743973D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jMMA-vL21JGGqLYuCPGQEHdDlz0.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8d9062de-f536-445d-ba71-035fbfecaad8/0/8CC300FAF2F6D49186A8B62E08F190107743973D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:69:95:7f:50:1f:8d:67:d2:c8:f1:ba:8d:a4:ce:f7:c8:be: 28:ef:33:0b:2c:f6:26:2d:f1:bf:b8:f7:99:80:5a:d5:95:a5: ab:38:b3:4c:fa:b4:03:7f:62:ed:ea:bf:7a:34:c7:52:f5:f1: b6:43:48:46:01:b6:6d:53:b3:e3:a9:f9:c2:6f:7c:de:ae:b4: e9:d3:57:eb:2e:35:c0:e8:61:54:d1:78:a2:88:ad:74:27:a9: 39:5a:b9:d6:7e:66:4a:1d:d4:8c:13:10:00:78:96:91:20:5b: 9c:9b:2d:b0:47:e2:b0:94:97:f6:b6:94:45:60:d0:e2:3a:44: 35:2f:be:eb:00:50:3c:10:91:7c:b4:7a:d7:d1:e2:4a:03:86: fc:17:d5:83:0f:46:5b:f8:c0:f8:be:f5:97:25:2d:c4:5b:a7: ff:b1:77:14:8c:6e:6e:a0:b7:e6:e3:b6:01:67:f8:23:a5:70: ae:21:02:46:97:fa:53:7c:c0:5e:83:f8:0a:d0:7a:3a:84:d1: e8:56:7e:b5:4d:2d:90:3f:9c:ca:ce:82:f9:91:7d:a4:df:73: c8:d2:55:7f:41:14:f8:30:02:99:ab:3a:37:5e:78:e8:cb:05: 56:3a:0e:42:0c:7e:40:18:e3:00:6c:5d:23:a4:e8:7e:37:f4: 56:31:6b:a5 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUecN5BF5kuF7jTp/1rkHjnf7hD8kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOGNjMzAwZmFmMmY2ZDQ5MTg2YThiNjJlMDhmMTkwMTA3 NzQzOTczZDAeFw0yNjA5MjExMTIyMjBaFw0yNjA5MjIxMjQwMjBaMDMxMTAvBgNV BAMTKDgyOTAxNzM3RjU3MTY1MjczRDcyOEMxNDg0Mjg5NkNEOUIzRjU3MzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKOSdbhwrp7mpSdeQo96urMJcg mDjlNDnMUwJia+DKt8OIWd1yfwei7/m/cxBkz9ySMjP588gHpauos6x/axUPERPK DhknFqhLccjhG8KLxZ8cMYge5/lH7BlSPWzME/k9O3/IYgIPTcJm1JjWne+SZ/pe UexNazFFTqdigTOOdp1nPW7ZQ3sDgnMGVunV9q1xTrfZQoWWkvlZ34WW95pJanxE pkuROaR4iEQmbwpey3HgUFdHbh8yj5ytYJ1WoZN0JYL1oRh5HPpTV/iFzefKqEyu HbUZNP2dVRJkhtnZHdu/q4OnjTgGY87O4xwO/92AFYqLnMM0Iq7znX6cTqXxAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUgpAXN/VxZSc9cowUhCiWzZs/VzIwHwYDVR0j BBgwFoAUjMMA+vL21JGGqLYuCPGQEHdDlz0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOGQ5MDYyZGUtZjUzNi00NDVkLWJhNzEtMDM1ZmJmZWNh YWQ4LzAvOENDMzAwRkFGMkY2RDQ5MTg2QThCNjJFMDhGMTkwMTA3NzQzOTczRC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2pNTUEtdkwyMUpHR3FMWXVDUEdRRUhk RGx6MC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84ZDkwNjJkZS1m NTM2LTQ0NWQtYmE3MS0wMzVmYmZlY2FhZDgvMC84Q0MzMDBGQUYyRjZENDkxODZB OEI2MkUwOEYxOTAxMDc3NDM5NzNELm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfGmVf1AfjWfSyPG6jaTO 98i+KO8zCyz2Ji3xv7j3mYBa1ZWlqzizTPq0A39i7eq/ejTHUvXxtkNIRgG2bVOz 46n5wm983q606dNX6y41wOhhVNF4ooitdCepOVq51n5mSh3UjBMQAHiWkSBbnJst sEfisJSX9raURWDQ4jpENS++6wBQPBCRfLR619HiSgOG/BfVgw9GW/jA+L71lyUt xFun/7F3FIxubqC35uO2AWf4I6VwriECRpf6U3zAXoP4CtB6OoTR6FZ+tU0tkD+c ys6C+ZF9pN9zyNJVf0EU+DACmas6N1546MsFVjoOQgx+QBjjAGxdI6Tofjf0VjFr pQ== -----END CERTIFICATE-----Generated at Mon Sep 21 20:10:44 2026 by rpki-client