$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/308f8b3e-051e-4c44-9cb5-7b8331ef9a04/1/8BCE7E72ABBBAD00536393A0840BBA0ABF3AA28E.mft File: 8BCE7E72ABBBAD00536393A0840BBA0ABF3AA28E.mft (raw, json) Hash identifier: c4sJRiQ2YE1MM6Xq9HPyMVDVmg4bbVFFxpWEQaagCHs= Subject key identifier: 24:45:AB:35:9C:F2:27:D5:3F:A3:C7:E2:D9:E0:5E:B6:C1:FE:FA:6B Authority key identifier: 8B:CE:7E:72:AB:BB:AD:00:53:63:93:A0:84:0B:BA:0A:BF:3A:A2:8E Certificate issuer: /CN=8BCE7E72ABBBAD00536393A0840BBA0ABF3AA28E Certificate serial: 696B085AE7C319C919265C124DA0855B09DFD10A Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/8BCE7E72ABBBAD00536393A0840BBA0ABF3AA28E.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/308f8b3e-051e-4c44-9cb5-7b8331ef9a04/1/8BCE7E72ABBBAD00536393A0840BBA0ABF3AA28E.mft Manifest number: 0135 Signing time: Fri 24 Jul 2026 04:37:41 +0000 Manifest this update: Fri 24 Jul 2026 04:32:41 +0000 Manifest next update: Sat 25 Jul 2026 07:53:41 +0000 Files and hashes: 1: 8BCE7E72ABBBAD00536393A0840BBA0ABF3AA28E.crl (hash: YBHkrLGtPKwcEVtHQTICGmmR6OyqSnM1HV53F8YMwxs=) 2: 326130663a316363353a313730303a3a2f34302d3438203d3e20323032393339.roa (hash: UEeOHO3GGvYWxfR4E2Tbh4+FLPM0KvboVmPBm/zMcrM=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/308f8b3e-051e-4c44-9cb5-7b8331ef9a04/1/8BCE7E72ABBBAD00536393A0840BBA0ABF3AA28E.crl rsync://rsync.paas.rpki.ripe.net/repository/308f8b3e-051e-4c44-9cb5-7b8331ef9a04/1/8BCE7E72ABBBAD00536393A0840BBA0ABF3AA28E.mft rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/8BCE7E72ABBBAD00536393A0840BBA0ABF3AA28E.cer rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/1BE240021A287F298973D9EA28DFC80735FD5800.crl rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/1BE240021A287F298973D9EA28DFC80735FD5800.mft rsync://rpki.ripe.net/repository/DEFAULT/G-JAAhoofymJc9nqKN_IBzX9WAA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 24 Jul 2026 17:14:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:6b:08:5a:e7:c3:19:c9:19:26:5c:12:4d:a0:85:5b:09:df:d1:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8BCE7E72ABBBAD00536393A0840BBA0ABF3AA28E Validity Not Before: Jul 24 04:32:41 2026 GMT Not After : Jul 25 07:53:41 2026 GMT Subject: CN=2445AB359CF227D53FA3C7E2D9E05EB6C1FEFA6B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:89:65:3a:e5:32:b5:de:59:cd:1b:9e:2a:71: 6b:9b:7a:0e:2c:d0:7d:64:ab:d2:f3:5f:67:64:0f: 6b:2c:79:15:06:6b:07:18:ec:af:4e:dc:3a:61:91: 66:32:34:66:7f:bc:9c:76:3e:a6:82:90:b9:b7:37: bf:74:73:0e:24:32:c4:24:98:35:80:5b:46:a4:2a: 60:b0:56:c8:11:8a:03:1f:db:d7:d0:d4:85:4c:d0: 56:c9:c8:1b:3a:7e:77:1c:09:f9:93:68:ad:92:61: bd:1b:b2:f6:82:d6:3d:7f:43:76:9b:ee:b3:c5:75: f8:df:a5:d8:08:63:8e:f7:47:16:a4:61:b5:4e:db: eb:3f:22:b1:92:41:c1:11:eb:3d:b9:2b:d6:93:b7: f1:1e:a7:04:2d:53:10:a3:60:0f:11:ec:99:88:88: 09:00:10:61:d1:d4:e0:42:ef:98:07:3b:0a:80:1d: 80:14:77:f5:6e:f6:d3:f4:d7:31:db:1b:d3:56:11: 00:8b:ee:e5:60:7a:61:86:de:d6:40:d2:a4:51:8c: 88:fd:68:c8:d1:04:70:7f:bf:89:df:d6:84:23:09: cf:c0:c9:a0:34:52:b6:b2:a4:28:7a:3d:74:03:cd: 4a:30:fc:8c:41:8c:2d:13:0c:7e:9d:4f:4f:3c:5b: 8a:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:45:AB:35:9C:F2:27:D5:3F:A3:C7:E2:D9:E0:5E:B6:C1:FE:FA:6B X509v3 Authority Key Identifier: keyid:8B:CE:7E:72:AB:BB:AD:00:53:63:93:A0:84:0B:BA:0A:BF:3A:A2:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/308f8b3e-051e-4c44-9cb5-7b8331ef9a04/1/8BCE7E72ABBBAD00536393A0840BBA0ABF3AA28E.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/8BCE7E72ABBBAD00536393A0840BBA0ABF3AA28E.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/308f8b3e-051e-4c44-9cb5-7b8331ef9a04/1/8BCE7E72ABBBAD00536393A0840BBA0ABF3AA28E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a7:e2:d2:9b:73:1d:9a:53:6f:3f:8b:28:2e:6e:47:8a:10:70: 57:d7:c6:d3:c3:90:8f:ac:b9:07:aa:3d:9f:08:b5:44:19:d6: e2:a7:aa:7e:eb:74:d6:3f:d4:dc:1b:68:32:43:2a:18:e8:11: 90:9e:94:8e:30:73:3d:90:00:dd:92:9f:31:cf:18:b2:8c:4f: fd:ba:44:dd:fb:99:ed:0b:d6:70:47:64:38:a9:68:9a:9a:92: 8e:0a:b2:0e:05:6d:32:31:38:ba:78:18:90:0a:d3:bf:3e:7a: 98:c6:c1:d2:3d:15:93:0e:d4:1d:34:61:0f:5a:7d:34:2a:b5: 4a:18:6a:c4:f0:f5:c3:75:7e:08:b1:de:16:1f:54:0e:a3:54: 2c:ee:1b:c8:cb:3b:60:41:dc:1f:69:ab:36:d0:3e:4b:81:b9: 6b:f4:b0:a8:a9:77:be:bd:bf:ff:f2:40:82:18:83:8d:2b:d6: 30:8b:a5:e2:ff:1e:be:ce:ae:da:9b:b9:31:41:d3:45:2b:48: 75:48:bd:ce:c6:51:7a:68:db:dc:7e:30:9e:19:49:ee:38:64: 43:5e:8a:55:0b:07:85:f3:33:c2:d3:20:e6:22:5d:87:a5:31: 3a:ce:ca:5a:f9:ee:14:1f:0c:2c:9d:24:5d:f4:3e:48:78:ee: c0:68:8b:53 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUaWsIWufDGckZJlwSTaCFWwnf0QowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEJDRTdFNzJBQkJCQUQwMDUzNjM5M0EwODQwQkJBMEFC RjNBQTI4RTAeFw0yNjA3MjQwNDMyNDFaFw0yNjA3MjUwNzUzNDFaMDMxMTAvBgNV BAMTKDI0NDVBQjM1OUNGMjI3RDUzRkEzQzdFMkQ5RTA1RUI2QzFGRUZBNkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJiWU65TK13lnNG54qcWubeg4s 0H1kq9LzX2dkD2sseRUGawcY7K9O3DphkWYyNGZ/vJx2PqaCkLm3N790cw4kMsQk mDWAW0akKmCwVsgRigMf29fQ1IVM0FbJyBs6fnccCfmTaK2SYb0bsvaC1j1/Q3ab 7rPFdfjfpdgIY473RxakYbVO2+s/IrGSQcER6z25K9aTt/EepwQtUxCjYA8R7JmI iAkAEGHR1OBC75gHOwqAHYAUd/Vu9tP01zHbG9NWEQCL7uVgemGG3tZA0qRRjIj9 aMjRBHB/v4nf1oQjCc/AyaA0UraypCh6PXQDzUow/IxBjC0TDH6dT088W4rZAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUJEWrNZzyJ9U/o8fi2eBetsH++mswHwYDVR0j BBgwFoAUi85+cqu7rQBTY5OghAu6Cr86oo4wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMzA4ZjhiM2UtMDUxZS00YzQ0LTljYjUtN2I4MzMxZWY5 YTA0LzEvOEJDRTdFNzJBQkJCQUQwMDUzNjM5M0EwODQwQkJBMEFCRjNBQTI4RS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84YWZiNWZlMi0zYzJhLTQ5 MzktOTVlOS0wMDc3YjgwYjRmMGUvMC84QkNFN0U3MkFCQkJBRDAwNTM2MzkzQTA4 NDBCQkEwQUJGM0FBMjhFLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzMwOGY4YjNlLTA1MWUtNGM0NC05Y2I1LTdiODMzMWVmOWEwNC8xLzhCQ0U3RTcy QUJCQkFEMDA1MzYzOTNBMDg0MEJCQTBBQkYzQUEyOEUubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCn4tKb cx2aU28/iygubkeKEHBX18bTw5CPrLkHqj2fCLVEGdbip6p+63TWP9TcG2gyQyoY 6BGQnpSOMHM9kADdkp8xzxiyjE/9ukTd+5ntC9ZwR2Q4qWiampKOCrIOBW0yMTi6 eBiQCtO/PnqYxsHSPRWTDtQdNGEPWn00KrVKGGrE8PXDdX4Isd4WH1QOo1Qs7hvI yztgQdwfaas20D5Lgblr9LCoqXe+vb//8kCCGIONK9Ywi6Xi/x6+zq7am7kxQdNF K0h1SL3OxlF6aNvcfjCeGUnuOGRDXopVCweF8zPC0yDmIl2HpTE6zspa+e4UHwws nSRd9D5IeO7AaItT -----END CERTIFICATE-----Generated at Fri Jul 24 09:26:04 2026 by rpki-client