$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/308f8b3e-051e-4c44-9cb5-7b8331ef9a04/1/8BCE7E72ABBBAD00536393A0840BBA0ABF3AA28E.mft File: 8BCE7E72ABBBAD00536393A0840BBA0ABF3AA28E.mft (raw, json) Hash identifier: 4MBa88x8nXbB/78htJyjXvHWsOgp1Sb1ZFfQkP0ocSc= Subject key identifier: 88:CB:A2:82:1B:F0:C2:F1:81:75:F4:90:AC:F8:4F:EB:75:5C:68:F7 Authority key identifier: 8B:CE:7E:72:AB:BB:AD:00:53:63:93:A0:84:0B:BA:0A:BF:3A:A2:8E Certificate issuer: /CN=8BCE7E72ABBBAD00536393A0840BBA0ABF3AA28E Certificate serial: 703878B47968EE9198DF725BC4397361162AA5DF Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/8BCE7E72ABBBAD00536393A0840BBA0ABF3AA28E.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/308f8b3e-051e-4c44-9cb5-7b8331ef9a04/1/8BCE7E72ABBBAD00536393A0840BBA0ABF3AA28E.mft Manifest number: 018A Signing time: Wed 23 Sep 2026 22:23:03 +0000 Manifest this update: Wed 23 Sep 2026 22:18:03 +0000 Manifest next update: Fri 25 Sep 2026 00:21:03 +0000 Files and hashes: 1: 8BCE7E72ABBBAD00536393A0840BBA0ABF3AA28E.crl (hash: G+iz+YJ6zTetuyZcPd0Q7twoCcjCeomVTAIjODPONT8=) 2: 326130663a316363353a313730303a3a2f34302d3438203d3e20323032393339.roa (hash: UEeOHO3GGvYWxfR4E2Tbh4+FLPM0KvboVmPBm/zMcrM=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/308f8b3e-051e-4c44-9cb5-7b8331ef9a04/1/8BCE7E72ABBBAD00536393A0840BBA0ABF3AA28E.crl rsync://rsync.paas.rpki.ripe.net/repository/308f8b3e-051e-4c44-9cb5-7b8331ef9a04/1/8BCE7E72ABBBAD00536393A0840BBA0ABF3AA28E.mft rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/8BCE7E72ABBBAD00536393A0840BBA0ABF3AA28E.cer rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/1BE240021A287F298973D9EA28DFC80735FD5800.crl rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/1BE240021A287F298973D9EA28DFC80735FD5800.mft rsync://rpki.ripe.net/repository/DEFAULT/G-JAAhoofymJc9nqKN_IBzX9WAA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 24 Sep 2026 14:12:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:38:78:b4:79:68:ee:91:98:df:72:5b:c4:39:73:61:16:2a:a5:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8BCE7E72ABBBAD00536393A0840BBA0ABF3AA28E Validity Not Before: Sep 23 22:18:03 2026 GMT Not After : Sep 25 00:21:03 2026 GMT Subject: CN=88CBA2821BF0C2F18175F490ACF84FEB755C68F7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:69:cf:ef:07:b0:0c:d6:04:5e:ad:db:3d:32: b4:24:0c:f5:1c:c0:9a:d7:13:1a:3a:ce:77:09:32: 83:82:90:ec:27:09:5e:de:a6:e4:c2:9a:9b:54:56: 49:bc:5e:6e:da:b5:00:95:09:99:55:12:66:42:0a: 7d:8b:50:49:9b:a6:7d:aa:b8:d8:00:04:73:a6:93: 7b:d5:b2:6b:9b:1d:42:c5:28:36:26:f4:ed:dd:6f: 6d:42:12:33:38:78:54:b6:fa:6c:81:8c:47:8b:e6: 6a:56:98:9f:16:5f:44:38:f2:da:5c:2e:93:2f:3c: 5d:6e:bd:91:85:de:4e:b3:79:cd:ef:b7:2b:47:3e: 81:72:a0:6e:01:f9:93:91:4f:aa:6f:e0:dc:d6:45: d8:6f:b9:cc:b9:6f:2a:41:6d:8c:92:b7:86:b4:0f: 26:72:90:07:b9:01:c4:3b:f1:42:76:b2:34:1d:6b: 91:60:b3:79:bd:00:2e:86:0c:fc:69:fb:c9:0a:2c: bf:27:7c:f5:f9:8e:35:21:d8:6f:1c:82:20:17:84: 5e:46:53:dc:1c:e7:32:e2:b4:f7:d8:24:c4:c1:68: ce:e3:82:bf:39:0d:db:b3:f0:c7:d5:f6:dd:43:b1: 77:83:f7:db:c3:48:4c:2a:d9:9b:72:b1:cf:36:b8: 94:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:CB:A2:82:1B:F0:C2:F1:81:75:F4:90:AC:F8:4F:EB:75:5C:68:F7 X509v3 Authority Key Identifier: keyid:8B:CE:7E:72:AB:BB:AD:00:53:63:93:A0:84:0B:BA:0A:BF:3A:A2:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/308f8b3e-051e-4c44-9cb5-7b8331ef9a04/1/8BCE7E72ABBBAD00536393A0840BBA0ABF3AA28E.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/8BCE7E72ABBBAD00536393A0840BBA0ABF3AA28E.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/308f8b3e-051e-4c44-9cb5-7b8331ef9a04/1/8BCE7E72ABBBAD00536393A0840BBA0ABF3AA28E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:a0:5f:6b:85:ee:16:b9:9a:d3:aa:c4:7b:0b:83:02:f8:0e: 0c:2e:39:3a:d1:5b:75:31:67:92:df:95:20:45:d6:cb:52:fc: e8:34:9d:e0:fb:04:1c:4e:94:b4:70:5d:57:13:59:0e:17:8f: df:01:87:c2:32:4d:4c:04:5e:91:98:e6:de:fd:da:39:de:a3: 08:2e:cf:9e:90:04:3a:dd:23:ad:dc:fa:41:ec:07:22:8b:71: 8d:f4:fe:ad:19:48:ae:c4:e4:ea:ac:19:9d:38:c0:18:60:77: 84:a2:36:64:20:5c:80:45:26:c1:55:4f:86:3b:b2:d0:bc:12: ba:7e:4a:85:1e:a8:35:56:e0:67:0e:d0:9b:d0:c8:a0:0e:b7: b8:a7:7a:fd:77:11:79:9c:1a:c5:84:13:e1:12:b5:aa:da:89: d5:3d:37:c7:4e:25:77:c3:eb:78:81:12:9c:67:12:c9:e6:f1: 2a:6d:43:ba:60:b0:77:77:9e:d4:be:ee:14:6d:a4:bc:fc:7f: a2:4b:9b:85:0f:af:10:53:c4:16:f2:c0:5b:5b:a3:57:5a:3e: ad:69:1f:ae:4a:bb:1c:af:d9:dd:a1:f1:0e:71:e1:2b:ad:05: ba:cf:38:97:88:c6:a7:00:90:b1:a3:60:35:0c:44:79:b7:13: a4:2f:14:33 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUcDh4tHlo7pGY33JbxDlzYRYqpd8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEJDRTdFNzJBQkJCQUQwMDUzNjM5M0EwODQwQkJBMEFC RjNBQTI4RTAeFw0yNjA5MjMyMjE4MDNaFw0yNjA5MjUwMDIxMDNaMDMxMTAvBgNV BAMTKDg4Q0JBMjgyMUJGMEMyRjE4MTc1RjQ5MEFDRjg0RkVCNzU1QzY4RjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxac/vB7AM1gRerds9MrQkDPUc wJrXExo6zncJMoOCkOwnCV7epuTCmptUVkm8Xm7atQCVCZlVEmZCCn2LUEmbpn2q uNgABHOmk3vVsmubHULFKDYm9O3db21CEjM4eFS2+myBjEeL5mpWmJ8WX0Q48tpc LpMvPF1uvZGF3k6zec3vtytHPoFyoG4B+ZORT6pv4NzWRdhvucy5bypBbYySt4a0 DyZykAe5AcQ78UJ2sjQda5Fgs3m9AC6GDPxp+8kKLL8nfPX5jjUh2G8cgiAXhF5G U9wc5zLitPfYJMTBaM7jgr85Dduz8MfV9t1DsXeD99vDSEwq2Ztysc82uJSXAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUiMuighvwwvGBdfSQrPhP63VcaPcwHwYDVR0j BBgwFoAUi85+cqu7rQBTY5OghAu6Cr86oo4wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMzA4ZjhiM2UtMDUxZS00YzQ0LTljYjUtN2I4MzMxZWY5 YTA0LzEvOEJDRTdFNzJBQkJCQUQwMDUzNjM5M0EwODQwQkJBMEFCRjNBQTI4RS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84YWZiNWZlMi0zYzJhLTQ5 MzktOTVlOS0wMDc3YjgwYjRmMGUvMC84QkNFN0U3MkFCQkJBRDAwNTM2MzkzQTA4 NDBCQkEwQUJGM0FBMjhFLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzMwOGY4YjNlLTA1MWUtNGM0NC05Y2I1LTdiODMzMWVmOWEwNC8xLzhCQ0U3RTcy QUJCQkFEMDA1MzYzOTNBMDg0MEJCQTBBQkYzQUEyOEUubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBLoF9r he4WuZrTqsR7C4MC+A4MLjk60Vt1MWeS35UgRdbLUvzoNJ3g+wQcTpS0cF1XE1kO F4/fAYfCMk1MBF6RmObe/do53qMILs+ekAQ63SOt3PpB7Acii3GN9P6tGUiuxOTq rBmdOMAYYHeEojZkIFyARSbBVU+GO7LQvBK6fkqFHqg1VuBnDtCb0MigDre4p3r9 dxF5nBrFhBPhErWq2onVPTfHTiV3w+t4gRKcZxLJ5vEqbUO6YLB3d57Uvu4UbaS8 /H+iS5uFD68QU8QW8sBbW6NXWj6taR+uSrscr9ndofEOceErrQW6zziXiManAJCx o2A1DER5txOkLxQz -----END CERTIFICATE-----Generated at Thu Sep 24 01:34:14 2026 by rpki-client