$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/4/8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C.mft File: 8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C.mft (raw, json) Hash identifier: 5ENuxaEaQBqo6w60xC1q9VEE/py6B1KkUYuMm7YYXzs= Subject key identifier: AA:C0:47:B5:CD:2F:CF:1C:66:DA:B9:63:EC:CA:00:17:8C:DB:57:73 Authority key identifier: 8E:07:D3:1C:64:52:F7:A6:B2:4E:63:CD:DC:49:0E:12:E0:AF:B3:8C Certificate issuer: /CN=8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C Certificate serial: 1012C5BA98C8D623D0020E4FA165FAB82C7F50E1 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/4/8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C.mft Manifest number: 0355 Signing time: Thu 26 Mar 2026 11:35:07 +0000 Manifest this update: Thu 26 Mar 2026 11:30:07 +0000 Manifest next update: Fri 27 Mar 2026 14:10:07 +0000 Files and hashes: 1: 326131343a373538313a343731303a3a2f34342d3438203d3e20313439363930.roa (hash: rLVUcUxyRgJtw6VSAGlKyA8uqmBel4P5gDB+BMhpgCc=) 2: 326131343a373538313a343535353a3a2f34382d3438203d3e20323136333735.roa (hash: JVdP0q01IdpmOHNHM/8N7QIeZGO9fY1B0zhs290wioo=) 3: 326131343a373538313a343635303a3a2f34342d3438203d3e20313335363539.roa (hash: iqN0K0kqjE2jNtYdeLoflK5x6Z7cJoriz0IZPsDEpKs=) 4: 326131343a373538313a343331303a3a2f34342d3438203d3e20323135313731.roa (hash: GiP4GD8ggd65aZhgm+mIHhBgcxctP4oM9yKA+INTEK4=) 5: 326131343a373538313a343934303a3a2f34342d3438203d3e20313335363539.roa (hash: 8xEoc2WbgF3aR/A4BmGA/5swJlN4eULU8RI9MBQf5A8=) 6: 326131343a373538313a343831303a3a2f34342d3438203d3e20323135363734.roa (hash: iVSqmJC3EENf/XVlR6YpWn7MgLMOJzCIs/ETJKcPCZ0=) 7: 326131343a373538313a343835303a3a2f34342d3438203d3e20323135333739.roa (hash: MBbahVlOUY0BFTONMtnmzy3HTHvtjPISBdqoM0Cyb4U=) 8: 326131343a373538313a343833303a3a2f34342d3438203d3e20323135323231.roa (hash: Yud6VyEfzu6bUn3ZGGTJfpmlFiOU2yKLbFt5IH7TKH4=) 9: 8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C.crl (hash: vsMJXs46KcU4rizVxIO04/pdyJQ1o41eyf28N3alBuk=) 10: 326131343a373538313a343835633a3a2f34382d3438203d3e20313431303637.roa (hash: 9VIFUmaELJ+SuXK7+C+ONAUKoDB5ufOLiduhS88tcKE=) 11: 326131343a373538313a343934303a3a2f34342d3434203d3e20323135313731.roa (hash: 6pSA0kSz3996g9/BXeNESbR6lV0s0HcQ+D2Slss3z5w=) 12: 326131343a373538313a343536303a3a2f34342d3438203d3e20323135313731.roa (hash: QP4KPs363lKNvbDMC91nWR64EDb9a5wYXaiiUC4k7Hs=) 13: 326131343a373538313a343835663a3a2f34382d3438203d3e20323135333739.roa (hash: LiQaiw5undZF8O9ZPrbB+SuBZXPDpvcvnNafAQKgteo=) 14: 326131343a373538313a343834303a3a2f34342d3438203d3e20323135323839.roa (hash: TeM7Pek2amM1UgjzSeE/qaGScbmirVVYpr/gbbLkRM4=) 15: 326131343a373538313a343832303a3a2f34342d3438203d3e20323135323233.roa (hash: 2UDjxG4RlvjPmviPQqGqAVVrCPWdscmfmRM0j7DODko=) 16: 326131343a373538313a343535303a3a2f34342d3438203d3e20323136333735.roa (hash: 33Hc4k2qb/SFtHgCtF148ZPS40TPUk0mIWne3Kl1fjs=) 17: 326131343a373538313a343835653a3a2f34382d3438203d3e20323134363737.roa (hash: iHR6gaBLhEeuJStOmjFzEe4Moo+lPwxxC1xTUcqx6g4=) 18: 326131343a373538313a343534303a3a2f34342d3438203d3e203434383137.roa (hash: lL21MUDpM3YDFXY+VNPjMEqMt9/EFafQb01ArsWLAjk=) 19: 326131343a373538313a343030303a3a2f33362d3438203d3e203434383137.roa (hash: fudCQ5HvpSkAFWaORqCftP85E1ijbMZ/SJYbFT8n65o=) 20: 326131343a373538313a343332303a3a2f34342d3438203d3e2039343232.roa (hash: a74YsL1qU7MZs6Id2KBnat9Mk42FfInZrWbOj9uOpkE=) 21: 326131343a373538313a343836303a3a2f34342d3438203d3e20313531353434.roa (hash: XJo8jS2djpRteJlKSIzBy0GSOcq3Jj/2wBDjV1PmcuQ=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/4/8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C.crl rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/4/8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 27 Mar 2026 04:06:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:12:c5:ba:98:c8:d6:23:d0:02:0e:4f:a1:65:fa:b8:2c:7f:50:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C Validity Not Before: Mar 26 11:30:07 2026 GMT Not After : Mar 27 14:10:07 2026 GMT Subject: CN=AAC047B5CD2FCF1C66DAB963ECCA00178CDB5773 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:a4:6c:3b:b4:dc:58:f8:b4:af:d5:87:db:ce: 53:fd:07:94:7c:47:52:9f:dc:24:4b:cb:43:ed:e8: be:e7:f2:61:68:29:70:c9:4d:4a:92:bc:b5:17:08: 22:f6:19:7f:87:8a:d7:b7:0b:fb:9f:d1:d2:96:ae: 64:a3:8f:3a:02:40:18:7f:a0:9c:e0:13:11:76:9a: 3d:1f:d8:fa:5a:fb:38:63:a2:8c:e8:e0:35:5d:01: 9b:97:ec:4d:46:4d:20:f1:e1:a7:db:28:2e:a6:ad: 83:15:5b:f8:c2:af:ae:9b:45:2b:d4:8b:7f:15:c3: 04:52:09:85:00:e7:01:62:9d:f0:b6:6e:7d:96:b0: c4:56:a8:cb:52:45:9d:18:33:9a:74:9f:b1:a7:85: 24:27:fe:c3:26:43:19:a7:33:02:ee:79:b3:e4:e4: 92:ca:8c:f7:d2:c9:3d:bd:18:86:ce:bc:3b:14:20: a9:37:33:7b:6a:3b:0a:82:0d:04:86:95:f4:e7:a3: 04:62:d5:db:da:36:86:2e:02:9a:3f:30:2a:ea:80: db:17:84:b6:4d:aa:a8:1f:50:fc:4a:2c:1b:9f:86: 3b:a4:89:c2:c7:a8:88:8e:54:9c:86:c5:22:3f:23: c3:62:a0:55:ef:65:a1:c1:0a:7a:40:20:68:17:8d: 72:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:C0:47:B5:CD:2F:CF:1C:66:DA:B9:63:EC:CA:00:17:8C:DB:57:73 X509v3 Authority Key Identifier: keyid:8E:07:D3:1C:64:52:F7:A6:B2:4E:63:CD:DC:49:0E:12:E0:AF:B3:8C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/4/8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/4/8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:d6:77:7f:d9:c6:4c:97:40:7b:fb:58:33:42:4e:37:22:65: 02:e9:31:85:c3:b1:28:37:b0:4a:16:92:10:dc:38:fb:95:a5: c5:4f:9e:a4:75:39:d6:0f:8b:ec:15:7d:9a:6a:18:b7:8c:e8: b2:ee:34:35:36:4a:72:b3:83:2d:50:6c:d5:9f:28:cd:98:43: fa:53:1e:85:bf:08:71:a5:1b:32:6e:72:2d:29:99:5a:dd:43: 88:71:50:5f:a0:d9:d5:c8:14:42:fd:b7:4b:a7:f5:0f:06:2f: 9c:6b:97:0f:d4:3b:f2:bd:c8:59:c8:e9:5a:fa:c4:a8:a4:f1: df:76:88:33:20:c8:82:51:8a:28:ee:4e:e1:25:0d:74:59:eb: b6:0b:b8:08:77:58:ca:db:25:f8:fe:8e:4b:0e:08:33:23:47: ea:e7:44:d3:11:b3:9e:12:f5:06:09:40:16:13:c3:68:c9:a0: 76:e9:89:e8:bd:da:f8:f2:50:18:07:21:a1:47:e6:84:2f:b1: fa:1e:4a:88:7f:d2:0c:cc:03:14:2c:e6:74:89:31:6a:8a:e4: bf:a9:71:33:d9:90:e4:c8:57:48:34:75:3c:64:40:44:71:79: 05:c3:53:8c:13:84:4f:79:17:69:12:94:ed:56:8b:17:ca:f3: 89:5f:1c:3a -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUEBLFupjI1iPQAg5PoWX6uCx/UOEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEUwN0QzMUM2NDUyRjdBNkIyNEU2M0NEREM0OTBFMTJF MEFGQjM4QzAeFw0yNjAzMjYxMTMwMDdaFw0yNjAzMjcxNDEwMDdaMDMxMTAvBgNV BAMTKEFBQzA0N0I1Q0QyRkNGMUM2NkRBQjk2M0VDQ0EwMDE3OENEQjU3NzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMpGw7tNxY+LSv1YfbzlP9B5R8 R1Kf3CRLy0Pt6L7n8mFoKXDJTUqSvLUXCCL2GX+Hite3C/uf0dKWrmSjjzoCQBh/ oJzgExF2mj0f2Ppa+zhjoozo4DVdAZuX7E1GTSDx4afbKC6mrYMVW/jCr66bRSvU i38VwwRSCYUA5wFinfC2bn2WsMRWqMtSRZ0YM5p0n7GnhSQn/sMmQxmnMwLuebPk 5JLKjPfSyT29GIbOvDsUIKk3M3tqOwqCDQSGlfTnowRi1dvaNoYuApo/MCrqgNsX hLZNqqgfUPxKLBufhjukicLHqIiOVJyGxSI/I8NioFXvZaHBCnpAIGgXjXIfAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUqsBHtc0vzxxm2rlj7MoAF4zbV3MwHwYDVR0j BBgwFoAUjgfTHGRS96ayTmPN3EkOEuCvs4wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMzExZTQ3YzQtMDJmMC00NjU3LTkwMjItZDJiODNjZmY4 NzU1LzQvOEUwN0QzMUM2NDUyRjdBNkIyNEU2M0NEREM0OTBFMTJFMEFGQjM4Qy5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC84RTA3RDMxQzY0NTJGN0E2QjI0RTYzQ0RE QzQ5MEUxMkUwQUZCMzhDLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzMxMWU0N2M0LTAyZjAtNDY1Ny05MDIyLWQyYjgzY2ZmODc1NS80LzhFMDdEMzFD NjQ1MkY3QTZCMjRFNjNDRERDNDkwRTEyRTBBRkIzOEMubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBf1nd/ 2cZMl0B7+1gzQk43ImUC6TGFw7EoN7BKFpIQ3Dj7laXFT56kdTnWD4vsFX2aahi3 jOiy7jQ1Nkpys4MtUGzVnyjNmEP6Ux6FvwhxpRsybnItKZla3UOIcVBfoNnVyBRC /bdLp/UPBi+ca5cP1DvyvchZyOla+sSopPHfdogzIMiCUYoo7k7hJQ10Weu2C7gI d1jK2yX4/o5LDggzI0fq50TTEbOeEvUGCUAWE8NoyaB26Ynovdr48lAYByGhR+aE L7H6HkqIf9IMzAMULOZ0iTFqiuS/qXEz2ZDkyFdINHU8ZEBEcXkFw1OME4RPeRdp EpTtVosXyvOJXxw6 -----END CERTIFICATE-----Generated at Thu Mar 26 16:00:26 2026 by rpki-client