$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/4/8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C.mft File: 8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C.mft (raw, json) Hash identifier: MOMo7MKODlA4UXJSt0qPOZQ06aukxwtCs/L8a+d5gm8= Subject key identifier: 49:5E:1D:8E:49:25:D8:75:72:39:FA:A3:8A:59:72:D4:DB:E5:AF:9D Authority key identifier: 8E:07:D3:1C:64:52:F7:A6:B2:4E:63:CD:DC:49:0E:12:E0:AF:B3:8C Certificate issuer: /CN=8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C Certificate serial: 070F746DEE1162E68CFD04ECAFA95546E0719747 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/4/8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C.mft Manifest number: 0354 Signing time: Wed 25 Mar 2026 18:45:07 +0000 Manifest this update: Wed 25 Mar 2026 18:40:07 +0000 Manifest next update: Thu 26 Mar 2026 19:34:07 +0000 Files and hashes: 1: 326131343a373538313a343831303a3a2f34342d3438203d3e20323135363734.roa (hash: iVSqmJC3EENf/XVlR6YpWn7MgLMOJzCIs/ETJKcPCZ0=) 2: 326131343a373538313a343834303a3a2f34342d3438203d3e20323135323839.roa (hash: TeM7Pek2amM1UgjzSeE/qaGScbmirVVYpr/gbbLkRM4=) 3: 326131343a373538313a343635303a3a2f34342d3438203d3e20313335363539.roa (hash: iqN0K0kqjE2jNtYdeLoflK5x6Z7cJoriz0IZPsDEpKs=) 4: 326131343a373538313a343835303a3a2f34342d3438203d3e20323135333739.roa (hash: MBbahVlOUY0BFTONMtnmzy3HTHvtjPISBdqoM0Cyb4U=) 5: 326131343a373538313a343934303a3a2f34342d3438203d3e20313335363539.roa (hash: 8xEoc2WbgF3aR/A4BmGA/5swJlN4eULU8RI9MBQf5A8=) 6: 326131343a373538313a343836303a3a2f34342d3438203d3e20313531353434.roa (hash: XJo8jS2djpRteJlKSIzBy0GSOcq3Jj/2wBDjV1PmcuQ=) 7: 326131343a373538313a343731303a3a2f34342d3438203d3e20313439363930.roa (hash: rLVUcUxyRgJtw6VSAGlKyA8uqmBel4P5gDB+BMhpgCc=) 8: 326131343a373538313a343835653a3a2f34382d3438203d3e20323134363737.roa (hash: iHR6gaBLhEeuJStOmjFzEe4Moo+lPwxxC1xTUcqx6g4=) 9: 326131343a373538313a343331303a3a2f34342d3438203d3e20323135313731.roa (hash: GiP4GD8ggd65aZhgm+mIHhBgcxctP4oM9yKA+INTEK4=) 10: 326131343a373538313a343833303a3a2f34342d3438203d3e20323135323231.roa (hash: Yud6VyEfzu6bUn3ZGGTJfpmlFiOU2yKLbFt5IH7TKH4=) 11: 326131343a373538313a343832303a3a2f34342d3438203d3e20323135323233.roa (hash: 2UDjxG4RlvjPmviPQqGqAVVrCPWdscmfmRM0j7DODko=) 12: 326131343a373538313a343535353a3a2f34382d3438203d3e20323136333735.roa (hash: JVdP0q01IdpmOHNHM/8N7QIeZGO9fY1B0zhs290wioo=) 13: 326131343a373538313a343835633a3a2f34382d3438203d3e20313431303637.roa (hash: 9VIFUmaELJ+SuXK7+C+ONAUKoDB5ufOLiduhS88tcKE=) 14: 326131343a373538313a343535303a3a2f34342d3438203d3e20323136333735.roa (hash: 33Hc4k2qb/SFtHgCtF148ZPS40TPUk0mIWne3Kl1fjs=) 15: 326131343a373538313a343534303a3a2f34342d3438203d3e203434383137.roa (hash: lL21MUDpM3YDFXY+VNPjMEqMt9/EFafQb01ArsWLAjk=) 16: 326131343a373538313a343934303a3a2f34342d3434203d3e20323135313731.roa (hash: 6pSA0kSz3996g9/BXeNESbR6lV0s0HcQ+D2Slss3z5w=) 17: 326131343a373538313a343536303a3a2f34342d3438203d3e20323135313731.roa (hash: QP4KPs363lKNvbDMC91nWR64EDb9a5wYXaiiUC4k7Hs=) 18: 326131343a373538313a343835663a3a2f34382d3438203d3e20323135333739.roa (hash: LiQaiw5undZF8O9ZPrbB+SuBZXPDpvcvnNafAQKgteo=) 19: 326131343a373538313a343332303a3a2f34342d3438203d3e2039343232.roa (hash: a74YsL1qU7MZs6Id2KBnat9Mk42FfInZrWbOj9uOpkE=) 20: 8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C.crl (hash: MTFWGoIiiByo/hIxGmD29Tdnz//Oiwt7TZbmOqFYGH0=) 21: 326131343a373538313a343030303a3a2f33362d3438203d3e203434383137.roa (hash: fudCQ5HvpSkAFWaORqCftP85E1ijbMZ/SJYbFT8n65o=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/4/8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C.crl rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/4/8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 26 Mar 2026 19:34:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:0f:74:6d:ee:11:62:e6:8c:fd:04:ec:af:a9:55:46:e0:71:97:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C Validity Not Before: Mar 25 18:40:07 2026 GMT Not After : Mar 26 19:34:07 2026 GMT Subject: CN=495E1D8E4925D8757239FAA38A5972D4DBE5AF9D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:14:ea:bd:ac:88:dd:bb:46:1f:ac:4e:7f:73: 7a:ba:16:04:bf:a5:84:1d:c5:8d:f8:91:83:7e:3a: 89:2c:0d:e5:05:c4:4f:6f:21:7b:39:9e:06:fa:01: 73:06:02:39:94:2d:18:06:17:bc:be:5f:04:5c:bd: 6a:8b:3e:d3:5b:2f:ba:98:2c:6e:28:4d:ec:97:b9: 8a:02:58:2e:54:ca:7c:98:1f:2c:63:2a:6a:58:42: 85:ab:91:f5:f6:ff:47:bb:d4:2f:7f:88:98:d4:1b: d2:ce:c7:e3:00:42:dd:32:2f:94:72:15:d2:02:26: f6:6f:65:7c:65:10:a6:a2:a4:d8:f6:30:3d:29:2e: 1e:ed:17:05:11:1a:28:e0:c5:ed:b8:87:e5:5c:8c: f3:27:18:3f:17:7c:33:f3:e5:ae:1a:28:69:72:30: 8c:b1:fc:b7:7b:ca:cd:25:fc:3c:1b:78:43:27:07: 53:91:8d:d3:20:cb:01:af:cf:4f:94:66:18:91:86: 62:79:01:d3:29:ab:4c:e2:5c:d3:59:10:4c:02:41: 90:cd:c0:1d:f4:76:72:56:53:0d:3c:da:08:34:b1: f7:1b:37:aa:0b:c0:ea:3c:84:3a:60:f4:02:b0:91: 61:be:9c:0c:c5:6f:66:0b:37:e0:1c:5b:19:e6:a0: 99:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:5E:1D:8E:49:25:D8:75:72:39:FA:A3:8A:59:72:D4:DB:E5:AF:9D X509v3 Authority Key Identifier: keyid:8E:07:D3:1C:64:52:F7:A6:B2:4E:63:CD:DC:49:0E:12:E0:AF:B3:8C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/4/8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/4/8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a7:a7:2f:85:af:c8:21:06:c6:cd:13:15:a0:1d:dc:9d:21:e8: d7:2b:a0:c1:d9:57:01:7d:20:c7:22:be:8b:47:d5:29:50:f6: 3e:cc:66:e0:d0:f6:f0:39:ec:53:79:b1:f5:04:60:f0:0b:41: 5f:bd:10:19:fe:f9:65:bc:f9:7f:98:3b:ff:5f:b6:f7:ff:75: 55:e0:fd:31:0e:54:16:97:15:da:2e:8a:a6:88:44:0e:58:dd: 19:7d:c6:0d:a2:be:50:3c:9d:7e:23:4b:40:d1:83:1b:38:70: 20:96:75:68:2b:41:12:d2:70:8a:48:30:1b:65:82:d4:3c:a1: 5b:7e:2d:53:4d:50:e9:61:a9:aa:4f:1d:43:0d:27:78:12:ef: d2:f1:45:d6:1f:f3:25:2d:84:fb:1b:bc:31:7f:0c:7e:dd:cb: 9f:ec:5d:e1:09:f2:94:1b:20:1d:f9:69:4e:5f:55:70:ce:2a: 74:e0:a5:bd:86:cc:3e:39:9a:b5:de:41:28:c9:e1:a4:64:3f: a6:1e:c3:08:e4:80:62:a0:43:b9:24:f1:9e:0e:65:75:c4:43: 65:87:e5:e5:24:d7:00:08:61:bc:5e:22:eb:4d:87:35:92:25: cf:78:08:99:6e:81:3a:90:ae:bc:1c:ed:bd:01:53:bc:c7:16: 5b:3a:79:60 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUBw90be4RYuaM/QTsr6lVRuBxl0cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEUwN0QzMUM2NDUyRjdBNkIyNEU2M0NEREM0OTBFMTJF MEFGQjM4QzAeFw0yNjAzMjUxODQwMDdaFw0yNjAzMjYxOTM0MDdaMDMxMTAvBgNV BAMTKDQ5NUUxRDhFNDkyNUQ4NzU3MjM5RkFBMzhBNTk3MkQ0REJFNUFGOUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDvFOq9rIjdu0YfrE5/c3q6FgS/ pYQdxY34kYN+OoksDeUFxE9vIXs5ngb6AXMGAjmULRgGF7y+XwRcvWqLPtNbL7qY LG4oTeyXuYoCWC5UynyYHyxjKmpYQoWrkfX2/0e71C9/iJjUG9LOx+MAQt0yL5Ry FdICJvZvZXxlEKaipNj2MD0pLh7tFwURGijgxe24h+VcjPMnGD8XfDPz5a4aKGly MIyx/Ld7ys0l/DwbeEMnB1ORjdMgywGvz0+UZhiRhmJ5AdMpq0ziXNNZEEwCQZDN wB30dnJWUw082gg0sfcbN6oLwOo8hDpg9AKwkWG+nAzFb2YLN+AcWxnmoJmLAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUSV4djkkl2HVyOfqjilly1Nvlr50wHwYDVR0j BBgwFoAUjgfTHGRS96ayTmPN3EkOEuCvs4wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMzExZTQ3YzQtMDJmMC00NjU3LTkwMjItZDJiODNjZmY4 NzU1LzQvOEUwN0QzMUM2NDUyRjdBNkIyNEU2M0NEREM0OTBFMTJFMEFGQjM4Qy5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC84RTA3RDMxQzY0NTJGN0E2QjI0RTYzQ0RE QzQ5MEUxMkUwQUZCMzhDLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzMxMWU0N2M0LTAyZjAtNDY1Ny05MDIyLWQyYjgzY2ZmODc1NS80LzhFMDdEMzFD NjQ1MkY3QTZCMjRFNjNDRERDNDkwRTEyRTBBRkIzOEMubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCnpy+F r8ghBsbNExWgHdydIejXK6DB2VcBfSDHIr6LR9UpUPY+zGbg0PbwOexTebH1BGDw C0FfvRAZ/vllvPl/mDv/X7b3/3VV4P0xDlQWlxXaLoqmiEQOWN0ZfcYNor5QPJ1+ I0tA0YMbOHAglnVoK0ES0nCKSDAbZYLUPKFbfi1TTVDpYamqTx1DDSd4Eu/S8UXW H/MlLYT7G7wxfwx+3cuf7F3hCfKUGyAd+WlOX1Vwzip04KW9hsw+OZq13kEoyeGk ZD+mHsMI5IBioEO5JPGeDmV1xENlh+XlJNcACGG8XiLrTYc1kiXPeAiZboE6kK68 HO29AVO8xxZbOnlg -----END CERTIFICATE-----Generated at Thu Mar 26 04:08:59 2026 by rpki-client