$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/65eae745-8ac9-4e71-bc94-fcb261703f96/1/8BAD307CD4DF11014E40EDDFFFD60F9A09E6E95C.mft File: 8BAD307CD4DF11014E40EDDFFFD60F9A09E6E95C.mft (raw, json) Hash identifier: eeOik9XbRjxFNXqSMvyvzsK/6ikN7vYXksCA8ADM1rc= Subject key identifier: 4F:89:E5:1E:73:FB:6A:18:60:95:D7:30:8D:E5:15:32:48:18:11:BD Authority key identifier: 8B:AD:30:7C:D4:DF:11:01:4E:40:ED:DF:FF:D6:0F:9A:09:E6:E9:5C Certificate issuer: /CN=8BAD307CD4DF11014E40EDDFFFD60F9A09E6E95C Certificate serial: 27E3CC9C4E0A3F43C055228F8F7BADB486F7F61D Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/0/8BAD307CD4DF11014E40EDDFFFD60F9A09E6E95C.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/65eae745-8ac9-4e71-bc94-fcb261703f96/1/8BAD307CD4DF11014E40EDDFFFD60F9A09E6E95C.mft Manifest number: 03DF Signing time: Thu 24 Sep 2026 04:21:42 +0000 Manifest this update: Thu 24 Sep 2026 04:16:42 +0000 Manifest next update: Fri 25 Sep 2026 06:36:42 +0000 Files and hashes: 1: 326131333a393634343a343061653a3a2f34382d3438203d3e20323034323931.roa (hash: /APvQtIczoMdPeFgS8yLWOSzDbhA86h5Cc1N87vUKRI=) 2: 8BAD307CD4DF11014E40EDDFFFD60F9A09E6E95C.crl (hash: Tsdxg6uhj+/b9odXjrHlH+Omp5TpHhsTXMJfgrTXM/k=) 3: 326131333a393634343a343030303a3a2f34302d3430203d3e20323034323931.roa (hash: YgD4FXqTWmPFPjeYHziBG/J6IaO/Hxlen1UWzQrfC/Y=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/65eae745-8ac9-4e71-bc94-fcb261703f96/1/8BAD307CD4DF11014E40EDDFFFD60F9A09E6E95C.crl rsync://rsync.paas.rpki.ripe.net/repository/65eae745-8ac9-4e71-bc94-fcb261703f96/1/8BAD307CD4DF11014E40EDDFFFD60F9A09E6E95C.mft rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/0/8BAD307CD4DF11014E40EDDFFFD60F9A09E6E95C.cer rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/0/F1D0572FE72991BD32854BAC716676EBDAD22ACE.crl rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/0/F1D0572FE72991BD32854BAC716676EBDAD22ACE.mft rsync://rpki.ripe.net/repository/DEFAULT/8dBXL-cpkb0yhUuscWZ269rSKs4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 25 Sep 2026 01:13:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:e3:cc:9c:4e:0a:3f:43:c0:55:22:8f:8f:7b:ad:b4:86:f7:f6:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8BAD307CD4DF11014E40EDDFFFD60F9A09E6E95C Validity Not Before: Sep 24 04:16:42 2026 GMT Not After : Sep 25 06:36:42 2026 GMT Subject: CN=4F89E51E73FB6A186095D7308DE51532481811BD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:79:4d:f0:27:64:55:7c:1e:f6:3c:c8:50:ae: 66:8f:eb:8b:dc:b7:ce:0c:0d:d2:27:f4:54:aa:c9: 24:40:3c:a5:7c:3e:fa:c7:c2:c9:d6:30:03:99:86: e6:0a:3a:49:76:ad:01:db:50:98:f1:3e:a9:16:4c: 43:5d:17:35:ec:a2:c8:ab:6c:71:1e:d8:9f:7c:0b: e5:a8:e5:5b:39:e1:d2:26:89:2f:6f:9c:78:65:a1: a0:d5:3c:ca:fd:04:69:22:3e:d6:57:99:a2:46:4d: 95:68:f7:d4:e9:be:b5:37:05:66:cf:5b:cf:c2:d0: 7d:d5:8a:33:ac:e5:11:69:45:e9:a7:68:7d:bd:ed: 9c:5c:bd:95:42:25:12:c3:e1:d8:36:ae:b9:35:3d: 5b:eb:d4:82:d4:0e:89:57:98:96:76:e4:eb:97:49: 63:0a:ec:0b:57:f2:3d:6e:e2:a6:47:e7:62:fd:55: 22:a0:33:36:96:74:cd:6d:57:6b:b6:d7:4b:bf:bd: e1:20:01:25:e5:81:e9:0b:d2:37:dc:8f:2e:e5:6a: 84:16:c9:c7:81:9c:cf:bb:7b:d8:f8:1d:51:a4:7e: 74:71:77:52:1d:5d:82:e4:e8:bc:a2:3f:8f:de:4d: 55:5f:ab:33:15:92:47:8b:36:f4:19:fc:f3:c1:72: b4:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:89:E5:1E:73:FB:6A:18:60:95:D7:30:8D:E5:15:32:48:18:11:BD X509v3 Authority Key Identifier: keyid:8B:AD:30:7C:D4:DF:11:01:4E:40:ED:DF:FF:D6:0F:9A:09:E6:E9:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/65eae745-8ac9-4e71-bc94-fcb261703f96/1/8BAD307CD4DF11014E40EDDFFFD60F9A09E6E95C.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/0/8BAD307CD4DF11014E40EDDFFFD60F9A09E6E95C.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/65eae745-8ac9-4e71-bc94-fcb261703f96/1/8BAD307CD4DF11014E40EDDFFFD60F9A09E6E95C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:fb:4c:4e:f7:0c:1f:80:c5:0c:f1:c9:76:03:55:10:30:1d: 8d:2d:af:58:0e:55:3b:8e:ff:4b:60:46:bf:b4:8c:b4:bb:fa: 4b:e2:5b:8f:03:50:2d:6b:31:5a:0b:89:3c:05:aa:dd:fe:85: f6:00:40:e8:fc:1b:75:f7:eb:39:c6:0b:b4:a0:70:69:28:ea: 36:9d:0d:21:f4:b9:88:d7:32:98:5d:76:69:ea:16:a7:92:1c: b5:62:3e:54:53:2d:7b:0c:99:9e:13:6e:20:53:a3:7b:40:d0: ce:73:7e:cf:3c:98:bf:7c:83:08:80:16:12:00:07:40:82:b7: 1d:c2:29:b1:4b:5f:4f:30:9f:18:8f:18:f1:b4:e4:24:b2:90: 43:b5:02:08:3f:f1:bb:b2:9b:06:b8:cb:da:c2:6f:17:4b:0a: 9e:2d:e7:92:af:a2:45:79:37:d2:7e:2b:ce:41:4c:d5:53:e6: 39:2b:be:b2:37:7b:8e:18:ad:3c:1b:70:52:9c:7b:fe:42:8d: c2:e3:e4:8e:8c:f9:ee:61:85:c3:db:ff:ff:a4:a4:24:62:bf: d2:d6:a0:fa:85:10:46:23:f2:e2:11:99:55:9a:c8:0d:09:dd: 91:fd:40:53:43:96:0a:e0:cb:55:30:d7:13:e1:7f:e2:59:eb: e9:32:b3:64 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUJ+PMnE4KP0PAVSKPj3uttIb39h0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEJBRDMwN0NENERGMTEwMTRFNDBFRERGRkZENjBGOUEw OUU2RTk1QzAeFw0yNjA5MjQwNDE2NDJaFw0yNjA5MjUwNjM2NDJaMDMxMTAvBgNV BAMTKDRGODlFNTFFNzNGQjZBMTg2MDk1RDczMDhERTUxNTMyNDgxODExQkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMeU3wJ2RVfB72PMhQrmaP64vc t84MDdIn9FSqySRAPKV8PvrHwsnWMAOZhuYKOkl2rQHbUJjxPqkWTENdFzXsosir bHEe2J98C+Wo5Vs54dImiS9vnHhloaDVPMr9BGkiPtZXmaJGTZVo99TpvrU3BWbP W8/C0H3VijOs5RFpRemnaH297ZxcvZVCJRLD4dg2rrk1PVvr1ILUDolXmJZ25OuX SWMK7AtX8j1u4qZH52L9VSKgMzaWdM1tV2u210u/veEgASXlgekL0jfcjy7laoQW yceBnM+7e9j4HVGkfnRxd1IdXYLk6LyiP4/eTVVfqzMVkkeLNvQZ/PPBcrSPAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUT4nlHnP7ahhgldcwjeUVMkgYEb0wHwYDVR0j BBgwFoAUi60wfNTfEQFOQO3f/9YPmgnm6VwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNjVlYWU3NDUtOGFjOS00ZTcxLWJjOTQtZmNiMjYxNzAz Zjk2LzEvOEJBRDMwN0NENERGMTEwMTRFNDBFRERGRkZENjBGOUEwOUU2RTk1Qy5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9lMzBkZTg0Yi00MDBhLTRm ZDEtYWI4YS1lNzYxNmUyNDViNDkvMC84QkFEMzA3Q0Q0REYxMTAxNEU0MEVEREZG RkQ2MEY5QTA5RTZFOTVDLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzY1ZWFlNzQ1LThhYzktNGU3MS1iYzk0LWZjYjI2MTcwM2Y5Ni8xLzhCQUQzMDdD RDRERjExMDE0RTQwRURERkZGRDYwRjlBMDlFNkU5NUMubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBI+0xO 9wwfgMUM8cl2A1UQMB2NLa9YDlU7jv9LYEa/tIy0u/pL4luPA1AtazFaC4k8Bard /oX2AEDo/Bt19+s5xgu0oHBpKOo2nQ0h9LmI1zKYXXZp6hankhy1Yj5UUy17DJme E24gU6N7QNDOc37PPJi/fIMIgBYSAAdAgrcdwimxS19PMJ8YjxjxtOQkspBDtQII P/G7spsGuMvawm8XSwqeLeeSr6JFeTfSfivOQUzVU+Y5K76yN3uOGK08G3BSnHv+ Qo3C4+SOjPnuYYXD2///pKQkYr/S1qD6hRBGI/LiEZlVmsgNCd2R/UBTQ5YK4MtV MNcT4X/iWevpMrNk -----END CERTIFICATE-----Generated at Thu Sep 24 17:06:38 2026 by rpki-client