$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/65eae745-8ac9-4e71-bc94-fcb261703f96/1/8BAD307CD4DF11014E40EDDFFFD60F9A09E6E95C.mft File: 8BAD307CD4DF11014E40EDDFFFD60F9A09E6E95C.mft (raw, json) Hash identifier: uDL1Z70vizGzLUKRlmMEgD4N8z773G6vMixYb1Fsh9U= Subject key identifier: 38:7E:4E:98:CB:DA:4A:87:DE:0F:6C:D2:A2:56:A8:34:EC:7C:B1:45 Authority key identifier: 8B:AD:30:7C:D4:DF:11:01:4E:40:ED:DF:FF:D6:0F:9A:09:E6:E9:5C Certificate issuer: /CN=8BAD307CD4DF11014E40EDDFFFD60F9A09E6E95C Certificate serial: 4AC9E7F0598502BC80C390C5634C466DA625D982 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/0/8BAD307CD4DF11014E40EDDFFFD60F9A09E6E95C.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/65eae745-8ac9-4e71-bc94-fcb261703f96/1/8BAD307CD4DF11014E40EDDFFFD60F9A09E6E95C.mft Manifest number: 038C Signing time: Fri 24 Jul 2026 02:05:21 +0000 Manifest this update: Fri 24 Jul 2026 02:00:21 +0000 Manifest next update: Sat 25 Jul 2026 02:21:21 +0000 Files and hashes: 1: 326131333a393634343a343061653a3a2f34382d3438203d3e20323034323931.roa (hash: /APvQtIczoMdPeFgS8yLWOSzDbhA86h5Cc1N87vUKRI=) 2: 326131333a393634343a343030303a3a2f34302d3430203d3e20323034323931.roa (hash: YgD4FXqTWmPFPjeYHziBG/J6IaO/Hxlen1UWzQrfC/Y=) 3: 8BAD307CD4DF11014E40EDDFFFD60F9A09E6E95C.crl (hash: 9F6CgkFV0vyDlm3q1diz68pwkokjmdOKYoWh3mWvGSg=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/65eae745-8ac9-4e71-bc94-fcb261703f96/1/8BAD307CD4DF11014E40EDDFFFD60F9A09E6E95C.crl rsync://rsync.paas.rpki.ripe.net/repository/65eae745-8ac9-4e71-bc94-fcb261703f96/1/8BAD307CD4DF11014E40EDDFFFD60F9A09E6E95C.mft rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/0/8BAD307CD4DF11014E40EDDFFFD60F9A09E6E95C.cer rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/0/F1D0572FE72991BD32854BAC716676EBDAD22ACE.crl rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/0/F1D0572FE72991BD32854BAC716676EBDAD22ACE.mft rsync://rpki.ripe.net/repository/DEFAULT/8dBXL-cpkb0yhUuscWZ269rSKs4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 24 Jul 2026 16:06:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:c9:e7:f0:59:85:02:bc:80:c3:90:c5:63:4c:46:6d:a6:25:d9:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8BAD307CD4DF11014E40EDDFFFD60F9A09E6E95C Validity Not Before: Jul 24 02:00:21 2026 GMT Not After : Jul 25 02:21:21 2026 GMT Subject: CN=387E4E98CBDA4A87DE0F6CD2A256A834EC7CB145 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:0a:76:42:8b:81:d7:0a:5b:26:d7:64:da:58: c5:db:25:a1:84:f7:0b:03:4e:af:79:53:3a:81:1e: 31:0d:82:88:cf:28:c0:c6:c7:3c:28:ab:88:5b:f1: fc:fa:78:13:0f:9e:c2:79:0b:d9:71:b3:be:53:fc: a5:3d:1c:06:9f:85:c1:b8:2e:c1:35:df:b1:3a:c0: db:c8:b3:96:f2:9d:89:88:a7:c0:0e:39:3e:1e:b9: d5:61:54:eb:d1:51:ba:15:c1:38:4e:4b:08:80:ac: 32:07:fc:fa:d2:5b:a8:dc:56:b5:31:57:12:22:88: 2a:d6:d6:3c:6e:e1:b3:67:3a:4e:d2:b6:59:fc:7b: 05:9b:15:49:63:67:5a:22:51:e1:05:68:17:ef:0c: f1:13:99:0f:dd:0d:83:0e:1c:af:5e:eb:ac:4d:b1: c3:20:ab:ae:8a:b9:57:96:a1:0b:ae:b8:dc:1b:5c: 36:40:2e:cc:cd:fa:37:6f:e5:24:56:12:c7:ff:dd: 44:8c:67:56:fe:84:6e:39:32:4e:8f:59:1d:79:c5: b0:3e:8b:42:54:b8:0b:fa:15:2f:5d:09:c8:85:b9: 65:f5:00:84:5d:2c:0b:3e:0f:fc:b3:40:44:6c:8c: 73:99:c1:ff:2e:a2:46:27:47:36:50:b0:ee:82:96: 42:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:7E:4E:98:CB:DA:4A:87:DE:0F:6C:D2:A2:56:A8:34:EC:7C:B1:45 X509v3 Authority Key Identifier: keyid:8B:AD:30:7C:D4:DF:11:01:4E:40:ED:DF:FF:D6:0F:9A:09:E6:E9:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/65eae745-8ac9-4e71-bc94-fcb261703f96/1/8BAD307CD4DF11014E40EDDFFFD60F9A09E6E95C.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/0/8BAD307CD4DF11014E40EDDFFFD60F9A09E6E95C.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/65eae745-8ac9-4e71-bc94-fcb261703f96/1/8BAD307CD4DF11014E40EDDFFFD60F9A09E6E95C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 50:0f:af:3b:11:f5:e1:4e:1d:61:02:dc:5e:30:8e:e2:7e:66: 0e:80:f8:a6:9c:0d:ca:fa:5b:b6:69:45:be:76:63:67:20:cf: c8:fa:6e:35:90:01:db:b7:bb:e7:41:98:bb:94:d1:68:ed:c0: 14:f5:27:0f:ec:95:d2:53:bc:7d:d0:b0:65:27:b3:2f:31:27: a4:f9:4e:78:9b:22:55:b3:06:45:d2:a1:6a:01:5b:43:5d:84: 36:bc:da:a6:eb:48:5c:cb:c7:2b:a8:09:bf:2b:c5:2c:6f:fa: 62:36:d7:59:f6:4d:27:95:15:2a:bd:c8:ab:d8:61:7b:38:9e: a3:fe:1e:86:22:90:d6:a2:3e:08:fa:48:3e:2d:82:7d:d5:b5: 52:f3:38:8d:cb:13:e9:56:a5:f6:df:25:23:0f:d2:5d:7e:38: 64:0f:ea:db:4e:b7:83:47:c1:e5:cb:d5:7c:82:60:cf:34:38: e9:4f:fa:01:bb:57:a7:0f:bb:db:16:a0:2b:ef:78:80:0f:97: af:e4:a3:67:f8:b2:51:21:28:58:04:c4:4e:fe:8a:a9:91:7c: 90:1b:e2:54:fd:44:0a:a4:b9:3a:da:f7:25:82:23:ab:00:ed: f0:d9:2e:0c:07:5d:18:ee:d8:dc:d0:d6:1f:d1:ff:d6:7d:b9: 54:0d:c6:60 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUSsnn8FmFAryAw5DFY0xGbaYl2YIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEJBRDMwN0NENERGMTEwMTRFNDBFRERGRkZENjBGOUEw OUU2RTk1QzAeFw0yNjA3MjQwMjAwMjFaFw0yNjA3MjUwMjIxMjFaMDMxMTAvBgNV BAMTKDM4N0U0RTk4Q0JEQTRBODdERTBGNkNEMkEyNTZBODM0RUM3Q0IxNDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoCnZCi4HXClsm12TaWMXbJaGE 9wsDTq95UzqBHjENgojPKMDGxzwoq4hb8fz6eBMPnsJ5C9lxs75T/KU9HAafhcG4 LsE137E6wNvIs5bynYmIp8AOOT4eudVhVOvRUboVwThOSwiArDIH/PrSW6jcVrUx VxIiiCrW1jxu4bNnOk7Stln8ewWbFUljZ1oiUeEFaBfvDPETmQ/dDYMOHK9e66xN scMgq66KuVeWoQuuuNwbXDZALszN+jdv5SRWEsf/3USMZ1b+hG45Mk6PWR15xbA+ i0JUuAv6FS9dCciFuWX1AIRdLAs+D/yzQERsjHOZwf8uokYnRzZQsO6ClkKpAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUOH5OmMvaSofeD2zSolaoNOx8sUUwHwYDVR0j BBgwFoAUi60wfNTfEQFOQO3f/9YPmgnm6VwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNjVlYWU3NDUtOGFjOS00ZTcxLWJjOTQtZmNiMjYxNzAz Zjk2LzEvOEJBRDMwN0NENERGMTEwMTRFNDBFRERGRkZENjBGOUEwOUU2RTk1Qy5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9lMzBkZTg0Yi00MDBhLTRm ZDEtYWI4YS1lNzYxNmUyNDViNDkvMC84QkFEMzA3Q0Q0REYxMTAxNEU0MEVEREZG RkQ2MEY5QTA5RTZFOTVDLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzY1ZWFlNzQ1LThhYzktNGU3MS1iYzk0LWZjYjI2MTcwM2Y5Ni8xLzhCQUQzMDdD RDRERjExMDE0RTQwRURERkZGRDYwRjlBMDlFNkU5NUMubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBQD687 EfXhTh1hAtxeMI7ifmYOgPimnA3K+lu2aUW+dmNnIM/I+m41kAHbt7vnQZi7lNFo 7cAU9ScP7JXSU7x90LBlJ7MvMSek+U54myJVswZF0qFqAVtDXYQ2vNqm60hcy8cr qAm/K8Usb/piNtdZ9k0nlRUqvcir2GF7OJ6j/h6GIpDWoj4I+kg+LYJ91bVS8ziN yxPpVqX23yUjD9JdfjhkD+rbTreDR8Hly9V8gmDPNDjpT/oBu1enD7vbFqAr73iA D5ev5KNn+LJRIShYBMRO/oqpkXyQG+JU/UQKpLk62vclgiOrAO3w2S4MB10Y7tjc 0NYf0f/WfblUDcZg -----END CERTIFICATE-----Generated at Fri Jul 24 06:22:41 2026 by rpki-client