$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/1/0A8B61A844D6C2C7AF38EDCBD165D0EFFB823E45.mft File: 0A8B61A844D6C2C7AF38EDCBD165D0EFFB823E45.mft (raw, json) Hash identifier: UlnXpCoaUH2tbDZAgxxtxnwfCtt56ISLzueBtNmsXcQ= Subject key identifier: FE:82:2E:39:F1:41:88:CF:0F:2B:67:A4:66:F1:A4:A7:C8:36:12:A0 Authority key identifier: 0A:8B:61:A8:44:D6:C2:C7:AF:38:ED:CB:D1:65:D0:EF:FB:82:3E:45 Certificate issuer: /CN=0A8B61A844D6C2C7AF38EDCBD165D0EFFB823E45 Certificate serial: 7C00C657536AB090BE62E37E65C09BB8A61864AB Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/0A8B61A844D6C2C7AF38EDCBD165D0EFFB823E45.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/1/0A8B61A844D6C2C7AF38EDCBD165D0EFFB823E45.mft Manifest number: 03BF Signing time: Thu 23 Jul 2026 10:16:16 +0000 Manifest this update: Thu 23 Jul 2026 10:11:16 +0000 Manifest next update: Fri 24 Jul 2026 13:02:16 +0000 Files and hashes: 1: 0A8B61A844D6C2C7AF38EDCBD165D0EFFB823E45.crl (hash: W9ZUkHXIVKBs535vEp52IYZifms+0MLcp/iq0qiEeWw=) 2: 326131343a373538343a373030303a3a2f33362d3434203d3e20323136343532.roa (hash: rpnwS+Y3sQ4e6qv+Gy6DoJIWfRow73aU7r2O2Z0c3vg=) 3: 326131343a373538313a6430303a3a2f34342d3438203d3e203331383938.roa (hash: qE8L39SpyoEHdTGvG8S7ZOvpv47dDhK0u7Idd96jQN8=) 4: 326131343a373538313a6430303a3a2f34302d3438203d3e20323136343532.roa (hash: +2h0a7wgr0VV5Yf9tenQW+2b3nKEqNnM1bACdpjItzE=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/1/0A8B61A844D6C2C7AF38EDCBD165D0EFFB823E45.crl rsync://rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/1/0A8B61A844D6C2C7AF38EDCBD165D0EFFB823E45.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/0A8B61A844D6C2C7AF38EDCBD165D0EFFB823E45.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 24 Jul 2026 13:02:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:00:c6:57:53:6a:b0:90:be:62:e3:7e:65:c0:9b:b8:a6:18:64:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0A8B61A844D6C2C7AF38EDCBD165D0EFFB823E45 Validity Not Before: Jul 23 10:11:16 2026 GMT Not After : Jul 24 13:02:16 2026 GMT Subject: CN=FE822E39F14188CF0F2B67A466F1A4A7C83612A0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:54:4b:48:31:83:55:f4:5a:db:a2:ff:0d:9f: 2d:50:63:c4:e4:20:83:dd:25:2b:94:1b:b8:e7:04: 5f:f4:f0:eb:d5:b0:82:a6:26:c4:f7:8c:ff:28:4c: 6d:2c:58:f0:90:f1:50:ca:45:02:4e:5b:23:dd:c6: b8:0c:37:48:7a:2f:ae:9c:40:ac:06:55:c1:e3:bb: 59:1d:60:3d:2d:8c:84:c2:14:4d:13:ac:5d:f7:0e: 09:7d:58:08:67:df:e1:3c:98:99:67:03:be:a7:4a: 2e:7f:1f:23:72:f8:ee:1d:24:61:57:fa:e2:f7:fd: 3f:ff:88:5c:cb:d0:66:74:10:3a:13:6a:85:db:f4: 0f:31:8a:bf:ac:df:75:16:3a:de:a8:33:66:ee:05: e8:e4:3d:52:f1:05:73:f7:b6:df:fa:81:4d:07:c5: 0f:68:2c:90:01:89:41:29:22:ca:23:dd:92:57:5f: 84:64:07:74:77:d9:e7:51:b9:3b:be:c3:b7:dd:b2: 49:b5:6a:45:37:53:8b:f2:ef:7d:93:86:66:67:be: 4b:c2:36:da:6a:80:c9:26:12:d3:36:c3:69:ad:5f: 85:ab:13:6f:04:61:ce:a3:53:d1:2b:58:f0:86:97: 6f:d2:f3:21:bb:01:7b:cb:85:2b:b8:2a:56:d5:20: ea:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:82:2E:39:F1:41:88:CF:0F:2B:67:A4:66:F1:A4:A7:C8:36:12:A0 X509v3 Authority Key Identifier: keyid:0A:8B:61:A8:44:D6:C2:C7:AF:38:ED:CB:D1:65:D0:EF:FB:82:3E:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/1/0A8B61A844D6C2C7AF38EDCBD165D0EFFB823E45.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/0A8B61A844D6C2C7AF38EDCBD165D0EFFB823E45.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/1/0A8B61A844D6C2C7AF38EDCBD165D0EFFB823E45.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:59:62:6e:a4:5e:3c:02:08:ce:ae:c5:a0:ed:e1:e6:ca:fb: cb:08:43:e7:da:fb:ea:bb:e4:85:bd:dd:6e:be:72:64:e3:1d: 93:0a:0d:bf:1a:16:71:27:ca:a2:e9:44:b2:e0:54:db:5a:9c: 91:78:cc:de:e4:29:62:20:1e:df:9e:ab:b4:8a:e6:62:23:d7: e8:e9:de:a7:27:a9:a9:3e:fb:21:06:16:ef:d0:20:8d:c1:99: 84:b0:e1:9f:85:b4:e9:73:4d:10:de:32:1c:f4:a6:c1:2a:3f: 88:63:7d:41:d8:30:83:63:f9:57:be:4d:82:d9:1a:c0:65:ca: a3:35:94:0f:c5:71:95:51:16:59:d6:70:52:84:09:46:d6:34: ec:43:62:d4:42:3f:47:6b:56:ef:3d:a9:64:9c:9e:f5:c0:0e: c3:7e:28:86:5a:d7:50:4c:53:f7:9f:ef:a3:8c:ee:95:8a:60: f3:84:8e:1d:d9:09:9a:69:31:ef:8c:84:b0:02:93:c0:a2:1e: 6a:ef:92:1b:dd:52:7e:e6:e5:c2:d3:0c:66:50:e6:e3:00:9d: 03:73:5f:39:cc:28:da:6b:e3:02:8d:68:d8:54:9b:7b:35:93: 2d:bc:87:66:75:89:97:ed:fa:a5:6e:0c:b6:e1:b5:be:7b:3d: be:f5:7e:8a -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUfADGV1NqsJC+YuN+ZcCbuKYYZKswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEE4QjYxQTg0NEQ2QzJDN0FGMzhFRENCRDE2NUQwRUZG QjgyM0U0NTAeFw0yNjA3MjMxMDExMTZaFw0yNjA3MjQxMzAyMTZaMDMxMTAvBgNV BAMTKEZFODIyRTM5RjE0MTg4Q0YwRjJCNjdBNDY2RjFBNEE3QzgzNjEyQTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClVEtIMYNV9Frbov8Nny1QY8Tk IIPdJSuUG7jnBF/08OvVsIKmJsT3jP8oTG0sWPCQ8VDKRQJOWyPdxrgMN0h6L66c QKwGVcHju1kdYD0tjITCFE0TrF33Dgl9WAhn3+E8mJlnA76nSi5/HyNy+O4dJGFX +uL3/T//iFzL0GZ0EDoTaoXb9A8xir+s33UWOt6oM2buBejkPVLxBXP3tt/6gU0H xQ9oLJABiUEpIsoj3ZJXX4RkB3R32edRuTu+w7fdskm1akU3U4vy732ThmZnvkvC NtpqgMkmEtM2w2mtX4WrE28EYc6jU9ErWPCGl2/S8yG7AXvLhSu4KlbVIOqrAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQU/oIuOfFBiM8PK2ekZvGkp8g2EqAwHwYDVR0j BBgwFoAUCothqETWwsevOO3L0WXQ7/uCPkUwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNzJjNDA1ZjEtYzMyZC00N2NlLTg5NDMtMDc1MmVkMTNk OGVmLzEvMEE4QjYxQTg0NEQ2QzJDN0FGMzhFRENCRDE2NUQwRUZGQjgyM0U0NS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC8wQThCNjFBODQ0RDZDMkM3QUYzOEVEQ0JE MTY1RDBFRkZCODIzRTQ1LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzcyYzQwNWYxLWMzMmQtNDdjZS04OTQzLTA3NTJlZDEzZDhlZi8xLzBBOEI2MUE4 NDRENkMyQzdBRjM4RURDQkQxNjVEMEVGRkI4MjNFNDUubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAYWWJu pF48AgjOrsWg7eHmyvvLCEPn2vvqu+SFvd1uvnJk4x2TCg2/GhZxJ8qi6USy4FTb WpyReMze5CliIB7fnqu0iuZiI9fo6d6nJ6mpPvshBhbv0CCNwZmEsOGfhbTpc00Q 3jIc9KbBKj+IY31B2DCDY/lXvk2C2RrAZcqjNZQPxXGVURZZ1nBShAlG1jTsQ2LU Qj9Ha1bvPalknJ71wA7DfiiGWtdQTFP3n++jjO6VimDzhI4d2QmaaTHvjISwApPA oh5q75Ib3VJ+5uXC0wxmUObjAJ0Dc185zCjaa+MCjWjYVJt7NZMtvIdmdYmX7fql bgy24bW+ez2+9X6K -----END CERTIFICATE-----Generated at Fri Jul 24 05:55:13 2026 by rpki-client