$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/1/0A8B61A844D6C2C7AF38EDCBD165D0EFFB823E45.mft File: 0A8B61A844D6C2C7AF38EDCBD165D0EFFB823E45.mft (raw, json) Hash identifier: EAMJgrWyY1AdSSzvWOr4TCWtiZHBVdGXVyzmchKUfQQ= Subject key identifier: BE:BF:5E:78:64:99:A2:94:C6:FA:76:F8:59:E7:49:B6:96:4C:6F:BB Authority key identifier: 0A:8B:61:A8:44:D6:C2:C7:AF:38:ED:CB:D1:65:D0:EF:FB:82:3E:45 Certificate issuer: /CN=0A8B61A844D6C2C7AF38EDCBD165D0EFFB823E45 Certificate serial: 484C8230F93B9610B823A7689D20B468582CB61C Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/0A8B61A844D6C2C7AF38EDCBD165D0EFFB823E45.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/1/0A8B61A844D6C2C7AF38EDCBD165D0EFFB823E45.mft Manifest number: 0417 Signing time: Sat 26 Sep 2026 23:59:40 +0000 Manifest this update: Sat 26 Sep 2026 23:54:40 +0000 Manifest next update: Mon 28 Sep 2026 02:48:40 +0000 Files and hashes: 1: 326131343a373538343a373030303a3a2f33362d3434203d3e20323136343532.roa (hash: rpnwS+Y3sQ4e6qv+Gy6DoJIWfRow73aU7r2O2Z0c3vg=) 2: 0A8B61A844D6C2C7AF38EDCBD165D0EFFB823E45.crl (hash: Ub0lLx6EyUJVapZkd802kZtUf8kZSkhTBXpCsm4XrRw=) 3: 326131343a373538313a6430303a3a2f34342d3438203d3e203331383938.roa (hash: qE8L39SpyoEHdTGvG8S7ZOvpv47dDhK0u7Idd96jQN8=) 4: 326131343a373538313a6430303a3a2f34302d3438203d3e20323136343532.roa (hash: +2h0a7wgr0VV5Yf9tenQW+2b3nKEqNnM1bACdpjItzE=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/1/0A8B61A844D6C2C7AF38EDCBD165D0EFFB823E45.crl rsync://rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/1/0A8B61A844D6C2C7AF38EDCBD165D0EFFB823E45.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/0A8B61A844D6C2C7AF38EDCBD165D0EFFB823E45.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 27 Sep 2026 19:30:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:4c:82:30:f9:3b:96:10:b8:23:a7:68:9d:20:b4:68:58:2c:b6:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0A8B61A844D6C2C7AF38EDCBD165D0EFFB823E45 Validity Not Before: Sep 26 23:54:40 2026 GMT Not After : Sep 28 02:48:40 2026 GMT Subject: CN=BEBF5E786499A294C6FA76F859E749B6964C6FBB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:a6:f1:8c:6e:2f:37:ab:29:3e:3e:7e:5c:fd: e1:9d:f0:c4:8a:13:bf:d5:c6:60:c3:24:55:11:17: d4:b3:e4:9b:dd:d1:7d:47:80:7a:9e:33:86:19:9e: 09:8a:08:89:18:eb:4b:3d:b2:d5:bb:96:63:58:d8: 6b:54:bc:35:c4:6c:f1:d8:cf:f3:21:6d:a3:b0:80: 2d:a6:ca:c4:a0:a9:71:af:ad:27:44:02:02:b1:69: ae:77:2d:cf:0f:59:90:72:1d:c6:a2:d8:c7:f3:1a: 65:60:87:57:38:da:c9:d0:88:b4:31:81:cf:a3:00: 18:0c:72:40:36:6f:0e:67:b1:cc:77:98:cf:d9:31: 3a:25:44:07:14:b4:6f:83:60:7c:b0:17:c9:1c:22: 12:e5:85:18:08:ab:ae:9a:30:6d:a3:fa:7f:ed:4f: b7:bf:19:74:ae:a2:9f:db:5f:98:60:5c:05:d8:d0: 74:cd:78:4c:bf:be:b2:a3:2c:52:63:dc:ae:b0:78: 7f:4d:d2:91:1c:2b:2d:4c:d3:8f:33:25:45:ee:93: 2d:ea:d9:74:d2:f3:f4:84:ea:dc:0f:cb:6c:cd:54: 76:56:23:fd:73:24:f4:5d:c3:e7:62:3e:68:d0:87: 7a:87:fa:ad:46:f3:ed:db:18:c5:3d:ce:e2:e4:de: bf:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:BF:5E:78:64:99:A2:94:C6:FA:76:F8:59:E7:49:B6:96:4C:6F:BB X509v3 Authority Key Identifier: keyid:0A:8B:61:A8:44:D6:C2:C7:AF:38:ED:CB:D1:65:D0:EF:FB:82:3E:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/1/0A8B61A844D6C2C7AF38EDCBD165D0EFFB823E45.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/0A8B61A844D6C2C7AF38EDCBD165D0EFFB823E45.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/1/0A8B61A844D6C2C7AF38EDCBD165D0EFFB823E45.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:6b:cf:09:fe:fd:38:e3:6e:c3:cf:52:63:4a:cc:0f:33:77: e8:cb:6d:18:17:39:4d:bf:89:9a:f0:f1:11:5b:cd:0b:0e:19: 59:c4:17:74:aa:75:13:6a:95:70:d1:c4:a0:cd:b1:57:24:f6: 74:44:9c:fe:3a:7a:54:51:02:71:1d:0b:84:87:85:f7:c9:86: 80:f4:70:91:fd:20:51:26:43:d2:cc:80:ca:cb:e4:97:6f:51: b4:44:91:8f:cc:1f:fb:3e:ef:12:2f:d7:e9:d6:cc:b2:48:34: 29:aa:fc:4a:44:3b:3e:c1:2a:08:25:12:ab:22:ee:f8:db:a1: 8c:70:5a:a6:de:e3:68:ba:5c:9b:32:9d:2a:1a:b3:b5:47:25: a2:f5:e5:05:85:91:0e:f7:70:b5:36:ab:e7:76:0e:5b:99:79: 9d:b8:89:e4:51:96:5e:34:df:04:a7:4c:05:3d:2b:f0:a6:9a: 0d:ee:0b:1f:f5:00:50:78:00:05:44:73:ce:94:25:75:52:48: f0:0f:0a:81:35:cf:5d:40:ce:86:60:93:08:4e:b2:a0:50:b3: e6:39:3c:fe:62:1d:0d:71:b2:09:a7:71:f5:7c:ff:22:7a:b4: 9e:04:ac:cc:4d:f1:3b:80:16:25:69:16:21:4e:52:4f:d6:e3: 89:2c:f8:7a -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUSEyCMPk7lhC4I6donSC0aFgsthwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEE4QjYxQTg0NEQ2QzJDN0FGMzhFRENCRDE2NUQwRUZG QjgyM0U0NTAeFw0yNjA5MjYyMzU0NDBaFw0yNjA5MjgwMjQ4NDBaMDMxMTAvBgNV BAMTKEJFQkY1RTc4NjQ5OUEyOTRDNkZBNzZGODU5RTc0OUI2OTY0QzZGQkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCNpvGMbi83qyk+Pn5c/eGd8MSK E7/VxmDDJFURF9Sz5Jvd0X1HgHqeM4YZngmKCIkY60s9stW7lmNY2GtUvDXEbPHY z/MhbaOwgC2mysSgqXGvrSdEAgKxaa53Lc8PWZByHcai2MfzGmVgh1c42snQiLQx gc+jABgMckA2bw5nscx3mM/ZMTolRAcUtG+DYHywF8kcIhLlhRgIq66aMG2j+n/t T7e/GXSuop/bX5hgXAXY0HTNeEy/vrKjLFJj3K6weH9N0pEcKy1M048zJUXuky3q 2XTS8/SE6twPy2zNVHZWI/1zJPRdw+diPmjQh3qH+q1G8+3bGMU9zuLk3r/3AgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUvr9eeGSZopTG+nb4WedJtpZMb7swHwYDVR0j BBgwFoAUCothqETWwsevOO3L0WXQ7/uCPkUwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNzJjNDA1ZjEtYzMyZC00N2NlLTg5NDMtMDc1MmVkMTNk OGVmLzEvMEE4QjYxQTg0NEQ2QzJDN0FGMzhFRENCRDE2NUQwRUZGQjgyM0U0NS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC8wQThCNjFBODQ0RDZDMkM3QUYzOEVEQ0JE MTY1RDBFRkZCODIzRTQ1LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzcyYzQwNWYxLWMzMmQtNDdjZS04OTQzLTA3NTJlZDEzZDhlZi8xLzBBOEI2MUE4 NDRENkMyQzdBRjM4RURDQkQxNjVEMEVGRkI4MjNFNDUubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQB8a88J /v04427Dz1JjSswPM3foy20YFzlNv4ma8PERW80LDhlZxBd0qnUTapVw0cSgzbFX JPZ0RJz+OnpUUQJxHQuEh4X3yYaA9HCR/SBRJkPSzIDKy+SXb1G0RJGPzB/7Pu8S L9fp1syySDQpqvxKRDs+wSoIJRKrIu7426GMcFqm3uNoulybMp0qGrO1RyWi9eUF hZEO93C1Nqvndg5bmXmduInkUZZeNN8Ep0wFPSvwppoN7gsf9QBQeAAFRHPOlCV1 UkjwDwqBNc9dQM6GYJMITrKgULPmOTz+Yh0NcbIJp3H1fP8ierSeBKzMTfE7gBYl aRYhTlJP1uOJLPh6 -----END CERTIFICATE-----Generated at Sun Sep 27 05:46:18 2026 by rpki-client