$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/1/0A8B61A844D6C2C7AF38EDCBD165D0EFFB823E45.mft File: 0A8B61A844D6C2C7AF38EDCBD165D0EFFB823E45.mft (raw, json) Hash identifier: w7CLFrZCvkTYgM7GEstrGJwfTNSC9CQUBpUM4jPmmNI= Subject key identifier: C3:7E:4C:AC:23:C0:B4:A6:A6:F2:6B:DB:C4:D2:D3:AF:DB:73:CC:07 Authority key identifier: 0A:8B:61:A8:44:D6:C2:C7:AF:38:ED:CB:D1:65:D0:EF:FB:82:3E:45 Certificate issuer: /CN=0A8B61A844D6C2C7AF38EDCBD165D0EFFB823E45 Certificate serial: 779E4EBF62BE83B709724027D169216849C75F96 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/0A8B61A844D6C2C7AF38EDCBD165D0EFFB823E45.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/1/0A8B61A844D6C2C7AF38EDCBD165D0EFFB823E45.mft Manifest number: 031E Signing time: Wed 25 Mar 2026 17:00:57 +0000 Manifest this update: Wed 25 Mar 2026 16:55:57 +0000 Manifest next update: Thu 26 Mar 2026 20:36:57 +0000 Files and hashes: 1: 0A8B61A844D6C2C7AF38EDCBD165D0EFFB823E45.crl (hash: 7MoZ6NKA2E4Cf8MYdi8rYkMkUrRhBbXxRddbiTfbfuk=) 2: 326131343a373538343a373030303a3a2f33362d3434203d3e20323136343532.roa (hash: bjWKUcdJK3JxiL+GqIgQQNiLJnq1CfKPBgs/UuOHrJA=) 3: 326131343a373538313a6430303a3a2f34342d3438203d3e203331383938.roa (hash: OYFGGb9dMqAtV18cBeD3NbZ0TuwCvJXmn37LZwaW7zg=) 4: 326131343a373538313a6430303a3a2f34302d3438203d3e20323136343532.roa (hash: jAqeRW+G0tj75/HjlTu9upVrXQ/2AvwaP0ubMorKA1Q=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/1/0A8B61A844D6C2C7AF38EDCBD165D0EFFB823E45.crl rsync://rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/1/0A8B61A844D6C2C7AF38EDCBD165D0EFFB823E45.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/0A8B61A844D6C2C7AF38EDCBD165D0EFFB823E45.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 26 Mar 2026 20:36:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:9e:4e:bf:62:be:83:b7:09:72:40:27:d1:69:21:68:49:c7:5f:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0A8B61A844D6C2C7AF38EDCBD165D0EFFB823E45 Validity Not Before: Mar 25 16:55:57 2026 GMT Not After : Mar 26 20:36:57 2026 GMT Subject: CN=C37E4CAC23C0B4A6A6F26BDBC4D2D3AFDB73CC07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:4c:a7:d7:5a:06:7e:9f:ab:7a:82:96:f8:f5: 34:02:54:5e:63:f4:1c:70:87:78:9f:a8:1b:54:9e: ae:d9:27:b4:a5:b9:41:6e:81:0e:b7:49:82:0d:a9: d4:a3:03:f6:aa:34:e5:6f:d7:f3:36:de:16:81:63: 2c:03:60:07:f2:df:ce:fe:d2:84:31:b8:18:9e:0b: 44:5a:a8:7c:47:29:c6:30:b6:f1:c6:40:70:ea:b1: b8:66:12:0b:0f:1a:8c:2e:3e:3e:fc:16:66:f9:2c: 4d:a2:e7:2e:96:d7:4a:af:11:58:8b:39:9b:89:2d: 21:07:08:8d:6e:6f:c7:82:76:ac:63:e3:51:2d:72: 5d:1f:44:44:1e:45:e8:3a:90:80:8e:07:bd:2c:e3: 7f:bd:27:e2:e0:0d:49:82:83:05:3f:16:ce:b1:1d: 39:6b:8e:c0:c8:32:c3:7e:81:f0:50:8e:fe:23:1f: d9:6a:e3:0a:4a:d7:45:d7:01:54:be:1f:d0:2f:33: ef:c3:6b:00:d1:5a:e1:70:9b:ac:24:ae:ad:e4:cf: 39:46:69:0e:0f:0a:e1:82:e3:1a:08:3e:36:09:67: 2f:de:05:48:83:ce:38:45:83:98:33:a9:8f:b0:29: eb:0c:7f:48:4a:2f:1a:46:15:b2:d7:91:08:65:1d: 77:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:7E:4C:AC:23:C0:B4:A6:A6:F2:6B:DB:C4:D2:D3:AF:DB:73:CC:07 X509v3 Authority Key Identifier: keyid:0A:8B:61:A8:44:D6:C2:C7:AF:38:ED:CB:D1:65:D0:EF:FB:82:3E:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/1/0A8B61A844D6C2C7AF38EDCBD165D0EFFB823E45.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/0A8B61A844D6C2C7AF38EDCBD165D0EFFB823E45.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/1/0A8B61A844D6C2C7AF38EDCBD165D0EFFB823E45.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:77:09:c6:f2:f4:fb:69:52:97:ce:5d:dd:0b:48:30:ce:8a: a7:9d:47:23:1f:1b:fb:ec:bc:65:da:00:43:bb:6f:4f:c6:f9: 05:19:ac:c0:2b:af:84:00:80:f5:33:b9:25:e5:48:41:39:58: 27:8d:e9:4e:63:c1:bc:d1:b9:5c:48:71:70:f9:af:a0:03:ac: 78:ba:a0:09:b4:93:17:d1:c3:eb:c3:e9:1f:de:0a:cc:06:2a: f1:a4:db:47:54:5b:f9:0b:7d:e1:c7:88:5f:63:e7:dd:06:d2: a8:ba:57:24:cc:05:45:58:a1:4a:62:ea:03:47:ba:74:c2:34: 8f:2e:9f:70:a8:4a:b7:db:b5:13:85:12:d8:a7:e0:07:83:33: 4d:a2:38:e3:24:be:d1:5f:f1:6e:9d:6f:22:ca:6b:89:fa:62: 40:3c:76:c3:48:6b:79:ee:12:f1:25:df:5d:03:3d:1c:fb:45: dc:69:ff:c5:46:78:87:83:04:75:83:8e:bc:f4:7d:fc:c5:fa: d1:dc:5b:d3:e9:79:c6:5e:df:1c:fa:ac:b1:03:93:9b:dd:27: 97:58:b1:f5:f1:bb:ef:6b:ac:39:44:d6:b4:b4:36:ac:62:55: 4f:c5:b0:3c:20:f0:08:56:46:c2:19:cb:04:09:36:0d:c9:4d: 01:d2:2b:46 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUd55Ov2K+g7cJckAn0WkhaEnHX5YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEE4QjYxQTg0NEQ2QzJDN0FGMzhFRENCRDE2NUQwRUZG QjgyM0U0NTAeFw0yNjAzMjUxNjU1NTdaFw0yNjAzMjYyMDM2NTdaMDMxMTAvBgNV BAMTKEMzN0U0Q0FDMjNDMEI0QTZBNkYyNkJEQkM0RDJEM0FGREI3M0NDMDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDjTKfXWgZ+n6t6gpb49TQCVF5j 9Bxwh3ifqBtUnq7ZJ7SluUFugQ63SYINqdSjA/aqNOVv1/M23haBYywDYAfy387+ 0oQxuBieC0RaqHxHKcYwtvHGQHDqsbhmEgsPGowuPj78Fmb5LE2i5y6W10qvEViL OZuJLSEHCI1ub8eCdqxj41Etcl0fREQeReg6kICOB70s43+9J+LgDUmCgwU/Fs6x HTlrjsDIMsN+gfBQjv4jH9lq4wpK10XXAVS+H9AvM+/DawDRWuFwm6wkrq3kzzlG aQ4PCuGC4xoIPjYJZy/eBUiDzjhFg5gzqY+wKesMf0hKLxpGFbLXkQhlHXcnAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUw35MrCPAtKam8mvbxNLTr9tzzAcwHwYDVR0j BBgwFoAUCothqETWwsevOO3L0WXQ7/uCPkUwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNzJjNDA1ZjEtYzMyZC00N2NlLTg5NDMtMDc1MmVkMTNk OGVmLzEvMEE4QjYxQTg0NEQ2QzJDN0FGMzhFRENCRDE2NUQwRUZGQjgyM0U0NS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC8wQThCNjFBODQ0RDZDMkM3QUYzOEVEQ0JE MTY1RDBFRkZCODIzRTQ1LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzcyYzQwNWYxLWMzMmQtNDdjZS04OTQzLTA3NTJlZDEzZDhlZi8xLzBBOEI2MUE4 NDRENkMyQzdBRjM4RURDQkQxNjVEMEVGRkI4MjNFNDUubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBEdwnG 8vT7aVKXzl3dC0gwzoqnnUcjHxv77Lxl2gBDu29PxvkFGazAK6+EAID1M7kl5UhB OVgnjelOY8G80blcSHFw+a+gA6x4uqAJtJMX0cPrw+kf3grMBirxpNtHVFv5C33h x4hfY+fdBtKoulckzAVFWKFKYuoDR7p0wjSPLp9wqEq327UThRLYp+AHgzNNojjj JL7RX/FunW8iymuJ+mJAPHbDSGt57hLxJd9dAz0c+0Xcaf/FRniHgwR1g4689H38 xfrR3FvT6XnGXt8c+qyxA5Ob3SeXWLH18bvva6w5RNa0tDasYlVPxbA8IPAIVkbC GcsECTYNyU0B0itG -----END CERTIFICATE-----Generated at Thu Mar 26 04:19:15 2026 by rpki-client