$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8d9062de-f536-445d-ba71-035fbfecaad8/0/8CC300FAF2F6D49186A8B62E08F190107743973D.mft File: 8CC300FAF2F6D49186A8B62E08F190107743973D.mft (raw, json) Hash identifier: 8WbPnYbR5RUy01xFrvlW1QcM1+eE2fEklYC/v40GRzA= Subject key identifier: 62:8A:EB:E2:37:79:AA:E2:B5:9F:13:3C:B9:69:F7:67:34:14:AB:AC Authority key identifier: 8C:C3:00:FA:F2:F6:D4:91:86:A8:B6:2E:08:F1:90:10:77:43:97:3D Certificate issuer: /CN=8cc300faf2f6d49186a8b62e08f190107743973d Certificate serial: 57FD15664E522F75DBF56312D084B859D20A55E7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jMMA-vL21JGGqLYuCPGQEHdDlz0.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8d9062de-f536-445d-ba71-035fbfecaad8/0/8CC300FAF2F6D49186A8B62E08F190107743973D.mft Manifest number: 5F Signing time: Wed 25 Mar 2026 18:05:13 +0000 Manifest this update: Wed 25 Mar 2026 18:00:13 +0000 Manifest next update: Thu 26 Mar 2026 19:05:13 +0000 Files and hashes: 1: 326130303a666265313a3a2f33322d3332203d3e203632313133.roa (hash: Z+RU3vtzvAe7ynR14QHAUV1/vmbrfJ5VHYPGPd2caBI=) 2: 326130303a666265303a3a2f33322d3332203d3e203632313133.roa (hash: WNjAJELB/oLrw9Hz4dnzCW0vPcsiMFGJ+BAVSWItBek=) 3: AS62113.asa (hash: Yver10QWMXYIYP5ZY4+AuiARoynXV5PYVi7Q6x7VN9c=) 4: 3138352e33382e32342e302f32342d3234203d3e203632313133.roa (hash: DL9cUbkHdgRd6E9kt0CXscnQjaDpUpLE3Ywus/lXk+w=) 5: 8CC300FAF2F6D49186A8B62E08F190107743973D.crl (hash: 3S98N60RhqecaOjWwNStg3U8odaGaSdcP9P9pTk0PG4=) 6: 326130303a666265343a3161623a3a2f34382d3438203d3e20323035323335.roa (hash: BQDJ5MQBcUAO3DNIndlqGRpqRDYK9vOMV2e/1C55/mU=) 7: AE2E1DEFAD81FF39E0283ED61BC9F9DC6DA9BE96.cer (hash: GFHqWxN9S46J9mAmEiVgStEzFnFl5M2lHDxwpuTvPQs=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8d9062de-f536-445d-ba71-035fbfecaad8/0/8CC300FAF2F6D49186A8B62E08F190107743973D.crl rsync://rsync.paas.rpki.ripe.net/repository/8d9062de-f536-445d-ba71-035fbfecaad8/0/8CC300FAF2F6D49186A8B62E08F190107743973D.mft rsync://rpki.ripe.net/repository/DEFAULT/jMMA-vL21JGGqLYuCPGQEHdDlz0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 26 Mar 2026 15:17:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:fd:15:66:4e:52:2f:75:db:f5:63:12:d0:84:b8:59:d2:0a:55:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8cc300faf2f6d49186a8b62e08f190107743973d Validity Not Before: Mar 25 18:00:13 2026 GMT Not After : Mar 26 19:05:13 2026 GMT Subject: CN=628AEBE23779AAE2B59F133CB969F7673414ABAC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:07:74:0c:14:0a:b4:81:35:7a:8a:65:1d:80: ff:e7:b9:37:9d:47:99:bf:5b:a2:c4:13:9b:18:35: bd:2c:ec:f0:f4:ed:e3:1b:d6:f3:ec:43:de:6e:aa: 3b:c8:cc:3f:77:6d:5a:b8:f6:8d:31:45:c1:48:cf: 6b:d8:28:54:71:a5:99:19:46:e7:60:f7:58:cb:1e: dc:b1:a9:fb:f3:b6:86:e4:15:ab:7b:4a:ba:70:25: 75:00:6d:37:af:46:8a:8e:49:c4:c4:5a:e9:bd:bc: 82:7b:1e:5f:22:02:4c:08:26:54:92:7b:1f:44:06: ac:dd:1b:f0:b2:8e:09:c7:e1:44:20:8d:ec:83:58: 4b:7b:19:2c:37:0f:5a:d5:6a:e5:5d:41:d0:44:60: 05:38:11:f0:d4:cb:7b:e7:fc:6d:cc:95:e4:ad:1b: 67:dd:6e:16:91:4c:c8:ad:2e:c4:80:12:7a:d2:5e: 26:7e:d7:dc:fe:49:fa:6a:f9:ec:f6:f6:27:3c:82: 03:25:e1:10:5c:7f:02:ef:87:c3:f1:9c:43:f6:15: 14:d0:01:c8:e3:dc:c8:07:8c:66:1c:e6:1d:72:49: c9:f8:4f:02:2d:24:74:ac:36:65:70:1d:cb:60:0c: c6:86:21:7b:45:c6:95:fc:5f:20:bf:a6:5b:6a:4b: 13:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:8A:EB:E2:37:79:AA:E2:B5:9F:13:3C:B9:69:F7:67:34:14:AB:AC X509v3 Authority Key Identifier: keyid:8C:C3:00:FA:F2:F6:D4:91:86:A8:B6:2E:08:F1:90:10:77:43:97:3D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/8d9062de-f536-445d-ba71-035fbfecaad8/0/8CC300FAF2F6D49186A8B62E08F190107743973D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jMMA-vL21JGGqLYuCPGQEHdDlz0.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8d9062de-f536-445d-ba71-035fbfecaad8/0/8CC300FAF2F6D49186A8B62E08F190107743973D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9f:16:51:c4:10:32:70:1f:89:41:14:dc:32:ef:cb:77:b1:b6: cf:df:13:f0:0b:11:a4:40:69:c6:f7:56:ca:48:d0:bb:d4:22: 85:83:03:39:af:18:cd:22:46:bd:09:e6:f2:94:0c:8b:60:15: 7c:6e:7f:6f:a4:1b:8a:a6:10:1e:4d:3e:4c:d9:21:43:ce:54: 92:2e:07:b9:a8:49:1a:d1:fa:5d:9f:01:2d:68:2e:c7:c2:97: e5:22:f4:a2:91:be:8d:50:cd:8a:eb:8a:a0:3d:3a:71:16:c6: b1:52:c3:c8:fd:ba:3c:68:ca:fc:82:5c:0f:b6:24:81:7a:0a: 00:2b:98:84:41:5d:be:57:c2:85:f1:6e:18:df:27:6a:ce:95: 37:fc:df:3f:82:62:9e:b4:47:a7:1c:25:5d:7b:02:f5:bc:f4: ed:77:93:b0:61:02:f7:c9:4c:9a:0c:dc:36:ae:5f:4f:b2:a2: 5b:8e:01:87:ab:c6:35:90:70:54:21:a5:b3:ef:45:8e:42:71: 05:00:98:b7:f7:c0:3b:38:09:c5:51:84:40:70:95:53:b0:88: ad:cb:fe:14:43:ed:ca:e3:56:ba:91:6f:81:01:2f:3e:b8:52: e6:e8:a1:d3:ce:c9:83:82:3d:8b:13:97:c0:1e:3b:0a:9d:f0: 3f:d7:c7:26 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUV/0VZk5SL3Xb9WMS0IS4WdIKVecwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOGNjMzAwZmFmMmY2ZDQ5MTg2YThiNjJlMDhmMTkwMTA3 NzQzOTczZDAeFw0yNjAzMjUxODAwMTNaFw0yNjAzMjYxOTA1MTNaMDMxMTAvBgNV BAMTKDYyOEFFQkUyMzc3OUFBRTJCNTlGMTMzQ0I5NjlGNzY3MzQxNEFCQUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQB3QMFAq0gTV6imUdgP/nuTed R5m/W6LEE5sYNb0s7PD07eMb1vPsQ95uqjvIzD93bVq49o0xRcFIz2vYKFRxpZkZ Rudg91jLHtyxqfvztobkFat7SrpwJXUAbTevRoqOScTEWum9vIJ7Hl8iAkwIJlSS ex9EBqzdG/CyjgnH4UQgjeyDWEt7GSw3D1rVauVdQdBEYAU4EfDUy3vn/G3MleSt G2fdbhaRTMitLsSAEnrSXiZ+19z+Sfpq+ez29ic8ggMl4RBcfwLvh8PxnEP2FRTQ Acjj3MgHjGYc5h1yScn4TwItJHSsNmVwHctgDMaGIXtFxpX8XyC/pltqSxPTAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUYorr4jd5quK1nxM8uWn3ZzQUq6wwHwYDVR0j BBgwFoAUjMMA+vL21JGGqLYuCPGQEHdDlz0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOGQ5MDYyZGUtZjUzNi00NDVkLWJhNzEtMDM1ZmJmZWNh YWQ4LzAvOENDMzAwRkFGMkY2RDQ5MTg2QThCNjJFMDhGMTkwMTA3NzQzOTczRC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2pNTUEtdkwyMUpHR3FMWXVDUEdRRUhk RGx6MC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84ZDkwNjJkZS1m NTM2LTQ0NWQtYmE3MS0wMzVmYmZlY2FhZDgvMC84Q0MzMDBGQUYyRjZENDkxODZB OEI2MkUwOEYxOTAxMDc3NDM5NzNELm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnxZRxBAycB+JQRTcMu/L d7G2z98T8AsRpEBpxvdWykjQu9QihYMDOa8YzSJGvQnm8pQMi2AVfG5/b6QbiqYQ Hk0+TNkhQ85Uki4HuahJGtH6XZ8BLWgux8KX5SL0opG+jVDNiuuKoD06cRbGsVLD yP26PGjK/IJcD7YkgXoKACuYhEFdvlfChfFuGN8nas6VN/zfP4JinrRHpxwlXXsC 9bz07XeTsGEC98lMmgzcNq5fT7KiW44Bh6vGNZBwVCGls+9FjkJxBQCYt/fAOzgJ xVGEQHCVU7CIrcv+FEPtyuNWupFvgQEvPrhS5uih087Jg4I9ixOXwB47Cp3wP9fH Jg== -----END CERTIFICATE-----Generated at Wed Mar 25 21:22:15 2026 by rpki-client