$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/8d9062de-f536-445d-ba71-035fbfecaad8/0/8CC300FAF2F6D49186A8B62E08F190107743973D.mft File: 8CC300FAF2F6D49186A8B62E08F190107743973D.mft (raw, json) Hash identifier: goFjM8ui0oI9JTKxBBN18yqvSygdDgdwmSF9MyuZbYI= Subject key identifier: 58:66:57:63:7C:1F:9C:B9:25:3E:3B:E4:2E:DB:56:C7:61:CB:E5:16 Authority key identifier: 8C:C3:00:FA:F2:F6:D4:91:86:A8:B6:2E:08:F1:90:10:77:43:97:3D Certificate issuer: /CN=8cc300faf2f6d49186a8b62e08f190107743973d Certificate serial: 5BFE7AA6E7162B1146906377559C03FEF391D650 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jMMA-vL21JGGqLYuCPGQEHdDlz0.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8d9062de-f536-445d-ba71-035fbfecaad8/0/8CC300FAF2F6D49186A8B62E08F190107743973D.mft Manifest number: 0152 Signing time: Wed 23 Sep 2026 16:12:20 +0000 Manifest this update: Wed 23 Sep 2026 16:07:20 +0000 Manifest next update: Thu 24 Sep 2026 18:48:20 +0000 Files and hashes: 1: 326130303a666265303a3a2f33322d3332203d3e203632313133.roa (hash: WNjAJELB/oLrw9Hz4dnzCW0vPcsiMFGJ+BAVSWItBek=) 2: 326130303a666265343a3161623a3a2f34382d3438203d3e20323035323335.roa (hash: BQDJ5MQBcUAO3DNIndlqGRpqRDYK9vOMV2e/1C55/mU=) 3: AE2E1DEFAD81FF39E0283ED61BC9F9DC6DA9BE96.cer (hash: GFHqWxN9S46J9mAmEiVgStEzFnFl5M2lHDxwpuTvPQs=) 4: 3138352e33382e32342e302f32342d3234203d3e203632313133.roa (hash: DL9cUbkHdgRd6E9kt0CXscnQjaDpUpLE3Ywus/lXk+w=) 5: 8CC300FAF2F6D49186A8B62E08F190107743973D.crl (hash: oO+PnV6kJhfTNoBoEiLiFu8A7Sd6vwBcJIRa8zD7ucs=) 6: AS62113.asa (hash: Yver10QWMXYIYP5ZY4+AuiARoynXV5PYVi7Q6x7VN9c=) 7: 326130303a666265313a3a2f33322d3332203d3e203632313133.roa (hash: Z+RU3vtzvAe7ynR14QHAUV1/vmbrfJ5VHYPGPd2caBI=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8d9062de-f536-445d-ba71-035fbfecaad8/0/8CC300FAF2F6D49186A8B62E08F190107743973D.crl rsync://rsync.paas.rpki.ripe.net/repository/8d9062de-f536-445d-ba71-035fbfecaad8/0/8CC300FAF2F6D49186A8B62E08F190107743973D.mft rsync://rpki.ripe.net/repository/DEFAULT/jMMA-vL21JGGqLYuCPGQEHdDlz0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 24 Sep 2026 18:27:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:fe:7a:a6:e7:16:2b:11:46:90:63:77:55:9c:03:fe:f3:91:d6:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8cc300faf2f6d49186a8b62e08f190107743973d Validity Not Before: Sep 23 16:07:20 2026 GMT Not After : Sep 24 18:48:20 2026 GMT Subject: CN=586657637C1F9CB9253E3BE42EDB56C761CBE516 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:30:c0:5d:11:94:3f:6f:0c:98:9d:3f:f4:82: 3c:60:d1:95:c6:f6:e1:d8:2d:c4:aa:08:3f:1f:fb: 4d:76:42:71:17:ab:8d:d9:3f:d2:b1:fd:41:71:30: d9:3d:76:e5:aa:28:a1:65:b0:10:18:4d:e0:b4:6c: 1b:41:34:57:b6:70:52:a6:c0:e0:07:53:47:d7:b7: a0:8e:96:89:31:27:12:ba:12:f4:48:0d:aa:96:6e: 87:21:7d:06:cc:78:d2:f6:d3:93:4b:7e:1a:83:d0: a0:12:24:42:ae:a8:fb:23:3d:b0:6b:a8:49:6b:79: 2c:07:81:36:8f:c6:ba:72:48:9c:30:8e:42:96:80: 6f:bd:f6:94:27:32:ae:8e:0f:c1:ea:bb:06:24:61: ac:00:39:c4:b0:47:c5:43:19:6d:fa:bc:e3:b2:d9: e7:e4:b8:fa:49:05:e8:97:61:b6:89:e0:97:2e:22: 19:ae:47:80:68:ee:3f:44:d4:f1:af:9b:04:bc:11: 9c:db:b8:e1:13:b2:37:3c:17:94:d6:65:cc:c7:fe: 8f:85:b3:82:c7:0c:cd:4a:5b:96:2e:c0:5d:ca:e9: 79:2d:ed:45:5f:6c:84:13:21:58:c4:cc:88:a9:9f: 4a:bd:f8:c5:5f:ba:49:f6:05:95:fa:81:30:23:a5: 8d:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:66:57:63:7C:1F:9C:B9:25:3E:3B:E4:2E:DB:56:C7:61:CB:E5:16 X509v3 Authority Key Identifier: keyid:8C:C3:00:FA:F2:F6:D4:91:86:A8:B6:2E:08:F1:90:10:77:43:97:3D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/8d9062de-f536-445d-ba71-035fbfecaad8/0/8CC300FAF2F6D49186A8B62E08F190107743973D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jMMA-vL21JGGqLYuCPGQEHdDlz0.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8d9062de-f536-445d-ba71-035fbfecaad8/0/8CC300FAF2F6D49186A8B62E08F190107743973D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:06:72:3f:f5:35:41:10:23:43:d3:fb:07:56:29:bd:7e:fe: d9:04:3f:fd:46:3d:20:90:ce:47:4c:80:bd:3a:54:31:05:1f: 29:ef:99:5e:26:da:c7:63:67:d3:8d:ed:8b:5c:dd:7a:5c:7d: 62:cc:c0:79:59:dc:fa:6f:a7:a5:8e:c3:54:c2:fc:9d:e0:1b: 4a:72:36:fd:96:69:c2:84:d5:00:e8:90:c9:70:b3:28:93:b6: 30:ad:f3:ff:95:4c:9c:11:99:6c:8c:2a:70:42:67:a1:f3:31: 8d:47:28:22:64:7f:37:f1:79:45:5a:0a:5f:3f:15:54:79:8a: 83:dc:a4:83:c2:a8:e2:b3:e6:da:7e:80:4c:cc:2e:d9:b8:78: cf:78:21:8d:72:31:47:bc:17:2d:9c:7f:f4:2f:c3:c9:88:79: c0:b1:44:ce:a7:9b:dd:f6:45:55:ad:ed:07:d4:df:68:dd:a0: f2:42:91:a3:ad:f6:da:58:87:a4:3e:19:67:bd:86:3b:8a:d6: b3:07:f5:8d:e8:2d:0f:5a:89:53:df:60:2a:80:24:45:50:7a: fc:4c:b0:32:93:bf:10:88:b6:f5:b9:5b:01:55:28:84:d8:97: da:69:05:18:00:4b:31:5b:08:8f:86:02:38:65:bb:78:7f:fb: 74:3d:c0:1a -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUW/56pucWKxFGkGN3VZwD/vOR1lAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOGNjMzAwZmFmMmY2ZDQ5MTg2YThiNjJlMDhmMTkwMTA3 NzQzOTczZDAeFw0yNjA5MjMxNjA3MjBaFw0yNjA5MjQxODQ4MjBaMDMxMTAvBgNV BAMTKDU4NjY1NzYzN0MxRjlDQjkyNTNFM0JFNDJFREI1NkM3NjFDQkU1MTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTMMBdEZQ/bwyYnT/0gjxg0ZXG 9uHYLcSqCD8f+012QnEXq43ZP9Kx/UFxMNk9duWqKKFlsBAYTeC0bBtBNFe2cFKm wOAHU0fXt6COlokxJxK6EvRIDaqWbochfQbMeNL205NLfhqD0KASJEKuqPsjPbBr qElreSwHgTaPxrpySJwwjkKWgG+99pQnMq6OD8HquwYkYawAOcSwR8VDGW36vOOy 2efkuPpJBeiXYbaJ4JcuIhmuR4Bo7j9E1PGvmwS8EZzbuOETsjc8F5TWZczH/o+F s4LHDM1KW5YuwF3K6Xkt7UVfbIQTIVjEzIipn0q9+MVfukn2BZX6gTAjpY1NAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUWGZXY3wfnLklPjvkLttWx2HL5RYwHwYDVR0j BBgwFoAUjMMA+vL21JGGqLYuCPGQEHdDlz0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOGQ5MDYyZGUtZjUzNi00NDVkLWJhNzEtMDM1ZmJmZWNh YWQ4LzAvOENDMzAwRkFGMkY2RDQ5MTg2QThCNjJFMDhGMTkwMTA3NzQzOTczRC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2pNTUEtdkwyMUpHR3FMWXVDUEdRRUhk RGx6MC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84ZDkwNjJkZS1m NTM2LTQ0NWQtYmE3MS0wMzVmYmZlY2FhZDgvMC84Q0MzMDBGQUYyRjZENDkxODZB OEI2MkUwOEYxOTAxMDc3NDM5NzNELm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXQZyP/U1QRAjQ9P7B1Yp vX7+2QQ//UY9IJDOR0yAvTpUMQUfKe+ZXibax2Nn043ti1zdelx9YszAeVnc+m+n pY7DVML8neAbSnI2/ZZpwoTVAOiQyXCzKJO2MK3z/5VMnBGZbIwqcEJnofMxjUco ImR/N/F5RVoKXz8VVHmKg9ykg8Ko4rPm2n6ATMwu2bh4z3ghjXIxR7wXLZx/9C/D yYh5wLFEzqeb3fZFVa3tB9TfaN2g8kKRo6322liHpD4ZZ72GO4rWswf1jegtD1qJ U99gKoAkRVB6/EywMpO/EIi29blbAVUohNiX2mkFGABLMVsIj4YCOGW7eH/7dD3A Gg== -----END CERTIFICATE-----Generated at Thu Sep 24 02:44:49 2026 by rpki-client