$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8d9062de-f536-445d-ba71-035fbfecaad8/0/8CC300FAF2F6D49186A8B62E08F190107743973D.mft File: 8CC300FAF2F6D49186A8B62E08F190107743973D.mft (raw, json) Hash identifier: htQWPTrY37MfWD0mhR7pZXuxJGiTtnx+8kRchxToFm4= Subject key identifier: FC:BD:FA:B3:3A:B6:FB:69:B6:0F:4D:42:96:AB:14:90:27:4D:A0:62 Authority key identifier: 8C:C3:00:FA:F2:F6:D4:91:86:A8:B6:2E:08:F1:90:10:77:43:97:3D Certificate issuer: /CN=8cc300faf2f6d49186a8b62e08f190107743973d Certificate serial: 4F85C06BFDCA0835E69B129721791FBCC0547629 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jMMA-vL21JGGqLYuCPGQEHdDlz0.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8d9062de-f536-445d-ba71-035fbfecaad8/0/8CC300FAF2F6D49186A8B62E08F190107743973D.mft Manifest number: FF Signing time: Thu 23 Jul 2026 10:36:28 +0000 Manifest this update: Thu 23 Jul 2026 10:31:28 +0000 Manifest next update: Fri 24 Jul 2026 13:38:28 +0000 Files and hashes: 1: 326130303a666265343a3161623a3a2f34382d3438203d3e20323035323335.roa (hash: BQDJ5MQBcUAO3DNIndlqGRpqRDYK9vOMV2e/1C55/mU=) 2: 3138352e33382e32342e302f32342d3234203d3e203632313133.roa (hash: DL9cUbkHdgRd6E9kt0CXscnQjaDpUpLE3Ywus/lXk+w=) 3: AE2E1DEFAD81FF39E0283ED61BC9F9DC6DA9BE96.cer (hash: GFHqWxN9S46J9mAmEiVgStEzFnFl5M2lHDxwpuTvPQs=) 4: 326130303a666265313a3a2f33322d3332203d3e203632313133.roa (hash: Z+RU3vtzvAe7ynR14QHAUV1/vmbrfJ5VHYPGPd2caBI=) 5: AS62113.asa (hash: Yver10QWMXYIYP5ZY4+AuiARoynXV5PYVi7Q6x7VN9c=) 6: 8CC300FAF2F6D49186A8B62E08F190107743973D.crl (hash: lSTSYfSHZS6GWBiBS7mQaZKieCHoby3WtzXe0M5bzOI=) 7: 326130303a666265303a3a2f33322d3332203d3e203632313133.roa (hash: WNjAJELB/oLrw9Hz4dnzCW0vPcsiMFGJ+BAVSWItBek=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8d9062de-f536-445d-ba71-035fbfecaad8/0/8CC300FAF2F6D49186A8B62E08F190107743973D.crl rsync://rsync.paas.rpki.ripe.net/repository/8d9062de-f536-445d-ba71-035fbfecaad8/0/8CC300FAF2F6D49186A8B62E08F190107743973D.mft rsync://rpki.ripe.net/repository/DEFAULT/jMMA-vL21JGGqLYuCPGQEHdDlz0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 24 Jul 2026 13:38:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:85:c0:6b:fd:ca:08:35:e6:9b:12:97:21:79:1f:bc:c0:54:76:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8cc300faf2f6d49186a8b62e08f190107743973d Validity Not Before: Jul 23 10:31:28 2026 GMT Not After : Jul 24 13:38:28 2026 GMT Subject: CN=FCBDFAB33AB6FB69B60F4D4296AB1490274DA062 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:7e:eb:3d:5d:be:1b:80:26:bf:8d:29:e1:d0: d7:39:2a:d9:3b:0c:9a:d3:c0:20:0c:10:78:6e:21: 10:ac:60:17:cb:1f:4e:c0:b0:f2:74:9f:90:b5:f6: 05:77:d0:48:4e:34:e2:fa:07:ad:67:5c:8f:7d:2e: 27:fa:48:1d:c0:d6:49:26:c3:e5:ee:52:6c:5d:27: 2c:ff:43:34:06:fd:f3:a9:3a:75:b8:89:47:b0:21: 1c:80:cf:4f:d2:2f:46:51:82:0f:fa:cd:e6:a8:f1: 1c:99:77:9c:6b:0a:8e:0c:4a:92:f6:5c:9e:cf:df: 0e:69:f0:71:be:60:72:9c:ed:13:83:0e:31:be:4b: a1:f0:a8:75:d4:7a:ee:51:3e:57:cd:e6:4f:85:53: 60:d3:9b:cb:02:fb:3d:da:c9:bf:c8:32:ab:93:d8: 9c:f1:1b:d3:7a:bd:53:69:6e:85:1d:45:7d:00:d9: e3:49:24:b1:5c:cc:76:64:87:7a:06:30:1c:9a:c7: e5:c8:77:e7:ce:18:3f:b6:03:7c:f6:42:a1:bd:cc: bd:f2:83:f6:72:54:f3:bc:e5:e4:6a:d1:e2:53:36: 9d:4c:49:a3:78:3f:c5:f6:77:e2:54:77:9a:e5:b4: ce:56:70:45:fa:f4:bc:0d:5b:fd:98:8f:90:80:4c: 0f:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:BD:FA:B3:3A:B6:FB:69:B6:0F:4D:42:96:AB:14:90:27:4D:A0:62 X509v3 Authority Key Identifier: keyid:8C:C3:00:FA:F2:F6:D4:91:86:A8:B6:2E:08:F1:90:10:77:43:97:3D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/8d9062de-f536-445d-ba71-035fbfecaad8/0/8CC300FAF2F6D49186A8B62E08F190107743973D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jMMA-vL21JGGqLYuCPGQEHdDlz0.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8d9062de-f536-445d-ba71-035fbfecaad8/0/8CC300FAF2F6D49186A8B62E08F190107743973D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:a1:ad:3a:b8:34:85:7e:41:ba:2c:d4:ad:72:16:64:9f:0e: 95:dd:70:ae:1f:16:ae:ac:c7:2b:cc:b6:dc:a9:aa:67:83:3c: 7c:a8:cf:c5:0a:47:4f:ae:e2:01:7f:52:6e:82:bb:d5:dd:6f: c3:05:b5:d7:ee:70:29:76:2b:3e:55:16:d1:44:77:9a:d5:a8: 78:87:a1:6a:7c:f8:9d:ff:9d:56:14:e8:06:d3:95:f7:7a:6b: a4:17:96:99:a0:c8:d5:73:46:a4:03:ab:2d:4b:b9:d0:ca:b2: 3b:e5:c1:b9:92:4d:98:3c:7a:ac:c7:0a:3f:bd:c0:f8:ed:0f: b7:6a:49:98:d8:0b:28:10:88:b2:a3:4d:f7:80:c1:95:5b:41: 0e:57:f5:8a:1b:a7:10:c6:6e:d6:3a:61:1e:6d:04:5e:c4:4b: 7d:e0:d2:5f:06:55:ec:f2:6f:82:ff:d0:cc:46:c1:e7:b5:03: 4c:61:f3:ec:64:fb:c4:f2:b1:c1:25:4c:9a:ce:2a:1a:90:fe: 90:68:d8:29:c0:94:80:0e:46:3d:ae:69:bd:0b:08:67:ad:8e: 21:2b:7a:d5:b0:7e:59:04:b1:6c:94:73:12:56:e8:10:2c:38: d4:fd:99:a5:0c:75:35:00:f2:05:dc:a1:a7:a3:cb:b5:3e:78: 1c:62:0e:65 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUT4XAa/3KCDXmmxKXIXkfvMBUdikwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOGNjMzAwZmFmMmY2ZDQ5MTg2YThiNjJlMDhmMTkwMTA3 NzQzOTczZDAeFw0yNjA3MjMxMDMxMjhaFw0yNjA3MjQxMzM4MjhaMDMxMTAvBgNV BAMTKEZDQkRGQUIzM0FCNkZCNjlCNjBGNEQ0Mjk2QUIxNDkwMjc0REEwNjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIfus9Xb4bgCa/jSnh0Nc5Ktk7 DJrTwCAMEHhuIRCsYBfLH07AsPJ0n5C19gV30EhONOL6B61nXI99Lif6SB3A1kkm w+XuUmxdJyz/QzQG/fOpOnW4iUewIRyAz0/SL0ZRgg/6zeao8RyZd5xrCo4MSpL2 XJ7P3w5p8HG+YHKc7RODDjG+S6HwqHXUeu5RPlfN5k+FU2DTm8sC+z3ayb/IMquT 2JzxG9N6vVNpboUdRX0A2eNJJLFczHZkh3oGMByax+XId+fOGD+2A3z2QqG9zL3y g/ZyVPO85eRq0eJTNp1MSaN4P8X2d+JUd5rltM5WcEX69LwNW/2Yj5CATA+9AgMB AAGjggJHMIICQzAdBgNVHQ4EFgQU/L36szq2+2m2D01ClqsUkCdNoGIwHwYDVR0j BBgwFoAUjMMA+vL21JGGqLYuCPGQEHdDlz0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOGQ5MDYyZGUtZjUzNi00NDVkLWJhNzEtMDM1ZmJmZWNh YWQ4LzAvOENDMzAwRkFGMkY2RDQ5MTg2QThCNjJFMDhGMTkwMTA3NzQzOTczRC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2pNTUEtdkwyMUpHR3FMWXVDUEdRRUhk RGx6MC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84ZDkwNjJkZS1m NTM2LTQ0NWQtYmE3MS0wMzVmYmZlY2FhZDgvMC84Q0MzMDBGQUYyRjZENDkxODZB OEI2MkUwOEYxOTAxMDc3NDM5NzNELm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAl6GtOrg0hX5BuizUrXIW ZJ8Old1wrh8WrqzHK8y23KmqZ4M8fKjPxQpHT67iAX9SboK71d1vwwW11+5wKXYr PlUW0UR3mtWoeIehanz4nf+dVhToBtOV93prpBeWmaDI1XNGpAOrLUu50MqyO+XB uZJNmDx6rMcKP73A+O0Pt2pJmNgLKBCIsqNN94DBlVtBDlf1ihunEMZu1jphHm0E XsRLfeDSXwZV7PJvgv/QzEbB57UDTGHz7GT7xPKxwSVMms4qGpD+kGjYKcCUgA5G Pa5pvQsIZ62OISt61bB+WQSxbJRzElboECw41P2ZpQx1NQDyBdyhp6PLtT54HGIO ZQ== -----END CERTIFICATE-----Generated at Thu Jul 23 23:01:24 2026 by rpki-client