$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aa977115-5110-4257-94ef-4d2b43884040/0/8F4CE7722F99075D94738B7E61070401269EB3D6.mft File: 8F4CE7722F99075D94738B7E61070401269EB3D6.mft (raw, json) Hash identifier: m8N8NbJLsLbtV26ffAxaZdEAlAt3UqVho0clOHcQkBo= Subject key identifier: 18:06:E1:C5:B1:C3:13:0A:85:F4:B3:F0:65:B0:08:38:CC:CF:EB:3D Authority key identifier: 8F:4C:E7:72:2F:99:07:5D:94:73:8B:7E:61:07:04:01:26:9E:B3:D6 Certificate issuer: /CN=8f4ce7722f99075d94738b7e61070401269eb3d6 Certificate serial: 24931BB689C45E0EB7E550370412938AF7134016 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j0znci-ZB12Uc4t-YQcEASaes9Y.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aa977115-5110-4257-94ef-4d2b43884040/0/8F4CE7722F99075D94738B7E61070401269EB3D6.mft Manifest number: 0686 Signing time: Wed 13 May 2026 00:55:20 +0000 Manifest this update: Wed 13 May 2026 00:50:20 +0000 Manifest next update: Thu 14 May 2026 02:37:20 +0000 Files and hashes: 1: 3231322e3130322e3131342e302f32342d3234203d3e20323132363039.roa (hash: WTJQYj4kO8Tl738Oa1dFz0b2fCNqs4KUQg06eTa2Ut4=) 2: 3139332e3136332e3132372e302f32342d3234203d3e20313439393438.roa (hash: 1dKp6xe+eLRTQoCYGUtbaGkzNAIMlS65VuQGc12R6RA=) 3: 37372e38332e3235352e302f32342d3234203d3e20333937333733.roa (hash: FvvfrZU7Zk5wRW7V0nJVCDjddc7RhJHDxzG+f+tC0NU=) 4: 37372e38332e3235322e302f32342d3234203d3e203533313037.roa (hash: 3Dh0+QL4Ca7K3/8ZGEgIxNy6qmtIRAGaEkPcZns1GuY=) 5: 36322e3139322e3137322e302f32342d3234203d3e20323632323837.roa (hash: 2GimDrI+u19G9USJIxEoIwe+FIkjWzBTs+tdLgZWAyE=) 6: 8F4CE7722F99075D94738B7E61070401269EB3D6.crl (hash: G1tu8j/2ZKHPQOEwUJUzQWNZUYQfLlJX1sPxgjAfk5w=) 7: 36322e3139322e3137332e302f32342d3234203d3e2038313030.roa (hash: VR4JLJ2ZU8eUzCRER2JzBOvrizo3+I5iCEURL4jUDUs=) 8: 38352e3230392e31392e302f32342d3234203d3e203131383738.roa (hash: Nx4wSG2k5MsgvkZE/SkqlmuALnm8blh30hh9Mbxj2MU=) 9: 38352e3230392e31372e302f32342d3234203d3e203235363933.roa (hash: 5YJLPDaGqAiDF0G+tUXhPNg3tA1r1b/VO1ZV0rM38dQ=) 10: 37372e38332e3235342e302f32342d3234203d3e203432383331.roa (hash: B5BKp3Kt7IC0lBSFIyTVJVOYl/EnjscrkC95vEdRQdg=) 11: 38352e3230392e31372e302f32342d3234203d3e2038313030.roa (hash: QDSk8x00L35RICmReakqpkA/56+KGgKX4susJmbToXY=) 12: 3138352e3138312e312e302f32342d3234203d3e203232313638.roa (hash: kL/USbewZ5F9rgl6OrE+AodqJSBjzH+0rgbH/DsidT0=) 13: 36322e3139322e3137332e302f32342d3234203d3e203235363933.roa (hash: l2moL/0n3AUQ5cZa8s9n/aY4gBFkHmTPj+K3TgDTaaI=) 14: 38352e3230392e31362e302f32342d3234203d3e20343030303339.roa (hash: JpeDtHMcVyRt7wSevEegZIXGiDHI/xp5ouHedcx7mT4=) 15: 36322e3139322e3137352e302f32342d3234203d3e2039303039.roa (hash: tnNyChr4oxUcnojqJuMajG3DuagFZQP9gO2VaWpCSS0=) 16: 37372e38332e3235332e302f32342d3234203d3e20333938333835.roa (hash: VegTYwpyqBI8NVsfiZGa7nbuIizSi0tQDSuMW1lp9V8=) 17: 37372e38332e3235322e302f32342d3234203d3e20323734383237.roa (hash: 1TkU9CuZNSKSA6n8CCEVJKfR3/eejFvKDG72x42fajA=) 18: 36322e3139322e3137342e302f32342d3234203d3e20313939303538.roa (hash: 7SPDhEMWd1gl2XtQJzxrngcOVdYu9T7eD0t4enh6w+8=) 19: 38352e3230392e31382e302f32342d3234203d3e20323132343136.roa (hash: CE9hWXGWiDqK5X5bUXx/dqTabhUB/7ogzo6chIHvh68=) 20: 3138352e3138312e302e302f32342d3234203d3e2035303635.roa (hash: XgDvqjA1DUwIeQGus4KqsR+dQUTBQ2aN4efEM7LhMpY=) 21: 3138352e3138312e322e302f32342d3234203d3e20323132363639.roa (hash: MXRlv5xAo/BF9Pc+8yjAPEOfs4iVkOfxpIdVxrgD3OQ=) 22: 3138352e3138312e332e302f32342d3234203d3e20323030303137.roa (hash: P57/fYjckH7KO6Bmf2RAAe9o4ZEd5zcCF66fMAqMs84=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/aa977115-5110-4257-94ef-4d2b43884040/0/8F4CE7722F99075D94738B7E61070401269EB3D6.crl rsync://rsync.paas.rpki.ripe.net/repository/aa977115-5110-4257-94ef-4d2b43884040/0/8F4CE7722F99075D94738B7E61070401269EB3D6.mft rsync://rpki.ripe.net/repository/DEFAULT/j0znci-ZB12Uc4t-YQcEASaes9Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 13 May 2026 23:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:93:1b:b6:89:c4:5e:0e:b7:e5:50:37:04:12:93:8a:f7:13:40:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f4ce7722f99075d94738b7e61070401269eb3d6 Validity Not Before: May 13 00:50:20 2026 GMT Not After : May 14 02:37:20 2026 GMT Subject: CN=1806E1C5B1C3130A85F4B3F065B00838CCCFEB3D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:59:16:87:a9:1e:38:fd:73:d9:b5:5d:d2:ab: db:34:8c:f4:6c:a6:1e:d6:5a:0f:7e:3e:17:58:c1: e8:0a:7d:44:7c:79:6d:a2:e5:9c:40:29:ba:66:a2: ad:51:26:ff:3d:ac:85:6c:f5:71:c9:d6:f7:02:ac: 71:ea:25:44:98:32:dd:66:c6:46:ca:18:82:ed:d5: 44:82:1c:29:d3:b7:b9:2f:9a:39:41:b8:6f:89:0d: 23:9e:89:85:f4:8a:b9:bb:64:0f:79:a6:e2:d9:bf: 06:0c:65:c9:d9:34:4d:02:7d:ed:fd:94:bd:1f:1e: f4:20:d3:e1:e0:b2:11:4d:e2:7c:e1:a9:39:69:97: 4d:1e:4f:35:9d:6e:17:0b:54:18:ab:b5:10:d3:11: e5:7d:31:34:4b:d3:7e:59:82:b6:0f:c0:91:96:7c: df:0d:2f:17:c0:d6:25:80:95:b6:65:79:fa:69:79: 56:c7:84:85:a4:b6:e8:83:c5:e3:55:7f:94:f6:9d: 22:77:ec:c7:49:07:f9:e5:f2:82:dd:64:01:f7:18: 5d:2f:50:47:ff:16:33:01:04:b7:c1:09:0f:9f:c0: 6b:39:96:fa:10:56:c6:42:01:57:ef:2d:b5:f7:c7: 47:8e:50:98:8e:8b:80:30:e5:c4:89:1b:d2:d1:78: 93:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:06:E1:C5:B1:C3:13:0A:85:F4:B3:F0:65:B0:08:38:CC:CF:EB:3D X509v3 Authority Key Identifier: keyid:8F:4C:E7:72:2F:99:07:5D:94:73:8B:7E:61:07:04:01:26:9E:B3:D6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/aa977115-5110-4257-94ef-4d2b43884040/0/8F4CE7722F99075D94738B7E61070401269EB3D6.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j0znci-ZB12Uc4t-YQcEASaes9Y.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa977115-5110-4257-94ef-4d2b43884040/0/8F4CE7722F99075D94738B7E61070401269EB3D6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:f3:0f:f1:a7:da:5e:a3:ca:6d:66:a9:96:58:9b:1d:c0:fa: f2:8e:c6:29:67:0b:7d:94:2c:5b:9c:d2:5b:ac:48:2f:f3:00: ee:35:61:e2:40:ec:5a:5c:db:1d:f2:50:c1:c7:e9:f4:c0:68: 7b:77:79:de:2a:a5:1e:32:dc:13:f4:8a:b2:bd:5c:87:19:b9: ad:e0:2c:52:64:e1:7e:da:ff:c1:87:f4:81:ad:a5:c7:89:50: 35:f4:50:c9:28:0b:28:1f:a1:20:e0:45:07:34:c6:76:62:c9: 19:33:91:30:48:be:35:66:30:bd:40:f1:c4:cf:e9:e4:00:6a: 30:6c:5b:af:a5:08:d9:f2:5d:00:aa:7b:e3:ed:ea:0a:73:e3: ae:a6:32:c2:34:fc:d3:53:c3:39:c5:8a:23:14:be:e9:00:0c: 4f:9a:d8:2e:3b:83:63:8b:b4:56:50:70:b8:c3:b1:8b:d5:46: 3e:b3:eb:99:70:5e:79:f9:aa:46:41:75:82:d8:b6:74:82:7a: a1:66:dd:78:a1:9d:c7:5f:1a:8c:e9:d2:18:6a:e4:76:d4:1f: 14:04:58:23:18:cf:f0:a5:e8:c0:0d:9f:02:2c:e0:b2:b3:fa: f7:39:d0:11:9b:c9:ca:3d:c0:b2:04:90:ab:d1:54:7b:16:75: 1d:b0:9b:46 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUJJMbtonEXg635VA3BBKTivcTQBYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOGY0Y2U3NzIyZjk5MDc1ZDk0NzM4YjdlNjEwNzA0MDEy NjllYjNkNjAeFw0yNjA1MTMwMDUwMjBaFw0yNjA1MTQwMjM3MjBaMDMxMTAvBgNV BAMTKDE4MDZFMUM1QjFDMzEzMEE4NUY0QjNGMDY1QjAwODM4Q0NDRkVCM0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAWRaHqR44/XPZtV3Sq9s0jPRs ph7WWg9+PhdYwegKfUR8eW2i5ZxAKbpmoq1RJv89rIVs9XHJ1vcCrHHqJUSYMt1m xkbKGILt1USCHCnTt7kvmjlBuG+JDSOeiYX0irm7ZA95puLZvwYMZcnZNE0Cfe39 lL0fHvQg0+HgshFN4nzhqTlpl00eTzWdbhcLVBirtRDTEeV9MTRL035ZgrYPwJGW fN8NLxfA1iWAlbZlefppeVbHhIWktuiDxeNVf5T2nSJ37MdJB/nl8oLdZAH3GF0v UEf/FjMBBLfBCQ+fwGs5lvoQVsZCAVfvLbX3x0eOUJiOi4Aw5cSJG9LReJO3AgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUGAbhxbHDEwqF9LPwZbAIOMzP6z0wHwYDVR0j BBgwFoAUj0znci+ZB12Uc4t+YQcEASaes9YwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYWE5NzcxMTUtNTExMC00MjU3LTk0ZWYtNGQyYjQzODg0 MDQwLzAvOEY0Q0U3NzIyRjk5MDc1RDk0NzM4QjdFNjEwNzA0MDEyNjlFQjNENi5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2owem5jaS1aQjEyVWM0dC1ZUWNFQVNh ZXM5WS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9hYTk3NzExNS01 MTEwLTQyNTctOTRlZi00ZDJiNDM4ODQwNDAvMC84RjRDRTc3MjJGOTkwNzVEOTQ3 MzhCN0U2MTA3MDQwMTI2OUVCM0Q2Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZvMP8afaXqPKbWapllib HcD68o7GKWcLfZQsW5zSW6xIL/MA7jVh4kDsWlzbHfJQwcfp9MBoe3d53iqlHjLc E/SKsr1chxm5reAsUmThftr/wYf0ga2lx4lQNfRQySgLKB+hIOBFBzTGdmLJGTOR MEi+NWYwvUDxxM/p5ABqMGxbr6UI2fJdAKp74+3qCnPjrqYywjT801PDOcWKIxS+ 6QAMT5rYLjuDY4u0VlBwuMOxi9VGPrPrmXBeefmqRkF1gti2dIJ6oWbdeKGdx18a jOnSGGrkdtQfFARYIxjP8KXowA2fAizgsrP69znQEZvJyj3AsgSQq9FUexZ1HbCb Rg== -----END CERTIFICATE-----Generated at Wed May 13 08:05:13 2026 by rpki-client