$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/308f8b3e-051e-4c44-9cb5-7b8331ef9a04/1/8BCE7E72ABBBAD00536393A0840BBA0ABF3AA28E.mft File: 8BCE7E72ABBBAD00536393A0840BBA0ABF3AA28E.mft (raw, json) Hash identifier: AQaAwaO1SjwMwPx6+08D9W47B3FCQeJNXwp0eHtzKr0= Subject key identifier: FB:FE:91:9F:74:36:B2:EB:6A:6C:0E:A9:73:5E:B2:7B:96:D0:2F:16 Authority key identifier: 8B:CE:7E:72:AB:BB:AD:00:53:63:93:A0:84:0B:BA:0A:BF:3A:A2:8E Certificate issuer: /CN=8BCE7E72ABBBAD00536393A0840BBA0ABF3AA28E Certificate serial: 7E498BC41BDE0922DFBE2C31C64EFFB86622D4A4 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/8BCE7E72ABBBAD00536393A0840BBA0ABF3AA28E.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/308f8b3e-051e-4c44-9cb5-7b8331ef9a04/1/8BCE7E72ABBBAD00536393A0840BBA0ABF3AA28E.mft Manifest number: B2 Signing time: Sat 18 Apr 2026 23:06:58 +0000 Manifest this update: Sat 18 Apr 2026 23:01:58 +0000 Manifest next update: Mon 20 Apr 2026 02:11:58 +0000 Files and hashes: 1: 326130663a316363353a313730303a3a2f34302d3438203d3e20323032393339.roa (hash: UEeOHO3GGvYWxfR4E2Tbh4+FLPM0KvboVmPBm/zMcrM=) 2: 8BCE7E72ABBBAD00536393A0840BBA0ABF3AA28E.crl (hash: mAJiHK8e+Zgx012+5caOGDVxURU+9nXjflBXPn2HDOw=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/308f8b3e-051e-4c44-9cb5-7b8331ef9a04/1/8BCE7E72ABBBAD00536393A0840BBA0ABF3AA28E.crl rsync://rsync.paas.rpki.ripe.net/repository/308f8b3e-051e-4c44-9cb5-7b8331ef9a04/1/8BCE7E72ABBBAD00536393A0840BBA0ABF3AA28E.mft rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/8BCE7E72ABBBAD00536393A0840BBA0ABF3AA28E.cer rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/411E2D411D687BCB4449C3DF45BEEDC041007D94.crl rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/411E2D411D687BCB4449C3DF45BEEDC041007D94.mft rsync://rpki.ripe.net/repository/DEFAULT/QR4tQR1oe8tEScPfRb7twEEAfZQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 19 Apr 2026 13:54:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:49:8b:c4:1b:de:09:22:df:be:2c:31:c6:4e:ff:b8:66:22:d4:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8BCE7E72ABBBAD00536393A0840BBA0ABF3AA28E Validity Not Before: Apr 18 23:01:58 2026 GMT Not After : Apr 20 02:11:58 2026 GMT Subject: CN=FBFE919F7436B2EB6A6C0EA9735EB27B96D02F16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:2b:c3:fb:06:97:83:05:0f:3c:17:20:2f:a5: 2d:a7:fa:67:5c:83:69:bd:0b:16:3a:35:41:06:8a: db:d8:9c:6a:44:e2:64:fc:8c:64:f1:41:ed:8c:5c: c4:47:d1:f9:91:0c:d0:38:5a:d7:e2:78:9d:6f:ee: 93:ff:a1:71:7a:9f:a7:82:34:1f:ba:90:25:af:61: 45:be:ec:1d:fd:20:28:41:19:37:06:a8:72:6b:d7: 14:ef:4a:4a:6b:68:e8:f2:5c:95:bf:7e:aa:2b:06: 3b:a6:c8:1e:aa:cf:e4:9a:a2:76:27:48:8d:48:d1: a5:79:16:1a:34:dd:d8:bb:c1:2b:47:df:9a:07:0f: ed:49:9e:ac:51:ba:f9:b1:8f:3b:a8:13:a4:3a:bf: 50:22:76:16:80:4b:2f:cf:b9:fd:05:20:1e:b2:6f: 5a:68:71:72:ab:f7:28:9b:af:53:94:cc:b5:ce:d7: e6:fa:0e:98:94:9d:d3:4d:be:e4:7f:fc:43:3f:05: 98:4d:b5:1e:ea:e0:bd:1c:5c:bf:79:69:95:2b:d3: e7:04:d4:89:ca:de:2e:a0:75:5e:7d:2b:1a:4f:6e: 57:be:18:6b:8a:a5:7e:7f:26:f4:d2:e7:03:c7:76: d7:1e:c6:9e:80:e6:92:18:54:f5:ce:31:73:d5:74: 2d:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:FE:91:9F:74:36:B2:EB:6A:6C:0E:A9:73:5E:B2:7B:96:D0:2F:16 X509v3 Authority Key Identifier: keyid:8B:CE:7E:72:AB:BB:AD:00:53:63:93:A0:84:0B:BA:0A:BF:3A:A2:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/308f8b3e-051e-4c44-9cb5-7b8331ef9a04/1/8BCE7E72ABBBAD00536393A0840BBA0ABF3AA28E.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/8BCE7E72ABBBAD00536393A0840BBA0ABF3AA28E.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/308f8b3e-051e-4c44-9cb5-7b8331ef9a04/1/8BCE7E72ABBBAD00536393A0840BBA0ABF3AA28E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ae:56:a9:73:96:ab:2a:46:3e:cc:74:96:2e:45:2a:45:3e:69: 3d:e9:7f:9c:a8:cb:30:70:a3:77:7a:8f:65:02:6f:d4:87:20: 83:b2:e3:2d:9b:b5:01:17:14:ab:23:12:99:1f:c9:32:8d:da: 92:72:ff:58:45:a9:38:17:6e:a8:a5:53:84:15:6d:83:8d:cf: c5:69:ff:f6:1b:4c:f3:dc:d6:8d:31:2b:42:6e:01:60:60:5d: b5:7c:e9:cb:50:67:fe:15:23:92:4d:eb:1a:6e:89:c9:00:c9: c9:cf:ed:f3:17:9c:5f:2e:bf:bf:f5:f6:62:e3:78:cc:b8:21: 3c:7a:36:1e:73:b3:f1:99:a6:16:ce:71:1a:97:69:43:58:94: 60:30:7c:a4:83:88:c5:a5:89:3f:77:2b:7f:0a:7c:a7:3c:99: b3:8b:1e:aa:fe:94:10:8a:de:08:06:da:8f:b3:99:aa:01:7e: 08:35:51:30:f8:90:07:97:73:bd:26:33:2c:e9:af:5d:10:a9: 93:be:3b:63:f0:7c:be:74:f2:cd:21:81:1a:4b:60:27:7c:c9: a6:0c:f6:c2:f3:63:5f:21:23:0d:6f:8b:47:50:26:6a:4b:16: d3:7d:d4:18:c5:25:2c:f2:4e:2b:8c:94:47:48:ba:be:e5:04: 09:56:5c:98 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUfkmLxBveCSLfviwxxk7/uGYi1KQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEJDRTdFNzJBQkJCQUQwMDUzNjM5M0EwODQwQkJBMEFC RjNBQTI4RTAeFw0yNjA0MTgyMzAxNThaFw0yNjA0MjAwMjExNThaMDMxMTAvBgNV BAMTKEZCRkU5MTlGNzQzNkIyRUI2QTZDMEVBOTczNUVCMjdCOTZEMDJGMTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQK8P7BpeDBQ88FyAvpS2n+mdc g2m9CxY6NUEGitvYnGpE4mT8jGTxQe2MXMRH0fmRDNA4WtfieJ1v7pP/oXF6n6eC NB+6kCWvYUW+7B39IChBGTcGqHJr1xTvSkpraOjyXJW/fqorBjumyB6qz+SaonYn SI1I0aV5Fho03di7wStH35oHD+1JnqxRuvmxjzuoE6Q6v1AidhaASy/Puf0FIB6y b1pocXKr9yibr1OUzLXO1+b6DpiUndNNvuR//EM/BZhNtR7q4L0cXL95aZUr0+cE 1InK3i6gdV59KxpPble+GGuKpX5/JvTS5wPHdtcexp6A5pIYVPXOMXPVdC0FAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQU+/6Rn3Q2sutqbA6pc16ye5bQLxYwHwYDVR0j BBgwFoAUi85+cqu7rQBTY5OghAu6Cr86oo4wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMzA4ZjhiM2UtMDUxZS00YzQ0LTljYjUtN2I4MzMxZWY5 YTA0LzEvOEJDRTdFNzJBQkJCQUQwMDUzNjM5M0EwODQwQkJBMEFCRjNBQTI4RS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84YWZiNWZlMi0zYzJhLTQ5 MzktOTVlOS0wMDc3YjgwYjRmMGUvMC84QkNFN0U3MkFCQkJBRDAwNTM2MzkzQTA4 NDBCQkEwQUJGM0FBMjhFLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzMwOGY4YjNlLTA1MWUtNGM0NC05Y2I1LTdiODMzMWVmOWEwNC8xLzhCQ0U3RTcy QUJCQkFEMDA1MzYzOTNBMDg0MEJCQTBBQkYzQUEyOEUubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCuVqlz lqsqRj7MdJYuRSpFPmk96X+cqMswcKN3eo9lAm/UhyCDsuMtm7UBFxSrIxKZH8ky jdqScv9YRak4F26opVOEFW2Djc/Faf/2G0zz3NaNMStCbgFgYF21fOnLUGf+FSOS TesabonJAMnJz+3zF5xfLr+/9fZi43jMuCE8ejYec7PxmaYWznEal2lDWJRgMHyk g4jFpYk/dyt/CnynPJmzix6q/pQQit4IBtqPs5mqAX4INVEw+JAHl3O9JjMs6a9d EKmTvjtj8Hy+dPLNIYEaS2AnfMmmDPbC82NfISMNb4tHUCZqSxbTfdQYxSUs8k4r jJRHSLq+5QQJVlyY -----END CERTIFICATE-----Generated at Sun Apr 19 02:32:01 2026 by rpki-client