$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/308f8b3e-051e-4c44-9cb5-7b8331ef9a04/1/8BCE7E72ABBBAD00536393A0840BBA0ABF3AA28E.mft File: 8BCE7E72ABBBAD00536393A0840BBA0ABF3AA28E.mft (raw, json) Hash identifier: vkkcMUe2SNCKdbjZbLGmKIvlX0n609j+Pwj7tCJ9Vvk= Subject key identifier: E3:F1:BF:30:67:1C:49:D3:01:27:73:BE:48:7A:4A:4D:BC:B0:50:34 Authority key identifier: 8B:CE:7E:72:AB:BB:AD:00:53:63:93:A0:84:0B:BA:0A:BF:3A:A2:8E Certificate issuer: /CN=8BCE7E72ABBBAD00536393A0840BBA0ABF3AA28E Certificate serial: 3F0FE28F3C65419C9BC3101869FF5314F53DC719 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/8BCE7E72ABBBAD00536393A0840BBA0ABF3AA28E.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/308f8b3e-051e-4c44-9cb5-7b8331ef9a04/1/8BCE7E72ABBBAD00536393A0840BBA0ABF3AA28E.mft Manifest number: 72 Signing time: Wed 04 Mar 2026 06:11:44 +0000 Manifest this update: Wed 04 Mar 2026 06:06:44 +0000 Manifest next update: Thu 05 Mar 2026 06:32:44 +0000 Files and hashes: 1: 326130663a316363353a313730303a3a2f34302d3438203d3e20323032393339.roa (hash: UEeOHO3GGvYWxfR4E2Tbh4+FLPM0KvboVmPBm/zMcrM=) 2: 8BCE7E72ABBBAD00536393A0840BBA0ABF3AA28E.crl (hash: DTjbBevV7yKMJ7FVpj3IfZRLsoZOx4nEa/7QOSxBZxk=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/308f8b3e-051e-4c44-9cb5-7b8331ef9a04/1/8BCE7E72ABBBAD00536393A0840BBA0ABF3AA28E.crl rsync://rsync.paas.rpki.ripe.net/repository/308f8b3e-051e-4c44-9cb5-7b8331ef9a04/1/8BCE7E72ABBBAD00536393A0840BBA0ABF3AA28E.mft rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/8BCE7E72ABBBAD00536393A0840BBA0ABF3AA28E.cer rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/411E2D411D687BCB4449C3DF45BEEDC041007D94.crl rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/411E2D411D687BCB4449C3DF45BEEDC041007D94.mft rsync://rpki.ripe.net/repository/DEFAULT/QR4tQR1oe8tEScPfRb7twEEAfZQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 05 Mar 2026 06:32:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:0f:e2:8f:3c:65:41:9c:9b:c3:10:18:69:ff:53:14:f5:3d:c7:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8BCE7E72ABBBAD00536393A0840BBA0ABF3AA28E Validity Not Before: Mar 4 06:06:44 2026 GMT Not After : Mar 5 06:32:44 2026 GMT Subject: CN=E3F1BF30671C49D3012773BE487A4A4DBCB05034 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:a5:40:be:dc:de:65:be:61:dc:14:1d:fa:50: 8d:0f:15:04:4a:75:e9:9b:80:72:f4:f2:67:7d:4a: c1:8d:9e:33:97:51:d2:d8:ef:6c:1f:a6:8c:ef:39: 84:7f:90:e7:57:72:47:f9:e1:5e:79:f4:7f:14:b9: b5:1e:c6:87:76:f2:e8:8b:69:04:2a:f4:61:9c:fb: dd:dc:2b:a2:9f:48:04:d6:a1:03:36:ca:9e:88:fe: b3:da:15:3a:58:24:d4:ab:5e:8a:13:b9:b4:f4:33: 8c:9e:ae:01:72:c9:0e:17:6d:67:d1:95:bd:8c:85: c6:60:47:41:11:d9:14:21:f4:ac:eb:76:a9:71:0b: c7:cb:c6:a1:a3:12:eb:48:82:96:4e:d7:b1:1d:ec: 2c:4d:f1:3c:81:b1:7a:74:b6:93:6f:d6:d4:cf:36: d7:4e:3b:ee:23:3b:db:fb:b6:ae:99:30:56:45:06: dd:6a:d6:da:c2:19:9f:3f:de:88:a0:c4:8c:50:d1: d7:9c:11:de:a1:0a:2e:2d:c8:5c:d8:21:55:04:83: 27:20:84:60:3c:df:e0:62:f5:3b:bd:25:f2:10:77: da:7c:e8:13:66:3c:d8:d5:bd:38:40:e7:ac:a4:e7: 04:c7:06:1e:90:e9:8f:bf:0c:26:25:b9:a9:d8:8a: 74:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:F1:BF:30:67:1C:49:D3:01:27:73:BE:48:7A:4A:4D:BC:B0:50:34 X509v3 Authority Key Identifier: keyid:8B:CE:7E:72:AB:BB:AD:00:53:63:93:A0:84:0B:BA:0A:BF:3A:A2:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/308f8b3e-051e-4c44-9cb5-7b8331ef9a04/1/8BCE7E72ABBBAD00536393A0840BBA0ABF3AA28E.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/8BCE7E72ABBBAD00536393A0840BBA0ABF3AA28E.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/308f8b3e-051e-4c44-9cb5-7b8331ef9a04/1/8BCE7E72ABBBAD00536393A0840BBA0ABF3AA28E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b1:63:67:b4:d8:7b:5e:e2:9d:22:7e:92:48:6c:0d:6f:00:fc: 12:3f:6c:0f:a4:4a:52:23:7c:48:c2:cf:bc:e5:b9:d9:78:35: cc:49:57:4f:58:fc:6e:ee:e2:43:e9:9d:ae:ef:72:0f:e6:98: 61:4e:23:83:f0:68:40:0c:26:1c:fe:29:12:86:c1:9b:b1:85: 14:f2:a7:fc:ed:4d:11:92:0f:7c:ff:4d:99:28:81:8f:34:a8: dc:c4:78:b2:9d:b4:7a:94:ef:3a:74:10:be:bd:84:50:63:d9: 3c:ab:58:c0:a7:07:77:f5:66:00:5c:74:79:03:70:ca:51:67: 99:71:c3:e2:e7:41:55:98:4e:51:f6:b7:3d:eb:24:ff:ad:b9: 4c:07:39:f4:3f:d9:30:21:65:7e:f0:10:79:47:cc:b1:7f:f2: 14:8d:ab:6e:56:22:ac:28:e3:94:5c:cd:f4:f6:3d:25:3c:82: fe:24:51:5e:0e:53:9a:10:77:0e:9c:1f:c7:c8:8d:a4:04:9e: 86:01:72:fd:8f:0c:9b:50:32:26:22:60:a0:5e:ab:b3:0f:7f: f4:ba:98:27:36:42:3f:79:43:0d:c2:86:56:c2:ba:ca:fa:21: 80:24:8b:cd:3d:25:28:c6:a4:8a:54:64:6c:6a:9d:c8:7b:cf: f8:c3:2f:25 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUPw/ijzxlQZybwxAYaf9TFPU9xxkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEJDRTdFNzJBQkJCQUQwMDUzNjM5M0EwODQwQkJBMEFC RjNBQTI4RTAeFw0yNjAzMDQwNjA2NDRaFw0yNjAzMDUwNjMyNDRaMDMxMTAvBgNV BAMTKEUzRjFCRjMwNjcxQzQ5RDMwMTI3NzNCRTQ4N0E0QTREQkNCMDUwMzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCypUC+3N5lvmHcFB36UI0PFQRK dembgHL08md9SsGNnjOXUdLY72wfpozvOYR/kOdXckf54V559H8UubUexod28uiL aQQq9GGc+93cK6KfSATWoQM2yp6I/rPaFTpYJNSrXooTubT0M4yergFyyQ4XbWfR lb2MhcZgR0ER2RQh9KzrdqlxC8fLxqGjEutIgpZO17Ed7CxN8TyBsXp0tpNv1tTP NtdOO+4jO9v7tq6ZMFZFBt1q1trCGZ8/3oigxIxQ0decEd6hCi4tyFzYIVUEgycg hGA83+Bi9Tu9JfIQd9p86BNmPNjVvThA56yk5wTHBh6Q6Y+/DCYluanYinRxAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQU4/G/MGccSdMBJ3O+SHpKTbywUDQwHwYDVR0j BBgwFoAUi85+cqu7rQBTY5OghAu6Cr86oo4wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMzA4ZjhiM2UtMDUxZS00YzQ0LTljYjUtN2I4MzMxZWY5 YTA0LzEvOEJDRTdFNzJBQkJCQUQwMDUzNjM5M0EwODQwQkJBMEFCRjNBQTI4RS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84YWZiNWZlMi0zYzJhLTQ5 MzktOTVlOS0wMDc3YjgwYjRmMGUvMC84QkNFN0U3MkFCQkJBRDAwNTM2MzkzQTA4 NDBCQkEwQUJGM0FBMjhFLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzMwOGY4YjNlLTA1MWUtNGM0NC05Y2I1LTdiODMzMWVmOWEwNC8xLzhCQ0U3RTcy QUJCQkFEMDA1MzYzOTNBMDg0MEJCQTBBQkYzQUEyOEUubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCxY2e0 2Hte4p0ifpJIbA1vAPwSP2wPpEpSI3xIws+85bnZeDXMSVdPWPxu7uJD6Z2u73IP 5phhTiOD8GhADCYc/ikShsGbsYUU8qf87U0Rkg98/02ZKIGPNKjcxHiynbR6lO86 dBC+vYRQY9k8q1jApwd39WYAXHR5A3DKUWeZccPi50FVmE5R9rc96yT/rblMBzn0 P9kwIWV+8BB5R8yxf/IUjatuViKsKOOUXM309j0lPIL+JFFeDlOaEHcOnB/HyI2k BJ6GAXL9jwybUDImImCgXquzD3/0upgnNkI/eUMNwoZWwrrK+iGAJIvNPSUoxqSK VGRsap3Ie8/4wy8l -----END CERTIFICATE-----Generated at Wed Mar 4 19:17:18 2026 by rpki-client