$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/308f8b3e-051e-4c44-9cb5-7b8331ef9a04/1/8BCE7E72ABBBAD00536393A0840BBA0ABF3AA28E.mft File: 8BCE7E72ABBBAD00536393A0840BBA0ABF3AA28E.mft (raw, json) Hash identifier: NcWJxoQbopecclJEuBQGC7r7C+xFd1dx3I+LW09ZV9Q= Subject key identifier: 4C:88:32:A5:AC:27:89:60:C1:91:B5:4E:A3:8B:C5:01:A4:5A:A9:88 Authority key identifier: 8B:CE:7E:72:AB:BB:AD:00:53:63:93:A0:84:0B:BA:0A:BF:3A:A2:8E Certificate issuer: /CN=8BCE7E72ABBBAD00536393A0840BBA0ABF3AA28E Certificate serial: 226B0757B93EED9DAFABAACB02DB638162AFF75C Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/8BCE7E72ABBBAD00536393A0840BBA0ABF3AA28E.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/308f8b3e-051e-4c44-9cb5-7b8331ef9a04/1/8BCE7E72ABBBAD00536393A0840BBA0ABF3AA28E.mft Manifest number: 0176 Signing time: Tue 08 Sep 2026 19:53:03 +0000 Manifest this update: Tue 08 Sep 2026 19:48:03 +0000 Manifest next update: Wed 09 Sep 2026 21:25:03 +0000 Files and hashes: 1: 8BCE7E72ABBBAD00536393A0840BBA0ABF3AA28E.crl (hash: njHOWh46itNrw0iDoxbYyGUgSPUQAs14HvFTP3tTxqw=) 2: 326130663a316363353a313730303a3a2f34302d3438203d3e20323032393339.roa (hash: UEeOHO3GGvYWxfR4E2Tbh4+FLPM0KvboVmPBm/zMcrM=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/308f8b3e-051e-4c44-9cb5-7b8331ef9a04/1/8BCE7E72ABBBAD00536393A0840BBA0ABF3AA28E.crl rsync://rsync.paas.rpki.ripe.net/repository/308f8b3e-051e-4c44-9cb5-7b8331ef9a04/1/8BCE7E72ABBBAD00536393A0840BBA0ABF3AA28E.mft rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/8BCE7E72ABBBAD00536393A0840BBA0ABF3AA28E.cer rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/1BE240021A287F298973D9EA28DFC80735FD5800.crl rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/1BE240021A287F298973D9EA28DFC80735FD5800.mft rsync://rpki.ripe.net/repository/DEFAULT/G-JAAhoofymJc9nqKN_IBzX9WAA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 09 Sep 2026 21:25:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:6b:07:57:b9:3e:ed:9d:af:ab:aa:cb:02:db:63:81:62:af:f7:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8BCE7E72ABBBAD00536393A0840BBA0ABF3AA28E Validity Not Before: Sep 8 19:48:03 2026 GMT Not After : Sep 9 21:25:03 2026 GMT Subject: CN=4C8832A5AC278960C191B54EA38BC501A45AA988 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:2d:25:f2:5e:00:fa:14:54:51:07:3b:9b:37: ef:fa:88:1d:55:07:81:41:95:16:e6:dd:d0:05:26: e5:83:24:d9:34:e4:f3:6b:fb:0a:8a:1b:88:bc:00: 0b:b0:fd:70:ef:9b:a4:be:8f:2a:46:70:d4:28:60: d8:98:6d:cb:96:61:c6:de:57:1d:7d:98:10:1f:87: 42:2a:b7:8b:ee:34:d0:59:96:01:ae:59:0b:25:86: a2:e3:48:5a:96:85:2f:13:c1:c7:f5:a3:f1:07:15: 1f:3e:68:b1:4d:9e:92:06:8f:af:f6:66:40:5c:17: b0:4a:fa:00:c5:f6:28:12:0c:82:f4:da:5a:7a:bb: 8d:c8:b0:f7:e0:c5:d8:a9:f3:61:78:07:b5:f9:d6: 83:39:5f:57:67:e0:8a:7f:3e:5d:69:60:2c:0a:80: 25:1c:cc:53:9f:65:07:ad:78:08:77:20:c1:9b:30: 5b:50:80:91:a3:51:d8:bd:a4:43:38:ea:e8:ee:21: 66:d1:4b:7e:f0:75:1b:26:98:bd:68:43:f7:b3:36: 22:a7:8f:74:d6:19:dc:3d:45:c5:af:3b:ce:30:f3: e8:40:ea:20:eb:c7:7a:44:2a:a2:b4:62:fa:63:5f: c4:95:46:6f:67:b8:b1:84:f3:da:84:8c:a2:e2:d6: ce:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:88:32:A5:AC:27:89:60:C1:91:B5:4E:A3:8B:C5:01:A4:5A:A9:88 X509v3 Authority Key Identifier: keyid:8B:CE:7E:72:AB:BB:AD:00:53:63:93:A0:84:0B:BA:0A:BF:3A:A2:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/308f8b3e-051e-4c44-9cb5-7b8331ef9a04/1/8BCE7E72ABBBAD00536393A0840BBA0ABF3AA28E.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/8BCE7E72ABBBAD00536393A0840BBA0ABF3AA28E.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/308f8b3e-051e-4c44-9cb5-7b8331ef9a04/1/8BCE7E72ABBBAD00536393A0840BBA0ABF3AA28E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:c5:50:a0:87:37:40:67:75:30:c2:44:61:ce:77:f3:69:f8: ed:4b:fe:4b:c8:90:9f:ac:95:b2:f2:72:7f:87:fa:8c:4c:24: 51:9b:65:d8:03:6d:6d:55:a5:9b:65:03:93:20:b1:39:56:b2: a8:35:3f:24:11:10:6d:e5:b5:7b:23:d8:c0:d3:7e:56:9a:02: 2e:dd:ee:73:ea:68:38:51:65:29:eb:4d:b2:da:27:97:19:e6: a9:e1:a3:6c:07:03:ea:d4:3a:55:5c:a1:09:82:07:a4:ca:f2: 8c:7f:e5:ad:40:4a:7e:7e:31:0b:7a:95:e4:5e:b2:61:02:5f: 7b:21:8a:20:21:60:39:e4:db:e3:3a:ac:7d:a7:9b:14:79:e2: f2:d1:10:86:19:f3:0a:8d:51:25:49:a5:93:6a:8d:8d:cd:94: be:1b:df:d8:c0:37:48:69:8b:8b:a2:ae:4b:b8:26:ec:02:35: ab:e3:62:9c:d6:69:4f:1b:26:18:f3:ff:77:3c:d1:3f:68:62: 6e:c4:18:ad:3a:2b:92:17:ca:8d:ed:8f:f9:bc:49:57:35:06: 7c:e2:73:83:de:1f:aa:ee:98:81:08:00:f7:9c:92:d3:89:74: a4:7b:d0:b7:83:9a:33:1d:16:3e:e6:d3:8a:7d:17:13:33:7e: fe:7e:54:ff -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUImsHV7k+7Z2vq6rLAttjgWKv91wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEJDRTdFNzJBQkJCQUQwMDUzNjM5M0EwODQwQkJBMEFC RjNBQTI4RTAeFw0yNjA5MDgxOTQ4MDNaFw0yNjA5MDkyMTI1MDNaMDMxMTAvBgNV BAMTKDRDODgzMkE1QUMyNzg5NjBDMTkxQjU0RUEzOEJDNTAxQTQ1QUE5ODgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1LSXyXgD6FFRRBzubN+/6iB1V B4FBlRbm3dAFJuWDJNk05PNr+wqKG4i8AAuw/XDvm6S+jypGcNQoYNiYbcuWYcbe Vx19mBAfh0Iqt4vuNNBZlgGuWQslhqLjSFqWhS8Twcf1o/EHFR8+aLFNnpIGj6/2 ZkBcF7BK+gDF9igSDIL02lp6u43IsPfgxdip82F4B7X51oM5X1dn4Ip/Pl1pYCwK gCUczFOfZQeteAh3IMGbMFtQgJGjUdi9pEM46ujuIWbRS37wdRsmmL1oQ/ezNiKn j3TWGdw9RcWvO84w8+hA6iDrx3pEKqK0YvpjX8SVRm9nuLGE89qEjKLi1s5nAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUTIgypawniWDBkbVOo4vFAaRaqYgwHwYDVR0j BBgwFoAUi85+cqu7rQBTY5OghAu6Cr86oo4wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMzA4ZjhiM2UtMDUxZS00YzQ0LTljYjUtN2I4MzMxZWY5 YTA0LzEvOEJDRTdFNzJBQkJCQUQwMDUzNjM5M0EwODQwQkJBMEFCRjNBQTI4RS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84YWZiNWZlMi0zYzJhLTQ5 MzktOTVlOS0wMDc3YjgwYjRmMGUvMC84QkNFN0U3MkFCQkJBRDAwNTM2MzkzQTA4 NDBCQkEwQUJGM0FBMjhFLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzMwOGY4YjNlLTA1MWUtNGM0NC05Y2I1LTdiODMzMWVmOWEwNC8xLzhCQ0U3RTcy QUJCQkFEMDA1MzYzOTNBMDg0MEJCQTBBQkYzQUEyOEUubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBdxVCg hzdAZ3UwwkRhznfzafjtS/5LyJCfrJWy8nJ/h/qMTCRRm2XYA21tVaWbZQOTILE5 VrKoNT8kERBt5bV7I9jA035WmgIu3e5z6mg4UWUp602y2ieXGeap4aNsBwPq1DpV XKEJggekyvKMf+WtQEp+fjELepXkXrJhAl97IYogIWA55NvjOqx9p5sUeeLy0RCG GfMKjVElSaWTao2NzZS+G9/YwDdIaYuLoq5LuCbsAjWr42Kc1mlPGyYY8/93PNE/ aGJuxBitOiuSF8qN7Y/5vElXNQZ84nOD3h+q7piBCAD3nJLTiXSke9C3g5ozHRY+ 5tOKfRcTM37+flT/ -----END CERTIFICATE-----Generated at Wed Sep 9 05:38:18 2026 by rpki-client