$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/308f8b3e-051e-4c44-9cb5-7b8331ef9a04/1/8BCE7E72ABBBAD00536393A0840BBA0ABF3AA28E.mft File: 8BCE7E72ABBBAD00536393A0840BBA0ABF3AA28E.mft (raw, json) Hash identifier: mBwH7wsyJ7t+h2p4lcXlO6v5272cwzodiDOtlAjiz4c= Subject key identifier: 5F:F2:27:92:CD:C3:E2:5E:E6:25:03:4A:80:6C:97:91:02:3A:39:C3 Authority key identifier: 8B:CE:7E:72:AB:BB:AD:00:53:63:93:A0:84:0B:BA:0A:BF:3A:A2:8E Certificate issuer: /CN=8BCE7E72ABBBAD00536393A0840BBA0ABF3AA28E Certificate serial: 2E430F60A8308CF5C6BB6CBA1BA93C16AFFF599C Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/8BCE7E72ABBBAD00536393A0840BBA0ABF3AA28E.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/308f8b3e-051e-4c44-9cb5-7b8331ef9a04/1/8BCE7E72ABBBAD00536393A0840BBA0ABF3AA28E.mft Manifest number: 0132 Signing time: Tue 21 Jul 2026 23:47:41 +0000 Manifest this update: Tue 21 Jul 2026 23:42:41 +0000 Manifest next update: Thu 23 Jul 2026 02:48:41 +0000 Files and hashes: 1: 326130663a316363353a313730303a3a2f34302d3438203d3e20323032393339.roa (hash: UEeOHO3GGvYWxfR4E2Tbh4+FLPM0KvboVmPBm/zMcrM=) 2: 8BCE7E72ABBBAD00536393A0840BBA0ABF3AA28E.crl (hash: wj4Zw9c/rasBnkZsLgn0HnNY3cSyk/MmnCtz6VXArVc=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/308f8b3e-051e-4c44-9cb5-7b8331ef9a04/1/8BCE7E72ABBBAD00536393A0840BBA0ABF3AA28E.crl rsync://rsync.paas.rpki.ripe.net/repository/308f8b3e-051e-4c44-9cb5-7b8331ef9a04/1/8BCE7E72ABBBAD00536393A0840BBA0ABF3AA28E.mft rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/8BCE7E72ABBBAD00536393A0840BBA0ABF3AA28E.cer rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/1BE240021A287F298973D9EA28DFC80735FD5800.crl rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/1BE240021A287F298973D9EA28DFC80735FD5800.mft rsync://rpki.ripe.net/repository/DEFAULT/G-JAAhoofymJc9nqKN_IBzX9WAA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 22 Jul 2026 23:00:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:43:0f:60:a8:30:8c:f5:c6:bb:6c:ba:1b:a9:3c:16:af:ff:59:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8BCE7E72ABBBAD00536393A0840BBA0ABF3AA28E Validity Not Before: Jul 21 23:42:41 2026 GMT Not After : Jul 23 02:48:41 2026 GMT Subject: CN=5FF22792CDC3E25EE625034A806C9791023A39C3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:bb:53:c9:6e:f6:fa:09:fe:af:f6:e3:b5:12: 4f:5a:69:59:90:29:34:63:20:e7:b2:6c:f9:38:9b: 4c:81:0d:1a:2a:22:55:a5:b6:fb:5a:1c:a6:5d:c7: 7d:fb:8e:6a:84:d9:54:7b:ad:90:13:b9:c6:25:34: 84:35:19:8e:9c:77:a0:60:1c:c3:58:b6:7c:ad:50: e5:85:97:08:36:e9:c5:72:d5:b2:76:86:8b:03:83: 81:7f:2b:6e:d4:52:9c:72:6e:48:12:6f:d7:52:9f: 28:2b:ed:b3:d0:61:cc:b3:b7:68:c5:2a:36:c4:33: bd:2a:1e:73:3d:79:3f:08:05:6d:cb:75:95:58:53: 9a:4d:d1:23:0f:3f:13:5f:62:c3:8f:b8:6c:bb:13: 29:67:7a:b1:22:5d:4b:b9:2f:ca:f8:3f:7b:a2:a1: 74:c8:4a:f8:c6:8b:12:8d:2e:65:35:e4:88:69:38: df:7d:64:93:da:5e:aa:19:35:70:6a:f3:e7:2d:5c: 59:86:c3:b2:4f:b7:84:b5:89:e5:e5:ae:08:19:b9: ee:2a:bd:1d:13:93:ca:c4:ca:68:f9:7b:10:ef:de: c0:ee:ec:55:13:3c:62:6a:65:c5:3e:a3:64:4a:18: c6:19:ee:cd:0f:09:75:fa:ff:bf:b8:a6:ad:03:75: 9b:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:F2:27:92:CD:C3:E2:5E:E6:25:03:4A:80:6C:97:91:02:3A:39:C3 X509v3 Authority Key Identifier: keyid:8B:CE:7E:72:AB:BB:AD:00:53:63:93:A0:84:0B:BA:0A:BF:3A:A2:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/308f8b3e-051e-4c44-9cb5-7b8331ef9a04/1/8BCE7E72ABBBAD00536393A0840BBA0ABF3AA28E.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/8BCE7E72ABBBAD00536393A0840BBA0ABF3AA28E.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/308f8b3e-051e-4c44-9cb5-7b8331ef9a04/1/8BCE7E72ABBBAD00536393A0840BBA0ABF3AA28E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 50:5b:2e:c2:57:8e:3c:ed:56:ed:cc:31:e9:0f:ef:01:63:5a: e6:38:20:0e:d1:4d:23:48:9f:df:19:57:1e:e0:a0:a1:2f:a5: 05:22:a6:cb:65:b2:b8:8e:f3:4d:62:3c:54:96:2d:86:7f:95: 77:a7:ee:79:6d:8c:15:7d:61:a7:38:f3:37:3d:63:a1:44:3b: 09:1f:23:fa:48:28:02:0a:aa:af:ce:94:bf:46:d8:82:e3:b5: ad:16:1e:16:b5:7c:76:d0:ce:e6:47:6c:a5:7b:29:bc:6e:da: f9:39:34:c5:f9:eb:65:45:d4:96:22:e4:f8:fe:96:dd:bd:41: 8b:c1:82:6c:30:90:c6:63:99:12:ca:2e:5f:93:9b:4e:1e:06: 9d:15:c2:c0:5e:99:80:cd:03:9b:af:fe:03:9c:68:73:10:8e: a2:72:7e:e3:07:7d:7b:04:a0:38:ef:c4:e9:c4:98:61:87:65: ef:64:e3:8d:7c:e4:c5:2e:37:4b:ea:8a:fc:45:02:2e:4e:94: 1f:de:04:fe:43:c0:f1:10:0b:51:93:9e:fa:ef:a3:3c:18:7a: 8b:f2:a0:f0:ac:ca:f9:a7:27:a6:71:33:62:a0:e9:2e:56:53: ce:72:ab:44:65:dc:53:ae:ef:0b:03:c1:66:f4:70:65:92:91: 13:c4:e4:77 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIULkMPYKgwjPXGu2y6G6k8Fq//WZwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEJDRTdFNzJBQkJCQUQwMDUzNjM5M0EwODQwQkJBMEFC RjNBQTI4RTAeFw0yNjA3MjEyMzQyNDFaFw0yNjA3MjMwMjQ4NDFaMDMxMTAvBgNV BAMTKDVGRjIyNzkyQ0RDM0UyNUVFNjI1MDM0QTgwNkM5NzkxMDIzQTM5QzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTu1PJbvb6Cf6v9uO1Ek9aaVmQ KTRjIOeybPk4m0yBDRoqIlWltvtaHKZdx337jmqE2VR7rZATucYlNIQ1GY6cd6Bg HMNYtnytUOWFlwg26cVy1bJ2hosDg4F/K27UUpxybkgSb9dSnygr7bPQYcyzt2jF KjbEM70qHnM9eT8IBW3LdZVYU5pN0SMPPxNfYsOPuGy7EylnerEiXUu5L8r4P3ui oXTISvjGixKNLmU15IhpON99ZJPaXqoZNXBq8+ctXFmGw7JPt4S1ieXlrggZue4q vR0Tk8rEymj5exDv3sDu7FUTPGJqZcU+o2RKGMYZ7s0PCXX6/7+4pq0DdZshAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUX/Inks3D4l7mJQNKgGyXkQI6OcMwHwYDVR0j BBgwFoAUi85+cqu7rQBTY5OghAu6Cr86oo4wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMzA4ZjhiM2UtMDUxZS00YzQ0LTljYjUtN2I4MzMxZWY5 YTA0LzEvOEJDRTdFNzJBQkJCQUQwMDUzNjM5M0EwODQwQkJBMEFCRjNBQTI4RS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84YWZiNWZlMi0zYzJhLTQ5 MzktOTVlOS0wMDc3YjgwYjRmMGUvMC84QkNFN0U3MkFCQkJBRDAwNTM2MzkzQTA4 NDBCQkEwQUJGM0FBMjhFLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzMwOGY4YjNlLTA1MWUtNGM0NC05Y2I1LTdiODMzMWVmOWEwNC8xLzhCQ0U3RTcy QUJCQkFEMDA1MzYzOTNBMDg0MEJCQTBBQkYzQUEyOEUubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBQWy7C V4487VbtzDHpD+8BY1rmOCAO0U0jSJ/fGVce4KChL6UFIqbLZbK4jvNNYjxUli2G f5V3p+55bYwVfWGnOPM3PWOhRDsJHyP6SCgCCqqvzpS/RtiC47WtFh4WtXx20M7m R2yleym8btr5OTTF+etlRdSWIuT4/pbdvUGLwYJsMJDGY5kSyi5fk5tOHgadFcLA XpmAzQObr/4DnGhzEI6icn7jB317BKA478TpxJhhh2XvZOONfOTFLjdL6or8RQIu TpQf3gT+Q8DxEAtRk57676M8GHqL8qDwrMr5pyemcTNioOkuVlPOcqtEZdxTru8L A8Fm9HBlkpETxOR3 -----END CERTIFICATE-----Generated at Wed Jul 22 08:22:59 2026 by rpki-client