$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/308f8b3e-051e-4c44-9cb5-7b8331ef9a04/1/8BCE7E72ABBBAD00536393A0840BBA0ABF3AA28E.mft File: 8BCE7E72ABBBAD00536393A0840BBA0ABF3AA28E.mft (raw, json) Hash identifier: TGu0mEO2jPtfi+kAnaXGmh8KGbSAgszgT2w9gP1zlDE= Subject key identifier: D2:A4:EF:9C:44:98:3B:7A:15:B8:7B:46:86:07:6E:D5:AF:AC:9F:5D Authority key identifier: 8B:CE:7E:72:AB:BB:AD:00:53:63:93:A0:84:0B:BA:0A:BF:3A:A2:8E Certificate issuer: /CN=8BCE7E72ABBBAD00536393A0840BBA0ABF3AA28E Certificate serial: 34DE150743F094275893CACBEBB27DDADA2CA3F1 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/8BCE7E72ABBBAD00536393A0840BBA0ABF3AA28E.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/308f8b3e-051e-4c44-9cb5-7b8331ef9a04/1/8BCE7E72ABBBAD00536393A0840BBA0ABF3AA28E.mft Manifest number: F4 Signing time: Sun 07 Jun 2026 00:07:25 +0000 Manifest this update: Sun 07 Jun 2026 00:02:25 +0000 Manifest next update: Mon 08 Jun 2026 03:10:25 +0000 Files and hashes: 1: 326130663a316363353a313730303a3a2f34302d3438203d3e20323032393339.roa (hash: UEeOHO3GGvYWxfR4E2Tbh4+FLPM0KvboVmPBm/zMcrM=) 2: 8BCE7E72ABBBAD00536393A0840BBA0ABF3AA28E.crl (hash: XUlrXo2AMvoBryMRxf4RvOm4ZLzCwi+93I/Q68DXJUU=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/308f8b3e-051e-4c44-9cb5-7b8331ef9a04/1/8BCE7E72ABBBAD00536393A0840BBA0ABF3AA28E.crl rsync://rsync.paas.rpki.ripe.net/repository/308f8b3e-051e-4c44-9cb5-7b8331ef9a04/1/8BCE7E72ABBBAD00536393A0840BBA0ABF3AA28E.mft rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/8BCE7E72ABBBAD00536393A0840BBA0ABF3AA28E.cer rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/1BE240021A287F298973D9EA28DFC80735FD5800.crl rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/1BE240021A287F298973D9EA28DFC80735FD5800.mft rsync://rpki.ripe.net/repository/DEFAULT/G-JAAhoofymJc9nqKN_IBzX9WAA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Jun 2026 17:14:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:de:15:07:43:f0:94:27:58:93:ca:cb:eb:b2:7d:da:da:2c:a3:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8BCE7E72ABBBAD00536393A0840BBA0ABF3AA28E Validity Not Before: Jun 7 00:02:25 2026 GMT Not After : Jun 8 03:10:25 2026 GMT Subject: CN=D2A4EF9C44983B7A15B87B4686076ED5AFAC9F5D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:05:fb:33:8d:cb:36:97:b9:64:ae:8f:10:af: 8f:b2:b6:92:16:83:a5:8d:ca:81:8f:7f:e8:e4:75: c0:c4:5f:08:b2:ac:35:6e:a9:58:4a:7b:eb:79:91: a9:e1:36:5f:3f:cf:7e:f4:f9:c6:9e:f0:dc:65:37: 01:90:e9:4f:25:e0:a1:65:3c:1d:b8:e1:99:05:4f: d1:69:02:00:ec:1e:5a:c1:2e:ab:6f:78:c9:e8:e9: b8:58:16:78:26:b9:b3:e5:ea:b2:84:24:b6:70:2c: 62:80:3a:d4:e7:d2:c8:20:ca:90:7c:44:01:83:5e: 88:23:f1:4b:c1:66:26:91:11:99:8b:98:fd:6d:1d: cf:d0:36:27:23:9a:72:ae:a4:e4:cb:e4:dc:42:e5: a2:5f:db:c8:bc:be:5c:07:8f:3b:36:6f:67:b0:f9: dc:98:56:6c:af:75:92:04:ef:1a:21:a1:6f:e1:61: e0:13:6c:eb:74:f1:02:e8:1b:61:82:d3:ac:48:f4: 16:e4:ac:0f:a0:7d:2e:f0:9d:79:3f:80:08:8b:df: 64:eb:19:b0:02:32:cb:32:1b:e9:c0:03:b0:5d:91: 19:73:be:c0:64:a1:0b:1c:49:50:32:2d:b7:c7:83: 6e:04:10:16:e0:aa:7f:db:5c:05:79:18:e0:75:80: 25:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:A4:EF:9C:44:98:3B:7A:15:B8:7B:46:86:07:6E:D5:AF:AC:9F:5D X509v3 Authority Key Identifier: keyid:8B:CE:7E:72:AB:BB:AD:00:53:63:93:A0:84:0B:BA:0A:BF:3A:A2:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/308f8b3e-051e-4c44-9cb5-7b8331ef9a04/1/8BCE7E72ABBBAD00536393A0840BBA0ABF3AA28E.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/8BCE7E72ABBBAD00536393A0840BBA0ABF3AA28E.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/308f8b3e-051e-4c44-9cb5-7b8331ef9a04/1/8BCE7E72ABBBAD00536393A0840BBA0ABF3AA28E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:bc:d0:85:dd:90:98:18:81:1d:f6:f3:d8:e3:10:a0:c3:67: 63:93:9b:34:14:fe:58:dd:9d:de:fa:e9:94:9e:87:63:46:bc: 0e:3a:16:9e:c1:9f:05:34:4b:e6:5d:95:3e:d9:c6:93:1e:e2: 86:54:fc:5e:31:a1:71:75:5a:ac:a0:7e:02:39:ce:dc:4d:8e: df:38:9c:bf:2b:88:93:47:c3:d6:80:94:ff:00:cd:2f:10:ca: c3:f1:66:4b:57:d2:03:6e:92:41:3d:9c:40:b9:de:ce:be:5a: 3c:f1:5b:1e:e4:55:3f:ce:db:9c:37:0d:20:79:90:ab:35:bb: 6f:b2:dd:f6:0d:e7:fc:4b:74:2a:54:7c:b3:f6:3c:1d:8e:30: 5f:d4:9d:dd:88:6b:4a:3a:76:b2:2b:1f:a2:3f:c1:4f:09:fd: 8d:fd:99:ce:62:75:1c:37:cc:0a:b1:83:a8:ff:56:af:ee:b8: 10:52:d7:e8:58:29:cd:b3:c0:2b:52:34:c4:dd:8d:94:0c:2e: 06:78:6d:e7:f9:25:98:49:24:89:0e:00:84:44:1f:3b:4f:bf: 3e:3e:0d:29:23:d6:11:ed:6b:84:88:ee:bd:5d:f9:de:4f:2b: af:1d:8c:ae:51:ef:17:a2:d1:37:0b:be:54:39:06:51:d9:bf: 25:78:08:ac -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUNN4VB0PwlCdYk8rL67J92toso/EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEJDRTdFNzJBQkJCQUQwMDUzNjM5M0EwODQwQkJBMEFC RjNBQTI4RTAeFw0yNjA2MDcwMDAyMjVaFw0yNjA2MDgwMzEwMjVaMDMxMTAvBgNV BAMTKEQyQTRFRjlDNDQ5ODNCN0ExNUI4N0I0Njg2MDc2RUQ1QUZBQzlGNUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUBfszjcs2l7lkro8Qr4+ytpIW g6WNyoGPf+jkdcDEXwiyrDVuqVhKe+t5kanhNl8/z370+cae8NxlNwGQ6U8l4KFl PB244ZkFT9FpAgDsHlrBLqtveMno6bhYFngmubPl6rKEJLZwLGKAOtTn0sggypB8 RAGDXogj8UvBZiaREZmLmP1tHc/QNicjmnKupOTL5NxC5aJf28i8vlwHjzs2b2ew +dyYVmyvdZIE7xohoW/hYeATbOt08QLoG2GC06xI9BbkrA+gfS7wnXk/gAiL32Tr GbACMssyG+nAA7BdkRlzvsBkoQscSVAyLbfHg24EEBbgqn/bXAV5GOB1gCW5AgMB AAGjggKCMIICfjAdBgNVHQ4EFgQU0qTvnESYO3oVuHtGhgdu1a+sn10wHwYDVR0j BBgwFoAUi85+cqu7rQBTY5OghAu6Cr86oo4wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMzA4ZjhiM2UtMDUxZS00YzQ0LTljYjUtN2I4MzMxZWY5 YTA0LzEvOEJDRTdFNzJBQkJCQUQwMDUzNjM5M0EwODQwQkJBMEFCRjNBQTI4RS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84YWZiNWZlMi0zYzJhLTQ5 MzktOTVlOS0wMDc3YjgwYjRmMGUvMC84QkNFN0U3MkFCQkJBRDAwNTM2MzkzQTA4 NDBCQkEwQUJGM0FBMjhFLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzMwOGY4YjNlLTA1MWUtNGM0NC05Y2I1LTdiODMzMWVmOWEwNC8xLzhCQ0U3RTcy QUJCQkFEMDA1MzYzOTNBMDg0MEJCQTBBQkYzQUEyOEUubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBWvNCF 3ZCYGIEd9vPY4xCgw2djk5s0FP5Y3Z3e+umUnodjRrwOOhaewZ8FNEvmXZU+2caT HuKGVPxeMaFxdVqsoH4COc7cTY7fOJy/K4iTR8PWgJT/AM0vEMrD8WZLV9IDbpJB PZxAud7Ovlo88Vse5FU/ztucNw0geZCrNbtvst32Def8S3QqVHyz9jwdjjBf1J3d iGtKOnayKx+iP8FPCf2N/ZnOYnUcN8wKsYOo/1av7rgQUtfoWCnNs8ArUjTE3Y2U DC4GeG3n+SWYSSSJDgCERB87T78+Pg0pI9YR7WuEiO69XfneTyuvHYyuUe8XotE3 C75UOQZR2b8leAis -----END CERTIFICATE-----Generated at Sun Jun 7 04:59:21 2026 by rpki-client