$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/308f8b3e-051e-4c44-9cb5-7b8331ef9a04/1/8BCE7E72ABBBAD00536393A0840BBA0ABF3AA28E.mft File: 8BCE7E72ABBBAD00536393A0840BBA0ABF3AA28E.mft (raw, json) Hash identifier: rx6IXobWqoallmGm/bINGji5lbYQTsMs2lrAT7zOzGU= Subject key identifier: 79:80:CF:42:CD:CE:D5:EE:8C:24:89:B3:9A:DB:02:70:DC:71:00:4C Authority key identifier: 8B:CE:7E:72:AB:BB:AD:00:53:63:93:A0:84:0B:BA:0A:BF:3A:A2:8E Certificate issuer: /CN=8BCE7E72ABBBAD00536393A0840BBA0ABF3AA28E Certificate serial: 31054F12D24048BA45F6D335C88A7EFA14238F92 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/8BCE7E72ABBBAD00536393A0840BBA0ABF3AA28E.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/308f8b3e-051e-4c44-9cb5-7b8331ef9a04/1/8BCE7E72ABBBAD00536393A0840BBA0ABF3AA28E.mft Manifest number: 01BC Signing time: Sat 31 Oct 2026 13:03:09 +0000 Manifest this update: Sat 31 Oct 2026 12:58:09 +0000 Manifest next update: Sun 01 Nov 2026 16:59:09 +0000 Files and hashes: 1: 8BCE7E72ABBBAD00536393A0840BBA0ABF3AA28E.crl (hash: edEqpRYHN0jBeDVDrdCuOOtMmr+S2OAVNA8tHtV3ydE=) 2: 326130663a316363353a313730303a3a2f34302d3438203d3e20323032393339.roa (hash: UEeOHO3GGvYWxfR4E2Tbh4+FLPM0KvboVmPBm/zMcrM=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/308f8b3e-051e-4c44-9cb5-7b8331ef9a04/1/8BCE7E72ABBBAD00536393A0840BBA0ABF3AA28E.crl rsync://rsync.paas.rpki.ripe.net/repository/308f8b3e-051e-4c44-9cb5-7b8331ef9a04/1/8BCE7E72ABBBAD00536393A0840BBA0ABF3AA28E.mft rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/8BCE7E72ABBBAD00536393A0840BBA0ABF3AA28E.cer rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/1BE240021A287F298973D9EA28DFC80735FD5800.crl rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/1BE240021A287F298973D9EA28DFC80735FD5800.mft rsync://rpki.ripe.net/repository/DEFAULT/G-JAAhoofymJc9nqKN_IBzX9WAA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 01 Nov 2026 15:55:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:05:4f:12:d2:40:48:ba:45:f6:d3:35:c8:8a:7e:fa:14:23:8f:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8BCE7E72ABBBAD00536393A0840BBA0ABF3AA28E Validity Not Before: Oct 31 12:58:09 2026 GMT Not After : Nov 1 16:59:09 2026 GMT Subject: CN=7980CF42CDCED5EE8C2489B39ADB0270DC71004C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:2f:49:55:85:0c:ca:9b:ab:ce:7f:50:5f:a8: fe:a8:03:eb:b0:8b:00:5a:f2:0f:ec:c0:2d:0f:d3: c0:79:69:ea:c6:cb:60:68:1a:27:a0:10:2a:2f:9c: bc:da:9d:b7:1a:3e:5c:17:c0:8f:aa:43:67:56:4b: 1c:33:74:3a:80:a1:94:a5:09:c8:ea:ca:4f:7f:df: 28:e1:e7:c5:49:33:ab:7f:d8:b0:18:26:b6:f8:b3: 86:16:25:d9:f9:c1:df:0d:eb:0f:a2:ac:b3:8a:b5: 8c:37:42:79:78:6b:c5:ed:0b:ae:93:37:51:cb:28: 01:06:56:09:da:48:5e:9e:0f:06:43:ec:6e:ac:51: 9e:db:a1:f1:52:03:06:4d:a7:2b:ba:62:d8:2e:d6: ca:09:6e:b4:a9:a9:73:c5:96:b1:77:45:20:95:67: 10:e9:67:12:e5:5a:f1:e5:99:09:d8:37:d4:fd:21: 5d:0d:d3:5c:51:05:88:87:64:ea:f0:e6:ab:2b:a6: 3a:fa:7e:6c:af:a8:58:88:85:73:6a:2a:c0:50:a6: ba:bc:a4:d1:bf:4e:c8:e7:4c:87:f2:1b:e0:e1:62: f8:5f:cb:f7:3d:7a:a6:35:54:af:38:d3:4d:9e:3e: de:05:2c:c3:78:45:97:07:62:23:33:9e:48:94:04: e6:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:80:CF:42:CD:CE:D5:EE:8C:24:89:B3:9A:DB:02:70:DC:71:00:4C X509v3 Authority Key Identifier: keyid:8B:CE:7E:72:AB:BB:AD:00:53:63:93:A0:84:0B:BA:0A:BF:3A:A2:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/308f8b3e-051e-4c44-9cb5-7b8331ef9a04/1/8BCE7E72ABBBAD00536393A0840BBA0ABF3AA28E.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/8BCE7E72ABBBAD00536393A0840BBA0ABF3AA28E.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/308f8b3e-051e-4c44-9cb5-7b8331ef9a04/1/8BCE7E72ABBBAD00536393A0840BBA0ABF3AA28E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:f8:54:23:f6:25:30:8d:7b:2d:9e:3d:69:7c:82:7c:e6:5a: 59:e5:87:2c:0b:f8:c4:7a:f0:d8:40:6a:a3:f0:f2:f5:22:a5: f1:db:50:8b:a8:73:48:c5:ae:ab:29:cc:37:e6:91:62:17:cc: 51:2a:e7:7e:6b:8f:37:0d:50:8d:ae:6e:53:bc:7f:ed:23:a8: 45:d4:1a:61:33:c0:17:a6:c8:79:49:8f:86:73:46:cd:46:dc: 27:e6:6d:d7:ec:0a:8d:ca:0c:23:ac:d4:58:3e:9d:5d:96:f4: 2f:9c:b6:22:b8:bb:6c:d0:a9:32:5b:8e:5f:02:d7:25:47:5d: c2:a8:d1:76:ca:27:05:be:be:dd:69:d4:61:41:e7:16:e6:ce: 7e:7d:6d:b1:ca:15:05:0b:b4:f1:4f:cc:57:55:eb:ef:39:ca: de:08:3e:c8:15:fd:42:34:9c:7e:6a:25:ee:58:d9:8e:76:52: 67:ec:38:60:35:64:a5:c0:fc:45:30:f4:07:53:66:40:57:81: a1:5a:ec:81:79:99:17:68:47:9a:d5:8f:f8:ee:bb:83:ec:9f: 01:da:b9:cc:a3:ed:1e:c8:88:ed:e7:bc:41:da:12:e9:5c:40: 9c:b3:02:69:82:59:e3:fb:cf:8b:fb:1d:a5:f3:39:cb:98:0c: aa:f0:a9:ff -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUMQVPEtJASLpF9tM1yIp++hQjj5IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEJDRTdFNzJBQkJCQUQwMDUzNjM5M0EwODQwQkJBMEFC RjNBQTI4RTAeFw0yNjEwMzExMjU4MDlaFw0yNjExMDExNjU5MDlaMDMxMTAvBgNV BAMTKDc5ODBDRjQyQ0RDRUQ1RUU4QzI0ODlCMzlBREIwMjcwREM3MTAwNEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXL0lVhQzKm6vOf1BfqP6oA+uw iwBa8g/swC0P08B5aerGy2BoGiegECovnLzanbcaPlwXwI+qQ2dWSxwzdDqAoZSl Ccjqyk9/3yjh58VJM6t/2LAYJrb4s4YWJdn5wd8N6w+irLOKtYw3Qnl4a8XtC66T N1HLKAEGVgnaSF6eDwZD7G6sUZ7bofFSAwZNpyu6Ytgu1soJbrSpqXPFlrF3RSCV ZxDpZxLlWvHlmQnYN9T9IV0N01xRBYiHZOrw5qsrpjr6fmyvqFiIhXNqKsBQprq8 pNG/TsjnTIfyG+DhYvhfy/c9eqY1VK84002ePt4FLMN4RZcHYiMznkiUBOY5AgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUeYDPQs3O1e6MJImzmtsCcNxxAEwwHwYDVR0j BBgwFoAUi85+cqu7rQBTY5OghAu6Cr86oo4wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMzA4ZjhiM2UtMDUxZS00YzQ0LTljYjUtN2I4MzMxZWY5 YTA0LzEvOEJDRTdFNzJBQkJCQUQwMDUzNjM5M0EwODQwQkJBMEFCRjNBQTI4RS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84YWZiNWZlMi0zYzJhLTQ5 MzktOTVlOS0wMDc3YjgwYjRmMGUvMC84QkNFN0U3MkFCQkJBRDAwNTM2MzkzQTA4 NDBCQkEwQUJGM0FBMjhFLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzMwOGY4YjNlLTA1MWUtNGM0NC05Y2I1LTdiODMzMWVmOWEwNC8xLzhCQ0U3RTcy QUJCQkFEMDA1MzYzOTNBMDg0MEJCQTBBQkYzQUEyOEUubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAp+FQj 9iUwjXstnj1pfIJ85lpZ5YcsC/jEevDYQGqj8PL1IqXx21CLqHNIxa6rKcw35pFi F8xRKud+a483DVCNrm5TvH/tI6hF1BphM8AXpsh5SY+Gc0bNRtwn5m3X7AqNygwj rNRYPp1dlvQvnLYiuLts0KkyW45fAtclR13CqNF2yicFvr7dadRhQecW5s5+fW2x yhUFC7TxT8xXVevvOcreCD7IFf1CNJx+aiXuWNmOdlJn7DhgNWSlwPxFMPQHU2ZA V4GhWuyBeZkXaEea1Y/47ruD7J8B2rnMo+0eyIjt57xB2hLpXECcswJpglnj+8+L +x2l8znLmAyq8Kn/ -----END CERTIFICATE-----Generated at Sun Nov 1 03:22:18 2026 by rpki-client