$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/4/8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C.mft File: 8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C.mft (raw, json) Hash identifier: NaDe6bhArcrWxdoOTg+kXqpm00W1+dZLBJn1p0jM+L4= Subject key identifier: 37:3E:A6:70:64:71:01:F0:D6:96:47:E4:CA:1F:E4:CA:A8:2E:68:7F Authority key identifier: 8E:07:D3:1C:64:52:F7:A6:B2:4E:63:CD:DC:49:0E:12:E0:AF:B3:8C Certificate issuer: /CN=8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C Certificate serial: 3EACE297FA1B6BCB71E26DBD80F57D42E9084F09 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/4/8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C.mft Manifest number: 0423 Signing time: Mon 24 Aug 2026 16:37:17 +0000 Manifest this update: Mon 24 Aug 2026 16:32:17 +0000 Manifest next update: Tue 25 Aug 2026 16:39:17 +0000 Files and hashes: 1: 326131343a373538313a343934303a3a2f34342d3434203d3e20323135313731.roa (hash: 6pSA0kSz3996g9/BXeNESbR6lV0s0HcQ+D2Slss3z5w=) 2: 326131343a373538313a343535353a3a2f34382d3438203d3e20323136333735.roa (hash: C+V4kSeLDw3sO8d40Phfc7PlZ5G8vdBgrmtSr5gkXYw=) 3: 326131343a373538313a343835663a3a2f34382d3438203d3e20323135333739.roa (hash: W5Heh9gse8mKUAV/4KyRLY8JwjKj+jz/mhW/8Nexm6w=) 4: 326131343a373538313a343635303a3a2f34342d3438203d3e20313335363539.roa (hash: iqN0K0kqjE2jNtYdeLoflK5x6Z7cJoriz0IZPsDEpKs=) 5: 326131343a373538313a343832303a3a2f34342d3438203d3e20323135323233.roa (hash: 2UDjxG4RlvjPmviPQqGqAVVrCPWdscmfmRM0j7DODko=) 6: 326131343a373538313a343833303a3a2f34342d3438203d3e20323135323231.roa (hash: Yud6VyEfzu6bUn3ZGGTJfpmlFiOU2yKLbFt5IH7TKH4=) 7: 326131343a373538313a343835633a3a2f34382d3438203d3e20313431303637.roa (hash: 9VIFUmaELJ+SuXK7+C+ONAUKoDB5ufOLiduhS88tcKE=) 8: 326131343a373538313a343836303a3a2f34342d3438203d3e20313531353434.roa (hash: OJXw4bailhln27dAWvZZO7aSgL/bQWfg+Oqf5sYF+sE=) 9: 326131343a373538313a343834303a3a2f34342d3438203d3e20323135323839.roa (hash: TeM7Pek2amM1UgjzSeE/qaGScbmirVVYpr/gbbLkRM4=) 10: 326131343a373538313a343030303a3a2f33362d3438203d3e203434383137.roa (hash: fudCQ5HvpSkAFWaORqCftP85E1ijbMZ/SJYbFT8n65o=) 11: 326131343a373538313a343731303a3a2f34342d3438203d3e20313439363930.roa (hash: fNKVMMPiiUgfbMZ2Oos538UVQ2g0QakPLvgkCLIakls=) 12: 326131343a373538313a343535303a3a2f34342d3438203d3e20323136333735.roa (hash: JCFWJgEKOIfNC/UVmwFEJVNgIuAfElA5+DwW/Ff9XGw=) 13: 326131343a373538313a343835363a3a2f34382d3438203d3e20313530323439.roa (hash: +BTOyGnB3/SY/p8Ckxmoo0odwD52ixx8ttyy1kP23KM=) 14: 326131343a373538313a343934303a3a2f34342d3438203d3e20313335363539.roa (hash: 8xEoc2WbgF3aR/A4BmGA/5swJlN4eULU8RI9MBQf5A8=) 15: 8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C.crl (hash: EPWGVkVs24g5I+sXpiPOnAmdN+VkAYEtuXKkTOppJyI=) 16: 326131343a373538313a343835653a3a2f34382d3438203d3e20323134363737.roa (hash: iHR6gaBLhEeuJStOmjFzEe4Moo+lPwxxC1xTUcqx6g4=) 17: 326131343a373538313a343332303a3a2f34342d3438203d3e2039343232.roa (hash: a74YsL1qU7MZs6Id2KBnat9Mk42FfInZrWbOj9uOpkE=) 18: 326131343a373538313a343835303a3a2f34342d3438203d3e20323135333739.roa (hash: MBbahVlOUY0BFTONMtnmzy3HTHvtjPISBdqoM0Cyb4U=) 19: 326131343a373538313a343331303a3a2f34342d3438203d3e20323135313731.roa (hash: GiP4GD8ggd65aZhgm+mIHhBgcxctP4oM9yKA+INTEK4=) 20: 326131343a373538313a343534303a3a2f34342d3438203d3e203434383137.roa (hash: 7mp0zmnlMvREYQITFuGqaUnQo4881uWLywgG1Fg4GUU=) 21: 326131343a373538313a343831303a3a2f34342d3438203d3e20323135363734.roa (hash: iVSqmJC3EENf/XVlR6YpWn7MgLMOJzCIs/ETJKcPCZ0=) 22: 326131343a373538313a343536303a3a2f34342d3438203d3e20323135313731.roa (hash: wlujEilvSGoE2xmgZ9r1cOQVVwj+z/fdPDzPxBXeMcU=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/4/8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C.crl rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/4/8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 25 Aug 2026 16:39:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:ac:e2:97:fa:1b:6b:cb:71:e2:6d:bd:80:f5:7d:42:e9:08:4f:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C Validity Not Before: Aug 24 16:32:17 2026 GMT Not After : Aug 25 16:39:17 2026 GMT Subject: CN=373EA670647101F0D69647E4CA1FE4CAA82E687F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:01:a8:c7:0a:a4:7b:2a:c1:f4:6c:4b:ee:a3: bb:65:c7:4f:36:00:6d:de:01:c9:37:4c:88:74:f2: 83:70:17:b8:46:40:c9:e1:ba:d5:b3:72:7a:b1:4b: 22:d7:0a:d0:56:b3:fc:86:8b:ab:cf:aa:9f:d1:12: 60:b3:56:78:77:b7:d1:55:05:a3:44:f9:38:f8:f4: 36:d9:f6:91:98:7a:40:0a:fa:cb:fa:b1:b7:fa:36: 8a:cf:06:5b:fb:55:fc:cd:8d:d3:60:f1:13:49:c8: b9:60:74:ba:43:06:aa:4e:75:61:f2:75:da:64:7a: 2a:f7:9e:97:40:c6:c1:2c:ed:8c:88:a1:93:0a:27: 28:23:7b:bd:dc:46:00:0f:5e:ec:f7:8f:4b:76:54: a6:f4:d7:46:5a:17:88:15:fb:fa:66:a2:05:57:7d: 9a:a4:57:b4:de:a0:7b:91:3d:74:cd:66:1f:dd:8c: 2f:06:a3:1f:f2:12:53:31:61:f8:ca:71:83:b4:e9: 9f:6a:ef:62:61:a3:84:86:bd:e5:5e:38:41:3f:30: 6c:51:36:bc:4e:9e:b8:bf:e9:ed:9a:eb:43:3f:dd: 6d:40:24:6a:65:33:4a:1b:80:7d:39:88:bf:91:18: 99:97:8d:5f:61:25:5a:a4:82:bd:78:8d:82:40:bd: b8:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:3E:A6:70:64:71:01:F0:D6:96:47:E4:CA:1F:E4:CA:A8:2E:68:7F X509v3 Authority Key Identifier: keyid:8E:07:D3:1C:64:52:F7:A6:B2:4E:63:CD:DC:49:0E:12:E0:AF:B3:8C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/4/8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/4/8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:9f:7c:8b:79:52:3a:03:e2:6e:12:e2:28:88:13:e0:a8:27: ec:bf:83:d9:82:b0:6e:ba:51:2e:a9:8a:8a:a7:68:15:20:86: 49:25:f0:d1:cc:5c:22:f6:bf:89:83:67:92:1d:ec:ce:9a:56: e1:22:59:3e:a2:c4:92:a2:00:64:79:39:e9:a5:1d:33:2f:84: c5:0d:c2:29:46:08:44:9e:e6:ca:b8:26:83:35:33:06:d4:e2: 1f:78:89:7c:e1:63:ee:41:20:ed:ed:3f:f8:36:d2:4e:8b:f2: f8:37:e2:8a:95:32:bc:4a:7d:3a:b3:ff:ac:ce:22:19:f4:67: 37:b3:20:54:b6:ea:d4:89:25:c4:03:26:b3:6c:15:91:9d:a0: ad:64:16:9e:26:17:c5:22:ac:bc:6b:61:da:61:43:e0:2d:b2: e0:93:b5:51:f4:ea:ec:4c:db:3d:f3:5f:a7:6e:d3:d7:6b:63: 09:b5:83:c8:20:31:17:68:4e:af:64:ad:70:68:cd:2a:00:59: 9a:a3:9b:54:d8:eb:5d:b4:ed:df:e9:26:3d:a7:31:3e:ba:76: 2e:1d:da:1b:a3:92:6a:5b:f0:26:7e:3a:20:a7:18:fa:57:81: 63:a9:bf:db:b3:81:2e:e4:31:3c:af:da:f9:3d:23:c6:76:9e: 4b:87:a7:c4 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUPqzil/oba8tx4m29gPV9QukITwkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEUwN0QzMUM2NDUyRjdBNkIyNEU2M0NEREM0OTBFMTJF MEFGQjM4QzAeFw0yNjA4MjQxNjMyMTdaFw0yNjA4MjUxNjM5MTdaMDMxMTAvBgNV BAMTKDM3M0VBNjcwNjQ3MTAxRjBENjk2NDdFNENBMUZFNENBQTgyRTY4N0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDAajHCqR7KsH0bEvuo7tlx082 AG3eAck3TIh08oNwF7hGQMnhutWzcnqxSyLXCtBWs/yGi6vPqp/REmCzVnh3t9FV BaNE+Tj49DbZ9pGYekAK+sv6sbf6NorPBlv7VfzNjdNg8RNJyLlgdLpDBqpOdWHy ddpkeir3npdAxsEs7YyIoZMKJygje73cRgAPXuz3j0t2VKb010ZaF4gV+/pmogVX fZqkV7TeoHuRPXTNZh/djC8Gox/yElMxYfjKcYO06Z9q72Jho4SGveVeOEE/MGxR NrxOnri/6e2a60M/3W1AJGplM0obgH05iL+RGJmXjV9hJVqkgr14jYJAvbgxAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUNz6mcGRxAfDWlkfkyh/kyqguaH8wHwYDVR0j BBgwFoAUjgfTHGRS96ayTmPN3EkOEuCvs4wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMzExZTQ3YzQtMDJmMC00NjU3LTkwMjItZDJiODNjZmY4 NzU1LzQvOEUwN0QzMUM2NDUyRjdBNkIyNEU2M0NEREM0OTBFMTJFMEFGQjM4Qy5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC84RTA3RDMxQzY0NTJGN0E2QjI0RTYzQ0RE QzQ5MEUxMkUwQUZCMzhDLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzMxMWU0N2M0LTAyZjAtNDY1Ny05MDIyLWQyYjgzY2ZmODc1NS80LzhFMDdEMzFD NjQ1MkY3QTZCMjRFNjNDRERDNDkwRTEyRTBBRkIzOEMubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCIn3yL eVI6A+JuEuIoiBPgqCfsv4PZgrBuulEuqYqKp2gVIIZJJfDRzFwi9r+Jg2eSHezO mlbhIlk+osSSogBkeTnppR0zL4TFDcIpRghEnubKuCaDNTMG1OIfeIl84WPuQSDt 7T/4NtJOi/L4N+KKlTK8Sn06s/+sziIZ9Gc3syBUturUiSXEAyazbBWRnaCtZBae JhfFIqy8a2HaYUPgLbLgk7VR9OrsTNs981+nbtPXa2MJtYPIIDEXaE6vZK1waM0q AFmao5tU2OtdtO3f6SY9pzE+unYuHdobo5JqW/Amfjogpxj6V4Fjqb/bs4Eu5DE8 r9r5PSPGdp5Lh6fE -----END CERTIFICATE-----Generated at Tue Aug 25 04:19:17 2026 by rpki-client