$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/4/8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C.mft File: 8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C.mft (raw, json) Hash identifier: YDKkbGY89Swf90QftOn5mUT53T/uR/4xnAMDSPgv6M8= Subject key identifier: A8:E3:4B:B9:AB:1E:0F:58:35:AE:2A:CA:15:E0:FC:37:29:43:44:50 Authority key identifier: 8E:07:D3:1C:64:52:F7:A6:B2:4E:63:CD:DC:49:0E:12:E0:AF:B3:8C Certificate issuer: /CN=8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C Certificate serial: 1BB2FBE38FD205D174273EF8188726409ACD7E9A Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/4/8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C.mft Manifest number: 034D Signing time: Fri 20 Mar 2026 13:25:07 +0000 Manifest this update: Fri 20 Mar 2026 13:20:07 +0000 Manifest next update: Sat 21 Mar 2026 15:52:07 +0000 Files and hashes: 1: 326131343a373538313a343030303a3a2f33362d3438203d3e203434383137.roa (hash: fudCQ5HvpSkAFWaORqCftP85E1ijbMZ/SJYbFT8n65o=) 2: 326131343a373538313a343536303a3a2f34342d3438203d3e20323135313731.roa (hash: QP4KPs363lKNvbDMC91nWR64EDb9a5wYXaiiUC4k7Hs=) 3: 326131343a373538313a343835653a3a2f34382d3438203d3e20323134363737.roa (hash: iHR6gaBLhEeuJStOmjFzEe4Moo+lPwxxC1xTUcqx6g4=) 4: 326131343a373538313a343834303a3a2f34342d3438203d3e20323135323839.roa (hash: TeM7Pek2amM1UgjzSeE/qaGScbmirVVYpr/gbbLkRM4=) 5: 326131343a373538313a343934303a3a2f34342d3434203d3e20323135313731.roa (hash: 6pSA0kSz3996g9/BXeNESbR6lV0s0HcQ+D2Slss3z5w=) 6: 326131343a373538313a343534303a3a2f34342d3438203d3e203434383137.roa (hash: lL21MUDpM3YDFXY+VNPjMEqMt9/EFafQb01ArsWLAjk=) 7: 326131343a373538313a343833303a3a2f34342d3438203d3e20323135323231.roa (hash: Yud6VyEfzu6bUn3ZGGTJfpmlFiOU2yKLbFt5IH7TKH4=) 8: 326131343a373538313a343331303a3a2f34342d3438203d3e20323135313731.roa (hash: GiP4GD8ggd65aZhgm+mIHhBgcxctP4oM9yKA+INTEK4=) 9: 326131343a373538313a343934303a3a2f34342d3438203d3e20313335363539.roa (hash: 8xEoc2WbgF3aR/A4BmGA/5swJlN4eULU8RI9MBQf5A8=) 10: 326131343a373538313a343835303a3a2f34342d3438203d3e20323135333739.roa (hash: MBbahVlOUY0BFTONMtnmzy3HTHvtjPISBdqoM0Cyb4U=) 11: 326131343a373538313a343535303a3a2f34342d3438203d3e20323136333735.roa (hash: 33Hc4k2qb/SFtHgCtF148ZPS40TPUk0mIWne3Kl1fjs=) 12: 326131343a373538313a343535353a3a2f34382d3438203d3e20323136333735.roa (hash: JVdP0q01IdpmOHNHM/8N7QIeZGO9fY1B0zhs290wioo=) 13: 326131343a373538313a343835633a3a2f34382d3438203d3e20313431303637.roa (hash: 9VIFUmaELJ+SuXK7+C+ONAUKoDB5ufOLiduhS88tcKE=) 14: 326131343a373538313a343832303a3a2f34342d3438203d3e20323135323233.roa (hash: 2UDjxG4RlvjPmviPQqGqAVVrCPWdscmfmRM0j7DODko=) 15: 326131343a373538313a343635303a3a2f34342d3438203d3e20313335363539.roa (hash: iqN0K0kqjE2jNtYdeLoflK5x6Z7cJoriz0IZPsDEpKs=) 16: 8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C.crl (hash: 1SYnWbTq2ctcykXfBt31nR66/jnu0GH2cPjYB3w4BEE=) 17: 326131343a373538313a343831303a3a2f34342d3438203d3e20323135363734.roa (hash: iVSqmJC3EENf/XVlR6YpWn7MgLMOJzCIs/ETJKcPCZ0=) 18: 326131343a373538313a343836303a3a2f34342d3438203d3e20313531353434.roa (hash: XJo8jS2djpRteJlKSIzBy0GSOcq3Jj/2wBDjV1PmcuQ=) 19: 326131343a373538313a343731303a3a2f34342d3438203d3e20313439363930.roa (hash: rLVUcUxyRgJtw6VSAGlKyA8uqmBel4P5gDB+BMhpgCc=) 20: 326131343a373538313a343835663a3a2f34382d3438203d3e20323135333739.roa (hash: LiQaiw5undZF8O9ZPrbB+SuBZXPDpvcvnNafAQKgteo=) 21: 326131343a373538313a343332303a3a2f34342d3438203d3e2039343232.roa (hash: a74YsL1qU7MZs6Id2KBnat9Mk42FfInZrWbOj9uOpkE=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/4/8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C.crl rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/4/8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 21 Mar 2026 15:52:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:b2:fb:e3:8f:d2:05:d1:74:27:3e:f8:18:87:26:40:9a:cd:7e:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C Validity Not Before: Mar 20 13:20:07 2026 GMT Not After : Mar 21 15:52:07 2026 GMT Subject: CN=A8E34BB9AB1E0F5835AE2ACA15E0FC3729434450 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:5a:33:57:0c:7e:81:a2:e7:29:ef:50:b5:fe: 64:56:42:4d:c8:b6:42:f7:e9:15:6e:9a:6e:8c:df: 40:0e:4f:31:65:9c:5d:ba:01:1b:5c:a7:64:be:6b: 45:d1:00:99:b2:b7:73:76:9d:b6:3a:e3:5d:74:8a: 3a:bd:3e:1b:c5:20:af:67:5b:8c:8b:7e:c2:8a:9c: bc:f3:f7:ca:ef:88:dc:4b:03:5b:88:5d:ae:9a:67: 67:f5:39:1a:54:0c:08:c4:88:b7:a5:01:d5:11:69: 56:0d:bd:6f:77:23:40:bf:c7:ba:b3:27:65:a8:cd: eb:4a:31:ff:d3:e9:33:58:9a:d2:ad:56:04:81:3c: 94:c7:24:8c:88:fb:8f:39:f3:82:9e:9f:77:ac:7e: ef:da:27:5a:33:d6:6d:67:52:40:e5:1b:e0:33:65: 25:45:1d:05:b9:dc:33:20:82:5f:d0:d4:53:df:2d: 0f:06:2a:4e:cc:79:29:9c:23:ca:7b:9c:4a:1f:a8: 75:5c:1d:56:1e:83:a8:8d:88:22:2e:2e:53:d8:5f: 87:5d:54:92:d4:b1:bb:4f:f5:20:a0:c2:e8:1e:99: 49:b4:86:55:52:fa:0c:10:5b:6c:a1:eb:e5:39:46: 5f:d5:4d:75:87:8c:ce:bf:54:0c:e2:9c:ee:bf:46: 75:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:E3:4B:B9:AB:1E:0F:58:35:AE:2A:CA:15:E0:FC:37:29:43:44:50 X509v3 Authority Key Identifier: keyid:8E:07:D3:1C:64:52:F7:A6:B2:4E:63:CD:DC:49:0E:12:E0:AF:B3:8C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/4/8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/4/8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:f8:de:2b:ab:e9:fc:1d:41:29:db:a3:d1:57:7a:0d:dc:04: 1c:5c:cb:f3:03:4b:0c:8a:85:ac:15:f4:81:e0:d6:a5:ad:9f: b6:ec:02:96:54:d7:a7:a2:15:2b:30:ce:18:65:48:3e:d8:58: 7f:f9:ad:54:36:81:a7:b6:1d:73:77:ee:4e:c1:16:0f:9b:9c: 3c:6b:b6:a3:62:f2:24:fb:d7:40:4c:09:39:73:f6:15:59:62: a1:eb:f9:31:19:9a:0a:d3:17:c8:c4:fc:a7:73:df:76:2a:30: 00:a2:3c:c8:27:32:3b:89:95:0f:a9:84:57:37:77:ec:4b:db: 2c:65:b1:d2:22:0f:bf:2d:fd:a9:5a:4b:31:cb:39:59:65:4e: 7a:c9:16:8d:35:62:bb:9d:b6:50:e5:27:7f:ae:3f:d0:e4:41: ab:7b:d9:fd:62:c7:0d:9d:4e:8e:d6:3b:e8:a6:75:44:01:bc: 93:39:fa:60:28:fb:6a:32:a6:4e:14:87:d8:d0:e7:cb:d3:02: 8f:08:0c:2c:fe:37:e5:ab:26:80:db:28:df:d4:f8:d9:64:18: e2:5b:ad:91:2c:ca:4c:de:43:72:0b:2c:d3:73:fe:e5:71:65: 0f:42:9d:ac:c7:c7:a9:82:b4:44:11:a3:72:60:5f:c5:66:2c: c1:17:05:53 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUG7L744/SBdF0Jz74GIcmQJrNfpowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEUwN0QzMUM2NDUyRjdBNkIyNEU2M0NEREM0OTBFMTJF MEFGQjM4QzAeFw0yNjAzMjAxMzIwMDdaFw0yNjAzMjExNTUyMDdaMDMxMTAvBgNV BAMTKEE4RTM0QkI5QUIxRTBGNTgzNUFFMkFDQTE1RTBGQzM3Mjk0MzQ0NTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfWjNXDH6Boucp71C1/mRWQk3I tkL36RVumm6M30AOTzFlnF26ARtcp2S+a0XRAJmyt3N2nbY64110ijq9PhvFIK9n W4yLfsKKnLzz98rviNxLA1uIXa6aZ2f1ORpUDAjEiLelAdURaVYNvW93I0C/x7qz J2WozetKMf/T6TNYmtKtVgSBPJTHJIyI+48584Ken3esfu/aJ1oz1m1nUkDlG+Az ZSVFHQW53DMggl/Q1FPfLQ8GKk7MeSmcI8p7nEofqHVcHVYeg6iNiCIuLlPYX4dd VJLUsbtP9SCgwugemUm0hlVS+gwQW2yh6+U5Rl/VTXWHjM6/VAzinO6/RnVvAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUqONLuaseD1g1rirKFeD8NylDRFAwHwYDVR0j BBgwFoAUjgfTHGRS96ayTmPN3EkOEuCvs4wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMzExZTQ3YzQtMDJmMC00NjU3LTkwMjItZDJiODNjZmY4 NzU1LzQvOEUwN0QzMUM2NDUyRjdBNkIyNEU2M0NEREM0OTBFMTJFMEFGQjM4Qy5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC84RTA3RDMxQzY0NTJGN0E2QjI0RTYzQ0RE QzQ5MEUxMkUwQUZCMzhDLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzMxMWU0N2M0LTAyZjAtNDY1Ny05MDIyLWQyYjgzY2ZmODc1NS80LzhFMDdEMzFD NjQ1MkY3QTZCMjRFNjNDRERDNDkwRTEyRTBBRkIzOEMubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCH+N4r q+n8HUEp26PRV3oN3AQcXMvzA0sMioWsFfSB4NalrZ+27AKWVNenohUrMM4YZUg+ 2Fh/+a1UNoGnth1zd+5OwRYPm5w8a7ajYvIk+9dATAk5c/YVWWKh6/kxGZoK0xfI xPync992KjAAojzIJzI7iZUPqYRXN3fsS9ssZbHSIg+/Lf2pWksxyzlZZU56yRaN NWK7nbZQ5Sd/rj/Q5EGre9n9YscNnU6O1jvopnVEAbyTOfpgKPtqMqZOFIfY0OfL 0wKPCAws/jflqyaA2yjf1PjZZBjiW62RLMpM3kNyCyzTc/7lcWUPQp2sx8epgrRE EaNyYF/FZizBFwVT -----END CERTIFICATE-----Generated at Sat Mar 21 05:30:04 2026 by rpki-client