$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/65eae745-8ac9-4e71-bc94-fcb261703f96/1/8BAD307CD4DF11014E40EDDFFFD60F9A09E6E95C.mft File: 8BAD307CD4DF11014E40EDDFFFD60F9A09E6E95C.mft (raw, json) Hash identifier: M8KDY4ErdoiQXhwPkrgqrLRThOKKDb4AaI80ORSGj4c= Subject key identifier: D3:5B:CA:C3:F3:CD:90:04:10:D6:98:BD:EE:F7:CE:FB:66:1F:B4:B7 Authority key identifier: 8B:AD:30:7C:D4:DF:11:01:4E:40:ED:DF:FF:D6:0F:9A:09:E6:E9:5C Certificate issuer: /CN=8BAD307CD4DF11014E40EDDFFFD60F9A09E6E95C Certificate serial: 75AA991141E68ADD85A60BCAB825402212D51D90 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/0/8BAD307CD4DF11014E40EDDFFFD60F9A09E6E95C.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/65eae745-8ac9-4e71-bc94-fcb261703f96/1/8BAD307CD4DF11014E40EDDFFFD60F9A09E6E95C.mft Manifest number: 02DF Signing time: Mon 16 Mar 2026 16:27:46 +0000 Manifest this update: Mon 16 Mar 2026 16:22:46 +0000 Manifest next update: Tue 17 Mar 2026 18:52:46 +0000 Files and hashes: 1: 8BAD307CD4DF11014E40EDDFFFD60F9A09E6E95C.crl (hash: FuK6Q8o021JvXjNPpRXW5zNGkeh/zzx/s8kZvDOLzoE=) 2: 326131333a393634343a343061653a3a2f34382d3438203d3e20323034323931.roa (hash: /APvQtIczoMdPeFgS8yLWOSzDbhA86h5Cc1N87vUKRI=) 3: 326131333a393634343a343030303a3a2f34302d3430203d3e20323034323931.roa (hash: 1o4m8PJbpPTt/WwCt8wMPBTEbmCl+8vcVtrKZbTYjFM=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/65eae745-8ac9-4e71-bc94-fcb261703f96/1/8BAD307CD4DF11014E40EDDFFFD60F9A09E6E95C.crl rsync://rsync.paas.rpki.ripe.net/repository/65eae745-8ac9-4e71-bc94-fcb261703f96/1/8BAD307CD4DF11014E40EDDFFFD60F9A09E6E95C.mft rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/0/8BAD307CD4DF11014E40EDDFFFD60F9A09E6E95C.cer rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/0/F1D0572FE72991BD32854BAC716676EBDAD22ACE.crl rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/0/F1D0572FE72991BD32854BAC716676EBDAD22ACE.mft rsync://rpki.ripe.net/repository/DEFAULT/8dBXL-cpkb0yhUuscWZ269rSKs4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 17 Mar 2026 10:05:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:aa:99:11:41:e6:8a:dd:85:a6:0b:ca:b8:25:40:22:12:d5:1d:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8BAD307CD4DF11014E40EDDFFFD60F9A09E6E95C Validity Not Before: Mar 16 16:22:46 2026 GMT Not After : Mar 17 18:52:46 2026 GMT Subject: CN=D35BCAC3F3CD900410D698BDEEF7CEFB661FB4B7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:86:c0:13:bb:b9:a6:3d:03:f1:96:16:c9:d0: b9:87:b9:83:e2:97:3d:fc:45:1f:a6:10:7a:4e:6a: b1:b9:b0:c2:30:9c:1d:93:24:25:e8:dd:1f:30:72: 2e:fe:b8:e8:ee:68:7c:3c:10:45:e0:c3:2e:1c:47: 32:07:b7:da:af:c7:24:1c:7d:2c:2c:89:0c:10:9a: 7d:4b:99:7c:39:89:cd:ab:92:ba:72:2b:64:c9:fe: 93:c8:06:23:b5:50:12:40:8c:64:7a:2e:7b:86:2a: 19:73:02:c6:0d:47:38:7d:21:ae:4c:da:9e:85:b9: bd:d2:43:1f:eb:5d:09:e0:b0:8d:48:51:5b:d6:0a: 24:60:49:9b:85:35:8f:f9:67:cf:e4:63:f8:e4:6f: ae:2e:0a:63:b0:18:a9:45:21:74:64:8f:b9:10:b4: 7f:f0:71:e0:ec:84:e5:72:1b:b7:ec:18:8d:1d:48: c4:1c:f3:8d:2b:61:5d:e6:db:94:00:a2:85:52:a5: ec:ff:68:65:68:d3:63:87:8c:ec:69:1b:5d:d3:43: 2f:a3:14:a0:fb:c0:0a:08:dd:18:a3:46:01:a6:d1: 81:3f:01:12:e1:12:bc:0b:06:29:e9:af:47:7a:7f: 28:bb:38:6b:f7:13:c4:48:ba:ef:25:7f:91:98:37: cc:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:5B:CA:C3:F3:CD:90:04:10:D6:98:BD:EE:F7:CE:FB:66:1F:B4:B7 X509v3 Authority Key Identifier: keyid:8B:AD:30:7C:D4:DF:11:01:4E:40:ED:DF:FF:D6:0F:9A:09:E6:E9:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/65eae745-8ac9-4e71-bc94-fcb261703f96/1/8BAD307CD4DF11014E40EDDFFFD60F9A09E6E95C.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/0/8BAD307CD4DF11014E40EDDFFFD60F9A09E6E95C.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/65eae745-8ac9-4e71-bc94-fcb261703f96/1/8BAD307CD4DF11014E40EDDFFFD60F9A09E6E95C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:fd:80:06:90:f1:25:e3:b7:cd:e7:dc:48:7b:0e:80:83:35: 7c:9b:41:4a:c4:00:b9:7f:b5:15:16:71:bf:61:e4:5e:26:34: bb:f4:7a:5e:7f:78:87:c9:38:9e:6d:4e:6e:a4:fa:4b:6b:6e: 57:f9:e8:bd:1c:a3:58:1e:e5:f3:50:98:05:b5:a6:1c:05:8e: 3a:89:82:fc:99:07:bc:8d:69:e6:85:fb:34:64:14:f2:7d:e8: 52:b8:7d:9a:11:24:4b:c9:ab:1a:0a:8e:3a:d7:c1:e0:a2:e1: 69:8f:f1:52:ed:30:91:68:64:57:11:fd:f9:d8:7a:cf:b1:6d: 37:cd:02:d7:6c:02:95:d4:40:df:b7:8f:2c:17:63:a9:dd:94: 32:07:77:cf:fc:3b:c1:72:54:b0:ae:fa:61:4a:d5:3c:5d:54: 6d:1f:89:70:8e:62:77:e5:91:d8:a8:00:7d:71:36:3e:55:89: 65:fd:ed:a1:cf:4f:f6:d6:46:4c:a1:1c:e9:a4:d9:d2:fc:6e: 8c:14:d5:7e:33:a6:8d:a9:97:3f:c4:b7:e2:a3:cb:94:57:ed: 07:3a:0f:3a:51:64:43:8f:7e:75:f1:db:f7:1c:b1:04:a5:8e: 39:99:5e:6f:b7:cc:99:66:3e:da:02:12:17:cb:02:c6:7d:c8: 99:2a:8a:f4 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUdaqZEUHmit2FpgvKuCVAIhLVHZAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEJBRDMwN0NENERGMTEwMTRFNDBFRERGRkZENjBGOUEw OUU2RTk1QzAeFw0yNjAzMTYxNjIyNDZaFw0yNjAzMTcxODUyNDZaMDMxMTAvBgNV BAMTKEQzNUJDQUMzRjNDRDkwMDQxMEQ2OThCREVFRjdDRUZCNjYxRkI0QjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAhsATu7mmPQPxlhbJ0LmHuYPi lz38RR+mEHpOarG5sMIwnB2TJCXo3R8wci7+uOjuaHw8EEXgwy4cRzIHt9qvxyQc fSwsiQwQmn1LmXw5ic2rkrpyK2TJ/pPIBiO1UBJAjGR6LnuGKhlzAsYNRzh9Ia5M 2p6Fub3SQx/rXQngsI1IUVvWCiRgSZuFNY/5Z8/kY/jkb64uCmOwGKlFIXRkj7kQ tH/wceDshOVyG7fsGI0dSMQc840rYV3m25QAooVSpez/aGVo02OHjOxpG13TQy+j FKD7wAoI3RijRgGm0YE/ARLhErwLBinpr0d6fyi7OGv3E8RIuu8lf5GYN8zNAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQU01vKw/PNkAQQ1pi97vfO+2YftLcwHwYDVR0j BBgwFoAUi60wfNTfEQFOQO3f/9YPmgnm6VwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNjVlYWU3NDUtOGFjOS00ZTcxLWJjOTQtZmNiMjYxNzAz Zjk2LzEvOEJBRDMwN0NENERGMTEwMTRFNDBFRERGRkZENjBGOUEwOUU2RTk1Qy5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9lMzBkZTg0Yi00MDBhLTRm ZDEtYWI4YS1lNzYxNmUyNDViNDkvMC84QkFEMzA3Q0Q0REYxMTAxNEU0MEVEREZG RkQ2MEY5QTA5RTZFOTVDLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzY1ZWFlNzQ1LThhYzktNGU3MS1iYzk0LWZjYjI2MTcwM2Y5Ni8xLzhCQUQzMDdD RDRERjExMDE0RTQwRURERkZGRDYwRjlBMDlFNkU5NUMubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAv/YAG kPEl47fN59xIew6AgzV8m0FKxAC5f7UVFnG/YeReJjS79Hpef3iHyTiebU5upPpL a25X+ei9HKNYHuXzUJgFtaYcBY46iYL8mQe8jWnmhfs0ZBTyfehSuH2aESRLyasa Co4618HgouFpj/FS7TCRaGRXEf352HrPsW03zQLXbAKV1EDft48sF2Op3ZQyB3fP /DvBclSwrvphStU8XVRtH4lwjmJ35ZHYqAB9cTY+VYll/e2hz0/21kZMoRzppNnS /G6MFNV+M6aNqZc/xLfio8uUV+0HOg86UWRDj3518dv3HLEEpY45mV5vt8yZZj7a AhIXywLGfciZKor0 -----END CERTIFICATE-----Generated at Mon Mar 16 22:00:58 2026 by rpki-client