$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/65eae745-8ac9-4e71-bc94-fcb261703f96/1/8BAD307CD4DF11014E40EDDFFFD60F9A09E6E95C.mft File: 8BAD307CD4DF11014E40EDDFFFD60F9A09E6E95C.mft (raw, json) Hash identifier: xT/zCqKikdfPPFtGcpRYZ2OkG4pelrmM76V16GnjAzU= Subject key identifier: 63:9E:85:A5:4E:8D:EB:7D:5F:84:D2:3C:15:EE:79:FC:72:33:AB:DC Authority key identifier: 8B:AD:30:7C:D4:DF:11:01:4E:40:ED:DF:FF:D6:0F:9A:09:E6:E9:5C Certificate issuer: /CN=8BAD307CD4DF11014E40EDDFFFD60F9A09E6E95C Certificate serial: 350A8CBEA789139BA825C7D7DC1CC4192CE25377 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/0/8BAD307CD4DF11014E40EDDFFFD60F9A09E6E95C.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/65eae745-8ac9-4e71-bc94-fcb261703f96/1/8BAD307CD4DF11014E40EDDFFFD60F9A09E6E95C.mft Manifest number: 0323 Signing time: Thu 07 May 2026 02:52:54 +0000 Manifest this update: Thu 07 May 2026 02:47:54 +0000 Manifest next update: Fri 08 May 2026 04:27:54 +0000 Files and hashes: 1: 8BAD307CD4DF11014E40EDDFFFD60F9A09E6E95C.crl (hash: B6FNt6zXXTeO6rIzBpN0bfTwnGulUCcCciRVueA+f9A=) 2: 326131333a393634343a343061653a3a2f34382d3438203d3e20323034323931.roa (hash: /APvQtIczoMdPeFgS8yLWOSzDbhA86h5Cc1N87vUKRI=) 3: 326131333a393634343a343030303a3a2f34302d3430203d3e20323034323931.roa (hash: 1o4m8PJbpPTt/WwCt8wMPBTEbmCl+8vcVtrKZbTYjFM=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/65eae745-8ac9-4e71-bc94-fcb261703f96/1/8BAD307CD4DF11014E40EDDFFFD60F9A09E6E95C.crl rsync://rsync.paas.rpki.ripe.net/repository/65eae745-8ac9-4e71-bc94-fcb261703f96/1/8BAD307CD4DF11014E40EDDFFFD60F9A09E6E95C.mft rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/0/8BAD307CD4DF11014E40EDDFFFD60F9A09E6E95C.cer rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/0/F1D0572FE72991BD32854BAC716676EBDAD22ACE.crl rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/0/F1D0572FE72991BD32854BAC716676EBDAD22ACE.mft rsync://rpki.ripe.net/repository/DEFAULT/8dBXL-cpkb0yhUuscWZ269rSKs4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 07 May 2026 19:28:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:0a:8c:be:a7:89:13:9b:a8:25:c7:d7:dc:1c:c4:19:2c:e2:53:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8BAD307CD4DF11014E40EDDFFFD60F9A09E6E95C Validity Not Before: May 7 02:47:54 2026 GMT Not After : May 8 04:27:54 2026 GMT Subject: CN=639E85A54E8DEB7D5F84D23C15EE79FC7233ABDC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:92:19:51:e4:fc:fc:64:bf:af:bc:aa:b1:95: c6:8d:ac:20:2d:6d:f0:03:9f:39:14:eb:16:30:87: 29:fb:5a:b5:35:cb:a5:a7:a7:cb:37:86:6b:c9:b5: b1:ec:e1:27:84:11:49:78:7f:4a:4d:f4:29:fd:cd: a0:5c:40:2c:da:91:8b:67:23:97:e9:a2:54:1d:15: 9e:2e:16:52:80:03:f5:e5:b3:50:c2:98:f1:69:46: 96:93:b9:30:49:5b:a7:5c:ec:68:6a:c7:0d:e3:8c: 10:a4:f3:31:ed:9c:08:1d:79:49:34:00:fe:33:df: a4:3a:fe:d4:35:95:c1:a4:27:6b:52:a7:33:c1:5f: 9e:15:52:6f:17:dd:c8:4f:a9:01:53:ea:af:b9:fa: 52:19:4f:7c:7a:ca:c9:93:4f:b5:31:ad:0d:92:fd: bd:ec:f5:0f:36:fe:d9:8c:6f:4d:40:16:07:e1:7f: 2d:96:7f:46:33:7a:15:06:23:48:49:d1:c4:cd:e0: e6:9a:33:b7:a0:e2:7c:64:83:8f:1a:18:c8:c1:cb: fa:76:05:ec:5f:cb:ec:59:a4:86:e1:6b:6c:79:a7: 14:5e:ce:51:be:5c:a3:ef:a9:19:6f:92:74:3b:57: d0:34:ab:52:6c:a0:0e:89:35:2c:04:e3:f0:31:72: da:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:9E:85:A5:4E:8D:EB:7D:5F:84:D2:3C:15:EE:79:FC:72:33:AB:DC X509v3 Authority Key Identifier: keyid:8B:AD:30:7C:D4:DF:11:01:4E:40:ED:DF:FF:D6:0F:9A:09:E6:E9:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/65eae745-8ac9-4e71-bc94-fcb261703f96/1/8BAD307CD4DF11014E40EDDFFFD60F9A09E6E95C.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/0/8BAD307CD4DF11014E40EDDFFFD60F9A09E6E95C.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/65eae745-8ac9-4e71-bc94-fcb261703f96/1/8BAD307CD4DF11014E40EDDFFFD60F9A09E6E95C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:04:35:7e:1a:69:f9:ad:4f:f8:a9:d6:8f:d9:8e:25:c8:1c: 5e:03:75:b7:c8:7d:e6:63:32:2f:36:d7:af:a2:fa:13:41:ed: ca:72:85:08:98:42:f6:61:70:55:6b:7b:e0:5e:33:66:9a:b7: a7:b9:f8:2d:9b:3c:39:a0:4b:54:3a:2b:a7:8b:65:bc:92:94: 4f:41:43:b8:6b:3c:ab:23:81:97:59:d6:7e:1d:16:dd:2d:82: 3b:16:9a:1b:cd:82:c2:9c:79:19:3d:c1:2d:5a:05:a8:99:94: 3c:f3:df:32:16:de:27:06:7e:df:b4:a0:78:62:48:98:bb:14: 6b:ec:09:d2:cc:7c:7d:c6:00:c4:20:d7:e4:3b:9e:79:81:73: 07:67:7d:5f:35:82:9e:5f:82:02:e0:7c:9c:f4:d9:e6:77:47: 9a:5b:a8:8e:2f:7f:aa:32:4f:f8:15:8f:0c:e6:8c:22:24:c3: b4:62:6f:48:87:5b:72:19:f6:74:cb:41:88:d5:2a:c6:f9:db: 13:fb:dd:51:3c:49:c5:3d:62:a7:a2:61:46:77:27:1e:a5:55: 4f:b8:62:0a:5e:11:a2:7d:5a:b6:4d:38:62:20:9c:aa:07:f2: 25:04:04:54:2f:cd:2d:79:67:89:40:19:ee:02:da:9e:90:e8: 04:1c:c7:75 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUNQqMvqeJE5uoJcfX3BzEGSziU3cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEJBRDMwN0NENERGMTEwMTRFNDBFRERGRkZENjBGOUEw OUU2RTk1QzAeFw0yNjA1MDcwMjQ3NTRaFw0yNjA1MDgwNDI3NTRaMDMxMTAvBgNV BAMTKDYzOUU4NUE1NEU4REVCN0Q1Rjg0RDIzQzE1RUU3OUZDNzIzM0FCREMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCbkhlR5Pz8ZL+vvKqxlcaNrCAt bfADnzkU6xYwhyn7WrU1y6Wnp8s3hmvJtbHs4SeEEUl4f0pN9Cn9zaBcQCzakYtn I5fpolQdFZ4uFlKAA/Xls1DCmPFpRpaTuTBJW6dc7Ghqxw3jjBCk8zHtnAgdeUk0 AP4z36Q6/tQ1lcGkJ2tSpzPBX54VUm8X3chPqQFT6q+5+lIZT3x6ysmTT7UxrQ2S /b3s9Q82/tmMb01AFgfhfy2Wf0YzehUGI0hJ0cTN4OaaM7eg4nxkg48aGMjBy/p2 Bexfy+xZpIbha2x5pxRezlG+XKPvqRlvknQ7V9A0q1JsoA6JNSwE4/Axctr9AgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUY56FpU6N631fhNI8Fe55/HIzq9wwHwYDVR0j BBgwFoAUi60wfNTfEQFOQO3f/9YPmgnm6VwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNjVlYWU3NDUtOGFjOS00ZTcxLWJjOTQtZmNiMjYxNzAz Zjk2LzEvOEJBRDMwN0NENERGMTEwMTRFNDBFRERGRkZENjBGOUEwOUU2RTk1Qy5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9lMzBkZTg0Yi00MDBhLTRm ZDEtYWI4YS1lNzYxNmUyNDViNDkvMC84QkFEMzA3Q0Q0REYxMTAxNEU0MEVEREZG RkQ2MEY5QTA5RTZFOTVDLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzY1ZWFlNzQ1LThhYzktNGU3MS1iYzk0LWZjYjI2MTcwM2Y5Ni8xLzhCQUQzMDdD RDRERjExMDE0RTQwRURERkZGRDYwRjlBMDlFNkU5NUMubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBGBDV+ Gmn5rU/4qdaP2Y4lyBxeA3W3yH3mYzIvNtevovoTQe3KcoUImEL2YXBVa3vgXjNm mrenufgtmzw5oEtUOiuni2W8kpRPQUO4azyrI4GXWdZ+HRbdLYI7FpobzYLCnHkZ PcEtWgWomZQ8898yFt4nBn7ftKB4YkiYuxRr7AnSzHx9xgDEINfkO555gXMHZ31f NYKeX4IC4Hyc9Nnmd0eaW6iOL3+qMk/4FY8M5owiJMO0Ym9Ih1tyGfZ0y0GI1SrG +dsT+91RPEnFPWKnomFGdycepVVPuGIKXhGifVq2TThiIJyqB/IlBARUL80teWeJ QBnuAtqekOgEHMd1 -----END CERTIFICATE-----Generated at Thu May 7 08:42:55 2026 by rpki-client