$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/65eae745-8ac9-4e71-bc94-fcb261703f96/1/8BAD307CD4DF11014E40EDDFFFD60F9A09E6E95C.mft File: 8BAD307CD4DF11014E40EDDFFFD60F9A09E6E95C.mft (raw, json) Hash identifier: zEG6Wza6+4FIh8eg4mKqQ45Ybx3g+S0B17ZI3X6b4ks= Subject key identifier: D0:DC:5B:7E:AC:7C:8A:89:A1:EA:6B:C9:FE:18:31:08:D4:58:C8:D2 Authority key identifier: 8B:AD:30:7C:D4:DF:11:01:4E:40:ED:DF:FF:D6:0F:9A:09:E6:E9:5C Certificate issuer: /CN=8BAD307CD4DF11014E40EDDFFFD60F9A09E6E95C Certificate serial: 2BA4411572443E09B91B8A0BDD61DD126FB4154C Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/0/8BAD307CD4DF11014E40EDDFFFD60F9A09E6E95C.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/65eae745-8ac9-4e71-bc94-fcb261703f96/1/8BAD307CD4DF11014E40EDDFFFD60F9A09E6E95C.mft Manifest number: 0224 Signing time: Mon 27 Oct 2025 16:18:59 +0000 Manifest this update: Mon 27 Oct 2025 16:13:59 +0000 Manifest next update: Tue 28 Oct 2025 17:25:59 +0000 Files and hashes: 1: 326131333a393634343a343030303a3a2f34302d3430203d3e20323034323931.roa (hash: 1o4m8PJbpPTt/WwCt8wMPBTEbmCl+8vcVtrKZbTYjFM=) 2: 8BAD307CD4DF11014E40EDDFFFD60F9A09E6E95C.crl (hash: SmOFGiI5kwqOh4Fsrdbrudfc0DuOynAACu8i99cwAIw=) 3: 326131333a393634343a343061653a3a2f34382d3438203d3e20323034323931.roa (hash: 0Augomo0JPTrdfBB/3ITj/ZgfSBftNdAdE/vOPCbcS0=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/65eae745-8ac9-4e71-bc94-fcb261703f96/1/8BAD307CD4DF11014E40EDDFFFD60F9A09E6E95C.crl rsync://rsync.paas.rpki.ripe.net/repository/65eae745-8ac9-4e71-bc94-fcb261703f96/1/8BAD307CD4DF11014E40EDDFFFD60F9A09E6E95C.mft rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/0/8BAD307CD4DF11014E40EDDFFFD60F9A09E6E95C.cer rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/0/F1D0572FE72991BD32854BAC716676EBDAD22ACE.crl rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/0/F1D0572FE72991BD32854BAC716676EBDAD22ACE.mft rsync://rpki.ripe.net/repository/DEFAULT/8dBXL-cpkb0yhUuscWZ269rSKs4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 28 Oct 2025 17:25:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:a4:41:15:72:44:3e:09:b9:1b:8a:0b:dd:61:dd:12:6f:b4:15:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8BAD307CD4DF11014E40EDDFFFD60F9A09E6E95C Validity Not Before: Oct 27 16:13:59 2025 GMT Not After : Oct 28 17:25:59 2025 GMT Subject: CN=D0DC5B7EAC7C8A89A1EA6BC9FE183108D458C8D2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:42:da:91:d9:55:7a:af:41:6e:61:69:ec:34: 36:97:1a:5f:34:e2:02:39:8e:60:f0:f9:87:69:80: 2f:82:ff:74:02:ef:a2:bd:e5:71:29:d6:94:89:c4: b4:8d:88:12:e5:b4:91:97:01:dc:26:51:ca:24:bd: 1b:91:a9:32:46:b9:3b:cf:33:38:2b:8a:5e:1f:d6: 17:63:8c:a5:0e:19:b9:a3:fc:11:e9:1c:0c:c2:81: dc:6d:66:e8:e6:ad:43:00:93:08:e9:20:bd:42:de: b6:f0:bd:9a:cb:05:70:f6:3f:0b:d5:8a:c8:d8:5a: 46:17:01:b2:bd:6d:ad:37:c8:69:8a:ef:b9:7c:f4: ab:50:0a:ee:8f:0d:7c:c9:f1:ce:57:71:91:d2:b3: 37:f0:57:e7:59:b0:9b:f6:1e:84:63:5f:e9:c4:f9: d1:e1:d7:4f:dd:1b:b1:d9:48:53:98:71:99:93:01: d7:ed:02:81:22:37:25:93:e6:28:46:71:59:78:c0: 88:00:91:3f:00:61:21:40:75:09:e0:a0:ab:8d:f8: 05:5d:cf:1d:68:40:55:18:29:67:07:da:0c:66:29: a9:6f:2a:7f:2c:e0:20:1f:fe:c1:48:57:c7:21:c8: 16:29:5a:d8:ae:36:e3:9c:5b:f1:43:40:3f:5c:53: 34:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:DC:5B:7E:AC:7C:8A:89:A1:EA:6B:C9:FE:18:31:08:D4:58:C8:D2 X509v3 Authority Key Identifier: keyid:8B:AD:30:7C:D4:DF:11:01:4E:40:ED:DF:FF:D6:0F:9A:09:E6:E9:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/65eae745-8ac9-4e71-bc94-fcb261703f96/1/8BAD307CD4DF11014E40EDDFFFD60F9A09E6E95C.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/0/8BAD307CD4DF11014E40EDDFFFD60F9A09E6E95C.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/65eae745-8ac9-4e71-bc94-fcb261703f96/1/8BAD307CD4DF11014E40EDDFFFD60F9A09E6E95C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:58:79:94:d1:2a:4e:80:93:5b:f0:05:34:b8:16:df:48:1a: 36:11:63:bd:07:1a:06:55:7d:89:4f:a5:8a:1d:83:c6:6f:d1: 05:70:ed:ef:8c:91:d1:6c:f0:b6:64:23:7f:e4:2b:e4:01:69: 15:37:90:1b:2a:aa:fd:fd:41:bf:b3:46:44:c9:c3:85:bb:e9: 1c:bc:cc:3d:5c:95:74:23:d9:70:bf:4a:05:17:8f:90:fd:df: 30:cc:e8:f7:76:25:e1:09:7a:33:78:63:07:6a:e7:f4:64:a9: cf:86:65:ea:2d:bd:0d:9f:13:55:30:51:43:00:2b:9d:44:be: bb:5b:03:4e:ff:de:c4:8b:69:e5:6d:f9:8d:7f:4b:82:bc:33: 87:cd:da:bd:35:4b:89:97:ac:c8:12:16:4f:e3:ff:0d:75:e9: 5f:10:c1:1a:84:19:b3:08:94:21:e2:0b:f8:71:f2:60:a5:99: 46:f2:23:8e:15:a9:66:40:1f:88:70:a9:eb:73:ac:68:89:66: ac:58:c7:ab:19:f7:46:ac:f9:92:d5:57:38:39:64:98:1d:a1: 25:18:5d:1d:3f:10:c9:e1:77:c9:fe:ef:b3:02:02:43:84:fa: 44:4c:bc:b8:d7:da:88:32:bd:01:b3:a7:77:92:f7:ad:96:0d: e9:ac:9c:e3 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUK6RBFXJEPgm5G4oL3WHdEm+0FUwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEJBRDMwN0NENERGMTEwMTRFNDBFRERGRkZENjBGOUEw OUU2RTk1QzAeFw0yNTEwMjcxNjEzNTlaFw0yNTEwMjgxNzI1NTlaMDMxMTAvBgNV BAMTKEQwREM1QjdFQUM3QzhBODlBMUVBNkJDOUZFMTgzMTA4RDQ1OEM4RDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtQtqR2VV6r0FuYWnsNDaXGl80 4gI5jmDw+YdpgC+C/3QC76K95XEp1pSJxLSNiBLltJGXAdwmUcokvRuRqTJGuTvP Mzgril4f1hdjjKUOGbmj/BHpHAzCgdxtZujmrUMAkwjpIL1C3rbwvZrLBXD2PwvV isjYWkYXAbK9ba03yGmK77l89KtQCu6PDXzJ8c5XcZHSszfwV+dZsJv2HoRjX+nE +dHh10/dG7HZSFOYcZmTAdftAoEiNyWT5ihGcVl4wIgAkT8AYSFAdQngoKuN+AVd zx1oQFUYKWcH2gxmKalvKn8s4CAf/sFIV8chyBYpWtiuNuOcW/FDQD9cUzS3AgMB AAGjggKCMIICfjAdBgNVHQ4EFgQU0Nxbfqx8iomh6mvJ/hgxCNRYyNIwHwYDVR0j BBgwFoAUi60wfNTfEQFOQO3f/9YPmgnm6VwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNjVlYWU3NDUtOGFjOS00ZTcxLWJjOTQtZmNiMjYxNzAz Zjk2LzEvOEJBRDMwN0NENERGMTEwMTRFNDBFRERGRkZENjBGOUEwOUU2RTk1Qy5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9lMzBkZTg0Yi00MDBhLTRm ZDEtYWI4YS1lNzYxNmUyNDViNDkvMC84QkFEMzA3Q0Q0REYxMTAxNEU0MEVEREZG RkQ2MEY5QTA5RTZFOTVDLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzY1ZWFlNzQ1LThhYzktNGU3MS1iYzk0LWZjYjI2MTcwM2Y5Ni8xLzhCQUQzMDdD RDRERjExMDE0RTQwRURERkZGRDYwRjlBMDlFNkU5NUMubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQA0WHmU 0SpOgJNb8AU0uBbfSBo2EWO9BxoGVX2JT6WKHYPGb9EFcO3vjJHRbPC2ZCN/5Cvk AWkVN5AbKqr9/UG/s0ZEycOFu+kcvMw9XJV0I9lwv0oFF4+Q/d8wzOj3diXhCXoz eGMHauf0ZKnPhmXqLb0NnxNVMFFDACudRL67WwNO/97Ei2nlbfmNf0uCvDOHzdq9 NUuJl6zIEhZP4/8NdelfEMEahBmzCJQh4gv4cfJgpZlG8iOOFalmQB+IcKnrc6xo iWasWMerGfdGrPmS1Vc4OWSYHaElGF0dPxDJ4XfJ/u+zAgJDhPpETLy419qIMr0B s6d3kvetlg3prJzj -----END CERTIFICATE-----Generated at Tue Oct 28 10:07:51 2025 by rpki-client