$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/65eae745-8ac9-4e71-bc94-fcb261703f96/1/8BAD307CD4DF11014E40EDDFFFD60F9A09E6E95C.mft File: 8BAD307CD4DF11014E40EDDFFFD60F9A09E6E95C.mft (raw, json) Hash identifier: C0zwKkkYiVlZW+3YJ16H3hlyyjK2WB6AUAU+OcOhyZo= Subject key identifier: A3:FD:B1:60:86:17:D3:DD:74:01:59:9F:C1:C9:E2:27:2D:8E:00:75 Authority key identifier: 8B:AD:30:7C:D4:DF:11:01:4E:40:ED:DF:FF:D6:0F:9A:09:E6:E9:5C Certificate issuer: /CN=8BAD307CD4DF11014E40EDDFFFD60F9A09E6E95C Certificate serial: 4661170CE965380A14EC565F09465E07D1A93600 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/0/8BAD307CD4DF11014E40EDDFFFD60F9A09E6E95C.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/65eae745-8ac9-4e71-bc94-fcb261703f96/1/8BAD307CD4DF11014E40EDDFFFD60F9A09E6E95C.mft Manifest number: 03ED Signing time: Sun 04 Oct 2026 11:37:12 +0000 Manifest this update: Sun 04 Oct 2026 11:32:12 +0000 Manifest next update: Mon 05 Oct 2026 14:57:12 +0000 Files and hashes: 1: 326131333a393634343a343061653a3a2f34382d3438203d3e20323034323931.roa (hash: /APvQtIczoMdPeFgS8yLWOSzDbhA86h5Cc1N87vUKRI=) 2: 8BAD307CD4DF11014E40EDDFFFD60F9A09E6E95C.crl (hash: NwvAcOXqwskFo5xzFCgnA+agRh9U73Gji3O+WnuX9T4=) 3: 326131333a393634343a343030303a3a2f34302d3430203d3e20323034323931.roa (hash: YgD4FXqTWmPFPjeYHziBG/J6IaO/Hxlen1UWzQrfC/Y=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/65eae745-8ac9-4e71-bc94-fcb261703f96/1/8BAD307CD4DF11014E40EDDFFFD60F9A09E6E95C.crl rsync://rsync.paas.rpki.ripe.net/repository/65eae745-8ac9-4e71-bc94-fcb261703f96/1/8BAD307CD4DF11014E40EDDFFFD60F9A09E6E95C.mft rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/0/8BAD307CD4DF11014E40EDDFFFD60F9A09E6E95C.cer rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/0/F1D0572FE72991BD32854BAC716676EBDAD22ACE.crl rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/0/F1D0572FE72991BD32854BAC716676EBDAD22ACE.mft rsync://rpki.ripe.net/repository/DEFAULT/8dBXL-cpkb0yhUuscWZ269rSKs4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 05 Oct 2026 01:06:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:61:17:0c:e9:65:38:0a:14:ec:56:5f:09:46:5e:07:d1:a9:36:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8BAD307CD4DF11014E40EDDFFFD60F9A09E6E95C Validity Not Before: Oct 4 11:32:12 2026 GMT Not After : Oct 5 14:57:12 2026 GMT Subject: CN=A3FDB1608617D3DD7401599FC1C9E2272D8E0075 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:39:fc:47:e4:92:ef:c6:01:66:91:3f:93:39: fb:78:e4:d8:96:1a:a6:13:92:4a:bd:cf:d0:d6:17: 10:a4:36:9a:3e:e5:e0:1f:e4:e3:52:c7:24:9c:f1: ad:50:3f:b1:5c:52:9d:13:96:a5:42:2e:6a:46:1d: 6d:81:a0:71:1f:fd:96:d4:35:bb:69:ce:e7:a2:ae: 93:3f:b7:80:90:a0:26:7f:0b:4b:8d:61:d8:de:48: 19:1e:35:28:8f:aa:d8:26:60:0a:5b:37:8e:91:2e: 0f:01:8b:bb:8b:00:1c:24:32:05:a0:44:23:9b:54: df:11:e2:aa:21:39:23:86:f3:13:4a:f5:96:88:af: 58:7b:43:cb:59:46:ce:ff:29:9e:2c:38:9c:17:2f: 8f:bd:43:74:e9:d9:87:93:be:9e:3a:b0:b5:61:bf: 14:e5:7b:dc:26:ad:3b:82:77:e0:07:ff:e8:da:32: c6:05:bf:ca:37:d7:34:9b:36:fa:ae:34:98:db:49: 90:38:06:31:2b:9c:f6:bc:10:0a:8d:53:96:06:3c: 63:e2:cf:db:a8:77:0a:ca:db:e5:a7:60:ee:93:79: 99:7e:6c:95:4f:3d:99:00:1a:fc:89:31:e3:c4:73: 5b:eb:41:64:5b:41:c1:00:37:5a:1e:5a:b6:b8:a1: 09:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:FD:B1:60:86:17:D3:DD:74:01:59:9F:C1:C9:E2:27:2D:8E:00:75 X509v3 Authority Key Identifier: keyid:8B:AD:30:7C:D4:DF:11:01:4E:40:ED:DF:FF:D6:0F:9A:09:E6:E9:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/65eae745-8ac9-4e71-bc94-fcb261703f96/1/8BAD307CD4DF11014E40EDDFFFD60F9A09E6E95C.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/0/8BAD307CD4DF11014E40EDDFFFD60F9A09E6E95C.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/65eae745-8ac9-4e71-bc94-fcb261703f96/1/8BAD307CD4DF11014E40EDDFFFD60F9A09E6E95C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:f9:c8:d0:8a:70:af:f9:59:9b:fa:6d:ef:83:9f:e4:aa:ef: 79:e5:67:87:13:98:44:b9:ea:af:b3:e0:34:e6:5a:a8:97:a6: 07:21:c2:68:c6:74:2b:6e:6f:ed:1b:82:53:f3:df:3e:36:37: 58:f4:05:ef:71:88:38:32:bb:9d:d3:08:f6:c9:a6:99:79:2f: 44:37:a7:74:7f:26:ab:92:13:be:9a:7e:b5:c4:1c:6c:3a:05: e3:42:7b:39:96:62:8b:f4:2e:2d:d9:36:f0:fa:2c:5b:f1:47: be:40:fb:3f:3e:54:71:92:3e:36:fe:a9:67:8e:18:07:e0:2a: 36:32:d5:a9:ce:ad:d5:ca:51:c8:91:d2:b2:f6:a1:39:03:bb: 75:54:2b:f6:fe:b9:6e:ca:8e:c5:fb:f6:37:f2:19:0b:91:9b: 76:c4:20:53:e2:e9:3f:be:1c:55:58:0c:ea:19:ea:bd:cc:89: fd:7b:60:fd:88:18:d7:d5:b8:db:68:fb:75:3f:75:f5:de:69: 04:af:4e:7c:25:df:52:41:fa:13:9b:4d:2f:16:43:b4:01:2a: 11:5e:ae:56:a6:03:b8:58:be:7a:13:92:f4:e3:cf:42:3a:57: 7f:34:84:11:47:e2:dd:d7:54:a0:52:96:82:b6:9b:57:82:95: 28:cf:05:06 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIURmEXDOllOAoU7FZfCUZeB9GpNgAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEJBRDMwN0NENERGMTEwMTRFNDBFRERGRkZENjBGOUEw OUU2RTk1QzAeFw0yNjEwMDQxMTMyMTJaFw0yNjEwMDUxNDU3MTJaMDMxMTAvBgNV BAMTKEEzRkRCMTYwODYxN0QzREQ3NDAxNTk5RkMxQzlFMjI3MkQ4RTAwNzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZOfxH5JLvxgFmkT+TOft45NiW GqYTkkq9z9DWFxCkNpo+5eAf5ONSxySc8a1QP7FcUp0TlqVCLmpGHW2BoHEf/ZbU NbtpzueirpM/t4CQoCZ/C0uNYdjeSBkeNSiPqtgmYApbN46RLg8Bi7uLABwkMgWg RCObVN8R4qohOSOG8xNK9ZaIr1h7Q8tZRs7/KZ4sOJwXL4+9Q3Tp2YeTvp46sLVh vxTle9wmrTuCd+AH/+jaMsYFv8o31zSbNvquNJjbSZA4BjErnPa8EAqNU5YGPGPi z9uodwrK2+WnYO6TeZl+bJVPPZkAGvyJMePEc1vrQWRbQcEAN1oeWra4oQl9AgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUo/2xYIYX0910AVmfwcniJy2OAHUwHwYDVR0j BBgwFoAUi60wfNTfEQFOQO3f/9YPmgnm6VwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNjVlYWU3NDUtOGFjOS00ZTcxLWJjOTQtZmNiMjYxNzAz Zjk2LzEvOEJBRDMwN0NENERGMTEwMTRFNDBFRERGRkZENjBGOUEwOUU2RTk1Qy5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9lMzBkZTg0Yi00MDBhLTRm ZDEtYWI4YS1lNzYxNmUyNDViNDkvMC84QkFEMzA3Q0Q0REYxMTAxNEU0MEVEREZG RkQ2MEY5QTA5RTZFOTVDLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzY1ZWFlNzQ1LThhYzktNGU3MS1iYzk0LWZjYjI2MTcwM2Y5Ni8xLzhCQUQzMDdD RDRERjExMDE0RTQwRURERkZGRDYwRjlBMDlFNkU5NUMubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBF+cjQ inCv+Vmb+m3vg5/kqu955WeHE5hEueqvs+A05lqol6YHIcJoxnQrbm/tG4JT898+ NjdY9AXvcYg4Mrud0wj2yaaZeS9EN6d0fyarkhO+mn61xBxsOgXjQns5lmKL9C4t 2Tbw+ixb8Ue+QPs/PlRxkj42/qlnjhgH4Co2MtWpzq3VylHIkdKy9qE5A7t1VCv2 /rluyo7F+/Y38hkLkZt2xCBT4uk/vhxVWAzqGeq9zIn9e2D9iBjX1bjbaPt1P3X1 3mkEr058Jd9SQfoTm00vFkO0ASoRXq5WpgO4WL56E5L0489COld/NIQRR+Ld11Sg UpaCtptXgpUozwUG -----END CERTIFICATE-----Generated at Sun Oct 4 16:54:33 2026 by rpki-client