$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/65eae745-8ac9-4e71-bc94-fcb261703f96/1/8BAD307CD4DF11014E40EDDFFFD60F9A09E6E95C.mft File: 8BAD307CD4DF11014E40EDDFFFD60F9A09E6E95C.mft (raw, json) Hash identifier: OwCDRc4vz7LF1s4Ax5qP0zC/MlXYEHKmKkT1AEwapG4= Subject key identifier: E9:11:63:4F:E8:FA:30:2C:50:B7:D1:15:6E:15:A6:C9:9B:8D:1A:E0 Authority key identifier: 8B:AD:30:7C:D4:DF:11:01:4E:40:ED:DF:FF:D6:0F:9A:09:E6:E9:5C Certificate issuer: /CN=8BAD307CD4DF11014E40EDDFFFD60F9A09E6E95C Certificate serial: 1C4D81D5FC60672C68891E91CCEE41909D5E2DC6 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/0/8BAD307CD4DF11014E40EDDFFFD60F9A09E6E95C.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/65eae745-8ac9-4e71-bc94-fcb261703f96/1/8BAD307CD4DF11014E40EDDFFFD60F9A09E6E95C.mft Manifest number: 03A9 Signing time: Fri 14 Aug 2026 11:35:48 +0000 Manifest this update: Fri 14 Aug 2026 11:30:48 +0000 Manifest next update: Sat 15 Aug 2026 14:31:48 +0000 Files and hashes: 1: 326131333a393634343a343030303a3a2f34302d3430203d3e20323034323931.roa (hash: YgD4FXqTWmPFPjeYHziBG/J6IaO/Hxlen1UWzQrfC/Y=) 2: 326131333a393634343a343061653a3a2f34382d3438203d3e20323034323931.roa (hash: /APvQtIczoMdPeFgS8yLWOSzDbhA86h5Cc1N87vUKRI=) 3: 8BAD307CD4DF11014E40EDDFFFD60F9A09E6E95C.crl (hash: 5A62MOvls3T/RigYhp9XFL7OTCVccQdwZN03OgsKNJo=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/65eae745-8ac9-4e71-bc94-fcb261703f96/1/8BAD307CD4DF11014E40EDDFFFD60F9A09E6E95C.crl rsync://rsync.paas.rpki.ripe.net/repository/65eae745-8ac9-4e71-bc94-fcb261703f96/1/8BAD307CD4DF11014E40EDDFFFD60F9A09E6E95C.mft rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/0/8BAD307CD4DF11014E40EDDFFFD60F9A09E6E95C.cer rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/0/F1D0572FE72991BD32854BAC716676EBDAD22ACE.crl rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/0/F1D0572FE72991BD32854BAC716676EBDAD22ACE.mft rsync://rpki.ripe.net/repository/DEFAULT/8dBXL-cpkb0yhUuscWZ269rSKs4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 15 Aug 2026 14:08:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:4d:81:d5:fc:60:67:2c:68:89:1e:91:cc:ee:41:90:9d:5e:2d:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8BAD307CD4DF11014E40EDDFFFD60F9A09E6E95C Validity Not Before: Aug 14 11:30:48 2026 GMT Not After : Aug 15 14:31:48 2026 GMT Subject: CN=E911634FE8FA302C50B7D1156E15A6C99B8D1AE0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:83:2b:19:36:4d:01:78:9e:18:64:2d:14:69: 4a:59:b1:04:cf:79:b7:32:b8:5d:e5:c2:ca:63:1c: af:36:cf:2e:64:bd:7e:96:4f:d0:2a:3a:de:41:b4: b0:0e:98:8a:c6:ba:d2:58:e3:d9:2a:dd:85:ad:64: 77:41:03:e0:05:56:69:20:8c:aa:55:a8:91:18:72: d5:56:72:fa:87:46:b1:81:e6:4d:55:18:ed:ba:6a: ca:32:2f:bd:29:57:a4:55:37:4b:f7:88:79:7e:28: c7:f3:bf:d5:1f:30:dc:07:f3:e1:6f:45:73:26:81: 3f:a7:6f:32:d3:36:f8:21:f2:38:04:b9:03:1e:30: 82:c1:95:eb:83:01:37:0d:b1:94:6e:22:1d:bc:4e: dd:02:73:66:02:15:96:c2:b6:0d:fa:4c:72:fc:98: fb:94:f6:f2:47:ed:36:23:75:d3:ff:06:36:d1:d5: fb:10:a5:64:ea:68:82:2e:7a:1c:5d:ce:d2:9d:0c: 88:c2:58:d5:f1:4b:c6:d5:8d:51:54:ba:9b:69:59: be:90:5a:db:d6:19:f0:39:b6:78:e7:17:ae:ad:d7: d5:16:28:1b:bd:7d:61:f8:dd:cd:a8:ff:57:93:f9: 8e:42:ef:ed:be:8d:ce:61:15:7a:10:78:44:b5:5a: 2c:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:11:63:4F:E8:FA:30:2C:50:B7:D1:15:6E:15:A6:C9:9B:8D:1A:E0 X509v3 Authority Key Identifier: keyid:8B:AD:30:7C:D4:DF:11:01:4E:40:ED:DF:FF:D6:0F:9A:09:E6:E9:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/65eae745-8ac9-4e71-bc94-fcb261703f96/1/8BAD307CD4DF11014E40EDDFFFD60F9A09E6E95C.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/0/8BAD307CD4DF11014E40EDDFFFD60F9A09E6E95C.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/65eae745-8ac9-4e71-bc94-fcb261703f96/1/8BAD307CD4DF11014E40EDDFFFD60F9A09E6E95C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cf:d2:2a:67:b9:a9:7a:69:79:b3:0a:26:10:60:96:a8:a9:50: 2b:bf:20:d3:71:62:8f:58:c5:b6:fd:02:0e:9c:9f:60:cf:c1: 34:20:81:70:3f:0f:30:7a:cf:e6:6b:fc:a7:e3:40:b2:9d:7f: 28:1e:26:08:08:7a:83:8d:63:9b:4a:8e:2e:f4:a9:99:1d:c1: 0c:16:33:19:79:92:9b:e2:29:3b:30:c8:42:dd:af:57:75:3a: e2:25:a7:94:58:bc:d9:60:81:b5:61:dd:d1:0c:7d:36:8e:0c: 77:f2:f2:55:6b:62:f9:cc:71:73:26:e9:c9:42:f1:58:84:84: ce:4a:c9:31:ac:8f:ac:d8:16:5b:25:ee:21:73:19:2f:4b:b2: c5:46:a0:3a:48:fb:aa:35:96:6c:06:0f:1b:75:42:25:3d:cb: 53:44:ef:ec:40:4f:23:15:4e:3b:8f:0b:d6:4b:dd:01:93:b9: de:36:59:9b:8d:56:7e:a6:3d:8b:33:73:0c:81:60:22:04:a2: 85:c3:b8:8a:13:d1:e4:71:c1:83:ab:64:e7:eb:12:58:83:12: a5:ea:fc:74:6a:e4:2b:1c:d6:7b:48:89:f0:ec:b2:39:70:e8: d2:13:29:6a:73:71:98:e7:e9:3e:66:c6:5a:04:57:e5:e1:81: d6:00:fd:11 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUHE2B1fxgZyxoiR6RzO5BkJ1eLcYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEJBRDMwN0NENERGMTEwMTRFNDBFRERGRkZENjBGOUEw OUU2RTk1QzAeFw0yNjA4MTQxMTMwNDhaFw0yNjA4MTUxNDMxNDhaMDMxMTAvBgNV BAMTKEU5MTE2MzRGRThGQTMwMkM1MEI3RDExNTZFMTVBNkM5OUI4RDFBRTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZgysZNk0BeJ4YZC0UaUpZsQTP ebcyuF3lwspjHK82zy5kvX6WT9AqOt5BtLAOmIrGutJY49kq3YWtZHdBA+AFVmkg jKpVqJEYctVWcvqHRrGB5k1VGO26asoyL70pV6RVN0v3iHl+KMfzv9UfMNwH8+Fv RXMmgT+nbzLTNvgh8jgEuQMeMILBleuDATcNsZRuIh28Tt0Cc2YCFZbCtg36THL8 mPuU9vJH7TYjddP/BjbR1fsQpWTqaIIuehxdztKdDIjCWNXxS8bVjVFUuptpWb6Q WtvWGfA5tnjnF66t19UWKBu9fWH43c2o/1eT+Y5C7+2+jc5hFXoQeES1WiwdAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQU6RFjT+j6MCxQt9EVbhWmyZuNGuAwHwYDVR0j BBgwFoAUi60wfNTfEQFOQO3f/9YPmgnm6VwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNjVlYWU3NDUtOGFjOS00ZTcxLWJjOTQtZmNiMjYxNzAz Zjk2LzEvOEJBRDMwN0NENERGMTEwMTRFNDBFRERGRkZENjBGOUEwOUU2RTk1Qy5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9lMzBkZTg0Yi00MDBhLTRm ZDEtYWI4YS1lNzYxNmUyNDViNDkvMC84QkFEMzA3Q0Q0REYxMTAxNEU0MEVEREZG RkQ2MEY5QTA5RTZFOTVDLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzY1ZWFlNzQ1LThhYzktNGU3MS1iYzk0LWZjYjI2MTcwM2Y5Ni8xLzhCQUQzMDdD RDRERjExMDE0RTQwRURERkZGRDYwRjlBMDlFNkU5NUMubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQDP0ipn ual6aXmzCiYQYJaoqVArvyDTcWKPWMW2/QIOnJ9gz8E0IIFwPw8wes/ma/yn40Cy nX8oHiYICHqDjWObSo4u9KmZHcEMFjMZeZKb4ik7MMhC3a9XdTriJaeUWLzZYIG1 Yd3RDH02jgx38vJVa2L5zHFzJunJQvFYhITOSskxrI+s2BZbJe4hcxkvS7LFRqA6 SPuqNZZsBg8bdUIlPctTRO/sQE8jFU47jwvWS90Bk7neNlmbjVZ+pj2LM3MMgWAi BKKFw7iKE9HkccGDq2Tn6xJYgxKl6vx0auQrHNZ7SInw7LI5cOjSEylqc3GY5+k+ ZsZaBFfl4YHWAP0R -----END CERTIFICATE-----Generated at Sat Aug 15 01:11:58 2026 by rpki-client