$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/65eae745-8ac9-4e71-bc94-fcb261703f96/1/8BAD307CD4DF11014E40EDDFFFD60F9A09E6E95C.mft File: 8BAD307CD4DF11014E40EDDFFFD60F9A09E6E95C.mft (raw, json) Hash identifier: zbNdHLrL3eJlBDcWe7kfKeX/MQGAi6TU/03lU2C6vas= Subject key identifier: 13:C4:A1:4C:91:F3:C2:3E:47:A9:53:D4:31:6D:1F:23:01:91:D3:92 Authority key identifier: 8B:AD:30:7C:D4:DF:11:01:4E:40:ED:DF:FF:D6:0F:9A:09:E6:E9:5C Certificate issuer: /CN=8BAD307CD4DF11014E40EDDFFFD60F9A09E6E95C Certificate serial: 3362659608029A165C52F5C3BC5EAB5A920109D7 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/0/8BAD307CD4DF11014E40EDDFFFD60F9A09E6E95C.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/65eae745-8ac9-4e71-bc94-fcb261703f96/1/8BAD307CD4DF11014E40EDDFFFD60F9A09E6E95C.mft Manifest number: 0365 Signing time: Wed 24 Jun 2026 21:59:31 +0000 Manifest this update: Wed 24 Jun 2026 21:54:31 +0000 Manifest next update: Thu 25 Jun 2026 22:34:31 +0000 Files and hashes: 1: 326131333a393634343a343061653a3a2f34382d3438203d3e20323034323931.roa (hash: /APvQtIczoMdPeFgS8yLWOSzDbhA86h5Cc1N87vUKRI=) 2: 8BAD307CD4DF11014E40EDDFFFD60F9A09E6E95C.crl (hash: BxAM7yhcRASR34q0P9hA/sDb3jlq88P7cT9cvH/3bKM=) 3: 326131333a393634343a343030303a3a2f34302d3430203d3e20323034323931.roa (hash: YgD4FXqTWmPFPjeYHziBG/J6IaO/Hxlen1UWzQrfC/Y=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/65eae745-8ac9-4e71-bc94-fcb261703f96/1/8BAD307CD4DF11014E40EDDFFFD60F9A09E6E95C.crl rsync://rsync.paas.rpki.ripe.net/repository/65eae745-8ac9-4e71-bc94-fcb261703f96/1/8BAD307CD4DF11014E40EDDFFFD60F9A09E6E95C.mft rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/0/8BAD307CD4DF11014E40EDDFFFD60F9A09E6E95C.cer rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/0/F1D0572FE72991BD32854BAC716676EBDAD22ACE.crl rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/0/F1D0572FE72991BD32854BAC716676EBDAD22ACE.mft rsync://rpki.ripe.net/repository/DEFAULT/8dBXL-cpkb0yhUuscWZ269rSKs4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Jun 2026 22:34:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:62:65:96:08:02:9a:16:5c:52:f5:c3:bc:5e:ab:5a:92:01:09:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8BAD307CD4DF11014E40EDDFFFD60F9A09E6E95C Validity Not Before: Jun 24 21:54:31 2026 GMT Not After : Jun 25 22:34:31 2026 GMT Subject: CN=13C4A14C91F3C23E47A953D4316D1F230191D392 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:e1:82:d2:3c:97:15:1d:4a:2f:d1:52:3d:5e: 07:fb:fa:1e:9d:34:98:16:3b:35:9e:3a:e5:3d:78: 84:a6:43:7c:e7:4e:1f:3a:72:69:bb:a8:4a:20:4c: a7:18:ec:fa:0c:0c:72:cc:81:97:3d:d2:fc:79:f1: 0c:e6:54:9e:a8:12:d5:a3:30:92:b2:cc:bd:a6:86: a2:43:10:9f:61:3d:44:92:62:32:68:9d:99:30:55: ea:d0:0f:47:6d:7c:a6:c6:0d:a7:53:25:50:f6:65: 53:98:70:c2:bb:bd:86:0b:e0:77:ff:a9:64:97:e1: 60:59:7f:cf:0e:7b:e8:d9:00:07:1d:38:17:5d:ba: 4b:2d:1f:33:d2:df:1b:a1:bc:32:36:f4:c0:87:a1: ef:ee:d0:95:6e:4b:36:b2:fe:41:3a:96:93:61:f6: 1d:88:3f:cd:cc:ed:8a:b2:8f:02:a9:52:75:b8:a6: 3a:19:e1:a8:11:07:40:74:06:02:2e:41:8a:60:23: a9:f9:24:81:a6:dd:bb:5b:40:64:e2:a9:14:e2:e2: 04:74:7d:08:16:63:0c:5d:85:24:c3:5e:a3:ba:4f: 80:e9:fb:a3:39:0e:e1:66:e4:6a:1f:a7:25:59:85: 17:ae:c4:c5:c1:62:96:5b:c0:c8:12:51:bd:3c:2b: f7:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:C4:A1:4C:91:F3:C2:3E:47:A9:53:D4:31:6D:1F:23:01:91:D3:92 X509v3 Authority Key Identifier: keyid:8B:AD:30:7C:D4:DF:11:01:4E:40:ED:DF:FF:D6:0F:9A:09:E6:E9:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/65eae745-8ac9-4e71-bc94-fcb261703f96/1/8BAD307CD4DF11014E40EDDFFFD60F9A09E6E95C.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/0/8BAD307CD4DF11014E40EDDFFFD60F9A09E6E95C.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/65eae745-8ac9-4e71-bc94-fcb261703f96/1/8BAD307CD4DF11014E40EDDFFFD60F9A09E6E95C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 78:be:d7:4b:86:ee:f8:d8:db:ba:75:be:0e:2e:fd:db:1e:5e: 75:0e:42:24:0a:26:ea:43:89:d7:53:9e:31:b6:55:62:74:d2: c2:fa:9a:bf:69:69:49:0e:17:a9:d8:ee:42:b7:1c:a7:a0:00: f8:a3:e1:09:19:45:09:af:c8:6c:08:f9:51:36:66:61:f7:d5: ab:7c:b5:00:8e:ee:c2:79:4c:22:7f:24:da:32:6c:86:9a:df: 8c:46:45:47:b3:9a:68:01:90:c7:53:49:a3:4f:c9:32:58:0c: ab:23:39:fa:cb:b8:95:84:2a:26:2a:22:0b:54:7c:40:9e:b1: 9e:44:14:57:f3:b0:9c:7d:a5:09:d2:bb:b4:b3:27:4c:5f:5b: 85:8b:e1:0d:e6:31:d6:35:18:f2:be:10:ee:5e:14:20:4d:7d: 6b:ba:57:82:28:db:98:ab:7c:11:04:6c:7a:da:5e:46:89:9c: 3d:b4:a5:d5:29:6c:48:65:42:b0:ac:67:ec:a0:af:72:5d:40: 11:b1:7d:7c:8d:c5:bd:f5:0f:3e:c1:ab:07:2d:05:9d:20:63: a4:f3:a6:ce:ca:e6:d4:a0:31:a2:cc:5e:be:12:12:ab:85:5f: 6d:8d:13:c3:f4:f7:8b:65:33:8b:89:8f:a7:0c:f9:7d:95:da: e2:53:76:3a -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUM2JllggCmhZcUvXDvF6rWpIBCdcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEJBRDMwN0NENERGMTEwMTRFNDBFRERGRkZENjBGOUEw OUU2RTk1QzAeFw0yNjA2MjQyMTU0MzFaFw0yNjA2MjUyMjM0MzFaMDMxMTAvBgNV BAMTKDEzQzRBMTRDOTFGM0MyM0U0N0E5NTNENDMxNkQxRjIzMDE5MUQzOTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCj4YLSPJcVHUov0VI9Xgf7+h6d NJgWOzWeOuU9eISmQ3znTh86cmm7qEogTKcY7PoMDHLMgZc90vx58QzmVJ6oEtWj MJKyzL2mhqJDEJ9hPUSSYjJonZkwVerQD0dtfKbGDadTJVD2ZVOYcMK7vYYL4Hf/ qWSX4WBZf88Oe+jZAAcdOBddukstHzPS3xuhvDI29MCHoe/u0JVuSzay/kE6lpNh 9h2IP83M7YqyjwKpUnW4pjoZ4agRB0B0BgIuQYpgI6n5JIGm3btbQGTiqRTi4gR0 fQgWYwxdhSTDXqO6T4Dp+6M5DuFm5GofpyVZhReuxMXBYpZbwMgSUb08K/fzAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUE8ShTJHzwj5HqVPUMW0fIwGR05IwHwYDVR0j BBgwFoAUi60wfNTfEQFOQO3f/9YPmgnm6VwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNjVlYWU3NDUtOGFjOS00ZTcxLWJjOTQtZmNiMjYxNzAz Zjk2LzEvOEJBRDMwN0NENERGMTEwMTRFNDBFRERGRkZENjBGOUEwOUU2RTk1Qy5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9lMzBkZTg0Yi00MDBhLTRm ZDEtYWI4YS1lNzYxNmUyNDViNDkvMC84QkFEMzA3Q0Q0REYxMTAxNEU0MEVEREZG RkQ2MEY5QTA5RTZFOTVDLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzY1ZWFlNzQ1LThhYzktNGU3MS1iYzk0LWZjYjI2MTcwM2Y5Ni8xLzhCQUQzMDdD RDRERjExMDE0RTQwRURERkZGRDYwRjlBMDlFNkU5NUMubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQB4vtdL hu742Nu6db4OLv3bHl51DkIkCibqQ4nXU54xtlVidNLC+pq/aWlJDhep2O5Ctxyn oAD4o+EJGUUJr8hsCPlRNmZh99WrfLUAju7CeUwifyTaMmyGmt+MRkVHs5poAZDH U0mjT8kyWAyrIzn6y7iVhComKiILVHxAnrGeRBRX87CcfaUJ0ru0sydMX1uFi+EN 5jHWNRjyvhDuXhQgTX1ruleCKNuYq3wRBGx62l5GiZw9tKXVKWxIZUKwrGfsoK9y XUARsX18jcW99Q8+wasHLQWdIGOk86bOyubUoDGizF6+EhKrhV9tjRPD9PeLZTOL iY+nDPl9ldriU3Y6 -----END CERTIFICATE-----Generated at Thu Jun 25 09:20:10 2026 by rpki-client