$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/1/0A8B61A844D6C2C7AF38EDCBD165D0EFFB823E45.mft File: 0A8B61A844D6C2C7AF38EDCBD165D0EFFB823E45.mft (raw, json) Hash identifier: Dt4NU8vYuDTxiTwnOKe+JGurt9pqOqiq5zSfqRgepCw= Subject key identifier: 2E:A3:F7:20:08:F8:8B:EC:CC:21:E4:81:EE:7E:50:7D:50:64:15:AA Authority key identifier: 0A:8B:61:A8:44:D6:C2:C7:AF:38:ED:CB:D1:65:D0:EF:FB:82:3E:45 Certificate issuer: /CN=0A8B61A844D6C2C7AF38EDCBD165D0EFFB823E45 Certificate serial: 22C4A1029E2323ADEA4BC51F750158503B2D9FDA Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/0A8B61A844D6C2C7AF38EDCBD165D0EFFB823E45.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/1/0A8B61A844D6C2C7AF38EDCBD165D0EFFB823E45.mft Manifest number: 043B Signing time: Sat 24 Oct 2026 05:44:42 +0000 Manifest this update: Sat 24 Oct 2026 05:39:42 +0000 Manifest next update: Sun 25 Oct 2026 06:03:42 +0000 Files and hashes: 1: 0A8B61A844D6C2C7AF38EDCBD165D0EFFB823E45.crl (hash: k8Thw0hGKZzIs0woWdRh8u+BsbtD0GdbRxHVHiS5NSU=) 2: 326131343a373538313a6430303a3a2f34302d3438203d3e20323136343532.roa (hash: +2h0a7wgr0VV5Yf9tenQW+2b3nKEqNnM1bACdpjItzE=) 3: 326131343a373538343a373030303a3a2f33362d3434203d3e20323136343532.roa (hash: rpnwS+Y3sQ4e6qv+Gy6DoJIWfRow73aU7r2O2Z0c3vg=) 4: 326131343a373538313a6430303a3a2f34342d3438203d3e203331383938.roa (hash: qE8L39SpyoEHdTGvG8S7ZOvpv47dDhK0u7Idd96jQN8=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/1/0A8B61A844D6C2C7AF38EDCBD165D0EFFB823E45.crl rsync://rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/1/0A8B61A844D6C2C7AF38EDCBD165D0EFFB823E45.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/0A8B61A844D6C2C7AF38EDCBD165D0EFFB823E45.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Oct 2026 04:42:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:c4:a1:02:9e:23:23:ad:ea:4b:c5:1f:75:01:58:50:3b:2d:9f:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0A8B61A844D6C2C7AF38EDCBD165D0EFFB823E45 Validity Not Before: Oct 24 05:39:42 2026 GMT Not After : Oct 25 06:03:42 2026 GMT Subject: CN=2EA3F72008F88BECCC21E481EE7E507D506415AA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:99:26:7d:3e:12:70:8d:22:a6:8f:96:e7:08: 0b:76:d6:a2:61:f5:48:67:eb:b9:f1:53:eb:16:e5: fa:11:da:0f:a9:93:f7:3f:9f:33:78:b7:f2:15:b2: fc:11:9d:e8:50:9e:4d:7e:c3:5b:c8:d2:18:ec:ab: 5d:0a:dd:7f:c0:a1:68:d6:77:43:51:04:11:73:d0: d9:76:5c:45:76:a0:c3:6a:4a:6d:44:de:29:1e:a1: 65:07:a3:f9:33:04:6e:96:b5:bd:1a:a9:d8:d1:b8: c0:69:5d:a1:d4:a4:82:63:6a:2c:a4:0f:03:87:c9: f8:41:b2:07:15:c8:27:1e:ba:a5:42:73:c4:b3:5b: 97:56:a0:d9:cc:b6:f1:a6:6f:aa:d7:09:35:06:18: a1:b2:59:3a:f1:79:a0:72:c0:79:b7:dd:a4:87:af: 3c:02:d6:84:d3:1e:28:67:72:91:9c:c5:10:c7:dd: 3a:e1:93:27:c2:71:44:2d:13:9c:6c:ba:4d:81:a0: 53:85:56:78:fe:7e:1c:d6:46:56:13:c7:4b:11:5e: 4d:45:d6:d3:92:b1:20:36:1d:44:1d:b4:7a:d5:bb: ff:86:1b:b9:9d:d7:45:17:ec:90:ef:af:6a:0d:64: e3:11:cc:ff:86:f7:d2:66:0f:20:f2:ae:29:ea:1b: de:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:A3:F7:20:08:F8:8B:EC:CC:21:E4:81:EE:7E:50:7D:50:64:15:AA X509v3 Authority Key Identifier: keyid:0A:8B:61:A8:44:D6:C2:C7:AF:38:ED:CB:D1:65:D0:EF:FB:82:3E:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/1/0A8B61A844D6C2C7AF38EDCBD165D0EFFB823E45.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/0A8B61A844D6C2C7AF38EDCBD165D0EFFB823E45.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/1/0A8B61A844D6C2C7AF38EDCBD165D0EFFB823E45.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:cd:b7:d3:43:a2:10:c9:48:96:74:99:bb:87:f8:78:8e:59: 23:d0:95:c5:88:79:82:79:5e:1f:e2:59:e8:ad:da:d2:b6:f0: 9d:a8:1f:10:7b:b2:7d:54:c8:db:b1:7e:0e:1f:57:a6:4b:cf: 1b:29:f4:0a:7e:0e:6b:fc:86:0f:f0:22:07:84:78:a1:23:7b: a6:cf:c0:77:ed:8b:1a:87:fa:ce:24:cf:f4:ef:17:c6:de:c3: ef:d8:76:42:f3:98:86:40:77:6a:1d:19:a0:52:1c:77:2e:68: d8:3f:c8:26:0d:50:d9:0a:8d:66:ba:cf:1e:72:7f:b4:ca:1d: 5c:94:91:e9:48:19:3c:2f:a7:10:15:a4:7b:cb:cc:37:ad:23: 6e:c7:2e:88:e2:50:24:69:f9:61:1f:36:56:ba:62:5c:24:80: 06:95:1c:d6:77:fa:61:61:1e:85:8f:08:f0:07:43:fd:b1:81: 6f:b4:a6:28:d9:c3:d6:df:eb:97:d4:c9:74:70:24:8a:97:c5: 1f:0f:33:16:f5:82:98:db:03:2a:94:d6:cc:fc:cd:70:42:3c: 75:f4:9e:1c:24:c8:f5:0b:da:d9:94:f3:97:49:dc:81:cf:af: 8d:d8:b4:43:dc:5d:b0:fd:de:e0:e5:ab:bd:9e:e2:8d:46:c8: 27:cc:ec:eb -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUIsShAp4jI63qS8UfdQFYUDstn9owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEE4QjYxQTg0NEQ2QzJDN0FGMzhFRENCRDE2NUQwRUZG QjgyM0U0NTAeFw0yNjEwMjQwNTM5NDJaFw0yNjEwMjUwNjAzNDJaMDMxMTAvBgNV BAMTKDJFQTNGNzIwMDhGODhCRUNDQzIxRTQ4MUVFN0U1MDdENTA2NDE1QUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCSmSZ9PhJwjSKmj5bnCAt21qJh 9Uhn67nxU+sW5foR2g+pk/c/nzN4t/IVsvwRnehQnk1+w1vI0hjsq10K3X/AoWjW d0NRBBFz0Nl2XEV2oMNqSm1E3ikeoWUHo/kzBG6Wtb0aqdjRuMBpXaHUpIJjaiyk DwOHyfhBsgcVyCceuqVCc8SzW5dWoNnMtvGmb6rXCTUGGKGyWTrxeaBywHm33aSH rzwC1oTTHihncpGcxRDH3TrhkyfCcUQtE5xsuk2BoFOFVnj+fhzWRlYTx0sRXk1F 1tOSsSA2HUQdtHrVu/+GG7md10UX7JDvr2oNZOMRzP+G99JmDyDyrinqG96XAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQULqP3IAj4i+zMIeSB7n5QfVBkFaowHwYDVR0j BBgwFoAUCothqETWwsevOO3L0WXQ7/uCPkUwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNzJjNDA1ZjEtYzMyZC00N2NlLTg5NDMtMDc1MmVkMTNk OGVmLzEvMEE4QjYxQTg0NEQ2QzJDN0FGMzhFRENCRDE2NUQwRUZGQjgyM0U0NS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC8wQThCNjFBODQ0RDZDMkM3QUYzOEVEQ0JE MTY1RDBFRkZCODIzRTQ1LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzcyYzQwNWYxLWMzMmQtNDdjZS04OTQzLTA3NTJlZDEzZDhlZi8xLzBBOEI2MUE4 NDRENkMyQzdBRjM4RURDQkQxNjVEMEVGRkI4MjNFNDUubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQA/zbfT Q6IQyUiWdJm7h/h4jlkj0JXFiHmCeV4f4lnordrStvCdqB8Qe7J9VMjbsX4OH1em S88bKfQKfg5r/IYP8CIHhHihI3umz8B37Ysah/rOJM/07xfG3sPv2HZC85iGQHdq HRmgUhx3LmjYP8gmDVDZCo1mus8ecn+0yh1clJHpSBk8L6cQFaR7y8w3rSNuxy6I 4lAkaflhHzZWumJcJIAGlRzWd/phYR6FjwjwB0P9sYFvtKYo2cPW3+uX1Ml0cCSK l8UfDzMW9YKY2wMqlNbM/M1wQjx19J4cJMj1C9rZlPOXSdyBz6+N2LRD3F2w/d7g 5au9nuKNRsgnzOzr -----END CERTIFICATE-----Generated at Sat Oct 24 10:17:26 2026 by rpki-client