$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/1/0A8B61A844D6C2C7AF38EDCBD165D0EFFB823E45.mft File: 0A8B61A844D6C2C7AF38EDCBD165D0EFFB823E45.mft (raw, json) Hash identifier: gzbonNF99QU5HFkf1XVOUWsKLd5YT2PvDaYANM2yawU= Subject key identifier: 1C:8C:A9:29:69:98:41:8E:B8:5E:61:E0:F4:99:E0:0B:E5:E1:50:74 Authority key identifier: 0A:8B:61:A8:44:D6:C2:C7:AF:38:ED:CB:D1:65:D0:EF:FB:82:3E:45 Certificate issuer: /CN=0A8B61A844D6C2C7AF38EDCBD165D0EFFB823E45 Certificate serial: 59DCA3AA69D51A6DE55E9F5DC2708CBE2E812876 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/0A8B61A844D6C2C7AF38EDCBD165D0EFFB823E45.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/1/0A8B61A844D6C2C7AF38EDCBD165D0EFFB823E45.mft Manifest number: 037F Signing time: Fri 05 Jun 2026 19:42:17 +0000 Manifest this update: Fri 05 Jun 2026 19:37:17 +0000 Manifest next update: Sat 06 Jun 2026 20:50:17 +0000 Files and hashes: 1: 326131343a373538313a6430303a3a2f34342d3438203d3e203331383938.roa (hash: OYFGGb9dMqAtV18cBeD3NbZ0TuwCvJXmn37LZwaW7zg=) 2: 0A8B61A844D6C2C7AF38EDCBD165D0EFFB823E45.crl (hash: PjshBcw+jUDNk+wC6/7GsIEvwKeaHw3JBXYzLIiwzdc=) 3: 326131343a373538313a6430303a3a2f34302d3438203d3e20323136343532.roa (hash: jAqeRW+G0tj75/HjlTu9upVrXQ/2AvwaP0ubMorKA1Q=) 4: 326131343a373538343a373030303a3a2f33362d3434203d3e20323136343532.roa (hash: rpnwS+Y3sQ4e6qv+Gy6DoJIWfRow73aU7r2O2Z0c3vg=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/1/0A8B61A844D6C2C7AF38EDCBD165D0EFFB823E45.crl rsync://rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/1/0A8B61A844D6C2C7AF38EDCBD165D0EFFB823E45.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/0A8B61A844D6C2C7AF38EDCBD165D0EFFB823E45.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Jun 2026 19:00:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:dc:a3:aa:69:d5:1a:6d:e5:5e:9f:5d:c2:70:8c:be:2e:81:28:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0A8B61A844D6C2C7AF38EDCBD165D0EFFB823E45 Validity Not Before: Jun 5 19:37:17 2026 GMT Not After : Jun 6 20:50:17 2026 GMT Subject: CN=1C8CA9296998418EB85E61E0F499E00BE5E15074 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:56:a2:06:ec:66:da:4e:2d:e7:db:37:b9:39: 0e:1d:e4:1e:8f:00:6f:a0:b2:9e:e6:30:84:32:d3: 38:f2:88:65:be:6c:87:66:fd:a8:29:b6:a6:e6:ba: e9:ed:14:85:f4:a7:1e:c3:22:29:b4:8b:2e:4d:d6: 39:ca:c9:cb:9c:eb:c6:9c:57:3b:95:ce:cb:13:78: e8:da:d7:10:0e:75:e7:5a:c5:70:46:79:e9:79:f8: f5:54:11:a1:c6:67:81:98:48:10:bf:98:8e:94:9a: 34:cb:47:c6:bf:e4:43:b3:e9:bd:9c:04:bf:94:1c: 27:57:3b:c7:aa:96:0f:6d:12:e6:6f:c0:2d:3f:bd: b4:c6:cb:0e:36:69:7d:b4:f0:f5:00:1f:05:2e:a3: 97:f5:cb:21:52:78:80:e9:7c:cb:ed:8f:ec:32:80: d7:e5:5e:e1:07:ee:9d:c7:93:da:76:32:07:84:61: 94:63:b3:92:2a:7a:32:89:51:cc:f2:fc:37:90:d9: ca:1c:c7:e7:3a:11:56:37:ab:38:dd:32:b0:d3:55: 32:16:8e:f4:f0:3c:23:88:6f:3f:15:6c:45:4f:be: 39:57:c4:23:c7:0d:92:51:67:cf:3f:43:57:7c:22: 8d:18:54:76:f2:20:7e:ef:93:ac:32:66:6b:e0:34: be:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:8C:A9:29:69:98:41:8E:B8:5E:61:E0:F4:99:E0:0B:E5:E1:50:74 X509v3 Authority Key Identifier: keyid:0A:8B:61:A8:44:D6:C2:C7:AF:38:ED:CB:D1:65:D0:EF:FB:82:3E:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/1/0A8B61A844D6C2C7AF38EDCBD165D0EFFB823E45.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/0A8B61A844D6C2C7AF38EDCBD165D0EFFB823E45.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/1/0A8B61A844D6C2C7AF38EDCBD165D0EFFB823E45.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:d4:95:05:bf:36:87:82:5f:e7:98:b4:bd:7a:91:11:be:e6: f2:58:51:43:2c:25:22:1f:59:b5:a0:ca:38:7b:b8:b5:26:b3: 21:0d:62:09:3b:ac:d2:70:12:5f:00:08:7b:98:70:e4:db:87: 3a:01:08:8d:6e:4a:7a:11:1f:20:be:30:36:aa:12:18:00:67: 8f:36:a6:cb:f4:6c:a4:48:b0:fb:96:8a:37:a1:a8:62:73:f8: cb:c2:4b:3c:10:2b:fa:e3:e7:9d:86:89:04:b0:45:8d:f0:db: 24:c6:99:5f:3a:00:21:e1:59:12:55:0d:38:71:e2:c0:68:dc: ec:fa:3b:29:09:c6:a6:aa:9e:3a:22:8b:30:e7:d5:ec:a7:9d: 1b:6d:3b:3d:e8:ee:ea:d9:db:07:04:f6:5d:2a:79:ef:1c:8b: 8a:68:2c:29:f8:aa:5f:12:1f:ad:6f:85:7a:d1:53:31:aa:8b: e4:2b:e7:d4:eb:f4:52:e2:1d:35:9d:d0:ce:04:cd:ea:ce:d5: 9b:99:6c:ab:af:9d:c0:46:e1:3c:a3:0c:3f:ed:7d:1c:12:b3: a3:e8:8c:2e:31:5a:72:d9:7f:93:20:f8:11:e4:df:36:bd:ed: 8f:a8:36:7e:9b:c1:45:51:39:58:f0:8f:24:44:55:af:fb:e2: be:d0:cb:0f -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUWdyjqmnVGm3lXp9dwnCMvi6BKHYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEE4QjYxQTg0NEQ2QzJDN0FGMzhFRENCRDE2NUQwRUZG QjgyM0U0NTAeFw0yNjA2MDUxOTM3MTdaFw0yNjA2MDYyMDUwMTdaMDMxMTAvBgNV BAMTKDFDOENBOTI5Njk5ODQxOEVCODVFNjFFMEY0OTlFMDBCRTVFMTUwNzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2VqIG7GbaTi3n2ze5OQ4d5B6P AG+gsp7mMIQy0zjyiGW+bIdm/agptqbmuuntFIX0px7DIim0iy5N1jnKycuc68ac VzuVzssTeOja1xAOdedaxXBGeel5+PVUEaHGZ4GYSBC/mI6UmjTLR8a/5EOz6b2c BL+UHCdXO8eqlg9tEuZvwC0/vbTGyw42aX208PUAHwUuo5f1yyFSeIDpfMvtj+wy gNflXuEH7p3Hk9p2MgeEYZRjs5IqejKJUczy/DeQ2cocx+c6EVY3qzjdMrDTVTIW jvTwPCOIbz8VbEVPvjlXxCPHDZJRZ88/Q1d8Io0YVHbyIH7vk6wyZmvgNL7FAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUHIypKWmYQY64XmHg9JngC+XhUHQwHwYDVR0j BBgwFoAUCothqETWwsevOO3L0WXQ7/uCPkUwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNzJjNDA1ZjEtYzMyZC00N2NlLTg5NDMtMDc1MmVkMTNk OGVmLzEvMEE4QjYxQTg0NEQ2QzJDN0FGMzhFRENCRDE2NUQwRUZGQjgyM0U0NS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC8wQThCNjFBODQ0RDZDMkM3QUYzOEVEQ0JE MTY1RDBFRkZCODIzRTQ1LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzcyYzQwNWYxLWMzMmQtNDdjZS04OTQzLTA3NTJlZDEzZDhlZi8xLzBBOEI2MUE4 NDRENkMyQzdBRjM4RURDQkQxNjVEMEVGRkI4MjNFNDUubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCL1JUF vzaHgl/nmLS9epERvubyWFFDLCUiH1m1oMo4e7i1JrMhDWIJO6zScBJfAAh7mHDk 24c6AQiNbkp6ER8gvjA2qhIYAGePNqbL9GykSLD7loo3oahic/jLwks8ECv64+ed hokEsEWN8NskxplfOgAh4VkSVQ04ceLAaNzs+jspCcamqp46Iosw59Xsp50bbTs9 6O7q2dsHBPZdKnnvHIuKaCwp+KpfEh+tb4V60VMxqovkK+fU6/RS4h01ndDOBM3q ztWbmWyrr53ARuE8oww/7X0cErOj6IwuMVpy2X+TIPgR5N82ve2PqDZ+m8FFUTlY 8I8kRFWv++K+0MsP -----END CERTIFICATE-----Generated at Sat Jun 6 04:12:22 2026 by rpki-client