$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/1/0A8B61A844D6C2C7AF38EDCBD165D0EFFB823E45.mft File: 0A8B61A844D6C2C7AF38EDCBD165D0EFFB823E45.mft (raw, json) Hash identifier: Wle0IVreMvLdW844iNuvwdvgYn5t67o8N6hK/akifJw= Subject key identifier: 8C:24:39:EF:61:47:82:00:48:21:40:15:A9:48:1D:F7:E3:4C:99:7E Authority key identifier: 0A:8B:61:A8:44:D6:C2:C7:AF:38:ED:CB:D1:65:D0:EF:FB:82:3E:45 Certificate issuer: /CN=0A8B61A844D6C2C7AF38EDCBD165D0EFFB823E45 Certificate serial: 2ED941EF0D6A12A1A1A77624B7A33D66209A904F Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/0A8B61A844D6C2C7AF38EDCBD165D0EFFB823E45.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/1/0A8B61A844D6C2C7AF38EDCBD165D0EFFB823E45.mft Manifest number: 02F9 Signing time: Wed 25 Feb 2026 23:05:48 +0000 Manifest this update: Wed 25 Feb 2026 23:00:48 +0000 Manifest next update: Fri 27 Feb 2026 01:09:48 +0000 Files and hashes: 1: 326131343a373538313a6430303a3a2f34302d3438203d3e20323136343532.roa (hash: jAqeRW+G0tj75/HjlTu9upVrXQ/2AvwaP0ubMorKA1Q=) 2: 326131343a373538343a373030303a3a2f33362d3434203d3e20323136343532.roa (hash: bjWKUcdJK3JxiL+GqIgQQNiLJnq1CfKPBgs/UuOHrJA=) 3: 326131343a373538313a6430303a3a2f34342d3438203d3e203331383938.roa (hash: OYFGGb9dMqAtV18cBeD3NbZ0TuwCvJXmn37LZwaW7zg=) 4: 0A8B61A844D6C2C7AF38EDCBD165D0EFFB823E45.crl (hash: TDXMaZb7NXRTH3LlXOWeLiFE+2pCmlKlck7UtoEig5g=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/1/0A8B61A844D6C2C7AF38EDCBD165D0EFFB823E45.crl rsync://rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/1/0A8B61A844D6C2C7AF38EDCBD165D0EFFB823E45.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/0A8B61A844D6C2C7AF38EDCBD165D0EFFB823E45.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 26 Feb 2026 20:53:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:d9:41:ef:0d:6a:12:a1:a1:a7:76:24:b7:a3:3d:66:20:9a:90:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0A8B61A844D6C2C7AF38EDCBD165D0EFFB823E45 Validity Not Before: Feb 25 23:00:48 2026 GMT Not After : Feb 27 01:09:48 2026 GMT Subject: CN=8C2439EF6147820048214015A9481DF7E34C997E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:d2:28:41:47:fc:af:09:b7:46:42:41:72:06: f0:3d:54:73:13:5d:dd:a0:43:d5:03:c9:5b:00:d8: 35:ac:6a:cb:e2:8c:93:bf:f1:b8:c8:4c:ff:3b:6a: 27:ca:d4:1f:77:8c:7e:43:64:43:63:96:3d:29:1b: 6d:6f:dc:29:19:89:fb:2c:05:02:ed:92:3c:43:5d: fc:9e:2f:26:0d:7f:c3:d9:9c:f0:56:82:1a:c9:05: f8:62:62:3c:b2:1b:ff:2d:d5:26:86:de:fa:96:c2: 46:dc:38:dc:22:0f:a0:98:aa:59:80:8c:ac:33:03: ba:7b:18:d1:2b:2e:d4:1d:73:f3:e3:47:4c:43:47: 01:fa:74:5f:e4:d1:b2:84:62:34:b2:62:b1:46:1c: d1:5a:d5:36:4c:1c:16:ae:61:57:ec:a9:10:8a:a8: 04:1d:cc:b9:d8:87:71:ff:4f:85:83:8c:79:88:22: 22:ea:3a:f1:7c:32:9d:28:b3:50:fe:4f:13:b8:18: 8e:65:b3:57:72:20:e0:ec:f9:42:cc:84:ed:a0:d6: cd:19:83:96:c8:4d:7e:46:d1:b9:f6:a5:cf:26:26: 54:93:24:41:94:33:22:f3:85:66:14:04:37:99:21: df:61:b7:5d:1d:3b:37:0f:db:3e:3b:d9:7e:9e:1f: 2e:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:24:39:EF:61:47:82:00:48:21:40:15:A9:48:1D:F7:E3:4C:99:7E X509v3 Authority Key Identifier: keyid:0A:8B:61:A8:44:D6:C2:C7:AF:38:ED:CB:D1:65:D0:EF:FB:82:3E:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/1/0A8B61A844D6C2C7AF38EDCBD165D0EFFB823E45.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/0A8B61A844D6C2C7AF38EDCBD165D0EFFB823E45.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/1/0A8B61A844D6C2C7AF38EDCBD165D0EFFB823E45.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:0e:35:b6:06:49:2f:83:e9:c9:78:d8:1f:e6:8b:79:96:55: 30:4b:24:62:03:bd:52:c3:69:67:84:ec:ee:fa:b2:d8:65:5d: c0:79:3e:e8:7c:74:e2:32:d4:7e:9e:79:99:6b:08:ae:0d:75: fd:82:19:9e:7b:7c:53:7c:34:d1:f2:4b:e5:9c:f6:ba:05:ca: a2:1f:52:da:18:10:d9:17:92:3f:d3:6d:0f:86:c3:6e:34:ba: b9:ce:5c:38:48:f8:f3:f7:0b:5a:e5:c9:43:1b:e6:aa:46:70: 5f:a7:d7:26:a4:06:c6:21:2e:ad:9f:2b:f1:5f:65:56:49:5e: dd:db:14:3f:93:bd:30:1d:63:dd:0b:36:34:0e:d5:f6:84:5b: 76:75:ac:0a:22:6e:88:8b:0e:9c:c5:ad:cc:6c:09:d8:01:7f: 9d:fa:80:9d:50:a6:6d:47:0d:60:e8:fa:f5:eb:1d:24:0d:a3: f4:b4:09:f6:2d:29:68:37:18:f5:33:ad:e2:e4:8c:13:97:44: 81:5a:d8:3c:d6:c3:bf:60:69:0f:61:60:d0:f6:cc:74:57:1d: 5f:32:5b:c4:f8:6b:9f:2b:cf:07:86:39:74:3b:8d:f6:62:70: 2c:62:de:87:1a:b6:7c:43:18:74:b1:b9:bc:00:3f:2f:fc:dd: 96:6d:0a:88 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIULtlB7w1qEqGhp3Ykt6M9ZiCakE8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEE4QjYxQTg0NEQ2QzJDN0FGMzhFRENCRDE2NUQwRUZG QjgyM0U0NTAeFw0yNjAyMjUyMzAwNDhaFw0yNjAyMjcwMTA5NDhaMDMxMTAvBgNV BAMTKDhDMjQzOUVGNjE0NzgyMDA0ODIxNDAxNUE5NDgxREY3RTM0Qzk5N0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCx0ihBR/yvCbdGQkFyBvA9VHMT Xd2gQ9UDyVsA2DWsasvijJO/8bjITP87aifK1B93jH5DZENjlj0pG21v3CkZifss BQLtkjxDXfyeLyYNf8PZnPBWghrJBfhiYjyyG/8t1SaG3vqWwkbcONwiD6CYqlmA jKwzA7p7GNErLtQdc/PjR0xDRwH6dF/k0bKEYjSyYrFGHNFa1TZMHBauYVfsqRCK qAQdzLnYh3H/T4WDjHmIIiLqOvF8Mp0os1D+TxO4GI5ls1dyIODs+ULMhO2g1s0Z g5bITX5G0bn2pc8mJlSTJEGUMyLzhWYUBDeZId9ht10dOzcP2z472X6eHy6JAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUjCQ572FHggBIIUAVqUgd9+NMmX4wHwYDVR0j BBgwFoAUCothqETWwsevOO3L0WXQ7/uCPkUwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNzJjNDA1ZjEtYzMyZC00N2NlLTg5NDMtMDc1MmVkMTNk OGVmLzEvMEE4QjYxQTg0NEQ2QzJDN0FGMzhFRENCRDE2NUQwRUZGQjgyM0U0NS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC8wQThCNjFBODQ0RDZDMkM3QUYzOEVEQ0JE MTY1RDBFRkZCODIzRTQ1LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzcyYzQwNWYxLWMzMmQtNDdjZS04OTQzLTA3NTJlZDEzZDhlZi8xLzBBOEI2MUE4 NDRENkMyQzdBRjM4RURDQkQxNjVEMEVGRkI4MjNFNDUubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBxDjW2 Bkkvg+nJeNgf5ot5llUwSyRiA71Sw2lnhOzu+rLYZV3AeT7ofHTiMtR+nnmZawiu DXX9ghmee3xTfDTR8kvlnPa6BcqiH1LaGBDZF5I/020PhsNuNLq5zlw4SPjz9wta 5clDG+aqRnBfp9cmpAbGIS6tnyvxX2VWSV7d2xQ/k70wHWPdCzY0DtX2hFt2dawK Im6Iiw6cxa3MbAnYAX+d+oCdUKZtRw1g6Pr16x0kDaP0tAn2LSloNxj1M63i5IwT l0SBWtg81sO/YGkPYWDQ9sx0Vx1fMlvE+GufK88Hhjl0O432YnAsYt6HGrZ8Qxh0 sbm8AD8v/N2WbQqI -----END CERTIFICATE-----Generated at Thu Feb 26 05:03:13 2026 by rpki-client