$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/1/0A8B61A844D6C2C7AF38EDCBD165D0EFFB823E45.mft File: 0A8B61A844D6C2C7AF38EDCBD165D0EFFB823E45.mft (raw, json) Hash identifier: 7AsNn4UKqzymXsdBVweZir8lCoGdbpy0mx902l1hIMg= Subject key identifier: D5:C7:28:38:7C:6D:B6:07:21:D9:8E:64:04:B7:96:84:92:89:02:C7 Authority key identifier: 0A:8B:61:A8:44:D6:C2:C7:AF:38:ED:CB:D1:65:D0:EF:FB:82:3E:45 Certificate issuer: /CN=0A8B61A844D6C2C7AF38EDCBD165D0EFFB823E45 Certificate serial: 7A38EC67B3028E8C86AE9539F342E3C9B7B77332 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/0A8B61A844D6C2C7AF38EDCBD165D0EFFB823E45.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/1/0A8B61A844D6C2C7AF38EDCBD165D0EFFB823E45.mft Manifest number: 0337 Signing time: Mon 13 Apr 2026 09:36:01 +0000 Manifest this update: Mon 13 Apr 2026 09:31:01 +0000 Manifest next update: Tue 14 Apr 2026 13:14:01 +0000 Files and hashes: 1: 326131343a373538343a373030303a3a2f33362d3434203d3e20323136343532.roa (hash: bjWKUcdJK3JxiL+GqIgQQNiLJnq1CfKPBgs/UuOHrJA=) 2: 326131343a373538313a6430303a3a2f34302d3438203d3e20323136343532.roa (hash: jAqeRW+G0tj75/HjlTu9upVrXQ/2AvwaP0ubMorKA1Q=) 3: 0A8B61A844D6C2C7AF38EDCBD165D0EFFB823E45.crl (hash: /99GBGaFbGAI2m4r1m70+TgtVvqQLRyL19TTWtW+rTU=) 4: 326131343a373538313a6430303a3a2f34342d3438203d3e203331383938.roa (hash: OYFGGb9dMqAtV18cBeD3NbZ0TuwCvJXmn37LZwaW7zg=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/1/0A8B61A844D6C2C7AF38EDCBD165D0EFFB823E45.crl rsync://rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/1/0A8B61A844D6C2C7AF38EDCBD165D0EFFB823E45.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/0A8B61A844D6C2C7AF38EDCBD165D0EFFB823E45.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 14 Apr 2026 12:52:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:38:ec:67:b3:02:8e:8c:86:ae:95:39:f3:42:e3:c9:b7:b7:73:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0A8B61A844D6C2C7AF38EDCBD165D0EFFB823E45 Validity Not Before: Apr 13 09:31:01 2026 GMT Not After : Apr 14 13:14:01 2026 GMT Subject: CN=D5C728387C6DB60721D98E6404B79684928902C7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:0e:6a:1e:ea:3e:12:db:ff:f5:3b:2f:1c:1c: 2b:82:0e:37:15:6a:3e:30:6a:76:f2:14:6a:44:6c: a0:65:ba:3b:1f:e6:f1:85:27:62:ca:82:28:a4:4a: 4a:ec:50:03:cf:ac:2b:fd:ac:89:5d:71:70:27:bf: 7c:89:3c:4b:a8:f4:c6:ab:6c:72:8b:c5:2d:ae:1a: 33:60:f3:e3:79:ef:5a:e8:6d:2d:d7:3e:7a:4f:7c: 7b:88:b3:5e:42:f6:47:44:71:f8:2c:a3:bf:63:8c: c9:65:a6:09:75:63:35:6a:0a:94:47:d0:9b:b6:26: f3:3a:c6:fa:c2:f2:36:a2:7e:63:8f:b8:29:b8:cc: b8:d2:cf:4d:76:19:c4:ec:68:ff:c8:3d:0a:86:81: e9:1b:92:4c:a2:15:85:7b:83:54:38:c6:ec:41:a6: a9:a1:8e:77:25:54:82:c2:6c:7e:92:48:40:23:d8: bb:e5:cc:fb:fe:3d:ed:7a:54:ee:d4:92:4a:c3:a1: 20:e5:97:54:84:7e:db:13:d6:f9:ae:79:28:56:7f: da:f2:72:aa:d9:6e:8f:61:3d:fa:b4:bd:90:3c:17: 44:46:52:d3:86:19:dd:f1:d2:76:9c:3e:27:33:80: ae:52:8e:f9:78:67:7e:16:fd:af:f3:ac:89:21:fb: b5:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:C7:28:38:7C:6D:B6:07:21:D9:8E:64:04:B7:96:84:92:89:02:C7 X509v3 Authority Key Identifier: keyid:0A:8B:61:A8:44:D6:C2:C7:AF:38:ED:CB:D1:65:D0:EF:FB:82:3E:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/1/0A8B61A844D6C2C7AF38EDCBD165D0EFFB823E45.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/0A8B61A844D6C2C7AF38EDCBD165D0EFFB823E45.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/1/0A8B61A844D6C2C7AF38EDCBD165D0EFFB823E45.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:48:d0:c5:2b:ab:fd:be:d8:ee:91:99:b4:ae:53:ce:9f:57: 8f:9f:2c:04:c9:cb:b1:33:4a:f0:c9:c9:a4:4e:91:f6:54:44: d6:fe:a9:64:ad:5e:23:a7:1c:36:f7:0f:67:af:df:3e:21:89: ac:0f:ee:26:cc:32:9e:d4:12:d6:7e:bc:f8:28:58:e9:46:aa: 9f:ae:be:cf:dd:18:a6:01:8c:b4:5e:cf:1d:b2:b3:fa:ce:80: 3a:fc:e6:55:d5:07:91:4d:d4:de:0e:ee:27:1a:f9:3d:eb:e2: 59:d0:72:55:21:7a:13:20:76:21:4a:ae:b7:96:d7:41:33:a4: 63:ed:d7:25:b5:c7:56:f2:ca:7e:b8:30:7f:6e:d8:b4:ee:67: b6:f1:da:6b:86:81:23:2d:0c:db:84:4e:da:d6:c5:7e:fc:ed: bd:84:b5:ab:23:09:a7:6b:24:a0:d3:f8:e5:15:29:4a:9b:14: a1:77:be:66:a0:fc:87:99:a3:b9:40:b2:97:e4:77:18:09:3a: c6:0b:7b:4f:54:f0:43:af:87:d2:37:17:46:e1:54:11:38:19: 47:1c:f4:60:d2:dc:63:3b:68:10:63:ce:ac:a9:c3:b2:6e:f8: 18:d4:ae:03:2d:02:99:7b:30:cd:6a:b7:83:42:ce:08:aa:27: 87:7c:26:2d -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUejjsZ7MCjoyGrpU580Ljybe3czIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEE4QjYxQTg0NEQ2QzJDN0FGMzhFRENCRDE2NUQwRUZG QjgyM0U0NTAeFw0yNjA0MTMwOTMxMDFaFw0yNjA0MTQxMzE0MDFaMDMxMTAvBgNV BAMTKEQ1QzcyODM4N0M2REI2MDcyMUQ5OEU2NDA0Qjc5Njg0OTI4OTAyQzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDvDmoe6j4S2//1Oy8cHCuCDjcV aj4wanbyFGpEbKBlujsf5vGFJ2LKgiikSkrsUAPPrCv9rIldcXAnv3yJPEuo9Mar bHKLxS2uGjNg8+N571robS3XPnpPfHuIs15C9kdEcfgso79jjMllpgl1YzVqCpRH 0Ju2JvM6xvrC8jaifmOPuCm4zLjSz012GcTsaP/IPQqGgekbkkyiFYV7g1Q4xuxB pqmhjnclVILCbH6SSEAj2LvlzPv+Pe16VO7UkkrDoSDll1SEftsT1vmueShWf9ry cqrZbo9hPfq0vZA8F0RGUtOGGd3x0nacPiczgK5Sjvl4Z34W/a/zrIkh+7VRAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQU1ccoOHxttgch2Y5kBLeWhJKJAscwHwYDVR0j BBgwFoAUCothqETWwsevOO3L0WXQ7/uCPkUwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNzJjNDA1ZjEtYzMyZC00N2NlLTg5NDMtMDc1MmVkMTNk OGVmLzEvMEE4QjYxQTg0NEQ2QzJDN0FGMzhFRENCRDE2NUQwRUZGQjgyM0U0NS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC8wQThCNjFBODQ0RDZDMkM3QUYzOEVEQ0JE MTY1RDBFRkZCODIzRTQ1LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzcyYzQwNWYxLWMzMmQtNDdjZS04OTQzLTA3NTJlZDEzZDhlZi8xLzBBOEI2MUE4 NDRENkMyQzdBRjM4RURDQkQxNjVEMEVGRkI4MjNFNDUubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBKSNDF K6v9vtjukZm0rlPOn1ePnywEycuxM0rwycmkTpH2VETW/qlkrV4jpxw29w9nr98+ IYmsD+4mzDKe1BLWfrz4KFjpRqqfrr7P3RimAYy0Xs8dsrP6zoA6/OZV1QeRTdTe Du4nGvk96+JZ0HJVIXoTIHYhSq63ltdBM6Rj7dcltcdW8sp+uDB/bti07me28dpr hoEjLQzbhE7a1sV+/O29hLWrIwmnaySg0/jlFSlKmxShd75moPyHmaO5QLKX5HcY CTrGC3tPVPBDr4fSNxdG4VQROBlHHPRg0txjO2gQY86sqcOybvgY1K4DLQKZezDN areDQs4IqieHfCYt -----END CERTIFICATE-----Generated at Mon Apr 13 18:23:12 2026 by rpki-client