$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/1/0A8B61A844D6C2C7AF38EDCBD165D0EFFB823E45.mft File: 0A8B61A844D6C2C7AF38EDCBD165D0EFFB823E45.mft (raw, json) Hash identifier: BfCh4bPw82D1qQHTpTDWrT3whp9mq0P6R4hUCMJwDzg= Subject key identifier: CE:5F:6D:96:E5:A7:B9:85:EA:BD:2F:47:BC:B5:E7:BE:9F:4B:56:58 Authority key identifier: 0A:8B:61:A8:44:D6:C2:C7:AF:38:ED:CB:D1:65:D0:EF:FB:82:3E:45 Certificate issuer: /CN=0A8B61A844D6C2C7AF38EDCBD165D0EFFB823E45 Certificate serial: 56A2F90816EC7F7609434C5571D2D13CE2788D4B Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/0A8B61A844D6C2C7AF38EDCBD165D0EFFB823E45.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/1/0A8B61A844D6C2C7AF38EDCBD165D0EFFB823E45.mft Manifest number: 03B7 Signing time: Fri 17 Jul 2026 14:01:16 +0000 Manifest this update: Fri 17 Jul 2026 13:56:16 +0000 Manifest next update: Sat 18 Jul 2026 16:51:16 +0000 Files and hashes: 1: 0A8B61A844D6C2C7AF38EDCBD165D0EFFB823E45.crl (hash: JoMyzQZ6JgkoFZ7guzwN4TGX+FEVXRlWJgMYEEbz4fY=) 2: 326131343a373538313a6430303a3a2f34342d3438203d3e203331383938.roa (hash: qE8L39SpyoEHdTGvG8S7ZOvpv47dDhK0u7Idd96jQN8=) 3: 326131343a373538313a6430303a3a2f34302d3438203d3e20323136343532.roa (hash: +2h0a7wgr0VV5Yf9tenQW+2b3nKEqNnM1bACdpjItzE=) 4: 326131343a373538343a373030303a3a2f33362d3434203d3e20323136343532.roa (hash: rpnwS+Y3sQ4e6qv+Gy6DoJIWfRow73aU7r2O2Z0c3vg=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/1/0A8B61A844D6C2C7AF38EDCBD165D0EFFB823E45.crl rsync://rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/1/0A8B61A844D6C2C7AF38EDCBD165D0EFFB823E45.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/0A8B61A844D6C2C7AF38EDCBD165D0EFFB823E45.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 18 Jul 2026 16:51:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:a2:f9:08:16:ec:7f:76:09:43:4c:55:71:d2:d1:3c:e2:78:8d:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0A8B61A844D6C2C7AF38EDCBD165D0EFFB823E45 Validity Not Before: Jul 17 13:56:16 2026 GMT Not After : Jul 18 16:51:16 2026 GMT Subject: CN=CE5F6D96E5A7B985EABD2F47BCB5E7BE9F4B5658 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:4e:ba:14:03:40:eb:6a:a9:dd:a7:2e:4e:e4: 6f:b2:d8:10:d2:1b:3e:6b:d9:2d:f4:ad:f2:5e:76: 2b:d0:ae:b6:2a:c0:b7:59:25:e0:09:3f:47:b9:1f: 95:1f:d8:71:bc:d9:4e:17:4b:ba:e8:69:71:f6:11: d2:18:45:63:6a:35:9a:c7:42:e4:75:14:f0:83:63: 35:28:57:b9:40:55:00:70:64:42:a5:22:35:b2:bc: 5c:f0:76:f6:67:01:2d:a7:63:c4:dd:57:91:81:b8: 0a:fd:b7:7d:1b:a1:dc:97:f4:85:c9:5f:9d:0e:06: 65:af:c3:b9:23:f1:cc:90:4e:bf:2e:c3:36:64:89: de:f9:72:c3:91:b5:51:c4:8a:b7:25:e1:4d:be:37: 5f:14:6b:b6:a3:58:20:e2:18:23:cb:a3:f4:34:3d: 02:a8:6d:8f:55:13:9a:d9:73:38:30:55:5b:71:39: 5c:ef:ed:ce:18:38:de:c9:90:ac:e9:1c:c0:e1:ab: c1:67:2a:a2:8c:dd:82:fa:79:b7:15:b5:e1:5d:0e: 3a:84:4d:d5:a6:01:26:ec:80:01:d5:da:cc:5d:18: 6d:17:67:7a:d8:8a:06:02:1f:29:fb:f2:d4:05:55: d2:a8:32:ae:43:c4:88:1e:0e:3e:4f:35:64:96:1d: 89:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:5F:6D:96:E5:A7:B9:85:EA:BD:2F:47:BC:B5:E7:BE:9F:4B:56:58 X509v3 Authority Key Identifier: keyid:0A:8B:61:A8:44:D6:C2:C7:AF:38:ED:CB:D1:65:D0:EF:FB:82:3E:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/1/0A8B61A844D6C2C7AF38EDCBD165D0EFFB823E45.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/0A8B61A844D6C2C7AF38EDCBD165D0EFFB823E45.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/1/0A8B61A844D6C2C7AF38EDCBD165D0EFFB823E45.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:8c:1e:89:91:ff:c8:43:0b:fc:eb:cb:f1:55:2f:16:ed:15: 03:17:f8:a0:50:79:59:92:24:4d:6f:8e:e4:68:05:0d:16:c5: 9d:a3:9f:41:5a:f0:b8:5a:17:c4:e3:b5:16:5f:ef:c6:f2:b3: da:cb:3a:40:7d:fb:3b:62:90:ff:a6:b9:0d:37:e6:2b:f7:e1: 1b:81:8c:97:13:ab:91:60:0f:b1:ea:57:fb:e2:cf:89:a3:49: d9:fc:70:1b:47:61:7c:66:b8:c3:c1:fb:fc:48:7e:0b:9a:ea: 29:e2:d3:ab:88:4e:ee:63:b0:90:0a:bc:19:bb:69:19:b1:8e: 62:24:0c:49:3f:7f:26:83:a5:c1:4c:0e:6c:37:fc:70:a6:fe: f8:18:ac:f9:46:31:b3:52:ad:4a:8e:35:e7:18:d0:95:08:44: 98:18:51:70:1d:46:0c:9b:eb:dc:94:2a:d7:ac:77:25:92:6e: 2e:b9:37:88:3d:b5:e2:7b:4b:48:2a:00:07:c0:dc:6f:e5:2e: 62:65:aa:f0:6c:d6:69:53:f3:d4:5e:8e:74:63:26:85:7c:b0: 35:0e:f5:e8:50:25:1b:2a:f9:59:51:74:27:b1:a3:e9:ee:1a: 11:55:47:54:36:66:57:2b:76:bc:87:9d:03:21:19:08:ee:63: 5f:ff:92:5e -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUVqL5CBbsf3YJQ0xVcdLRPOJ4jUswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEE4QjYxQTg0NEQ2QzJDN0FGMzhFRENCRDE2NUQwRUZG QjgyM0U0NTAeFw0yNjA3MTcxMzU2MTZaFw0yNjA3MTgxNjUxMTZaMDMxMTAvBgNV BAMTKENFNUY2RDk2RTVBN0I5ODVFQUJEMkY0N0JDQjVFN0JFOUY0QjU2NTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdTroUA0Draqndpy5O5G+y2BDS Gz5r2S30rfJedivQrrYqwLdZJeAJP0e5H5Uf2HG82U4XS7roaXH2EdIYRWNqNZrH QuR1FPCDYzUoV7lAVQBwZEKlIjWyvFzwdvZnAS2nY8TdV5GBuAr9t30bodyX9IXJ X50OBmWvw7kj8cyQTr8uwzZkid75csORtVHEircl4U2+N18Ua7ajWCDiGCPLo/Q0 PQKobY9VE5rZczgwVVtxOVzv7c4YON7JkKzpHMDhq8FnKqKM3YL6ebcVteFdDjqE TdWmASbsgAHV2sxdGG0XZ3rYigYCHyn78tQFVdKoMq5DxIgeDj5PNWSWHYlbAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUzl9tluWnuYXqvS9HvLXnvp9LVlgwHwYDVR0j BBgwFoAUCothqETWwsevOO3L0WXQ7/uCPkUwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNzJjNDA1ZjEtYzMyZC00N2NlLTg5NDMtMDc1MmVkMTNk OGVmLzEvMEE4QjYxQTg0NEQ2QzJDN0FGMzhFRENCRDE2NUQwRUZGQjgyM0U0NS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC8wQThCNjFBODQ0RDZDMkM3QUYzOEVEQ0JE MTY1RDBFRkZCODIzRTQ1LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzcyYzQwNWYxLWMzMmQtNDdjZS04OTQzLTA3NTJlZDEzZDhlZi8xLzBBOEI2MUE4 NDRENkMyQzdBRjM4RURDQkQxNjVEMEVGRkI4MjNFNDUubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQB5jB6J kf/IQwv868vxVS8W7RUDF/igUHlZkiRNb47kaAUNFsWdo59BWvC4WhfE47UWX+/G 8rPayzpAffs7YpD/prkNN+Yr9+EbgYyXE6uRYA+x6lf74s+Jo0nZ/HAbR2F8ZrjD wfv8SH4Lmuop4tOriE7uY7CQCrwZu2kZsY5iJAxJP38mg6XBTA5sN/xwpv74GKz5 RjGzUq1KjjXnGNCVCESYGFFwHUYMm+vclCrXrHclkm4uuTeIPbXie0tIKgAHwNxv 5S5iZarwbNZpU/PUXo50YyaFfLA1DvXoUCUbKvlZUXQnsaPp7hoRVUdUNmZXK3a8 h50DIRkI7mNf/5Je -----END CERTIFICATE-----Generated at Sat Jul 18 06:34:19 2026 by rpki-client