$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/1/0A8B61A844D6C2C7AF38EDCBD165D0EFFB823E45.mft File: 0A8B61A844D6C2C7AF38EDCBD165D0EFFB823E45.mft (raw, json) Hash identifier: pQmUs6FEtrdTm0F68CYuoXYQV36eFeZxYLAzVR6v5Nw= Subject key identifier: E4:E6:E2:7A:2F:6D:42:14:91:E4:B4:4C:DB:36:8D:66:75:27:07:DB Authority key identifier: 0A:8B:61:A8:44:D6:C2:C7:AF:38:ED:CB:D1:65:D0:EF:FB:82:3E:45 Certificate issuer: /CN=0A8B61A844D6C2C7AF38EDCBD165D0EFFB823E45 Certificate serial: 70EF278DE704576E53A72A0AE25C01881B62893C Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/0A8B61A844D6C2C7AF38EDCBD165D0EFFB823E45.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/1/0A8B61A844D6C2C7AF38EDCBD165D0EFFB823E45.mft Manifest number: 03F9 Signing time: Fri 04 Sep 2026 09:34:34 +0000 Manifest this update: Fri 04 Sep 2026 09:29:34 +0000 Manifest next update: Sat 05 Sep 2026 12:49:34 +0000 Files and hashes: 1: 0A8B61A844D6C2C7AF38EDCBD165D0EFFB823E45.crl (hash: +DHN26tw77hSup+DwZYnQk2HdFZc71XXXtmvU9uLqyQ=) 2: 326131343a373538343a373030303a3a2f33362d3434203d3e20323136343532.roa (hash: rpnwS+Y3sQ4e6qv+Gy6DoJIWfRow73aU7r2O2Z0c3vg=) 3: 326131343a373538313a6430303a3a2f34342d3438203d3e203331383938.roa (hash: qE8L39SpyoEHdTGvG8S7ZOvpv47dDhK0u7Idd96jQN8=) 4: 326131343a373538313a6430303a3a2f34302d3438203d3e20323136343532.roa (hash: +2h0a7wgr0VV5Yf9tenQW+2b3nKEqNnM1bACdpjItzE=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/1/0A8B61A844D6C2C7AF38EDCBD165D0EFFB823E45.crl rsync://rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/1/0A8B61A844D6C2C7AF38EDCBD165D0EFFB823E45.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/0A8B61A844D6C2C7AF38EDCBD165D0EFFB823E45.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 05 Sep 2026 12:49:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:ef:27:8d:e7:04:57:6e:53:a7:2a:0a:e2:5c:01:88:1b:62:89:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0A8B61A844D6C2C7AF38EDCBD165D0EFFB823E45 Validity Not Before: Sep 4 09:29:34 2026 GMT Not After : Sep 5 12:49:34 2026 GMT Subject: CN=E4E6E27A2F6D421491E4B44CDB368D66752707DB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:4a:d3:45:17:d7:28:91:9b:be:a8:14:42:f2: 6f:1a:7f:36:dc:e1:ac:c4:de:74:31:74:ab:5f:c3: da:48:79:cb:0a:ae:76:2f:61:11:d8:8a:a7:3f:14: 63:81:18:75:72:e8:12:49:6b:4c:43:de:bf:aa:2b: 57:52:0a:80:5c:5e:16:99:87:65:26:89:49:09:35: 93:d0:57:f7:47:99:f8:98:68:e1:e6:89:60:dd:51: 7a:5d:b5:3a:41:f2:ef:27:62:48:7d:53:2d:d2:e2: 65:a8:dd:97:82:7b:e9:f6:99:db:f9:74:79:1e:f8: 40:da:c4:ef:7d:ad:64:63:7e:fb:af:a0:63:29:53: e1:ce:cf:b8:08:91:61:2e:83:10:fc:3e:08:67:62: b5:cf:66:68:89:91:c6:b8:cb:58:be:b0:8a:06:a8: 29:40:37:20:24:60:d1:98:6c:3f:be:87:2a:4a:a2: 7d:85:7b:05:d1:30:84:50:30:08:60:a4:fb:f2:1b: 78:4a:94:ca:b6:23:94:07:f3:89:fd:ff:1e:50:c5: 79:90:39:64:35:d7:ae:3b:dd:40:a2:ec:95:94:2e: b0:ea:eb:18:a3:5e:ac:e1:e5:c1:41:37:18:a5:32: 6d:bb:7c:ae:cd:1d:70:49:aa:9e:75:a5:0c:c3:9e: 2c:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:E6:E2:7A:2F:6D:42:14:91:E4:B4:4C:DB:36:8D:66:75:27:07:DB X509v3 Authority Key Identifier: keyid:0A:8B:61:A8:44:D6:C2:C7:AF:38:ED:CB:D1:65:D0:EF:FB:82:3E:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/1/0A8B61A844D6C2C7AF38EDCBD165D0EFFB823E45.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/0A8B61A844D6C2C7AF38EDCBD165D0EFFB823E45.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/1/0A8B61A844D6C2C7AF38EDCBD165D0EFFB823E45.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:cf:ce:21:f9:2d:81:93:2a:60:a6:75:54:1d:35:84:4e:af: e7:43:ca:4d:03:15:a8:41:83:2f:db:36:3b:c9:8e:5f:ea:42: c8:3a:de:01:7f:38:0e:7d:be:fe:09:00:d7:03:62:73:78:7a: c0:53:51:28:e3:e5:2b:20:70:2d:e4:1a:f5:a3:8b:04:ea:63: 9c:74:4c:6c:51:cb:5a:86:d3:3a:6d:50:3d:3d:89:2e:36:ea: 9f:0b:bb:c7:6d:7b:a2:c0:a8:82:6f:af:fb:46:50:37:51:4e: a4:c3:0b:37:26:76:d3:11:1f:04:8c:47:e1:dc:6c:57:63:18: de:c1:af:0d:f5:f8:e2:73:7f:34:c2:b3:3b:1c:bb:f3:25:1a: d2:26:bc:02:46:61:4c:41:f5:8d:0c:91:d6:90:8d:2d:1a:34: a6:39:30:c6:d0:86:83:c4:05:b3:07:3a:0c:7d:99:f0:14:70: b1:ea:b7:68:9c:0b:08:97:fb:61:1e:62:35:53:16:10:48:ae: c1:9d:34:db:e9:6d:67:91:6d:48:eb:c1:97:c9:89:9a:81:28: 2b:45:01:8f:d3:3f:e1:3e:8a:9d:81:10:c3:d5:48:ec:dc:94: 68:43:b5:ad:4a:d2:d6:e7:69:5b:e8:05:3c:09:7a:ff:30:09: 81:53:c1:7d -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUcO8njecEV25TpyoK4lwBiBtiiTwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEE4QjYxQTg0NEQ2QzJDN0FGMzhFRENCRDE2NUQwRUZG QjgyM0U0NTAeFw0yNjA5MDQwOTI5MzRaFw0yNjA5MDUxMjQ5MzRaMDMxMTAvBgNV BAMTKEU0RTZFMjdBMkY2RDQyMTQ5MUU0QjQ0Q0RCMzY4RDY2NzUyNzA3REIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDxStNFF9cokZu+qBRC8m8afzbc 4azE3nQxdKtfw9pIecsKrnYvYRHYiqc/FGOBGHVy6BJJa0xD3r+qK1dSCoBcXhaZ h2UmiUkJNZPQV/dHmfiYaOHmiWDdUXpdtTpB8u8nYkh9Uy3S4mWo3ZeCe+n2mdv5 dHke+EDaxO99rWRjfvuvoGMpU+HOz7gIkWEugxD8PghnYrXPZmiJkca4y1i+sIoG qClANyAkYNGYbD++hypKon2FewXRMIRQMAhgpPvyG3hKlMq2I5QH84n9/x5QxXmQ OWQ116473UCi7JWULrDq6xijXqzh5cFBNxilMm27fK7NHXBJqp51pQzDniztAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQU5Obiei9tQhSR5LRM2zaNZnUnB9swHwYDVR0j BBgwFoAUCothqETWwsevOO3L0WXQ7/uCPkUwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNzJjNDA1ZjEtYzMyZC00N2NlLTg5NDMtMDc1MmVkMTNk OGVmLzEvMEE4QjYxQTg0NEQ2QzJDN0FGMzhFRENCRDE2NUQwRUZGQjgyM0U0NS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC8wQThCNjFBODQ0RDZDMkM3QUYzOEVEQ0JE MTY1RDBFRkZCODIzRTQ1LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzcyYzQwNWYxLWMzMmQtNDdjZS04OTQzLTA3NTJlZDEzZDhlZi8xLzBBOEI2MUE4 NDRENkMyQzdBRjM4RURDQkQxNjVEMEVGRkI4MjNFNDUubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAdz84h +S2BkypgpnVUHTWETq/nQ8pNAxWoQYMv2zY7yY5f6kLIOt4BfzgOfb7+CQDXA2Jz eHrAU1Eo4+UrIHAt5Br1o4sE6mOcdExsUctahtM6bVA9PYkuNuqfC7vHbXuiwKiC b6/7RlA3UU6kwws3JnbTER8EjEfh3GxXYxjewa8N9fjic380wrM7HLvzJRrSJrwC RmFMQfWNDJHWkI0tGjSmOTDG0IaDxAWzBzoMfZnwFHCx6rdonAsIl/thHmI1UxYQ SK7BnTTb6W1nkW1I68GXyYmagSgrRQGP0z/hPoqdgRDD1Ujs3JRoQ7WtStLW52lb 6AU8CXr/MAmBU8F9 -----END CERTIFICATE-----Generated at Fri Sep 4 23:42:33 2026 by rpki-client