$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/1/0A8B61A844D6C2C7AF38EDCBD165D0EFFB823E45.mft File: 0A8B61A844D6C2C7AF38EDCBD165D0EFFB823E45.mft (raw, json) Hash identifier: MX3yXpTephkEKIH898UWGNmk8/cD234Rsq9riRS0js0= Subject key identifier: 2C:BD:3A:1E:EE:16:AE:97:3C:E9:F7:9D:BD:EC:A4:F2:F9:23:A5:E1 Authority key identifier: 0A:8B:61:A8:44:D6:C2:C7:AF:38:ED:CB:D1:65:D0:EF:FB:82:3E:45 Certificate issuer: /CN=0A8B61A844D6C2C7AF38EDCBD165D0EFFB823E45 Certificate serial: 4DD6C2DBB6661725430C0A247E40001CA76E20B9 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/0A8B61A844D6C2C7AF38EDCBD165D0EFFB823E45.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/1/0A8B61A844D6C2C7AF38EDCBD165D0EFFB823E45.mft Manifest number: 03BC Signing time: Tue 21 Jul 2026 07:26:16 +0000 Manifest this update: Tue 21 Jul 2026 07:21:16 +0000 Manifest next update: Wed 22 Jul 2026 08:29:16 +0000 Files and hashes: 1: 326131343a373538313a6430303a3a2f34302d3438203d3e20323136343532.roa (hash: +2h0a7wgr0VV5Yf9tenQW+2b3nKEqNnM1bACdpjItzE=) 2: 326131343a373538343a373030303a3a2f33362d3434203d3e20323136343532.roa (hash: rpnwS+Y3sQ4e6qv+Gy6DoJIWfRow73aU7r2O2Z0c3vg=) 3: 0A8B61A844D6C2C7AF38EDCBD165D0EFFB823E45.crl (hash: ToSLzVBPE4W65hDBQmkUwmArgezS8P2osfvQ7hd+82A=) 4: 326131343a373538313a6430303a3a2f34342d3438203d3e203331383938.roa (hash: qE8L39SpyoEHdTGvG8S7ZOvpv47dDhK0u7Idd96jQN8=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/1/0A8B61A844D6C2C7AF38EDCBD165D0EFFB823E45.crl rsync://rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/1/0A8B61A844D6C2C7AF38EDCBD165D0EFFB823E45.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/0A8B61A844D6C2C7AF38EDCBD165D0EFFB823E45.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 22 Jul 2026 08:29:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:d6:c2:db:b6:66:17:25:43:0c:0a:24:7e:40:00:1c:a7:6e:20:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0A8B61A844D6C2C7AF38EDCBD165D0EFFB823E45 Validity Not Before: Jul 21 07:21:16 2026 GMT Not After : Jul 22 08:29:16 2026 GMT Subject: CN=2CBD3A1EEE16AE973CE9F79DBDECA4F2F923A5E1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:c3:41:37:c9:1a:20:b0:0d:6b:9a:4d:43:64: eb:f7:f5:04:d8:a9:59:09:e2:68:8c:62:09:b0:24: fb:3e:92:98:f4:eb:15:32:2b:24:c4:80:d0:fe:3b: a9:84:de:5d:c7:b5:07:ea:42:41:b3:48:1c:0c:eb: d1:45:03:23:71:76:84:5d:fa:78:13:0f:44:93:a3: 06:f8:76:7e:3e:57:ff:8c:d4:81:bb:11:83:d6:d3: b9:a2:4c:6f:a5:12:7b:3f:9e:0d:c5:a3:ba:c6:e5: 6a:a5:49:be:b4:92:c2:94:a1:0f:6c:9a:5d:e0:ba: 3a:41:35:56:61:00:39:97:d1:c5:3c:ce:2d:5c:c4: 5f:c9:47:f4:29:d5:d9:7b:fb:d5:60:f3:48:da:b3: fe:76:9c:58:02:53:d8:7f:e6:24:aa:38:8b:32:33: 04:e3:b2:17:79:26:3f:48:a8:9f:af:49:97:6c:d9: cc:03:95:9e:f5:c1:be:80:4e:d2:67:0b:35:0d:96: 5a:b4:c0:1d:02:ea:e3:0a:ed:5b:69:39:a3:b0:d6: 11:a5:8f:05:fa:fd:f0:96:ab:ca:9f:84:01:d7:7c: cf:0d:f7:ff:09:a9:cc:3d:65:e2:1f:cb:09:4b:6d: 8e:ba:bf:a0:3d:e4:42:0b:61:80:d1:a8:35:74:51: 1d:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:BD:3A:1E:EE:16:AE:97:3C:E9:F7:9D:BD:EC:A4:F2:F9:23:A5:E1 X509v3 Authority Key Identifier: keyid:0A:8B:61:A8:44:D6:C2:C7:AF:38:ED:CB:D1:65:D0:EF:FB:82:3E:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/1/0A8B61A844D6C2C7AF38EDCBD165D0EFFB823E45.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/0A8B61A844D6C2C7AF38EDCBD165D0EFFB823E45.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/1/0A8B61A844D6C2C7AF38EDCBD165D0EFFB823E45.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:13:e2:c0:5a:ee:cf:32:08:c3:e3:b6:9c:92:f2:4e:db:97: 48:06:cb:11:74:34:95:00:74:e8:16:58:32:d2:c1:45:98:e5: 10:86:32:50:7d:40:37:65:d1:78:ec:0b:89:49:fe:c7:b0:f7: 80:0f:95:0d:db:24:df:e3:11:56:bf:80:f6:f4:9a:cf:d0:7b: 40:7f:08:40:96:04:8e:d7:99:52:0d:8e:11:dc:f2:d9:3a:6c: 3a:a4:88:93:f5:c9:67:a0:12:92:4c:74:1b:22:81:5b:93:e0: 39:04:49:dc:85:62:b7:b6:c0:47:90:40:b3:7a:cd:a7:18:1a: 92:19:1f:c6:55:46:af:42:42:95:65:14:3e:d5:63:8e:c5:f5: 4f:40:4b:6a:80:45:40:f3:a8:14:08:65:b9:27:ea:76:69:a8: 95:a7:7b:08:4e:ae:b5:fe:f3:ca:c7:b2:21:7b:c5:10:56:2f: 16:c1:ca:25:50:d1:2d:68:fc:af:b9:f5:08:cf:60:07:96:e4: 36:7f:df:0b:17:d1:5b:ad:db:b9:3d:9f:b7:fd:0d:cf:46:4b: 91:46:cf:b4:b9:ca:34:44:5c:24:11:5d:11:93:e3:a8:36:bf: 54:fa:6b:c0:74:b4:1b:b8:83:2b:70:05:fb:76:f9:20:04:3b: a1:29:60:33 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUTdbC27ZmFyVDDAokfkAAHKduILkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEE4QjYxQTg0NEQ2QzJDN0FGMzhFRENCRDE2NUQwRUZG QjgyM0U0NTAeFw0yNjA3MjEwNzIxMTZaFw0yNjA3MjIwODI5MTZaMDMxMTAvBgNV BAMTKDJDQkQzQTFFRUUxNkFFOTczQ0U5Rjc5REJERUNBNEYyRjkyM0E1RTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2w0E3yRogsA1rmk1DZOv39QTY qVkJ4miMYgmwJPs+kpj06xUyKyTEgND+O6mE3l3HtQfqQkGzSBwM69FFAyNxdoRd +ngTD0STowb4dn4+V/+M1IG7EYPW07miTG+lEns/ng3Fo7rG5WqlSb60ksKUoQ9s ml3gujpBNVZhADmX0cU8zi1cxF/JR/Qp1dl7+9Vg80jas/52nFgCU9h/5iSqOIsy MwTjshd5Jj9IqJ+vSZds2cwDlZ71wb6ATtJnCzUNllq0wB0C6uMK7VtpOaOw1hGl jwX6/fCWq8qfhAHXfM8N9/8Jqcw9ZeIfywlLbY66v6A95EILYYDRqDV0UR2rAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQULL06Hu4Wrpc86fedveyk8vkjpeEwHwYDVR0j BBgwFoAUCothqETWwsevOO3L0WXQ7/uCPkUwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNzJjNDA1ZjEtYzMyZC00N2NlLTg5NDMtMDc1MmVkMTNk OGVmLzEvMEE4QjYxQTg0NEQ2QzJDN0FGMzhFRENCRDE2NUQwRUZGQjgyM0U0NS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC8wQThCNjFBODQ0RDZDMkM3QUYzOEVEQ0JE MTY1RDBFRkZCODIzRTQ1LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzcyYzQwNWYxLWMzMmQtNDdjZS04OTQzLTA3NTJlZDEzZDhlZi8xLzBBOEI2MUE4 NDRENkMyQzdBRjM4RURDQkQxNjVEMEVGRkI4MjNFNDUubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBdE+LA Wu7PMgjD47ackvJO25dIBssRdDSVAHToFlgy0sFFmOUQhjJQfUA3ZdF47AuJSf7H sPeAD5UN2yTf4xFWv4D29JrP0HtAfwhAlgSO15lSDY4R3PLZOmw6pIiT9clnoBKS THQbIoFbk+A5BEnchWK3tsBHkECzes2nGBqSGR/GVUavQkKVZRQ+1WOOxfVPQEtq gEVA86gUCGW5J+p2aaiVp3sITq61/vPKx7Ihe8UQVi8WwcolUNEtaPyvufUIz2AH luQ2f98LF9Fbrdu5PZ+3/Q3PRkuRRs+0uco0RFwkEV0Rk+OoNr9U+mvAdLQbuIMr cAX7dvkgBDuhKWAz -----END CERTIFICATE-----Generated at Tue Jul 21 18:25:30 2026 by rpki-client