$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/87d8db71-a5be-464c-a8b9-8b7b374ae3fa/1/8BD4F7EBFF9763C061D537B8A1D0872D70697632.mft File: 8BD4F7EBFF9763C061D537B8A1D0872D70697632.mft (raw, json) Hash identifier: uhrPixv/rY74nfMnCJFYwm50H913pqW9T3OJcHMYhwU= Subject key identifier: D3:BB:A9:0A:78:40:04:F4:10:9E:B8:B3:97:41:5E:54:49:D7:B2:72 Authority key identifier: 8B:D4:F7:EB:FF:97:63:C0:61:D5:37:B8:A1:D0:87:2D:70:69:76:32 Certificate issuer: /CN=8BD4F7EBFF9763C061D537B8A1D0872D70697632 Certificate serial: 66C1666D014104813B2D09EB2BA57BED621E3945 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/8BD4F7EBFF9763C061D537B8A1D0872D70697632.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/87d8db71-a5be-464c-a8b9-8b7b374ae3fa/1/8BD4F7EBFF9763C061D537B8A1D0872D70697632.mft Manifest number: 08 Signing time: Sat 06 Sep 2025 13:01:46 +0000 Manifest this update: Sat 06 Sep 2025 12:56:46 +0000 Manifest next update: Sun 07 Sep 2025 14:20:46 +0000 Files and hashes: 1: 326131343a373538333a663530303a3a2f34382d3438203d3e20323133363035.roa (hash: 9/oPKwR86cNPm2ExAL4kDJvYHegTDwwsjfTcMTofdOY=) 2: 8BD4F7EBFF9763C061D537B8A1D0872D70697632.crl (hash: uSkJnT3YIbPzi2sOOpNspT2bKab9210/rBt4w4UU/V4=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/87d8db71-a5be-464c-a8b9-8b7b374ae3fa/1/8BD4F7EBFF9763C061D537B8A1D0872D70697632.crl rsync://rsync.paas.rpki.ripe.net/repository/87d8db71-a5be-464c-a8b9-8b7b374ae3fa/1/8BD4F7EBFF9763C061D537B8A1D0872D70697632.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/8BD4F7EBFF9763C061D537B8A1D0872D70697632.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Sep 2025 14:20:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:c1:66:6d:01:41:04:81:3b:2d:09:eb:2b:a5:7b:ed:62:1e:39:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8BD4F7EBFF9763C061D537B8A1D0872D70697632 Validity Not Before: Sep 6 12:56:46 2025 GMT Not After : Sep 7 14:20:46 2025 GMT Subject: CN=D3BBA90A784004F4109EB8B397415E5449D7B272 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:d1:d8:2b:e0:91:f5:6b:38:2b:bf:6b:f1:9a: 90:0b:d8:82:70:94:9a:9b:b7:59:20:62:16:88:be: 74:cc:11:69:0c:17:44:52:d3:a0:0e:b2:41:1e:e0: 86:a7:82:98:8e:3d:c0:e3:bb:c3:58:29:a2:fe:2a: c5:3b:f5:0a:57:56:73:d2:e7:2c:af:2a:95:c6:36: 22:79:7b:0f:28:f6:be:27:a0:23:96:03:f4:f5:ec: 63:08:26:8c:28:35:da:4b:f3:1c:62:36:96:93:39: 01:c4:59:d4:12:2a:a1:a9:66:ce:7a:8e:3a:f7:35: 75:7b:b7:57:7a:a4:0d:e4:a1:d5:af:06:7d:5a:78: 2f:e6:fd:ad:bc:59:26:a9:44:c4:7d:ca:1b:64:ce: ea:7b:4c:6d:42:3f:15:1a:eb:f0:d9:72:e1:f4:6d: b2:84:aa:09:8f:a7:66:b5:4b:b2:ca:d2:c1:1a:ab: 5f:19:09:af:a5:d7:2d:fa:e4:26:80:03:2f:c6:86: cb:20:09:1e:a8:1f:b4:e1:88:bf:31:0a:bd:79:70: 1c:c5:e9:9e:17:a0:e7:1b:fa:f0:2c:33:bb:39:d3: 7a:ad:d2:e8:55:e9:18:d0:0a:cd:04:53:b6:49:7d: 21:a5:6c:9d:04:40:a0:9b:cf:7c:d2:de:6e:f2:27: 2a:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:BB:A9:0A:78:40:04:F4:10:9E:B8:B3:97:41:5E:54:49:D7:B2:72 X509v3 Authority Key Identifier: keyid:8B:D4:F7:EB:FF:97:63:C0:61:D5:37:B8:A1:D0:87:2D:70:69:76:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/87d8db71-a5be-464c-a8b9-8b7b374ae3fa/1/8BD4F7EBFF9763C061D537B8A1D0872D70697632.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/8BD4F7EBFF9763C061D537B8A1D0872D70697632.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/87d8db71-a5be-464c-a8b9-8b7b374ae3fa/1/8BD4F7EBFF9763C061D537B8A1D0872D70697632.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a6:0a:9c:e2:b1:af:97:eb:c9:0e:51:44:cc:fb:94:38:ce:7a: a1:d9:6e:aa:2c:f4:3c:87:7a:4c:b1:37:0a:30:96:2b:d8:24: cb:17:4e:36:98:58:f7:02:f5:aa:a5:ee:02:ff:46:f9:78:4f: 98:30:51:bd:42:af:96:6c:ab:06:4f:dd:d3:07:20:c1:5e:ae: 91:5a:7c:ff:4b:a2:66:a8:8d:d1:66:e4:f0:26:0e:df:d1:3a: ec:6f:e2:6c:d0:d9:d0:9a:d4:ae:b4:58:90:66:5b:be:77:79: 1f:05:49:e7:fb:6b:8f:23:81:13:f7:46:4d:4d:27:5e:39:02: 95:3b:cd:f8:5e:41:4c:11:9c:f7:7a:8d:8d:da:ee:de:39:20: 23:c4:3d:45:2e:c1:a1:5a:d6:1e:4d:2d:a2:c7:95:a7:82:23: aa:f8:44:14:fb:5d:ca:f9:fe:73:c0:6a:9c:94:4c:35:45:9c: 2d:03:f6:3a:f1:2f:65:16:ae:1d:f8:48:b2:63:13:3d:2a:e7: 6c:c5:ff:da:9a:0e:1a:76:05:8c:16:2e:29:45:49:4a:a2:f5: 62:c3:56:06:8b:44:64:7a:d6:80:07:21:1b:ab:18:bb:63:13: b6:e8:e2:da:b1:7e:92:da:b0:5f:82:7c:55:31:3d:0e:34:fe: d2:e6:bc:73 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUZsFmbQFBBIE7LQnrK6V77WIeOUUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEJENEY3RUJGRjk3NjNDMDYxRDUzN0I4QTFEMDg3MkQ3 MDY5NzYzMjAeFw0yNTA5MDYxMjU2NDZaFw0yNTA5MDcxNDIwNDZaMDMxMTAvBgNV BAMTKEQzQkJBOTBBNzg0MDA0RjQxMDlFQjhCMzk3NDE1RTU0NDlEN0IyNzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCw0dgr4JH1azgrv2vxmpAL2IJw lJqbt1kgYhaIvnTMEWkMF0RS06AOskEe4IangpiOPcDju8NYKaL+KsU79QpXVnPS 5yyvKpXGNiJ5ew8o9r4noCOWA/T17GMIJowoNdpL8xxiNpaTOQHEWdQSKqGpZs56 jjr3NXV7t1d6pA3kodWvBn1aeC/m/a28WSapRMR9yhtkzup7TG1CPxUa6/DZcuH0 bbKEqgmPp2a1S7LK0sEaq18ZCa+l1y365CaAAy/GhssgCR6oH7ThiL8xCr15cBzF 6Z4XoOcb+vAsM7s503qt0uhV6RjQCs0EU7ZJfSGlbJ0EQKCbz3zS3m7yJyofAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQU07upCnhABPQQnrizl0FeVEnXsnIwHwYDVR0j BBgwFoAUi9T36/+XY8Bh1Te4odCHLXBpdjIwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvODdkOGRiNzEtYTViZS00NjRjLWE4YjktOGI3YjM3NGFl M2ZhLzEvOEJENEY3RUJGRjk3NjNDMDYxRDUzN0I4QTFEMDg3MkQ3MDY5NzYzMi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC84QkQ0RjdFQkZGOTc2M0MwNjFENTM3QjhB MUQwODcyRDcwNjk3NjMyLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 Lzg3ZDhkYjcxLWE1YmUtNDY0Yy1hOGI5LThiN2IzNzRhZTNmYS8xLzhCRDRGN0VC RkY5NzYzQzA2MUQ1MzdCOEExRDA4NzJENzA2OTc2MzIubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCmCpzi sa+X68kOUUTM+5Q4znqh2W6qLPQ8h3pMsTcKMJYr2CTLF042mFj3AvWqpe4C/0b5 eE+YMFG9Qq+WbKsGT93TByDBXq6RWnz/S6JmqI3RZuTwJg7f0Trsb+Js0NnQmtSu tFiQZlu+d3kfBUnn+2uPI4ET90ZNTSdeOQKVO834XkFMEZz3eo2N2u7eOSAjxD1F LsGhWtYeTS2ix5WngiOq+EQU+13K+f5zwGqclEw1RZwtA/Y68S9lFq4d+EiyYxM9 Kudsxf/amg4adgWMFi4pRUlKovViw1YGi0RketaAByEbqxi7YxO26OLasX6S2rBf gnxVMT0ONP7S5rxz -----END CERTIFICATE-----Generated at Sun Sep 7 06:53:46 2025 by rpki-client