$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8d9062de-f536-445d-ba71-035fbfecaad8/0/8CC300FAF2F6D49186A8B62E08F190107743973D.mft File: 8CC300FAF2F6D49186A8B62E08F190107743973D.mft (raw, json) Hash identifier: bkOt/IfwXDdm4f9XBCS2xwNB8fxm6EhgSXNCEBIRy4s= Subject key identifier: F8:04:CC:E9:E2:97:B9:EA:82:9C:1F:CB:09:0E:10:C3:7B:3A:0B:DA Authority key identifier: 8C:C3:00:FA:F2:F6:D4:91:86:A8:B6:2E:08:F1:90:10:77:43:97:3D Certificate issuer: /CN=8cc300faf2f6d49186a8b62e08f190107743973d Certificate serial: 3CCFBC4B45240C9378369FA8EAA3DD19B961C777 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jMMA-vL21JGGqLYuCPGQEHdDlz0.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8d9062de-f536-445d-ba71-035fbfecaad8/0/8CC300FAF2F6D49186A8B62E08F190107743973D.mft Manifest number: A0 Signing time: Wed 13 May 2026 08:35:45 +0000 Manifest this update: Wed 13 May 2026 08:30:45 +0000 Manifest next update: Thu 14 May 2026 10:58:45 +0000 Files and hashes: 1: AS62113.asa (hash: Yver10QWMXYIYP5ZY4+AuiARoynXV5PYVi7Q6x7VN9c=) 2: 326130303a666265313a3a2f33322d3332203d3e203632313133.roa (hash: Z+RU3vtzvAe7ynR14QHAUV1/vmbrfJ5VHYPGPd2caBI=) 3: 3138352e33382e32342e302f32342d3234203d3e203632313133.roa (hash: DL9cUbkHdgRd6E9kt0CXscnQjaDpUpLE3Ywus/lXk+w=) 4: 326130303a666265303a3a2f33322d3332203d3e203632313133.roa (hash: WNjAJELB/oLrw9Hz4dnzCW0vPcsiMFGJ+BAVSWItBek=) 5: 8CC300FAF2F6D49186A8B62E08F190107743973D.crl (hash: HpNRhs3GZ3XL296Qraom+p9wnxt+yM97kFvCdQLAzng=) 6: AE2E1DEFAD81FF39E0283ED61BC9F9DC6DA9BE96.cer (hash: GFHqWxN9S46J9mAmEiVgStEzFnFl5M2lHDxwpuTvPQs=) 7: 326130303a666265343a3161623a3a2f34382d3438203d3e20323035323335.roa (hash: BQDJ5MQBcUAO3DNIndlqGRpqRDYK9vOMV2e/1C55/mU=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8d9062de-f536-445d-ba71-035fbfecaad8/0/8CC300FAF2F6D49186A8B62E08F190107743973D.crl rsync://rsync.paas.rpki.ripe.net/repository/8d9062de-f536-445d-ba71-035fbfecaad8/0/8CC300FAF2F6D49186A8B62E08F190107743973D.mft rsync://rpki.ripe.net/repository/DEFAULT/jMMA-vL21JGGqLYuCPGQEHdDlz0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 14 May 2026 06:33:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:cf:bc:4b:45:24:0c:93:78:36:9f:a8:ea:a3:dd:19:b9:61:c7:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8cc300faf2f6d49186a8b62e08f190107743973d Validity Not Before: May 13 08:30:45 2026 GMT Not After : May 14 10:58:45 2026 GMT Subject: CN=F804CCE9E297B9EA829C1FCB090E10C37B3A0BDA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:17:4f:b9:67:45:6d:82:c9:ed:49:6c:80:44: 9d:43:46:d8:d4:ac:40:f6:0b:77:18:1f:41:94:47: da:70:9d:85:69:c2:71:45:47:58:36:a2:f4:05:75: 3e:fe:53:8c:b6:1a:61:6b:e3:ae:7b:e5:91:f0:02: 16:72:44:76:6a:00:77:ac:62:5b:90:3c:77:e1:66: f5:88:fb:5a:c5:62:92:76:46:20:ff:4e:98:9b:d0: 81:13:5e:7b:ec:a1:d0:e9:5f:2e:29:83:f8:f9:d9: f0:83:4e:9f:23:72:03:20:64:c1:48:5e:fb:41:8f: 46:b2:c4:1a:98:af:00:ff:df:5e:cd:09:69:db:e3: ac:2a:de:07:eb:2b:03:30:67:fc:2d:4c:3a:74:8f: 81:f2:80:61:96:24:ca:f6:3e:b2:ca:7d:83:f1:b5: 03:19:d7:49:e3:34:fd:b1:23:b8:7a:6b:8c:72:71: 3d:f1:06:af:87:f8:85:8b:6b:15:18:0b:d6:42:9f: e5:db:02:d2:3e:20:7f:f9:02:10:5e:3c:dc:a5:af: e6:73:b2:ea:cb:94:80:0e:49:0f:ee:60:fd:e3:95: 0c:3f:ed:f6:2d:60:d8:fc:22:18:59:6b:22:f0:5c: 2a:b0:70:28:ad:3a:06:5e:4f:25:5e:81:2f:fa:5f: fc:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:04:CC:E9:E2:97:B9:EA:82:9C:1F:CB:09:0E:10:C3:7B:3A:0B:DA X509v3 Authority Key Identifier: keyid:8C:C3:00:FA:F2:F6:D4:91:86:A8:B6:2E:08:F1:90:10:77:43:97:3D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/8d9062de-f536-445d-ba71-035fbfecaad8/0/8CC300FAF2F6D49186A8B62E08F190107743973D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jMMA-vL21JGGqLYuCPGQEHdDlz0.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8d9062de-f536-445d-ba71-035fbfecaad8/0/8CC300FAF2F6D49186A8B62E08F190107743973D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:87:33:61:0f:5b:4c:59:e6:7b:ec:d1:d8:a2:98:bb:ff:09: 5a:ff:45:a1:9b:01:e4:d5:c0:6a:64:db:fb:1d:fe:a0:2a:45: 47:0a:35:ac:cd:29:40:e4:67:93:6e:03:9b:6d:87:40:ce:0a: ef:44:dd:02:c3:bb:e9:35:9d:7f:77:86:4b:32:58:ef:5c:7e: 3e:d7:65:db:80:e3:f3:c5:26:02:44:e6:66:35:e2:71:1d:78: 0d:82:63:c4:c8:ad:91:95:73:5a:1f:08:7d:74:9a:a3:f3:44: ff:f8:09:52:8f:b2:94:c1:15:6b:ae:f2:7f:70:98:94:58:83: 83:c5:e5:b8:a5:b8:9b:f6:cd:ce:c6:60:7e:b7:27:eb:e1:13: cc:ae:6f:51:d2:43:fd:f9:7d:97:6b:8d:50:80:cf:a9:a4:8d: 8c:f6:ff:9c:56:d7:f5:9c:62:9f:b7:51:ed:50:5e:6b:45:97: b1:58:37:0b:11:ac:49:0c:20:bd:66:0d:86:52:a4:d5:3c:1d: 0c:af:99:a7:db:6a:d2:d7:d3:90:eb:47:5a:20:01:52:5a:18: d5:74:e7:4e:61:e3:66:f7:a1:76:ae:c9:2d:b5:91:14:54:15: ec:e7:0d:f9:e0:b6:43:d8:a9:50:d3:ca:24:e2:ad:e1:e4:a4: e2:36:d1:4e -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUPM+8S0UkDJN4Np+o6qPdGblhx3cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOGNjMzAwZmFmMmY2ZDQ5MTg2YThiNjJlMDhmMTkwMTA3 NzQzOTczZDAeFw0yNjA1MTMwODMwNDVaFw0yNjA1MTQxMDU4NDVaMDMxMTAvBgNV BAMTKEY4MDRDQ0U5RTI5N0I5RUE4MjlDMUZDQjA5MEUxMEMzN0IzQTBCREEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxF0+5Z0VtgsntSWyARJ1DRtjU rED2C3cYH0GUR9pwnYVpwnFFR1g2ovQFdT7+U4y2GmFr46575ZHwAhZyRHZqAHes YluQPHfhZvWI+1rFYpJ2RiD/Tpib0IETXnvsodDpXy4pg/j52fCDTp8jcgMgZMFI XvtBj0ayxBqYrwD/317NCWnb46wq3gfrKwMwZ/wtTDp0j4HygGGWJMr2PrLKfYPx tQMZ10njNP2xI7h6a4xycT3xBq+H+IWLaxUYC9ZCn+XbAtI+IH/5AhBePNylr+Zz surLlIAOSQ/uYP3jlQw/7fYtYNj8IhhZayLwXCqwcCitOgZeTyVegS/6X/xFAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQU+ATM6eKXueqCnB/LCQ4Qw3s6C9owHwYDVR0j BBgwFoAUjMMA+vL21JGGqLYuCPGQEHdDlz0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOGQ5MDYyZGUtZjUzNi00NDVkLWJhNzEtMDM1ZmJmZWNh YWQ4LzAvOENDMzAwRkFGMkY2RDQ5MTg2QThCNjJFMDhGMTkwMTA3NzQzOTczRC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2pNTUEtdkwyMUpHR3FMWXVDUEdRRUhk RGx6MC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84ZDkwNjJkZS1m NTM2LTQ0NWQtYmE3MS0wMzVmYmZlY2FhZDgvMC84Q0MzMDBGQUYyRjZENDkxODZB OEI2MkUwOEYxOTAxMDc3NDM5NzNELm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmoczYQ9bTFnme+zR2KKY u/8JWv9FoZsB5NXAamTb+x3+oCpFRwo1rM0pQORnk24Dm22HQM4K70TdAsO76TWd f3eGSzJY71x+Ptdl24Dj88UmAkTmZjXicR14DYJjxMitkZVzWh8IfXSao/NE//gJ Uo+ylMEVa67yf3CYlFiDg8XluKW4m/bNzsZgfrcn6+ETzK5vUdJD/fl9l2uNUIDP qaSNjPb/nFbX9Zxin7dR7VBea0WXsVg3CxGsSQwgvWYNhlKk1TwdDK+Zp9tq0tfT kOtHWiABUloY1XTnTmHjZvehdq7JLbWRFFQV7OcN+eC2Q9ipUNPKJOKt4eSk4jbR Tg== -----END CERTIFICATE-----Generated at Wed May 13 11:49:34 2026 by rpki-client