$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/8d9062de-f536-445d-ba71-035fbfecaad8/0/8CC300FAF2F6D49186A8B62E08F190107743973D.mft File: 8CC300FAF2F6D49186A8B62E08F190107743973D.mft (raw, json) Hash identifier: fPKHv2WJLDEdGw/y42CbD6UquwIaA7KoOTXpn7Z33Kg= Subject key identifier: DC:E3:69:CE:61:4F:3B:50:01:F7:9F:BC:BA:64:9F:B4:9D:BF:4E:80 Authority key identifier: 8C:C3:00:FA:F2:F6:D4:91:86:A8:B6:2E:08:F1:90:10:77:43:97:3D Certificate issuer: /CN=8cc300faf2f6d49186a8b62e08f190107743973d Certificate serial: 26142D1E64F2F010B166AE202EDDF22CDD3FE643 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jMMA-vL21JGGqLYuCPGQEHdDlz0.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8d9062de-f536-445d-ba71-035fbfecaad8/0/8CC300FAF2F6D49186A8B62E08F190107743973D.mft Manifest number: 0159 Signing time: Tue 29 Sep 2026 01:42:22 +0000 Manifest this update: Tue 29 Sep 2026 01:37:22 +0000 Manifest next update: Wed 30 Sep 2026 02:03:22 +0000 Files and hashes: 1: 326130303a666265303a3a2f33322d3332203d3e203632313133.roa (hash: WNjAJELB/oLrw9Hz4dnzCW0vPcsiMFGJ+BAVSWItBek=) 2: 8CC300FAF2F6D49186A8B62E08F190107743973D.crl (hash: LzwWjK8ciLEXQOCJHLDakk4hgRm7yYd9Jw5r1cbrtWQ=) 3: 326130303a666265313a3a2f33322d3332203d3e203632313133.roa (hash: Z+RU3vtzvAe7ynR14QHAUV1/vmbrfJ5VHYPGPd2caBI=) 4: 326130303a666265343a3161623a3a2f34382d3438203d3e20323035323335.roa (hash: BQDJ5MQBcUAO3DNIndlqGRpqRDYK9vOMV2e/1C55/mU=) 5: AE2E1DEFAD81FF39E0283ED61BC9F9DC6DA9BE96.cer (hash: GFHqWxN9S46J9mAmEiVgStEzFnFl5M2lHDxwpuTvPQs=) 6: AS62113.asa (hash: Yver10QWMXYIYP5ZY4+AuiARoynXV5PYVi7Q6x7VN9c=) 7: 3138352e33382e32342e302f32342d3234203d3e203632313133.roa (hash: DL9cUbkHdgRd6E9kt0CXscnQjaDpUpLE3Ywus/lXk+w=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8d9062de-f536-445d-ba71-035fbfecaad8/0/8CC300FAF2F6D49186A8B62E08F190107743973D.crl rsync://rsync.paas.rpki.ripe.net/repository/8d9062de-f536-445d-ba71-035fbfecaad8/0/8CC300FAF2F6D49186A8B62E08F190107743973D.mft rsync://rpki.ripe.net/repository/DEFAULT/jMMA-vL21JGGqLYuCPGQEHdDlz0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 29 Sep 2026 23:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:14:2d:1e:64:f2:f0:10:b1:66:ae:20:2e:dd:f2:2c:dd:3f:e6:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8cc300faf2f6d49186a8b62e08f190107743973d Validity Not Before: Sep 29 01:37:22 2026 GMT Not After : Sep 30 02:03:22 2026 GMT Subject: CN=DCE369CE614F3B5001F79FBCBA649FB49DBF4E80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:16:07:58:7f:24:cd:f9:cf:15:43:80:67:97: ef:51:5f:f0:80:56:d5:a6:b7:24:8c:81:c6:8f:a3: a4:b7:d7:8b:74:39:27:c5:d6:6b:2d:b3:11:67:c6: 41:aa:be:a7:82:56:77:9c:69:29:7f:6d:a2:7c:89: 7b:9d:bb:9a:0a:b4:f1:93:eb:fe:2e:a7:f0:8a:10: 56:24:80:fe:e2:9f:28:bd:9b:75:51:21:a2:55:30: 5b:42:ed:8f:ae:bd:79:67:93:b9:cd:20:a2:4f:d8: 2c:81:04:5d:d4:71:fc:db:72:ff:6e:c3:c2:8e:13: 64:12:19:f9:54:dd:17:17:10:3b:a3:b4:e5:0e:3a: 6a:1c:f6:88:d6:89:17:23:cd:21:07:6a:0b:09:19: dc:dd:46:cd:e7:fa:6a:97:02:37:f9:3f:38:6d:13: 6b:40:c6:e2:e5:8b:0c:06:a9:e9:32:2e:41:ee:e9: 29:93:e6:51:39:10:82:b4:91:34:6a:6b:7e:0b:36: 63:bd:0b:e8:6e:16:b9:60:d9:e3:94:62:90:a1:c0: b7:5a:b1:f9:3d:99:81:68:4d:9d:73:70:c0:dc:99: 32:07:3e:cb:86:29:c7:ae:0f:69:1e:10:04:1e:0a: 4d:14:d8:b8:46:de:4c:4b:dd:eb:a5:18:66:53:77: e2:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:E3:69:CE:61:4F:3B:50:01:F7:9F:BC:BA:64:9F:B4:9D:BF:4E:80 X509v3 Authority Key Identifier: keyid:8C:C3:00:FA:F2:F6:D4:91:86:A8:B6:2E:08:F1:90:10:77:43:97:3D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/8d9062de-f536-445d-ba71-035fbfecaad8/0/8CC300FAF2F6D49186A8B62E08F190107743973D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jMMA-vL21JGGqLYuCPGQEHdDlz0.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8d9062de-f536-445d-ba71-035fbfecaad8/0/8CC300FAF2F6D49186A8B62E08F190107743973D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:72:ec:a8:83:52:9e:da:bc:7e:77:3b:08:fc:98:58:45:65: 6d:7f:db:4d:dc:08:ce:28:d1:e6:71:6e:f6:c7:02:c9:1d:28: 17:38:91:f9:7f:bf:4d:5e:bc:9b:1b:a4:a1:f3:9e:76:20:d4: 7b:2c:8e:01:be:16:d5:17:79:b8:45:82:8c:fd:6d:43:05:fb: a7:4f:2e:b3:07:c4:a8:4c:cb:65:4b:a1:a7:05:8f:9e:94:a3: f8:52:16:d8:c3:0c:71:76:4e:80:f4:7f:a9:f5:b2:57:f4:21: bb:99:fa:3f:ae:67:eb:24:c0:d6:2c:73:52:85:f7:e3:1e:e2: 15:2f:ff:44:ed:83:f5:a9:f2:5f:f2:2b:d2:51:09:be:20:62: f1:55:be:33:5e:86:39:ce:ff:5f:c6:94:61:3a:d7:24:8b:81: 09:6d:1b:38:f5:a5:fb:ca:8f:74:0f:ed:e4:bf:63:2f:b5:29: f5:56:95:5f:f8:05:a4:69:87:b7:b0:c8:f2:58:2e:d4:03:8f: 25:de:0e:b4:74:75:22:a3:c7:1e:f6:a1:e3:52:0c:95:9f:0d: 38:e3:97:bb:b1:41:1f:03:dd:44:5d:81:24:0c:8c:a8:6f:b6: 9e:d6:d1:a8:36:ea:d3:ec:ec:76:59:55:2d:d4:2d:86:b0:a9: e7:e1:a3:b5 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUJhQtHmTy8BCxZq4gLt3yLN0/5kMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOGNjMzAwZmFmMmY2ZDQ5MTg2YThiNjJlMDhmMTkwMTA3 NzQzOTczZDAeFw0yNjA5MjkwMTM3MjJaFw0yNjA5MzAwMjAzMjJaMDMxMTAvBgNV BAMTKERDRTM2OUNFNjE0RjNCNTAwMUY3OUZCQ0JBNjQ5RkI0OURCRjRFODAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpFgdYfyTN+c8VQ4Bnl+9RX/CA VtWmtySMgcaPo6S314t0OSfF1mstsxFnxkGqvqeCVnecaSl/baJ8iXudu5oKtPGT 6/4up/CKEFYkgP7inyi9m3VRIaJVMFtC7Y+uvXlnk7nNIKJP2CyBBF3Ucfzbcv9u w8KOE2QSGflU3RcXEDujtOUOOmoc9ojWiRcjzSEHagsJGdzdRs3n+mqXAjf5Pzht E2tAxuLliwwGqekyLkHu6SmT5lE5EIK0kTRqa34LNmO9C+huFrlg2eOUYpChwLda sfk9mYFoTZ1zcMDcmTIHPsuGKceuD2keEAQeCk0U2LhG3kxL3eulGGZTd+LLAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQU3ONpzmFPO1AB95+8umSftJ2/ToAwHwYDVR0j BBgwFoAUjMMA+vL21JGGqLYuCPGQEHdDlz0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOGQ5MDYyZGUtZjUzNi00NDVkLWJhNzEtMDM1ZmJmZWNh YWQ4LzAvOENDMzAwRkFGMkY2RDQ5MTg2QThCNjJFMDhGMTkwMTA3NzQzOTczRC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2pNTUEtdkwyMUpHR3FMWXVDUEdRRUhk RGx6MC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84ZDkwNjJkZS1m NTM2LTQ0NWQtYmE3MS0wMzVmYmZlY2FhZDgvMC84Q0MzMDBGQUYyRjZENDkxODZB OEI2MkUwOEYxOTAxMDc3NDM5NzNELm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG3LsqINSntq8fnc7CPyY WEVlbX/bTdwIzijR5nFu9scCyR0oFziR+X+/TV68mxukofOediDUeyyOAb4W1Rd5 uEWCjP1tQwX7p08uswfEqEzLZUuhpwWPnpSj+FIW2MMMcXZOgPR/qfWyV/Qhu5n6 P65n6yTA1ixzUoX34x7iFS//RO2D9anyX/Ir0lEJviBi8VW+M16GOc7/X8aUYTrX JIuBCW0bOPWl+8qPdA/t5L9jL7Up9VaVX/gFpGmHt7DI8lgu1AOPJd4OtHR1IqPH Hvah41IMlZ8NOOOXu7FBHwPdRF2BJAyMqG+2ntbRqDbq0+zsdllVLdQthrCp5+Gj tQ== -----END CERTIFICATE-----Generated at Tue Sep 29 08:34:35 2026 by rpki-client