$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d941fd11-c3d8-4774-b65a-c81a4907a460/1/B0A5A8ABB18AAA8DBD4783234511B53DBCA299BF.mft File: B0A5A8ABB18AAA8DBD4783234511B53DBCA299BF.mft (raw, json) Hash identifier: iP3kYK4C8KSQp2FjkoVs8Fy3AyVn9XOGla9uHga+Bzk= Subject key identifier: 07:CC:BD:2C:98:D7:56:68:66:A1:D2:FE:7F:57:BE:09:96:DC:32:D6 Authority key identifier: B0:A5:A8:AB:B1:8A:AA:8D:BD:47:83:23:45:11:B5:3D:BC:A2:99:BF Certificate issuer: /CN=B0A5A8ABB18AAA8DBD4783234511B53DBCA299BF Certificate serial: 2CC04C30DFEF28B2147182EED330C11C4287325D Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/002f8ee6-abe7-4ae8-964c-788bb98c975c/1/B0A5A8ABB18AAA8DBD4783234511B53DBCA299BF.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d941fd11-c3d8-4774-b65a-c81a4907a460/1/B0A5A8ABB18AAA8DBD4783234511B53DBCA299BF.mft Manifest number: 9C Signing time: Mon 17 Aug 2026 17:54:08 +0000 Manifest this update: Mon 17 Aug 2026 17:49:08 +0000 Manifest next update: Tue 18 Aug 2026 18:45:08 +0000 Files and hashes: 1: B0A5A8ABB18AAA8DBD4783234511B53DBCA299BF.crl (hash: KpttUQ8NCFnycDzfSwg3bIcKmNE5xK6e7QWO6ITdfs8=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/d941fd11-c3d8-4774-b65a-c81a4907a460/1/B0A5A8ABB18AAA8DBD4783234511B53DBCA299BF.crl rsync://rsync.paas.rpki.ripe.net/repository/d941fd11-c3d8-4774-b65a-c81a4907a460/1/B0A5A8ABB18AAA8DBD4783234511B53DBCA299BF.mft rsync://rsync.paas.rpki.ripe.net/repository/002f8ee6-abe7-4ae8-964c-788bb98c975c/1/B0A5A8ABB18AAA8DBD4783234511B53DBCA299BF.cer rsync://rsync.paas.rpki.ripe.net/repository/002f8ee6-abe7-4ae8-964c-788bb98c975c/1/1E74494683D8D2A4E029AAD4573928D2A55FA411.crl rsync://rsync.paas.rpki.ripe.net/repository/002f8ee6-abe7-4ae8-964c-788bb98c975c/1/1E74494683D8D2A4E029AAD4573928D2A55FA411.mft rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/4/1E74494683D8D2A4E029AAD4573928D2A55FA411.cer rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/4/ACB5DFF8A45DF5CDAFA2A95C715F10C5FE5F91A3.crl rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/4/ACB5DFF8A45DF5CDAFA2A95C715F10C5FE5F91A3.mft rsync://rpki.ripe.net/repository/DEFAULT/rLXf-KRd9c2voqlccV8Qxf5fkaM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 18 Aug 2026 18:45:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:c0:4c:30:df:ef:28:b2:14:71:82:ee:d3:30:c1:1c:42:87:32:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B0A5A8ABB18AAA8DBD4783234511B53DBCA299BF Validity Not Before: Aug 17 17:49:08 2026 GMT Not After : Aug 18 18:45:08 2026 GMT Subject: CN=07CCBD2C98D7566866A1D2FE7F57BE0996DC32D6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:6f:fb:db:bd:32:7a:dc:65:5d:9e:9f:5a:39: 0f:0e:21:fc:42:1c:36:73:a1:98:68:3a:0c:cd:88: f8:b8:da:95:c3:3f:9f:f7:89:e7:b2:3b:83:9c:8c: ed:57:0e:12:f2:72:c2:45:1e:61:04:87:b5:56:06: 95:1d:3c:08:d1:c2:94:6e:6b:93:b1:5d:3d:d1:b0: 52:f8:7e:cc:5c:fe:f1:37:34:3e:46:80:12:a8:6f: 2e:c0:de:5e:15:fa:54:37:dc:4c:b7:4d:1d:e8:69: 89:b7:e8:b2:7c:95:d4:e3:3a:ee:2d:7f:3e:9d:f7: c2:f9:34:4c:89:fe:68:fa:aa:5d:27:ef:19:31:8b: 99:6c:49:e7:5e:81:21:f1:65:53:c4:27:2c:ee:cf: 3a:e6:97:d4:d1:e0:69:01:74:cc:0b:08:f8:68:26: 80:12:71:c0:e5:62:36:d1:3c:df:72:ae:e1:5b:30: 4a:d8:2f:11:b8:9f:7d:01:fd:95:4f:19:e4:dc:2e: 0a:df:28:4d:cc:2d:53:cd:d8:55:12:27:4f:a7:45: 16:1a:1a:52:7d:58:0b:db:82:e3:e9:aa:be:b6:0d: 34:56:61:45:a9:6d:7b:d7:99:b1:34:50:0b:8c:35: 66:07:dc:e2:61:46:a1:4d:fc:ca:1e:12:cf:99:4e: 83:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:CC:BD:2C:98:D7:56:68:66:A1:D2:FE:7F:57:BE:09:96:DC:32:D6 X509v3 Authority Key Identifier: keyid:B0:A5:A8:AB:B1:8A:AA:8D:BD:47:83:23:45:11:B5:3D:BC:A2:99:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/d941fd11-c3d8-4774-b65a-c81a4907a460/1/B0A5A8ABB18AAA8DBD4783234511B53DBCA299BF.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/002f8ee6-abe7-4ae8-964c-788bb98c975c/1/B0A5A8ABB18AAA8DBD4783234511B53DBCA299BF.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d941fd11-c3d8-4774-b65a-c81a4907a460/1/B0A5A8ABB18AAA8DBD4783234511B53DBCA299BF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption e7:8f:6c:0a:a7:e1:31:58:e1:9f:8a:1f:3c:40:33:ea:22:3a: a5:a2:33:cf:b9:c3:21:e1:9c:fd:40:14:eb:fe:c4:ef:27:40: b3:ce:1f:11:19:a4:36:cb:b4:27:5d:7c:d9:25:0e:ba:fe:53: ad:5e:02:2c:b7:d2:51:93:40:1e:ed:59:b1:58:4b:be:56:18: 20:6f:51:7f:4a:11:61:5a:d6:83:00:a0:5a:e9:41:01:8e:2e: 2a:b5:ac:06:cc:c5:ae:ee:c2:eb:62:e7:2d:1e:1f:7e:49:06: 8c:9c:dc:17:24:3c:5f:9e:8c:7e:23:6b:f4:62:0b:d5:ee:79: 2a:30:15:c0:34:c0:90:77:90:dc:dc:83:28:b6:6f:39:88:4e: 5d:9f:9a:77:3c:7e:dd:71:ae:bc:42:ca:60:d3:6c:45:99:22: 64:c4:e4:5a:45:be:23:20:5d:e4:45:16:2f:90:a5:14:95:4a: 95:d7:9f:8f:91:b0:31:1e:78:72:be:94:35:89:44:f2:dd:f9: 9e:64:0e:9d:9e:12:67:29:3f:b2:2e:11:25:97:0a:da:87:5e: 00:cf:ca:ce:5a:cf:cd:da:53:13:8a:f1:92:de:b2:bc:0e:99: bd:b8:57:2e:43:1f:15:c4:4b:e6:bb:b7:bb:91:09:56:92:30: 87:56:a9:1a -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIULMBMMN/vKLIUcYLu0zDBHEKHMl0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjBBNUE4QUJCMThBQUE4REJENDc4MzIzNDUxMUI1M0RC Q0EyOTlCRjAeFw0yNjA4MTcxNzQ5MDhaFw0yNjA4MTgxODQ1MDhaMDMxMTAvBgNV BAMTKDA3Q0NCRDJDOThENzU2Njg2NkExRDJGRTdGNTdCRTA5OTZEQzMyRDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRb/vbvTJ63GVdnp9aOQ8OIfxC HDZzoZhoOgzNiPi42pXDP5/3ieeyO4OcjO1XDhLycsJFHmEEh7VWBpUdPAjRwpRu a5OxXT3RsFL4fsxc/vE3ND5GgBKoby7A3l4V+lQ33Ey3TR3oaYm36LJ8ldTjOu4t fz6d98L5NEyJ/mj6ql0n7xkxi5lsSedegSHxZVPEJyzuzzrml9TR4GkBdMwLCPho JoASccDlYjbRPN9yruFbMErYLxG4n30B/ZVPGeTcLgrfKE3MLVPN2FUSJ0+nRRYa GlJ9WAvbguPpqr62DTRWYUWpbXvXmbE0UAuMNWYH3OJhRqFN/MoeEs+ZToPxAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUB8y9LJjXVmhmodL+f1e+CZbcMtYwHwYDVR0j BBgwFoAUsKWoq7GKqo29R4MjRRG1Pbyimb8wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZDk0MWZkMTEtYzNkOC00Nzc0LWI2NWEtYzgxYTQ5MDdh NDYwLzEvQjBBNUE4QUJCMThBQUE4REJENDc4MzIzNDUxMUI1M0RCQ0EyOTlCRi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8wMDJmOGVlNi1hYmU3LTRh ZTgtOTY0Yy03ODhiYjk4Yzk3NWMvMS9CMEE1QThBQkIxOEFBQThEQkQ0NzgzMjM0 NTExQjUzREJDQTI5OUJGLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2Q5NDFmZDExLWMzZDgtNDc3NC1iNjVhLWM4MWE0OTA3YTQ2MC8xL0IwQTVBOEFC QjE4QUFBOERCRDQ3ODMyMzQ1MTFCNTNEQkNBMjk5QkYubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQDnj2wK p+ExWOGfih88QDPqIjqlojPPucMh4Zz9QBTr/sTvJ0Czzh8RGaQ2y7QnXXzZJQ66 /lOtXgIst9JRk0Ae7VmxWEu+Vhggb1F/ShFhWtaDAKBa6UEBji4qtawGzMWu7sLr YuctHh9+SQaMnNwXJDxfnox+I2v0YgvV7nkqMBXANMCQd5Dc3IMotm85iE5dn5p3 PH7dca68Qspg02xFmSJkxORaRb4jIF3kRRYvkKUUlUqV15+PkbAxHnhyvpQ1iUTy 3fmeZA6dnhJnKT+yLhEllwrah14Az8rOWs/N2lMTivGS3rK8Dpm9uFcuQx8VxEvm u7e7kQlWkjCHVqka -----END CERTIFICATE-----Generated at Tue Aug 18 02:40:19 2026 by rpki-client