$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09718f08-bb39-4a09-a4c0-1f40248a6d15/2/BB0B02806AE3C34F453ADEDDE36ADF432FCDF9C4.mft File: BB0B02806AE3C34F453ADEDDE36ADF432FCDF9C4.mft (raw, json) Hash identifier: K3fI0xgkWFySz9xQsKNby58IobtHLEOPKIzMsvurhRA= Subject key identifier: C2:0B:54:D1:78:C6:4F:46:5A:CA:24:27:3E:4B:8F:7C:53:F4:4A:D7 Authority key identifier: BB:0B:02:80:6A:E3:C3:4F:45:3A:DE:DD:E3:6A:DF:43:2F:CD:F9:C4 Certificate issuer: /CN=BB0B02806AE3C34F453ADEDDE36ADF432FCDF9C4 Certificate serial: 6221612ED867981E67DA8630AA555EE6F62BF207 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/BB0B02806AE3C34F453ADEDDE36ADF432FCDF9C4.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09718f08-bb39-4a09-a4c0-1f40248a6d15/2/BB0B02806AE3C34F453ADEDDE36ADF432FCDF9C4.mft Manifest number: 98 Signing time: Wed 25 Mar 2026 23:07:12 +0000 Manifest this update: Wed 25 Mar 2026 23:02:12 +0000 Manifest next update: Thu 26 Mar 2026 23:19:12 +0000 Files and hashes: 1: 326131343a373538303a666634303a3a2f34382d3438203d3e20323134333434.roa (hash: NMvj9zoeOL/7ubYXVejRPUJJs+qt+8DS24zEbTeKmfE=) 2: 326131343a373538303a666634343a3a2f34382d3438203d3e20323134333434.roa (hash: 5NZsbS3/ECNwsIkfwekBTuMsstws0S9jzGJtHhbmy3k=) 3: 326131343a373538303a666634333a3a2f34382d3438203d3e20323134333434.roa (hash: LrJY5RvJFU1hFw5kwe9OHrsNrGlMAHPKFkyFsYYWBwM=) 4: 326131343a373538303a666634323a3a2f34382d3438203d3e20323134333434.roa (hash: O/PJi/N0ASXeoDd9xkm5e+vUVYHvnrMhoRT9Q5UqBNM=) 5: 326131343a373538303a666634353a3a2f34382d3438203d3e20323134333434.roa (hash: hdVzeFM1qIVbiHCOPfcZVjzE07zDvwiz6q8IHeNVQA0=) 6: BB0B02806AE3C34F453ADEDDE36ADF432FCDF9C4.crl (hash: uVlq8k8EPqPevoebbyaAxadtbCsT050D49UeGnqjAF0=) 7: 326131343a373538303a666634313a3a2f34382d3438203d3e20323134333434.roa (hash: FSeGkTavy6E/PYG9xOOh6cS7WX/ehiQ2P+nWL6HUfzA=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09718f08-bb39-4a09-a4c0-1f40248a6d15/2/BB0B02806AE3C34F453ADEDDE36ADF432FCDF9C4.crl rsync://rsync.paas.rpki.ripe.net/repository/09718f08-bb39-4a09-a4c0-1f40248a6d15/2/BB0B02806AE3C34F453ADEDDE36ADF432FCDF9C4.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/BB0B02806AE3C34F453ADEDDE36ADF432FCDF9C4.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 26 Mar 2026 23:19:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:21:61:2e:d8:67:98:1e:67:da:86:30:aa:55:5e:e6:f6:2b:f2:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BB0B02806AE3C34F453ADEDDE36ADF432FCDF9C4 Validity Not Before: Mar 25 23:02:12 2026 GMT Not After : Mar 26 23:19:12 2026 GMT Subject: CN=C20B54D178C64F465ACA24273E4B8F7C53F44AD7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:dc:5d:12:79:1e:ff:52:02:27:a9:25:77:2d: 66:68:1b:7b:1e:c9:43:67:37:a7:8a:20:01:61:98: 2c:31:7d:d5:06:8a:43:53:9a:f0:b3:1e:4a:ce:c0: 68:5c:bd:50:52:e3:17:6c:4b:7f:3c:93:ef:2d:93: e4:6a:4a:bc:10:70:ad:40:2f:55:1c:6b:e2:dd:82: 9e:fb:35:ef:d9:2b:c2:f4:98:75:d8:52:b4:b6:a0: bb:5c:97:8f:53:77:eb:1f:5c:53:32:b7:2f:c1:9a: 88:66:c7:02:fe:e9:8b:73:0b:e3:08:9b:7d:11:d1: 1c:ad:0a:a6:e0:e1:a5:99:f2:0f:2c:f9:fa:1d:3f: 0f:fb:33:04:e4:14:1f:f5:e9:4d:55:c2:48:6a:35: cd:57:53:7f:f6:81:d5:82:d4:57:80:87:5f:f1:40: 2e:e8:14:89:cc:40:89:1d:9c:ef:4f:b5:de:ad:ed: 72:c7:ab:d9:b5:3b:99:97:c4:2c:c3:5d:44:3d:cd: 73:cc:ed:e3:aa:ab:2e:3e:a8:9e:51:50:ed:65:df: a2:11:ea:5a:cb:d6:de:40:13:1b:bb:19:84:22:99: cb:5b:ac:5b:16:9f:63:e5:63:c1:22:72:86:b8:1c: e7:1e:4d:f8:f9:e4:6c:7b:15:ea:3f:58:cd:b0:92: ea:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:0B:54:D1:78:C6:4F:46:5A:CA:24:27:3E:4B:8F:7C:53:F4:4A:D7 X509v3 Authority Key Identifier: keyid:BB:0B:02:80:6A:E3:C3:4F:45:3A:DE:DD:E3:6A:DF:43:2F:CD:F9:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/09718f08-bb39-4a09-a4c0-1f40248a6d15/2/BB0B02806AE3C34F453ADEDDE36ADF432FCDF9C4.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/BB0B02806AE3C34F453ADEDDE36ADF432FCDF9C4.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09718f08-bb39-4a09-a4c0-1f40248a6d15/2/BB0B02806AE3C34F453ADEDDE36ADF432FCDF9C4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b9:bb:9a:ab:07:ec:7e:86:88:a6:1e:b1:f5:b3:69:ad:dc:1d: 67:83:6c:2c:e9:31:d8:5b:c0:14:cf:70:0c:41:22:df:43:e4: 08:cc:fa:10:95:10:c2:1f:14:15:ea:13:be:5d:db:07:c7:f5: 16:a0:cb:9b:d0:e4:32:3e:2e:f9:48:63:39:61:17:e7:f2:59: bf:92:af:65:80:bd:c2:c1:75:6c:68:4a:4e:a8:77:c4:00:dd: 24:4e:9c:3a:9b:b3:15:66:02:bc:5a:60:fb:97:35:cb:02:b8: 36:d5:1e:12:e4:9d:7b:ee:74:f2:8f:fb:cf:6b:1a:5d:12:c0: 23:9d:40:ae:cc:4e:69:04:a9:c2:b9:36:32:fb:15:7e:85:35: 3e:e2:5f:35:c4:70:37:0a:53:35:d4:dc:c6:ab:ad:53:ba:8b: 2e:fb:f2:46:99:29:cf:38:4c:37:08:50:c0:83:9c:93:81:85: d8:de:b1:cd:c7:0c:86:65:59:d1:93:43:58:f7:9c:1b:9c:21: 0d:41:c6:d7:5b:94:da:2e:82:3b:80:42:b5:cc:45:a0:ee:ef: 98:26:32:e8:01:63:a7:52:37:15:35:23:0e:be:5a:58:a7:99: 3c:92:eb:2e:01:51:6c:6a:c5:10:99:33:27:74:8b:bf:31:b6: e0:3f:13:da -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUYiFhLthnmB5n2oYwqlVe5vYr8gcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkIwQjAyODA2QUUzQzM0RjQ1M0FERURERTM2QURGNDMy RkNERjlDNDAeFw0yNjAzMjUyMzAyMTJaFw0yNjAzMjYyMzE5MTJaMDMxMTAvBgNV BAMTKEMyMEI1NEQxNzhDNjRGNDY1QUNBMjQyNzNFNEI4RjdDNTNGNDRBRDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCu3F0SeR7/UgInqSV3LWZoG3se yUNnN6eKIAFhmCwxfdUGikNTmvCzHkrOwGhcvVBS4xdsS388k+8tk+RqSrwQcK1A L1Uca+Ldgp77Ne/ZK8L0mHXYUrS2oLtcl49Td+sfXFMyty/BmohmxwL+6YtzC+MI m30R0RytCqbg4aWZ8g8s+fodPw/7MwTkFB/16U1VwkhqNc1XU3/2gdWC1FeAh1/x QC7oFInMQIkdnO9Ptd6t7XLHq9m1O5mXxCzDXUQ9zXPM7eOqqy4+qJ5RUO1l36IR 6lrL1t5AExu7GYQimctbrFsWn2PlY8Eicoa4HOceTfj55Gx7Feo/WM2wkurxAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUwgtU0XjGT0ZayiQnPkuPfFP0StcwHwYDVR0j BBgwFoAUuwsCgGrjw09FOt7d42rfQy/N+cQwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMDk3MThmMDgtYmIzOS00YTA5LWE0YzAtMWY0MDI0OGE2 ZDE1LzIvQkIwQjAyODA2QUUzQzM0RjQ1M0FERURERTM2QURGNDMyRkNERjlDNC5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC9CQjBCMDI4MDZBRTNDMzRGNDUzQURFRERF MzZBREY0MzJGQ0RGOUM0LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzA5NzE4ZjA4LWJiMzktNGEwOS1hNGMwLTFmNDAyNDhhNmQxNS8yL0JCMEIwMjgw NkFFM0MzNEY0NTNBREVEREUzNkFERjQzMkZDREY5QzQubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQC5u5qr B+x+hoimHrH1s2mt3B1ng2ws6THYW8AUz3AMQSLfQ+QIzPoQlRDCHxQV6hO+XdsH x/UWoMub0OQyPi75SGM5YRfn8lm/kq9lgL3CwXVsaEpOqHfEAN0kTpw6m7MVZgK8 WmD7lzXLArg21R4S5J177nTyj/vPaxpdEsAjnUCuzE5pBKnCuTYy+xV+hTU+4l81 xHA3ClM11NzGq61Tuosu+/JGmSnPOEw3CFDAg5yTgYXY3rHNxwyGZVnRk0NY95wb nCENQcbXW5TaLoI7gEK1zEWg7u+YJjLoAWOnUjcVNSMOvlpYp5k8kusuAVFsasUQ mTMndIu/MbbgPxPa -----END CERTIFICATE-----Generated at Thu Mar 26 04:18:46 2026 by rpki-client