$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/5d8ba04d-c788-4f87-839f-4fdb7f473c5d/2/BD69A2AC88B3D0429D235DFEEF33C7D262E4E8B3.mft File: BD69A2AC88B3D0429D235DFEEF33C7D262E4E8B3.mft (raw, json) Hash identifier: jycSqEweb69xB4Py1idoQ0ImueRruC4nXisSUcDTW1s= Subject key identifier: 37:22:5E:E7:80:FB:7E:A0:14:2A:8D:C1:D7:3F:9E:4F:36:74:F4:BE Authority key identifier: BD:69:A2:AC:88:B3:D0:42:9D:23:5D:FE:EF:33:C7:D2:62:E4:E8:B3 Certificate issuer: /CN=BD69A2AC88B3D0429D235DFEEF33C7D262E4E8B3 Certificate serial: 096CBAE474C0FDA00EF63D409420B8E0CE6BFA65 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/e805ea5c-d7a3-4848-837b-4697ccdd6efe/5/BD69A2AC88B3D0429D235DFEEF33C7D262E4E8B3.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/5d8ba04d-c788-4f87-839f-4fdb7f473c5d/2/BD69A2AC88B3D0429D235DFEEF33C7D262E4E8B3.mft Manifest number: 1B Signing time: Sun 15 Nov 2026 15:50:20 +0000 Manifest this update: Sun 15 Nov 2026 15:45:18 +0000 Manifest next update: Mon 16 Nov 2026 19:36:18 +0000 Files and hashes: 1: BD69A2AC88B3D0429D235DFEEF33C7D262E4E8B3.crl (hash: 3a4O3ugEvUMO+JgqlMlht+iAf3rGd+EK4dAIzN0a24w=) 2: 326130613a643638353a3530313a3a2f34382d3438203d3e203331383938.roa (hash: kzBcW6hOX/PNn43aeYhWcT/vLaPD8ipaGZ5VSREI+AU=) 3: 326130613a643638353a3530393a3a2f34382d3438203d3e203230343733.roa (hash: EAOIn+UDu9YIM9iGviLYmWrNYjohdPkmb3YdjsqT7WY=) 4: 326130613a643638353a3530313a3a2f34382d3438203d3e20323034323131.roa (hash: DF7CULyqgnYJTO7kIGFii7DUq3K1dctF4BsDGCyUt/w=) 5: 326130613a643638353a3530353a3a2f34382d3438203d3e20313937383137.roa (hash: WoOTUkxbDd4vfpRccjrviS256yddq3ygikw+5TfmJHc=) 6: 326130613a643638353a3530313a3a2f34382d3438203d3e20313937383137.roa (hash: N1vFn4+Fem6ZLMT7uzXkzDsk7f8VNZT9Y9NpaT26ALo=) 7: 326130613a643638353a3533643a3a2f34382d3438203d3e20313937383137.roa (hash: c5xbXPXzUDC4+SG0pGQNMJ80sPJwfa8ilVtxCenoF2w=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/5d8ba04d-c788-4f87-839f-4fdb7f473c5d/2/BD69A2AC88B3D0429D235DFEEF33C7D262E4E8B3.crl rsync://rsync.paas.rpki.ripe.net/repository/5d8ba04d-c788-4f87-839f-4fdb7f473c5d/2/BD69A2AC88B3D0429D235DFEEF33C7D262E4E8B3.mft rsync://rsync.paas.rpki.ripe.net/repository/e805ea5c-d7a3-4848-837b-4697ccdd6efe/5/BD69A2AC88B3D0429D235DFEEF33C7D262E4E8B3.cer rsync://rsync.paas.rpki.ripe.net/repository/e805ea5c-d7a3-4848-837b-4697ccdd6efe/5/238A11AE245357E72FEB39785C7BC03A973A44E1.crl rsync://rsync.paas.rpki.ripe.net/repository/e805ea5c-d7a3-4848-837b-4697ccdd6efe/5/238A11AE245357E72FEB39785C7BC03A973A44E1.mft rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/0/238A11AE245357E72FEB39785C7BC03A973A44E1.cer rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/0/0E70AE0ACD0BE83D2D458CA207B1D4FFA3C3E4EA.crl rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/0/0E70AE0ACD0BE83D2D458CA207B1D4FFA3C3E4EA.mft rsync://rpki.ripe.net/repository/DEFAULT/DnCuCs0L6D0tRYyiB7HU_6PD5Oo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 16 Nov 2026 08:31:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:6c:ba:e4:74:c0:fd:a0:0e:f6:3d:40:94:20:b8:e0:ce:6b:fa:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BD69A2AC88B3D0429D235DFEEF33C7D262E4E8B3 Validity Not Before: Nov 15 15:45:18 2026 GMT Not After : Nov 16 19:36:18 2026 GMT Subject: CN=37225EE780FB7EA0142A8DC1D73F9E4F3674F4BE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:4f:bd:de:2b:3f:b7:d8:3f:18:9a:26:a4:81: 4c:49:73:9b:c2:b0:6e:bf:4b:c7:b6:a0:dc:3d:9a: 6b:17:3a:37:b5:a1:03:b3:00:d8:64:55:08:6a:e8: b4:34:27:b9:7b:2d:ca:a7:5d:ca:a0:e9:1c:b5:0b: c9:6f:97:ad:9b:f9:1f:8a:a7:45:df:8a:e4:6a:90: 2a:cb:d4:a6:b4:a1:dd:68:12:b8:b1:1f:25:36:a4: d1:3e:1c:95:6c:8e:be:b8:d4:01:01:71:be:06:25: 83:52:ad:93:35:21:bd:7e:81:76:60:7c:20:c4:67: 88:13:95:50:2c:3c:da:34:72:e7:99:65:b2:fe:1e: 86:86:88:a5:de:ed:94:9e:35:e1:13:eb:fa:d7:cd: ea:c9:ae:1b:f7:4b:4b:77:4e:a9:41:63:87:8e:8b: b9:5c:ff:35:d1:f8:14:ee:05:7f:5b:3c:99:13:2a: b1:74:3b:70:be:d7:be:f5:27:8a:dc:85:e4:08:5a: 6a:ea:95:de:9b:3f:d8:f7:7c:08:28:01:7a:87:13: a7:ec:8c:0c:cc:4c:4c:37:e8:ee:ea:b0:57:30:a4: 2c:b0:70:75:22:38:c2:86:9e:26:99:c8:fb:ad:68: ee:38:bc:4c:b0:24:ec:db:73:15:d6:d2:b4:34:46: 7e:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:22:5E:E7:80:FB:7E:A0:14:2A:8D:C1:D7:3F:9E:4F:36:74:F4:BE X509v3 Authority Key Identifier: keyid:BD:69:A2:AC:88:B3:D0:42:9D:23:5D:FE:EF:33:C7:D2:62:E4:E8:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/5d8ba04d-c788-4f87-839f-4fdb7f473c5d/2/BD69A2AC88B3D0429D235DFEEF33C7D262E4E8B3.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/e805ea5c-d7a3-4848-837b-4697ccdd6efe/5/BD69A2AC88B3D0429D235DFEEF33C7D262E4E8B3.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/5d8ba04d-c788-4f87-839f-4fdb7f473c5d/2/BD69A2AC88B3D0429D235DFEEF33C7D262E4E8B3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:2f:31:22:94:cc:61:16:39:d3:f0:94:c5:3b:a7:75:94:8f: b2:d1:b1:63:91:9b:c4:cc:02:78:bc:d9:8c:4a:74:2c:3d:e2: 5a:70:98:99:b9:fe:e6:28:f7:f7:3b:1a:f9:b2:1f:06:55:0e: 79:e3:eb:14:a3:7f:57:07:13:32:9b:b1:42:8e:1c:af:dc:97: d8:e2:22:11:38:87:3f:08:69:a6:ad:29:80:22:50:f1:eb:c4: 7b:91:82:7d:ca:ae:93:60:ce:57:7b:a5:3c:8a:49:8b:e1:95: 28:2c:d8:18:9b:b3:f0:15:29:72:63:db:11:06:80:4d:e4:47: b1:af:2a:c7:a8:c2:94:9f:38:a2:2d:3f:f4:ad:51:78:5a:d6: c6:ab:b0:c6:9f:a1:22:ff:20:86:47:6a:4f:53:48:bb:fa:d5: e4:be:72:4f:5b:70:14:e5:70:41:34:fe:10:93:98:c2:c0:94: 6c:d8:89:96:64:6e:38:5e:2a:f2:04:1a:14:cd:11:30:3b:94: 67:e3:67:70:09:94:4e:e2:83:52:cf:c3:6c:3c:15:54:76:90: 3e:00:ee:77:4e:66:da:42:48:5f:e0:64:69:61:1a:9e:94:02: ef:4f:8c:d5:19:f5:f0:a4:f8:2b:7a:73:23:20:92:33:64:85: 2f:67:72:e2 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUCWy65HTA/aAO9j1AlCC44M5r+mUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkQ2OUEyQUM4OEIzRDA0MjlEMjM1REZFRUYzM0M3RDI2 MkU0RThCMzAeFw0yNjExMTUxNTQ1MThaFw0yNjExMTYxOTM2MThaMDMxMTAvBgNV BAMTKDM3MjI1RUU3ODBGQjdFQTAxNDJBOERDMUQ3M0Y5RTRGMzY3NEY0QkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVT73eKz+32D8YmiakgUxJc5vC sG6/S8e2oNw9mmsXOje1oQOzANhkVQhq6LQ0J7l7LcqnXcqg6Ry1C8lvl62b+R+K p0XfiuRqkCrL1Ka0od1oErixHyU2pNE+HJVsjr641AEBcb4GJYNSrZM1Ib1+gXZg fCDEZ4gTlVAsPNo0cueZZbL+HoaGiKXe7ZSeNeET6/rXzerJrhv3S0t3TqlBY4eO i7lc/zXR+BTuBX9bPJkTKrF0O3C+1771J4rcheQIWmrqld6bP9j3fAgoAXqHE6fs jAzMTEw36O7qsFcwpCywcHUiOMKGniaZyPutaO44vEywJOzbcxXW0rQ0Rn4TAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUNyJe54D7fqAUKo3B1z+eTzZ09L4wHwYDVR0j BBgwFoAUvWmirIiz0EKdI13+7zPH0mLk6LMwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNWQ4YmEwNGQtYzc4OC00Zjg3LTgzOWYtNGZkYjdmNDcz YzVkLzIvQkQ2OUEyQUM4OEIzRDA0MjlEMjM1REZFRUYzM0M3RDI2MkU0RThCMy5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9lODA1ZWE1Yy1kN2EzLTQ4 NDgtODM3Yi00Njk3Y2NkZDZlZmUvNS9CRDY5QTJBQzg4QjNEMDQyOUQyMzVERkVF RjMzQzdEMjYyRTRFOEIzLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzVkOGJhMDRkLWM3ODgtNGY4Ny04MzlmLTRmZGI3ZjQ3M2M1ZC8yL0JENjlBMkFD ODhCM0QwNDI5RDIzNURGRUVGMzNDN0QyNjJFNEU4QjMubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBRLzEi lMxhFjnT8JTFO6d1lI+y0bFjkZvEzAJ4vNmMSnQsPeJacJiZuf7mKPf3Oxr5sh8G VQ554+sUo39XBxMym7FCjhyv3JfY4iIROIc/CGmmrSmAIlDx68R7kYJ9yq6TYM5X e6U8ikmL4ZUoLNgYm7PwFSlyY9sRBoBN5EexryrHqMKUnziiLT/0rVF4WtbGq7DG n6Ei/yCGR2pPU0i7+tXkvnJPW3AU5XBBNP4Qk5jCwJRs2ImWZG44XiryBBoUzREw O5Rn42dwCZRO4oNSz8NsPBVUdpA+AO53TmbaQkhf4GRpYRqelALvT4zVGfXwpPgr enMjIJIzZIUvZ3Li -----END CERTIFICATE-----Generated at Sun Nov 15 18:37:33 2026 by rpki-client