$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ac143387-f013-4922-838e-e18864be1e4a/0/BE0BB78869CDB2AD0C971A6A858A30213EAEC47D.mft File: BE0BB78869CDB2AD0C971A6A858A30213EAEC47D.mft (raw, json) Hash identifier: R2+X73zfmR/Xs0hHmH1iOAA7WBckZ4dHw32qr4A7xUQ= Subject key identifier: 1B:A1:3B:0A:52:EB:77:CE:F9:BD:BE:33:64:74:C9:55:2D:F3:33:7D Authority key identifier: BE:0B:B7:88:69:CD:B2:AD:0C:97:1A:6A:85:8A:30:21:3E:AE:C4:7D Certificate issuer: /CN=be0bb78869cdb2ad0c971a6a858a30213eaec47d Certificate serial: 5EEFD6A4242D6C0987ACDEB48495399C0101E93C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vgu3iGnNsq0MlxpqhYowIT6uxH0.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ac143387-f013-4922-838e-e18864be1e4a/0/BE0BB78869CDB2AD0C971A6A858A30213EAEC47D.mft Manifest number: 0223 Signing time: Wed 25 Mar 2026 16:11:05 +0000 Manifest this update: Wed 25 Mar 2026 16:06:05 +0000 Manifest next update: Thu 26 Mar 2026 18:25:05 +0000 Files and hashes: 1: 3137382e3234382e37372e302f32342d3234203d3e20323133373833.roa (hash: QA/AmBx/vt6J6eDW0Y/+kHvJueiOPr7O1NVAvBIe9GY=) 2: 3137382e3234382e37392e302f32342d3234203d3e20313335333932.roa (hash: YE6bAehCH8ruShBFJdgU4NCX9qGkifZ5lR9x24K4y2c=) 3: 3137382e3234382e37382e302f32342d3234203d3e20323132333834.roa (hash: 55oHxRvhLlFnFgVNA6T2hJ74AYC9yyl40HSKUWc/res=) 4: 3139352e34322e3131322e302f32332d3233203d3e203438343335.roa (hash: SO5iYpxppDi067L1otYSj19apV4zwNvimr95590708A=) 5: 3139332e3136392e37382e302f32332d3234203d3e203530343334.roa (hash: Ozt3uRUP9szxnq6Y/BlUHZo63N6fYBwOlNZT3blQYnY=) 6: 3137382e3234382e37332e302f32342d3234203d3e20313431393638.roa (hash: zMoHCJaZZ5vI4uszw9fV0p+6ygU9pfTnJ4jfa1DsJEg=) 7: 3137382e3234382e37362e302f32342d3234203d3e203432383331.roa (hash: FQiM0Ff1DCSzma5DiHQMrsfmN7QznFFoSzW1a5q9Q2M=) 8: 3139332e3136392e37382e302f32332d3234203d3e203438343335.roa (hash: 7BonRadnccE5oClU90cDWqb2zFnrszRs5TdXh7lrUTg=) 9: 3139352e34322e3131322e302f32342d3234203d3e203438343335.roa (hash: tbJb4NeQxaqdUwJnx0mi5eYh93xW1wx/PyQm3nNKQlk=) 10: 3137382e3234382e37322e302f32342d3234203d3e20313531383732.roa (hash: wHwcwoFIrN2jLP/C8OzdoSzmdobOAFysYNlbWgxelzw=) 11: 3137382e3234382e37352e302f32342d3234203d3e20313939303538.roa (hash: 32SDZVJ37JJ5kdrs24paGjp5boRcUJ2fYJyMfyL4cw4=) 12: BE0BB78869CDB2AD0C971A6A858A30213EAEC47D.crl (hash: nq3/gXgK7f5EifqvGNbj8z3RnTErN0OXxU5/itDXEOY=) 13: 3139352e34322e3131332e302f32342d3234203d3e203438343335.roa (hash: pchbJm+Br/uCuzzDsgfU4W3Dq3tZwJWDYbuhydm/Eyc=) 14: 3137382e3234382e37342e302f32342d3234203d3e20323039313831.roa (hash: b86TJ/eicDu3L39UHlXUFvq/1qF9nZUOZYH3MsfWUIw=) 15: 3139332e3136392e37382e302f32332d3233203d3e203438343335.roa (hash: CCPO6h/MpNSX08leEvwwJIjESWw2OEutpIc59PlyY9E=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ac143387-f013-4922-838e-e18864be1e4a/0/BE0BB78869CDB2AD0C971A6A858A30213EAEC47D.crl rsync://rsync.paas.rpki.ripe.net/repository/ac143387-f013-4922-838e-e18864be1e4a/0/BE0BB78869CDB2AD0C971A6A858A30213EAEC47D.mft rsync://rpki.ripe.net/repository/DEFAULT/vgu3iGnNsq0MlxpqhYowIT6uxH0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 26 Mar 2026 15:17:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:ef:d6:a4:24:2d:6c:09:87:ac:de:b4:84:95:39:9c:01:01:e9:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=be0bb78869cdb2ad0c971a6a858a30213eaec47d Validity Not Before: Mar 25 16:06:05 2026 GMT Not After : Mar 26 18:25:05 2026 GMT Subject: CN=1BA13B0A52EB77CEF9BDBE336474C9552DF3337D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:00:3e:45:29:a1:86:b3:11:44:60:69:ea:b5: 76:79:d2:0b:12:d6:60:23:d3:f7:9c:2f:58:75:b5: 48:b8:52:47:eb:01:a8:13:75:4d:a2:02:37:d2:99: f0:55:20:a5:25:c9:0b:28:e1:4d:86:f6:29:d6:17: 1e:7a:68:92:32:9d:47:8a:81:cb:db:54:5d:8f:18: 77:3f:63:69:78:55:bf:40:f3:4f:64:f1:d7:90:f3: 4f:4c:35:1e:ee:d4:e2:7a:7d:f0:8b:a3:cf:66:48: df:41:6f:42:3e:83:79:9d:68:94:d1:be:e1:aa:8f: 7b:ef:c6:bc:76:e6:a4:82:11:72:a1:d3:4b:91:93: bf:96:6d:84:8d:84:b0:81:2e:e3:5d:90:fe:35:7c: 16:3c:be:b2:7e:77:40:25:50:91:32:e7:73:98:2a: 51:4c:6e:a1:92:3d:a5:37:b0:57:00:26:c5:ea:c2: 28:7c:46:26:f0:c5:9a:74:f2:da:22:a6:73:16:ab: 12:81:55:60:7a:7d:e0:f1:24:5e:a9:07:16:8d:6d: 1b:68:c4:73:63:d4:6f:c0:87:70:80:c3:d9:4f:7d: f8:2c:d2:2c:d1:a9:80:ed:8f:50:43:dc:1e:72:55: 0c:2b:31:7d:dc:4b:b2:3d:39:8d:83:e7:0d:8e:fb: 3a:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:A1:3B:0A:52:EB:77:CE:F9:BD:BE:33:64:74:C9:55:2D:F3:33:7D X509v3 Authority Key Identifier: keyid:BE:0B:B7:88:69:CD:B2:AD:0C:97:1A:6A:85:8A:30:21:3E:AE:C4:7D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/ac143387-f013-4922-838e-e18864be1e4a/0/BE0BB78869CDB2AD0C971A6A858A30213EAEC47D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vgu3iGnNsq0MlxpqhYowIT6uxH0.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ac143387-f013-4922-838e-e18864be1e4a/0/BE0BB78869CDB2AD0C971A6A858A30213EAEC47D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:d8:bc:b2:2a:de:b1:cb:f3:79:c0:b8:9c:33:e2:82:49:3a: 2a:09:02:e0:86:95:f1:44:d0:2c:1c:07:46:2a:84:2a:e3:ec: 31:97:0e:e4:fb:fa:d8:44:dc:1c:70:fd:f2:f9:79:5d:62:8b: 9f:65:b7:61:fd:cd:a3:ce:61:7e:fa:01:79:3b:2d:f3:8a:0c: d9:66:9a:1a:1a:e5:82:2f:be:12:97:08:64:0f:fb:9a:f3:bb: 74:e6:93:dc:e9:ec:9e:a3:0b:1e:78:30:2e:fe:69:c7:4a:16: 66:00:ef:bc:75:ed:de:8a:7f:93:49:1f:17:02:9d:6e:46:c3: 3e:9e:13:c4:5b:91:e1:60:72:6a:b1:cb:aa:4c:f6:4a:1b:83: 43:76:e2:a1:10:af:31:1a:f7:47:4c:11:e1:5b:d2:86:86:85: 0d:a8:4b:b3:50:ca:48:1a:05:94:ae:75:ef:08:45:b2:a6:7c: 44:15:fe:73:7d:1f:cb:13:fc:56:1f:3f:b3:6b:bd:bc:7c:fd: cf:ee:22:fa:60:27:96:66:38:d3:15:e0:3a:f8:83:0a:66:0c: ea:53:e2:b8:d3:17:de:6b:44:e0:6a:bc:40:b8:e6:7a:11:eb: 32:c0:9e:49:ff:28:0f:0d:45:34:12:02:55:06:a8:f9:1c:2f: c8:fb:5a:cd -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUXu/WpCQtbAmHrN60hJU5nAEB6TwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYmUwYmI3ODg2OWNkYjJhZDBjOTcxYTZhODU4YTMwMjEz ZWFlYzQ3ZDAeFw0yNjAzMjUxNjA2MDVaFw0yNjAzMjYxODI1MDVaMDMxMTAvBgNV BAMTKDFCQTEzQjBBNTJFQjc3Q0VGOUJEQkUzMzY0NzRDOTU1MkRGMzMzN0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCSAD5FKaGGsxFEYGnqtXZ50gsS 1mAj0/ecL1h1tUi4UkfrAagTdU2iAjfSmfBVIKUlyQso4U2G9inWFx56aJIynUeK gcvbVF2PGHc/Y2l4Vb9A809k8deQ809MNR7u1OJ6ffCLo89mSN9Bb0I+g3mdaJTR vuGqj3vvxrx25qSCEXKh00uRk7+WbYSNhLCBLuNdkP41fBY8vrJ+d0AlUJEy53OY KlFMbqGSPaU3sFcAJsXqwih8RibwxZp08toipnMWqxKBVWB6feDxJF6pBxaNbRto xHNj1G/Ah3CAw9lPffgs0izRqYDtj1BD3B5yVQwrMX3cS7I9OY2D5w2O+zobAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUG6E7ClLrd875vb4zZHTJVS3zM30wHwYDVR0j BBgwFoAUvgu3iGnNsq0MlxpqhYowIT6uxH0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYWMxNDMzODctZjAxMy00OTIyLTgzOGUtZTE4ODY0YmUx ZTRhLzAvQkUwQkI3ODg2OUNEQjJBRDBDOTcxQTZBODU4QTMwMjEzRUFFQzQ3RC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3ZndTNpR25Oc3EwTWx4cHFoWW93SVQ2 dXhIMC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9hYzE0MzM4Ny1m MDEzLTQ5MjItODM4ZS1lMTg4NjRiZTFlNGEvMC9CRTBCQjc4ODY5Q0RCMkFEMEM5 NzFBNkE4NThBMzAyMTNFQUVDNDdELm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATNi8sirescvzecC4nDPi gkk6KgkC4IaV8UTQLBwHRiqEKuPsMZcO5Pv62ETcHHD98vl5XWKLn2W3Yf3No85h fvoBeTst84oM2WaaGhrlgi++EpcIZA/7mvO7dOaT3OnsnqMLHngwLv5px0oWZgDv vHXt3op/k0kfFwKdbkbDPp4TxFuR4WByarHLqkz2ShuDQ3bioRCvMRr3R0wR4VvS hoaFDahLs1DKSBoFlK517whFsqZ8RBX+c30fyxP8Vh8/s2u9vHz9z+4i+mAnlmY4 0xXgOviDCmYM6lPiuNMX3mtE4Gq8QLjmehHrMsCeSf8oDw1FNBICVQao+RwvyPta zQ== -----END CERTIFICATE-----Generated at Thu Mar 26 00:37:34 2026 by rpki-client