$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ac143387-f013-4922-838e-e18864be1e4a/0/BE0BB78869CDB2AD0C971A6A858A30213EAEC47D.mft File: BE0BB78869CDB2AD0C971A6A858A30213EAEC47D.mft (raw, json) Hash identifier: Df79+Nnbl0uCeTyTBRm+JB9hoypbb5PavO4i89Tf+9Y= Subject key identifier: BB:78:F5:00:5E:32:D7:1B:0C:14:60:EF:07:45:28:75:17:2A:DA:33 Authority key identifier: BE:0B:B7:88:69:CD:B2:AD:0C:97:1A:6A:85:8A:30:21:3E:AE:C4:7D Certificate issuer: /CN=be0bb78869cdb2ad0c971a6a858a30213eaec47d Certificate serial: 51688797CBD837483AF3FB136078901B5A1438D4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vgu3iGnNsq0MlxpqhYowIT6uxH0.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ac143387-f013-4922-838e-e18864be1e4a/0/BE0BB78869CDB2AD0C971A6A858A30213EAEC47D.mft Manifest number: B8 Signing time: Sat 28 Jun 2025 13:24:10 +0000 Manifest this update: Sat 28 Jun 2025 13:19:10 +0000 Manifest next update: Sun 29 Jun 2025 16:04:10 +0000 Files and hashes: 1: 3137382e3234382e37362e302f32342d3234203d3e20323135333034.roa (hash: XrWwPHt91qxXHQ0/kVWO42vo3gTicR3T1AogX5xX6FY=) 2: 3137382e3234382e37382e302f32342d3234203d3e20323132333834.roa (hash: 55oHxRvhLlFnFgVNA6T2hJ74AYC9yyl40HSKUWc/res=) 3: 3139332e3136392e37382e302f32332d3233203d3e203438343335.roa (hash: IDuy7mlGaLMOCgzEdx2/1ouXbZ90tr9UBkMDq0knNXg=) 4: 3137382e3234382e37332e302f32342d3234203d3e20313431393638.roa (hash: zMoHCJaZZ5vI4uszw9fV0p+6ygU9pfTnJ4jfa1DsJEg=) 5: 3137382e3234382e37322e302f32342d3234203d3e20313531383732.roa (hash: 562I7wk8pDZNtdMzcEoC9Q7KQUjR9i2cYfXfdpaRXg8=) 6: 3139332e3136392e37382e302f32332d3234203d3e203438343335.roa (hash: 0e4l5EqcD9+SWWVL79QZba03Lu9mdjyR/TfDJr390dA=) 7: 3139332e3136392e37382e302f32332d3234203d3e203530343334.roa (hash: i+j0/SqL92pXqr/Yt38MmbwZjTIQClt05q1Bhtl74qs=) 8: 3137382e3234382e37362e302f32342d3234203d3e203336353330.roa (hash: h2oY8dMCuUJOV8h2ooYxtJO3njho899x4gMqGa23JNE=) 9: 3139352e34322e3131322e302f32342d3234203d3e203438343335.roa (hash: 0fCZnPcUR/TU0KGeDhdE4rzY8AMOIFMDCEwGzQYi3Zw=) 10: 3137382e3234382e37392e302f32342d3234203d3e20313335333932.roa (hash: nkla74pmgzof6BdGTx/D9Sn3aXq/+fT/xyCtH2Ux1lE=) 11: 3139352e34322e3131322e302f32332d3233203d3e203438343335.roa (hash: LnJ/05IgVINSSDv4l3ajCKuAD4mr9PXKyWCylRmwux0=) 12: 3137382e3234382e37352e302f32342d3234203d3e20313939303538.roa (hash: 0IUSu+qptfP2e6dJnAny9tG4Cb2xcvVtmtBD0i4piak=) 13: 3137382e3234382e37342e302f32342d3234203d3e20323039313831.roa (hash: JOjM4S47fNK82HVGI3kzft2889UH/2/CmD3owvdrCqM=) 14: 3139352e34322e3131332e302f32342d3234203d3e203438343335.roa (hash: aYbyRGpjGAy7pzSZSZu9mIeZ8V/FjY5/eUQvPy2nJ/Y=) 15: BE0BB78869CDB2AD0C971A6A858A30213EAEC47D.crl (hash: cpidO95LP9e4iQ1BqdZCXBem/ve6TkmmfwoA6o20K6U=) 16: 3137382e3234382e37372e302f32342d3234203d3e20323133373833.roa (hash: IZUL7zEfrS59nO5eqaFvUNxkfEHC3BRjyZY2ApRcoSg=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ac143387-f013-4922-838e-e18864be1e4a/0/BE0BB78869CDB2AD0C971A6A858A30213EAEC47D.crl rsync://rsync.paas.rpki.ripe.net/repository/ac143387-f013-4922-838e-e18864be1e4a/0/BE0BB78869CDB2AD0C971A6A858A30213EAEC47D.mft rsync://rpki.ripe.net/repository/DEFAULT/vgu3iGnNsq0MlxpqhYowIT6uxH0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 29 Jun 2025 15:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:68:87:97:cb:d8:37:48:3a:f3:fb:13:60:78:90:1b:5a:14:38:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=be0bb78869cdb2ad0c971a6a858a30213eaec47d Validity Not Before: Jun 28 13:19:10 2025 GMT Not After : Jun 29 16:04:10 2025 GMT Subject: CN=BB78F5005E32D71B0C1460EF07452875172ADA33 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:c1:9c:32:61:2c:ff:05:27:6d:05:df:0e:cc: 9c:db:c4:ae:3a:5c:af:8e:cd:2d:11:3a:d3:50:7b: 12:c0:d0:22:b8:f3:c2:67:64:28:28:c7:1b:c5:35: 76:d8:5b:cb:5a:cd:b5:18:ca:6e:74:c3:e9:29:52: bf:06:c5:50:83:d0:84:d1:53:24:7b:5f:d6:ae:8e: 47:2c:5d:53:7f:93:8e:ef:fd:6c:4b:58:1b:e8:3c: 54:e4:4a:d0:36:4b:90:d0:7c:72:28:d4:c8:81:28: 4f:1c:ea:ee:cc:38:34:76:31:41:86:d9:52:8f:05: 3d:bc:b6:7e:b7:65:00:96:cb:ae:c8:b9:71:c6:b6: b4:18:72:ad:85:8c:8a:1a:27:5f:91:b3:ab:7b:63: 3c:09:60:32:6c:7f:00:97:eb:a1:1f:51:ce:f9:22: 1b:a1:36:c5:4b:d1:c1:40:45:9c:ca:83:8b:cf:c8: 03:f0:15:55:aa:e4:52:da:68:7c:e2:54:1a:e1:7d: 77:8b:57:2d:19:ba:e6:fe:47:19:0f:8d:38:8c:4d: 84:32:6a:fa:78:b0:a5:65:86:cf:c4:a7:c0:18:48: 1c:ac:0c:bd:82:00:c7:cc:77:7f:93:66:68:1d:dd: 55:c4:36:96:bd:06:26:d4:e3:a7:03:04:26:b5:72: ea:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:78:F5:00:5E:32:D7:1B:0C:14:60:EF:07:45:28:75:17:2A:DA:33 X509v3 Authority Key Identifier: keyid:BE:0B:B7:88:69:CD:B2:AD:0C:97:1A:6A:85:8A:30:21:3E:AE:C4:7D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/ac143387-f013-4922-838e-e18864be1e4a/0/BE0BB78869CDB2AD0C971A6A858A30213EAEC47D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vgu3iGnNsq0MlxpqhYowIT6uxH0.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ac143387-f013-4922-838e-e18864be1e4a/0/BE0BB78869CDB2AD0C971A6A858A30213EAEC47D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:98:5b:61:a9:1d:c5:5f:38:59:a5:cb:ae:65:ab:c5:1d:70: 31:56:c3:a4:75:ff:3d:e1:7a:3a:35:9e:6c:be:e0:fe:50:e5: 1c:f3:b2:3e:88:43:c3:24:8c:68:46:74:70:bf:f9:45:e4:c7: 74:67:90:b8:e9:96:4d:0a:ee:06:17:23:2f:15:7e:c5:21:6a: e7:c0:ea:a1:26:36:6e:39:67:05:fd:ee:bf:e0:ff:31:8c:8d: cd:5d:dd:c0:ec:77:46:6a:9b:f4:77:10:4c:aa:bc:45:12:cc: f4:ac:52:c6:9b:6e:ea:4d:c0:7d:f1:72:a5:89:95:62:e2:b8: 7c:a4:41:c1:21:c5:2e:77:83:dc:5a:61:0c:97:96:c4:0d:15: 82:ee:23:53:43:46:e8:6f:38:06:55:96:09:c6:df:d5:60:cd: d9:f9:9e:8b:88:0e:a4:dc:7f:ff:3d:7d:b5:17:32:89:12:89: 9e:a3:48:ba:d6:12:39:73:7a:83:d1:d6:8a:ce:e0:73:3e:1c: 1a:25:45:86:70:07:6c:ed:99:05:d9:04:61:f4:bb:0d:7e:60: b0:aa:9d:e6:7a:37:92:1c:07:e9:c6:00:95:45:cf:20:cc:fd: 6d:f6:ca:8e:31:78:70:a4:e2:5b:2a:b1:8d:fd:46:34:8f:6f: 3e:06:03:57 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUUWiHl8vYN0g68/sTYHiQG1oUONQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYmUwYmI3ODg2OWNkYjJhZDBjOTcxYTZhODU4YTMwMjEz ZWFlYzQ3ZDAeFw0yNTA2MjgxMzE5MTBaFw0yNTA2MjkxNjA0MTBaMDMxMTAvBgNV BAMTKEJCNzhGNTAwNUUzMkQ3MUIwQzE0NjBFRjA3NDUyODc1MTcyQURBMzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD2wZwyYSz/BSdtBd8OzJzbxK46 XK+OzS0ROtNQexLA0CK488JnZCgoxxvFNXbYW8tazbUYym50w+kpUr8GxVCD0ITR UyR7X9aujkcsXVN/k47v/WxLWBvoPFTkStA2S5DQfHIo1MiBKE8c6u7MODR2MUGG 2VKPBT28tn63ZQCWy67IuXHGtrQYcq2FjIoaJ1+Rs6t7YzwJYDJsfwCX66EfUc75 IhuhNsVL0cFARZzKg4vPyAPwFVWq5FLaaHziVBrhfXeLVy0Zuub+RxkPjTiMTYQy avp4sKVlhs/Ep8AYSBysDL2CAMfMd3+TZmgd3VXENpa9BibU46cDBCa1cupFAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUu3j1AF4y1xsMFGDvB0UodRcq2jMwHwYDVR0j BBgwFoAUvgu3iGnNsq0MlxpqhYowIT6uxH0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYWMxNDMzODctZjAxMy00OTIyLTgzOGUtZTE4ODY0YmUx ZTRhLzAvQkUwQkI3ODg2OUNEQjJBRDBDOTcxQTZBODU4QTMwMjEzRUFFQzQ3RC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3ZndTNpR25Oc3EwTWx4cHFoWW93SVQ2 dXhIMC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9hYzE0MzM4Ny1m MDEzLTQ5MjItODM4ZS1lMTg4NjRiZTFlNGEvMC9CRTBCQjc4ODY5Q0RCMkFEMEM5 NzFBNkE4NThBMzAyMTNFQUVDNDdELm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfZhbYakdxV84WaXLrmWr xR1wMVbDpHX/PeF6OjWebL7g/lDlHPOyPohDwySMaEZ0cL/5ReTHdGeQuOmWTQru BhcjLxV+xSFq58DqoSY2bjlnBf3uv+D/MYyNzV3dwOx3Rmqb9HcQTKq8RRLM9KxS xptu6k3AffFypYmVYuK4fKRBwSHFLneD3FphDJeWxA0Vgu4jU0NG6G84BlWWCcbf 1WDN2fmei4gOpNx//z19tRcyiRKJnqNIutYSOXN6g9HWis7gcz4cGiVFhnAHbO2Z BdkEYfS7DX5gsKqd5no3khwH6cYAlUXPIMz9bfbKjjF4cKTiWyqxjf1GNI9vPgYD Vw== -----END CERTIFICATE-----Generated at Sat Jun 28 21:27:04 2025 by rpki-client