$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ac143387-f013-4922-838e-e18864be1e4a/0/BE0BB78869CDB2AD0C971A6A858A30213EAEC47D.mft File: BE0BB78869CDB2AD0C971A6A858A30213EAEC47D.mft (raw, json) Hash identifier: j6JmLU9tXltqkWlQJIIoNUa0J9z8RsTZ5VcXcemBGGA= Subject key identifier: 80:D2:4B:F5:DB:91:D6:3C:E6:79:20:4E:D3:5E:CF:43:A2:EB:36:61 Authority key identifier: BE:0B:B7:88:69:CD:B2:AD:0C:97:1A:6A:85:8A:30:21:3E:AE:C4:7D Certificate issuer: /CN=be0bb78869cdb2ad0c971a6a858a30213eaec47d Certificate serial: 5F8A082BE971EDC8D6200F4CDC770D8D4E03BCB4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vgu3iGnNsq0MlxpqhYowIT6uxH0.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ac143387-f013-4922-838e-e18864be1e4a/0/BE0BB78869CDB2AD0C971A6A858A30213EAEC47D.mft Manifest number: 02C6 Signing time: Thu 23 Jul 2026 13:28:25 +0000 Manifest this update: Thu 23 Jul 2026 13:23:25 +0000 Manifest next update: Fri 24 Jul 2026 14:05:25 +0000 Files and hashes: 1: 3137382e3234382e37322e302f32342d3234203d3e20313534343032.roa (hash: CmSSgp2rOmRDakFss7YxyL+V/oYFT12bvLwpMMXS8Tk=) 2: 3137382e3234382e37362e302f32342d3234203d3e203432383331.roa (hash: FQiM0Ff1DCSzma5DiHQMrsfmN7QznFFoSzW1a5q9Q2M=) 3: 3139352e34322e3131322e302f32342d3234203d3e203438343335.roa (hash: tbJb4NeQxaqdUwJnx0mi5eYh93xW1wx/PyQm3nNKQlk=) 4: 3137382e3234382e37342e302f32342d3234203d3e20323035343839.roa (hash: D0Owph/oL3mL5VwchRzGIXC3cMHzv1rxTr5Ojjef5Y4=) 5: BE0BB78869CDB2AD0C971A6A858A30213EAEC47D.crl (hash: PZEzxL3frMZB+izOebAHdGf96eX9MzTWhBLnG66sxJU=) 6: 3139352e34322e3131322e302f32332d3233203d3e203438343335.roa (hash: SO5iYpxppDi067L1otYSj19apV4zwNvimr95590708A=) 7: 3139332e3136392e37382e302f32332d3234203d3e203530343334.roa (hash: Ozt3uRUP9szxnq6Y/BlUHZo63N6fYBwOlNZT3blQYnY=) 8: 3137382e3234382e37382e302f32342d3234203d3e20323132333834.roa (hash: sj3Mzc5uAM4fOfd+NlVLzXe7KVKZIN7ymsHfPBwN4+I=) 9: 3139352e34322e3131332e302f32342d3234203d3e203438343335.roa (hash: pchbJm+Br/uCuzzDsgfU4W3Dq3tZwJWDYbuhydm/Eyc=) 10: 3139332e3136392e37382e302f32332d3234203d3e203438343335.roa (hash: 7BonRadnccE5oClU90cDWqb2zFnrszRs5TdXh7lrUTg=) 11: 3139332e3136392e37382e302f32332d3233203d3e203438343335.roa (hash: CCPO6h/MpNSX08leEvwwJIjESWw2OEutpIc59PlyY9E=) 12: 3137382e3234382e37392e302f32342d3234203d3e20313335333932.roa (hash: YE6bAehCH8ruShBFJdgU4NCX9qGkifZ5lR9x24K4y2c=) 13: 3137382e3234382e37332e302f32342d3234203d3e20313431393638.roa (hash: 7xtsmIrFnzH8qIFMhr9PIJTBifAuGHXQXdM1XzYoP7s=) 14: 3137382e3234382e37352e302f32342d3234203d3e20313939303538.roa (hash: 32SDZVJ37JJ5kdrs24paGjp5boRcUJ2fYJyMfyL4cw4=) 15: 3137382e3234382e37372e302f32342d3234203d3e20323133373833.roa (hash: QA/AmBx/vt6J6eDW0Y/+kHvJueiOPr7O1NVAvBIe9GY=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ac143387-f013-4922-838e-e18864be1e4a/0/BE0BB78869CDB2AD0C971A6A858A30213EAEC47D.crl rsync://rsync.paas.rpki.ripe.net/repository/ac143387-f013-4922-838e-e18864be1e4a/0/BE0BB78869CDB2AD0C971A6A858A30213EAEC47D.mft rsync://rpki.ripe.net/repository/DEFAULT/vgu3iGnNsq0MlxpqhYowIT6uxH0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 24 Jul 2026 14:05:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:8a:08:2b:e9:71:ed:c8:d6:20:0f:4c:dc:77:0d:8d:4e:03:bc:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=be0bb78869cdb2ad0c971a6a858a30213eaec47d Validity Not Before: Jul 23 13:23:25 2026 GMT Not After : Jul 24 14:05:25 2026 GMT Subject: CN=80D24BF5DB91D63CE679204ED35ECF43A2EB3661 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:9f:af:c4:58:d5:b7:96:09:66:50:b7:76:39: 10:5e:e4:75:cd:61:13:47:a8:3e:aa:cf:fa:2b:74: 81:fb:59:92:69:14:62:66:d3:8e:8a:6c:95:6f:4f: a0:f3:14:a6:20:58:25:7f:81:f7:00:dc:1d:9b:ce: b0:64:cd:35:9e:a5:cd:49:55:e4:0c:46:4f:ee:29: 3a:07:8e:68:aa:b6:34:f4:3f:f9:df:ad:0d:e8:c1: 9e:82:48:d7:fb:32:d0:13:43:96:26:f6:b5:4c:b7: ae:9f:50:b8:a2:9b:98:80:48:7a:9d:eb:43:2d:62: 2f:5d:79:fe:26:a2:7d:7a:c4:80:1b:f7:ab:10:4e: 75:96:fe:ea:e4:f4:e2:f2:0e:43:8e:45:ba:6b:bf: 57:46:4e:25:ab:e2:e1:0d:1b:ca:21:03:56:b6:01: 78:75:97:49:67:ba:61:e7:11:94:1f:27:80:7b:e8: 37:1f:f4:b5:78:90:37:0a:b4:dd:09:b6:6c:7d:d5: 6a:69:07:31:2c:ac:41:d5:80:6a:c4:52:3f:d0:fd: ac:cb:c2:d9:1b:ff:5b:25:ff:54:1b:46:ba:58:a2: d0:61:83:85:ca:0e:e1:dc:1e:39:96:90:97:d6:fc: e2:43:14:36:06:f6:53:e4:1e:b6:b1:1c:77:c8:1d: 90:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:D2:4B:F5:DB:91:D6:3C:E6:79:20:4E:D3:5E:CF:43:A2:EB:36:61 X509v3 Authority Key Identifier: keyid:BE:0B:B7:88:69:CD:B2:AD:0C:97:1A:6A:85:8A:30:21:3E:AE:C4:7D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/ac143387-f013-4922-838e-e18864be1e4a/0/BE0BB78869CDB2AD0C971A6A858A30213EAEC47D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vgu3iGnNsq0MlxpqhYowIT6uxH0.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ac143387-f013-4922-838e-e18864be1e4a/0/BE0BB78869CDB2AD0C971A6A858A30213EAEC47D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:f3:6e:b9:12:ab:19:3a:3d:2e:c5:e3:a2:a9:bb:73:4e:41: 9a:a0:f6:2e:f3:9f:70:70:06:7c:ac:05:dc:f5:8d:5d:91:ef: 44:b7:eb:94:b4:34:71:b4:cd:b4:fa:01:fb:d5:8b:00:b9:80: d3:3a:8c:00:5b:5a:47:19:fd:fc:eb:3c:6d:fd:8a:e0:f1:01: f9:4a:14:55:55:eb:56:15:3d:88:39:8d:9a:db:3d:76:82:3c: a7:81:a8:97:52:55:14:99:22:8e:fc:43:bb:54:4e:c1:88:18: 08:c5:f6:8d:2b:0d:1a:8a:7b:51:c3:30:74:4e:6d:49:c5:6a: 93:18:16:f9:00:95:a2:66:b8:71:1e:72:2a:2a:75:4b:53:80: 42:b8:59:c0:25:4a:3b:e6:ef:75:5e:1d:f0:8f:0b:95:30:61: d3:1c:d3:d5:8f:74:22:52:f2:a1:e2:80:25:59:69:68:91:aa: 8d:57:2b:3f:97:26:2d:e1:7f:2f:5c:ed:89:45:f3:65:46:1e: e8:da:1f:61:10:2e:68:63:fa:5e:55:53:80:9e:eb:78:a3:a1: 2c:3e:df:42:3e:b6:99:e2:84:85:e3:43:35:7f:63:80:a1:9c: 4b:40:43:3c:2c:bf:99:c7:2c:ac:7c:28:e8:fa:54:82:52:d4: 60:7c:b9:88 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUX4oIK+lx7cjWIA9M3HcNjU4DvLQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYmUwYmI3ODg2OWNkYjJhZDBjOTcxYTZhODU4YTMwMjEz ZWFlYzQ3ZDAeFw0yNjA3MjMxMzIzMjVaFw0yNjA3MjQxNDA1MjVaMDMxMTAvBgNV BAMTKDgwRDI0QkY1REI5MUQ2M0NFNjc5MjA0RUQzNUVDRjQzQTJFQjM2NjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCln6/EWNW3lglmULd2ORBe5HXN YRNHqD6qz/ordIH7WZJpFGJm046KbJVvT6DzFKYgWCV/gfcA3B2bzrBkzTWepc1J VeQMRk/uKToHjmiqtjT0P/nfrQ3owZ6CSNf7MtATQ5Ym9rVMt66fULiim5iASHqd 60MtYi9def4mon16xIAb96sQTnWW/urk9OLyDkOORbprv1dGTiWr4uENG8ohA1a2 AXh1l0lnumHnEZQfJ4B76Dcf9LV4kDcKtN0Jtmx91WppBzEsrEHVgGrEUj/Q/azL wtkb/1sl/1QbRrpYotBhg4XKDuHcHjmWkJfW/OJDFDYG9lPkHraxHHfIHZBpAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUgNJL9duR1jzmeSBO017PQ6LrNmEwHwYDVR0j BBgwFoAUvgu3iGnNsq0MlxpqhYowIT6uxH0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYWMxNDMzODctZjAxMy00OTIyLTgzOGUtZTE4ODY0YmUx ZTRhLzAvQkUwQkI3ODg2OUNEQjJBRDBDOTcxQTZBODU4QTMwMjEzRUFFQzQ3RC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3ZndTNpR25Oc3EwTWx4cHFoWW93SVQ2 dXhIMC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9hYzE0MzM4Ny1m MDEzLTQ5MjItODM4ZS1lMTg4NjRiZTFlNGEvMC9CRTBCQjc4ODY5Q0RCMkFEMEM5 NzFBNkE4NThBMzAyMTNFQUVDNDdELm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgvNuuRKrGTo9LsXjoqm7 c05BmqD2LvOfcHAGfKwF3PWNXZHvRLfrlLQ0cbTNtPoB+9WLALmA0zqMAFtaRxn9 /Os8bf2K4PEB+UoUVVXrVhU9iDmNmts9doI8p4Gol1JVFJkijvxDu1ROwYgYCMX2 jSsNGop7UcMwdE5tScVqkxgW+QCVoma4cR5yKip1S1OAQrhZwCVKO+bvdV4d8I8L lTBh0xzT1Y90IlLyoeKAJVlpaJGqjVcrP5cmLeF/L1ztiUXzZUYe6NofYRAuaGP6 XlVTgJ7reKOhLD7fQj62meKEheNDNX9jgKGcS0BDPCy/mccsrHwo6PpUglLUYHy5 iA== -----END CERTIFICATE-----Generated at Fri Jul 24 03:18:03 2026 by rpki-client