$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ac143387-f013-4922-838e-e18864be1e4a/0/BE0BB78869CDB2AD0C971A6A858A30213EAEC47D.mft File: BE0BB78869CDB2AD0C971A6A858A30213EAEC47D.mft (raw, json) Hash identifier: DNP+WNy3ESjr3WGMSCR1ZnCbtxOchmnSWDJRjvf6VvE= Subject key identifier: 9E:CB:A8:15:9A:D6:7D:8B:75:FA:4C:F1:AC:3F:DA:9F:E4:2A:D7:C1 Authority key identifier: BE:0B:B7:88:69:CD:B2:AD:0C:97:1A:6A:85:8A:30:21:3E:AE:C4:7D Certificate issuer: /CN=be0bb78869cdb2ad0c971a6a858a30213eaec47d Certificate serial: 5DE109974795B3282AF41F21A6760FA08D329520 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vgu3iGnNsq0MlxpqhYowIT6uxH0.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ac143387-f013-4922-838e-e18864be1e4a/0/BE0BB78869CDB2AD0C971A6A858A30213EAEC47D.mft Manifest number: D6 Signing time: Sun 20 Jul 2025 12:46:52 +0000 Manifest this update: Sun 20 Jul 2025 12:41:52 +0000 Manifest next update: Mon 21 Jul 2025 15:22:52 +0000 Files and hashes: 1: 3139352e34322e3131322e302f32332d3233203d3e203438343335.roa (hash: LnJ/05IgVINSSDv4l3ajCKuAD4mr9PXKyWCylRmwux0=) 2: 3137382e3234382e37382e302f32342d3234203d3e20323132333834.roa (hash: 55oHxRvhLlFnFgVNA6T2hJ74AYC9yyl40HSKUWc/res=) 3: 3139352e34322e3131332e302f32342d3234203d3e203438343335.roa (hash: aYbyRGpjGAy7pzSZSZu9mIeZ8V/FjY5/eUQvPy2nJ/Y=) 4: 3137382e3234382e37362e302f32342d3234203d3e20323134303234.roa (hash: JikbqnpKajZI2JuxlY+TTYmy6DToKoSov4y2Ga81BQg=) 5: 3137382e3234382e37372e302f32342d3234203d3e20323133373833.roa (hash: IZUL7zEfrS59nO5eqaFvUNxkfEHC3BRjyZY2ApRcoSg=) 6: 3139332e3136392e37382e302f32332d3234203d3e203530343334.roa (hash: i+j0/SqL92pXqr/Yt38MmbwZjTIQClt05q1Bhtl74qs=) 7: 3139332e3136392e37382e302f32332d3234203d3e203438343335.roa (hash: 0e4l5EqcD9+SWWVL79QZba03Lu9mdjyR/TfDJr390dA=) 8: BE0BB78869CDB2AD0C971A6A858A30213EAEC47D.crl (hash: Wg3qyMDU/k3lUWxk9dZbZd5BWPH10TX9WYKq5f/jFSo=) 9: 3139352e34322e3131322e302f32342d3234203d3e203438343335.roa (hash: 0fCZnPcUR/TU0KGeDhdE4rzY8AMOIFMDCEwGzQYi3Zw=) 10: 3137382e3234382e37352e302f32342d3234203d3e20313939303538.roa (hash: 0IUSu+qptfP2e6dJnAny9tG4Cb2xcvVtmtBD0i4piak=) 11: 3139332e3136392e37382e302f32332d3233203d3e203438343335.roa (hash: IDuy7mlGaLMOCgzEdx2/1ouXbZ90tr9UBkMDq0knNXg=) 12: 3137382e3234382e37342e302f32342d3234203d3e20323039313831.roa (hash: JOjM4S47fNK82HVGI3kzft2889UH/2/CmD3owvdrCqM=) 13: 3137382e3234382e37322e302f32342d3234203d3e20313531383732.roa (hash: 562I7wk8pDZNtdMzcEoC9Q7KQUjR9i2cYfXfdpaRXg8=) 14: 3137382e3234382e37362e302f32342d3234203d3e203336353330.roa (hash: h2oY8dMCuUJOV8h2ooYxtJO3njho899x4gMqGa23JNE=) 15: 3137382e3234382e37332e302f32342d3234203d3e20313431393638.roa (hash: zMoHCJaZZ5vI4uszw9fV0p+6ygU9pfTnJ4jfa1DsJEg=) 16: 3137382e3234382e37362e302f32342d3234203d3e20323135333034.roa (hash: XrWwPHt91qxXHQ0/kVWO42vo3gTicR3T1AogX5xX6FY=) 17: 3137382e3234382e37392e302f32342d3234203d3e20313335333932.roa (hash: nkla74pmgzof6BdGTx/D9Sn3aXq/+fT/xyCtH2Ux1lE=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ac143387-f013-4922-838e-e18864be1e4a/0/BE0BB78869CDB2AD0C971A6A858A30213EAEC47D.crl rsync://rsync.paas.rpki.ripe.net/repository/ac143387-f013-4922-838e-e18864be1e4a/0/BE0BB78869CDB2AD0C971A6A858A30213EAEC47D.mft rsync://rpki.ripe.net/repository/DEFAULT/vgu3iGnNsq0MlxpqhYowIT6uxH0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 21 Jul 2025 13:00:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:e1:09:97:47:95:b3:28:2a:f4:1f:21:a6:76:0f:a0:8d:32:95:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=be0bb78869cdb2ad0c971a6a858a30213eaec47d Validity Not Before: Jul 20 12:41:52 2025 GMT Not After : Jul 21 15:22:52 2025 GMT Subject: CN=9ECBA8159AD67D8B75FA4CF1AC3FDA9FE42AD7C1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:83:c2:6d:31:ba:8e:3f:7f:be:ab:a4:98:e4: 03:4a:34:23:b5:0b:fb:8e:25:1a:67:7b:7f:7f:a1: 74:b8:06:be:d4:33:76:eb:d1:92:8d:48:9b:32:90: 0c:0c:83:2d:4b:97:0e:d0:5b:24:fe:a6:e2:a9:2e: 5c:e3:74:fd:08:f3:5d:c1:75:ac:25:d2:cd:00:f2: 96:79:b4:1d:4d:90:fe:f3:5d:c5:5b:8c:7d:f6:fc: b7:9f:9a:af:5c:fa:b6:7e:7c:fd:8c:88:87:c5:c9: e0:04:34:61:d2:bc:d9:d3:09:6e:26:25:24:e7:7d: 4e:4e:93:fc:72:f9:ae:e6:40:fb:8b:09:e9:d2:fa: 80:98:51:cc:ca:01:ee:c1:82:56:50:1f:26:f6:b9: 16:7c:43:be:15:19:51:14:43:d9:47:9e:fd:d5:17: 3b:37:46:cd:88:d8:91:e9:d2:60:6a:5e:46:c3:38: 90:8c:51:89:64:e3:95:6d:f0:b7:6a:08:d1:de:a1: 0f:fb:8d:37:78:11:40:1a:1a:4f:38:d4:5e:34:51: f1:48:b3:40:e6:53:7c:dc:5e:cb:a3:93:ce:08:fa: d9:c1:b8:0e:b9:f1:f7:ba:c1:bb:7a:21:64:0a:41: 55:36:94:ff:b4:3b:a0:92:54:85:be:0e:b6:41:87: 59:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:CB:A8:15:9A:D6:7D:8B:75:FA:4C:F1:AC:3F:DA:9F:E4:2A:D7:C1 X509v3 Authority Key Identifier: keyid:BE:0B:B7:88:69:CD:B2:AD:0C:97:1A:6A:85:8A:30:21:3E:AE:C4:7D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/ac143387-f013-4922-838e-e18864be1e4a/0/BE0BB78869CDB2AD0C971A6A858A30213EAEC47D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vgu3iGnNsq0MlxpqhYowIT6uxH0.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ac143387-f013-4922-838e-e18864be1e4a/0/BE0BB78869CDB2AD0C971A6A858A30213EAEC47D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:30:18:e8:7c:45:60:22:f8:e9:60:40:fa:16:13:15:99:80: 41:be:b5:13:ff:9c:f8:6e:e3:b0:6e:22:7d:4b:f6:8b:c0:4f: 2e:9b:4a:65:a1:4a:60:8f:36:92:b2:02:f0:0d:cf:fc:89:27: 0e:67:7b:4c:e7:13:1f:ba:08:3a:ed:14:8d:59:c7:0e:4a:16: d2:67:90:ca:e9:69:26:69:0a:99:b4:aa:86:a4:25:d6:16:6c: 55:4d:36:c9:4f:79:7a:08:e9:7b:c4:39:0a:4b:ed:59:af:63: 4f:0b:cd:07:ad:76:70:73:bd:01:db:c5:a4:d7:6a:2e:2f:08: a0:03:4a:c2:5f:1b:14:2b:58:93:16:a4:d2:7e:3a:cf:c8:30: c7:6e:96:b6:ce:67:9e:bb:1a:f8:e0:a9:57:df:e9:ab:52:9c: cc:8e:30:df:18:a2:68:c1:77:fe:bc:06:22:4f:dd:5e:17:38: 67:dc:b9:70:5c:18:cb:42:3a:61:0b:e8:58:3f:b9:3d:4b:15: ce:a6:e5:e6:61:1c:b0:2f:6f:e1:58:96:54:dc:1f:11:4d:d8: 7b:ef:39:d1:c0:43:18:a6:57:2b:fe:fd:bd:23:f3:57:64:8a: f6:0f:6b:d9:94:ec:d5:8b:5b:3b:0a:a9:c0:8e:43:3d:16:43: 47:f3:3d:53 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUXeEJl0eVsygq9B8hpnYPoI0ylSAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYmUwYmI3ODg2OWNkYjJhZDBjOTcxYTZhODU4YTMwMjEz ZWFlYzQ3ZDAeFw0yNTA3MjAxMjQxNTJaFw0yNTA3MjExNTIyNTJaMDMxMTAvBgNV BAMTKDlFQ0JBODE1OUFENjdEOEI3NUZBNENGMUFDM0ZEQTlGRTQyQUQ3QzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyg8JtMbqOP3++q6SY5ANKNCO1 C/uOJRpne39/oXS4Br7UM3br0ZKNSJsykAwMgy1Llw7QWyT+puKpLlzjdP0I813B dawl0s0A8pZ5tB1NkP7zXcVbjH32/Lefmq9c+rZ+fP2MiIfFyeAENGHSvNnTCW4m JSTnfU5Ok/xy+a7mQPuLCenS+oCYUczKAe7BglZQHyb2uRZ8Q74VGVEUQ9lHnv3V Fzs3Rs2I2JHp0mBqXkbDOJCMUYlk45Vt8LdqCNHeoQ/7jTd4EUAaGk841F40UfFI s0DmU3zcXsujk84I+tnBuA658fe6wbt6IWQKQVU2lP+0O6CSVIW+DrZBh1mpAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUnsuoFZrWfYt1+kzxrD/an+Qq18EwHwYDVR0j BBgwFoAUvgu3iGnNsq0MlxpqhYowIT6uxH0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYWMxNDMzODctZjAxMy00OTIyLTgzOGUtZTE4ODY0YmUx ZTRhLzAvQkUwQkI3ODg2OUNEQjJBRDBDOTcxQTZBODU4QTMwMjEzRUFFQzQ3RC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3ZndTNpR25Oc3EwTWx4cHFoWW93SVQ2 dXhIMC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9hYzE0MzM4Ny1m MDEzLTQ5MjItODM4ZS1lMTg4NjRiZTFlNGEvMC9CRTBCQjc4ODY5Q0RCMkFEMEM5 NzFBNkE4NThBMzAyMTNFQUVDNDdELm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlTAY6HxFYCL46WBA+hYT FZmAQb61E/+c+G7jsG4ifUv2i8BPLptKZaFKYI82krIC8A3P/IknDmd7TOcTH7oI Ou0UjVnHDkoW0meQyulpJmkKmbSqhqQl1hZsVU02yU95egjpe8Q5CkvtWa9jTwvN B612cHO9AdvFpNdqLi8IoANKwl8bFCtYkxak0n46z8gwx26Wts5nnrsa+OCpV9/p q1KczI4w3xiiaMF3/rwGIk/dXhc4Z9y5cFwYy0I6YQvoWD+5PUsVzqbl5mEcsC9v 4ViWVNwfEU3Ye+850cBDGKZXK/79vSPzV2SK9g9r2ZTs1YtbOwqpwI5DPRZDR/M9 Uw== -----END CERTIFICATE-----Generated at Sun Jul 20 21:55:35 2025 by rpki-client