$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/03791bfb-c1de-4bbf-8390-cc28b1d415ab/0/BBEBABAA438AC450DCBB53966538E554E6B5F7BE.mft File: BBEBABAA438AC450DCBB53966538E554E6B5F7BE.mft (raw, json) Hash identifier: 1ySb5VV3f1nh0YsoAdjvNqgHcLylQLrjCpTjUPGaWjA= Subject key identifier: 62:61:45:85:77:FB:F0:7F:64:6A:8B:A2:E7:99:37:69:CC:B4:64:85 Authority key identifier: BB:EB:AB:AA:43:8A:C4:50:DC:BB:53:96:65:38:E5:54:E6:B5:F7:BE Certificate issuer: /CN=BBEBABAA438AC450DCBB53966538E554E6B5F7BE Certificate serial: 2FC3DF4841BC048CC6B09DFD12F36D3D84D6A376 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/BBEBABAA438AC450DCBB53966538E554E6B5F7BE.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/03791bfb-c1de-4bbf-8390-cc28b1d415ab/0/BBEBABAA438AC450DCBB53966538E554E6B5F7BE.mft Manifest number: 49 Signing time: Tue 27 Oct 2026 04:10:21 +0000 Manifest this update: Tue 27 Oct 2026 04:05:21 +0000 Manifest next update: Wed 28 Oct 2026 04:19:21 +0000 Files and hashes: 1: 326131343a373538313a333936323a3a2f34382d3634203d3e20313939373633.roa (hash: sOfzsAt2tIul/+/Ef8oFoB5LJ7RqnvlLcWysQWAevOw=) 2: 326131343a373538313a333936363a3a2f34382d3634203d3e20313939373633.roa (hash: nc3oYXzCmvtpwHlk9i9l1I6GviPKWBNc9HgGppn1YZw=) 3: 326131343a373538313a333966663a3a2f34382d3634203d3e20313939373633.roa (hash: e7C6bpyqbbQ1ceJQT1KsYKlx6V//pBEex11FT3+7HyE=) 4: 326131343a373538313a333934313a3a2f34382d3634203d3e20313939373633.roa (hash: EhqBuQ2rW6jmStDfNfWXgqhPEJfMYVcykuC6x930/W4=) 5: BBEBABAA438AC450DCBB53966538E554E6B5F7BE.crl (hash: 1Y+qws3TDWqErBAuzpof75rYwF8NP8Ygk2mlZz8nZ1A=) 6: 326131343a373538313a333937373a3a2f34382d3634203d3e20313939373633.roa (hash: G6C19c6GOlod0FOB2bCztr+YLdJH5Z5El/nZEiwJChA=) 7: 326131343a373538313a333936313a3a2f34382d3634203d3e20313939373633.roa (hash: wQ2v3L+f7wKDwqYoOzbn3pE9cmHsuQKZM23dZR1K2fs=) 8: 326131343a373538313a333934663a3a2f34382d3634203d3e20313939373633.roa (hash: VkQPo/g/7kNIg3a2luNKrt3mJVZCiGlXL2gyi16yj08=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/03791bfb-c1de-4bbf-8390-cc28b1d415ab/0/BBEBABAA438AC450DCBB53966538E554E6B5F7BE.crl rsync://rsync.paas.rpki.ripe.net/repository/03791bfb-c1de-4bbf-8390-cc28b1d415ab/0/BBEBABAA438AC450DCBB53966538E554E6B5F7BE.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/BBEBABAA438AC450DCBB53966538E554E6B5F7BE.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Oct 2026 00:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:c3:df:48:41:bc:04:8c:c6:b0:9d:fd:12:f3:6d:3d:84:d6:a3:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BBEBABAA438AC450DCBB53966538E554E6B5F7BE Validity Not Before: Oct 27 04:05:21 2026 GMT Not After : Oct 28 04:19:21 2026 GMT Subject: CN=6261458577FBF07F646A8BA2E7993769CCB46485 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:f7:17:c9:08:41:c2:7f:87:54:f3:e8:87:51: dd:1b:74:1b:3f:e7:c2:0d:a1:b0:76:87:2c:ab:d7: 3a:13:15:13:46:48:9e:5b:51:68:9f:9b:d8:6a:25: 97:1d:63:43:a7:f9:8b:a2:d9:4c:b8:5f:6c:49:cd: d7:e8:d8:e2:0f:98:58:bf:c6:14:06:de:de:db:09: 1c:c8:ae:0f:0d:c1:1c:4f:e7:25:07:cb:e1:3d:fb: 57:96:71:2b:7b:36:72:cb:e6:48:4d:ba:2a:a5:e8: 9f:48:15:da:26:a6:68:5a:69:22:61:dd:f3:c8:69: 00:06:d1:fd:35:4d:f2:23:e8:f5:35:b0:53:dc:2b: 52:04:c1:03:c1:de:ce:bd:7f:8b:22:c4:3b:31:ea: dc:c5:a7:c1:c2:58:a7:14:7e:12:29:7a:9a:40:61: c1:83:c0:c3:27:ec:90:37:a5:44:e8:09:18:99:ab: dd:37:6c:b1:27:93:52:41:31:7e:da:9c:b4:ea:6e: e1:ec:c8:f0:3f:cb:3e:2b:31:8b:57:92:66:64:1e: 4e:98:71:c8:fc:46:f4:26:84:5e:10:36:ee:08:18: c2:ea:23:b8:21:ca:60:ac:4f:da:85:4e:c4:f5:6b: c1:14:f3:87:c2:66:d8:97:21:8c:65:68:4c:22:a2: 24:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:61:45:85:77:FB:F0:7F:64:6A:8B:A2:E7:99:37:69:CC:B4:64:85 X509v3 Authority Key Identifier: keyid:BB:EB:AB:AA:43:8A:C4:50:DC:BB:53:96:65:38:E5:54:E6:B5:F7:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/03791bfb-c1de-4bbf-8390-cc28b1d415ab/0/BBEBABAA438AC450DCBB53966538E554E6B5F7BE.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/BBEBABAA438AC450DCBB53966538E554E6B5F7BE.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/03791bfb-c1de-4bbf-8390-cc28b1d415ab/0/BBEBABAA438AC450DCBB53966538E554E6B5F7BE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:31:09:41:af:a1:b4:72:d5:58:9e:da:7d:78:b8:ed:57:8a: d0:26:48:3a:03:f2:88:51:d5:4e:83:d2:38:87:12:31:f2:6b: 99:1d:c2:0c:0b:36:db:8f:2b:14:00:c4:56:6b:f4:60:b9:eb: 62:bb:dd:2b:fb:18:a9:72:77:ec:2e:59:c3:7f:43:64:f0:4c: 65:13:84:a8:3a:c9:5e:c5:d8:29:ef:ea:05:b8:cf:b9:e6:20: 33:8d:31:c9:bd:4a:b6:0a:8c:cd:7c:a6:e5:c9:ed:e2:fa:af: e4:b1:4d:3a:d2:6f:db:61:8a:ac:fc:83:f6:81:c0:a6:2a:83: ca:ec:04:50:70:9c:4f:76:8a:65:d1:2f:59:0b:4d:3e:2f:34: 7d:bc:0b:16:dc:b6:d3:c4:3f:4e:61:b2:8f:e6:63:e9:b8:3b: 21:ea:78:17:e3:df:d1:88:94:a0:a5:79:42:e2:89:e6:59:e7: 30:43:13:f1:53:79:0c:36:f0:15:65:f7:f6:08:80:b7:60:0f: 62:a0:41:42:c3:b7:34:ba:f8:11:85:5e:07:a2:86:19:79:30: e1:e4:2f:9a:9a:43:c5:b1:5b:10:5d:ed:3a:9c:25:4e:41:a0: cc:cc:f2:6a:4a:13:43:6f:b4:0c:5c:0e:91:fa:c9:8d:27:de: 33:1a:d0:96 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUL8PfSEG8BIzGsJ39EvNtPYTWo3YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkJFQkFCQUE0MzhBQzQ1MERDQkI1Mzk2NjUzOEU1NTRF NkI1RjdCRTAeFw0yNjEwMjcwNDA1MjFaFw0yNjEwMjgwNDE5MjFaMDMxMTAvBgNV BAMTKDYyNjE0NTg1NzdGQkYwN0Y2NDZBOEJBMkU3OTkzNzY5Q0NCNDY0ODUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCk9xfJCEHCf4dU8+iHUd0bdBs/ 58INobB2hyyr1zoTFRNGSJ5bUWifm9hqJZcdY0On+Yui2Uy4X2xJzdfo2OIPmFi/ xhQG3t7bCRzIrg8NwRxP5yUHy+E9+1eWcSt7NnLL5khNuiql6J9IFdompmhaaSJh 3fPIaQAG0f01TfIj6PU1sFPcK1IEwQPB3s69f4sixDsx6tzFp8HCWKcUfhIpeppA YcGDwMMn7JA3pUToCRiZq903bLEnk1JBMX7anLTqbuHsyPA/yz4rMYtXkmZkHk6Y ccj8RvQmhF4QNu4IGMLqI7ghymCsT9qFTsT1a8EU84fCZtiXIYxlaEwioiSrAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUYmFFhXf78H9kaoui55k3acy0ZIUwHwYDVR0j BBgwFoAUu+urqkOKxFDcu1OWZTjlVOa1974wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMDM3OTFiZmItYzFkZS00YmJmLTgzOTAtY2MyOGIxZDQx NWFiLzAvQkJFQkFCQUE0MzhBQzQ1MERDQkI1Mzk2NjUzOEU1NTRFNkI1RjdCRS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC9CQkVCQUJBQTQzOEFDNDUwRENCQjUzOTY2 NTM4RTU1NEU2QjVGN0JFLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzAzNzkxYmZiLWMxZGUtNGJiZi04MzkwLWNjMjhiMWQ0MTVhYi8wL0JCRUJBQkFB NDM4QUM0NTBEQ0JCNTM5NjY1MzhFNTU0RTZCNUY3QkUubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBzMQlB r6G0ctVYntp9eLjtV4rQJkg6A/KIUdVOg9I4hxIx8muZHcIMCzbbjysUAMRWa/Rg uetiu90r+xipcnfsLlnDf0Nk8ExlE4SoOslexdgp7+oFuM+55iAzjTHJvUq2CozN fKblye3i+q/ksU060m/bYYqs/IP2gcCmKoPK7ARQcJxPdopl0S9ZC00+LzR9vAsW 3LbTxD9OYbKP5mPpuDsh6ngX49/RiJSgpXlC4onmWecwQxPxU3kMNvAVZff2CIC3 YA9ioEFCw7c0uvgRhV4HooYZeTDh5C+amkPFsVsQXe06nCVOQaDMzPJqShNDb7QM XA6R+smNJ94zGtCW -----END CERTIFICATE-----Generated at Tue Oct 27 09:16:26 2026 by rpki-client