$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/03791bfb-c1de-4bbf-8390-cc28b1d415ab/0/BBEBABAA438AC450DCBB53966538E554E6B5F7BE.mft File: BBEBABAA438AC450DCBB53966538E554E6B5F7BE.mft (raw, json) Hash identifier: IgPf1fUGPk31TqZSZVHnvLW8VqNqBdypC+bc71bJ7ys= Subject key identifier: E6:00:93:3D:EA:DE:F3:DF:23:93:98:1D:8F:48:9C:95:87:77:55:9D Authority key identifier: BB:EB:AB:AA:43:8A:C4:50:DC:BB:53:96:65:38:E5:54:E6:B5:F7:BE Certificate issuer: /CN=BBEBABAA438AC450DCBB53966538E554E6B5F7BE Certificate serial: 3E9653CE7D5078D646CCEF09213CCBAD64317E23 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/BBEBABAA438AC450DCBB53966538E554E6B5F7BE.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/03791bfb-c1de-4bbf-8390-cc28b1d415ab/0/BBEBABAA438AC450DCBB53966538E554E6B5F7BE.mft Manifest number: 03 Signing time: Fri 04 Sep 2026 13:15:22 +0000 Manifest this update: Fri 04 Sep 2026 13:10:22 +0000 Manifest next update: Sat 05 Sep 2026 14:15:22 +0000 Files and hashes: 1: BBEBABAA438AC450DCBB53966538E554E6B5F7BE.crl (hash: /HeLX/HNnmEzfiP9J834PtMZPqa2G7t0i5O0134FUic=) 2: 326131343a373538313a333936313a3a2f34382d3634203d3e20313939373633.roa (hash: wQ2v3L+f7wKDwqYoOzbn3pE9cmHsuQKZM23dZR1K2fs=) 3: 326131343a373538313a333934313a3a2f34382d3634203d3e20313939373633.roa (hash: EhqBuQ2rW6jmStDfNfWXgqhPEJfMYVcykuC6x930/W4=) 4: 326131343a373538313a333936363a3a2f34382d3634203d3e20313939373633.roa (hash: nc3oYXzCmvtpwHlk9i9l1I6GviPKWBNc9HgGppn1YZw=) 5: 326131343a373538313a333936323a3a2f34382d3634203d3e20313939373633.roa (hash: sOfzsAt2tIul/+/Ef8oFoB5LJ7RqnvlLcWysQWAevOw=) 6: 326131343a373538313a333966663a3a2f34382d3634203d3e20313939373633.roa (hash: e7C6bpyqbbQ1ceJQT1KsYKlx6V//pBEex11FT3+7HyE=) 7: 326131343a373538313a333934663a3a2f34382d3634203d3e20313939373633.roa (hash: VkQPo/g/7kNIg3a2luNKrt3mJVZCiGlXL2gyi16yj08=) 8: 326131343a373538313a333937373a3a2f34382d3634203d3e20313939373633.roa (hash: G6C19c6GOlod0FOB2bCztr+YLdJH5Z5El/nZEiwJChA=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/03791bfb-c1de-4bbf-8390-cc28b1d415ab/0/BBEBABAA438AC450DCBB53966538E554E6B5F7BE.crl rsync://rsync.paas.rpki.ripe.net/repository/03791bfb-c1de-4bbf-8390-cc28b1d415ab/0/BBEBABAA438AC450DCBB53966538E554E6B5F7BE.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/BBEBABAA438AC450DCBB53966538E554E6B5F7BE.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 05 Sep 2026 14:15:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:96:53:ce:7d:50:78:d6:46:cc:ef:09:21:3c:cb:ad:64:31:7e:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BBEBABAA438AC450DCBB53966538E554E6B5F7BE Validity Not Before: Sep 4 13:10:22 2026 GMT Not After : Sep 5 14:15:22 2026 GMT Subject: CN=E600933DEADEF3DF2393981D8F489C958777559D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:f2:04:c3:d6:c2:1e:c5:88:5d:02:bc:60:06: ca:1e:39:6d:b8:1f:30:ce:77:61:89:dc:0f:d1:a2: 75:b5:a8:51:f5:d0:03:9f:f7:b9:b9:94:df:06:46: be:68:d0:bd:a1:e2:5a:af:80:9c:e2:33:e6:3a:99: 48:98:b3:f8:91:9f:af:db:ed:a7:67:ee:ae:57:57: ad:6e:3b:c2:8d:5d:1f:a4:c5:7f:21:78:b2:ce:2f: f1:95:f4:73:89:78:45:da:51:1c:ae:35:4e:1f:61: 45:9e:c2:2f:36:6b:98:ac:44:04:ee:d7:ec:cf:be: 48:62:23:cb:e9:3b:dc:c5:0a:2b:fa:0f:44:39:57: 19:8a:65:37:e9:a4:43:60:bd:f5:61:ea:36:d2:01: 77:bd:75:a8:03:e8:f5:16:32:db:45:86:37:88:9f: 65:1f:55:1d:7f:19:76:b7:8f:0b:0c:a6:25:ab:8d: ab:02:09:c9:9d:91:eb:e8:12:e5:db:07:aa:44:50: 29:4c:b7:47:80:1b:68:ce:da:70:68:77:75:51:33: af:6f:82:d4:e5:00:52:e3:e4:5c:22:95:21:54:21: a0:db:2a:5c:54:95:ee:1c:18:90:43:7e:b0:a3:51: 7a:c2:47:de:aa:d2:ea:b5:86:a1:49:60:ef:8f:61: 1b:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:00:93:3D:EA:DE:F3:DF:23:93:98:1D:8F:48:9C:95:87:77:55:9D X509v3 Authority Key Identifier: keyid:BB:EB:AB:AA:43:8A:C4:50:DC:BB:53:96:65:38:E5:54:E6:B5:F7:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/03791bfb-c1de-4bbf-8390-cc28b1d415ab/0/BBEBABAA438AC450DCBB53966538E554E6B5F7BE.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/BBEBABAA438AC450DCBB53966538E554E6B5F7BE.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/03791bfb-c1de-4bbf-8390-cc28b1d415ab/0/BBEBABAA438AC450DCBB53966538E554E6B5F7BE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:b7:38:d4:fe:d4:94:f2:f5:77:e4:b9:73:e5:3f:d2:3a:94: ad:c8:26:a4:d4:00:ab:97:29:1a:78:97:78:ab:da:37:f4:eb: d3:46:09:f3:75:72:e7:9e:9e:27:ce:49:70:71:38:88:e9:0f: c2:d7:78:62:58:e7:a1:81:b1:94:10:54:8f:0c:90:51:14:9f: 84:da:83:b4:fa:61:3b:06:dd:99:99:26:de:03:25:34:33:57: 0b:0c:98:aa:6a:88:ff:b0:9a:60:bb:9f:73:f4:1a:da:23:3d: 49:ae:f4:42:9b:54:6c:14:4d:30:84:9f:dd:65:3a:85:c9:30: e4:22:71:3e:5d:86:20:e2:51:7b:4c:75:69:78:e1:00:00:22: 4d:85:94:32:9f:4d:1a:20:61:7b:ef:90:f8:38:6b:46:ea:a7: 28:a1:30:b8:00:07:39:a0:54:49:f3:91:95:55:98:f0:36:1b: 94:b6:ea:cf:4d:d2:af:c5:4a:ca:2f:0b:d2:10:a7:f1:01:84: 6c:33:9d:be:a9:3b:a7:d3:c8:95:aa:0d:a2:a7:54:a0:79:27: f7:f6:1e:72:6f:38:07:23:dd:36:71:22:64:2f:69:2f:a0:2a: ce:4d:6d:8f:10:76:4b:45:7b:6a:49:d2:fe:84:31:1b:6b:63: 2d:73:1b:52 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUPpZTzn1QeNZGzO8JITzLrWQxfiMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkJFQkFCQUE0MzhBQzQ1MERDQkI1Mzk2NjUzOEU1NTRF NkI1RjdCRTAeFw0yNjA5MDQxMzEwMjJaFw0yNjA5MDUxNDE1MjJaMDMxMTAvBgNV BAMTKEU2MDA5MzNERUFERUYzREYyMzkzOTgxRDhGNDg5Qzk1ODc3NzU1OUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDB8gTD1sIexYhdArxgBsoeOW24 HzDOd2GJ3A/RonW1qFH10AOf97m5lN8GRr5o0L2h4lqvgJziM+Y6mUiYs/iRn6/b 7adn7q5XV61uO8KNXR+kxX8heLLOL/GV9HOJeEXaURyuNU4fYUWewi82a5isRATu 1+zPvkhiI8vpO9zFCiv6D0Q5VxmKZTfppENgvfVh6jbSAXe9dagD6PUWMttFhjeI n2UfVR1/GXa3jwsMpiWrjasCCcmdkevoEuXbB6pEUClMt0eAG2jO2nBod3VRM69v gtTlAFLj5FwilSFUIaDbKlxUle4cGJBDfrCjUXrCR96q0uq1hqFJYO+PYRt5AgMB AAGjggKCMIICfjAdBgNVHQ4EFgQU5gCTPere898jk5gdj0iclYd3VZ0wHwYDVR0j BBgwFoAUu+urqkOKxFDcu1OWZTjlVOa1974wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMDM3OTFiZmItYzFkZS00YmJmLTgzOTAtY2MyOGIxZDQx NWFiLzAvQkJFQkFCQUE0MzhBQzQ1MERDQkI1Mzk2NjUzOEU1NTRFNkI1RjdCRS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC9CQkVCQUJBQTQzOEFDNDUwRENCQjUzOTY2 NTM4RTU1NEU2QjVGN0JFLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzAzNzkxYmZiLWMxZGUtNGJiZi04MzkwLWNjMjhiMWQ0MTVhYi8wL0JCRUJBQkFB NDM4QUM0NTBEQ0JCNTM5NjY1MzhFNTU0RTZCNUY3QkUubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBCtzjU /tSU8vV35Llz5T/SOpStyCak1ACrlykaeJd4q9o39OvTRgnzdXLnnp4nzklwcTiI 6Q/C13hiWOehgbGUEFSPDJBRFJ+E2oO0+mE7Bt2ZmSbeAyU0M1cLDJiqaoj/sJpg u59z9BraIz1JrvRCm1RsFE0whJ/dZTqFyTDkInE+XYYg4lF7THVpeOEAACJNhZQy n00aIGF775D4OGtG6qcooTC4AAc5oFRJ85GVVZjwNhuUturPTdKvxUrKLwvSEKfx AYRsM52+qTun08iVqg2ip1SgeSf39h5ybzgHI902cSJkL2kvoCrOTW2PEHZLRXtq SdL+hDEba2MtcxtS -----END CERTIFICATE-----Generated at Fri Sep 4 20:23:49 2026 by rpki-client