$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09718f08-bb39-4a09-a4c0-1f40248a6d15/2/BB0B02806AE3C34F453ADEDDE36ADF432FCDF9C4.mft File: BB0B02806AE3C34F453ADEDDE36ADF432FCDF9C4.mft (raw, json) Hash identifier: Sc//6UpVoCht2qe0IFL4JfhqyZAJN8prrCJ2ncIIkLk= Subject key identifier: 6A:0F:2B:B7:06:22:31:29:CC:69:38:71:11:9E:02:D1:4E:A7:66:92 Authority key identifier: BB:0B:02:80:6A:E3:C3:4F:45:3A:DE:DD:E3:6A:DF:43:2F:CD:F9:C4 Certificate issuer: /CN=BB0B02806AE3C34F453ADEDDE36ADF432FCDF9C4 Certificate serial: 0BA7FE52038821541D8FEBCD911ED924220F25AF Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/BB0B02806AE3C34F453ADEDDE36ADF432FCDF9C4.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09718f08-bb39-4a09-a4c0-1f40248a6d15/2/BB0B02806AE3C34F453ADEDDE36ADF432FCDF9C4.mft Manifest number: 88 Signing time: Sat 14 Mar 2026 00:07:47 +0000 Manifest this update: Sat 14 Mar 2026 00:02:47 +0000 Manifest next update: Sun 15 Mar 2026 03:48:47 +0000 Files and hashes: 1: 326131343a373538303a666634333a3a2f34382d3438203d3e20323134333434.roa (hash: LrJY5RvJFU1hFw5kwe9OHrsNrGlMAHPKFkyFsYYWBwM=) 2: 326131343a373538303a666634343a3a2f34382d3438203d3e20323134333434.roa (hash: 5NZsbS3/ECNwsIkfwekBTuMsstws0S9jzGJtHhbmy3k=) 3: 326131343a373538303a666634313a3a2f34382d3438203d3e20323134333434.roa (hash: FSeGkTavy6E/PYG9xOOh6cS7WX/ehiQ2P+nWL6HUfzA=) 4: 326131343a373538303a666634303a3a2f34382d3438203d3e20323134333434.roa (hash: NMvj9zoeOL/7ubYXVejRPUJJs+qt+8DS24zEbTeKmfE=) 5: 326131343a373538303a666634353a3a2f34382d3438203d3e20323134333434.roa (hash: hdVzeFM1qIVbiHCOPfcZVjzE07zDvwiz6q8IHeNVQA0=) 6: BB0B02806AE3C34F453ADEDDE36ADF432FCDF9C4.crl (hash: lMc/Eaxp7o/IUOX9QbHCa4ojAyL+nVivQOpHaT7OcVA=) 7: 326131343a373538303a666634323a3a2f34382d3438203d3e20323134333434.roa (hash: O/PJi/N0ASXeoDd9xkm5e+vUVYHvnrMhoRT9Q5UqBNM=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09718f08-bb39-4a09-a4c0-1f40248a6d15/2/BB0B02806AE3C34F453ADEDDE36ADF432FCDF9C4.crl rsync://rsync.paas.rpki.ripe.net/repository/09718f08-bb39-4a09-a4c0-1f40248a6d15/2/BB0B02806AE3C34F453ADEDDE36ADF432FCDF9C4.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/BB0B02806AE3C34F453ADEDDE36ADF432FCDF9C4.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 15 Mar 2026 03:48:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:a7:fe:52:03:88:21:54:1d:8f:eb:cd:91:1e:d9:24:22:0f:25:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BB0B02806AE3C34F453ADEDDE36ADF432FCDF9C4 Validity Not Before: Mar 14 00:02:47 2026 GMT Not After : Mar 15 03:48:47 2026 GMT Subject: CN=6A0F2BB706223129CC693871119E02D14EA76692 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:84:ac:8e:5b:08:3a:b4:4f:bc:8a:32:39:01: 45:c0:1e:bd:80:cb:e5:36:eb:e6:e0:f6:19:9c:61: 6d:2f:9c:f4:3b:07:0c:32:52:0f:fa:46:99:6e:42: c9:0f:a8:fc:8e:0b:22:be:8a:bc:5f:67:f2:92:4a: e0:04:1c:58:65:30:ae:fb:23:90:31:62:3d:61:ee: f9:91:46:a9:c0:40:63:e8:48:aa:59:60:71:17:03: 7c:c1:86:a2:53:5d:e2:9c:65:63:eb:76:ef:da:58: 43:92:b9:69:9f:af:c8:9e:7c:8c:0c:c0:49:33:28: dd:37:cd:87:97:e7:fc:77:99:be:d9:91:d0:4c:73: 88:00:6e:8b:39:f7:c3:53:2c:bc:94:0a:72:65:01: 3f:51:47:68:c1:0a:5f:0e:88:6c:87:01:c0:41:fb: 57:b0:7b:16:cc:e5:a2:b8:04:c0:16:1d:4c:44:49: 32:4f:16:79:23:bb:ad:e6:08:4f:88:81:e5:61:51: 3d:d3:40:0a:2d:7c:f3:3c:68:c5:21:8d:01:ad:78: 83:9f:6a:29:65:72:d3:17:7d:04:20:49:ea:9e:bb: da:84:45:ff:5b:5b:d7:13:cd:0b:c6:8c:8a:4e:04: 0c:56:b4:f3:6c:e5:1d:2e:4c:7b:02:6a:a3:cf:e9: bd:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:0F:2B:B7:06:22:31:29:CC:69:38:71:11:9E:02:D1:4E:A7:66:92 X509v3 Authority Key Identifier: keyid:BB:0B:02:80:6A:E3:C3:4F:45:3A:DE:DD:E3:6A:DF:43:2F:CD:F9:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/09718f08-bb39-4a09-a4c0-1f40248a6d15/2/BB0B02806AE3C34F453ADEDDE36ADF432FCDF9C4.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/BB0B02806AE3C34F453ADEDDE36ADF432FCDF9C4.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09718f08-bb39-4a09-a4c0-1f40248a6d15/2/BB0B02806AE3C34F453ADEDDE36ADF432FCDF9C4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:8c:c2:db:a5:e8:ee:3d:b2:c3:1c:09:ef:d9:8c:af:c1:a4: 0d:39:d5:78:f6:60:49:da:3b:49:8d:55:17:b8:00:e8:62:48: b8:b0:c6:2f:80:c8:7f:d2:88:59:71:ba:fa:39:b8:2e:07:78: ec:7b:26:66:d1:7a:f3:3a:9b:d8:04:f8:5e:5a:3d:24:a9:ab: 59:da:74:3e:c5:63:4c:2b:fc:8d:58:5d:9e:d1:e9:6e:74:3f: e5:d7:ef:e9:98:2e:2f:6c:29:97:bf:5d:0e:cd:80:a4:b2:2e: c1:f2:34:ee:15:a3:86:e3:15:fa:d2:56:e9:e3:27:01:91:b7: 78:e1:f0:9a:13:c9:d7:ab:c4:24:a9:17:ad:0a:c9:8b:9c:38: e4:3d:bd:25:41:6c:2a:4e:c8:89:5b:de:49:06:23:ba:70:11: 53:09:f7:40:4b:35:28:76:2d:11:40:49:9e:45:bd:ac:d7:3d: 29:dc:2f:26:8e:a6:ec:85:32:56:2f:00:7c:f4:2f:3f:71:c9: 37:ba:8b:5a:43:a7:1b:7c:71:b5:8c:53:a9:17:ea:44:93:c5: f4:77:96:25:65:5b:72:d2:0f:4d:85:9c:2b:fb:02:ed:98:59: 8b:32:ae:dd:0a:bd:66:41:a1:b9:12:7b:07:af:d3:85:7f:61: e8:2c:c6:03 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUC6f+UgOIIVQdj+vNkR7ZJCIPJa8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkIwQjAyODA2QUUzQzM0RjQ1M0FERURERTM2QURGNDMy RkNERjlDNDAeFw0yNjAzMTQwMDAyNDdaFw0yNjAzMTUwMzQ4NDdaMDMxMTAvBgNV BAMTKDZBMEYyQkI3MDYyMjMxMjlDQzY5Mzg3MTExOUUwMkQxNEVBNzY2OTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8hKyOWwg6tE+8ijI5AUXAHr2A y+U26+bg9hmcYW0vnPQ7BwwyUg/6RpluQskPqPyOCyK+irxfZ/KSSuAEHFhlMK77 I5AxYj1h7vmRRqnAQGPoSKpZYHEXA3zBhqJTXeKcZWPrdu/aWEOSuWmfr8iefIwM wEkzKN03zYeX5/x3mb7ZkdBMc4gAbos598NTLLyUCnJlAT9RR2jBCl8OiGyHAcBB +1ewexbM5aK4BMAWHUxESTJPFnkju63mCE+IgeVhUT3TQAotfPM8aMUhjQGteIOf aillctMXfQQgSeqeu9qERf9bW9cTzQvGjIpOBAxWtPNs5R0uTHsCaqPP6b1JAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUag8rtwYiMSnMaThxEZ4C0U6nZpIwHwYDVR0j BBgwFoAUuwsCgGrjw09FOt7d42rfQy/N+cQwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMDk3MThmMDgtYmIzOS00YTA5LWE0YzAtMWY0MDI0OGE2 ZDE1LzIvQkIwQjAyODA2QUUzQzM0RjQ1M0FERURERTM2QURGNDMyRkNERjlDNC5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC9CQjBCMDI4MDZBRTNDMzRGNDUzQURFRERF MzZBREY0MzJGQ0RGOUM0LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzA5NzE4ZjA4LWJiMzktNGEwOS1hNGMwLTFmNDAyNDhhNmQxNS8yL0JCMEIwMjgw NkFFM0MzNEY0NTNBREVEREUzNkFERjQzMkZDREY5QzQubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCNjMLb pejuPbLDHAnv2YyvwaQNOdV49mBJ2jtJjVUXuADoYki4sMYvgMh/0ohZcbr6Obgu B3jseyZm0XrzOpvYBPheWj0kqatZ2nQ+xWNMK/yNWF2e0eludD/l1+/pmC4vbCmX v10OzYCksi7B8jTuFaOG4xX60lbp4ycBkbd44fCaE8nXq8QkqRetCsmLnDjkPb0l QWwqTsiJW95JBiO6cBFTCfdASzUodi0RQEmeRb2s1z0p3C8mjqbshTJWLwB89C8/ cck3uotaQ6cbfHG1jFOpF+pEk8X0d5YlZVty0g9NhZwr+wLtmFmLMq7dCr1mQaG5 EnsHr9OFf2HoLMYD -----END CERTIFICATE-----Generated at Sat Mar 14 14:35:16 2026 by rpki-client