$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ac143387-f013-4922-838e-e18864be1e4a/0/BE0BB78869CDB2AD0C971A6A858A30213EAEC47D.mft File: BE0BB78869CDB2AD0C971A6A858A30213EAEC47D.mft (raw, json) Hash identifier: hUMF1l2hbIVUFDjv9DzWf4lzlyTdBmZFBjqm6cxz9kg= Subject key identifier: 1C:D3:41:7E:64:34:65:2A:F0:F6:6F:24:43:1E:F6:D8:6D:B1:97:36 Authority key identifier: BE:0B:B7:88:69:CD:B2:AD:0C:97:1A:6A:85:8A:30:21:3E:AE:C4:7D Certificate issuer: /CN=be0bb78869cdb2ad0c971a6a858a30213eaec47d Certificate serial: 760ADDBE56ED04516122BE0A9662B012AC27EE0B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vgu3iGnNsq0MlxpqhYowIT6uxH0.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ac143387-f013-4922-838e-e18864be1e4a/0/BE0BB78869CDB2AD0C971A6A858A30213EAEC47D.mft Manifest number: 0295 Signing time: Tue 16 Jun 2026 09:43:49 +0000 Manifest this update: Tue 16 Jun 2026 09:38:49 +0000 Manifest next update: Wed 17 Jun 2026 12:51:49 +0000 Files and hashes: 1: 3139332e3136392e37382e302f32332d3234203d3e203530343334.roa (hash: Ozt3uRUP9szxnq6Y/BlUHZo63N6fYBwOlNZT3blQYnY=) 2: 3137382e3234382e37372e302f32342d3234203d3e20323133373833.roa (hash: QA/AmBx/vt6J6eDW0Y/+kHvJueiOPr7O1NVAvBIe9GY=) 3: 3139332e3136392e37382e302f32332d3234203d3e203438343335.roa (hash: 7BonRadnccE5oClU90cDWqb2zFnrszRs5TdXh7lrUTg=) 4: 3139332e3136392e37382e302f32332d3233203d3e203438343335.roa (hash: CCPO6h/MpNSX08leEvwwJIjESWw2OEutpIc59PlyY9E=) 5: 3137382e3234382e37362e302f32342d3234203d3e203432383331.roa (hash: FQiM0Ff1DCSzma5DiHQMrsfmN7QznFFoSzW1a5q9Q2M=) 6: 3137382e3234382e37352e302f32342d3234203d3e20313939303538.roa (hash: 32SDZVJ37JJ5kdrs24paGjp5boRcUJ2fYJyMfyL4cw4=) 7: 3137382e3234382e37342e302f32342d3234203d3e20323035343839.roa (hash: D0Owph/oL3mL5VwchRzGIXC3cMHzv1rxTr5Ojjef5Y4=) 8: 3137382e3234382e37392e302f32342d3234203d3e20313335333932.roa (hash: YE6bAehCH8ruShBFJdgU4NCX9qGkifZ5lR9x24K4y2c=) 9: BE0BB78869CDB2AD0C971A6A858A30213EAEC47D.crl (hash: cGOh+w8/j2cnHcgtz5l7+1Fb6VBxK2BCjGUmpvoKGLQ=) 10: 3139352e34322e3131332e302f32342d3234203d3e203438343335.roa (hash: pchbJm+Br/uCuzzDsgfU4W3Dq3tZwJWDYbuhydm/Eyc=) 11: 3137382e3234382e37332e302f32342d3234203d3e20313431393638.roa (hash: 7xtsmIrFnzH8qIFMhr9PIJTBifAuGHXQXdM1XzYoP7s=) 12: 3139352e34322e3131322e302f32332d3233203d3e203438343335.roa (hash: SO5iYpxppDi067L1otYSj19apV4zwNvimr95590708A=) 13: 3137382e3234382e37322e302f32342d3234203d3e20313534343032.roa (hash: CmSSgp2rOmRDakFss7YxyL+V/oYFT12bvLwpMMXS8Tk=) 14: 3137382e3234382e37382e302f32342d3234203d3e20323132333834.roa (hash: sj3Mzc5uAM4fOfd+NlVLzXe7KVKZIN7ymsHfPBwN4+I=) 15: 3139352e34322e3131322e302f32342d3234203d3e203438343335.roa (hash: tbJb4NeQxaqdUwJnx0mi5eYh93xW1wx/PyQm3nNKQlk=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ac143387-f013-4922-838e-e18864be1e4a/0/BE0BB78869CDB2AD0C971A6A858A30213EAEC47D.crl rsync://rsync.paas.rpki.ripe.net/repository/ac143387-f013-4922-838e-e18864be1e4a/0/BE0BB78869CDB2AD0C971A6A858A30213EAEC47D.mft rsync://rpki.ripe.net/repository/DEFAULT/vgu3iGnNsq0MlxpqhYowIT6uxH0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Jun 2026 12:51:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:0a:dd:be:56:ed:04:51:61:22:be:0a:96:62:b0:12:ac:27:ee:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=be0bb78869cdb2ad0c971a6a858a30213eaec47d Validity Not Before: Jun 16 09:38:49 2026 GMT Not After : Jun 17 12:51:49 2026 GMT Subject: CN=1CD3417E6434652AF0F66F24431EF6D86DB19736 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:c0:bc:94:60:8f:75:4e:88:02:5a:d1:8f:72: de:52:01:e1:d3:86:d7:f4:5e:53:6f:8d:4a:bb:05: ae:da:f7:d5:68:9e:4d:e6:82:ba:53:ff:72:d3:d5: b9:9d:99:bd:6d:9a:aa:6f:e7:c8:38:43:6c:be:3a: 04:55:69:a8:37:5b:5a:cb:55:e1:36:08:c9:90:c0: 66:8a:87:de:50:c4:22:49:96:67:38:f7:c6:69:db: 7d:37:4b:0b:df:92:b3:d6:a0:2c:95:0e:83:b3:d2: e8:ed:b6:22:c1:ff:e9:c6:97:fe:ed:c7:55:ce:b4: 6b:6a:8e:89:94:31:43:89:f8:63:42:1a:0d:e6:35: 6b:29:1e:ee:97:13:ca:ca:de:77:bd:ef:3c:d3:7e: 7d:25:c1:af:ae:fd:d9:eb:26:06:41:13:76:32:e5: c8:98:f2:ca:25:6f:bb:56:3f:76:e7:e3:2a:55:fa: af:d9:b6:05:e9:a9:5f:c3:cd:e9:6f:5e:83:cd:a9: ba:78:d4:b7:63:72:c8:0b:a9:e0:44:af:3e:a1:5e: 23:b7:21:ee:fa:7f:fc:6d:25:36:a3:ff:1c:98:10: dd:01:1d:1a:87:69:c0:ef:01:02:f4:3e:82:40:53: af:1a:d4:c3:b5:86:0d:38:61:c6:2f:61:5e:19:df: a8:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:D3:41:7E:64:34:65:2A:F0:F6:6F:24:43:1E:F6:D8:6D:B1:97:36 X509v3 Authority Key Identifier: keyid:BE:0B:B7:88:69:CD:B2:AD:0C:97:1A:6A:85:8A:30:21:3E:AE:C4:7D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/ac143387-f013-4922-838e-e18864be1e4a/0/BE0BB78869CDB2AD0C971A6A858A30213EAEC47D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vgu3iGnNsq0MlxpqhYowIT6uxH0.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ac143387-f013-4922-838e-e18864be1e4a/0/BE0BB78869CDB2AD0C971A6A858A30213EAEC47D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:d3:8e:ad:a3:3e:e9:7a:f8:73:76:08:f7:5a:a2:15:db:71: 80:ca:db:d1:c0:b4:c6:69:44:6f:8f:27:e3:14:f4:48:61:40: 79:c7:c9:4a:97:6f:b1:a6:4c:5d:76:13:e3:dc:a2:e6:a0:85: 33:a6:a7:36:6a:2d:cd:6f:f3:24:13:7e:32:1d:e8:75:67:7c: 16:be:0b:f5:1b:d7:c9:cf:bf:46:a6:b0:a6:03:01:c0:65:0f: ab:54:3b:ae:13:80:7c:d5:42:3b:4d:35:a2:8b:dc:30:fa:d4: 82:2d:52:f5:d2:6c:a0:15:b4:35:46:52:59:6f:31:2c:c7:8c: 1a:49:03:2e:48:cd:7e:89:65:1a:cb:90:a5:c9:4a:ba:3a:ef: ea:b8:2e:52:60:53:53:ec:70:48:a0:ed:76:a4:9a:8a:33:1f: be:06:8c:67:67:38:aa:23:e9:8c:6a:40:b6:23:aa:5b:16:dc: 67:45:ce:ab:a8:13:e0:e4:21:8e:8c:74:cf:9a:cd:54:26:4b: dc:60:5f:f3:bd:19:99:69:27:ad:2d:2d:8b:25:d7:7d:25:5b: 29:3c:8f:8e:f5:90:68:5c:c0:5c:de:79:ac:41:dd:b8:fb:06: 39:bf:65:a8:35:2d:3f:15:9f:e6:29:ad:1d:a6:15:05:f4:97: b5:10:61:1d -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUdgrdvlbtBFFhIr4KlmKwEqwn7gswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYmUwYmI3ODg2OWNkYjJhZDBjOTcxYTZhODU4YTMwMjEz ZWFlYzQ3ZDAeFw0yNjA2MTYwOTM4NDlaFw0yNjA2MTcxMjUxNDlaMDMxMTAvBgNV BAMTKDFDRDM0MTdFNjQzNDY1MkFGMEY2NkYyNDQzMUVGNkQ4NkRCMTk3MzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqwLyUYI91TogCWtGPct5SAeHT htf0XlNvjUq7Ba7a99Vonk3mgrpT/3LT1bmdmb1tmqpv58g4Q2y+OgRVaag3W1rL VeE2CMmQwGaKh95QxCJJlmc498Zp2303SwvfkrPWoCyVDoOz0ujttiLB/+nGl/7t x1XOtGtqjomUMUOJ+GNCGg3mNWspHu6XE8rK3ne97zzTfn0lwa+u/dnrJgZBE3Yy 5ciY8solb7tWP3bn4ypV+q/ZtgXpqV/DzelvXoPNqbp41LdjcsgLqeBErz6hXiO3 Ie76f/xtJTaj/xyYEN0BHRqHacDvAQL0PoJAU68a1MO1hg04YcYvYV4Z36jzAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUHNNBfmQ0ZSrw9m8kQx722G2xlzYwHwYDVR0j BBgwFoAUvgu3iGnNsq0MlxpqhYowIT6uxH0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYWMxNDMzODctZjAxMy00OTIyLTgzOGUtZTE4ODY0YmUx ZTRhLzAvQkUwQkI3ODg2OUNEQjJBRDBDOTcxQTZBODU4QTMwMjEzRUFFQzQ3RC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3ZndTNpR25Oc3EwTWx4cHFoWW93SVQ2 dXhIMC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9hYzE0MzM4Ny1m MDEzLTQ5MjItODM4ZS1lMTg4NjRiZTFlNGEvMC9CRTBCQjc4ODY5Q0RCMkFEMEM5 NzFBNkE4NThBMzAyMTNFQUVDNDdELm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAItOOraM+6Xr4c3YI91qi FdtxgMrb0cC0xmlEb48n4xT0SGFAecfJSpdvsaZMXXYT49yi5qCFM6anNmotzW/z JBN+Mh3odWd8Fr4L9RvXyc+/RqawpgMBwGUPq1Q7rhOAfNVCO001oovcMPrUgi1S 9dJsoBW0NUZSWW8xLMeMGkkDLkjNfollGsuQpclKujrv6rguUmBTU+xwSKDtdqSa ijMfvgaMZ2c4qiPpjGpAtiOqWxbcZ0XOq6gT4OQhjox0z5rNVCZL3GBf870ZmWkn rS0tiyXXfSVbKTyPjvWQaFzAXN55rEHduPsGOb9lqDUtPxWf5imtHaYVBfSXtRBh HQ== -----END CERTIFICATE-----Generated at Wed Jun 17 00:03:11 2026 by rpki-client