$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ac143387-f013-4922-838e-e18864be1e4a/0/BE0BB78869CDB2AD0C971A6A858A30213EAEC47D.mft File: BE0BB78869CDB2AD0C971A6A858A30213EAEC47D.mft (raw, json) Hash identifier: ypO/ePqihIZKzGzR9idR6Z0F66tZZc4d2gc3hrx9GQs= Subject key identifier: 2D:B0:86:55:DE:A4:2A:B9:66:8F:EE:75:15:B7:70:DD:1D:35:8A:ED Authority key identifier: BE:0B:B7:88:69:CD:B2:AD:0C:97:1A:6A:85:8A:30:21:3E:AE:C4:7D Certificate issuer: /CN=be0bb78869cdb2ad0c971a6a858a30213eaec47d Certificate serial: 4F10CE3627DC7E9BF4C2FF22E89A9BF6BE362FB4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vgu3iGnNsq0MlxpqhYowIT6uxH0.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ac143387-f013-4922-838e-e18864be1e4a/0/BE0BB78869CDB2AD0C971A6A858A30213EAEC47D.mft Manifest number: 0252 Signing time: Wed 29 Apr 2026 19:11:36 +0000 Manifest this update: Wed 29 Apr 2026 19:06:36 +0000 Manifest next update: Thu 30 Apr 2026 21:40:36 +0000 Files and hashes: 1: 3139332e3136392e37382e302f32332d3233203d3e203438343335.roa (hash: CCPO6h/MpNSX08leEvwwJIjESWw2OEutpIc59PlyY9E=) 2: 3139332e3136392e37382e302f32332d3234203d3e203438343335.roa (hash: 7BonRadnccE5oClU90cDWqb2zFnrszRs5TdXh7lrUTg=) 3: 3139352e34322e3131322e302f32332d3233203d3e203438343335.roa (hash: SO5iYpxppDi067L1otYSj19apV4zwNvimr95590708A=) 4: 3139352e34322e3131322e302f32342d3234203d3e203438343335.roa (hash: tbJb4NeQxaqdUwJnx0mi5eYh93xW1wx/PyQm3nNKQlk=) 5: 3137382e3234382e37332e302f32342d3234203d3e20313431393638.roa (hash: zMoHCJaZZ5vI4uszw9fV0p+6ygU9pfTnJ4jfa1DsJEg=) 6: 3139352e34322e3131332e302f32342d3234203d3e203438343335.roa (hash: pchbJm+Br/uCuzzDsgfU4W3Dq3tZwJWDYbuhydm/Eyc=) 7: 3137382e3234382e37342e302f32342d3234203d3e20323039313831.roa (hash: b86TJ/eicDu3L39UHlXUFvq/1qF9nZUOZYH3MsfWUIw=) 8: BE0BB78869CDB2AD0C971A6A858A30213EAEC47D.crl (hash: L9qCdj+r6KZpjEnGIB4gDPRvfibY4UAY8vppJEOjEBQ=) 9: 3137382e3234382e37372e302f32342d3234203d3e20323133373833.roa (hash: QA/AmBx/vt6J6eDW0Y/+kHvJueiOPr7O1NVAvBIe9GY=) 10: 3137382e3234382e37392e302f32342d3234203d3e20313335333932.roa (hash: YE6bAehCH8ruShBFJdgU4NCX9qGkifZ5lR9x24K4y2c=) 11: 3137382e3234382e37322e302f32342d3234203d3e20313939373833.roa (hash: A75/jbsOC02nzQ9VFagjG//howA7n6bwG8je53ds+vk=) 12: 3137382e3234382e37382e302f32342d3234203d3e20323132333834.roa (hash: 55oHxRvhLlFnFgVNA6T2hJ74AYC9yyl40HSKUWc/res=) 13: 3139332e3136392e37382e302f32332d3234203d3e203530343334.roa (hash: Ozt3uRUP9szxnq6Y/BlUHZo63N6fYBwOlNZT3blQYnY=) 14: 3137382e3234382e37362e302f32342d3234203d3e203432383331.roa (hash: FQiM0Ff1DCSzma5DiHQMrsfmN7QznFFoSzW1a5q9Q2M=) 15: 3137382e3234382e37352e302f32342d3234203d3e20313939303538.roa (hash: 32SDZVJ37JJ5kdrs24paGjp5boRcUJ2fYJyMfyL4cw4=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ac143387-f013-4922-838e-e18864be1e4a/0/BE0BB78869CDB2AD0C971A6A858A30213EAEC47D.crl rsync://rsync.paas.rpki.ripe.net/repository/ac143387-f013-4922-838e-e18864be1e4a/0/BE0BB78869CDB2AD0C971A6A858A30213EAEC47D.mft rsync://rpki.ripe.net/repository/DEFAULT/vgu3iGnNsq0MlxpqhYowIT6uxH0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 30 Apr 2026 21:40:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:10:ce:36:27:dc:7e:9b:f4:c2:ff:22:e8:9a:9b:f6:be:36:2f:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=be0bb78869cdb2ad0c971a6a858a30213eaec47d Validity Not Before: Apr 29 19:06:36 2026 GMT Not After : Apr 30 21:40:36 2026 GMT Subject: CN=2DB08655DEA42AB9668FEE7515B770DD1D358AED Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:87:e7:8a:69:59:32:70:32:72:35:28:c1:c3: be:5b:cb:56:6a:3c:4f:af:10:b0:db:29:31:84:1c: 88:1d:b0:d7:0a:d2:f4:f2:cc:bc:71:7d:ef:73:1c: 81:4b:4c:63:a7:e0:3b:fa:d2:16:49:fd:f2:c3:5f: f6:2c:11:d7:db:40:f3:8b:2d:06:15:73:a7:15:9d: 73:79:d1:b7:80:57:63:7a:50:9e:ec:2b:f2:aa:83: ac:49:4c:65:e4:77:67:a0:53:62:1f:a8:bd:7b:08: b3:c4:ca:72:e3:54:5f:3b:29:26:2c:7a:ff:f3:0a: e4:09:48:04:d3:71:2b:a7:b1:b8:4b:2f:19:f9:68: 8b:4a:91:75:76:16:47:b8:b5:c3:bb:f0:91:68:82: 3d:68:a5:07:1e:65:8f:ac:01:8a:42:52:d7:c1:77: 98:a6:2b:5f:13:ba:07:82:7f:97:7c:76:9f:e4:92: b3:7a:26:07:e2:17:7c:d0:95:42:b8:68:06:69:a4: 3a:ea:41:bf:de:04:42:64:41:74:88:36:22:cd:2d: 2a:20:a8:3d:7d:f1:77:57:8f:33:ee:01:d4:a3:d8: 5e:54:41:30:a0:06:37:d3:95:fc:e3:2e:7f:f2:ad: 36:a9:88:11:d8:f6:d8:db:bf:d3:2a:05:f0:42:c9: a0:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:B0:86:55:DE:A4:2A:B9:66:8F:EE:75:15:B7:70:DD:1D:35:8A:ED X509v3 Authority Key Identifier: keyid:BE:0B:B7:88:69:CD:B2:AD:0C:97:1A:6A:85:8A:30:21:3E:AE:C4:7D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/ac143387-f013-4922-838e-e18864be1e4a/0/BE0BB78869CDB2AD0C971A6A858A30213EAEC47D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vgu3iGnNsq0MlxpqhYowIT6uxH0.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ac143387-f013-4922-838e-e18864be1e4a/0/BE0BB78869CDB2AD0C971A6A858A30213EAEC47D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:53:c2:a8:cb:fc:90:c5:11:9c:ad:ea:c7:98:bc:7f:d5:b5: dc:5b:b5:de:25:ec:bf:01:1f:ac:c3:df:60:67:3a:0c:07:a8: 0d:d9:79:08:6e:9b:fa:12:6e:89:54:16:25:30:06:f1:68:44: 59:ec:b3:46:17:b3:e0:7c:92:d8:c1:85:ed:fd:94:9c:e3:85: c4:c9:38:18:1e:3b:9c:33:9e:5b:3b:23:05:3a:c9:3f:7b:33: 44:a8:41:09:9c:ff:1e:f4:ec:4a:0e:ea:10:a6:18:1c:9e:02: c0:e4:30:25:00:8a:85:dd:2f:56:99:56:de:80:27:30:30:86: 48:de:53:52:1e:75:ac:0b:3f:df:29:d5:10:b2:a3:d7:7a:db: 24:a1:ec:3f:54:42:9f:4a:56:d5:48:17:ac:ce:86:33:50:43: 91:c9:79:4d:6b:4d:80:eb:c6:b1:43:c9:64:99:0d:2c:81:25: 99:f9:66:9e:8e:cd:b2:52:56:e9:a6:c3:65:21:49:a5:ed:13: 3e:a3:77:3b:72:0e:a4:38:cf:fb:aa:6d:4b:05:44:4b:32:73: aa:e6:97:6a:23:ef:10:d7:fb:3f:44:4f:2f:ea:d5:59:9f:f8: 19:14:f6:66:9f:6f:ce:d9:93:0e:f6:82:03:81:e0:66:e9:88: 5d:e3:7e:0f -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUTxDONifcfpv0wv8i6Jqb9r42L7QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYmUwYmI3ODg2OWNkYjJhZDBjOTcxYTZhODU4YTMwMjEz ZWFlYzQ3ZDAeFw0yNjA0MjkxOTA2MzZaFw0yNjA0MzAyMTQwMzZaMDMxMTAvBgNV BAMTKDJEQjA4NjU1REVBNDJBQjk2NjhGRUU3NTE1Qjc3MEREMUQzNThBRUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCh+eKaVkycDJyNSjBw75by1Zq PE+vELDbKTGEHIgdsNcK0vTyzLxxfe9zHIFLTGOn4Dv60hZJ/fLDX/YsEdfbQPOL LQYVc6cVnXN50beAV2N6UJ7sK/Kqg6xJTGXkd2egU2IfqL17CLPEynLjVF87KSYs ev/zCuQJSATTcSunsbhLLxn5aItKkXV2Fke4tcO78JFogj1opQceZY+sAYpCUtfB d5imK18TugeCf5d8dp/kkrN6JgfiF3zQlUK4aAZppDrqQb/eBEJkQXSINiLNLSog qD198XdXjzPuAdSj2F5UQTCgBjfTlfzjLn/yrTapiBHY9tjbv9MqBfBCyaAvAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQULbCGVd6kKrlmj+51Fbdw3R01iu0wHwYDVR0j BBgwFoAUvgu3iGnNsq0MlxpqhYowIT6uxH0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYWMxNDMzODctZjAxMy00OTIyLTgzOGUtZTE4ODY0YmUx ZTRhLzAvQkUwQkI3ODg2OUNEQjJBRDBDOTcxQTZBODU4QTMwMjEzRUFFQzQ3RC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3ZndTNpR25Oc3EwTWx4cHFoWW93SVQ2 dXhIMC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9hYzE0MzM4Ny1m MDEzLTQ5MjItODM4ZS1lMTg4NjRiZTFlNGEvMC9CRTBCQjc4ODY5Q0RCMkFEMEM5 NzFBNkE4NThBMzAyMTNFQUVDNDdELm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXVPCqMv8kMURnK3qx5i8 f9W13Fu13iXsvwEfrMPfYGc6DAeoDdl5CG6b+hJuiVQWJTAG8WhEWeyzRhez4HyS 2MGF7f2UnOOFxMk4GB47nDOeWzsjBTrJP3szRKhBCZz/HvTsSg7qEKYYHJ4CwOQw JQCKhd0vVplW3oAnMDCGSN5TUh51rAs/3ynVELKj13rbJKHsP1RCn0pW1UgXrM6G M1BDkcl5TWtNgOvGsUPJZJkNLIElmflmno7NslJW6abDZSFJpe0TPqN3O3IOpDjP +6ptSwVESzJzquaXaiPvENf7P0RPL+rVWZ/4GRT2Zp9vztmTDvaCA4HgZumIXeN+ Dw== -----END CERTIFICATE-----Generated at Thu Apr 30 10:56:10 2026 by rpki-client