$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ac143387-f013-4922-838e-e18864be1e4a/0/BE0BB78869CDB2AD0C971A6A858A30213EAEC47D.mft File: BE0BB78869CDB2AD0C971A6A858A30213EAEC47D.mft (raw, json) Hash identifier: EA+XIMkfd0s663hUBrgiv0blPun3W08RIQbEMibjIXM= Subject key identifier: 43:A1:A6:53:AD:E4:10:E2:10:05:29:25:4A:58:C3:CE:1A:55:18:FA Authority key identifier: BE:0B:B7:88:69:CD:B2:AD:0C:97:1A:6A:85:8A:30:21:3E:AE:C4:7D Certificate issuer: /CN=be0bb78869cdb2ad0c971a6a858a30213eaec47d Certificate serial: 6BEB265EF74A85DAC42D1CE5497F462224781D88 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vgu3iGnNsq0MlxpqhYowIT6uxH0.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ac143387-f013-4922-838e-e18864be1e4a/0/BE0BB78869CDB2AD0C971A6A858A30213EAEC47D.mft Manifest number: 02D4 Signing time: Sun 02 Aug 2026 21:08:52 +0000 Manifest this update: Sun 02 Aug 2026 21:03:52 +0000 Manifest next update: Tue 04 Aug 2026 00:56:52 +0000 Files and hashes: 1: 3139332e3136392e37382e302f32332d3234203d3e203438343335.roa (hash: 7BonRadnccE5oClU90cDWqb2zFnrszRs5TdXh7lrUTg=) 2: 3137382e3234382e37382e302f32342d3234203d3e20323132333834.roa (hash: sj3Mzc5uAM4fOfd+NlVLzXe7KVKZIN7ymsHfPBwN4+I=) 3: 3139352e34322e3131322e302f32342d3234203d3e203438343335.roa (hash: tbJb4NeQxaqdUwJnx0mi5eYh93xW1wx/PyQm3nNKQlk=) 4: 3137382e3234382e37352e302f32342d3234203d3e20313939303538.roa (hash: 32SDZVJ37JJ5kdrs24paGjp5boRcUJ2fYJyMfyL4cw4=) 5: 3137382e3234382e37342e302f32342d3234203d3e20323035343839.roa (hash: D0Owph/oL3mL5VwchRzGIXC3cMHzv1rxTr5Ojjef5Y4=) 6: BE0BB78869CDB2AD0C971A6A858A30213EAEC47D.crl (hash: 9xGQ6tnTM87lXw+0sUxb+Dw2cKIVBJtiVYySdUArQJ4=) 7: 3137382e3234382e37392e302f32342d3234203d3e20313335333932.roa (hash: YE6bAehCH8ruShBFJdgU4NCX9qGkifZ5lR9x24K4y2c=) 8: 3137382e3234382e37362e302f32342d3234203d3e203432383331.roa (hash: FQiM0Ff1DCSzma5DiHQMrsfmN7QznFFoSzW1a5q9Q2M=) 9: 3137382e3234382e37372e302f32342d3234203d3e20323133373833.roa (hash: QA/AmBx/vt6J6eDW0Y/+kHvJueiOPr7O1NVAvBIe9GY=) 10: 3137382e3234382e37322e302f32342d3234203d3e20313534343032.roa (hash: CmSSgp2rOmRDakFss7YxyL+V/oYFT12bvLwpMMXS8Tk=) 11: 3139332e3136392e37382e302f32332d3234203d3e203530343334.roa (hash: Ozt3uRUP9szxnq6Y/BlUHZo63N6fYBwOlNZT3blQYnY=) 12: 3139352e34322e3131332e302f32342d3234203d3e203438343335.roa (hash: pchbJm+Br/uCuzzDsgfU4W3Dq3tZwJWDYbuhydm/Eyc=) 13: 3137382e3234382e37332e302f32342d3234203d3e20313431393638.roa (hash: 7xtsmIrFnzH8qIFMhr9PIJTBifAuGHXQXdM1XzYoP7s=) 14: 3139332e3136392e37382e302f32332d3233203d3e203438343335.roa (hash: CCPO6h/MpNSX08leEvwwJIjESWw2OEutpIc59PlyY9E=) 15: 3139352e34322e3131322e302f32332d3233203d3e203438343335.roa (hash: SO5iYpxppDi067L1otYSj19apV4zwNvimr95590708A=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ac143387-f013-4922-838e-e18864be1e4a/0/BE0BB78869CDB2AD0C971A6A858A30213EAEC47D.crl rsync://rsync.paas.rpki.ripe.net/repository/ac143387-f013-4922-838e-e18864be1e4a/0/BE0BB78869CDB2AD0C971A6A858A30213EAEC47D.mft rsync://rpki.ripe.net/repository/DEFAULT/vgu3iGnNsq0MlxpqhYowIT6uxH0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 03 Aug 2026 22:36:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:eb:26:5e:f7:4a:85:da:c4:2d:1c:e5:49:7f:46:22:24:78:1d:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=be0bb78869cdb2ad0c971a6a858a30213eaec47d Validity Not Before: Aug 2 21:03:52 2026 GMT Not After : Aug 4 00:56:52 2026 GMT Subject: CN=43A1A653ADE410E2100529254A58C3CE1A5518FA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:52:36:71:ae:53:02:a5:4e:5a:ca:62:72:57: ad:6c:a5:1c:d5:87:d2:6d:29:82:91:4d:f1:a8:03: 60:16:4b:fe:d4:69:da:95:87:2d:ab:9e:ee:90:4a: 09:9e:6e:36:79:6d:b2:0e:66:a7:d2:82:71:35:0f: f6:f3:b1:42:3b:c1:5f:bd:6c:84:3c:1a:be:06:3d: 67:7c:5a:02:3e:8b:ee:0c:08:68:1c:3a:62:2f:cf: 63:dc:8e:af:4a:83:83:03:3c:1b:bb:27:88:a0:ae: 18:e9:c0:7a:cd:13:1d:b5:e0:df:da:58:10:fb:72: df:ac:d2:73:e2:26:67:30:74:ee:07:9e:e1:47:ae: 82:9d:28:c5:ad:e0:3e:f9:a3:de:1e:c4:08:fb:b3: 36:e1:57:09:ba:a2:69:24:b6:ba:01:ca:af:63:47: b0:3f:f1:ab:df:79:b3:01:88:39:76:1d:b0:2e:05: 81:35:91:40:b2:b2:62:b1:37:4f:ea:d1:6b:0a:9a: 76:4e:5e:3d:93:0d:0d:be:4d:f2:a3:0d:df:f6:01: 47:2c:fc:3e:49:2d:a7:50:f4:ec:dc:f1:94:50:d3: 91:76:19:88:b7:4b:37:da:cd:6f:bb:8e:9d:d9:d7: 2c:a5:ab:5c:5c:c5:9a:a7:1c:25:c9:48:34:0d:f7: 17:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:A1:A6:53:AD:E4:10:E2:10:05:29:25:4A:58:C3:CE:1A:55:18:FA X509v3 Authority Key Identifier: keyid:BE:0B:B7:88:69:CD:B2:AD:0C:97:1A:6A:85:8A:30:21:3E:AE:C4:7D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/ac143387-f013-4922-838e-e18864be1e4a/0/BE0BB78869CDB2AD0C971A6A858A30213EAEC47D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vgu3iGnNsq0MlxpqhYowIT6uxH0.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ac143387-f013-4922-838e-e18864be1e4a/0/BE0BB78869CDB2AD0C971A6A858A30213EAEC47D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:2a:c8:42:f6:7d:05:25:f0:78:13:7d:f9:2c:dd:e4:08:82: 9c:04:e3:ce:5f:e8:4e:25:51:58:f6:34:e2:00:79:3a:55:7e: 1e:31:25:4e:a2:c6:f8:ea:76:f3:f2:d0:ff:19:2c:c2:ce:4a: 2d:91:d3:f1:36:bb:0f:1e:4a:fb:e2:c1:df:c8:a3:06:16:05: 5d:56:ac:8d:cd:f9:16:f9:68:8a:8c:22:5a:dd:79:a9:c2:fc: ea:de:c5:73:70:ef:20:77:39:d5:60:b9:68:eb:8f:8e:c5:9c: f6:bf:dd:54:5d:e1:f0:92:5e:92:34:c2:9d:12:46:19:e8:88: 09:4e:42:6f:54:c2:94:24:87:db:79:df:41:25:91:0d:75:4e: 4a:21:42:49:f1:2e:48:83:8d:6c:60:54:5e:9d:2a:26:f6:d7: f6:6f:45:fe:44:0f:2c:94:5b:64:5b:7f:41:11:ca:10:5d:b2: 16:10:23:86:ae:2c:29:a6:e5:96:be:c6:15:4f:46:00:d9:15: 42:35:4c:25:17:94:c5:01:7c:5e:3a:da:d6:72:b7:c3:a9:9e: f6:fd:9c:79:1a:ec:d7:25:77:6e:9b:db:c0:fb:a5:88:51:f6: b8:64:91:69:06:f5:a8:d8:5b:42:09:67:56:ed:e9:4d:ee:79: 62:a8:1f:83 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUa+smXvdKhdrELRzlSX9GIiR4HYgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYmUwYmI3ODg2OWNkYjJhZDBjOTcxYTZhODU4YTMwMjEz ZWFlYzQ3ZDAeFw0yNjA4MDIyMTAzNTJaFw0yNjA4MDQwMDU2NTJaMDMxMTAvBgNV BAMTKDQzQTFBNjUzQURFNDEwRTIxMDA1MjkyNTRBNThDM0NFMUE1NTE4RkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyUjZxrlMCpU5aymJyV61spRzV h9JtKYKRTfGoA2AWS/7UadqVhy2rnu6QSgmebjZ5bbIOZqfSgnE1D/bzsUI7wV+9 bIQ8Gr4GPWd8WgI+i+4MCGgcOmIvz2Pcjq9Kg4MDPBu7J4igrhjpwHrNEx214N/a WBD7ct+s0nPiJmcwdO4HnuFHroKdKMWt4D75o94exAj7szbhVwm6omkktroByq9j R7A/8avfebMBiDl2HbAuBYE1kUCysmKxN0/q0WsKmnZOXj2TDQ2+TfKjDd/2AUcs /D5JLadQ9Ozc8ZRQ05F2GYi3SzfazW+7jp3Z1yylq1xcxZqnHCXJSDQN9xdhAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUQ6GmU63kEOIQBSklSljDzhpVGPowHwYDVR0j BBgwFoAUvgu3iGnNsq0MlxpqhYowIT6uxH0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYWMxNDMzODctZjAxMy00OTIyLTgzOGUtZTE4ODY0YmUx ZTRhLzAvQkUwQkI3ODg2OUNEQjJBRDBDOTcxQTZBODU4QTMwMjEzRUFFQzQ3RC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3ZndTNpR25Oc3EwTWx4cHFoWW93SVQ2 dXhIMC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9hYzE0MzM4Ny1m MDEzLTQ5MjItODM4ZS1lMTg4NjRiZTFlNGEvMC9CRTBCQjc4ODY5Q0RCMkFEMEM5 NzFBNkE4NThBMzAyMTNFQUVDNDdELm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABirIQvZ9BSXweBN9+Szd 5AiCnATjzl/oTiVRWPY04gB5OlV+HjElTqLG+Op28/LQ/xksws5KLZHT8Ta7Dx5K ++LB38ijBhYFXVasjc35FvloiowiWt15qcL86t7Fc3DvIHc51WC5aOuPjsWc9r/d VF3h8JJekjTCnRJGGeiICU5Cb1TClCSH23nfQSWRDXVOSiFCSfEuSIONbGBUXp0q JvbX9m9F/kQPLJRbZFt/QRHKEF2yFhAjhq4sKabllr7GFU9GANkVQjVMJReUxQF8 Xjra1nK3w6me9v2ceRrs1yV3bpvbwPuliFH2uGSRaQb1qNhbQglnVu3pTe55Yqgf gw== -----END CERTIFICATE-----Generated at Mon Aug 3 04:14:57 2026 by rpki-client