$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/ac143387-f013-4922-838e-e18864be1e4a/0/BE0BB78869CDB2AD0C971A6A858A30213EAEC47D.mft File: BE0BB78869CDB2AD0C971A6A858A30213EAEC47D.mft (raw, json) Hash identifier: v8M0jB8gYGcwJz8rS4fIp+VpqeSNI1xK/k1F0w3HY3o= Subject key identifier: B8:01:EB:89:D7:84:B9:2E:53:EA:0D:01:D2:7F:92:6E:68:7A:E1:23 Authority key identifier: BE:0B:B7:88:69:CD:B2:AD:0C:97:1A:6A:85:8A:30:21:3E:AE:C4:7D Certificate issuer: /CN=be0bb78869cdb2ad0c971a6a858a30213eaec47d Certificate serial: 0D06D89B7FBC4755C9ADF288155D846565C09DE4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vgu3iGnNsq0MlxpqhYowIT6uxH0.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ac143387-f013-4922-838e-e18864be1e4a/0/BE0BB78869CDB2AD0C971A6A858A30213EAEC47D.mft Manifest number: 0352 Signing time: Thu 05 Nov 2026 08:34:03 +0000 Manifest this update: Thu 05 Nov 2026 08:29:03 +0000 Manifest next update: Fri 06 Nov 2026 10:54:03 +0000 Files and hashes: 1: 3137382e3234382e37342e302f32342d3234203d3e203630353432.roa (hash: Xr5u/5dDUrYBdAYp0AhqinBp+MATOEXztLhHhfZwhws=) 2: BE0BB78869CDB2AD0C971A6A858A30213EAEC47D.crl (hash: FZCZDZSX/cD+XHUqK75b4a5fn4bKQAic0q2scvdOSMY=) 3: 3137382e3234382e37382e302f32342d3234203d3e20323132333834.roa (hash: sj3Mzc5uAM4fOfd+NlVLzXe7KVKZIN7ymsHfPBwN4+I=) 4: 3139332e3136392e37382e302f32332d3234203d3e203438343335.roa (hash: 7BonRadnccE5oClU90cDWqb2zFnrszRs5TdXh7lrUTg=) 5: 3139332e3136392e37382e302f32332d3234203d3e203530343334.roa (hash: Ozt3uRUP9szxnq6Y/BlUHZo63N6fYBwOlNZT3blQYnY=) 6: 3139332e3136392e37382e302f32332d3233203d3e203438343335.roa (hash: CCPO6h/MpNSX08leEvwwJIjESWw2OEutpIc59PlyY9E=) 7: 3139352e34322e3131322e302f32332d3233203d3e203438343335.roa (hash: SO5iYpxppDi067L1otYSj19apV4zwNvimr95590708A=) 8: 3137382e3234382e37392e302f32342d3234203d3e20313335333932.roa (hash: YE6bAehCH8ruShBFJdgU4NCX9qGkifZ5lR9x24K4y2c=) 9: 3137382e3234382e37332e302f32342d3234203d3e20313431393638.roa (hash: 7xtsmIrFnzH8qIFMhr9PIJTBifAuGHXQXdM1XzYoP7s=) 10: 3137382e3234382e37352e302f32342d3234203d3e20313939303538.roa (hash: 32SDZVJ37JJ5kdrs24paGjp5boRcUJ2fYJyMfyL4cw4=) 11: 3139352e34322e3131322e302f32342d3234203d3e203438343335.roa (hash: tbJb4NeQxaqdUwJnx0mi5eYh93xW1wx/PyQm3nNKQlk=) 12: 3137382e3234382e37322e302f32342d3234203d3e20313534343032.roa (hash: CmSSgp2rOmRDakFss7YxyL+V/oYFT12bvLwpMMXS8Tk=) 13: 3137382e3234382e37362e302f32342d3234203d3e203432383331.roa (hash: FQiM0Ff1DCSzma5DiHQMrsfmN7QznFFoSzW1a5q9Q2M=) 14: 3137382e3234382e37372e302f32342d3234203d3e20323133373833.roa (hash: QA/AmBx/vt6J6eDW0Y/+kHvJueiOPr7O1NVAvBIe9GY=) 15: 3139352e34322e3131332e302f32342d3234203d3e203438343335.roa (hash: pchbJm+Br/uCuzzDsgfU4W3Dq3tZwJWDYbuhydm/Eyc=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ac143387-f013-4922-838e-e18864be1e4a/0/BE0BB78869CDB2AD0C971A6A858A30213EAEC47D.crl rsync://rsync.paas.rpki.ripe.net/repository/ac143387-f013-4922-838e-e18864be1e4a/0/BE0BB78869CDB2AD0C971A6A858A30213EAEC47D.mft rsync://rpki.ripe.net/repository/DEFAULT/vgu3iGnNsq0MlxpqhYowIT6uxH0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 06 Nov 2026 08:45:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:06:d8:9b:7f:bc:47:55:c9:ad:f2:88:15:5d:84:65:65:c0:9d:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=be0bb78869cdb2ad0c971a6a858a30213eaec47d Validity Not Before: Nov 5 08:29:03 2026 GMT Not After : Nov 6 10:54:03 2026 GMT Subject: CN=B801EB89D784B92E53EA0D01D27F926E687AE123 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:73:56:09:dc:b9:84:55:32:69:48:95:d7:a7: e4:09:6b:e9:a5:0f:96:d2:db:92:09:2c:16:04:74: 16:63:a0:7e:d2:92:ea:d5:b1:e0:0f:9d:07:ee:ac: 27:4b:b5:8d:35:c6:58:ac:38:f6:9d:07:e6:15:05: 6a:29:65:ce:09:16:c4:b6:3c:4d:0e:e6:f8:e1:4a: 10:a0:d8:61:d5:1b:ec:d1:46:20:8e:b3:51:32:7d: 86:da:55:8e:4e:a9:63:51:4e:f5:32:06:9c:2b:16: 5b:52:4d:70:8a:e9:c1:6e:2c:5e:c2:c4:3b:fe:b5: 38:d3:e1:f3:72:50:c7:0c:6e:ae:0e:a6:ff:8a:fd: 7f:b8:ab:b3:87:0a:29:2c:73:2f:e3:e3:aa:c5:13: 4a:b6:68:5e:58:99:67:79:2e:da:35:00:a5:1f:f4: 74:85:12:56:1b:1d:e4:b0:ae:36:d7:01:8b:e4:e7: d6:ff:1e:f7:7e:17:b2:f5:22:20:e7:30:ae:81:1e: d0:23:51:65:cc:59:f9:e9:fd:ec:dc:e9:d7:05:d6: 6f:0b:e3:aa:55:be:0a:d3:40:0b:b9:6c:55:9f:52: d4:a5:05:78:b9:c7:5d:0e:07:09:ea:71:13:4a:f2: 3c:f0:6f:a1:69:0a:63:d6:ef:8e:e5:a4:27:1a:3c: d7:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:01:EB:89:D7:84:B9:2E:53:EA:0D:01:D2:7F:92:6E:68:7A:E1:23 X509v3 Authority Key Identifier: keyid:BE:0B:B7:88:69:CD:B2:AD:0C:97:1A:6A:85:8A:30:21:3E:AE:C4:7D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/ac143387-f013-4922-838e-e18864be1e4a/0/BE0BB78869CDB2AD0C971A6A858A30213EAEC47D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vgu3iGnNsq0MlxpqhYowIT6uxH0.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ac143387-f013-4922-838e-e18864be1e4a/0/BE0BB78869CDB2AD0C971A6A858A30213EAEC47D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:60:f2:2e:d8:f6:ab:24:6e:bf:c9:a6:81:e3:e9:24:84:03: 05:d9:8d:71:2b:9b:f6:d3:86:70:41:b0:ed:8f:98:54:f6:7d: 4f:49:c8:81:71:a7:a5:c1:60:ea:e4:f1:fc:2a:60:07:ed:2d: 3f:ae:60:35:01:f2:49:a8:3d:54:73:89:aa:0e:0e:6b:d1:db: 14:f2:f4:89:8a:ea:42:24:47:90:37:44:f3:e9:95:23:40:c5: 86:a9:a8:3d:39:ea:23:6c:e6:06:f1:79:ee:e5:57:21:35:7b: 29:b3:69:b9:93:3b:45:d1:e5:4c:42:f3:22:cf:82:07:5e:d0: a3:a4:5e:6c:df:8f:2b:0d:1a:06:62:45:18:d6:4b:91:ca:ab: 8c:bc:97:0e:64:27:bd:a9:76:cc:36:4f:dc:7f:7f:d7:b1:3f: 19:c5:c2:d9:45:90:fd:6d:bb:e5:9b:d6:b9:8e:10:c0:09:cc: 1f:a7:c0:9d:d9:03:24:af:e5:f5:1e:45:5b:e1:a6:3e:8c:f4: a7:48:f7:c0:95:3c:65:94:8f:d6:45:2b:a3:4a:84:39:76:31: 4f:fd:4a:be:7f:60:31:aa:0e:38:19:ea:15:36:36:0b:0f:8b: 03:64:62:0f:5c:90:f6:3a:9b:39:be:74:15:26:ee:6e:9c:b3: 7a:a9:61:15 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUDQbYm3+8R1XJrfKIFV2EZWXAneQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYmUwYmI3ODg2OWNkYjJhZDBjOTcxYTZhODU4YTMwMjEz ZWFlYzQ3ZDAeFw0yNjExMDUwODI5MDNaFw0yNjExMDYxMDU0MDNaMDMxMTAvBgNV BAMTKEI4MDFFQjg5RDc4NEI5MkU1M0VBMEQwMUQyN0Y5MjZFNjg3QUUxMjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDc1YJ3LmEVTJpSJXXp+QJa+ml D5bS25IJLBYEdBZjoH7SkurVseAPnQfurCdLtY01xlisOPadB+YVBWopZc4JFsS2 PE0O5vjhShCg2GHVG+zRRiCOs1EyfYbaVY5OqWNRTvUyBpwrFltSTXCK6cFuLF7C xDv+tTjT4fNyUMcMbq4Opv+K/X+4q7OHCikscy/j46rFE0q2aF5YmWd5Lto1AKUf 9HSFElYbHeSwrjbXAYvk59b/Hvd+F7L1IiDnMK6BHtAjUWXMWfnp/ezc6dcF1m8L 46pVvgrTQAu5bFWfUtSlBXi5x10OBwnqcRNK8jzwb6FpCmPW747lpCcaPNeHAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUuAHrideEuS5T6g0B0n+Sbmh64SMwHwYDVR0j BBgwFoAUvgu3iGnNsq0MlxpqhYowIT6uxH0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYWMxNDMzODctZjAxMy00OTIyLTgzOGUtZTE4ODY0YmUx ZTRhLzAvQkUwQkI3ODg2OUNEQjJBRDBDOTcxQTZBODU4QTMwMjEzRUFFQzQ3RC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3ZndTNpR25Oc3EwTWx4cHFoWW93SVQ2 dXhIMC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9hYzE0MzM4Ny1m MDEzLTQ5MjItODM4ZS1lMTg4NjRiZTFlNGEvMC9CRTBCQjc4ODY5Q0RCMkFEMEM5 NzFBNkE4NThBMzAyMTNFQUVDNDdELm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANWDyLtj2qyRuv8mmgePp JIQDBdmNcSub9tOGcEGw7Y+YVPZ9T0nIgXGnpcFg6uTx/CpgB+0tP65gNQHySag9 VHOJqg4Oa9HbFPL0iYrqQiRHkDdE8+mVI0DFhqmoPTnqI2zmBvF57uVXITV7KbNp uZM7RdHlTELzIs+CB17Qo6RebN+PKw0aBmJFGNZLkcqrjLyXDmQnval2zDZP3H9/ 17E/GcXC2UWQ/W275ZvWuY4QwAnMH6fAndkDJK/l9R5FW+GmPoz0p0j3wJU8ZZSP 1kUro0qEOXYxT/1Kvn9gMaoOOBnqFTY2Cw+LA2RiD1yQ9jqbOb50FSbubpyzeqlh FQ== -----END CERTIFICATE-----Generated at Thu Nov 5 19:27:53 2026 by rpki-client