$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ac143387-f013-4922-838e-e18864be1e4a/0/BE0BB78869CDB2AD0C971A6A858A30213EAEC47D.mft File: BE0BB78869CDB2AD0C971A6A858A30213EAEC47D.mft (raw, json) Hash identifier: ibBGb2EwD4NWXSr4+TNrmE16Hi1zMKjut6zf4Z7EmjE= Subject key identifier: 6A:30:F9:D6:B2:27:32:F1:C6:7F:F5:CB:3F:67:17:3F:5D:95:BF:77 Authority key identifier: BE:0B:B7:88:69:CD:B2:AD:0C:97:1A:6A:85:8A:30:21:3E:AE:C4:7D Certificate issuer: /CN=be0bb78869cdb2ad0c971a6a858a30213eaec47d Certificate serial: 6C305F0AD33E74BC21F915B902898951A2D5AABC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vgu3iGnNsq0MlxpqhYowIT6uxH0.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ac143387-f013-4922-838e-e18864be1e4a/0/BE0BB78869CDB2AD0C971A6A858A30213EAEC47D.mft Manifest number: 0152 Signing time: Tue 21 Oct 2025 20:42:40 +0000 Manifest this update: Tue 21 Oct 2025 20:37:40 +0000 Manifest next update: Wed 22 Oct 2025 21:06:40 +0000 Files and hashes: 1: 3137382e3234382e37392e302f32342d3234203d3e20313335333932.roa (hash: nkla74pmgzof6BdGTx/D9Sn3aXq/+fT/xyCtH2Ux1lE=) 2: 3137382e3234382e37362e302f32342d3234203d3e203336353330.roa (hash: h2oY8dMCuUJOV8h2ooYxtJO3njho899x4gMqGa23JNE=) 3: 3139332e3136392e37382e302f32332d3234203d3e203438343335.roa (hash: 0e4l5EqcD9+SWWVL79QZba03Lu9mdjyR/TfDJr390dA=) 4: 3137382e3234382e37332e302f32342d3234203d3e20313431393638.roa (hash: zMoHCJaZZ5vI4uszw9fV0p+6ygU9pfTnJ4jfa1DsJEg=) 5: 3139352e34322e3131322e302f32332d3233203d3e203438343335.roa (hash: LnJ/05IgVINSSDv4l3ajCKuAD4mr9PXKyWCylRmwux0=) 6: 3137382e3234382e37382e302f32342d3234203d3e20323132333834.roa (hash: 55oHxRvhLlFnFgVNA6T2hJ74AYC9yyl40HSKUWc/res=) 7: 3139352e34322e3131332e302f32342d3234203d3e203438343335.roa (hash: aYbyRGpjGAy7pzSZSZu9mIeZ8V/FjY5/eUQvPy2nJ/Y=) 8: 3137382e3234382e37322e302f32342d3234203d3e20313531383732.roa (hash: 562I7wk8pDZNtdMzcEoC9Q7KQUjR9i2cYfXfdpaRXg8=) 9: 3137382e3234382e37362e302f32342d3234203d3e20323135333034.roa (hash: XrWwPHt91qxXHQ0/kVWO42vo3gTicR3T1AogX5xX6FY=) 10: 3137382e3234382e37372e302f32342d3234203d3e20323133373833.roa (hash: IZUL7zEfrS59nO5eqaFvUNxkfEHC3BRjyZY2ApRcoSg=) 11: BE0BB78869CDB2AD0C971A6A858A30213EAEC47D.crl (hash: op8IL9VFZEmymFB5xSUsk+y8PI3/PauAhQGKY/mqN+U=) 12: 3139332e3136392e37382e302f32332d3233203d3e203438343335.roa (hash: IDuy7mlGaLMOCgzEdx2/1ouXbZ90tr9UBkMDq0knNXg=) 13: 3137382e3234382e37352e302f32342d3234203d3e20313939303538.roa (hash: 0IUSu+qptfP2e6dJnAny9tG4Cb2xcvVtmtBD0i4piak=) 14: 3139332e3136392e37382e302f32332d3234203d3e203530343334.roa (hash: i+j0/SqL92pXqr/Yt38MmbwZjTIQClt05q1Bhtl74qs=) 15: 3137382e3234382e37342e302f32342d3234203d3e20323039313831.roa (hash: JOjM4S47fNK82HVGI3kzft2889UH/2/CmD3owvdrCqM=) 16: 3139352e34322e3131322e302f32342d3234203d3e203438343335.roa (hash: 0fCZnPcUR/TU0KGeDhdE4rzY8AMOIFMDCEwGzQYi3Zw=) 17: 3137382e3234382e37362e302f32342d3234203d3e20323134303234.roa (hash: JikbqnpKajZI2JuxlY+TTYmy6DToKoSov4y2Ga81BQg=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ac143387-f013-4922-838e-e18864be1e4a/0/BE0BB78869CDB2AD0C971A6A858A30213EAEC47D.crl rsync://rsync.paas.rpki.ripe.net/repository/ac143387-f013-4922-838e-e18864be1e4a/0/BE0BB78869CDB2AD0C971A6A858A30213EAEC47D.mft rsync://rpki.ripe.net/repository/DEFAULT/vgu3iGnNsq0MlxpqhYowIT6uxH0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 22 Oct 2025 14:12:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:30:5f:0a:d3:3e:74:bc:21:f9:15:b9:02:89:89:51:a2:d5:aa:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=be0bb78869cdb2ad0c971a6a858a30213eaec47d Validity Not Before: Oct 21 20:37:40 2025 GMT Not After : Oct 22 21:06:40 2025 GMT Subject: CN=6A30F9D6B22732F1C67FF5CB3F67173F5D95BF77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:7b:dc:e7:cc:7a:63:d0:bb:5c:04:e6:2d:26: b3:6f:1a:42:24:a1:20:b0:d7:70:f0:85:5d:39:33: 20:20:1d:90:d3:fe:ca:41:02:13:be:93:c9:0d:d2: 38:84:21:55:a0:64:2c:a3:ea:16:23:49:25:3b:54: 2e:c3:42:f0:34:57:ea:15:6c:b4:45:83:38:2a:85: ad:16:e9:57:38:26:3b:3e:8f:15:65:17:be:20:92: d3:99:ed:df:e9:08:fa:53:5d:2c:ee:4e:0c:e6:5e: e1:bf:48:91:e1:b3:0e:d1:9b:90:3b:40:e9:2b:94: ee:fc:93:0f:61:92:af:9c:80:68:f7:2c:2d:09:3b: b9:73:7e:1d:a1:0d:25:5f:66:de:3f:2b:09:79:c9: 09:07:54:1f:2d:1b:e8:bb:c1:df:02:cd:39:19:ab: 24:d2:27:ea:73:43:6f:6b:25:e8:77:96:2c:25:37: 47:65:1d:a2:1a:dd:d9:74:c7:b5:2d:d3:fc:4c:ea: 70:7d:99:e5:31:22:da:47:05:54:72:2e:0f:78:e8: bf:12:f2:6d:34:7d:9f:88:bc:e0:c6:05:19:7b:c1: d0:82:05:27:86:a4:f8:9b:a1:07:4e:23:c6:a7:cb: 9c:e8:48:bc:38:a6:e9:d2:6a:f2:70:3c:81:af:b7: da:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:30:F9:D6:B2:27:32:F1:C6:7F:F5:CB:3F:67:17:3F:5D:95:BF:77 X509v3 Authority Key Identifier: keyid:BE:0B:B7:88:69:CD:B2:AD:0C:97:1A:6A:85:8A:30:21:3E:AE:C4:7D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/ac143387-f013-4922-838e-e18864be1e4a/0/BE0BB78869CDB2AD0C971A6A858A30213EAEC47D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vgu3iGnNsq0MlxpqhYowIT6uxH0.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ac143387-f013-4922-838e-e18864be1e4a/0/BE0BB78869CDB2AD0C971A6A858A30213EAEC47D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:b8:73:ec:cb:fa:01:78:bc:c4:32:66:7e:c8:49:77:53:c0: 52:8b:b1:15:46:06:51:42:85:35:30:ad:6c:fc:89:14:1c:88: 2d:23:35:7e:fc:cd:fa:c5:75:2c:32:65:45:19:92:b5:c8:4a: 34:d7:bc:52:4e:e3:b8:5d:8e:e2:23:17:79:ca:62:9c:23:82: c4:d6:c2:99:4b:60:b5:07:e9:db:ad:af:3d:a1:6a:28:c2:a7: 9d:c2:b1:7e:e9:fb:35:19:0b:f4:b3:6a:c9:51:5f:44:26:29: ff:cb:d2:bd:2e:8b:e1:c2:1e:35:a1:a1:ba:4a:9d:10:e4:63: c4:ea:ef:94:db:e3:99:fc:58:46:13:d8:d0:04:d6:56:fc:04: 0f:4e:97:11:06:91:90:39:88:99:4a:6d:ce:fb:53:93:97:5d: 79:df:ab:87:a2:bc:69:88:0e:22:7d:3a:8f:e0:6b:6b:8e:a2: af:a3:cb:f3:ba:a4:95:a1:6f:8b:03:70:69:0b:66:d8:e8:0c: 4f:61:56:6b:2f:82:ba:e2:93:b4:9c:3b:7b:ee:a2:41:42:4b: ad:99:32:9e:5a:1f:ac:f4:0e:20:2f:bd:45:1d:33:e9:d9:ea: fc:6f:25:9a:7b:03:b6:84:44:0c:0c:13:56:b1:40:86:d1:e1: 2f:44:02:ba -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUbDBfCtM+dLwh+RW5AomJUaLVqrwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYmUwYmI3ODg2OWNkYjJhZDBjOTcxYTZhODU4YTMwMjEz ZWFlYzQ3ZDAeFw0yNTEwMjEyMDM3NDBaFw0yNTEwMjIyMTA2NDBaMDMxMTAvBgNV BAMTKDZBMzBGOUQ2QjIyNzMyRjFDNjdGRjVDQjNGNjcxNzNGNUQ5NUJGNzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDae9znzHpj0LtcBOYtJrNvGkIk oSCw13DwhV05MyAgHZDT/spBAhO+k8kN0jiEIVWgZCyj6hYjSSU7VC7DQvA0V+oV bLRFgzgqha0W6Vc4Jjs+jxVlF74gktOZ7d/pCPpTXSzuTgzmXuG/SJHhsw7Rm5A7 QOkrlO78kw9hkq+cgGj3LC0JO7lzfh2hDSVfZt4/Kwl5yQkHVB8tG+i7wd8CzTkZ qyTSJ+pzQ29rJeh3liwlN0dlHaIa3dl0x7Ut0/xM6nB9meUxItpHBVRyLg946L8S 8m00fZ+IvODGBRl7wdCCBSeGpPiboQdOI8any5zoSLw4punSavJwPIGvt9r5AgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUajD51rInMvHGf/XLP2cXP12Vv3cwHwYDVR0j BBgwFoAUvgu3iGnNsq0MlxpqhYowIT6uxH0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYWMxNDMzODctZjAxMy00OTIyLTgzOGUtZTE4ODY0YmUx ZTRhLzAvQkUwQkI3ODg2OUNEQjJBRDBDOTcxQTZBODU4QTMwMjEzRUFFQzQ3RC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3ZndTNpR25Oc3EwTWx4cHFoWW93SVQ2 dXhIMC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9hYzE0MzM4Ny1m MDEzLTQ5MjItODM4ZS1lMTg4NjRiZTFlNGEvMC9CRTBCQjc4ODY5Q0RCMkFEMEM5 NzFBNkE4NThBMzAyMTNFQUVDNDdELm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjLhz7Mv6AXi8xDJmfshJ d1PAUouxFUYGUUKFNTCtbPyJFByILSM1fvzN+sV1LDJlRRmStchKNNe8Uk7juF2O 4iMXecpinCOCxNbCmUtgtQfp262vPaFqKMKnncKxfun7NRkL9LNqyVFfRCYp/8vS vS6L4cIeNaGhukqdEORjxOrvlNvjmfxYRhPY0ATWVvwED06XEQaRkDmImUptzvtT k5dded+rh6K8aYgOIn06j+Bra46ir6PL87qklaFviwNwaQtm2OgMT2FWay+CuuKT tJw7e+6iQUJLrZkynlofrPQOIC+9RR0z6dnq/G8lmnsDtoREDAwTVrFAhtHhL0QC ug== -----END CERTIFICATE-----Generated at Tue Oct 21 23:05:01 2025 by rpki-client