$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ac143387-f013-4922-838e-e18864be1e4a/0/BE0BB78869CDB2AD0C971A6A858A30213EAEC47D.mft File: BE0BB78869CDB2AD0C971A6A858A30213EAEC47D.mft (raw, json) Hash identifier: 02GjztIo4RX7ZW0oc58+g7YPtfqdDw5YhdFKDK5aDio= Subject key identifier: D7:AB:34:55:D5:BA:F9:98:77:43:6C:17:21:16:3D:5F:AE:FB:E9:80 Authority key identifier: BE:0B:B7:88:69:CD:B2:AD:0C:97:1A:6A:85:8A:30:21:3E:AE:C4:7D Certificate issuer: /CN=be0bb78869cdb2ad0c971a6a858a30213eaec47d Certificate serial: 55C3EF6C883441FCB80A4942A348157D6E69A4B0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vgu3iGnNsq0MlxpqhYowIT6uxH0.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ac143387-f013-4922-838e-e18864be1e4a/0/BE0BB78869CDB2AD0C971A6A858A30213EAEC47D.mft Manifest number: 0114 Signing time: Fri 05 Sep 2025 04:38:43 +0000 Manifest this update: Fri 05 Sep 2025 04:33:43 +0000 Manifest next update: Sat 06 Sep 2025 06:47:43 +0000 Files and hashes: 1: 3137382e3234382e37382e302f32342d3234203d3e20323132333834.roa (hash: 55oHxRvhLlFnFgVNA6T2hJ74AYC9yyl40HSKUWc/res=) 2: 3139332e3136392e37382e302f32332d3234203d3e203438343335.roa (hash: 0e4l5EqcD9+SWWVL79QZba03Lu9mdjyR/TfDJr390dA=) 3: 3137382e3234382e37322e302f32342d3234203d3e20313531383732.roa (hash: 562I7wk8pDZNtdMzcEoC9Q7KQUjR9i2cYfXfdpaRXg8=) 4: 3139352e34322e3131322e302f32342d3234203d3e203438343335.roa (hash: 0fCZnPcUR/TU0KGeDhdE4rzY8AMOIFMDCEwGzQYi3Zw=) 5: BE0BB78869CDB2AD0C971A6A858A30213EAEC47D.crl (hash: tOXD9zNt8CcUiF1UsXA48R1I4DeKxxS1ECHWChIPuts=) 6: 3137382e3234382e37352e302f32342d3234203d3e20313939303538.roa (hash: 0IUSu+qptfP2e6dJnAny9tG4Cb2xcvVtmtBD0i4piak=) 7: 3137382e3234382e37342e302f32342d3234203d3e20323039313831.roa (hash: JOjM4S47fNK82HVGI3kzft2889UH/2/CmD3owvdrCqM=) 8: 3137382e3234382e37372e302f32342d3234203d3e20323133373833.roa (hash: IZUL7zEfrS59nO5eqaFvUNxkfEHC3BRjyZY2ApRcoSg=) 9: 3139352e34322e3131332e302f32342d3234203d3e203438343335.roa (hash: aYbyRGpjGAy7pzSZSZu9mIeZ8V/FjY5/eUQvPy2nJ/Y=) 10: 3137382e3234382e37362e302f32342d3234203d3e20323134303234.roa (hash: JikbqnpKajZI2JuxlY+TTYmy6DToKoSov4y2Ga81BQg=) 11: 3139352e34322e3131322e302f32332d3233203d3e203438343335.roa (hash: LnJ/05IgVINSSDv4l3ajCKuAD4mr9PXKyWCylRmwux0=) 12: 3137382e3234382e37362e302f32342d3234203d3e20323135333034.roa (hash: XrWwPHt91qxXHQ0/kVWO42vo3gTicR3T1AogX5xX6FY=) 13: 3137382e3234382e37362e302f32342d3234203d3e203336353330.roa (hash: h2oY8dMCuUJOV8h2ooYxtJO3njho899x4gMqGa23JNE=) 14: 3139332e3136392e37382e302f32332d3234203d3e203530343334.roa (hash: i+j0/SqL92pXqr/Yt38MmbwZjTIQClt05q1Bhtl74qs=) 15: 3137382e3234382e37332e302f32342d3234203d3e20313431393638.roa (hash: zMoHCJaZZ5vI4uszw9fV0p+6ygU9pfTnJ4jfa1DsJEg=) 16: 3139332e3136392e37382e302f32332d3233203d3e203438343335.roa (hash: IDuy7mlGaLMOCgzEdx2/1ouXbZ90tr9UBkMDq0knNXg=) 17: 3137382e3234382e37392e302f32342d3234203d3e20313335333932.roa (hash: nkla74pmgzof6BdGTx/D9Sn3aXq/+fT/xyCtH2Ux1lE=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ac143387-f013-4922-838e-e18864be1e4a/0/BE0BB78869CDB2AD0C971A6A858A30213EAEC47D.crl rsync://rsync.paas.rpki.ripe.net/repository/ac143387-f013-4922-838e-e18864be1e4a/0/BE0BB78869CDB2AD0C971A6A858A30213EAEC47D.mft rsync://rpki.ripe.net/repository/DEFAULT/vgu3iGnNsq0MlxpqhYowIT6uxH0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Sep 2025 06:47:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:c3:ef:6c:88:34:41:fc:b8:0a:49:42:a3:48:15:7d:6e:69:a4:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=be0bb78869cdb2ad0c971a6a858a30213eaec47d Validity Not Before: Sep 5 04:33:43 2025 GMT Not After : Sep 6 06:47:43 2025 GMT Subject: CN=D7AB3455D5BAF99877436C1721163D5FAEFBE980 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:69:19:5e:53:64:5b:84:4c:8a:c5:3e:f2:04: 96:bd:5d:89:cc:3d:11:35:c3:4a:65:43:b0:31:19: 59:0c:f1:6e:ba:04:f5:8d:c5:2e:f0:b5:4a:12:b4: 9e:22:cf:1f:73:12:d5:ee:6a:27:57:07:22:ae:39: b7:53:9f:d1:8a:30:b9:60:9b:29:ec:cc:7e:9b:3a: 6a:96:48:de:46:bc:db:ad:64:2d:bb:d1:92:13:9a: 9f:8a:ae:1e:cd:e4:16:04:ff:3b:5a:37:9a:02:18: 5a:73:95:ce:17:a6:2a:3d:34:1d:21:75:0c:3f:ca: 1f:4d:51:4d:0e:79:9b:ac:64:c2:10:7e:0c:1a:14: 74:d0:bd:7e:90:c3:41:86:1e:7c:05:f3:6a:20:a5: 62:8d:22:bf:1e:1f:03:ba:17:e8:7f:c2:4b:90:ea: f0:64:fb:fb:dd:c6:a2:6e:59:c0:52:52:27:7b:be: 02:15:77:6d:5f:4f:ad:61:8a:69:28:0a:78:24:9c: 22:62:ba:34:22:16:8f:8e:21:cc:dc:90:64:b6:14: 77:e3:c4:c6:ec:c4:fc:f7:ee:b1:84:2e:a0:54:f7: 9b:6a:2d:d3:38:5d:2e:39:2c:d7:a8:f6:37:4f:75: 3f:c1:e8:56:8b:51:78:a8:e4:7f:e9:95:9f:8d:00: f1:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:AB:34:55:D5:BA:F9:98:77:43:6C:17:21:16:3D:5F:AE:FB:E9:80 X509v3 Authority Key Identifier: keyid:BE:0B:B7:88:69:CD:B2:AD:0C:97:1A:6A:85:8A:30:21:3E:AE:C4:7D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/ac143387-f013-4922-838e-e18864be1e4a/0/BE0BB78869CDB2AD0C971A6A858A30213EAEC47D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vgu3iGnNsq0MlxpqhYowIT6uxH0.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ac143387-f013-4922-838e-e18864be1e4a/0/BE0BB78869CDB2AD0C971A6A858A30213EAEC47D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:90:92:34:7b:e7:1c:f6:fb:b8:1f:50:41:ed:eb:b4:a6:88: f1:0e:93:de:ef:b5:51:9d:35:5d:8b:a8:df:4d:ff:77:ba:b1: 2c:8b:4c:f9:ac:2a:62:23:c9:81:8a:92:f3:50:13:34:49:22: 1b:38:59:79:62:dd:e9:dc:e8:48:5b:eb:9e:83:7f:63:a4:17: f0:e7:bf:5c:65:1a:a7:81:2f:d8:b7:6b:74:29:b2:38:a6:9c: 5e:5b:38:59:c9:05:70:88:ca:be:0c:65:13:95:00:2f:ea:b4: c1:06:78:c6:8d:23:81:8e:02:17:2a:97:b7:36:45:a4:52:83: 27:08:0d:fc:95:ff:97:25:c1:2a:e6:f7:d0:b0:1f:43:9e:e4: 36:a2:bf:17:0e:bf:bf:e1:bd:67:26:7d:7d:d0:90:8b:9c:e8: 9e:fe:78:eb:85:83:fa:22:34:9b:4f:5d:dc:1b:b4:c3:fd:25: 4f:23:d5:5c:29:bb:b0:6f:5b:36:9c:f4:19:49:19:01:e1:5b: f5:e5:05:e7:51:8f:17:a7:34:c7:70:1d:72:3c:99:7b:66:e2: 47:1f:9f:e0:a1:f5:7b:e0:b1:5c:4b:f9:66:7d:10:30:99:98: b7:cf:55:ad:da:40:df:96:45:04:d1:54:da:5d:eb:b4:7c:f1: 14:f3:45:9d -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUVcPvbIg0Qfy4CklCo0gVfW5ppLAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYmUwYmI3ODg2OWNkYjJhZDBjOTcxYTZhODU4YTMwMjEz ZWFlYzQ3ZDAeFw0yNTA5MDUwNDMzNDNaFw0yNTA5MDYwNjQ3NDNaMDMxMTAvBgNV BAMTKEQ3QUIzNDU1RDVCQUY5OTg3NzQzNkMxNzIxMTYzRDVGQUVGQkU5ODAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmaRleU2RbhEyKxT7yBJa9XYnM PRE1w0plQ7AxGVkM8W66BPWNxS7wtUoStJ4izx9zEtXuaidXByKuObdTn9GKMLlg mynszH6bOmqWSN5GvNutZC270ZITmp+Krh7N5BYE/ztaN5oCGFpzlc4Xpio9NB0h dQw/yh9NUU0OeZusZMIQfgwaFHTQvX6Qw0GGHnwF82ogpWKNIr8eHwO6F+h/wkuQ 6vBk+/vdxqJuWcBSUid7vgIVd21fT61himkoCngknCJiujQiFo+OIczckGS2FHfj xMbsxPz37rGELqBU95tqLdM4XS45LNeo9jdPdT/B6FaLUXio5H/plZ+NAPGdAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQU16s0VdW6+Zh3Q2wXIRY9X6776YAwHwYDVR0j BBgwFoAUvgu3iGnNsq0MlxpqhYowIT6uxH0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYWMxNDMzODctZjAxMy00OTIyLTgzOGUtZTE4ODY0YmUx ZTRhLzAvQkUwQkI3ODg2OUNEQjJBRDBDOTcxQTZBODU4QTMwMjEzRUFFQzQ3RC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3ZndTNpR25Oc3EwTWx4cHFoWW93SVQ2 dXhIMC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9hYzE0MzM4Ny1m MDEzLTQ5MjItODM4ZS1lMTg4NjRiZTFlNGEvMC9CRTBCQjc4ODY5Q0RCMkFEMEM5 NzFBNkE4NThBMzAyMTNFQUVDNDdELm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM5CSNHvnHPb7uB9QQe3r tKaI8Q6T3u+1UZ01XYuo303/d7qxLItM+awqYiPJgYqS81ATNEkiGzhZeWLd6dzo SFvrnoN/Y6QX8Oe/XGUap4Ev2LdrdCmyOKacXls4WckFcIjKvgxlE5UAL+q0wQZ4 xo0jgY4CFyqXtzZFpFKDJwgN/JX/lyXBKub30LAfQ57kNqK/Fw6/v+G9ZyZ9fdCQ i5zonv5464WD+iI0m09d3Bu0w/0lTyPVXCm7sG9bNpz0GUkZAeFb9eUF51GPF6c0 x3AdcjyZe2biRx+f4KH1e+CxXEv5Zn0QMJmYt89VrdpA35ZFBNFU2l3rtHzxFPNF nQ== -----END CERTIFICATE-----Generated at Fri Sep 5 19:26:48 2025 by rpki-client