$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ac143387-f013-4922-838e-e18864be1e4a/0/BE0BB78869CDB2AD0C971A6A858A30213EAEC47D.mft File: BE0BB78869CDB2AD0C971A6A858A30213EAEC47D.mft (raw, json) Hash identifier: dxDjlNfsg4XXRmal8iXyEHDNAuphXVsCxreik/O97Pc= Subject key identifier: C7:C8:BC:1C:46:F0:28:70:76:F9:E5:4C:0A:1F:EE:4D:8C:42:4C:D1 Authority key identifier: BE:0B:B7:88:69:CD:B2:AD:0C:97:1A:6A:85:8A:30:21:3E:AE:C4:7D Certificate issuer: /CN=be0bb78869cdb2ad0c971a6a858a30213eaec47d Certificate serial: 49CE4115995B3CB7C433060B910B3F2E3EB9A8C9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vgu3iGnNsq0MlxpqhYowIT6uxH0.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ac143387-f013-4922-838e-e18864be1e4a/0/BE0BB78869CDB2AD0C971A6A858A30213EAEC47D.mft Manifest number: 0213 Signing time: Fri 13 Mar 2026 15:47:49 +0000 Manifest this update: Fri 13 Mar 2026 15:42:49 +0000 Manifest next update: Sat 14 Mar 2026 16:31:49 +0000 Files and hashes: 1: 3137382e3234382e37342e302f32342d3234203d3e20323039313831.roa (hash: b86TJ/eicDu3L39UHlXUFvq/1qF9nZUOZYH3MsfWUIw=) 2: 3137382e3234382e37382e302f32342d3234203d3e20323132333834.roa (hash: 55oHxRvhLlFnFgVNA6T2hJ74AYC9yyl40HSKUWc/res=) 3: 3139352e34322e3131332e302f32342d3234203d3e203438343335.roa (hash: pchbJm+Br/uCuzzDsgfU4W3Dq3tZwJWDYbuhydm/Eyc=) 4: 3139332e3136392e37382e302f32332d3233203d3e203438343335.roa (hash: CCPO6h/MpNSX08leEvwwJIjESWw2OEutpIc59PlyY9E=) 5: 3137382e3234382e37372e302f32342d3234203d3e20323133373833.roa (hash: QA/AmBx/vt6J6eDW0Y/+kHvJueiOPr7O1NVAvBIe9GY=) 6: 3137382e3234382e37362e302f32342d3234203d3e203432383331.roa (hash: FQiM0Ff1DCSzma5DiHQMrsfmN7QznFFoSzW1a5q9Q2M=) 7: 3139352e34322e3131322e302f32342d3234203d3e203438343335.roa (hash: tbJb4NeQxaqdUwJnx0mi5eYh93xW1wx/PyQm3nNKQlk=) 8: 3137382e3234382e37332e302f32342d3234203d3e20313431393638.roa (hash: zMoHCJaZZ5vI4uszw9fV0p+6ygU9pfTnJ4jfa1DsJEg=) 9: 3139332e3136392e37382e302f32332d3234203d3e203530343334.roa (hash: Ozt3uRUP9szxnq6Y/BlUHZo63N6fYBwOlNZT3blQYnY=) 10: 3139352e34322e3131322e302f32332d3233203d3e203438343335.roa (hash: SO5iYpxppDi067L1otYSj19apV4zwNvimr95590708A=) 11: 3137382e3234382e37352e302f32342d3234203d3e20313939303538.roa (hash: 32SDZVJ37JJ5kdrs24paGjp5boRcUJ2fYJyMfyL4cw4=) 12: 3139332e3136392e37382e302f32332d3234203d3e203438343335.roa (hash: 7BonRadnccE5oClU90cDWqb2zFnrszRs5TdXh7lrUTg=) 13: 3137382e3234382e37322e302f32342d3234203d3e20313531383732.roa (hash: wHwcwoFIrN2jLP/C8OzdoSzmdobOAFysYNlbWgxelzw=) 14: BE0BB78869CDB2AD0C971A6A858A30213EAEC47D.crl (hash: 6DivR2h3jard8JaJbhTH6jWuKfZ/SAoM/SlSsp4KF9Q=) 15: 3137382e3234382e37392e302f32342d3234203d3e20313335333932.roa (hash: YE6bAehCH8ruShBFJdgU4NCX9qGkifZ5lR9x24K4y2c=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ac143387-f013-4922-838e-e18864be1e4a/0/BE0BB78869CDB2AD0C971A6A858A30213EAEC47D.crl rsync://rsync.paas.rpki.ripe.net/repository/ac143387-f013-4922-838e-e18864be1e4a/0/BE0BB78869CDB2AD0C971A6A858A30213EAEC47D.mft rsync://rpki.ripe.net/repository/DEFAULT/vgu3iGnNsq0MlxpqhYowIT6uxH0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 14 Mar 2026 16:31:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:ce:41:15:99:5b:3c:b7:c4:33:06:0b:91:0b:3f:2e:3e:b9:a8:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=be0bb78869cdb2ad0c971a6a858a30213eaec47d Validity Not Before: Mar 13 15:42:49 2026 GMT Not After : Mar 14 16:31:49 2026 GMT Subject: CN=C7C8BC1C46F0287076F9E54C0A1FEE4D8C424CD1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:06:94:59:93:5f:9c:8c:a1:79:51:19:f5:aa: 6e:b1:41:3a:35:c0:d0:be:a8:3c:05:9e:5b:12:d0: 48:40:e9:a7:3f:ad:38:1a:4d:d2:1c:26:6b:f8:7f: 9b:cf:f6:8d:43:54:97:4f:91:b5:bd:8b:82:ae:e4: f7:82:77:6f:a1:8c:4a:4f:08:07:4b:58:36:8e:23: f5:11:71:bc:1f:3e:00:01:90:d4:9e:37:9e:5a:5d: 25:de:f0:a0:79:e1:26:da:c2:c1:f0:d2:a6:0c:8c: 49:b5:ed:6f:79:a3:61:61:75:f2:3f:a6:7d:bb:1a: 48:e0:43:11:a9:33:73:09:08:98:fe:b2:4b:5b:a8: 26:a0:f0:50:0f:a0:29:e0:45:02:67:55:a9:8f:09: bc:39:a1:de:eb:77:4e:c1:8b:5e:6b:41:44:88:90: 68:f4:4d:e9:5c:71:d3:c9:55:d9:96:09:98:99:15: 39:ca:98:47:61:3a:ce:ac:fa:9a:84:75:a8:82:60: 19:67:74:79:7b:3b:1f:de:ad:0c:ed:41:9f:45:a6: c4:16:66:34:74:e1:93:01:01:82:ca:15:ae:a4:f2: 19:56:2c:51:ec:0a:ea:ac:80:3d:8e:8f:fd:7b:8f: 2f:a7:af:2c:e2:e0:f3:21:c7:37:f0:62:00:3d:85: 4b:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:C8:BC:1C:46:F0:28:70:76:F9:E5:4C:0A:1F:EE:4D:8C:42:4C:D1 X509v3 Authority Key Identifier: keyid:BE:0B:B7:88:69:CD:B2:AD:0C:97:1A:6A:85:8A:30:21:3E:AE:C4:7D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/ac143387-f013-4922-838e-e18864be1e4a/0/BE0BB78869CDB2AD0C971A6A858A30213EAEC47D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vgu3iGnNsq0MlxpqhYowIT6uxH0.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ac143387-f013-4922-838e-e18864be1e4a/0/BE0BB78869CDB2AD0C971A6A858A30213EAEC47D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:c6:e8:e7:d7:67:2c:34:58:74:60:37:a9:01:15:53:e7:2d: af:38:49:32:61:64:85:32:dd:af:b4:33:b9:31:d5:1a:a7:9b: 8b:76:f6:90:c9:bc:85:6a:93:96:dc:b9:c0:5b:f4:5b:91:c7: 2a:9a:d8:e0:87:3b:45:c5:21:bf:e0:57:61:a5:25:c2:14:19: a4:7f:d2:4a:0d:ea:45:13:00:dd:90:3c:1c:8f:ee:eb:5c:bf: ee:95:90:08:cf:38:e9:f1:1c:85:a2:76:16:e6:c8:59:06:66: 27:ea:67:5a:24:6a:77:d1:a1:e3:33:a9:5a:6d:13:b5:5b:85: 44:b7:96:79:2d:84:41:5b:98:93:56:b5:e5:28:cf:6b:8f:c7: b4:1f:d0:3e:4c:1e:dc:30:16:89:63:65:64:24:ac:8b:8f:3c: 27:64:44:eb:5b:0e:e4:3e:19:e7:0a:15:f8:c1:61:f7:b5:32: 52:56:6f:14:66:54:5f:e0:05:84:8b:25:c0:97:0e:a3:94:ce: f1:a2:14:58:43:60:fc:19:4c:a3:7e:30:65:6f:c0:60:08:55: bf:3b:06:ca:35:b4:f2:c1:ba:b1:78:4e:be:e3:01:c7:1e:41: 08:ba:5a:dd:16:67:f1:18:ae:91:b5:a1:c4:60:79:7c:84:14: 1d:a4:f6:83 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUSc5BFZlbPLfEMwYLkQs/Lj65qMkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYmUwYmI3ODg2OWNkYjJhZDBjOTcxYTZhODU4YTMwMjEz ZWFlYzQ3ZDAeFw0yNjAzMTMxNTQyNDlaFw0yNjAzMTQxNjMxNDlaMDMxMTAvBgNV BAMTKEM3QzhCQzFDNDZGMDI4NzA3NkY5RTU0QzBBMUZFRTREOEM0MjRDRDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzBpRZk1+cjKF5URn1qm6xQTo1 wNC+qDwFnlsS0EhA6ac/rTgaTdIcJmv4f5vP9o1DVJdPkbW9i4Ku5PeCd2+hjEpP CAdLWDaOI/URcbwfPgABkNSeN55aXSXe8KB54SbawsHw0qYMjEm17W95o2FhdfI/ pn27GkjgQxGpM3MJCJj+sktbqCag8FAPoCngRQJnVamPCbw5od7rd07Bi15rQUSI kGj0TelccdPJVdmWCZiZFTnKmEdhOs6s+pqEdaiCYBlndHl7Ox/erQztQZ9FpsQW ZjR04ZMBAYLKFa6k8hlWLFHsCuqsgD2Oj/17jy+nryzi4PMhxzfwYgA9hUtPAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUx8i8HEbwKHB2+eVMCh/uTYxCTNEwHwYDVR0j BBgwFoAUvgu3iGnNsq0MlxpqhYowIT6uxH0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYWMxNDMzODctZjAxMy00OTIyLTgzOGUtZTE4ODY0YmUx ZTRhLzAvQkUwQkI3ODg2OUNEQjJBRDBDOTcxQTZBODU4QTMwMjEzRUFFQzQ3RC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3ZndTNpR25Oc3EwTWx4cHFoWW93SVQ2 dXhIMC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9hYzE0MzM4Ny1m MDEzLTQ5MjItODM4ZS1lMTg4NjRiZTFlNGEvMC9CRTBCQjc4ODY5Q0RCMkFEMEM5 NzFBNkE4NThBMzAyMTNFQUVDNDdELm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmcbo59dnLDRYdGA3qQEV U+ctrzhJMmFkhTLdr7QzuTHVGqebi3b2kMm8hWqTlty5wFv0W5HHKprY4Ic7RcUh v+BXYaUlwhQZpH/SSg3qRRMA3ZA8HI/u61y/7pWQCM846fEchaJ2FubIWQZmJ+pn WiRqd9Gh4zOpWm0TtVuFRLeWeS2EQVuYk1a15SjPa4/HtB/QPkwe3DAWiWNlZCSs i488J2RE61sO5D4Z5woV+MFh97UyUlZvFGZUX+AFhIslwJcOo5TO8aIUWENg/BlM o34wZW/AYAhVvzsGyjW08sG6sXhOvuMBxx5BCLpa3RZn8RiukbWhxGB5fIQUHaT2 gw== -----END CERTIFICATE-----Generated at Sat Mar 14 02:24:11 2026 by rpki-client