$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/ac143387-f013-4922-838e-e18864be1e4a/0/BE0BB78869CDB2AD0C971A6A858A30213EAEC47D.mft File: BE0BB78869CDB2AD0C971A6A858A30213EAEC47D.mft (raw, json) Hash identifier: X1B5INbcL0KKasxxIuF/xCUk5eCz1d4xccM8mTOI8Cg= Subject key identifier: 60:C2:1C:02:06:1C:15:DD:6D:1B:7D:9F:FC:2F:D3:01:12:0E:89:F9 Authority key identifier: BE:0B:B7:88:69:CD:B2:AD:0C:97:1A:6A:85:8A:30:21:3E:AE:C4:7D Certificate issuer: /CN=be0bb78869cdb2ad0c971a6a858a30213eaec47d Certificate serial: 52E340FDB46164151A1CA8692241BDAEAAF812E2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vgu3iGnNsq0MlxpqhYowIT6uxH0.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ac143387-f013-4922-838e-e18864be1e4a/0/BE0BB78869CDB2AD0C971A6A858A30213EAEC47D.mft Manifest number: 0312 Signing time: Thu 17 Sep 2026 17:50:35 +0000 Manifest this update: Thu 17 Sep 2026 17:45:35 +0000 Manifest next update: Fri 18 Sep 2026 18:23:35 +0000 Files and hashes: 1: BE0BB78869CDB2AD0C971A6A858A30213EAEC47D.crl (hash: TBxFLLTRDBr9H69glMg5ZDCHw5KenC7+Tu6vMVMf7DU=) 2: 3137382e3234382e37342e302f32342d3234203d3e203630353432.roa (hash: Xr5u/5dDUrYBdAYp0AhqinBp+MATOEXztLhHhfZwhws=) 3: 3137382e3234382e37392e302f32342d3234203d3e20313335333932.roa (hash: YE6bAehCH8ruShBFJdgU4NCX9qGkifZ5lR9x24K4y2c=) 4: 3137382e3234382e37332e302f32342d3234203d3e20313431393638.roa (hash: 7xtsmIrFnzH8qIFMhr9PIJTBifAuGHXQXdM1XzYoP7s=) 5: 3139352e34322e3131322e302f32332d3233203d3e203438343335.roa (hash: SO5iYpxppDi067L1otYSj19apV4zwNvimr95590708A=) 6: 3137382e3234382e37382e302f32342d3234203d3e20323132333834.roa (hash: sj3Mzc5uAM4fOfd+NlVLzXe7KVKZIN7ymsHfPBwN4+I=) 7: 3139332e3136392e37382e302f32332d3233203d3e203438343335.roa (hash: CCPO6h/MpNSX08leEvwwJIjESWw2OEutpIc59PlyY9E=) 8: 3139352e34322e3131322e302f32342d3234203d3e203438343335.roa (hash: tbJb4NeQxaqdUwJnx0mi5eYh93xW1wx/PyQm3nNKQlk=) 9: 3139352e34322e3131332e302f32342d3234203d3e203438343335.roa (hash: pchbJm+Br/uCuzzDsgfU4W3Dq3tZwJWDYbuhydm/Eyc=) 10: 3137382e3234382e37352e302f32342d3234203d3e20313939303538.roa (hash: 32SDZVJ37JJ5kdrs24paGjp5boRcUJ2fYJyMfyL4cw4=) 11: 3139332e3136392e37382e302f32332d3234203d3e203530343334.roa (hash: Ozt3uRUP9szxnq6Y/BlUHZo63N6fYBwOlNZT3blQYnY=) 12: 3139332e3136392e37382e302f32332d3234203d3e203438343335.roa (hash: 7BonRadnccE5oClU90cDWqb2zFnrszRs5TdXh7lrUTg=) 13: 3137382e3234382e37362e302f32342d3234203d3e203432383331.roa (hash: FQiM0Ff1DCSzma5DiHQMrsfmN7QznFFoSzW1a5q9Q2M=) 14: 3137382e3234382e37372e302f32342d3234203d3e20323133373833.roa (hash: QA/AmBx/vt6J6eDW0Y/+kHvJueiOPr7O1NVAvBIe9GY=) 15: 3137382e3234382e37322e302f32342d3234203d3e20313534343032.roa (hash: CmSSgp2rOmRDakFss7YxyL+V/oYFT12bvLwpMMXS8Tk=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ac143387-f013-4922-838e-e18864be1e4a/0/BE0BB78869CDB2AD0C971A6A858A30213EAEC47D.crl rsync://rsync.paas.rpki.ripe.net/repository/ac143387-f013-4922-838e-e18864be1e4a/0/BE0BB78869CDB2AD0C971A6A858A30213EAEC47D.mft rsync://rpki.ripe.net/repository/DEFAULT/vgu3iGnNsq0MlxpqhYowIT6uxH0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 18 Sep 2026 14:15:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:e3:40:fd:b4:61:64:15:1a:1c:a8:69:22:41:bd:ae:aa:f8:12:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=be0bb78869cdb2ad0c971a6a858a30213eaec47d Validity Not Before: Sep 17 17:45:35 2026 GMT Not After : Sep 18 18:23:35 2026 GMT Subject: CN=60C21C02061C15DD6D1B7D9FFC2FD301120E89F9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:74:45:af:50:4f:4f:8c:8b:66:6e:08:c3:fc: ff:66:9c:7d:8d:1c:ac:7c:1d:69:8c:a3:16:2a:f7: 29:97:53:b9:68:97:9e:b6:d5:ff:f8:a6:8d:f9:71: 65:76:74:59:98:dc:a6:66:13:81:05:b3:0f:17:43: 1c:9a:dc:9d:af:56:a4:c4:d2:aa:55:b2:60:a6:cc: 09:2e:53:f3:ed:65:6e:94:fd:b6:71:29:2e:10:0a: 57:89:50:bb:87:51:69:44:9f:73:cd:60:f6:b3:0c: 92:37:0c:0f:5c:a0:5b:8c:b3:9f:0e:62:29:a4:a1: 27:55:36:bd:24:ed:19:21:48:32:f9:3e:9b:ca:a4: 04:22:05:ca:fb:33:09:ba:32:8e:02:80:1b:a5:ba: 00:1d:44:6b:aa:e4:ea:53:dc:1e:93:51:a1:4c:9a: 49:c3:ed:d3:4f:5b:68:4b:23:81:77:16:7e:da:4e: 7f:fd:8f:f5:ec:c9:6b:6b:9f:70:f5:8d:ad:39:e5: 7a:3a:40:58:2c:0a:d8:7e:f4:ee:24:ce:ee:a0:c2: 1d:be:47:b2:45:83:7e:ab:46:ef:4d:76:cf:1d:dc: 4b:1d:9e:c1:cd:23:68:ad:35:e4:10:29:8a:ca:e4: d3:22:aa:a7:63:50:8e:1e:96:74:72:52:96:76:52: 42:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:C2:1C:02:06:1C:15:DD:6D:1B:7D:9F:FC:2F:D3:01:12:0E:89:F9 X509v3 Authority Key Identifier: keyid:BE:0B:B7:88:69:CD:B2:AD:0C:97:1A:6A:85:8A:30:21:3E:AE:C4:7D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/ac143387-f013-4922-838e-e18864be1e4a/0/BE0BB78869CDB2AD0C971A6A858A30213EAEC47D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vgu3iGnNsq0MlxpqhYowIT6uxH0.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ac143387-f013-4922-838e-e18864be1e4a/0/BE0BB78869CDB2AD0C971A6A858A30213EAEC47D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:27:83:9c:87:e0:48:db:f2:36:0f:be:cf:3b:5f:48:90:d1: 9f:4c:2e:47:2b:1b:5f:5b:5c:99:ca:f1:8e:b7:dc:df:53:b8: f7:ea:db:f9:b0:22:2d:d3:5a:cc:a3:7a:78:78:67:b0:1d:13: 8b:99:ca:34:39:c7:4e:39:71:7c:44:40:3f:84:b1:37:23:6c: d0:32:7a:7d:3d:9e:9d:8f:c6:cf:94:d9:05:6c:0b:52:d2:aa: d8:dc:08:a5:b6:0c:f1:83:8e:c3:fc:1d:62:d8:70:a1:b8:8e: 83:4a:bb:4d:04:13:bb:06:be:33:c0:b0:87:37:3c:2a:7a:80: 77:3b:de:98:44:b3:16:2a:25:05:13:e6:ec:6c:e4:2c:03:92: 02:61:3f:87:ec:21:ef:94:e6:0d:85:7d:4a:22:14:a2:6d:32: b4:bb:5a:87:43:5c:c5:7c:57:80:8f:f4:f3:03:4c:8e:95:ee: 1e:33:2b:2e:3e:a3:0f:90:06:7a:c8:f9:5f:1e:d6:59:cd:48: ff:75:d9:5c:92:27:5e:f4:6b:19:cf:00:76:89:55:84:f9:fa: 08:f9:a1:4f:51:d0:fe:e5:24:30:1a:c1:e9:36:0b:95:37:81: c2:71:4b:18:cb:ca:aa:f8:c0:22:5a:28:c4:44:88:9b:5a:05: 9a:fe:f6:64 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUUuNA/bRhZBUaHKhpIkG9rqr4EuIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYmUwYmI3ODg2OWNkYjJhZDBjOTcxYTZhODU4YTMwMjEz ZWFlYzQ3ZDAeFw0yNjA5MTcxNzQ1MzVaFw0yNjA5MTgxODIzMzVaMDMxMTAvBgNV BAMTKDYwQzIxQzAyMDYxQzE1REQ2RDFCN0Q5RkZDMkZEMzAxMTIwRTg5RjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgdEWvUE9PjItmbgjD/P9mnH2N HKx8HWmMoxYq9ymXU7lol5621f/4po35cWV2dFmY3KZmE4EFsw8XQxya3J2vVqTE 0qpVsmCmzAkuU/PtZW6U/bZxKS4QCleJULuHUWlEn3PNYPazDJI3DA9coFuMs58O YimkoSdVNr0k7RkhSDL5PpvKpAQiBcr7Mwm6Mo4CgBulugAdRGuq5OpT3B6TUaFM mknD7dNPW2hLI4F3Fn7aTn/9j/XsyWtrn3D1ja055Xo6QFgsCth+9O4kzu6gwh2+ R7JFg36rRu9Nds8d3EsdnsHNI2itNeQQKYrK5NMiqqdjUI4elnRyUpZ2UkKxAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUYMIcAgYcFd1tG32f/C/TARIOifkwHwYDVR0j BBgwFoAUvgu3iGnNsq0MlxpqhYowIT6uxH0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYWMxNDMzODctZjAxMy00OTIyLTgzOGUtZTE4ODY0YmUx ZTRhLzAvQkUwQkI3ODg2OUNEQjJBRDBDOTcxQTZBODU4QTMwMjEzRUFFQzQ3RC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3ZndTNpR25Oc3EwTWx4cHFoWW93SVQ2 dXhIMC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9hYzE0MzM4Ny1m MDEzLTQ5MjItODM4ZS1lMTg4NjRiZTFlNGEvMC9CRTBCQjc4ODY5Q0RCMkFEMEM5 NzFBNkE4NThBMzAyMTNFQUVDNDdELm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfyeDnIfgSNvyNg++zztf SJDRn0wuRysbX1tcmcrxjrfc31O49+rb+bAiLdNazKN6eHhnsB0Ti5nKNDnHTjlx fERAP4SxNyNs0DJ6fT2enY/Gz5TZBWwLUtKq2NwIpbYM8YOOw/wdYthwobiOg0q7 TQQTuwa+M8Cwhzc8KnqAdzvemESzFiolBRPm7GzkLAOSAmE/h+wh75TmDYV9SiIU om0ytLtah0NcxXxXgI/08wNMjpXuHjMrLj6jD5AGesj5Xx7WWc1I/3XZXJInXvRr Gc8AdolVhPn6CPmhT1HQ/uUkMBrB6TYLlTeBwnFLGMvKqvjAIlooxESIm1oFmv72 ZA== -----END CERTIFICATE-----Generated at Thu Sep 17 22:44:28 2026 by rpki-client