$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/03791bfb-c1de-4bbf-8390-cc28b1d415ab/0/BBEBABAA438AC450DCBB53966538E554E6B5F7BE.mft File: BBEBABAA438AC450DCBB53966538E554E6B5F7BE.mft (raw, json) Hash identifier: Mvs1D0oNIsP/lxtkSBXWFmfJTbXDORceN03DdQLN28I= Subject key identifier: 84:F3:F1:DA:F6:AF:05:DB:09:13:7B:CF:3B:66:AE:A1:8A:46:8D:23 Authority key identifier: BB:EB:AB:AA:43:8A:C4:50:DC:BB:53:96:65:38:E5:54:E6:B5:F7:BE Certificate issuer: /CN=BBEBABAA438AC450DCBB53966538E554E6B5F7BE Certificate serial: 35D3E2BD3358A950A7314984F1692022EA31AEC2 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/BBEBABAA438AC450DCBB53966538E554E6B5F7BE.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/03791bfb-c1de-4bbf-8390-cc28b1d415ab/0/BBEBABAA438AC450DCBB53966538E554E6B5F7BE.mft Manifest number: 23 Signing time: Mon 28 Sep 2026 12:08:26 +0000 Manifest this update: Mon 28 Sep 2026 12:03:26 +0000 Manifest next update: Tue 29 Sep 2026 14:47:26 +0000 Files and hashes: 1: 326131343a373538313a333936363a3a2f34382d3634203d3e20313939373633.roa (hash: nc3oYXzCmvtpwHlk9i9l1I6GviPKWBNc9HgGppn1YZw=) 2: 326131343a373538313a333936323a3a2f34382d3634203d3e20313939373633.roa (hash: sOfzsAt2tIul/+/Ef8oFoB5LJ7RqnvlLcWysQWAevOw=) 3: BBEBABAA438AC450DCBB53966538E554E6B5F7BE.crl (hash: GZaSv8Q3NWiLcr1fMvaQw0BMKf5S4OhYED336LT7vuo=) 4: 326131343a373538313a333934663a3a2f34382d3634203d3e20313939373633.roa (hash: VkQPo/g/7kNIg3a2luNKrt3mJVZCiGlXL2gyi16yj08=) 5: 326131343a373538313a333966663a3a2f34382d3634203d3e20313939373633.roa (hash: e7C6bpyqbbQ1ceJQT1KsYKlx6V//pBEex11FT3+7HyE=) 6: 326131343a373538313a333934313a3a2f34382d3634203d3e20313939373633.roa (hash: EhqBuQ2rW6jmStDfNfWXgqhPEJfMYVcykuC6x930/W4=) 7: 326131343a373538313a333937373a3a2f34382d3634203d3e20313939373633.roa (hash: G6C19c6GOlod0FOB2bCztr+YLdJH5Z5El/nZEiwJChA=) 8: 326131343a373538313a333936313a3a2f34382d3634203d3e20313939373633.roa (hash: wQ2v3L+f7wKDwqYoOzbn3pE9cmHsuQKZM23dZR1K2fs=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/03791bfb-c1de-4bbf-8390-cc28b1d415ab/0/BBEBABAA438AC450DCBB53966538E554E6B5F7BE.crl rsync://rsync.paas.rpki.ripe.net/repository/03791bfb-c1de-4bbf-8390-cc28b1d415ab/0/BBEBABAA438AC450DCBB53966538E554E6B5F7BE.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/BBEBABAA438AC450DCBB53966538E554E6B5F7BE.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 29 Sep 2026 14:02:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:d3:e2:bd:33:58:a9:50:a7:31:49:84:f1:69:20:22:ea:31:ae:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BBEBABAA438AC450DCBB53966538E554E6B5F7BE Validity Not Before: Sep 28 12:03:26 2026 GMT Not After : Sep 29 14:47:26 2026 GMT Subject: CN=84F3F1DAF6AF05DB09137BCF3B66AEA18A468D23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:36:2a:5b:4b:8f:5c:9e:19:0d:54:e1:ac:29: e8:11:49:d3:7c:df:de:c6:c4:81:ad:4c:d9:07:1c: bc:43:dc:75:52:ce:15:83:c3:9f:8f:2b:e2:08:a1: 9c:99:ea:51:b6:b6:30:fe:be:75:6b:c7:f8:01:cd: f4:6a:20:42:4a:30:31:e8:43:46:0a:f6:4c:dc:87: 25:60:ce:b4:55:a0:32:9d:ca:5d:df:cd:39:56:90: 10:b3:66:d5:9a:6a:23:0b:4c:62:b3:62:21:bf:94: 11:ab:c5:12:f3:93:27:cc:c2:68:3b:62:02:cd:2a: 00:9e:82:9e:9a:91:38:38:c8:18:5b:43:ac:b1:3a: e3:45:95:94:7a:fa:32:f9:2d:a7:92:3b:0f:af:97: 99:35:1e:57:42:8a:84:61:9e:7f:3d:d3:f5:b6:3d: bf:9c:8b:ca:a7:ff:72:81:21:de:0a:75:53:76:9c: 8c:ae:d1:c4:95:d1:8f:e2:bb:0e:2b:67:be:9f:02: 04:a7:10:39:ae:26:56:c5:89:e6:b7:2e:71:c5:48: a3:5b:36:8e:90:fa:11:2b:64:31:e2:f0:5a:13:6e: 04:ca:54:02:6a:7a:cb:7a:e8:75:d6:7d:91:13:d9: 44:42:17:44:69:95:37:21:d3:d7:de:0d:70:28:63: 6e:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:F3:F1:DA:F6:AF:05:DB:09:13:7B:CF:3B:66:AE:A1:8A:46:8D:23 X509v3 Authority Key Identifier: keyid:BB:EB:AB:AA:43:8A:C4:50:DC:BB:53:96:65:38:E5:54:E6:B5:F7:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/03791bfb-c1de-4bbf-8390-cc28b1d415ab/0/BBEBABAA438AC450DCBB53966538E554E6B5F7BE.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/BBEBABAA438AC450DCBB53966538E554E6B5F7BE.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/03791bfb-c1de-4bbf-8390-cc28b1d415ab/0/BBEBABAA438AC450DCBB53966538E554E6B5F7BE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 92:a9:b2:05:a7:f8:9c:3a:34:d0:25:fe:75:e8:0f:33:aa:53: c9:e4:ca:11:35:fe:7c:af:69:3a:ee:47:38:31:13:79:b3:1e: 9f:ae:3b:3e:df:48:c5:ea:c8:94:68:c9:34:d8:1b:a4:4d:81: b1:8a:90:ee:bb:23:2d:29:d3:85:ca:80:87:48:43:78:e7:bb: 1d:42:92:bb:8a:e5:97:38:23:da:46:1d:77:ba:86:12:3a:8e: 89:6c:73:a1:c7:30:d6:29:70:c7:7e:cb:39:56:7b:2d:d5:8c: 03:77:a4:6c:cd:d6:73:e5:15:0d:ff:99:7f:ae:81:64:e1:c2: 37:3d:89:20:ef:e6:c3:db:d1:ce:64:09:cb:1a:26:46:b0:53: 6e:fd:2b:56:c0:2a:46:11:4f:e6:41:2c:59:c9:db:ad:3f:48: ec:bf:92:65:59:98:f1:1e:ea:6d:64:97:ad:cc:dd:ba:3e:1c: fd:91:db:72:c0:65:ac:6c:90:f8:02:68:be:57:e2:62:70:27: ff:ae:4f:0b:30:2a:53:64:70:90:0d:54:c0:8b:80:b2:e5:7a: b8:b1:63:c2:5b:17:14:62:0d:05:c5:48:5c:71:db:e6:c3:6f: cd:aa:e4:ab:fa:d4:9d:d0:99:64:6c:66:35:b1:b4:d6:19:c3: 45:53:d1:b6 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUNdPivTNYqVCnMUmE8WkgIuoxrsIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkJFQkFCQUE0MzhBQzQ1MERDQkI1Mzk2NjUzOEU1NTRF NkI1RjdCRTAeFw0yNjA5MjgxMjAzMjZaFw0yNjA5MjkxNDQ3MjZaMDMxMTAvBgNV BAMTKDg0RjNGMURBRjZBRjA1REIwOTEzN0JDRjNCNjZBRUExOEE0NjhEMjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvNipbS49cnhkNVOGsKegRSdN8 397GxIGtTNkHHLxD3HVSzhWDw5+PK+IIoZyZ6lG2tjD+vnVrx/gBzfRqIEJKMDHo Q0YK9kzchyVgzrRVoDKdyl3fzTlWkBCzZtWaaiMLTGKzYiG/lBGrxRLzkyfMwmg7 YgLNKgCegp6akTg4yBhbQ6yxOuNFlZR6+jL5LaeSOw+vl5k1HldCioRhnn890/W2 Pb+ci8qn/3KBId4KdVN2nIyu0cSV0Y/iuw4rZ76fAgSnEDmuJlbFiea3LnHFSKNb No6Q+hErZDHi8FoTbgTKVAJqest66HXWfZET2URCF0RplTch09feDXAoY27zAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUhPPx2vavBdsJE3vPO2auoYpGjSMwHwYDVR0j BBgwFoAUu+urqkOKxFDcu1OWZTjlVOa1974wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMDM3OTFiZmItYzFkZS00YmJmLTgzOTAtY2MyOGIxZDQx NWFiLzAvQkJFQkFCQUE0MzhBQzQ1MERDQkI1Mzk2NjUzOEU1NTRFNkI1RjdCRS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC9CQkVCQUJBQTQzOEFDNDUwRENCQjUzOTY2 NTM4RTU1NEU2QjVGN0JFLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzAzNzkxYmZiLWMxZGUtNGJiZi04MzkwLWNjMjhiMWQ0MTVhYi8wL0JCRUJBQkFB NDM4QUM0NTBEQ0JCNTM5NjY1MzhFNTU0RTZCNUY3QkUubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCSqbIF p/icOjTQJf516A8zqlPJ5MoRNf58r2k67kc4MRN5sx6frjs+30jF6siUaMk02Buk TYGxipDuuyMtKdOFyoCHSEN457sdQpK7iuWXOCPaRh13uoYSOo6JbHOhxzDWKXDH fss5Vnst1YwDd6RszdZz5RUN/5l/roFk4cI3PYkg7+bD29HOZAnLGiZGsFNu/StW wCpGEU/mQSxZydutP0jsv5JlWZjxHuptZJetzN26Phz9kdtywGWsbJD4Ami+V+Ji cCf/rk8LMCpTZHCQDVTAi4Cy5Xq4sWPCWxcUYg0FxUhccdvmw2/NquSr+tSd0Jlk bGY1sbTWGcNFU9G2 -----END CERTIFICATE-----Generated at Mon Sep 28 21:07:57 2026 by rpki-client