$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09718f08-bb39-4a09-a4c0-1f40248a6d15/2/BB0B02806AE3C34F453ADEDDE36ADF432FCDF9C4.mft File: BB0B02806AE3C34F453ADEDDE36ADF432FCDF9C4.mft (raw, json) Hash identifier: lAloxDCVhNMLwkKnllC77XUoYxdHYw++DOQXr7gWD0E= Subject key identifier: B6:9A:FD:FC:9E:1C:14:35:3A:C5:AC:82:D0:2F:2E:FD:FD:1F:E7:68 Authority key identifier: BB:0B:02:80:6A:E3:C3:4F:45:3A:DE:DD:E3:6A:DF:43:2F:CD:F9:C4 Certificate issuer: /CN=BB0B02806AE3C34F453ADEDDE36ADF432FCDF9C4 Certificate serial: 328AD0BC11D1F387EAA963A44CB34FB3468A5232 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/BB0B02806AE3C34F453ADEDDE36ADF432FCDF9C4.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09718f08-bb39-4a09-a4c0-1f40248a6d15/2/BB0B02806AE3C34F453ADEDDE36ADF432FCDF9C4.mft Manifest number: 78 Signing time: Sun 01 Mar 2026 18:52:44 +0000 Manifest this update: Sun 01 Mar 2026 18:47:44 +0000 Manifest next update: Mon 02 Mar 2026 21:38:44 +0000 Files and hashes: 1: BB0B02806AE3C34F453ADEDDE36ADF432FCDF9C4.crl (hash: +gOcPGU+ijjHivSKQ5ZSkyRKZv2btqV+BkG5Sc2nZ9A=) 2: 326131343a373538303a666634323a3a2f34382d3438203d3e20323134333434.roa (hash: O/PJi/N0ASXeoDd9xkm5e+vUVYHvnrMhoRT9Q5UqBNM=) 3: 326131343a373538303a666634313a3a2f34382d3438203d3e20323134333434.roa (hash: FSeGkTavy6E/PYG9xOOh6cS7WX/ehiQ2P+nWL6HUfzA=) 4: 326131343a373538303a666634343a3a2f34382d3438203d3e20323134333434.roa (hash: 5NZsbS3/ECNwsIkfwekBTuMsstws0S9jzGJtHhbmy3k=) 5: 326131343a373538303a666634333a3a2f34382d3438203d3e20323134333434.roa (hash: LrJY5RvJFU1hFw5kwe9OHrsNrGlMAHPKFkyFsYYWBwM=) 6: 326131343a373538303a666634303a3a2f34382d3438203d3e20323134333434.roa (hash: NMvj9zoeOL/7ubYXVejRPUJJs+qt+8DS24zEbTeKmfE=) 7: 326131343a373538303a666634353a3a2f34382d3438203d3e20323134333434.roa (hash: hdVzeFM1qIVbiHCOPfcZVjzE07zDvwiz6q8IHeNVQA0=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09718f08-bb39-4a09-a4c0-1f40248a6d15/2/BB0B02806AE3C34F453ADEDDE36ADF432FCDF9C4.crl rsync://rsync.paas.rpki.ripe.net/repository/09718f08-bb39-4a09-a4c0-1f40248a6d15/2/BB0B02806AE3C34F453ADEDDE36ADF432FCDF9C4.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/BB0B02806AE3C34F453ADEDDE36ADF432FCDF9C4.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Mar 2026 18:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:8a:d0:bc:11:d1:f3:87:ea:a9:63:a4:4c:b3:4f:b3:46:8a:52:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BB0B02806AE3C34F453ADEDDE36ADF432FCDF9C4 Validity Not Before: Mar 1 18:47:44 2026 GMT Not After : Mar 2 21:38:44 2026 GMT Subject: CN=B69AFDFC9E1C14353AC5AC82D02F2EFDFD1FE768 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:e2:75:d7:56:4b:1b:76:43:05:47:70:7a:8e: d7:da:42:a0:68:e3:ef:9f:32:3e:46:93:94:9e:e8: ba:d4:d6:7c:f1:fb:c7:b5:08:e1:51:d9:8e:b1:b0: 2e:dc:34:13:b1:11:0f:63:98:5f:c8:18:69:4c:03: 7c:3e:58:da:7a:1a:4e:73:2d:1b:4b:da:20:c9:27: ad:f0:87:45:11:d3:9e:62:c4:ff:91:e8:bb:d9:2f: 75:2d:54:66:a7:f1:95:ee:22:c3:b9:a8:69:4f:2b: e5:d9:5f:e7:f0:18:2e:5d:79:2b:a2:2c:cb:ba:1d: a4:0a:0b:72:44:b0:5f:fd:10:09:1c:ab:12:41:ac: 2b:64:02:c9:a2:a6:5d:9e:e4:ff:e2:3d:9a:f7:84: ca:14:be:07:3c:49:c4:bf:73:4e:4c:76:57:d2:4d: c5:2e:e2:b8:2b:9d:dc:98:a0:de:93:7f:7e:3e:78: 5f:bc:a3:42:93:77:c9:c4:43:a0:4a:63:7a:93:c7: 1b:80:32:c9:0e:3e:bc:98:de:d6:95:5e:e1:99:10: 78:fa:f5:ff:c8:2f:83:a8:ef:44:b1:1c:42:4d:fd: b2:a0:41:14:63:03:43:99:d5:12:00:17:a3:48:4f: 97:32:a1:0a:aa:92:c5:77:9d:1c:84:48:d2:91:5d: 7d:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:9A:FD:FC:9E:1C:14:35:3A:C5:AC:82:D0:2F:2E:FD:FD:1F:E7:68 X509v3 Authority Key Identifier: keyid:BB:0B:02:80:6A:E3:C3:4F:45:3A:DE:DD:E3:6A:DF:43:2F:CD:F9:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/09718f08-bb39-4a09-a4c0-1f40248a6d15/2/BB0B02806AE3C34F453ADEDDE36ADF432FCDF9C4.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/BB0B02806AE3C34F453ADEDDE36ADF432FCDF9C4.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09718f08-bb39-4a09-a4c0-1f40248a6d15/2/BB0B02806AE3C34F453ADEDDE36ADF432FCDF9C4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c3:7c:b8:55:18:8c:4d:8c:07:b0:0d:75:8e:14:ca:9f:f9:a5: 0b:49:58:2b:c7:d0:cf:c0:18:e6:8c:8c:90:59:01:ea:e1:7f: b5:9e:4f:d1:82:2c:be:82:d7:25:c7:23:af:70:2c:b7:f4:f1: 7c:0a:75:b9:74:99:3e:d9:9f:05:6a:57:e0:4b:a4:35:49:eb: 0c:69:ea:b3:86:d6:36:ec:f1:cd:bc:6d:ee:98:1f:5e:db:91: 22:ab:37:90:3f:30:e3:39:94:f1:c3:84:7a:7d:62:6a:00:a4: af:82:88:59:36:33:cf:cd:ce:34:12:ed:a4:29:17:23:cb:f2: f7:bf:3f:28:68:aa:72:81:d9:50:7d:3f:31:71:f9:23:6f:14: 92:b7:5c:e6:4e:e1:85:37:02:37:46:3b:14:70:54:19:0c:b4: f5:b4:9a:7f:95:08:9a:86:6f:42:e3:5e:eb:9d:ad:59:bf:7b: a5:76:67:43:64:ba:b0:c9:c2:2a:8a:3e:e8:11:82:16:18:65: a2:b7:81:65:25:31:23:5e:05:2f:86:56:0f:8d:c3:ba:81:0f: d6:42:51:fa:e3:a4:e3:d8:6b:d9:c7:4b:34:3c:42:5d:f7:4d: a1:e9:2f:76:2a:1a:62:91:21:b6:cf:76:04:a8:69:62:8e:81: a4:10:c0:98 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUMorQvBHR84fqqWOkTLNPs0aKUjIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkIwQjAyODA2QUUzQzM0RjQ1M0FERURERTM2QURGNDMy RkNERjlDNDAeFw0yNjAzMDExODQ3NDRaFw0yNjAzMDIyMTM4NDRaMDMxMTAvBgNV BAMTKEI2OUFGREZDOUUxQzE0MzUzQUM1QUM4MkQwMkYyRUZERkQxRkU3NjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCw4nXXVksbdkMFR3B6jtfaQqBo 4++fMj5Gk5Se6LrU1nzx+8e1COFR2Y6xsC7cNBOxEQ9jmF/IGGlMA3w+WNp6Gk5z LRtL2iDJJ63wh0UR055ixP+R6LvZL3UtVGan8ZXuIsO5qGlPK+XZX+fwGC5deSui LMu6HaQKC3JEsF/9EAkcqxJBrCtkAsmipl2e5P/iPZr3hMoUvgc8ScS/c05MdlfS TcUu4rgrndyYoN6Tf34+eF+8o0KTd8nEQ6BKY3qTxxuAMskOPryY3taVXuGZEHj6 9f/IL4Oo70SxHEJN/bKgQRRjA0OZ1RIAF6NIT5cyoQqqksV3nRyESNKRXX3ZAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUtpr9/J4cFDU6xayC0C8u/f0f52gwHwYDVR0j BBgwFoAUuwsCgGrjw09FOt7d42rfQy/N+cQwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMDk3MThmMDgtYmIzOS00YTA5LWE0YzAtMWY0MDI0OGE2 ZDE1LzIvQkIwQjAyODA2QUUzQzM0RjQ1M0FERURERTM2QURGNDMyRkNERjlDNC5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC9CQjBCMDI4MDZBRTNDMzRGNDUzQURFRERF MzZBREY0MzJGQ0RGOUM0LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzA5NzE4ZjA4LWJiMzktNGEwOS1hNGMwLTFmNDAyNDhhNmQxNS8yL0JCMEIwMjgw NkFFM0MzNEY0NTNBREVEREUzNkFERjQzMkZDREY5QzQubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQDDfLhV GIxNjAewDXWOFMqf+aULSVgrx9DPwBjmjIyQWQHq4X+1nk/Rgiy+gtclxyOvcCy3 9PF8CnW5dJk+2Z8FalfgS6Q1SesMaeqzhtY27PHNvG3umB9e25EiqzeQPzDjOZTx w4R6fWJqAKSvgohZNjPPzc40Eu2kKRcjy/L3vz8oaKpygdlQfT8xcfkjbxSSt1zm TuGFNwI3RjsUcFQZDLT1tJp/lQiahm9C417rna1Zv3uldmdDZLqwycIqij7oEYIW GGWit4FlJTEjXgUvhlYPjcO6gQ/WQlH646Tj2GvZx0s0PEJd902h6S92KhpikSG2 z3YEqGlijoGkEMCY -----END CERTIFICATE-----Generated at Mon Mar 2 03:56:16 2026 by rpki-client