$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09718f08-bb39-4a09-a4c0-1f40248a6d15/2/BB0B02806AE3C34F453ADEDDE36ADF432FCDF9C4.mft File: BB0B02806AE3C34F453ADEDDE36ADF432FCDF9C4.mft (raw, json) Hash identifier: 4DubjkolHnYRGIURUZho2xexn3WymITA+2zTejCNztw= Subject key identifier: 08:7A:5F:0F:37:7C:C8:0A:40:69:DD:71:C6:9E:9F:55:42:4B:74:4F Authority key identifier: BB:0B:02:80:6A:E3:C3:4F:45:3A:DE:DD:E3:6A:DF:43:2F:CD:F9:C4 Certificate issuer: /CN=BB0B02806AE3C34F453ADEDDE36ADF432FCDF9C4 Certificate serial: 4C77AA75BC3E167B0DE4B865E8CB8449517A92DC Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/BB0B02806AE3C34F453ADEDDE36ADF432FCDF9C4.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09718f08-bb39-4a09-a4c0-1f40248a6d15/2/BB0B02806AE3C34F453ADEDDE36ADF432FCDF9C4.mft Manifest number: BC Signing time: Thu 16 Apr 2026 22:30:57 +0000 Manifest this update: Thu 16 Apr 2026 22:25:57 +0000 Manifest next update: Fri 17 Apr 2026 23:13:57 +0000 Files and hashes: 1: BB0B02806AE3C34F453ADEDDE36ADF432FCDF9C4.crl (hash: /5ptAZOYqwb9qwCxRkvP6k9gsJtEH/MKyFwUDvmlZ5A=) 2: 326131343a373538303a666634303a3a2f34382d3438203d3e20323134333434.roa (hash: NMvj9zoeOL/7ubYXVejRPUJJs+qt+8DS24zEbTeKmfE=) 3: 326131343a373538303a666634353a3a2f34382d3438203d3e20323134333434.roa (hash: hdVzeFM1qIVbiHCOPfcZVjzE07zDvwiz6q8IHeNVQA0=) 4: 326131343a373538303a666634333a3a2f34382d3438203d3e20323134333434.roa (hash: LrJY5RvJFU1hFw5kwe9OHrsNrGlMAHPKFkyFsYYWBwM=) 5: 326131343a373538303a666634313a3a2f34382d3438203d3e20323134333434.roa (hash: FSeGkTavy6E/PYG9xOOh6cS7WX/ehiQ2P+nWL6HUfzA=) 6: 326131343a373538303a666634343a3a2f34382d3438203d3e20323134333434.roa (hash: 5NZsbS3/ECNwsIkfwekBTuMsstws0S9jzGJtHhbmy3k=) 7: 326131343a373538303a666634323a3a2f34382d3438203d3e20323134333434.roa (hash: O/PJi/N0ASXeoDd9xkm5e+vUVYHvnrMhoRT9Q5UqBNM=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09718f08-bb39-4a09-a4c0-1f40248a6d15/2/BB0B02806AE3C34F453ADEDDE36ADF432FCDF9C4.crl rsync://rsync.paas.rpki.ripe.net/repository/09718f08-bb39-4a09-a4c0-1f40248a6d15/2/BB0B02806AE3C34F453ADEDDE36ADF432FCDF9C4.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/BB0B02806AE3C34F453ADEDDE36ADF432FCDF9C4.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 17 Apr 2026 23:13:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:77:aa:75:bc:3e:16:7b:0d:e4:b8:65:e8:cb:84:49:51:7a:92:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BB0B02806AE3C34F453ADEDDE36ADF432FCDF9C4 Validity Not Before: Apr 16 22:25:57 2026 GMT Not After : Apr 17 23:13:57 2026 GMT Subject: CN=087A5F0F377CC80A4069DD71C69E9F55424B744F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:36:a8:ac:84:0e:61:35:3e:1c:b6:62:5a:6b: 4e:53:72:f0:de:70:82:92:58:8c:f9:81:04:36:f5: 06:15:10:c6:db:2e:27:fc:d4:f7:e8:2f:ea:4f:56: ca:1e:47:71:3a:5d:9e:a6:76:40:a7:67:20:b1:f4: e3:b0:d2:e2:a3:49:fd:40:0b:7a:05:9e:4d:ef:9e: 10:ac:10:11:d5:9d:e4:bc:ea:17:96:9d:a3:82:22: 88:3c:dc:2d:67:0a:11:10:bc:10:ad:a7:4a:3a:b2: 95:20:5d:5c:9c:54:5e:37:08:c3:ca:fe:18:29:44: 7f:c5:67:86:83:2e:a0:7f:34:2c:37:5e:c1:d9:ff: 18:95:bc:59:d2:fe:ce:5c:f4:ac:a0:30:a4:63:b5: ff:ba:0e:a1:7d:4c:fd:49:cd:77:f7:95:74:9a:49: 69:a6:66:9f:96:54:f8:a0:da:4b:92:88:ae:fc:63: ca:29:0a:27:7b:b4:56:bd:1a:be:86:25:13:a9:c8: ce:99:1d:b1:83:f9:e2:fb:3c:a9:00:2d:db:3d:4d: 31:59:cb:d4:49:ee:0f:b1:44:b7:b5:f1:42:db:df: 3c:77:7c:7f:8c:2f:00:76:4d:c7:2d:2f:05:07:e9: 6b:55:64:1f:b6:c8:85:3f:d6:d4:a0:01:ec:40:a8: 85:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:7A:5F:0F:37:7C:C8:0A:40:69:DD:71:C6:9E:9F:55:42:4B:74:4F X509v3 Authority Key Identifier: keyid:BB:0B:02:80:6A:E3:C3:4F:45:3A:DE:DD:E3:6A:DF:43:2F:CD:F9:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/09718f08-bb39-4a09-a4c0-1f40248a6d15/2/BB0B02806AE3C34F453ADEDDE36ADF432FCDF9C4.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/BB0B02806AE3C34F453ADEDDE36ADF432FCDF9C4.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09718f08-bb39-4a09-a4c0-1f40248a6d15/2/BB0B02806AE3C34F453ADEDDE36ADF432FCDF9C4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b0:2c:b3:f5:53:50:a0:1f:82:39:54:6e:11:f5:32:be:06:be: 34:9f:15:ac:88:a0:9b:f0:28:de:b2:78:1d:e9:af:11:64:d4: b0:e0:62:70:4e:e2:b6:00:11:a8:c2:f2:9d:00:9a:54:a4:55: a4:5c:e2:13:ab:8a:de:33:98:c4:03:ac:17:54:db:c5:a7:6f: 78:d0:07:27:f6:ba:b2:fe:3b:62:e6:60:43:04:8f:81:33:b8: 04:f6:d0:6a:1e:30:6c:4a:1b:83:71:3b:d8:80:2d:66:30:7c: 72:b5:e6:a6:05:1a:34:23:c4:1e:9d:21:87:e0:8f:76:01:4f: 6f:ba:96:52:0d:c0:68:96:da:ec:ab:cc:68:34:c3:c1:f8:61: b9:08:a2:79:1d:c2:fc:35:ef:1a:c9:59:d2:a0:d5:d0:f2:52: 4f:ba:41:8f:51:21:47:b0:d2:90:f5:9c:52:ec:c6:f8:ef:1e: 77:bd:70:b0:5c:09:bd:8e:0e:b5:1b:73:ac:b5:8b:19:f5:fd: a2:a8:fb:99:94:19:1b:d8:1e:ce:9d:fd:4f:ac:cc:f8:08:7f: 3c:67:01:82:3b:53:64:dd:a0:9b:87:54:2a:3e:e3:79:3b:70: e7:50:85:04:cc:3a:db:22:9f:43:55:2f:76:4b:a6:f9:05:5e: bd:bc:88:c5 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUTHeqdbw+FnsN5Lhl6MuESVF6ktwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkIwQjAyODA2QUUzQzM0RjQ1M0FERURERTM2QURGNDMy RkNERjlDNDAeFw0yNjA0MTYyMjI1NTdaFw0yNjA0MTcyMzEzNTdaMDMxMTAvBgNV BAMTKDA4N0E1RjBGMzc3Q0M4MEE0MDY5REQ3MUM2OUU5RjU1NDI0Qjc0NEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDxNqishA5hNT4ctmJaa05TcvDe cIKSWIz5gQQ29QYVEMbbLif81PfoL+pPVsoeR3E6XZ6mdkCnZyCx9OOw0uKjSf1A C3oFnk3vnhCsEBHVneS86heWnaOCIog83C1nChEQvBCtp0o6spUgXVycVF43CMPK /hgpRH/FZ4aDLqB/NCw3XsHZ/xiVvFnS/s5c9KygMKRjtf+6DqF9TP1JzXf3lXSa SWmmZp+WVPig2kuSiK78Y8opCid7tFa9Gr6GJROpyM6ZHbGD+eL7PKkALds9TTFZ y9RJ7g+xRLe18ULb3zx3fH+MLwB2TcctLwUH6WtVZB+2yIU/1tSgAexAqIUTAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUCHpfDzd8yApAad1xxp6fVUJLdE8wHwYDVR0j BBgwFoAUuwsCgGrjw09FOt7d42rfQy/N+cQwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMDk3MThmMDgtYmIzOS00YTA5LWE0YzAtMWY0MDI0OGE2 ZDE1LzIvQkIwQjAyODA2QUUzQzM0RjQ1M0FERURERTM2QURGNDMyRkNERjlDNC5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC9CQjBCMDI4MDZBRTNDMzRGNDUzQURFRERF MzZBREY0MzJGQ0RGOUM0LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzA5NzE4ZjA4LWJiMzktNGEwOS1hNGMwLTFmNDAyNDhhNmQxNS8yL0JCMEIwMjgw NkFFM0MzNEY0NTNBREVEREUzNkFERjQzMkZDREY5QzQubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCwLLP1 U1CgH4I5VG4R9TK+Br40nxWsiKCb8Cjesngd6a8RZNSw4GJwTuK2ABGowvKdAJpU pFWkXOITq4reM5jEA6wXVNvFp2940Acn9rqy/jti5mBDBI+BM7gE9tBqHjBsShuD cTvYgC1mMHxyteamBRo0I8QenSGH4I92AU9vupZSDcBoltrsq8xoNMPB+GG5CKJ5 HcL8Ne8ayVnSoNXQ8lJPukGPUSFHsNKQ9ZxS7Mb47x53vXCwXAm9jg61G3OstYsZ 9f2iqPuZlBkb2B7Onf1PrMz4CH88ZwGCO1Nk3aCbh1QqPuN5O3DnUIUEzDrbIp9D VS92S6b5BV69vIjF -----END CERTIFICATE-----Generated at Fri Apr 17 12:54:22 2026 by rpki-client