$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/ac143387-f013-4922-838e-e18864be1e4a/0/BE0BB78869CDB2AD0C971A6A858A30213EAEC47D.mft File: BE0BB78869CDB2AD0C971A6A858A30213EAEC47D.mft (raw, json) Hash identifier: EJUUNAfTgxPrO63j0Pzw54dyjJO39+inG59L5sxsj7M= Subject key identifier: BC:A4:1A:1B:E2:4E:AA:27:4B:88:91:CE:33:2E:C7:58:57:37:0F:9F Authority key identifier: BE:0B:B7:88:69:CD:B2:AD:0C:97:1A:6A:85:8A:30:21:3E:AE:C4:7D Certificate issuer: /CN=be0bb78869cdb2ad0c971a6a858a30213eaec47d Certificate serial: 302C8B01371063C2EE293C35581B28B3CAD3EFE9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vgu3iGnNsq0MlxpqhYowIT6uxH0.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ac143387-f013-4922-838e-e18864be1e4a/0/BE0BB78869CDB2AD0C971A6A858A30213EAEC47D.mft Manifest number: 0317 Signing time: Mon 21 Sep 2026 09:45:45 +0000 Manifest this update: Mon 21 Sep 2026 09:40:45 +0000 Manifest next update: Tue 22 Sep 2026 13:06:45 +0000 Files and hashes: 1: 3137382e3234382e37342e302f32342d3234203d3e203630353432.roa (hash: Xr5u/5dDUrYBdAYp0AhqinBp+MATOEXztLhHhfZwhws=) 2: BE0BB78869CDB2AD0C971A6A858A30213EAEC47D.crl (hash: cWUWkS9UOcl5kiOooRwHzuOaCkhI6ySsrIZGEzjexXE=) 3: 3137382e3234382e37332e302f32342d3234203d3e20313431393638.roa (hash: 7xtsmIrFnzH8qIFMhr9PIJTBifAuGHXQXdM1XzYoP7s=) 4: 3137382e3234382e37392e302f32342d3234203d3e20313335333932.roa (hash: YE6bAehCH8ruShBFJdgU4NCX9qGkifZ5lR9x24K4y2c=) 5: 3139352e34322e3131332e302f32342d3234203d3e203438343335.roa (hash: pchbJm+Br/uCuzzDsgfU4W3Dq3tZwJWDYbuhydm/Eyc=) 6: 3139332e3136392e37382e302f32332d3234203d3e203438343335.roa (hash: 7BonRadnccE5oClU90cDWqb2zFnrszRs5TdXh7lrUTg=) 7: 3139332e3136392e37382e302f32332d3233203d3e203438343335.roa (hash: CCPO6h/MpNSX08leEvwwJIjESWw2OEutpIc59PlyY9E=) 8: 3139352e34322e3131322e302f32342d3234203d3e203438343335.roa (hash: tbJb4NeQxaqdUwJnx0mi5eYh93xW1wx/PyQm3nNKQlk=) 9: 3137382e3234382e37352e302f32342d3234203d3e20313939303538.roa (hash: 32SDZVJ37JJ5kdrs24paGjp5boRcUJ2fYJyMfyL4cw4=) 10: 3137382e3234382e37382e302f32342d3234203d3e20323132333834.roa (hash: sj3Mzc5uAM4fOfd+NlVLzXe7KVKZIN7ymsHfPBwN4+I=) 11: 3139332e3136392e37382e302f32332d3234203d3e203530343334.roa (hash: Ozt3uRUP9szxnq6Y/BlUHZo63N6fYBwOlNZT3blQYnY=) 12: 3139352e34322e3131322e302f32332d3233203d3e203438343335.roa (hash: SO5iYpxppDi067L1otYSj19apV4zwNvimr95590708A=) 13: 3137382e3234382e37362e302f32342d3234203d3e203432383331.roa (hash: FQiM0Ff1DCSzma5DiHQMrsfmN7QznFFoSzW1a5q9Q2M=) 14: 3137382e3234382e37372e302f32342d3234203d3e20323133373833.roa (hash: QA/AmBx/vt6J6eDW0Y/+kHvJueiOPr7O1NVAvBIe9GY=) 15: 3137382e3234382e37322e302f32342d3234203d3e20313534343032.roa (hash: CmSSgp2rOmRDakFss7YxyL+V/oYFT12bvLwpMMXS8Tk=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ac143387-f013-4922-838e-e18864be1e4a/0/BE0BB78869CDB2AD0C971A6A858A30213EAEC47D.crl rsync://rsync.paas.rpki.ripe.net/repository/ac143387-f013-4922-838e-e18864be1e4a/0/BE0BB78869CDB2AD0C971A6A858A30213EAEC47D.mft rsync://rpki.ripe.net/repository/DEFAULT/vgu3iGnNsq0MlxpqhYowIT6uxH0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 22 Sep 2026 13:06:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:2c:8b:01:37:10:63:c2:ee:29:3c:35:58:1b:28:b3:ca:d3:ef:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=be0bb78869cdb2ad0c971a6a858a30213eaec47d Validity Not Before: Sep 21 09:40:45 2026 GMT Not After : Sep 22 13:06:45 2026 GMT Subject: CN=BCA41A1BE24EAA274B8891CE332EC75857370F9F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:39:67:7e:57:1f:6a:14:e8:e9:6a:43:ca:c2: 94:9a:4a:fe:7d:1b:41:bf:93:61:d7:b8:62:80:77: 49:b9:b9:f1:88:24:d5:29:8e:1b:3d:0d:f2:a0:79: b6:47:ca:6b:b0:1c:83:0a:43:07:76:35:4e:5d:cb: 71:5c:93:8d:32:46:15:9d:4d:be:65:91:28:70:1f: d7:f1:dd:f3:9b:55:ed:30:81:04:98:af:4d:8f:3d: 1c:4e:d7:ab:a0:70:a7:b5:dc:9a:19:d0:d0:2f:64: 79:19:d8:d6:98:75:fa:ea:ab:fb:04:22:f2:40:5d: 3c:7c:ce:0b:3f:05:9d:22:f2:b0:6d:56:e5:78:aa: 27:b0:e9:ac:6b:2c:1c:4d:4d:42:11:b6:16:f0:74: d2:32:ea:26:a9:1d:e7:4f:6b:51:b0:6e:8d:33:66: d4:9f:07:af:9e:1d:af:a1:9c:ad:02:28:71:73:d0: 3a:e5:ef:f6:7d:48:eb:1b:db:67:6c:ef:45:9f:5d: f6:c2:6e:c4:29:13:ef:b0:29:87:64:65:b3:e2:16: 5b:d6:f8:cb:72:da:6b:a4:0d:45:c7:40:f5:20:48: 09:c9:b5:44:ef:80:16:ea:11:3e:e5:03:36:73:28: ab:fc:bb:00:b6:72:3f:da:97:d4:fb:9a:ab:b7:6f: 7f:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:A4:1A:1B:E2:4E:AA:27:4B:88:91:CE:33:2E:C7:58:57:37:0F:9F X509v3 Authority Key Identifier: keyid:BE:0B:B7:88:69:CD:B2:AD:0C:97:1A:6A:85:8A:30:21:3E:AE:C4:7D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/ac143387-f013-4922-838e-e18864be1e4a/0/BE0BB78869CDB2AD0C971A6A858A30213EAEC47D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vgu3iGnNsq0MlxpqhYowIT6uxH0.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ac143387-f013-4922-838e-e18864be1e4a/0/BE0BB78869CDB2AD0C971A6A858A30213EAEC47D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:71:1d:ea:02:e4:82:7e:30:29:70:d6:5f:55:76:1a:a3:84: 2d:d8:75:0e:52:47:f4:73:53:45:40:2c:01:eb:15:11:67:f4: a6:1b:22:db:d6:50:5f:36:45:a2:da:e1:fc:b4:7a:86:72:a0: 08:c2:11:71:fd:b7:20:f2:fe:c3:96:ed:d8:66:64:7e:f5:99: 0e:36:c2:05:8d:4a:18:9a:ca:37:e4:4b:ee:9b:5f:3f:fe:2f: 9d:93:1f:4d:e7:b2:ea:c3:b0:75:2f:da:a9:b4:f7:40:05:43: 4d:31:4b:d2:b1:7f:26:28:54:36:c8:fb:a5:a4:36:3e:cb:63: 41:9f:79:d7:bd:44:d3:16:77:25:4e:ca:5a:f4:2f:ef:02:b4: 9a:b2:51:5f:32:57:d4:1b:3e:5e:82:ae:63:2f:4b:3a:2a:62: 73:4f:c6:d1:21:ee:0b:98:cc:da:6b:cc:3d:73:d5:1f:fd:5c: 20:1b:3a:22:c2:bb:cb:28:44:be:12:b6:95:ee:17:11:22:b4: 85:24:90:52:45:8e:48:23:91:29:f7:b1:ac:1b:29:dc:99:86: 7e:62:14:06:29:39:a0:c8:1c:c6:da:88:7d:30:1a:b1:6a:1a: 34:cb:60:1f:92:36:24:8b:c0:76:6d:d5:c2:a4:49:c4:e5:66: 31:7a:60:0c -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUMCyLATcQY8LuKTw1WBsos8rT7+kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYmUwYmI3ODg2OWNkYjJhZDBjOTcxYTZhODU4YTMwMjEz ZWFlYzQ3ZDAeFw0yNjA5MjEwOTQwNDVaFw0yNjA5MjIxMzA2NDVaMDMxMTAvBgNV BAMTKEJDQTQxQTFCRTI0RUFBMjc0Qjg4OTFDRTMzMkVDNzU4NTczNzBGOUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGOWd+Vx9qFOjpakPKwpSaSv59 G0G/k2HXuGKAd0m5ufGIJNUpjhs9DfKgebZHymuwHIMKQwd2NU5dy3Fck40yRhWd Tb5lkShwH9fx3fObVe0wgQSYr02PPRxO16ugcKe13JoZ0NAvZHkZ2NaYdfrqq/sE IvJAXTx8zgs/BZ0i8rBtVuV4qiew6axrLBxNTUIRthbwdNIy6iapHedPa1Gwbo0z ZtSfB6+eHa+hnK0CKHFz0Drl7/Z9SOsb22ds70WfXfbCbsQpE++wKYdkZbPiFlvW +Mty2mukDUXHQPUgSAnJtUTvgBbqET7lAzZzKKv8uwC2cj/al9T7mqu3b3+JAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUvKQaG+JOqidLiJHOMy7HWFc3D58wHwYDVR0j BBgwFoAUvgu3iGnNsq0MlxpqhYowIT6uxH0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYWMxNDMzODctZjAxMy00OTIyLTgzOGUtZTE4ODY0YmUx ZTRhLzAvQkUwQkI3ODg2OUNEQjJBRDBDOTcxQTZBODU4QTMwMjEzRUFFQzQ3RC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3ZndTNpR25Oc3EwTWx4cHFoWW93SVQ2 dXhIMC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9hYzE0MzM4Ny1m MDEzLTQ5MjItODM4ZS1lMTg4NjRiZTFlNGEvMC9CRTBCQjc4ODY5Q0RCMkFEMEM5 NzFBNkE4NThBMzAyMTNFQUVDNDdELm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXnEd6gLkgn4wKXDWX1V2 GqOELdh1DlJH9HNTRUAsAesVEWf0phsi29ZQXzZFotrh/LR6hnKgCMIRcf23IPL+ w5bt2GZkfvWZDjbCBY1KGJrKN+RL7ptfP/4vnZMfTeey6sOwdS/aqbT3QAVDTTFL 0rF/JihUNsj7paQ2PstjQZ95171E0xZ3JU7KWvQv7wK0mrJRXzJX1Bs+XoKuYy9L Oipic0/G0SHuC5jM2mvMPXPVH/1cIBs6IsK7yyhEvhK2le4XESK0hSSQUkWOSCOR KfexrBsp3JmGfmIUBik5oMgcxtqIfTAasWoaNMtgH5I2JIvAdm3VwqRJxOVmMXpg DA== -----END CERTIFICATE-----Generated at Tue Sep 22 03:44:28 2026 by rpki-client