$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ac143387-f013-4922-838e-e18864be1e4a/0/BE0BB78869CDB2AD0C971A6A858A30213EAEC47D.mft File: BE0BB78869CDB2AD0C971A6A858A30213EAEC47D.mft (raw, json) Hash identifier: NwipZDwi8Z1P2mrr9g1+PNgOfuoDf7B0e/9kVcuhONA= Subject key identifier: BD:63:05:77:CC:23:47:DA:5C:21:7A:ED:B5:03:AD:6F:29:BF:2F:24 Authority key identifier: BE:0B:B7:88:69:CD:B2:AD:0C:97:1A:6A:85:8A:30:21:3E:AE:C4:7D Certificate issuer: /CN=be0bb78869cdb2ad0c971a6a858a30213eaec47d Certificate serial: 157E850C835E25F071A9E8D2BF2FFC2D88E95F6A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vgu3iGnNsq0MlxpqhYowIT6uxH0.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ac143387-f013-4922-838e-e18864be1e4a/0/BE0BB78869CDB2AD0C971A6A858A30213EAEC47D.mft Manifest number: 0291 Signing time: Sat 13 Jun 2026 05:53:46 +0000 Manifest this update: Sat 13 Jun 2026 05:48:46 +0000 Manifest next update: Sun 14 Jun 2026 09:41:46 +0000 Files and hashes: 1: 3139352e34322e3131322e302f32342d3234203d3e203438343335.roa (hash: tbJb4NeQxaqdUwJnx0mi5eYh93xW1wx/PyQm3nNKQlk=) 2: 3139332e3136392e37382e302f32332d3234203d3e203438343335.roa (hash: 7BonRadnccE5oClU90cDWqb2zFnrszRs5TdXh7lrUTg=) 3: 3137382e3234382e37332e302f32342d3234203d3e20313431393638.roa (hash: 7xtsmIrFnzH8qIFMhr9PIJTBifAuGHXQXdM1XzYoP7s=) 4: BE0BB78869CDB2AD0C971A6A858A30213EAEC47D.crl (hash: G4iBT/zSvhVpxSApdtuhKjMXoSEhv0HkW1Rldl7i+Rg=) 5: 3137382e3234382e37352e302f32342d3234203d3e20313939303538.roa (hash: 32SDZVJ37JJ5kdrs24paGjp5boRcUJ2fYJyMfyL4cw4=) 6: 3137382e3234382e37322e302f32342d3234203d3e20313534343032.roa (hash: CmSSgp2rOmRDakFss7YxyL+V/oYFT12bvLwpMMXS8Tk=) 7: 3137382e3234382e37392e302f32342d3234203d3e20313335333932.roa (hash: YE6bAehCH8ruShBFJdgU4NCX9qGkifZ5lR9x24K4y2c=) 8: 3137382e3234382e37382e302f32342d3234203d3e20323132333834.roa (hash: sj3Mzc5uAM4fOfd+NlVLzXe7KVKZIN7ymsHfPBwN4+I=) 9: 3139332e3136392e37382e302f32332d3234203d3e203530343334.roa (hash: Ozt3uRUP9szxnq6Y/BlUHZo63N6fYBwOlNZT3blQYnY=) 10: 3139352e34322e3131322e302f32332d3233203d3e203438343335.roa (hash: SO5iYpxppDi067L1otYSj19apV4zwNvimr95590708A=) 11: 3139332e3136392e37382e302f32332d3233203d3e203438343335.roa (hash: CCPO6h/MpNSX08leEvwwJIjESWw2OEutpIc59PlyY9E=) 12: 3137382e3234382e37342e302f32342d3234203d3e20323035343839.roa (hash: D0Owph/oL3mL5VwchRzGIXC3cMHzv1rxTr5Ojjef5Y4=) 13: 3137382e3234382e37362e302f32342d3234203d3e203432383331.roa (hash: FQiM0Ff1DCSzma5DiHQMrsfmN7QznFFoSzW1a5q9Q2M=) 14: 3139352e34322e3131332e302f32342d3234203d3e203438343335.roa (hash: pchbJm+Br/uCuzzDsgfU4W3Dq3tZwJWDYbuhydm/Eyc=) 15: 3137382e3234382e37372e302f32342d3234203d3e20323133373833.roa (hash: QA/AmBx/vt6J6eDW0Y/+kHvJueiOPr7O1NVAvBIe9GY=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ac143387-f013-4922-838e-e18864be1e4a/0/BE0BB78869CDB2AD0C971A6A858A30213EAEC47D.crl rsync://rsync.paas.rpki.ripe.net/repository/ac143387-f013-4922-838e-e18864be1e4a/0/BE0BB78869CDB2AD0C971A6A858A30213EAEC47D.mft rsync://rpki.ripe.net/repository/DEFAULT/vgu3iGnNsq0MlxpqhYowIT6uxH0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Jun 2026 01:00:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:7e:85:0c:83:5e:25:f0:71:a9:e8:d2:bf:2f:fc:2d:88:e9:5f:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=be0bb78869cdb2ad0c971a6a858a30213eaec47d Validity Not Before: Jun 13 05:48:46 2026 GMT Not After : Jun 14 09:41:46 2026 GMT Subject: CN=BD630577CC2347DA5C217AEDB503AD6F29BF2F24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:e4:7e:c9:b4:6c:e4:8f:b3:4a:4e:90:8d:e0: 72:64:fd:ed:eb:94:ac:f2:a2:7e:b5:5b:e1:48:5c: 7b:00:63:b0:a8:3f:7b:a7:7c:11:21:24:67:29:89: 99:0b:0d:30:06:dd:6c:62:37:76:fb:9a:aa:67:84: 58:95:e3:aa:ff:10:e5:12:ea:2f:1d:c3:9a:21:ec: ff:6a:2f:58:4b:89:d5:61:8f:0c:46:0d:d8:d8:af: 8b:02:b5:ee:a6:e4:67:19:a8:d3:fd:a3:38:3c:df: 88:f2:1e:be:46:e1:d8:65:b4:36:5e:a9:7c:f5:53: 3f:8b:27:16:59:9f:86:80:56:70:fa:9d:58:4d:c2: 24:fb:4f:87:fa:9a:b3:90:33:e7:4e:27:4c:cd:c9: e5:00:96:e7:f7:c1:24:96:2e:4e:2e:20:ee:52:c0: b8:fa:2c:de:a3:03:fe:55:e6:b5:ec:bc:1e:b3:fe: 4a:24:2b:e3:14:ea:94:d8:55:a8:6b:95:b5:5e:c8: 3a:e4:ae:66:38:47:b0:d3:e6:77:bb:21:73:b9:ac: 40:be:3a:95:06:ec:f4:36:f3:3f:2f:5b:6a:90:f9: bf:91:1b:0f:3e:fb:7e:53:07:98:e2:2c:10:7a:e9: 84:d8:84:8e:4d:11:f6:be:81:ab:63:6c:b8:89:20: a2:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:63:05:77:CC:23:47:DA:5C:21:7A:ED:B5:03:AD:6F:29:BF:2F:24 X509v3 Authority Key Identifier: keyid:BE:0B:B7:88:69:CD:B2:AD:0C:97:1A:6A:85:8A:30:21:3E:AE:C4:7D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/ac143387-f013-4922-838e-e18864be1e4a/0/BE0BB78869CDB2AD0C971A6A858A30213EAEC47D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vgu3iGnNsq0MlxpqhYowIT6uxH0.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ac143387-f013-4922-838e-e18864be1e4a/0/BE0BB78869CDB2AD0C971A6A858A30213EAEC47D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:9e:da:bd:8e:49:0b:a8:6e:12:09:54:95:80:f2:b3:e5:3a: 52:95:1f:5d:31:d0:cb:b3:d6:d5:1a:81:01:76:ab:ed:a9:16: 32:3b:37:5f:b8:cc:d5:8d:9e:82:e6:e6:5e:f4:f3:63:32:f4: d6:82:77:a7:72:5b:40:37:c6:bb:4c:0e:63:c7:29:03:86:be: ac:b7:ea:98:33:8d:f9:0e:91:b5:84:f1:f1:38:e4:e3:95:73: c9:82:cd:33:03:07:0b:e6:ae:e7:7d:db:89:90:ea:bd:ef:77: 24:1c:44:66:4a:a3:c4:cc:48:39:40:9b:34:e1:64:88:45:af: 9a:2b:64:e3:1a:a9:df:81:93:f5:e3:f7:73:20:ba:4c:d1:9f: 86:38:36:e9:05:6c:65:4f:b6:08:24:eb:63:c5:fb:f0:62:0b: 45:c2:f5:97:1c:f0:45:53:33:bb:73:be:99:3f:5a:4f:df:f8: 66:24:8a:59:2e:38:53:74:fa:c8:ed:ea:6d:3d:16:d2:01:4f: fa:9b:b4:8a:81:fd:d4:55:ff:11:28:9f:09:51:f4:42:05:c3: b2:e6:c7:d1:87:32:3d:8a:a4:25:c5:87:53:0f:94:14:40:98: 14:1b:6d:95:e6:eb:90:b6:c2:ca:58:19:37:8b:37:6b:1d:ea: 70:f2:c3:f0 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUFX6FDINeJfBxqejSvy/8LYjpX2owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYmUwYmI3ODg2OWNkYjJhZDBjOTcxYTZhODU4YTMwMjEz ZWFlYzQ3ZDAeFw0yNjA2MTMwNTQ4NDZaFw0yNjA2MTQwOTQxNDZaMDMxMTAvBgNV BAMTKEJENjMwNTc3Q0MyMzQ3REE1QzIxN0FFREI1MDNBRDZGMjlCRjJGMjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC45H7JtGzkj7NKTpCN4HJk/e3r lKzyon61W+FIXHsAY7CoP3unfBEhJGcpiZkLDTAG3WxiN3b7mqpnhFiV46r/EOUS 6i8dw5oh7P9qL1hLidVhjwxGDdjYr4sCte6m5GcZqNP9ozg834jyHr5G4dhltDZe qXz1Uz+LJxZZn4aAVnD6nVhNwiT7T4f6mrOQM+dOJ0zNyeUAluf3wSSWLk4uIO5S wLj6LN6jA/5V5rXsvB6z/kokK+MU6pTYVahrlbVeyDrkrmY4R7DT5ne7IXO5rEC+ OpUG7PQ28z8vW2qQ+b+RGw8++35TB5jiLBB66YTYhI5NEfa+gatjbLiJIKJFAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUvWMFd8wjR9pcIXrttQOtbym/LyQwHwYDVR0j BBgwFoAUvgu3iGnNsq0MlxpqhYowIT6uxH0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYWMxNDMzODctZjAxMy00OTIyLTgzOGUtZTE4ODY0YmUx ZTRhLzAvQkUwQkI3ODg2OUNEQjJBRDBDOTcxQTZBODU4QTMwMjEzRUFFQzQ3RC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3ZndTNpR25Oc3EwTWx4cHFoWW93SVQ2 dXhIMC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9hYzE0MzM4Ny1m MDEzLTQ5MjItODM4ZS1lMTg4NjRiZTFlNGEvMC9CRTBCQjc4ODY5Q0RCMkFEMEM5 NzFBNkE4NThBMzAyMTNFQUVDNDdELm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMp7avY5JC6huEglUlYDy s+U6UpUfXTHQy7PW1RqBAXar7akWMjs3X7jM1Y2egubmXvTzYzL01oJ3p3JbQDfG u0wOY8cpA4a+rLfqmDON+Q6RtYTx8Tjk45VzyYLNMwMHC+au533biZDqve93JBxE ZkqjxMxIOUCbNOFkiEWvmitk4xqp34GT9eP3cyC6TNGfhjg26QVsZU+2CCTrY8X7 8GILRcL1lxzwRVMzu3O+mT9aT9/4ZiSKWS44U3T6yO3qbT0W0gFP+pu0ioH91FX/ ESifCVH0QgXDsubH0YcyPYqkJcWHUw+UFECYFBttlebrkLbCylgZN4s3ax3qcPLD 8A== -----END CERTIFICATE-----Generated at Sat Jun 13 08:57:55 2026 by rpki-client