$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ac143387-f013-4922-838e-e18864be1e4a/0/BE0BB78869CDB2AD0C971A6A858A30213EAEC47D.mft File: BE0BB78869CDB2AD0C971A6A858A30213EAEC47D.mft (raw, json) Hash identifier: vopkQZQKsfOLpXJcwl/a3oNwZXrebts3/Yp4lgy0FD4= Subject key identifier: 62:3E:24:1F:4C:FB:6B:76:4F:BA:14:EC:2F:B3:E2:5A:6C:FF:12:4C Authority key identifier: BE:0B:B7:88:69:CD:B2:AD:0C:97:1A:6A:85:8A:30:21:3E:AE:C4:7D Certificate issuer: /CN=be0bb78869cdb2ad0c971a6a858a30213eaec47d Certificate serial: 3890EC4D2097C71F86CDEC0F5157F53613C92D7A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vgu3iGnNsq0MlxpqhYowIT6uxH0.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ac143387-f013-4922-838e-e18864be1e4a/0/BE0BB78869CDB2AD0C971A6A858A30213EAEC47D.mft Manifest number: EA Signing time: Mon 04 Aug 2025 14:37:19 +0000 Manifest this update: Mon 04 Aug 2025 14:32:19 +0000 Manifest next update: Tue 05 Aug 2025 18:34:19 +0000 Files and hashes: 1: 3137382e3234382e37332e302f32342d3234203d3e20313431393638.roa (hash: zMoHCJaZZ5vI4uszw9fV0p+6ygU9pfTnJ4jfa1DsJEg=) 2: 3137382e3234382e37362e302f32342d3234203d3e203336353330.roa (hash: h2oY8dMCuUJOV8h2ooYxtJO3njho899x4gMqGa23JNE=) 3: 3137382e3234382e37322e302f32342d3234203d3e20313531383732.roa (hash: 562I7wk8pDZNtdMzcEoC9Q7KQUjR9i2cYfXfdpaRXg8=) 4: BE0BB78869CDB2AD0C971A6A858A30213EAEC47D.crl (hash: 8GBPG4MgBlkb9U8KnJ8BCTiYTb+qxaHW+e/M3/3sg0o=) 5: 3139332e3136392e37382e302f32332d3234203d3e203530343334.roa (hash: i+j0/SqL92pXqr/Yt38MmbwZjTIQClt05q1Bhtl74qs=) 6: 3137382e3234382e37352e302f32342d3234203d3e20313939303538.roa (hash: 0IUSu+qptfP2e6dJnAny9tG4Cb2xcvVtmtBD0i4piak=) 7: 3139352e34322e3131322e302f32332d3233203d3e203438343335.roa (hash: LnJ/05IgVINSSDv4l3ajCKuAD4mr9PXKyWCylRmwux0=) 8: 3139352e34322e3131322e302f32342d3234203d3e203438343335.roa (hash: 0fCZnPcUR/TU0KGeDhdE4rzY8AMOIFMDCEwGzQYi3Zw=) 9: 3137382e3234382e37392e302f32342d3234203d3e20313335333932.roa (hash: nkla74pmgzof6BdGTx/D9Sn3aXq/+fT/xyCtH2Ux1lE=) 10: 3139332e3136392e37382e302f32332d3234203d3e203438343335.roa (hash: 0e4l5EqcD9+SWWVL79QZba03Lu9mdjyR/TfDJr390dA=) 11: 3139332e3136392e37382e302f32332d3233203d3e203438343335.roa (hash: IDuy7mlGaLMOCgzEdx2/1ouXbZ90tr9UBkMDq0knNXg=) 12: 3137382e3234382e37382e302f32342d3234203d3e20323132333834.roa (hash: 55oHxRvhLlFnFgVNA6T2hJ74AYC9yyl40HSKUWc/res=) 13: 3137382e3234382e37362e302f32342d3234203d3e20323134303234.roa (hash: JikbqnpKajZI2JuxlY+TTYmy6DToKoSov4y2Ga81BQg=) 14: 3137382e3234382e37342e302f32342d3234203d3e20323039313831.roa (hash: JOjM4S47fNK82HVGI3kzft2889UH/2/CmD3owvdrCqM=) 15: 3137382e3234382e37372e302f32342d3234203d3e20323133373833.roa (hash: IZUL7zEfrS59nO5eqaFvUNxkfEHC3BRjyZY2ApRcoSg=) 16: 3137382e3234382e37362e302f32342d3234203d3e20323135333034.roa (hash: XrWwPHt91qxXHQ0/kVWO42vo3gTicR3T1AogX5xX6FY=) 17: 3139352e34322e3131332e302f32342d3234203d3e203438343335.roa (hash: aYbyRGpjGAy7pzSZSZu9mIeZ8V/FjY5/eUQvPy2nJ/Y=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ac143387-f013-4922-838e-e18864be1e4a/0/BE0BB78869CDB2AD0C971A6A858A30213EAEC47D.crl rsync://rsync.paas.rpki.ripe.net/repository/ac143387-f013-4922-838e-e18864be1e4a/0/BE0BB78869CDB2AD0C971A6A858A30213EAEC47D.mft rsync://rpki.ripe.net/repository/DEFAULT/vgu3iGnNsq0MlxpqhYowIT6uxH0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 05 Aug 2025 18:34:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:90:ec:4d:20:97:c7:1f:86:cd:ec:0f:51:57:f5:36:13:c9:2d:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=be0bb78869cdb2ad0c971a6a858a30213eaec47d Validity Not Before: Aug 4 14:32:19 2025 GMT Not After : Aug 5 18:34:19 2025 GMT Subject: CN=623E241F4CFB6B764FBA14EC2FB3E25A6CFF124C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:38:34:df:33:77:39:91:95:10:10:d4:7e:cf: 2a:e0:47:0a:66:dd:77:b9:35:e0:d7:6e:eb:1c:ef: 0d:a7:58:35:a2:19:2a:c0:75:9d:4b:8f:0b:bf:7f: 43:7b:89:f1:68:87:1c:df:bb:14:d1:e0:e0:73:3a: a3:02:4d:d6:d8:74:48:a0:a4:32:70:6d:ec:05:07: d3:33:e4:9a:19:3a:08:55:b0:0c:e8:fb:0e:dd:05: 20:5e:66:68:b4:76:3a:b0:a6:86:d1:20:db:08:0b: e0:3e:34:72:01:60:db:d7:a7:c2:ce:5e:f7:3a:b9: 53:65:7b:46:21:bb:96:a6:15:3a:6a:bd:89:a9:c3: 32:0f:ba:c7:c9:0c:80:b2:5a:67:20:3b:e4:9a:12: 02:02:e4:2e:2a:14:bd:0b:08:df:7d:50:02:81:ce: de:6c:d1:42:0e:cf:93:ff:98:a5:7c:49:ef:ce:10: e0:e8:49:79:0f:fc:a6:57:f3:b3:7b:be:63:11:74: 8c:87:85:9a:62:25:c6:ad:a1:45:14:11:9c:1f:0b: c0:c6:f5:ac:02:8d:7d:c5:1f:2a:2d:85:36:e4:df: 42:7d:1d:bf:42:64:61:ae:ff:54:c4:6d:f8:01:b1: 5a:35:06:2c:06:4f:c2:b4:6f:e0:3b:b5:a6:21:e0: 09:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:3E:24:1F:4C:FB:6B:76:4F:BA:14:EC:2F:B3:E2:5A:6C:FF:12:4C X509v3 Authority Key Identifier: keyid:BE:0B:B7:88:69:CD:B2:AD:0C:97:1A:6A:85:8A:30:21:3E:AE:C4:7D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/ac143387-f013-4922-838e-e18864be1e4a/0/BE0BB78869CDB2AD0C971A6A858A30213EAEC47D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vgu3iGnNsq0MlxpqhYowIT6uxH0.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ac143387-f013-4922-838e-e18864be1e4a/0/BE0BB78869CDB2AD0C971A6A858A30213EAEC47D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:6d:b8:4d:9d:87:b0:7b:fa:2b:db:18:5d:ce:55:04:cd:a7: 0f:5b:0e:a6:a0:94:ed:81:77:7d:3d:12:65:b8:9f:eb:a2:08: bd:e3:67:15:72:fc:9f:ce:31:59:f5:09:04:ce:66:65:80:50: 8b:17:4a:09:f2:f9:63:89:44:44:87:bb:49:e6:7f:9d:3d:a5: 57:f3:ea:09:61:b4:f0:e2:ed:c9:22:3c:15:86:6a:89:9c:ae: 9f:aa:65:24:6d:9f:30:64:d4:36:28:1a:84:76:6b:36:9c:ea: 16:75:bb:24:3e:ae:76:04:eb:eb:af:37:9f:ab:01:01:96:13: 3c:53:63:83:a5:9f:43:eb:3b:fe:14:f2:5e:eb:8b:ca:fa:ab: f3:2a:b4:e6:54:a5:6d:12:05:e5:c1:b0:db:62:eb:89:0d:a9: 81:ae:c6:92:70:8d:11:db:ba:a1:15:69:c2:5d:d8:25:c3:93: 58:e3:d7:bc:7b:b9:38:ab:de:fc:bb:06:53:20:8e:ec:89:57: 3d:d7:75:28:f2:74:68:0c:eb:97:9d:31:c7:90:a2:30:d7:15: 85:58:50:aa:16:f2:19:bb:56:81:97:79:57:36:e8:85:2a:60: 9e:ee:de:3d:31:9c:53:dd:94:5d:68:fe:40:ad:11:c9:bc:2e: f4:42:c1:12 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUOJDsTSCXxx+GzewPUVf1NhPJLXowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYmUwYmI3ODg2OWNkYjJhZDBjOTcxYTZhODU4YTMwMjEz ZWFlYzQ3ZDAeFw0yNTA4MDQxNDMyMTlaFw0yNTA4MDUxODM0MTlaMDMxMTAvBgNV BAMTKDYyM0UyNDFGNENGQjZCNzY0RkJBMTRFQzJGQjNFMjVBNkNGRjEyNEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoODTfM3c5kZUQENR+zyrgRwpm 3Xe5NeDXbusc7w2nWDWiGSrAdZ1Ljwu/f0N7ifFohxzfuxTR4OBzOqMCTdbYdEig pDJwbewFB9Mz5JoZOghVsAzo+w7dBSBeZmi0djqwpobRINsIC+A+NHIBYNvXp8LO Xvc6uVNle0Yhu5amFTpqvYmpwzIPusfJDICyWmcgO+SaEgIC5C4qFL0LCN99UAKB zt5s0UIOz5P/mKV8Se/OEODoSXkP/KZX87N7vmMRdIyHhZpiJcatoUUUEZwfC8DG 9awCjX3FHyothTbk30J9Hb9CZGGu/1TEbfgBsVo1BiwGT8K0b+A7taYh4AmrAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUYj4kH0z7a3ZPuhTsL7PiWmz/EkwwHwYDVR0j BBgwFoAUvgu3iGnNsq0MlxpqhYowIT6uxH0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYWMxNDMzODctZjAxMy00OTIyLTgzOGUtZTE4ODY0YmUx ZTRhLzAvQkUwQkI3ODg2OUNEQjJBRDBDOTcxQTZBODU4QTMwMjEzRUFFQzQ3RC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3ZndTNpR25Oc3EwTWx4cHFoWW93SVQ2 dXhIMC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9hYzE0MzM4Ny1m MDEzLTQ5MjItODM4ZS1lMTg4NjRiZTFlNGEvMC9CRTBCQjc4ODY5Q0RCMkFEMEM5 NzFBNkE4NThBMzAyMTNFQUVDNDdELm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYG24TZ2HsHv6K9sYXc5V BM2nD1sOpqCU7YF3fT0SZbif66IIveNnFXL8n84xWfUJBM5mZYBQixdKCfL5Y4lE RIe7SeZ/nT2lV/PqCWG08OLtySI8FYZqiZyun6plJG2fMGTUNigahHZrNpzqFnW7 JD6udgTr6683n6sBAZYTPFNjg6WfQ+s7/hTyXuuLyvqr8yq05lSlbRIF5cGw22Lr iQ2pga7GknCNEdu6oRVpwl3YJcOTWOPXvHu5OKve/LsGUyCO7IlXPdd1KPJ0aAzr l50xx5CiMNcVhVhQqhbyGbtWgZd5VzbohSpgnu7ePTGcU92UXWj+QK0Rybwu9ELB Eg== -----END CERTIFICATE-----Generated at Tue Aug 5 08:26:20 2025 by rpki-client