$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ac143387-f013-4922-838e-e18864be1e4a/0/BE0BB78869CDB2AD0C971A6A858A30213EAEC47D.mft File: BE0BB78869CDB2AD0C971A6A858A30213EAEC47D.mft (raw, json) Hash identifier: ZcVRFnKKaJZFkrm969e448xvM9QMwSdQYbinRcOgtBc= Subject key identifier: 1E:45:C1:DA:8E:BF:46:20:75:77:86:26:EF:F2:49:5A:2E:96:F7:8B Authority key identifier: BE:0B:B7:88:69:CD:B2:AD:0C:97:1A:6A:85:8A:30:21:3E:AE:C4:7D Certificate issuer: /CN=be0bb78869cdb2ad0c971a6a858a30213eaec47d Certificate serial: 6D671CA93DFB8686EEB2B4F9E675861F5C72F0CF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vgu3iGnNsq0MlxpqhYowIT6uxH0.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ac143387-f013-4922-838e-e18864be1e4a/0/BE0BB78869CDB2AD0C971A6A858A30213EAEC47D.mft Manifest number: 0165 Signing time: Tue 04 Nov 2025 19:07:18 +0000 Manifest this update: Tue 04 Nov 2025 19:02:18 +0000 Manifest next update: Wed 05 Nov 2025 22:30:18 +0000 Files and hashes: 1: BE0BB78869CDB2AD0C971A6A858A30213EAEC47D.crl (hash: euJwZa59iaxoveoV4hKKU5aT/iiVAmYq8KaxnBWiNp4=) 2: 3139352e34322e3131332e302f32342d3234203d3e203438343335.roa (hash: aYbyRGpjGAy7pzSZSZu9mIeZ8V/FjY5/eUQvPy2nJ/Y=) 3: 3137382e3234382e37362e302f32342d3234203d3e20323134303234.roa (hash: JikbqnpKajZI2JuxlY+TTYmy6DToKoSov4y2Ga81BQg=) 4: 3139332e3136392e37382e302f32332d3233203d3e203438343335.roa (hash: IDuy7mlGaLMOCgzEdx2/1ouXbZ90tr9UBkMDq0knNXg=) 5: 3137382e3234382e37352e302f32342d3234203d3e20313939303538.roa (hash: 0IUSu+qptfP2e6dJnAny9tG4Cb2xcvVtmtBD0i4piak=) 6: 3139332e3136392e37382e302f32332d3234203d3e203438343335.roa (hash: 0e4l5EqcD9+SWWVL79QZba03Lu9mdjyR/TfDJr390dA=) 7: 3137382e3234382e37332e302f32342d3234203d3e20313431393638.roa (hash: zMoHCJaZZ5vI4uszw9fV0p+6ygU9pfTnJ4jfa1DsJEg=) 8: 3137382e3234382e37342e302f32342d3234203d3e20323039313831.roa (hash: JOjM4S47fNK82HVGI3kzft2889UH/2/CmD3owvdrCqM=) 9: 3139352e34322e3131322e302f32332d3233203d3e203438343335.roa (hash: LnJ/05IgVINSSDv4l3ajCKuAD4mr9PXKyWCylRmwux0=) 10: 3137382e3234382e37322e302f32342d3234203d3e20313531383732.roa (hash: 562I7wk8pDZNtdMzcEoC9Q7KQUjR9i2cYfXfdpaRXg8=) 11: 3137382e3234382e37362e302f32342d3234203d3e203336353330.roa (hash: h2oY8dMCuUJOV8h2ooYxtJO3njho899x4gMqGa23JNE=) 12: 3137382e3234382e37382e302f32342d3234203d3e20323132333834.roa (hash: 55oHxRvhLlFnFgVNA6T2hJ74AYC9yyl40HSKUWc/res=) 13: 3137382e3234382e37372e302f32342d3234203d3e20323133373833.roa (hash: IZUL7zEfrS59nO5eqaFvUNxkfEHC3BRjyZY2ApRcoSg=) 14: 3137382e3234382e37362e302f32342d3234203d3e20323135333034.roa (hash: XrWwPHt91qxXHQ0/kVWO42vo3gTicR3T1AogX5xX6FY=) 15: 3139352e34322e3131322e302f32342d3234203d3e203438343335.roa (hash: 0fCZnPcUR/TU0KGeDhdE4rzY8AMOIFMDCEwGzQYi3Zw=) 16: 3139332e3136392e37382e302f32332d3234203d3e203530343334.roa (hash: i+j0/SqL92pXqr/Yt38MmbwZjTIQClt05q1Bhtl74qs=) 17: 3137382e3234382e37392e302f32342d3234203d3e20313335333932.roa (hash: nkla74pmgzof6BdGTx/D9Sn3aXq/+fT/xyCtH2Ux1lE=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ac143387-f013-4922-838e-e18864be1e4a/0/BE0BB78869CDB2AD0C971A6A858A30213EAEC47D.crl rsync://rsync.paas.rpki.ripe.net/repository/ac143387-f013-4922-838e-e18864be1e4a/0/BE0BB78869CDB2AD0C971A6A858A30213EAEC47D.mft rsync://rpki.ripe.net/repository/DEFAULT/vgu3iGnNsq0MlxpqhYowIT6uxH0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 05 Nov 2025 18:00:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:67:1c:a9:3d:fb:86:86:ee:b2:b4:f9:e6:75:86:1f:5c:72:f0:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=be0bb78869cdb2ad0c971a6a858a30213eaec47d Validity Not Before: Nov 4 19:02:18 2025 GMT Not After : Nov 5 22:30:18 2025 GMT Subject: CN=1E45C1DA8EBF462075778626EFF2495A2E96F78B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:bc:f7:3d:71:1b:15:32:da:b9:75:a9:30:6a: 01:25:2d:ab:60:e6:e0:66:c3:61:ad:dd:8c:ca:92: 03:a5:f3:84:8d:64:0e:1d:ca:e6:67:17:ad:96:9d: 73:79:34:74:99:cd:45:78:fe:9f:fb:a8:51:ee:ff: 59:56:ad:8b:20:d7:66:6c:50:7d:0e:9d:f7:4f:d3: 30:90:2a:2e:53:37:43:79:c3:66:86:b3:58:c2:8d: a3:29:51:bd:6e:9d:2d:59:d5:ce:9d:73:2b:de:f4: d7:63:4a:a0:cd:6f:ad:ba:44:ab:4a:9e:fd:28:4e: e3:02:98:d4:e1:51:af:d5:a8:3e:ee:9d:b5:20:f3: f5:22:3c:3e:4c:cf:45:62:3c:00:9d:b7:29:9d:92: 69:1f:a9:29:6e:ca:10:49:1d:d5:fc:33:8c:88:97: 63:03:c8:5a:ca:e8:82:eb:90:6f:f7:2d:4d:66:38: 76:75:4b:e1:df:5e:a3:43:47:7a:70:26:61:45:e7: 84:00:29:8f:5e:34:4a:3d:6b:e1:ef:4c:3b:46:d6: 5f:19:4b:5b:74:3f:2f:bf:22:a8:46:dd:d6:89:c8: ff:f1:4c:a5:3b:13:4c:64:0c:24:75:eb:fa:20:73: 52:44:db:b1:ab:6d:3d:64:d9:5a:bd:3d:40:fb:a3: 42:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:45:C1:DA:8E:BF:46:20:75:77:86:26:EF:F2:49:5A:2E:96:F7:8B X509v3 Authority Key Identifier: keyid:BE:0B:B7:88:69:CD:B2:AD:0C:97:1A:6A:85:8A:30:21:3E:AE:C4:7D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/ac143387-f013-4922-838e-e18864be1e4a/0/BE0BB78869CDB2AD0C971A6A858A30213EAEC47D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vgu3iGnNsq0MlxpqhYowIT6uxH0.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ac143387-f013-4922-838e-e18864be1e4a/0/BE0BB78869CDB2AD0C971A6A858A30213EAEC47D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6c:49:b8:a4:e8:c0:a4:79:a4:4c:41:2a:d4:3d:a0:88:4c:4c: 97:1d:d2:a1:06:87:f8:48:f8:09:73:82:55:31:33:43:fd:67: db:ef:1e:79:d9:be:cb:82:55:86:f4:15:13:65:a9:b0:fd:e6: ec:a6:24:93:ce:06:45:f5:75:a7:fa:cf:a2:0c:2c:c0:14:b7: 27:e6:ed:e9:2a:e8:97:4b:f2:16:c8:a6:3d:30:5d:4a:be:33: 10:a6:fd:5a:44:27:17:a2:dc:f6:26:87:2f:55:55:c3:d1:8e: f2:b5:41:8d:74:4d:e2:2b:33:72:9f:80:59:b3:80:d9:aa:ea: f2:b3:b1:30:3a:ff:3b:f1:8f:cb:92:48:02:c5:14:3c:2b:41: 4a:74:78:ba:e0:f7:29:f4:74:c6:90:78:b9:27:5a:51:00:74: a3:3d:6d:99:e9:df:5b:0c:2c:7c:a3:16:bb:bd:71:5e:78:27: 05:47:9a:16:62:07:f4:28:48:73:eb:dc:c4:e2:78:05:1f:81: c9:bc:c3:a0:2c:87:3a:b3:68:64:fe:d6:75:23:d6:a0:2d:12: 09:1a:94:2a:1f:d8:0c:e2:78:9d:05:45:40:35:bf:d7:51:8c: ed:9c:91:96:3c:4a:73:13:b0:df:68:5e:96:0b:2c:7b:42:12: b1:b4:a3:f3 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUbWccqT37hobusrT55nWGH1xy8M8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYmUwYmI3ODg2OWNkYjJhZDBjOTcxYTZhODU4YTMwMjEz ZWFlYzQ3ZDAeFw0yNTExMDQxOTAyMThaFw0yNTExMDUyMjMwMThaMDMxMTAvBgNV BAMTKDFFNDVDMURBOEVCRjQ2MjA3NTc3ODYyNkVGRjI0OTVBMkU5NkY3OEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/vPc9cRsVMtq5dakwagElLatg 5uBmw2Gt3YzKkgOl84SNZA4dyuZnF62WnXN5NHSZzUV4/p/7qFHu/1lWrYsg12Zs UH0OnfdP0zCQKi5TN0N5w2aGs1jCjaMpUb1unS1Z1c6dcyve9NdjSqDNb626RKtK nv0oTuMCmNThUa/VqD7unbUg8/UiPD5Mz0ViPACdtymdkmkfqSluyhBJHdX8M4yI l2MDyFrK6ILrkG/3LU1mOHZ1S+HfXqNDR3pwJmFF54QAKY9eNEo9a+HvTDtG1l8Z S1t0Py+/IqhG3daJyP/xTKU7E0xkDCR16/ogc1JE27GrbT1k2Vq9PUD7o0LJAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUHkXB2o6/RiB1d4Ym7/JJWi6W94swHwYDVR0j BBgwFoAUvgu3iGnNsq0MlxpqhYowIT6uxH0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYWMxNDMzODctZjAxMy00OTIyLTgzOGUtZTE4ODY0YmUx ZTRhLzAvQkUwQkI3ODg2OUNEQjJBRDBDOTcxQTZBODU4QTMwMjEzRUFFQzQ3RC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3ZndTNpR25Oc3EwTWx4cHFoWW93SVQ2 dXhIMC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9hYzE0MzM4Ny1m MDEzLTQ5MjItODM4ZS1lMTg4NjRiZTFlNGEvMC9CRTBCQjc4ODY5Q0RCMkFEMEM5 NzFBNkE4NThBMzAyMTNFQUVDNDdELm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbEm4pOjApHmkTEEq1D2g iExMlx3SoQaH+Ej4CXOCVTEzQ/1n2+8eedm+y4JVhvQVE2WpsP3m7KYkk84GRfV1 p/rPogwswBS3J+bt6Srol0vyFsimPTBdSr4zEKb9WkQnF6Lc9iaHL1VVw9GO8rVB jXRN4iszcp+AWbOA2arq8rOxMDr/O/GPy5JIAsUUPCtBSnR4uuD3KfR0xpB4uSda UQB0oz1tmenfWwwsfKMWu71xXngnBUeaFmIH9ChIc+vcxOJ4BR+BybzDoCyHOrNo ZP7WdSPWoC0SCRqUKh/YDOJ4nQVFQDW/11GM7ZyRljxKcxOw32helgsse0ISsbSj 8w== -----END CERTIFICATE-----Generated at Tue Nov 4 22:55:47 2025 by rpki-client