$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ac143387-f013-4922-838e-e18864be1e4a/0/BE0BB78869CDB2AD0C971A6A858A30213EAEC47D.mft File: BE0BB78869CDB2AD0C971A6A858A30213EAEC47D.mft (raw, json) Hash identifier: qJR8flqvxJnGzhoexRRLersOZDBRkb1dRw+zfjWssVo= Subject key identifier: 48:DD:30:7C:A9:32:EB:18:B1:A2:36:BD:44:B2:A9:3F:63:82:69:2E Authority key identifier: BE:0B:B7:88:69:CD:B2:AD:0C:97:1A:6A:85:8A:30:21:3E:AE:C4:7D Certificate issuer: /CN=be0bb78869cdb2ad0c971a6a858a30213eaec47d Certificate serial: 6DDD5B3B644A6F0D092814964F8A9CF58221DB91 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vgu3iGnNsq0MlxpqhYowIT6uxH0.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ac143387-f013-4922-838e-e18864be1e4a/0/BE0BB78869CDB2AD0C971A6A858A30213EAEC47D.mft Manifest number: 0204 Signing time: Mon 02 Mar 2026 02:17:59 +0000 Manifest this update: Mon 02 Mar 2026 02:12:59 +0000 Manifest next update: Tue 03 Mar 2026 05:29:59 +0000 Files and hashes: 1: 3139332e3136392e37382e302f32332d3234203d3e203438343335.roa (hash: 7BonRadnccE5oClU90cDWqb2zFnrszRs5TdXh7lrUTg=) 2: 3137382e3234382e37342e302f32342d3234203d3e20323039313831.roa (hash: b86TJ/eicDu3L39UHlXUFvq/1qF9nZUOZYH3MsfWUIw=) 3: 3139332e3136392e37382e302f32332d3234203d3e203530343334.roa (hash: Ozt3uRUP9szxnq6Y/BlUHZo63N6fYBwOlNZT3blQYnY=) 4: 3139352e34322e3131322e302f32342d3234203d3e203438343335.roa (hash: tbJb4NeQxaqdUwJnx0mi5eYh93xW1wx/PyQm3nNKQlk=) 5: 3137382e3234382e37332e302f32342d3234203d3e20313431393638.roa (hash: zMoHCJaZZ5vI4uszw9fV0p+6ygU9pfTnJ4jfa1DsJEg=) 6: 3137382e3234382e37392e302f32342d3234203d3e20313335333932.roa (hash: YE6bAehCH8ruShBFJdgU4NCX9qGkifZ5lR9x24K4y2c=) 7: 3137382e3234382e37322e302f32342d3234203d3e20313531383732.roa (hash: wHwcwoFIrN2jLP/C8OzdoSzmdobOAFysYNlbWgxelzw=) 8: 3139352e34322e3131332e302f32342d3234203d3e203438343335.roa (hash: pchbJm+Br/uCuzzDsgfU4W3Dq3tZwJWDYbuhydm/Eyc=) 9: 3139332e3136392e37382e302f32332d3233203d3e203438343335.roa (hash: CCPO6h/MpNSX08leEvwwJIjESWw2OEutpIc59PlyY9E=) 10: 3137382e3234382e37362e302f32342d3234203d3e203432383331.roa (hash: FQiM0Ff1DCSzma5DiHQMrsfmN7QznFFoSzW1a5q9Q2M=) 11: 3137382e3234382e37372e302f32342d3234203d3e20323133373833.roa (hash: QA/AmBx/vt6J6eDW0Y/+kHvJueiOPr7O1NVAvBIe9GY=) 12: 3137382e3234382e37382e302f32342d3234203d3e20323132333834.roa (hash: 55oHxRvhLlFnFgVNA6T2hJ74AYC9yyl40HSKUWc/res=) 13: 3139352e34322e3131322e302f32332d3233203d3e203438343335.roa (hash: SO5iYpxppDi067L1otYSj19apV4zwNvimr95590708A=) 14: 3137382e3234382e37352e302f32342d3234203d3e20313939303538.roa (hash: 32SDZVJ37JJ5kdrs24paGjp5boRcUJ2fYJyMfyL4cw4=) 15: BE0BB78869CDB2AD0C971A6A858A30213EAEC47D.crl (hash: hk1XFRzdHLFiTBRhSxvrhYK6lPhCwWNWd1RoC0pY5wA=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ac143387-f013-4922-838e-e18864be1e4a/0/BE0BB78869CDB2AD0C971A6A858A30213EAEC47D.crl rsync://rsync.paas.rpki.ripe.net/repository/ac143387-f013-4922-838e-e18864be1e4a/0/BE0BB78869CDB2AD0C971A6A858A30213EAEC47D.mft rsync://rpki.ripe.net/repository/DEFAULT/vgu3iGnNsq0MlxpqhYowIT6uxH0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 03 Mar 2026 05:29:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:dd:5b:3b:64:4a:6f:0d:09:28:14:96:4f:8a:9c:f5:82:21:db:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=be0bb78869cdb2ad0c971a6a858a30213eaec47d Validity Not Before: Mar 2 02:12:59 2026 GMT Not After : Mar 3 05:29:59 2026 GMT Subject: CN=48DD307CA932EB18B1A236BD44B2A93F6382692E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:a9:bb:de:d9:a8:d0:de:b5:de:09:0e:5c:3a: f9:77:f4:23:a0:84:19:6d:86:34:16:56:de:97:1a: 25:fa:90:a0:50:5a:b9:2d:b7:79:42:8f:9b:96:f7: a3:1d:b5:f0:48:89:7f:00:10:7b:6a:78:5e:97:18: fe:58:79:40:51:62:56:32:d1:ab:66:de:e1:67:f6: 10:35:11:06:82:3a:da:c1:ae:93:b8:72:ce:7c:9f: 59:d0:0b:40:2b:29:95:7b:6d:04:32:6c:7f:ce:6a: ef:a3:32:ef:4a:2f:a0:43:e5:59:13:b8:43:39:36: 84:12:27:1e:bd:a9:5e:c9:15:19:59:e4:c2:a4:1b: f1:41:75:41:4d:99:63:fb:8d:ea:af:07:48:28:53: 16:6c:f8:65:ea:8a:52:be:fe:c0:ef:c8:48:f1:80: 7e:2b:31:29:95:4e:0d:4f:c7:ae:de:d5:06:ff:70: 68:96:0b:89:75:8c:7d:fb:11:83:0b:1e:d9:7f:e4: 5b:c8:c7:18:08:49:0c:d7:79:03:52:e0:6d:1f:a5: 09:9b:d3:dc:9b:31:4c:cc:98:ee:75:37:f3:32:75: 32:a7:c5:93:ef:e6:77:44:bb:4a:c7:81:82:e9:fe: 0b:88:cb:05:ac:00:ee:7f:18:c7:95:81:64:80:eb: 9d:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:DD:30:7C:A9:32:EB:18:B1:A2:36:BD:44:B2:A9:3F:63:82:69:2E X509v3 Authority Key Identifier: keyid:BE:0B:B7:88:69:CD:B2:AD:0C:97:1A:6A:85:8A:30:21:3E:AE:C4:7D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/ac143387-f013-4922-838e-e18864be1e4a/0/BE0BB78869CDB2AD0C971A6A858A30213EAEC47D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vgu3iGnNsq0MlxpqhYowIT6uxH0.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ac143387-f013-4922-838e-e18864be1e4a/0/BE0BB78869CDB2AD0C971A6A858A30213EAEC47D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:13:e5:2b:15:bf:6f:c3:d5:dc:be:43:75:69:b4:52:04:ad: a0:e5:09:d0:32:a7:6e:77:2a:a5:53:09:26:d5:6a:7e:eb:1d: fc:e9:7e:23:39:8f:65:88:64:60:30:77:6f:93:c8:00:d4:8c: 83:38:1d:e9:b9:62:4f:64:8b:22:9b:61:47:9b:0a:c5:d0:8e: 9a:3f:c1:79:9f:54:b1:08:dd:aa:43:41:56:05:c9:21:b7:9b: 01:4f:93:31:14:73:e1:2d:50:9c:2d:9e:1a:e8:68:72:37:2a: 09:9d:fb:2e:71:3c:21:ea:74:52:b3:d4:1c:c1:ff:62:21:fc: 59:42:ad:98:20:1d:65:ed:d6:23:2d:fb:83:44:10:b5:67:5e: ca:00:cc:60:57:7c:b4:f5:ca:76:fb:ff:af:57:e9:7c:7f:ec: 2a:cb:9a:0f:35:40:32:2d:b0:9d:f3:da:2c:86:32:1a:f0:c4: a1:c6:6f:f2:d1:ea:30:43:38:28:b8:e9:92:b1:9e:33:83:74: 8b:7b:ca:cd:9d:26:52:e3:6e:75:9a:d6:c5:1b:06:72:12:5c: 74:8b:61:10:84:a2:39:92:39:79:0f:f5:89:12:d2:ae:f0:71: 8e:c0:86:9e:33:9c:42:ac:ab:48:f9:6b:7f:4f:15:e1:d3:8d: 8d:cf:0b:fd -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUbd1bO2RKbw0JKBSWT4qc9YIh25EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYmUwYmI3ODg2OWNkYjJhZDBjOTcxYTZhODU4YTMwMjEz ZWFlYzQ3ZDAeFw0yNjAzMDIwMjEyNTlaFw0yNjAzMDMwNTI5NTlaMDMxMTAvBgNV BAMTKDQ4REQzMDdDQTkzMkVCMThCMUEyMzZCRDQ0QjJBOTNGNjM4MjY5MkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtqbve2ajQ3rXeCQ5cOvl39COg hBlthjQWVt6XGiX6kKBQWrktt3lCj5uW96MdtfBIiX8AEHtqeF6XGP5YeUBRYlYy 0atm3uFn9hA1EQaCOtrBrpO4cs58n1nQC0ArKZV7bQQybH/Oau+jMu9KL6BD5VkT uEM5NoQSJx69qV7JFRlZ5MKkG/FBdUFNmWP7jeqvB0goUxZs+GXqilK+/sDvyEjx gH4rMSmVTg1Px67e1Qb/cGiWC4l1jH37EYMLHtl/5FvIxxgISQzXeQNS4G0fpQmb 09ybMUzMmO51N/MydTKnxZPv5ndEu0rHgYLp/guIywWsAO5/GMeVgWSA652pAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUSN0wfKky6xixoja9RLKpP2OCaS4wHwYDVR0j BBgwFoAUvgu3iGnNsq0MlxpqhYowIT6uxH0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYWMxNDMzODctZjAxMy00OTIyLTgzOGUtZTE4ODY0YmUx ZTRhLzAvQkUwQkI3ODg2OUNEQjJBRDBDOTcxQTZBODU4QTMwMjEzRUFFQzQ3RC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3ZndTNpR25Oc3EwTWx4cHFoWW93SVQ2 dXhIMC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9hYzE0MzM4Ny1m MDEzLTQ5MjItODM4ZS1lMTg4NjRiZTFlNGEvMC9CRTBCQjc4ODY5Q0RCMkFEMEM5 NzFBNkE4NThBMzAyMTNFQUVDNDdELm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKxPlKxW/b8PV3L5DdWm0 UgStoOUJ0DKnbncqpVMJJtVqfusd/Ol+IzmPZYhkYDB3b5PIANSMgzgd6bliT2SL IpthR5sKxdCOmj/BeZ9UsQjdqkNBVgXJIbebAU+TMRRz4S1QnC2eGuhocjcqCZ37 LnE8Iep0UrPUHMH/YiH8WUKtmCAdZe3WIy37g0QQtWdeygDMYFd8tPXKdvv/r1fp fH/sKsuaDzVAMi2wnfPaLIYyGvDEocZv8tHqMEM4KLjpkrGeM4N0i3vKzZ0mUuNu dZrWxRsGchJcdIthEISiOZI5eQ/1iRLSrvBxjsCGnjOcQqyrSPlrf08V4dONjc8L /Q== -----END CERTIFICATE-----Generated at Mon Mar 2 18:12:36 2026 by rpki-client