$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ac143387-f013-4922-838e-e18864be1e4a/0/BE0BB78869CDB2AD0C971A6A858A30213EAEC47D.mft File: BE0BB78869CDB2AD0C971A6A858A30213EAEC47D.mft (raw, json) Hash identifier: 0Jk0F28gR27rpBacrlcNw4rS3G8qafSBTQf8I2+qrGo= Subject key identifier: 36:BD:BF:B7:9D:A8:FE:58:C1:D2:4F:80:7B:18:58:BB:39:42:EB:FF Authority key identifier: BE:0B:B7:88:69:CD:B2:AD:0C:97:1A:6A:85:8A:30:21:3E:AE:C4:7D Certificate issuer: /CN=be0bb78869cdb2ad0c971a6a858a30213eaec47d Certificate serial: 75CE3633C7844633E7FD5E23F0DA7DEAAE30C2C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vgu3iGnNsq0MlxpqhYowIT6uxH0.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ac143387-f013-4922-838e-e18864be1e4a/0/BE0BB78869CDB2AD0C971A6A858A30213EAEC47D.mft Manifest number: 02CD Signing time: Tue 28 Jul 2026 12:38:30 +0000 Manifest this update: Tue 28 Jul 2026 12:33:30 +0000 Manifest next update: Wed 29 Jul 2026 15:22:30 +0000 Files and hashes: 1: 3137382e3234382e37392e302f32342d3234203d3e20313335333932.roa (hash: YE6bAehCH8ruShBFJdgU4NCX9qGkifZ5lR9x24K4y2c=) 2: 3139332e3136392e37382e302f32332d3234203d3e203530343334.roa (hash: Ozt3uRUP9szxnq6Y/BlUHZo63N6fYBwOlNZT3blQYnY=) 3: 3137382e3234382e37342e302f32342d3234203d3e20323035343839.roa (hash: D0Owph/oL3mL5VwchRzGIXC3cMHzv1rxTr5Ojjef5Y4=) 4: 3137382e3234382e37322e302f32342d3234203d3e20313534343032.roa (hash: CmSSgp2rOmRDakFss7YxyL+V/oYFT12bvLwpMMXS8Tk=) 5: 3137382e3234382e37382e302f32342d3234203d3e20323132333834.roa (hash: sj3Mzc5uAM4fOfd+NlVLzXe7KVKZIN7ymsHfPBwN4+I=) 6: 3137382e3234382e37332e302f32342d3234203d3e20313431393638.roa (hash: 7xtsmIrFnzH8qIFMhr9PIJTBifAuGHXQXdM1XzYoP7s=) 7: 3139352e34322e3131322e302f32342d3234203d3e203438343335.roa (hash: tbJb4NeQxaqdUwJnx0mi5eYh93xW1wx/PyQm3nNKQlk=) 8: 3139352e34322e3131332e302f32342d3234203d3e203438343335.roa (hash: pchbJm+Br/uCuzzDsgfU4W3Dq3tZwJWDYbuhydm/Eyc=) 9: BE0BB78869CDB2AD0C971A6A858A30213EAEC47D.crl (hash: 0tRjQsr/T5Q0PJypH9s/x8FCk2cVF2i7Kwv8Fle1Hf0=) 10: 3137382e3234382e37352e302f32342d3234203d3e20313939303538.roa (hash: 32SDZVJ37JJ5kdrs24paGjp5boRcUJ2fYJyMfyL4cw4=) 11: 3139352e34322e3131322e302f32332d3233203d3e203438343335.roa (hash: SO5iYpxppDi067L1otYSj19apV4zwNvimr95590708A=) 12: 3137382e3234382e37372e302f32342d3234203d3e20323133373833.roa (hash: QA/AmBx/vt6J6eDW0Y/+kHvJueiOPr7O1NVAvBIe9GY=) 13: 3139332e3136392e37382e302f32332d3234203d3e203438343335.roa (hash: 7BonRadnccE5oClU90cDWqb2zFnrszRs5TdXh7lrUTg=) 14: 3137382e3234382e37362e302f32342d3234203d3e203432383331.roa (hash: FQiM0Ff1DCSzma5DiHQMrsfmN7QznFFoSzW1a5q9Q2M=) 15: 3139332e3136392e37382e302f32332d3233203d3e203438343335.roa (hash: CCPO6h/MpNSX08leEvwwJIjESWw2OEutpIc59PlyY9E=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ac143387-f013-4922-838e-e18864be1e4a/0/BE0BB78869CDB2AD0C971A6A858A30213EAEC47D.crl rsync://rsync.paas.rpki.ripe.net/repository/ac143387-f013-4922-838e-e18864be1e4a/0/BE0BB78869CDB2AD0C971A6A858A30213EAEC47D.mft rsync://rpki.ripe.net/repository/DEFAULT/vgu3iGnNsq0MlxpqhYowIT6uxH0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 29 Jul 2026 14:18:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:ce:36:33:c7:84:46:33:e7:fd:5e:23:f0:da:7d:ea:ae:30:c2:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=be0bb78869cdb2ad0c971a6a858a30213eaec47d Validity Not Before: Jul 28 12:33:30 2026 GMT Not After : Jul 29 15:22:30 2026 GMT Subject: CN=36BDBFB79DA8FE58C1D24F807B1858BB3942EBFF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:fb:49:04:b6:9a:7f:f8:a9:66:20:d8:bf:a2: f2:25:13:56:92:b0:d2:00:14:d1:e3:7d:73:af:4b: b7:f9:ae:69:60:dd:59:4b:21:a0:c5:55:60:a8:57: d4:c0:aa:97:d3:76:ba:e8:be:2c:f3:82:bc:1b:e7: f5:bb:3e:50:7c:12:4e:af:c3:35:e2:92:e5:1f:ae: 27:1a:30:4c:c1:68:b2:f2:d5:11:46:56:4c:74:69: e1:aa:82:39:08:bd:57:d1:a5:a1:53:e0:fa:1d:bc: 9c:bf:2c:86:e3:29:48:78:9c:62:b8:dc:9d:e6:e6: ee:b7:1e:c5:d8:c8:a7:97:3c:d4:d4:1b:80:43:b9: bb:e5:fa:11:a1:8e:3c:e5:b2:f7:4a:10:b6:f3:bb: 71:3f:1a:ae:27:6e:28:46:cd:0b:30:90:15:47:b5: c7:78:05:cf:6a:eb:42:38:8b:2a:d0:79:bf:df:23: b9:92:52:dc:57:9c:ac:1c:47:11:aa:4e:0c:b7:c9: a7:76:19:6f:7f:10:42:17:04:c8:a7:c9:b2:6a:d0: 00:27:e2:3c:c5:9d:ea:00:3a:71:7d:6b:ce:46:9d: c7:19:12:a7:64:2a:c2:9f:2f:4c:f0:0a:15:17:1b: 1b:48:21:69:28:8c:f9:89:23:6a:9c:d4:3b:1b:8d: 8e:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:BD:BF:B7:9D:A8:FE:58:C1:D2:4F:80:7B:18:58:BB:39:42:EB:FF X509v3 Authority Key Identifier: keyid:BE:0B:B7:88:69:CD:B2:AD:0C:97:1A:6A:85:8A:30:21:3E:AE:C4:7D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/ac143387-f013-4922-838e-e18864be1e4a/0/BE0BB78869CDB2AD0C971A6A858A30213EAEC47D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vgu3iGnNsq0MlxpqhYowIT6uxH0.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ac143387-f013-4922-838e-e18864be1e4a/0/BE0BB78869CDB2AD0C971A6A858A30213EAEC47D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ab:8a:f2:a1:68:fc:9f:ec:a2:08:18:07:11:7d:c8:22:e5:cf: 74:dc:cd:98:c8:43:43:0f:73:53:e3:a1:d3:4d:8f:eb:d3:9c: 7c:61:4b:91:95:54:f4:02:09:48:4c:01:68:eb:68:72:77:25: 22:3a:6f:d3:17:4a:5b:cd:d3:72:99:38:1e:4d:b9:1c:d4:fb: 27:70:d1:17:90:c5:d1:16:1f:fa:96:39:a5:f5:f1:25:fb:f5: 38:2d:7f:ba:10:c4:87:11:f6:1d:5f:55:10:35:5d:1e:61:13: ba:6b:73:88:8b:f3:1a:87:f4:66:bb:03:08:d7:77:31:0c:09: fe:7f:fb:af:2c:80:04:9b:f7:6a:04:52:cb:44:13:e0:a1:67: 8a:1d:4c:77:3b:83:6d:7d:6a:85:70:1d:cb:e8:2d:5f:3a:3c: 9d:38:3d:ee:f9:75:e1:92:2d:92:33:23:52:27:97:a7:37:a9: 2d:bb:ea:27:fe:a0:f1:f1:25:59:6b:f8:29:c9:0b:28:fd:0a: ea:ce:61:95:96:84:70:f8:8d:c6:5c:80:61:f1:e7:3a:ed:d8: 07:01:24:a8:46:6b:41:7d:74:62:51:fa:75:fb:a7:d9:81:80: 8e:9d:47:19:47:db:39:45:3f:c6:9c:f2:36:30:18:15:25:77: a4:cc:62:48 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUdc42M8eERjPn/V4j8Np96q4wwsUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYmUwYmI3ODg2OWNkYjJhZDBjOTcxYTZhODU4YTMwMjEz ZWFlYzQ3ZDAeFw0yNjA3MjgxMjMzMzBaFw0yNjA3MjkxNTIyMzBaMDMxMTAvBgNV BAMTKDM2QkRCRkI3OURBOEZFNThDMUQyNEY4MDdCMTg1OEJCMzk0MkVCRkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7+0kEtpp/+KlmINi/ovIlE1aS sNIAFNHjfXOvS7f5rmlg3VlLIaDFVWCoV9TAqpfTdrrovizzgrwb5/W7PlB8Ek6v wzXikuUfricaMEzBaLLy1RFGVkx0aeGqgjkIvVfRpaFT4PodvJy/LIbjKUh4nGK4 3J3m5u63HsXYyKeXPNTUG4BDubvl+hGhjjzlsvdKELbzu3E/Gq4nbihGzQswkBVH tcd4Bc9q60I4iyrQeb/fI7mSUtxXnKwcRxGqTgy3yad2GW9/EEIXBMinybJq0AAn 4jzFneoAOnF9a85GnccZEqdkKsKfL0zwChUXGxtIIWkojPmJI2qc1DsbjY4TAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUNr2/t52o/ljB0k+AexhYuzlC6/8wHwYDVR0j BBgwFoAUvgu3iGnNsq0MlxpqhYowIT6uxH0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYWMxNDMzODctZjAxMy00OTIyLTgzOGUtZTE4ODY0YmUx ZTRhLzAvQkUwQkI3ODg2OUNEQjJBRDBDOTcxQTZBODU4QTMwMjEzRUFFQzQ3RC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3ZndTNpR25Oc3EwTWx4cHFoWW93SVQ2 dXhIMC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9hYzE0MzM4Ny1m MDEzLTQ5MjItODM4ZS1lMTg4NjRiZTFlNGEvMC9CRTBCQjc4ODY5Q0RCMkFEMEM5 NzFBNkE4NThBMzAyMTNFQUVDNDdELm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAq4ryoWj8n+yiCBgHEX3I IuXPdNzNmMhDQw9zU+Oh002P69OcfGFLkZVU9AIJSEwBaOtocnclIjpv0xdKW83T cpk4Hk25HNT7J3DRF5DF0RYf+pY5pfXxJfv1OC1/uhDEhxH2HV9VEDVdHmETumtz iIvzGof0ZrsDCNd3MQwJ/n/7ryyABJv3agRSy0QT4KFnih1MdzuDbX1qhXAdy+gt Xzo8nTg97vl14ZItkjMjUieXpzepLbvqJ/6g8fElWWv4KckLKP0K6s5hlZaEcPiN xlyAYfHnOu3YBwEkqEZrQX10YlH6dfun2YGAjp1HGUfbOUU/xpzyNjAYFSV3pMxi SA== -----END CERTIFICATE-----Generated at Tue Jul 28 22:13:41 2026 by rpki-client