$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/531e9720-0b62-43a8-8e1f-230684eaf9af/3/0BC6D225F0CE3E607712A9A98C4561912F3432B6.mft File: 0BC6D225F0CE3E607712A9A98C4561912F3432B6.mft (raw, json) Hash identifier: XvZSkM6uEeOMjeVggtv1hRCRIHVvym86Cf8pfQmL4iU= Subject key identifier: CB:76:78:B6:3C:23:32:47:0D:68:1C:F9:4C:C5:FC:88:71:E8:12:8C Authority key identifier: 0B:C6:D2:25:F0:CE:3E:60:77:12:A9:A9:8C:45:61:91:2F:34:32:B6 Certificate issuer: /CN=0BC6D225F0CE3E607712A9A98C4561912F3432B6 Certificate serial: 7D6D2725436E9A831015C7D4EFCFEB0F9221238D Authority info access: rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/0BC6D225F0CE3E607712A9A98C4561912F3432B6.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/531e9720-0b62-43a8-8e1f-230684eaf9af/3/0BC6D225F0CE3E607712A9A98C4561912F3432B6.mft Manifest number: 01D5 Signing time: Thu 23 Jul 2026 10:55:42 +0000 Manifest this update: Thu 23 Jul 2026 10:50:42 +0000 Manifest next update: Fri 24 Jul 2026 13:00:42 +0000 Files and hashes: 1: 0BC6D225F0CE3E607712A9A98C4561912F3432B6.crl (hash: 2mWD6jJ4QYZZXiKJIuYJ1T0C9XfOZ7Tr0/kkU1wzNi4=) 2: 326130623a346530373a316330303a3a2f34382d3438203d3e20313531373034.roa (hash: 9BHpytc7pXx6aIvZB3fYpuWzlGukQUf0KjUB6iLDphc=) 3: 326130623a346530373a316330323a3a2f34382d3438203d3e20313531373034.roa (hash: KL/ldm3b1AJMdY1QolVaUnbSkBg2mqpZUeWvBmihjnM=) 4: 326130623a346530373a316330313a3a2f34382d3438203d3e20313531373034.roa (hash: 0ULXldxk/0eSWpclGLE70Em7/bissXZuMoO5VQhOO28=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/531e9720-0b62-43a8-8e1f-230684eaf9af/3/0BC6D225F0CE3E607712A9A98C4561912F3432B6.crl rsync://rsync.paas.rpki.ripe.net/repository/531e9720-0b62-43a8-8e1f-230684eaf9af/3/0BC6D225F0CE3E607712A9A98C4561912F3432B6.mft rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/0BC6D225F0CE3E607712A9A98C4561912F3432B6.cer rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.mft rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 24 Jul 2026 09:17:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:6d:27:25:43:6e:9a:83:10:15:c7:d4:ef:cf:eb:0f:92:21:23:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0BC6D225F0CE3E607712A9A98C4561912F3432B6 Validity Not Before: Jul 23 10:50:42 2026 GMT Not After : Jul 24 13:00:42 2026 GMT Subject: CN=CB7678B63C2332470D681CF94CC5FC8871E8128C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:64:39:76:a8:59:41:ab:e4:3c:bd:36:13:43: b2:c4:5c:29:17:37:5b:8a:12:de:fd:8d:f8:16:8a: 44:2c:43:13:26:6a:21:c4:65:28:0b:e5:46:40:7c: 46:e8:3c:3e:2f:6b:8e:b7:7e:d7:c0:4d:a8:8e:eb: 7d:ba:95:79:cf:d3:43:f4:4b:1c:c6:ab:6d:d3:83: 8e:53:74:59:cb:2d:76:50:f2:9a:35:80:a9:85:92: f2:3e:fe:7b:a8:70:c3:76:c7:f9:7d:6c:38:e9:e9: 16:6c:00:db:f0:a0:73:d2:27:5d:3c:a4:ee:45:c9: 64:92:b8:22:dc:f3:a7:28:00:7d:fa:9c:2a:51:b2: 53:4d:65:23:fe:db:29:02:bd:03:b9:23:0a:4a:5d: 52:9c:dd:68:8a:c1:21:a4:07:9f:79:fe:d3:00:81: 11:44:98:95:2c:92:3a:f7:6e:ce:d4:97:3e:aa:5b: 5d:5c:9c:29:b4:e6:36:b6:50:ba:10:70:28:8a:67: 03:68:22:db:19:e1:1b:68:fe:04:23:dc:90:db:37: 46:55:c1:4e:82:7b:45:f7:c0:a8:c9:11:bf:21:93: 8a:42:08:45:44:f6:5a:53:b5:0f:07:b6:58:06:d0: 62:bc:cb:45:b8:4e:f2:93:2e:25:ac:9d:71:24:0f: 5f:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:76:78:B6:3C:23:32:47:0D:68:1C:F9:4C:C5:FC:88:71:E8:12:8C X509v3 Authority Key Identifier: keyid:0B:C6:D2:25:F0:CE:3E:60:77:12:A9:A9:8C:45:61:91:2F:34:32:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/531e9720-0b62-43a8-8e1f-230684eaf9af/3/0BC6D225F0CE3E607712A9A98C4561912F3432B6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/0BC6D225F0CE3E607712A9A98C4561912F3432B6.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/531e9720-0b62-43a8-8e1f-230684eaf9af/3/0BC6D225F0CE3E607712A9A98C4561912F3432B6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:97:86:4b:ab:fc:b8:12:fd:b4:36:be:74:e8:20:5b:57:45: 05:4f:7e:c8:76:01:36:93:6a:fa:56:cb:50:5f:75:74:fa:a6: c1:85:c1:41:6b:d6:1a:32:6b:77:58:a4:a4:1e:cf:07:f3:87: 76:7e:e5:13:39:0d:59:f0:06:1d:e5:1e:96:b4:72:02:ed:aa: 23:29:91:5c:ec:ad:6f:61:e8:c5:f4:e8:8b:a0:1c:f5:45:25: f8:4a:c4:4f:6e:76:4e:c5:de:79:7e:f0:81:29:e1:57:2a:cc: df:12:94:d3:d7:35:59:0e:40:77:32:67:21:6c:f6:ea:4d:87: 29:fa:b5:a4:2b:28:db:dd:ac:aa:df:cb:90:a8:7c:55:81:87: 80:0d:97:06:e0:a2:83:89:7a:83:38:2c:22:9d:a3:d2:00:61: 5c:1d:d2:ca:b4:43:22:88:18:7b:d4:96:61:eb:c3:93:f6:be: eb:19:fd:27:ad:d3:1f:f9:94:a9:e1:4a:99:fb:84:54:80:1a: af:ce:67:d8:9d:31:db:07:c4:46:8e:3a:fe:fa:29:41:8a:9e: 6b:bd:0b:ae:4b:be:bc:7c:69:22:6c:d1:74:41:5a:fc:a6:cc: 59:e2:38:4f:61:eb:39:79:f3:a5:f0:30:8d:26:c6:7c:8f:93: 31:fc:14:38 -----BEGIN CERTIFICATE----- MIIFbTCCBFWgAwIBAgIUfW0nJUNumoMQFcfU78/rD5IhI40wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEJDNkQyMjVGMENFM0U2MDc3MTJBOUE5OEM0NTYxOTEy RjM0MzJCNjAeFw0yNjA3MjMxMDUwNDJaFw0yNjA3MjQxMzAwNDJaMDMxMTAvBgNV BAMTKENCNzY3OEI2M0MyMzMyNDcwRDY4MUNGOTRDQzVGQzg4NzFFODEyOEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDZDl2qFlBq+Q8vTYTQ7LEXCkX N1uKEt79jfgWikQsQxMmaiHEZSgL5UZAfEboPD4va463ftfATaiO6326lXnP00P0 SxzGq23Tg45TdFnLLXZQ8po1gKmFkvI+/nuocMN2x/l9bDjp6RZsANvwoHPSJ108 pO5FyWSSuCLc86coAH36nCpRslNNZSP+2ykCvQO5IwpKXVKc3WiKwSGkB595/tMA gRFEmJUskjr3bs7Ulz6qW11cnCm05ja2ULoQcCiKZwNoItsZ4Rto/gQj3JDbN0ZV wU6Ce0X3wKjJEb8hk4pCCEVE9lpTtQ8HtlgG0GK8y0W4TvKTLiWsnXEkD1//AgMB AAGjggJ3MIICczAdBgNVHQ4EFgQUy3Z4tjwjMkcNaBz5TMX8iHHoEowwHwYDVR0j BBgwFoAUC8bSJfDOPmB3EqmpjEVhkS80MrYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNTMxZTk3MjAtMGI2Mi00M2E4LThlMWYtMjMwNjg0ZWFm OWFmLzMvMEJDNkQyMjVGMENFM0U2MDc3MTJBOUE5OEM0NTYxOTEyRjM0MzJCNi5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzgxYTQ0NTY2NDU4ZTQ1NzhiNjdlZWQz MDUzZjgyMGY1LzEvMEJDNkQyMjVGMENFM0U2MDc3MTJBOUE5OEM0NTYxOTEyRjM0 MzJCNi5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS81MzFlOTcyMC0w YjYyLTQzYTgtOGUxZi0yMzA2ODRlYWY5YWYvMy8wQkM2RDIyNUYwQ0UzRTYwNzcx MkE5QTk4QzQ1NjE5MTJGMzQzMkI2Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABJeGS6v8uBL9tDa+dOgg W1dFBU9+yHYBNpNq+lbLUF91dPqmwYXBQWvWGjJrd1ikpB7PB/OHdn7lEzkNWfAG HeUelrRyAu2qIymRXOytb2HoxfToi6Ac9UUl+ErET252TsXeeX7wgSnhVyrM3xKU 09c1WQ5AdzJnIWz26k2HKfq1pCso292sqt/LkKh8VYGHgA2XBuCig4l6gzgsIp2j 0gBhXB3SyrRDIogYe9SWYevDk/a+6xn9J63TH/mUqeFKmfuEVIAar85n2J0x2wfE Ro46/vopQYqea70Lrku+vHxpImzRdEFa/KbMWeI4T2HrOXnzpfAwjSbGfI+TMfwU OA== -----END CERTIFICATE-----Generated at Thu Jul 23 21:46:15 2026 by rpki-client