$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/531e9720-0b62-43a8-8e1f-230684eaf9af/3/0BC6D225F0CE3E607712A9A98C4561912F3432B6.mft File: 0BC6D225F0CE3E607712A9A98C4561912F3432B6.mft (raw, json) Hash identifier: HcdTUYyuwg9ZIg9Wp3n4LauAK4zsgxBYCkuwZWaaWpA= Subject key identifier: 94:4B:F0:A0:94:77:79:99:B6:6D:EA:1D:78:BC:EA:FE:A0:28:30:2F Authority key identifier: 0B:C6:D2:25:F0:CE:3E:60:77:12:A9:A9:8C:45:61:91:2F:34:32:B6 Certificate issuer: /CN=0BC6D225F0CE3E607712A9A98C4561912F3432B6 Certificate serial: 244C2DA0F50F6A20418CFD2E88B7C685DE25160D Authority info access: rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/0BC6D225F0CE3E607712A9A98C4561912F3432B6.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/531e9720-0b62-43a8-8e1f-230684eaf9af/3/0BC6D225F0CE3E607712A9A98C4561912F3432B6.mft Manifest number: 0230 Signing time: Tue 29 Sep 2026 08:56:39 +0000 Manifest this update: Tue 29 Sep 2026 08:51:39 +0000 Manifest next update: Wed 30 Sep 2026 10:28:39 +0000 Files and hashes: 1: 326130623a346530373a316330303a3a2f34382d3438203d3e20313531373034.roa (hash: 9BHpytc7pXx6aIvZB3fYpuWzlGukQUf0KjUB6iLDphc=) 2: 326130623a346530373a316330353a3a2f34382d3438203d3e20313531373034.roa (hash: klgVth/TtNnRat+Cjm7g/vn2bJkgb8SLrowCN2zlal8=) 3: 326130623a346530373a316330333a3a2f34382d3438203d3e20323134343835.roa (hash: zPqi+GWy7GJ+kq9mxidL3Cv/L27NlElS9NX8D2AsBYM=) 4: 326130623a346530373a316330313a3a2f34382d3438203d3e20313531373034.roa (hash: 0ULXldxk/0eSWpclGLE70Em7/bissXZuMoO5VQhOO28=) 5: 326130623a346530373a316330343a3a2f34382d3438203d3e20313531373034.roa (hash: YHC+/trBPqR3Izb59lUeCAauUW49i7hzZ9zUDI0VhRM=) 6: 326130623a346530373a316330323a3a2f34382d3438203d3e20313531373034.roa (hash: KL/ldm3b1AJMdY1QolVaUnbSkBg2mqpZUeWvBmihjnM=) 7: 0BC6D225F0CE3E607712A9A98C4561912F3432B6.crl (hash: 0hShKUtKIGpbj99i/G8IBikxSlOvvnHlzURbLkaz+nQ=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/531e9720-0b62-43a8-8e1f-230684eaf9af/3/0BC6D225F0CE3E607712A9A98C4561912F3432B6.crl rsync://rsync.paas.rpki.ripe.net/repository/531e9720-0b62-43a8-8e1f-230684eaf9af/3/0BC6D225F0CE3E607712A9A98C4561912F3432B6.mft rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/0BC6D225F0CE3E607712A9A98C4561912F3432B6.cer rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.mft rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 29 Sep 2026 23:13:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:4c:2d:a0:f5:0f:6a:20:41:8c:fd:2e:88:b7:c6:85:de:25:16:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0BC6D225F0CE3E607712A9A98C4561912F3432B6 Validity Not Before: Sep 29 08:51:39 2026 GMT Not After : Sep 30 10:28:39 2026 GMT Subject: CN=944BF0A094777999B66DEA1D78BCEAFEA028302F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:46:bc:bd:7a:b7:29:d1:d9:17:1c:ec:d3:52: 1e:67:f6:2c:58:f7:ca:5e:01:38:69:95:76:37:e8: d8:a1:a7:ad:72:f7:73:87:82:19:b7:94:3f:55:ea: c7:04:2c:1e:04:f7:de:55:5d:67:aa:32:ad:55:52: 9c:fd:95:fe:37:29:9b:28:75:08:bc:37:60:85:65: 7a:70:66:68:ef:be:82:db:12:a5:22:2d:65:00:e9: 62:49:2f:a7:26:d0:fe:01:bc:2d:cc:63:ab:f3:bc: d1:2a:7e:45:dd:63:eb:1f:e1:97:d3:d2:4b:c1:fe: b0:ae:b5:22:d9:66:21:90:22:91:03:14:09:bc:85: fb:4f:e4:ab:19:ce:46:c6:72:4b:c9:46:ed:32:70: a2:6b:52:41:10:fc:b5:1f:34:88:cb:ff:2a:b5:9c: 2b:d6:9a:df:8b:13:f9:e8:c7:c2:ce:b2:dd:f2:75: 62:97:33:17:10:30:54:55:26:1b:cc:63:f1:ec:d4: 6c:70:dc:d4:21:bb:de:f9:fc:bd:80:72:41:99:81: 1a:17:a0:3c:e3:cf:46:7e:49:90:64:4e:d1:0b:e7: 45:f5:ac:a7:71:b7:b3:d1:b9:19:15:b2:c7:1c:1f: 13:2a:b5:87:0c:f6:a6:75:0f:d7:d2:1d:2f:e2:b3: 16:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:4B:F0:A0:94:77:79:99:B6:6D:EA:1D:78:BC:EA:FE:A0:28:30:2F X509v3 Authority Key Identifier: keyid:0B:C6:D2:25:F0:CE:3E:60:77:12:A9:A9:8C:45:61:91:2F:34:32:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/531e9720-0b62-43a8-8e1f-230684eaf9af/3/0BC6D225F0CE3E607712A9A98C4561912F3432B6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/0BC6D225F0CE3E607712A9A98C4561912F3432B6.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/531e9720-0b62-43a8-8e1f-230684eaf9af/3/0BC6D225F0CE3E607712A9A98C4561912F3432B6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9b:6d:88:d6:c5:4e:95:1b:c5:d0:fc:73:4f:25:41:07:d6:1d: 41:65:11:cb:4f:c4:54:af:cb:87:9f:0d:d9:88:d5:f5:83:9b: 3f:63:ae:6b:2c:ad:80:21:65:4a:ae:2a:cf:2c:c1:fa:10:5c: c9:a3:9f:b8:22:4f:20:cb:5c:50:44:1b:d8:97:7c:85:51:a8: a2:9e:cf:2d:52:47:10:16:4f:22:77:81:63:6c:7c:84:31:25: af:c9:c1:26:c6:74:98:d4:35:42:21:eb:8b:c0:f9:78:e8:d2: 4b:91:d8:7a:7e:98:39:ad:c7:cc:32:31:9f:4a:87:19:3f:97: e9:79:9d:16:8f:30:05:d0:35:8a:1b:be:ad:58:8d:e0:39:4d: 40:3e:d3:24:04:ed:c2:3a:4b:30:1c:54:1d:14:02:f2:9e:85: 6d:3b:b9:15:c9:7f:7d:8b:17:80:5e:eb:b1:d3:af:40:52:93: f2:45:cd:e7:5f:d0:29:87:2d:64:d6:7f:f5:46:e0:00:ce:1e: 09:cd:1d:da:13:41:b7:eb:50:4f:3c:d6:d7:7b:e8:bd:ea:a4: 2a:de:ac:ac:de:f3:3c:da:13:e2:64:75:89:c3:66:1b:dd:c1: 5a:ab:ab:47:45:af:6c:49:32:69:74:f7:7f:14:2f:7c:a1:2e: 1e:f8:63:e6 -----BEGIN CERTIFICATE----- MIIFbTCCBFWgAwIBAgIUJEwtoPUPaiBBjP0uiLfGhd4lFg0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEJDNkQyMjVGMENFM0U2MDc3MTJBOUE5OEM0NTYxOTEy RjM0MzJCNjAeFw0yNjA5MjkwODUxMzlaFw0yNjA5MzAxMDI4MzlaMDMxMTAvBgNV BAMTKDk0NEJGMEEwOTQ3Nzc5OTlCNjZERUExRDc4QkNFQUZFQTAyODMwMkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1Rry9ercp0dkXHOzTUh5n9ixY 98peAThplXY36Nihp61y93OHghm3lD9V6scELB4E995VXWeqMq1VUpz9lf43KZso dQi8N2CFZXpwZmjvvoLbEqUiLWUA6WJJL6cm0P4BvC3MY6vzvNEqfkXdY+sf4ZfT 0kvB/rCutSLZZiGQIpEDFAm8hftP5KsZzkbGckvJRu0ycKJrUkEQ/LUfNIjL/yq1 nCvWmt+LE/nox8LOst3ydWKXMxcQMFRVJhvMY/Hs1Gxw3NQhu975/L2AckGZgRoX oDzjz0Z+SZBkTtEL50X1rKdxt7PRuRkVssccHxMqtYcM9qZ1D9fSHS/isxbfAgMB AAGjggJ3MIICczAdBgNVHQ4EFgQUlEvwoJR3eZm2beodeLzq/qAoMC8wHwYDVR0j BBgwFoAUC8bSJfDOPmB3EqmpjEVhkS80MrYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNTMxZTk3MjAtMGI2Mi00M2E4LThlMWYtMjMwNjg0ZWFm OWFmLzMvMEJDNkQyMjVGMENFM0U2MDc3MTJBOUE5OEM0NTYxOTEyRjM0MzJCNi5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzgxYTQ0NTY2NDU4ZTQ1NzhiNjdlZWQz MDUzZjgyMGY1LzEvMEJDNkQyMjVGMENFM0U2MDc3MTJBOUE5OEM0NTYxOTEyRjM0 MzJCNi5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS81MzFlOTcyMC0w YjYyLTQzYTgtOGUxZi0yMzA2ODRlYWY5YWYvMy8wQkM2RDIyNUYwQ0UzRTYwNzcx MkE5QTk4QzQ1NjE5MTJGMzQzMkI2Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAm22I1sVOlRvF0PxzTyVB B9YdQWURy0/EVK/Lh58N2YjV9YObP2OuayytgCFlSq4qzyzB+hBcyaOfuCJPIMtc UEQb2Jd8hVGoop7PLVJHEBZPIneBY2x8hDElr8nBJsZ0mNQ1QiHri8D5eOjSS5HY en6YOa3HzDIxn0qHGT+X6XmdFo8wBdA1ihu+rViN4DlNQD7TJATtwjpLMBxUHRQC 8p6FbTu5Fcl/fYsXgF7rsdOvQFKT8kXN51/QKYctZNZ/9UbgAM4eCc0d2hNBt+tQ TzzW13voveqkKt6srN7zPNoT4mR1icNmG93BWqurR0WvbEkyaXT3fxQvfKEuHvhj 5g== -----END CERTIFICATE-----Generated at Tue Sep 29 13:22:24 2026 by rpki-client