$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/531e9720-0b62-43a8-8e1f-230684eaf9af/3/0BC6D225F0CE3E607712A9A98C4561912F3432B6.mft File: 0BC6D225F0CE3E607712A9A98C4561912F3432B6.mft (raw, json) Hash identifier: lVQ6Ppz7aUNM+Z7yRN84b0UPILK63dKPKUkCYset4NI= Subject key identifier: 73:4C:70:B4:77:D2:72:23:5E:4F:96:1C:5A:75:C1:91:E8:9A:9A:AE Authority key identifier: 0B:C6:D2:25:F0:CE:3E:60:77:12:A9:A9:8C:45:61:91:2F:34:32:B6 Certificate issuer: /CN=0BC6D225F0CE3E607712A9A98C4561912F3432B6 Certificate serial: 091E78D3241A8729F6DB8152EE89945C134E8E66 Authority info access: rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/0BC6D225F0CE3E607712A9A98C4561912F3432B6.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/531e9720-0b62-43a8-8e1f-230684eaf9af/3/0BC6D225F0CE3E607712A9A98C4561912F3432B6.mft Manifest number: 14 Signing time: Sat 23 Aug 2025 11:39:16 +0000 Manifest this update: Sat 23 Aug 2025 11:34:16 +0000 Manifest next update: Sun 24 Aug 2025 13:21:16 +0000 Files and hashes: 1: 0BC6D225F0CE3E607712A9A98C4561912F3432B6.crl (hash: p8k9TOV0KK5xtorCv4cVO+eqrtZOlRPPtvayAjQUZ8I=) 2: 326130623a346530373a316330303a3a2f34382d3438203d3e20313531373034.roa (hash: GbSyn/a7s2Tct/cl+IXObaOaKJfLlKE/P5lfI5qam+k=) 3: 326130623a346530373a316330313a3a2f34382d3438203d3e20313531373034.roa (hash: VQpA5o0Pq6sWKS236BEYQWIKLgBdNGi2BEIwMERcePY=) 4: 326130623a346530373a316330323a3a2f34382d3438203d3e20323133383632.roa (hash: /X68JagauxWyaFcSb3BbJbw5DWqXyP6Pe5X7avcQNQs=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/531e9720-0b62-43a8-8e1f-230684eaf9af/3/0BC6D225F0CE3E607712A9A98C4561912F3432B6.crl rsync://rsync.paas.rpki.ripe.net/repository/531e9720-0b62-43a8-8e1f-230684eaf9af/3/0BC6D225F0CE3E607712A9A98C4561912F3432B6.mft rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/0BC6D225F0CE3E607712A9A98C4561912F3432B6.cer rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.mft rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 24 Aug 2025 13:21:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:1e:78:d3:24:1a:87:29:f6:db:81:52:ee:89:94:5c:13:4e:8e:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0BC6D225F0CE3E607712A9A98C4561912F3432B6 Validity Not Before: Aug 23 11:34:16 2025 GMT Not After : Aug 24 13:21:16 2025 GMT Subject: CN=734C70B477D272235E4F961C5A75C191E89A9AAE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:d3:9a:c2:8f:6d:96:36:8e:23:5a:3d:c7:2d: d7:98:d8:8b:e6:d2:a5:de:c7:24:23:ac:bd:f5:24: 52:96:9e:0a:30:2a:15:2a:28:59:ff:65:40:fb:56: 0c:2b:bc:56:f2:0b:85:48:77:41:30:8a:16:47:c4: e7:58:ee:a5:92:09:67:9b:85:6e:21:72:1f:31:af: 43:fb:c2:fd:f3:26:8d:a6:0e:05:22:90:68:d4:16: a9:54:06:81:70:61:67:23:10:d1:c7:c3:67:66:b4: b6:32:5d:ba:82:81:83:5e:3e:6a:88:11:43:d7:8e: e0:43:66:9a:55:a4:c7:b8:de:77:fc:b2:6e:d3:fe: 03:ea:41:ec:e2:62:f4:9e:c3:26:a7:dc:6f:66:df: d0:4b:3f:7f:de:2c:2a:5e:3e:80:3c:24:a8:68:fb: a6:93:7a:ff:15:18:b1:64:47:41:d4:d5:3b:e0:4c: 9c:03:dd:15:50:dc:d5:39:7d:42:6e:54:87:6c:d4: b5:c6:f5:a9:b3:a5:30:12:d9:c0:15:6d:c8:4f:7b: 89:0f:b6:28:5d:71:d0:f6:e8:06:c4:71:19:ae:86: 7d:79:da:5e:3f:5a:48:d6:da:29:c8:7b:10:b6:cd: ec:ef:b1:8f:2d:c6:bf:66:12:af:3e:5f:be:a5:98: f1:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:4C:70:B4:77:D2:72:23:5E:4F:96:1C:5A:75:C1:91:E8:9A:9A:AE X509v3 Authority Key Identifier: keyid:0B:C6:D2:25:F0:CE:3E:60:77:12:A9:A9:8C:45:61:91:2F:34:32:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/531e9720-0b62-43a8-8e1f-230684eaf9af/3/0BC6D225F0CE3E607712A9A98C4561912F3432B6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/0BC6D225F0CE3E607712A9A98C4561912F3432B6.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/531e9720-0b62-43a8-8e1f-230684eaf9af/3/0BC6D225F0CE3E607712A9A98C4561912F3432B6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a9:5d:14:f8:ed:69:fe:28:75:5f:00:cf:f6:48:ca:49:42:99: 42:49:8d:7f:b1:30:aa:9d:bb:b6:57:8f:69:3e:31:f2:c6:87: de:15:86:37:a5:ff:51:fb:f0:e8:be:5e:88:c3:9d:d2:dd:2f: 6a:d5:bc:28:bf:d8:6a:4a:13:08:af:d9:f2:eb:20:fa:5b:08: 42:82:e0:ca:57:da:88:46:22:e5:a5:82:8d:23:29:a5:39:d3: 11:aa:53:bc:da:0f:dd:c7:5d:45:6c:e5:c3:b7:c1:04:a7:a1: e3:c3:fa:d9:f7:0d:0e:d7:a3:6b:ac:a3:78:a6:1e:c4:49:8c: eb:ef:f7:23:99:94:e1:a1:c5:0a:aa:94:3c:59:1d:e6:4e:53: ff:40:a0:fe:04:00:8f:53:c8:74:e2:c7:18:8a:66:fe:92:4b: 97:e1:34:a0:9b:e8:60:4c:f5:13:95:fe:e9:7c:41:cf:40:92: 90:47:c4:17:6d:96:51:99:75:25:4c:89:a5:9c:9f:b4:37:46: eb:a1:a7:91:95:99:da:26:46:6e:28:d2:d7:f0:59:39:3d:1a: 87:10:bb:ee:38:c8:82:e1:a0:ed:27:6a:b6:e0:48:5f:e7:8c: 77:13:fb:dd:4f:dd:6d:36:78:9e:ea:61:12:9b:ee:85:39:02: 68:d4:d5:18 -----BEGIN CERTIFICATE----- MIIFbTCCBFWgAwIBAgIUCR540yQahyn224FS7omUXBNOjmYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEJDNkQyMjVGMENFM0U2MDc3MTJBOUE5OEM0NTYxOTEy RjM0MzJCNjAeFw0yNTA4MjMxMTM0MTZaFw0yNTA4MjQxMzIxMTZaMDMxMTAvBgNV BAMTKDczNEM3MEI0NzdEMjcyMjM1RTRGOTYxQzVBNzVDMTkxRTg5QTlBQUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDL05rCj22WNo4jWj3HLdeY2Ivm 0qXexyQjrL31JFKWngowKhUqKFn/ZUD7VgwrvFbyC4VId0EwihZHxOdY7qWSCWeb hW4hch8xr0P7wv3zJo2mDgUikGjUFqlUBoFwYWcjENHHw2dmtLYyXbqCgYNePmqI EUPXjuBDZppVpMe43nf8sm7T/gPqQeziYvSewyan3G9m39BLP3/eLCpePoA8JKho +6aTev8VGLFkR0HU1TvgTJwD3RVQ3NU5fUJuVIds1LXG9amzpTAS2cAVbchPe4kP tihdcdD26AbEcRmuhn152l4/WkjW2inIexC2zezvsY8txr9mEq8+X76lmPGbAgMB AAGjggJ3MIICczAdBgNVHQ4EFgQUc0xwtHfSciNeT5YcWnXBkeiamq4wHwYDVR0j BBgwFoAUC8bSJfDOPmB3EqmpjEVhkS80MrYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNTMxZTk3MjAtMGI2Mi00M2E4LThlMWYtMjMwNjg0ZWFm OWFmLzMvMEJDNkQyMjVGMENFM0U2MDc3MTJBOUE5OEM0NTYxOTEyRjM0MzJCNi5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzgxYTQ0NTY2NDU4ZTQ1NzhiNjdlZWQz MDUzZjgyMGY1LzEvMEJDNkQyMjVGMENFM0U2MDc3MTJBOUE5OEM0NTYxOTEyRjM0 MzJCNi5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS81MzFlOTcyMC0w YjYyLTQzYTgtOGUxZi0yMzA2ODRlYWY5YWYvMy8wQkM2RDIyNUYwQ0UzRTYwNzcx MkE5QTk4QzQ1NjE5MTJGMzQzMkI2Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqV0U+O1p/ih1XwDP9kjK SUKZQkmNf7Ewqp27tlePaT4x8saH3hWGN6X/Ufvw6L5eiMOd0t0vatW8KL/YakoT CK/Z8usg+lsIQoLgylfaiEYi5aWCjSMppTnTEapTvNoP3cddRWzlw7fBBKeh48P6 2fcNDteja6yjeKYexEmM6+/3I5mU4aHFCqqUPFkd5k5T/0Cg/gQAj1PIdOLHGIpm /pJLl+E0oJvoYEz1E5X+6XxBz0CSkEfEF22WUZl1JUyJpZyftDdG66GnkZWZ2iZG bijS1/BZOT0ahxC77jjIguGg7SdqtuBIX+eMdxP73U/dbTZ4nuphEpvuhTkCaNTV GA== -----END CERTIFICATE-----Generated at Sun Aug 24 02:56:35 2025 by rpki-client