$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/531e9720-0b62-43a8-8e1f-230684eaf9af/3/0BC6D225F0CE3E607712A9A98C4561912F3432B6.mft File: 0BC6D225F0CE3E607712A9A98C4561912F3432B6.mft (raw, json) Hash identifier: vQ+TCOw/8T8oSmwB75jpMLoZJ9UF67J4nIWR9MyShTc= Subject key identifier: 5B:C6:08:09:43:0D:6F:81:52:5E:23:AF:5B:18:AC:DA:A5:3F:89:C8 Authority key identifier: 0B:C6:D2:25:F0:CE:3E:60:77:12:A9:A9:8C:45:61:91:2F:34:32:B6 Certificate issuer: /CN=0BC6D225F0CE3E607712A9A98C4561912F3432B6 Certificate serial: 18E783036F6F4006E5D1F13BAB8F8E49A94D0158 Authority info access: rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/0BC6D225F0CE3E607712A9A98C4561912F3432B6.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/531e9720-0b62-43a8-8e1f-230684eaf9af/3/0BC6D225F0CE3E607712A9A98C4561912F3432B6.mft Manifest number: 0175 Signing time: Wed 13 May 2026 09:29:32 +0000 Manifest this update: Wed 13 May 2026 09:24:32 +0000 Manifest next update: Thu 14 May 2026 12:58:32 +0000 Files and hashes: 1: 326130623a346530373a316330323a3a2f34382d3438203d3e20313531373034.roa (hash: KL/ldm3b1AJMdY1QolVaUnbSkBg2mqpZUeWvBmihjnM=) 2: 326130623a346530373a316330313a3a2f34382d3438203d3e20313531373034.roa (hash: VQpA5o0Pq6sWKS236BEYQWIKLgBdNGi2BEIwMERcePY=) 3: 0BC6D225F0CE3E607712A9A98C4561912F3432B6.crl (hash: iRfQ1oqrxEM8zjlYnGCEhmU9HkOLAWw7tA0Dy1Hj1o4=) 4: 326130623a346530373a316330303a3a2f34382d3438203d3e20313531373034.roa (hash: GbSyn/a7s2Tct/cl+IXObaOaKJfLlKE/P5lfI5qam+k=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/531e9720-0b62-43a8-8e1f-230684eaf9af/3/0BC6D225F0CE3E607712A9A98C4561912F3432B6.crl rsync://rsync.paas.rpki.ripe.net/repository/531e9720-0b62-43a8-8e1f-230684eaf9af/3/0BC6D225F0CE3E607712A9A98C4561912F3432B6.mft rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/0BC6D225F0CE3E607712A9A98C4561912F3432B6.cer rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.mft rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 13 May 2026 23:53:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:e7:83:03:6f:6f:40:06:e5:d1:f1:3b:ab:8f:8e:49:a9:4d:01:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0BC6D225F0CE3E607712A9A98C4561912F3432B6 Validity Not Before: May 13 09:24:32 2026 GMT Not After : May 14 12:58:32 2026 GMT Subject: CN=5BC60809430D6F81525E23AF5B18ACDAA53F89C8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:7f:83:cb:08:1e:5e:7c:fa:72:b7:71:a2:85: 64:da:a9:e8:f7:cd:a8:76:9e:df:22:86:bc:10:cd: b7:4e:b6:e1:55:1c:dd:03:5e:55:ad:11:9c:a4:3d: 38:b8:37:16:34:6b:9a:03:77:af:7b:e9:31:00:0c: cc:36:c2:d6:1f:6d:f0:6a:4e:09:76:ff:7e:ad:dc: 22:c5:0c:dd:ce:4c:5e:5c:3a:74:21:e2:0f:ab:57: fc:84:89:96:76:e1:5f:c2:a2:8b:b8:a4:ae:85:d3: ab:c5:cb:7c:6c:9a:81:c1:33:55:77:83:ff:4b:2b: 4d:85:a2:77:0e:4b:4a:89:cb:a4:9e:63:07:fe:59: 6f:8c:9b:a8:31:fb:09:a2:66:cc:64:4e:c4:6b:43: e1:30:95:bb:0e:78:05:7a:19:c8:7d:11:00:4e:95: 16:96:ab:9e:4a:11:df:94:99:4e:59:03:dc:0e:2c: 1b:79:b8:5e:53:75:f0:d4:c0:92:6d:36:c5:e4:27: 55:a4:a9:4a:6f:17:19:b6:66:2b:59:61:c8:4d:01: b4:6c:db:50:84:e2:5d:aa:24:d0:6a:d7:64:70:b9: 6f:56:07:ff:3a:39:1b:4f:a5:a9:64:75:6e:1d:75: 0e:bc:87:30:75:6e:cf:ac:4a:8f:73:f5:53:cb:f4: 51:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:C6:08:09:43:0D:6F:81:52:5E:23:AF:5B:18:AC:DA:A5:3F:89:C8 X509v3 Authority Key Identifier: keyid:0B:C6:D2:25:F0:CE:3E:60:77:12:A9:A9:8C:45:61:91:2F:34:32:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/531e9720-0b62-43a8-8e1f-230684eaf9af/3/0BC6D225F0CE3E607712A9A98C4561912F3432B6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/0BC6D225F0CE3E607712A9A98C4561912F3432B6.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/531e9720-0b62-43a8-8e1f-230684eaf9af/3/0BC6D225F0CE3E607712A9A98C4561912F3432B6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:f2:7a:25:59:60:d5:ca:89:ca:70:0c:2b:c1:9e:6e:3d:3f: 4d:4c:55:97:f5:15:e8:17:8c:8e:dc:fa:52:a1:30:9d:18:16: e4:5d:5b:6f:e6:51:1b:80:a4:a1:33:0a:76:e9:6e:ce:1c:51: b0:92:05:a6:7c:a1:3e:c0:9f:2c:1d:7f:b3:b5:5d:a0:cb:26: 96:ea:84:b3:4f:64:49:01:61:83:b2:08:97:46:ad:1c:b9:8c: db:00:b2:f2:10:93:2e:ed:d7:94:e7:69:d6:05:b2:c3:a6:24: 6c:a5:0d:f8:77:53:73:d3:a8:d3:08:3c:0d:d4:e3:dc:b9:93: f2:fa:a0:91:c0:7d:2d:bd:85:bb:d4:32:92:eb:9d:95:93:8c: 26:d6:11:40:27:e8:b0:b5:85:cf:21:98:df:0d:93:76:a7:c7: 47:ef:5e:f0:6b:fd:35:ff:11:e1:10:c6:a8:40:3d:30:3d:2d: 1a:c2:5c:4c:0b:a8:fd:34:cc:5a:60:5d:6d:b6:ec:45:ca:7c: 2c:f4:25:3f:52:c7:de:55:a1:d9:8f:53:16:85:bb:01:cd:58: f7:45:99:d7:57:ce:f8:69:a5:75:69:9d:c1:0f:48:82:46:4b: 90:e4:0b:64:71:aa:35:73:2b:aa:36:e0:6c:52:08:8d:c4:80: 42:db:05:59 -----BEGIN CERTIFICATE----- MIIFbTCCBFWgAwIBAgIUGOeDA29vQAbl0fE7q4+OSalNAVgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEJDNkQyMjVGMENFM0U2MDc3MTJBOUE5OEM0NTYxOTEy RjM0MzJCNjAeFw0yNjA1MTMwOTI0MzJaFw0yNjA1MTQxMjU4MzJaMDMxMTAvBgNV BAMTKDVCQzYwODA5NDMwRDZGODE1MjVFMjNBRjVCMThBQ0RBQTUzRjg5QzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDqf4PLCB5efPpyt3GihWTaqej3 zah2nt8ihrwQzbdOtuFVHN0DXlWtEZykPTi4NxY0a5oDd6976TEADMw2wtYfbfBq Tgl2/36t3CLFDN3OTF5cOnQh4g+rV/yEiZZ24V/Coou4pK6F06vFy3xsmoHBM1V3 g/9LK02FoncOS0qJy6SeYwf+WW+Mm6gx+wmiZsxkTsRrQ+EwlbsOeAV6Gch9EQBO lRaWq55KEd+UmU5ZA9wOLBt5uF5TdfDUwJJtNsXkJ1WkqUpvFxm2ZitZYchNAbRs 21CE4l2qJNBq12RwuW9WB/86ORtPpalkdW4ddQ68hzB1bs+sSo9z9VPL9FG7AgMB AAGjggJ3MIICczAdBgNVHQ4EFgQUW8YICUMNb4FSXiOvWxis2qU/icgwHwYDVR0j BBgwFoAUC8bSJfDOPmB3EqmpjEVhkS80MrYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNTMxZTk3MjAtMGI2Mi00M2E4LThlMWYtMjMwNjg0ZWFm OWFmLzMvMEJDNkQyMjVGMENFM0U2MDc3MTJBOUE5OEM0NTYxOTEyRjM0MzJCNi5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzgxYTQ0NTY2NDU4ZTQ1NzhiNjdlZWQz MDUzZjgyMGY1LzEvMEJDNkQyMjVGMENFM0U2MDc3MTJBOUE5OEM0NTYxOTEyRjM0 MzJCNi5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS81MzFlOTcyMC0w YjYyLTQzYTgtOGUxZi0yMzA2ODRlYWY5YWYvMy8wQkM2RDIyNUYwQ0UzRTYwNzcx MkE5QTk4QzQ1NjE5MTJGMzQzMkI2Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYfJ6JVlg1cqJynAMK8Ge bj0/TUxVl/UV6BeMjtz6UqEwnRgW5F1bb+ZRG4CkoTMKduluzhxRsJIFpnyhPsCf LB1/s7VdoMsmluqEs09kSQFhg7IIl0atHLmM2wCy8hCTLu3XlOdp1gWyw6YkbKUN +HdTc9Oo0wg8DdTj3LmT8vqgkcB9Lb2Fu9QykuudlZOMJtYRQCfosLWFzyGY3w2T dqfHR+9e8Gv9Nf8R4RDGqEA9MD0tGsJcTAuo/TTMWmBdbbbsRcp8LPQlP1LH3lWh 2Y9TFoW7Ac1Y90WZ11fO+GmldWmdwQ9IgkZLkOQLZHGqNXMrqjbgbFIIjcSAQtsF WQ== -----END CERTIFICATE-----Generated at Wed May 13 13:12:11 2026 by rpki-client