$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/531e9720-0b62-43a8-8e1f-230684eaf9af/3/0BC6D225F0CE3E607712A9A98C4561912F3432B6.mft File: 0BC6D225F0CE3E607712A9A98C4561912F3432B6.mft (raw, json) Hash identifier: 6OJVWiIpFM/2bHARj+4g4/1+U6evtROhREHXMEop+P0= Subject key identifier: 28:52:D9:EB:BB:1D:2E:EA:50:47:8C:CC:D3:10:A6:C0:B5:60:D9:31 Authority key identifier: 0B:C6:D2:25:F0:CE:3E:60:77:12:A9:A9:8C:45:61:91:2F:34:32:B6 Certificate issuer: /CN=0BC6D225F0CE3E607712A9A98C4561912F3432B6 Certificate serial: 32611DFE2B19B370D08E183EA1331360E8292467 Authority info access: rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/0BC6D225F0CE3E607712A9A98C4561912F3432B6.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/531e9720-0b62-43a8-8e1f-230684eaf9af/3/0BC6D225F0CE3E607712A9A98C4561912F3432B6.mft Manifest number: 0135 Signing time: Thu 26 Mar 2026 13:59:27 +0000 Manifest this update: Thu 26 Mar 2026 13:54:27 +0000 Manifest next update: Fri 27 Mar 2026 14:45:27 +0000 Files and hashes: 1: 326130623a346530373a316330323a3a2f34382d3438203d3e20313531373034.roa (hash: KL/ldm3b1AJMdY1QolVaUnbSkBg2mqpZUeWvBmihjnM=) 2: 326130623a346530373a316330303a3a2f34382d3438203d3e20313531373034.roa (hash: GbSyn/a7s2Tct/cl+IXObaOaKJfLlKE/P5lfI5qam+k=) 3: 0BC6D225F0CE3E607712A9A98C4561912F3432B6.crl (hash: ETWO6XEVq+UWIldWE4X2MtphJB+4ZKNcNul9QEycboM=) 4: 326130623a346530373a316330313a3a2f34382d3438203d3e20313531373034.roa (hash: VQpA5o0Pq6sWKS236BEYQWIKLgBdNGi2BEIwMERcePY=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/531e9720-0b62-43a8-8e1f-230684eaf9af/3/0BC6D225F0CE3E607712A9A98C4561912F3432B6.crl rsync://rsync.paas.rpki.ripe.net/repository/531e9720-0b62-43a8-8e1f-230684eaf9af/3/0BC6D225F0CE3E607712A9A98C4561912F3432B6.mft rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/0BC6D225F0CE3E607712A9A98C4561912F3432B6.cer rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.mft rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 27 Mar 2026 07:17:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:61:1d:fe:2b:19:b3:70:d0:8e:18:3e:a1:33:13:60:e8:29:24:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0BC6D225F0CE3E607712A9A98C4561912F3432B6 Validity Not Before: Mar 26 13:54:27 2026 GMT Not After : Mar 27 14:45:27 2026 GMT Subject: CN=2852D9EBBB1D2EEA50478CCCD310A6C0B560D931 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:f4:5f:d6:e4:5c:98:9b:43:da:ed:2c:b1:aa: 8a:bb:c5:8a:c9:06:6f:6a:18:f7:50:4d:b9:f9:e2: 12:25:28:d6:65:97:e5:5b:29:56:82:66:02:3d:af: 78:da:b2:a9:d0:8a:b3:9f:16:c6:f5:56:2c:f9:ea: 3b:24:36:cd:a2:b2:36:1d:25:22:2e:92:40:76:35: 95:3a:ed:dc:be:6b:ca:56:6d:8c:9d:07:d6:2b:9b: d9:c7:f4:71:47:38:3a:8f:0b:aa:67:5b:fe:7d:1b: f9:74:07:aa:e0:57:b4:f7:fc:cd:cc:04:00:00:27: fd:9b:99:fa:e5:c6:a2:cb:53:2f:93:e4:af:3d:d5: 77:0b:b1:25:4c:e5:85:77:f4:0b:ca:f6:2a:51:20: a8:b8:d5:73:dc:b3:3f:50:44:47:35:9a:0e:3f:3f: 58:cb:5c:c0:7e:5e:de:01:01:b5:cb:b7:09:1d:38: 0f:45:9e:f7:ee:95:95:bc:ed:1c:1c:36:3a:3f:c3: d9:29:7a:fd:75:df:f4:8a:e1:68:6a:e8:ba:ee:3d: 4c:09:c1:60:bf:64:5b:3f:54:fc:c1:85:1b:bf:54: b5:13:f3:00:a9:30:5c:f6:63:d1:5f:22:cd:3e:2c: c0:b4:b0:82:8e:0f:02:2c:86:0c:01:c0:0f:2f:1e: cd:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:52:D9:EB:BB:1D:2E:EA:50:47:8C:CC:D3:10:A6:C0:B5:60:D9:31 X509v3 Authority Key Identifier: keyid:0B:C6:D2:25:F0:CE:3E:60:77:12:A9:A9:8C:45:61:91:2F:34:32:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/531e9720-0b62-43a8-8e1f-230684eaf9af/3/0BC6D225F0CE3E607712A9A98C4561912F3432B6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/0BC6D225F0CE3E607712A9A98C4561912F3432B6.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/531e9720-0b62-43a8-8e1f-230684eaf9af/3/0BC6D225F0CE3E607712A9A98C4561912F3432B6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption be:c8:5d:12:5b:19:2e:6b:d5:98:fb:e5:e1:2e:6a:16:ac:39: a9:21:55:a8:93:6f:b1:5a:ce:6e:90:c0:a5:33:3f:00:21:98: 26:91:e8:34:fd:82:93:92:70:f7:12:4b:10:62:6a:4e:5e:a1: 95:c3:1a:62:f3:cc:b5:b1:41:47:e8:8c:a3:da:59:fc:fc:99: 91:03:f7:c3:b1:e6:33:f2:fa:84:91:04:fc:e3:92:7b:49:ea: 30:20:e2:eb:4a:a5:f1:7a:9a:86:a1:70:f9:fd:22:1a:a7:84: 5a:e2:6b:bd:ff:3f:23:bf:94:51:0f:e9:c8:7e:69:e6:a0:0f: 4a:fc:a9:f8:ee:ee:c6:c5:9a:f1:31:26:71:00:6a:b4:7d:ab: c1:32:48:81:46:33:40:36:b6:c4:86:cb:79:38:ad:29:d9:3a: 84:94:52:de:dc:b0:10:1b:fe:2a:3e:b0:87:d1:42:7f:91:3c: 9e:a8:44:e4:1b:82:1c:68:cf:99:7a:bc:30:6f:0f:3c:71:85: 2e:f6:53:fa:3b:d8:1f:e6:1c:ce:2f:0c:9a:4e:13:33:0f:f8: a8:c9:59:b0:6b:51:82:87:24:24:21:75:db:b1:fc:dd:78:53: 7d:46:58:29:21:06:d1:3d:78:9c:9f:e5:93:db:eb:a5:b3:80: f8:27:ef:9b -----BEGIN CERTIFICATE----- MIIFbTCCBFWgAwIBAgIUMmEd/isZs3DQjhg+oTMTYOgpJGcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEJDNkQyMjVGMENFM0U2MDc3MTJBOUE5OEM0NTYxOTEy RjM0MzJCNjAeFw0yNjAzMjYxMzU0MjdaFw0yNjAzMjcxNDQ1MjdaMDMxMTAvBgNV BAMTKDI4NTJEOUVCQkIxRDJFRUE1MDQ3OENDQ0QzMTBBNkMwQjU2MEQ5MzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDD9F/W5FyYm0Pa7Syxqoq7xYrJ Bm9qGPdQTbn54hIlKNZll+VbKVaCZgI9r3jasqnQirOfFsb1Viz56jskNs2isjYd JSIukkB2NZU67dy+a8pWbYydB9Yrm9nH9HFHODqPC6pnW/59G/l0B6rgV7T3/M3M BAAAJ/2bmfrlxqLLUy+T5K891XcLsSVM5YV39AvK9ipRIKi41XPcsz9QREc1mg4/ P1jLXMB+Xt4BAbXLtwkdOA9FnvfulZW87RwcNjo/w9kpev113/SK4Whq6LruPUwJ wWC/ZFs/VPzBhRu/VLUT8wCpMFz2Y9FfIs0+LMC0sIKODwIshgwBwA8vHs0xAgMB AAGjggJ3MIICczAdBgNVHQ4EFgQUKFLZ67sdLupQR4zM0xCmwLVg2TEwHwYDVR0j BBgwFoAUC8bSJfDOPmB3EqmpjEVhkS80MrYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNTMxZTk3MjAtMGI2Mi00M2E4LThlMWYtMjMwNjg0ZWFm OWFmLzMvMEJDNkQyMjVGMENFM0U2MDc3MTJBOUE5OEM0NTYxOTEyRjM0MzJCNi5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzgxYTQ0NTY2NDU4ZTQ1NzhiNjdlZWQz MDUzZjgyMGY1LzEvMEJDNkQyMjVGMENFM0U2MDc3MTJBOUE5OEM0NTYxOTEyRjM0 MzJCNi5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS81MzFlOTcyMC0w YjYyLTQzYTgtOGUxZi0yMzA2ODRlYWY5YWYvMy8wQkM2RDIyNUYwQ0UzRTYwNzcx MkE5QTk4QzQ1NjE5MTJGMzQzMkI2Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvshdElsZLmvVmPvl4S5q Fqw5qSFVqJNvsVrObpDApTM/ACGYJpHoNP2Ck5Jw9xJLEGJqTl6hlcMaYvPMtbFB R+iMo9pZ/PyZkQP3w7HmM/L6hJEE/OOSe0nqMCDi60ql8XqahqFw+f0iGqeEWuJr vf8/I7+UUQ/pyH5p5qAPSvyp+O7uxsWa8TEmcQBqtH2rwTJIgUYzQDa2xIbLeTit Kdk6hJRS3tywEBv+Kj6wh9FCf5E8nqhE5BuCHGjPmXq8MG8PPHGFLvZT+jvYH+Yc zi8Mmk4TMw/4qMlZsGtRgockJCF127H83XhTfUZYKSEG0T14nJ/lk9vrpbOA+Cfv mw== -----END CERTIFICATE-----Generated at Thu Mar 26 23:01:59 2026 by rpki-client