$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/531e9720-0b62-43a8-8e1f-230684eaf9af/3/0BC6D225F0CE3E607712A9A98C4561912F3432B6.mft File: 0BC6D225F0CE3E607712A9A98C4561912F3432B6.mft (raw, json) Hash identifier: yWy+NZU27Hbm36FTs6IyrVZSM7OWanJYPQPFZtgMiak= Subject key identifier: BF:87:28:E6:24:97:B6:48:0F:E6:E3:46:F9:26:5F:33:5E:C0:9E:3C Authority key identifier: 0B:C6:D2:25:F0:CE:3E:60:77:12:A9:A9:8C:45:61:91:2F:34:32:B6 Certificate issuer: /CN=0BC6D225F0CE3E607712A9A98C4561912F3432B6 Certificate serial: 2B9025093221E851BAFFC8D66C758A7518462B3F Authority info access: rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/0BC6D225F0CE3E607712A9A98C4561912F3432B6.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/531e9720-0b62-43a8-8e1f-230684eaf9af/3/0BC6D225F0CE3E607712A9A98C4561912F3432B6.mft Manifest number: 60 Signing time: Mon 20 Oct 2025 01:44:27 +0000 Manifest this update: Mon 20 Oct 2025 01:39:27 +0000 Manifest next update: Tue 21 Oct 2025 05:31:27 +0000 Files and hashes: 1: 0BC6D225F0CE3E607712A9A98C4561912F3432B6.crl (hash: BAbdU+avBSGBhvFec+/Mg8L4tYY4HEO8kENYedJj6+U=) 2: 326130623a346530373a316330313a3a2f34382d3438203d3e20313531373034.roa (hash: VQpA5o0Pq6sWKS236BEYQWIKLgBdNGi2BEIwMERcePY=) 3: 326130623a346530373a316330303a3a2f34382d3438203d3e20313531373034.roa (hash: GbSyn/a7s2Tct/cl+IXObaOaKJfLlKE/P5lfI5qam+k=) 4: 326130623a346530373a316330323a3a2f34382d3438203d3e20323133383632.roa (hash: /X68JagauxWyaFcSb3BbJbw5DWqXyP6Pe5X7avcQNQs=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/531e9720-0b62-43a8-8e1f-230684eaf9af/3/0BC6D225F0CE3E607712A9A98C4561912F3432B6.crl rsync://rsync.paas.rpki.ripe.net/repository/531e9720-0b62-43a8-8e1f-230684eaf9af/3/0BC6D225F0CE3E607712A9A98C4561912F3432B6.mft rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/0BC6D225F0CE3E607712A9A98C4561912F3432B6.cer rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.mft rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 21 Oct 2025 00:32:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:90:25:09:32:21:e8:51:ba:ff:c8:d6:6c:75:8a:75:18:46:2b:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0BC6D225F0CE3E607712A9A98C4561912F3432B6 Validity Not Before: Oct 20 01:39:27 2025 GMT Not After : Oct 21 05:31:27 2025 GMT Subject: CN=BF8728E62497B6480FE6E346F9265F335EC09E3C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:1b:49:f4:ac:e9:86:f9:2c:13:16:47:09:e9: 49:b9:26:43:0a:5d:c6:1f:d9:1f:03:a7:2b:5e:4c: 54:58:1d:d5:7c:1c:43:13:a8:41:52:65:a1:96:06: 1f:ee:b3:ca:ce:a2:1c:eb:5d:e4:50:75:b3:55:c6: e9:37:b8:cb:b0:7f:3e:99:c1:48:c2:c1:1c:50:78: d3:5d:bf:e7:6e:67:ca:af:d9:89:bf:39:d2:13:14: 03:96:2d:37:a4:91:f0:80:b9:fa:79:e4:a3:4d:de: a8:b6:95:cb:65:e5:f5:03:1f:6e:eb:16:c8:82:d8: a0:f6:35:6e:39:5b:89:5c:50:eb:e1:a0:a2:1f:aa: a5:82:6b:b0:44:e4:31:f2:60:8e:0b:73:e3:af:ba: ea:ad:93:4c:6e:1e:66:30:e7:ef:6f:ab:69:6d:f7: e3:96:53:e1:d2:f0:91:eb:76:5e:80:e0:0c:42:88: a0:23:1c:c1:fe:f4:a0:75:b9:d9:f7:9d:8c:9b:4d: 82:84:71:09:17:be:1d:62:10:e5:73:de:09:c8:d2: 65:2b:ce:2e:07:23:f0:52:e4:d9:6e:b7:c4:86:cf: 92:23:dd:be:ed:5d:e5:f6:19:64:44:89:6f:b9:04: eb:d0:0d:99:d0:1f:0f:0d:b8:8f:4e:51:b7:5c:79: 5a:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:87:28:E6:24:97:B6:48:0F:E6:E3:46:F9:26:5F:33:5E:C0:9E:3C X509v3 Authority Key Identifier: keyid:0B:C6:D2:25:F0:CE:3E:60:77:12:A9:A9:8C:45:61:91:2F:34:32:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/531e9720-0b62-43a8-8e1f-230684eaf9af/3/0BC6D225F0CE3E607712A9A98C4561912F3432B6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/0BC6D225F0CE3E607712A9A98C4561912F3432B6.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/531e9720-0b62-43a8-8e1f-230684eaf9af/3/0BC6D225F0CE3E607712A9A98C4561912F3432B6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:9b:8b:c1:5b:43:cf:96:f8:a9:ff:14:4c:0d:ba:f2:1f:01: 79:14:16:11:79:a9:a1:a4:b7:d8:f4:ee:34:cf:18:35:54:2e: d4:66:8e:b5:6f:ba:3e:f7:89:1c:45:35:e5:69:e2:2b:6c:bd: 78:58:5c:e4:21:f7:5d:94:87:de:ee:d8:80:31:8a:a1:dd:65: 91:f6:c4:d3:09:e4:90:6e:5b:f3:91:a2:f9:f7:ca:a2:44:60: 82:22:5e:f7:39:11:31:94:4b:2b:0f:2c:40:1a:f4:eb:70:15: c5:f7:ed:8a:e9:b4:e8:6c:ee:ab:28:1a:71:fb:a4:34:7b:d9: 26:20:c4:06:00:f1:3b:f7:b1:74:d0:05:ec:60:5e:00:2e:f2: b6:fd:1d:b2:80:3d:5a:c6:b1:2a:10:f5:61:da:64:42:65:b2: ee:e0:b5:6e:89:a7:b9:84:bf:05:32:ca:7d:0e:f1:f7:26:fb: 97:51:c0:b6:5b:80:01:d6:bb:06:d6:b8:ee:0a:83:b1:3a:cf: 30:ce:80:30:30:39:4b:05:91:f6:75:90:35:59:71:9f:c0:3f: 5d:6c:60:32:47:00:70:eb:6f:76:e3:40:06:fe:6a:69:34:de: 20:af:bf:a7:a3:3a:6b:31:d3:df:74:1c:29:91:5d:4e:86:0f: be:99:c7:69 -----BEGIN CERTIFICATE----- MIIFbTCCBFWgAwIBAgIUK5AlCTIh6FG6/8jWbHWKdRhGKz8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEJDNkQyMjVGMENFM0U2MDc3MTJBOUE5OEM0NTYxOTEy RjM0MzJCNjAeFw0yNTEwMjAwMTM5MjdaFw0yNTEwMjEwNTMxMjdaMDMxMTAvBgNV BAMTKEJGODcyOEU2MjQ5N0I2NDgwRkU2RTM0NkY5MjY1RjMzNUVDMDlFM0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1G0n0rOmG+SwTFkcJ6Um5JkMK XcYf2R8DpyteTFRYHdV8HEMTqEFSZaGWBh/us8rOohzrXeRQdbNVxuk3uMuwfz6Z wUjCwRxQeNNdv+duZ8qv2Ym/OdITFAOWLTekkfCAufp55KNN3qi2lctl5fUDH27r FsiC2KD2NW45W4lcUOvhoKIfqqWCa7BE5DHyYI4Lc+Ovuuqtk0xuHmYw5+9vq2lt 9+OWU+HS8JHrdl6A4AxCiKAjHMH+9KB1udn3nYybTYKEcQkXvh1iEOVz3gnI0mUr zi4HI/BS5Nlut8SGz5Ij3b7tXeX2GWREiW+5BOvQDZnQHw8NuI9OUbdceVrHAgMB AAGjggJ3MIICczAdBgNVHQ4EFgQUv4co5iSXtkgP5uNG+SZfM17AnjwwHwYDVR0j BBgwFoAUC8bSJfDOPmB3EqmpjEVhkS80MrYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNTMxZTk3MjAtMGI2Mi00M2E4LThlMWYtMjMwNjg0ZWFm OWFmLzMvMEJDNkQyMjVGMENFM0U2MDc3MTJBOUE5OEM0NTYxOTEyRjM0MzJCNi5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzgxYTQ0NTY2NDU4ZTQ1NzhiNjdlZWQz MDUzZjgyMGY1LzEvMEJDNkQyMjVGMENFM0U2MDc3MTJBOUE5OEM0NTYxOTEyRjM0 MzJCNi5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS81MzFlOTcyMC0w YjYyLTQzYTgtOGUxZi0yMzA2ODRlYWY5YWYvMy8wQkM2RDIyNUYwQ0UzRTYwNzcx MkE5QTk4QzQ1NjE5MTJGMzQzMkI2Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAapuLwVtDz5b4qf8UTA26 8h8BeRQWEXmpoaS32PTuNM8YNVQu1GaOtW+6PveJHEU15WniK2y9eFhc5CH3XZSH 3u7YgDGKod1lkfbE0wnkkG5b85Gi+ffKokRggiJe9zkRMZRLKw8sQBr063AVxfft ium06GzuqygacfukNHvZJiDEBgDxO/exdNAF7GBeAC7ytv0dsoA9WsaxKhD1Ydpk QmWy7uC1bomnuYS/BTLKfQ7x9yb7l1HAtluAAda7Bta47gqDsTrPMM6AMDA5SwWR 9nWQNVlxn8A/XWxgMkcAcOtvduNABv5qaTTeIK+/p6M6azHT33QcKZFdToYPvpnH aQ== -----END CERTIFICATE-----Generated at Mon Oct 20 13:55:10 2025 by rpki-client