$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/531e9720-0b62-43a8-8e1f-230684eaf9af/3/0BC6D225F0CE3E607712A9A98C4561912F3432B6.mft File: 0BC6D225F0CE3E607712A9A98C4561912F3432B6.mft (raw, json) Hash identifier: JXLCJgHpvGYA5H1WcqTC71Zr0smUt23drT2qOcMzukU= Subject key identifier: 9E:13:EC:C1:E0:9D:E7:0D:6A:04:E4:F3:4D:17:09:FA:DE:72:77:7D Authority key identifier: 0B:C6:D2:25:F0:CE:3E:60:77:12:A9:A9:8C:45:61:91:2F:34:32:B6 Certificate issuer: /CN=0BC6D225F0CE3E607712A9A98C4561912F3432B6 Certificate serial: 174E90B0AAE80B6BEFC0FEA2018A702A652678BD Authority info access: rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/0BC6D225F0CE3E607712A9A98C4561912F3432B6.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/531e9720-0b62-43a8-8e1f-230684eaf9af/3/0BC6D225F0CE3E607712A9A98C4561912F3432B6.mft Manifest number: 0195 Signing time: Fri 05 Jun 2026 23:49:32 +0000 Manifest this update: Fri 05 Jun 2026 23:44:32 +0000 Manifest next update: Sun 07 Jun 2026 02:46:32 +0000 Files and hashes: 1: 326130623a346530373a316330323a3a2f34382d3438203d3e20313531373034.roa (hash: KL/ldm3b1AJMdY1QolVaUnbSkBg2mqpZUeWvBmihjnM=) 2: 326130623a346530373a316330313a3a2f34382d3438203d3e20313531373034.roa (hash: VQpA5o0Pq6sWKS236BEYQWIKLgBdNGi2BEIwMERcePY=) 3: 0BC6D225F0CE3E607712A9A98C4561912F3432B6.crl (hash: hjM1b5ZaT2K3346d0Jj9Yjy400NzUuvIRAk6lfnZQUE=) 4: 326130623a346530373a316330303a3a2f34382d3438203d3e20313531373034.roa (hash: GbSyn/a7s2Tct/cl+IXObaOaKJfLlKE/P5lfI5qam+k=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/531e9720-0b62-43a8-8e1f-230684eaf9af/3/0BC6D225F0CE3E607712A9A98C4561912F3432B6.crl rsync://rsync.paas.rpki.ripe.net/repository/531e9720-0b62-43a8-8e1f-230684eaf9af/3/0BC6D225F0CE3E607712A9A98C4561912F3432B6.mft rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/0BC6D225F0CE3E607712A9A98C4561912F3432B6.cer rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.mft rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Jun 2026 19:00:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:4e:90:b0:aa:e8:0b:6b:ef:c0:fe:a2:01:8a:70:2a:65:26:78:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0BC6D225F0CE3E607712A9A98C4561912F3432B6 Validity Not Before: Jun 5 23:44:32 2026 GMT Not After : Jun 7 02:46:32 2026 GMT Subject: CN=9E13ECC1E09DE70D6A04E4F34D1709FADE72777D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:fb:6f:fb:26:6f:5f:a0:13:53:d1:af:58:e9: d8:e8:41:5d:d2:06:84:4d:41:44:db:76:54:5c:94: d9:ad:58:a2:b2:53:1c:73:2b:00:eb:e0:36:a1:5d: e4:0e:60:0a:9f:83:ad:21:5a:fd:d0:99:29:a1:f3: 71:a5:0e:70:84:d7:d6:15:7b:ca:fb:af:5d:72:be: c6:47:61:e2:31:d3:22:83:a6:8b:8b:3c:17:29:1f: 64:1c:92:67:8c:74:26:b5:b4:0b:4b:4f:5e:c5:a1: 9f:12:5c:c7:e2:66:5d:55:31:35:bf:ce:61:c9:a0: 12:ce:75:7b:b7:bd:5b:fc:1f:53:d5:85:ca:d7:94: 7b:bc:ab:1a:15:5c:b6:8d:80:c1:1f:e6:b9:55:a6: 1b:37:32:6e:c2:b2:59:03:fb:4d:3a:01:3b:ac:67: e8:89:03:3a:de:fc:af:90:9c:bd:4b:a9:33:a0:45: e3:e9:e0:41:4a:73:ad:fd:da:05:fe:6c:f4:1b:6c: a9:7d:a1:14:d1:bc:bd:2f:c5:c7:cb:11:9a:10:f1: 37:0d:98:5c:7b:f8:29:c7:01:36:de:e0:0f:ea:ba: b1:4d:8e:fd:3d:bb:ed:cb:85:f8:c0:4e:38:aa:af: 34:60:bc:9e:a8:ca:03:22:0a:77:ef:87:fc:c3:29: 3a:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:13:EC:C1:E0:9D:E7:0D:6A:04:E4:F3:4D:17:09:FA:DE:72:77:7D X509v3 Authority Key Identifier: keyid:0B:C6:D2:25:F0:CE:3E:60:77:12:A9:A9:8C:45:61:91:2F:34:32:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/531e9720-0b62-43a8-8e1f-230684eaf9af/3/0BC6D225F0CE3E607712A9A98C4561912F3432B6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/0BC6D225F0CE3E607712A9A98C4561912F3432B6.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/531e9720-0b62-43a8-8e1f-230684eaf9af/3/0BC6D225F0CE3E607712A9A98C4561912F3432B6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:69:b3:d1:0c:58:01:21:01:6c:41:2a:02:5d:74:84:6c:05: a3:0a:7b:38:92:2c:00:e5:cb:9d:50:d3:46:5c:1f:8c:ca:43: d1:62:b8:c4:fd:e0:93:7d:b9:3e:ba:2a:31:cd:6f:0a:bd:cb: 79:50:90:3c:8d:bb:3f:44:94:3d:aa:59:be:33:1c:77:25:09: c0:d1:fa:42:d5:7f:95:87:72:77:61:37:41:05:7a:bc:82:89: 97:ae:93:d9:db:4f:71:8d:9b:a5:92:89:c2:57:15:b6:e5:93: cd:1f:af:e5:88:cf:d3:b3:68:84:2d:3e:ab:1a:f7:e5:5d:27: 8d:a9:fa:74:05:91:7f:c3:84:1d:3d:c9:2e:71:94:30:e2:21: d9:5a:37:8f:19:d0:da:97:51:5c:e2:f9:89:a2:9b:78:8c:f6: 8c:37:08:7a:e9:dc:0c:d5:c1:03:7c:d3:10:56:f7:85:fe:ed: f1:ed:3a:07:84:16:c1:79:bd:cd:99:06:5c:ab:73:44:32:98: fe:58:0e:05:5b:b1:e6:66:ec:cb:51:10:63:8d:2d:13:47:a2: 23:4b:26:12:2a:66:88:97:60:98:f3:43:ef:fe:90:64:48:87: 0a:a6:92:2e:fe:dd:1b:68:6d:73:e9:2c:3f:f5:cb:70:5e:26: 16:14:ac:a4 -----BEGIN CERTIFICATE----- MIIFbTCCBFWgAwIBAgIUF06QsKroC2vvwP6iAYpwKmUmeL0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEJDNkQyMjVGMENFM0U2MDc3MTJBOUE5OEM0NTYxOTEy RjM0MzJCNjAeFw0yNjA2MDUyMzQ0MzJaFw0yNjA2MDcwMjQ2MzJaMDMxMTAvBgNV BAMTKDlFMTNFQ0MxRTA5REU3MEQ2QTA0RTRGMzREMTcwOUZBREU3Mjc3N0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCs+2/7Jm9foBNT0a9Y6djoQV3S BoRNQUTbdlRclNmtWKKyUxxzKwDr4DahXeQOYAqfg60hWv3QmSmh83GlDnCE19YV e8r7r11yvsZHYeIx0yKDpouLPBcpH2QckmeMdCa1tAtLT17FoZ8SXMfiZl1VMTW/ zmHJoBLOdXu3vVv8H1PVhcrXlHu8qxoVXLaNgMEf5rlVphs3Mm7CslkD+006ATus Z+iJAzre/K+QnL1LqTOgRePp4EFKc6392gX+bPQbbKl9oRTRvL0vxcfLEZoQ8TcN mFx7+CnHATbe4A/qurFNjv09u+3LhfjATjiqrzRgvJ6oygMiCnfvh/zDKTp3AgMB AAGjggJ3MIICczAdBgNVHQ4EFgQUnhPsweCd5w1qBOTzTRcJ+t5yd30wHwYDVR0j BBgwFoAUC8bSJfDOPmB3EqmpjEVhkS80MrYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNTMxZTk3MjAtMGI2Mi00M2E4LThlMWYtMjMwNjg0ZWFm OWFmLzMvMEJDNkQyMjVGMENFM0U2MDc3MTJBOUE5OEM0NTYxOTEyRjM0MzJCNi5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzgxYTQ0NTY2NDU4ZTQ1NzhiNjdlZWQz MDUzZjgyMGY1LzEvMEJDNkQyMjVGMENFM0U2MDc3MTJBOUE5OEM0NTYxOTEyRjM0 MzJCNi5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS81MzFlOTcyMC0w YjYyLTQzYTgtOGUxZi0yMzA2ODRlYWY5YWYvMy8wQkM2RDIyNUYwQ0UzRTYwNzcx MkE5QTk4QzQ1NjE5MTJGMzQzMkI2Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG2mz0QxYASEBbEEqAl10 hGwFowp7OJIsAOXLnVDTRlwfjMpD0WK4xP3gk325ProqMc1vCr3LeVCQPI27P0SU PapZvjMcdyUJwNH6QtV/lYdyd2E3QQV6vIKJl66T2dtPcY2bpZKJwlcVtuWTzR+v 5YjP07NohC0+qxr35V0njan6dAWRf8OEHT3JLnGUMOIh2Vo3jxnQ2pdRXOL5iaKb eIz2jDcIeuncDNXBA3zTEFb3hf7t8e06B4QWwXm9zZkGXKtzRDKY/lgOBVux5mbs y1EQY40tE0eiI0smEipmiJdgmPND7/6QZEiHCqaSLv7dG2htc+ksP/XLcF4mFhSs pA== -----END CERTIFICATE-----Generated at Sat Jun 6 04:23:43 2026 by rpki-client