$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/531e9720-0b62-43a8-8e1f-230684eaf9af/3/0BC6D225F0CE3E607712A9A98C4561912F3432B6.mft File: 0BC6D225F0CE3E607712A9A98C4561912F3432B6.mft (raw, json) Hash identifier: yjfu6+LSAqJvbRt1kg1V5xGBQyovpWXjaIf5zFtEP/A= Subject key identifier: 6A:78:FE:1D:78:03:AF:31:49:0D:1A:03:3D:2F:2F:D1:AB:E4:2D:00 Authority key identifier: 0B:C6:D2:25:F0:CE:3E:60:77:12:A9:A9:8C:45:61:91:2F:34:32:B6 Certificate issuer: /CN=0BC6D225F0CE3E607712A9A98C4561912F3432B6 Certificate serial: 2752CBB5CECDCD4CEFAD909827B5568CB43AC8B2 Authority info access: rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/0BC6D225F0CE3E607712A9A98C4561912F3432B6.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/531e9720-0b62-43a8-8e1f-230684eaf9af/3/0BC6D225F0CE3E607712A9A98C4561912F3432B6.mft Manifest number: 0252 Signing time: Sat 24 Oct 2026 20:45:11 +0000 Manifest this update: Sat 24 Oct 2026 20:40:11 +0000 Manifest next update: Sun 25 Oct 2026 20:56:11 +0000 Files and hashes: 1: 326130623a346530373a316330353a3a2f34382d3438203d3e20313531373034.roa (hash: klgVth/TtNnRat+Cjm7g/vn2bJkgb8SLrowCN2zlal8=) 2: 0BC6D225F0CE3E607712A9A98C4561912F3432B6.crl (hash: 77ACNZ4UlrJfIPLQe7m/pjRPsUNpH6K9xmaiqCiSHyk=) 3: 326130623a346530373a316330333a3a2f34382d3438203d3e20323134343835.roa (hash: zPqi+GWy7GJ+kq9mxidL3Cv/L27NlElS9NX8D2AsBYM=) 4: 326130623a346530373a316330323a3a2f34382d3438203d3e20313531373034.roa (hash: KL/ldm3b1AJMdY1QolVaUnbSkBg2mqpZUeWvBmihjnM=) 5: 326130623a346530373a316330313a3a2f34382d3438203d3e20313531373034.roa (hash: 0ULXldxk/0eSWpclGLE70Em7/bissXZuMoO5VQhOO28=) 6: 326130623a346530373a316330303a3a2f34382d3438203d3e20313531373034.roa (hash: 9BHpytc7pXx6aIvZB3fYpuWzlGukQUf0KjUB6iLDphc=) 7: 326130623a346530373a316330343a3a2f34382d3438203d3e20313531373034.roa (hash: YHC+/trBPqR3Izb59lUeCAauUW49i7hzZ9zUDI0VhRM=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/531e9720-0b62-43a8-8e1f-230684eaf9af/3/0BC6D225F0CE3E607712A9A98C4561912F3432B6.crl rsync://rsync.paas.rpki.ripe.net/repository/531e9720-0b62-43a8-8e1f-230684eaf9af/3/0BC6D225F0CE3E607712A9A98C4561912F3432B6.mft rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/0BC6D225F0CE3E607712A9A98C4561912F3432B6.cer rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.mft rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Oct 2026 20:56:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:52:cb:b5:ce:cd:cd:4c:ef:ad:90:98:27:b5:56:8c:b4:3a:c8:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0BC6D225F0CE3E607712A9A98C4561912F3432B6 Validity Not Before: Oct 24 20:40:11 2026 GMT Not After : Oct 25 20:56:11 2026 GMT Subject: CN=6A78FE1D7803AF31490D1A033D2F2FD1ABE42D00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:8a:94:37:dd:b5:cc:c1:eb:28:99:a1:a0:e4: 49:95:f1:26:4d:63:44:71:88:b5:7c:ef:d7:75:33: c0:78:59:20:0a:34:6b:c9:43:5b:c2:54:11:39:c9: 61:73:96:e6:e3:91:c1:19:65:02:fa:4d:93:43:93: 8d:5f:50:a1:d4:cb:3d:80:e7:a7:9f:62:84:8e:79: 4c:00:1d:f1:ac:8f:7e:51:80:3c:3d:c6:d5:6f:20: 90:b9:5d:d2:32:d4:8f:9c:e7:a3:5e:cb:96:45:43: d6:13:bd:32:2f:05:04:e7:da:32:66:1b:e3:e8:53: 8e:0f:8e:d8:03:16:55:d5:88:a5:bf:fe:b4:03:e8: 17:88:1c:92:56:c9:e8:91:af:6b:32:4b:c3:5c:f3: 3e:09:ec:5a:75:15:35:d3:92:10:1c:dc:5e:3f:04: 98:9a:f9:73:f2:67:be:dd:89:02:39:c2:7a:61:57: 2b:d2:e4:68:82:64:57:87:e6:93:99:83:68:d0:8f: b7:16:3b:45:65:87:cd:18:f5:38:35:f5:2f:7d:d1: 6c:81:26:e9:bb:7d:48:f7:a1:47:e9:2f:84:8f:f9: 9a:a4:fd:e3:d0:30:5c:e0:fa:dc:79:8d:6f:23:0f: 9b:80:02:70:c1:a2:29:f6:f7:f4:7d:c8:54:91:5a: 11:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:78:FE:1D:78:03:AF:31:49:0D:1A:03:3D:2F:2F:D1:AB:E4:2D:00 X509v3 Authority Key Identifier: keyid:0B:C6:D2:25:F0:CE:3E:60:77:12:A9:A9:8C:45:61:91:2F:34:32:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/531e9720-0b62-43a8-8e1f-230684eaf9af/3/0BC6D225F0CE3E607712A9A98C4561912F3432B6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/0BC6D225F0CE3E607712A9A98C4561912F3432B6.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/531e9720-0b62-43a8-8e1f-230684eaf9af/3/0BC6D225F0CE3E607712A9A98C4561912F3432B6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:22:78:44:4f:0d:eb:28:28:18:48:e4:38:22:d5:b4:29:aa: 69:28:33:28:46:0c:e5:52:50:01:2d:6d:dc:47:88:e8:05:e8: e1:91:d4:2f:cb:57:5a:b9:10:5a:f5:36:73:3a:d4:6f:31:90: dd:71:78:91:e1:08:ea:bc:f3:80:02:f5:1d:2f:0e:df:5b:04: a7:39:b1:c6:d7:3f:df:fb:32:96:8b:db:e1:3c:5f:10:99:4a: f3:cd:7d:cb:c6:c0:34:73:5b:02:33:d8:74:ee:73:81:72:3c: e7:ec:8a:04:f9:a7:13:f5:25:17:02:8f:49:e8:76:05:c7:df: bd:0c:7b:b2:ea:9a:d0:8f:b5:15:f9:b5:4f:ef:dc:13:c1:c8: 7e:36:27:50:f0:ca:46:90:69:7b:dc:a7:cc:f0:3b:d8:a9:7e: 65:4e:0c:94:63:7b:3e:48:a3:3c:f2:47:cf:ef:23:18:0b:0f: e7:27:65:04:c6:04:1a:29:f9:1c:8f:c2:d2:e5:3b:65:8b:e3: 7f:08:ff:4b:21:b9:1f:6d:87:f2:37:92:bd:9d:cb:a6:8e:44: a2:db:3e:49:78:3c:7e:93:df:63:1d:f4:e2:af:72:fd:80:73: ea:9e:8e:08:0d:3e:b0:34:96:a6:74:a6:71:e2:60:5d:2d:1f: 3b:1c:c9:db -----BEGIN CERTIFICATE----- MIIFbTCCBFWgAwIBAgIUJ1LLtc7NzUzvrZCYJ7VWjLQ6yLIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEJDNkQyMjVGMENFM0U2MDc3MTJBOUE5OEM0NTYxOTEy RjM0MzJCNjAeFw0yNjEwMjQyMDQwMTFaFw0yNjEwMjUyMDU2MTFaMDMxMTAvBgNV BAMTKDZBNzhGRTFENzgwM0FGMzE0OTBEMUEwMzNEMkYyRkQxQUJFNDJEMDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCYipQ33bXMwesomaGg5EmV8SZN Y0RxiLV879d1M8B4WSAKNGvJQ1vCVBE5yWFzlubjkcEZZQL6TZNDk41fUKHUyz2A 56efYoSOeUwAHfGsj35RgDw9xtVvIJC5XdIy1I+c56Ney5ZFQ9YTvTIvBQTn2jJm G+PoU44PjtgDFlXViKW//rQD6BeIHJJWyeiRr2syS8Nc8z4J7Fp1FTXTkhAc3F4/ BJia+XPyZ77diQI5wnphVyvS5GiCZFeH5pOZg2jQj7cWO0Vlh80Y9Tg19S990WyB Jum7fUj3oUfpL4SP+Zqk/ePQMFzg+tx5jW8jD5uAAnDBoin29/R9yFSRWhHFAgMB AAGjggJ3MIICczAdBgNVHQ4EFgQUanj+HXgDrzFJDRoDPS8v0avkLQAwHwYDVR0j BBgwFoAUC8bSJfDOPmB3EqmpjEVhkS80MrYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNTMxZTk3MjAtMGI2Mi00M2E4LThlMWYtMjMwNjg0ZWFm OWFmLzMvMEJDNkQyMjVGMENFM0U2MDc3MTJBOUE5OEM0NTYxOTEyRjM0MzJCNi5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzgxYTQ0NTY2NDU4ZTQ1NzhiNjdlZWQz MDUzZjgyMGY1LzEvMEJDNkQyMjVGMENFM0U2MDc3MTJBOUE5OEM0NTYxOTEyRjM0 MzJCNi5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS81MzFlOTcyMC0w YjYyLTQzYTgtOGUxZi0yMzA2ODRlYWY5YWYvMy8wQkM2RDIyNUYwQ0UzRTYwNzcx MkE5QTk4QzQ1NjE5MTJGMzQzMkI2Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXCJ4RE8N6ygoGEjkOCLV tCmqaSgzKEYM5VJQAS1t3EeI6AXo4ZHUL8tXWrkQWvU2czrUbzGQ3XF4keEI6rzz gAL1HS8O31sEpzmxxtc/3/sylovb4TxfEJlK8819y8bANHNbAjPYdO5zgXI85+yK BPmnE/UlFwKPSeh2BcffvQx7suqa0I+1Ffm1T+/cE8HIfjYnUPDKRpBpe9ynzPA7 2Kl+ZU4MlGN7PkijPPJHz+8jGAsP5ydlBMYEGin5HI/C0uU7ZYvjfwj/SyG5H22H 8jeSvZ3Lpo5Eots+SXg8fpPfYx304q9y/YBz6p6OCA0+sDSWpnSmceJgXS0fOxzJ 2w== -----END CERTIFICATE-----Generated at Sun Oct 25 14:35:25 2026 by rpki-client