$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/531e9720-0b62-43a8-8e1f-230684eaf9af/3/0BC6D225F0CE3E607712A9A98C4561912F3432B6.mft File: 0BC6D225F0CE3E607712A9A98C4561912F3432B6.mft (raw, json) Hash identifier: Y1jnkKnvHZY9CXEByF0kmBrDhp8K4LvR9/LNrUBDW2w= Subject key identifier: 33:0C:40:AA:5E:D3:D6:BB:A3:2D:C1:74:EE:31:85:A6:49:D0:02:D1 Authority key identifier: 0B:C6:D2:25:F0:CE:3E:60:77:12:A9:A9:8C:45:61:91:2F:34:32:B6 Certificate issuer: /CN=0BC6D225F0CE3E607712A9A98C4561912F3432B6 Certificate serial: 77AB83A56340B5FFBCC75692EC70B1138394EAD6 Authority info access: rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/0BC6D225F0CE3E607712A9A98C4561912F3432B6.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/531e9720-0b62-43a8-8e1f-230684eaf9af/3/0BC6D225F0CE3E607712A9A98C4561912F3432B6.mft Manifest number: 011B Signing time: Sat 07 Mar 2026 02:59:27 +0000 Manifest this update: Sat 07 Mar 2026 02:54:27 +0000 Manifest next update: Sun 08 Mar 2026 05:27:27 +0000 Files and hashes: 1: 0BC6D225F0CE3E607712A9A98C4561912F3432B6.crl (hash: 78xXmc7JNkFKz++j2HQPURmUG22cRQH+3ErCtNa/Szs=) 2: 326130623a346530373a316330303a3a2f34382d3438203d3e20313531373034.roa (hash: GbSyn/a7s2Tct/cl+IXObaOaKJfLlKE/P5lfI5qam+k=) 3: 326130623a346530373a316330313a3a2f34382d3438203d3e20313531373034.roa (hash: VQpA5o0Pq6sWKS236BEYQWIKLgBdNGi2BEIwMERcePY=) 4: 326130623a346530373a316330323a3a2f34382d3438203d3e20313531373034.roa (hash: KL/ldm3b1AJMdY1QolVaUnbSkBg2mqpZUeWvBmihjnM=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/531e9720-0b62-43a8-8e1f-230684eaf9af/3/0BC6D225F0CE3E607712A9A98C4561912F3432B6.crl rsync://rsync.paas.rpki.ripe.net/repository/531e9720-0b62-43a8-8e1f-230684eaf9af/3/0BC6D225F0CE3E607712A9A98C4561912F3432B6.mft rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/0BC6D225F0CE3E607712A9A98C4561912F3432B6.cer rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.mft rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 07 Mar 2026 16:54:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:ab:83:a5:63:40:b5:ff:bc:c7:56:92:ec:70:b1:13:83:94:ea:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0BC6D225F0CE3E607712A9A98C4561912F3432B6 Validity Not Before: Mar 7 02:54:27 2026 GMT Not After : Mar 8 05:27:27 2026 GMT Subject: CN=330C40AA5ED3D6BBA32DC174EE3185A649D002D1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:c5:27:e3:be:c5:7b:11:c5:7b:ca:83:69:b9: e5:d4:6b:6d:95:b6:d5:07:45:92:a6:30:db:8a:02: ae:2a:d6:75:5b:6f:a9:e7:5b:a1:fe:e6:7e:a5:ce: d4:6d:6f:d4:0f:69:47:59:05:5c:8b:b1:e7:00:51: 57:23:c3:2f:cb:ba:0d:34:95:5b:45:27:ce:ea:44: 61:c5:32:aa:96:34:aa:6b:c2:88:28:44:31:20:5b: 43:1c:c6:25:1e:0b:b2:a5:ca:eb:02:ae:be:2c:62: 77:f9:d5:dc:9c:9c:ab:d1:a1:a2:ea:00:ea:bb:9e: bf:a7:ac:52:f3:df:f9:2b:fd:fc:84:61:aa:e5:81: f2:ee:a5:89:0e:17:7c:40:e4:7f:60:5b:c4:37:ed: 27:99:c1:fb:7e:37:27:6c:66:b2:fe:41:c0:d0:2e: 48:d4:63:c0:23:d6:35:e3:86:ff:9e:d1:a6:c4:5a: eb:3d:09:82:2a:89:44:89:d8:97:4a:9a:af:a3:75: be:ce:5b:f0:92:7e:93:0f:ee:a5:92:bb:e7:96:71: 1a:8c:7a:ec:8b:ee:55:ee:b9:34:fe:86:86:33:0c: 17:60:69:e0:96:6b:fe:2f:0c:49:cc:80:ee:60:91: b9:28:f3:7b:2c:f5:40:03:0f:38:f5:c9:ae:fa:9c: b9:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:0C:40:AA:5E:D3:D6:BB:A3:2D:C1:74:EE:31:85:A6:49:D0:02:D1 X509v3 Authority Key Identifier: keyid:0B:C6:D2:25:F0:CE:3E:60:77:12:A9:A9:8C:45:61:91:2F:34:32:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/531e9720-0b62-43a8-8e1f-230684eaf9af/3/0BC6D225F0CE3E607712A9A98C4561912F3432B6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/0BC6D225F0CE3E607712A9A98C4561912F3432B6.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/531e9720-0b62-43a8-8e1f-230684eaf9af/3/0BC6D225F0CE3E607712A9A98C4561912F3432B6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:02:a3:69:aa:a6:be:40:09:fb:81:19:18:7e:4f:c4:00:9e: 89:82:b2:fc:91:ed:5f:60:3c:c5:65:ca:bc:82:c9:26:ba:7c: 5b:4e:03:1f:b6:3f:ef:1f:63:f9:63:ed:74:3d:d7:28:ff:6b: 25:47:d3:5f:f2:43:2b:de:74:d1:1e:bf:db:c5:1e:e1:c4:d9: 35:d7:b0:b9:5c:00:f2:7c:97:72:7b:24:5e:86:9a:a8:b9:1b: 7a:70:67:be:bc:e6:1e:33:a9:ad:c8:5e:f1:41:9a:28:b0:dc: 0a:85:4e:97:1d:81:cf:ad:12:bc:31:5f:cc:f9:ef:66:30:4e: 17:2d:00:9d:79:8e:c9:3c:fd:6a:42:f0:2b:0f:0c:1a:b3:ef: 59:a8:91:4a:0b:2f:96:eb:dd:3d:ef:93:8f:df:cf:95:3e:50: de:2c:ec:14:d0:6e:e4:57:47:62:82:3e:80:48:36:b5:3c:5c: dd:a8:e2:74:c1:ce:15:65:86:7f:da:d7:82:52:fe:34:d4:5d: 52:e8:b0:2f:b9:6e:ff:cc:d0:0b:20:1a:62:a1:9a:d1:b6:ba: 61:85:c3:db:05:72:45:2e:b2:c2:e4:63:ac:19:ca:62:40:1f: 8d:98:c4:ca:a3:9c:0a:a7:f0:12:bf:a2:e9:33:27:e2:79:8b: 99:a4:fe:56 -----BEGIN CERTIFICATE----- MIIFbTCCBFWgAwIBAgIUd6uDpWNAtf+8x1aS7HCxE4OU6tYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEJDNkQyMjVGMENFM0U2MDc3MTJBOUE5OEM0NTYxOTEy RjM0MzJCNjAeFw0yNjAzMDcwMjU0MjdaFw0yNjAzMDgwNTI3MjdaMDMxMTAvBgNV BAMTKDMzMEM0MEFBNUVEM0Q2QkJBMzJEQzE3NEVFMzE4NUE2NDlEMDAyRDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwxSfjvsV7EcV7yoNpueXUa22V ttUHRZKmMNuKAq4q1nVbb6nnW6H+5n6lztRtb9QPaUdZBVyLsecAUVcjwy/Lug00 lVtFJ87qRGHFMqqWNKprwogoRDEgW0McxiUeC7KlyusCrr4sYnf51dycnKvRoaLq AOq7nr+nrFLz3/kr/fyEYarlgfLupYkOF3xA5H9gW8Q37SeZwft+NydsZrL+QcDQ LkjUY8Aj1jXjhv+e0abEWus9CYIqiUSJ2JdKmq+jdb7OW/CSfpMP7qWSu+eWcRqM euyL7lXuuTT+hoYzDBdgaeCWa/4vDEnMgO5gkbko83ss9UADDzj1ya76nLkxAgMB AAGjggJ3MIICczAdBgNVHQ4EFgQUMwxAql7T1rujLcF07jGFpknQAtEwHwYDVR0j BBgwFoAUC8bSJfDOPmB3EqmpjEVhkS80MrYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNTMxZTk3MjAtMGI2Mi00M2E4LThlMWYtMjMwNjg0ZWFm OWFmLzMvMEJDNkQyMjVGMENFM0U2MDc3MTJBOUE5OEM0NTYxOTEyRjM0MzJCNi5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzgxYTQ0NTY2NDU4ZTQ1NzhiNjdlZWQz MDUzZjgyMGY1LzEvMEJDNkQyMjVGMENFM0U2MDc3MTJBOUE5OEM0NTYxOTEyRjM0 MzJCNi5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS81MzFlOTcyMC0w YjYyLTQzYTgtOGUxZi0yMzA2ODRlYWY5YWYvMy8wQkM2RDIyNUYwQ0UzRTYwNzcx MkE5QTk4QzQ1NjE5MTJGMzQzMkI2Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYQKjaaqmvkAJ+4EZGH5P xACeiYKy/JHtX2A8xWXKvILJJrp8W04DH7Y/7x9j+WPtdD3XKP9rJUfTX/JDK950 0R6/28Ue4cTZNdewuVwA8nyXcnskXoaaqLkbenBnvrzmHjOprche8UGaKLDcCoVO lx2Bz60SvDFfzPnvZjBOFy0AnXmOyTz9akLwKw8MGrPvWaiRSgsvluvdPe+Tj9/P lT5Q3izsFNBu5FdHYoI+gEg2tTxc3ajidMHOFWWGf9rXglL+NNRdUuiwL7lu/8zQ CyAaYqGa0ba6YYXD2wVyRS6ywuRjrBnKYkAfjZjEyqOcCqfwEr+i6TMn4nmLmaT+ Vg== -----END CERTIFICATE-----Generated at Sat Mar 7 09:43:00 2026 by rpki-client