$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/531e9720-0b62-43a8-8e1f-230684eaf9af/3/0BC6D225F0CE3E607712A9A98C4561912F3432B6.mft File: 0BC6D225F0CE3E607712A9A98C4561912F3432B6.mft (raw, json) Hash identifier: vIIKEN6uoyF1a8KXqO8rixu6zUpByPnIvH9OyaiHVoo= Subject key identifier: 14:B4:CB:C4:9B:DF:05:D8:A1:AE:24:56:55:33:B5:95:1F:5E:C1:AA Authority key identifier: 0B:C6:D2:25:F0:CE:3E:60:77:12:A9:A9:8C:45:61:91:2F:34:32:B6 Certificate issuer: /CN=0BC6D225F0CE3E607712A9A98C4561912F3432B6 Certificate serial: 5E74406DF871E8FD2ABCD4B74877BCCEBA745688 Authority info access: rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/0BC6D225F0CE3E607712A9A98C4561912F3432B6.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/531e9720-0b62-43a8-8e1f-230684eaf9af/3/0BC6D225F0CE3E607712A9A98C4561912F3432B6.mft Manifest number: 0157 Signing time: Tue 21 Apr 2026 07:14:27 +0000 Manifest this update: Tue 21 Apr 2026 07:09:27 +0000 Manifest next update: Wed 22 Apr 2026 08:58:27 +0000 Files and hashes: 1: 0BC6D225F0CE3E607712A9A98C4561912F3432B6.crl (hash: PnJxzvIWiIy/WxHZ9gOK+ckQU7Mej3Ed/ZfkEWT3UFI=) 2: 326130623a346530373a316330313a3a2f34382d3438203d3e20313531373034.roa (hash: VQpA5o0Pq6sWKS236BEYQWIKLgBdNGi2BEIwMERcePY=) 3: 326130623a346530373a316330323a3a2f34382d3438203d3e20313531373034.roa (hash: KL/ldm3b1AJMdY1QolVaUnbSkBg2mqpZUeWvBmihjnM=) 4: 326130623a346530373a316330303a3a2f34382d3438203d3e20313531373034.roa (hash: GbSyn/a7s2Tct/cl+IXObaOaKJfLlKE/P5lfI5qam+k=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/531e9720-0b62-43a8-8e1f-230684eaf9af/3/0BC6D225F0CE3E607712A9A98C4561912F3432B6.crl rsync://rsync.paas.rpki.ripe.net/repository/531e9720-0b62-43a8-8e1f-230684eaf9af/3/0BC6D225F0CE3E607712A9A98C4561912F3432B6.mft rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/0BC6D225F0CE3E607712A9A98C4561912F3432B6.cer rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.mft rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 21 Apr 2026 21:47:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:74:40:6d:f8:71:e8:fd:2a:bc:d4:b7:48:77:bc:ce:ba:74:56:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0BC6D225F0CE3E607712A9A98C4561912F3432B6 Validity Not Before: Apr 21 07:09:27 2026 GMT Not After : Apr 22 08:58:27 2026 GMT Subject: CN=14B4CBC49BDF05D8A1AE24565533B5951F5EC1AA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:56:1a:0b:46:bc:8e:a6:95:b4:7a:6a:9a:b2: 73:ab:b6:36:b1:13:b2:75:55:f3:05:24:77:94:a3: db:9c:e1:c9:a5:58:45:77:5c:0a:68:64:82:39:83: e4:e6:17:ca:c8:0c:92:ab:95:db:99:46:88:99:85: 3f:f9:8a:b4:1b:23:07:b7:5c:a8:42:fb:cb:d7:83: 94:0c:44:89:47:8d:f5:be:66:91:31:ee:57:af:68: 80:65:74:65:6e:f9:e8:44:bc:3a:c3:ea:51:5e:a7: dc:47:4c:6e:7f:0a:52:76:93:21:17:cd:2c:3d:47: 48:53:83:94:0a:f4:be:ef:77:08:52:a1:55:71:46: 27:5f:69:31:ba:26:0d:0c:74:10:7d:1d:c4:61:b1: 54:48:d9:27:d4:ab:cf:03:41:ae:17:b5:8f:3e:27: 5b:25:cb:d1:c1:aa:a2:ef:9a:a0:93:0f:dd:e1:26: fe:8e:ef:f1:ba:65:08:0d:37:3c:b9:b1:68:fe:7e: 00:6c:8e:99:d2:80:81:ed:5b:ea:77:23:6c:b9:25: 61:3f:57:70:23:d8:43:3a:4a:39:6d:5d:5a:5d:30: ea:d9:97:ba:f6:60:ec:ad:1b:a4:21:13:9d:0f:c4: 76:46:5a:a9:1a:e5:7c:50:e6:52:56:d5:bc:d8:82: b7:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:B4:CB:C4:9B:DF:05:D8:A1:AE:24:56:55:33:B5:95:1F:5E:C1:AA X509v3 Authority Key Identifier: keyid:0B:C6:D2:25:F0:CE:3E:60:77:12:A9:A9:8C:45:61:91:2F:34:32:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/531e9720-0b62-43a8-8e1f-230684eaf9af/3/0BC6D225F0CE3E607712A9A98C4561912F3432B6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/0BC6D225F0CE3E607712A9A98C4561912F3432B6.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/531e9720-0b62-43a8-8e1f-230684eaf9af/3/0BC6D225F0CE3E607712A9A98C4561912F3432B6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:14:71:6f:53:c9:c2:20:d0:05:ef:a3:14:0b:e7:9b:76:a9: 22:32:cb:7b:65:b7:50:5c:1c:bf:c7:02:29:5c:95:b3:c7:57: 0c:04:ca:21:f4:b9:db:51:d2:60:26:c2:85:c6:04:3e:20:ea: c3:ed:c3:43:e0:f6:ad:04:95:79:7d:71:e3:e7:c0:76:91:07: 41:4f:fe:25:ed:8d:c4:09:dd:31:13:9d:b2:4b:7d:fb:79:de: 6b:cd:1b:2f:98:c8:e0:d0:53:7d:c5:1d:d9:ee:4e:0a:34:cb: 1c:bd:2a:3f:2f:06:13:34:f7:be:6e:f8:b2:81:1f:69:b5:f5: 50:25:bd:04:f1:6a:6b:25:5a:99:93:1b:ad:2a:a1:c7:62:1e: a0:58:7e:21:45:a9:36:5d:7d:06:88:9b:22:f5:86:28:d6:5e: bb:10:85:d5:e4:0a:a4:91:17:bd:d5:03:c6:62:2d:87:a2:94: 48:5f:3f:f2:57:4a:b3:0f:d4:a4:90:4c:09:f3:0f:24:53:50: 77:ea:75:e0:dc:c2:63:55:34:c1:e8:e5:c3:b5:71:a4:d1:c6: ac:02:8f:ce:0e:97:a7:4f:88:d8:83:62:27:65:d9:1c:57:66: 87:35:ad:2d:fa:70:6d:c5:2f:4b:2b:61:44:94:c5:f1:52:b5: c7:a2:06:af -----BEGIN CERTIFICATE----- MIIFbTCCBFWgAwIBAgIUXnRAbfhx6P0qvNS3SHe8zrp0VogwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEJDNkQyMjVGMENFM0U2MDc3MTJBOUE5OEM0NTYxOTEy RjM0MzJCNjAeFw0yNjA0MjEwNzA5MjdaFw0yNjA0MjIwODU4MjdaMDMxMTAvBgNV BAMTKDE0QjRDQkM0OUJERjA1RDhBMUFFMjQ1NjU1MzNCNTk1MUY1RUMxQUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXVhoLRryOppW0emqasnOrtjax E7J1VfMFJHeUo9uc4cmlWEV3XApoZII5g+TmF8rIDJKrlduZRoiZhT/5irQbIwe3 XKhC+8vXg5QMRIlHjfW+ZpEx7levaIBldGVu+ehEvDrD6lFep9xHTG5/ClJ2kyEX zSw9R0hTg5QK9L7vdwhSoVVxRidfaTG6Jg0MdBB9HcRhsVRI2SfUq88DQa4XtY8+ J1sly9HBqqLvmqCTD93hJv6O7/G6ZQgNNzy5sWj+fgBsjpnSgIHtW+p3I2y5JWE/ V3Aj2EM6SjltXVpdMOrZl7r2YOytG6QhE50PxHZGWqka5XxQ5lJW1bzYgrcFAgMB AAGjggJ3MIICczAdBgNVHQ4EFgQUFLTLxJvfBdihriRWVTO1lR9ewaowHwYDVR0j BBgwFoAUC8bSJfDOPmB3EqmpjEVhkS80MrYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNTMxZTk3MjAtMGI2Mi00M2E4LThlMWYtMjMwNjg0ZWFm OWFmLzMvMEJDNkQyMjVGMENFM0U2MDc3MTJBOUE5OEM0NTYxOTEyRjM0MzJCNi5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzgxYTQ0NTY2NDU4ZTQ1NzhiNjdlZWQz MDUzZjgyMGY1LzEvMEJDNkQyMjVGMENFM0U2MDc3MTJBOUE5OEM0NTYxOTEyRjM0 MzJCNi5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS81MzFlOTcyMC0w YjYyLTQzYTgtOGUxZi0yMzA2ODRlYWY5YWYvMy8wQkM2RDIyNUYwQ0UzRTYwNzcx MkE5QTk4QzQ1NjE5MTJGMzQzMkI2Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADBRxb1PJwiDQBe+jFAvn m3apIjLLe2W3UFwcv8cCKVyVs8dXDATKIfS521HSYCbChcYEPiDqw+3DQ+D2rQSV eX1x4+fAdpEHQU/+Je2NxAndMROdskt9+3nea80bL5jI4NBTfcUd2e5OCjTLHL0q Py8GEzT3vm74soEfabX1UCW9BPFqayVamZMbrSqhx2IeoFh+IUWpNl19BoibIvWG KNZeuxCF1eQKpJEXvdUDxmIth6KUSF8/8ldKsw/UpJBMCfMPJFNQd+p14NzCY1U0 wejlw7VxpNHGrAKPzg6Xp0+I2INiJ2XZHFdmhzWtLfpwbcUvSythRJTF8VK1x6IG rw== -----END CERTIFICATE-----Generated at Tue Apr 21 13:27:50 2026 by rpki-client