$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/531e9720-0b62-43a8-8e1f-230684eaf9af/3/0BC6D225F0CE3E607712A9A98C4561912F3432B6.mft File: 0BC6D225F0CE3E607712A9A98C4561912F3432B6.mft (raw, json) Hash identifier: 3HdjrpV4NuovIxb3lcdxPxFexqCoQlJDeZMA6tBrV5o= Subject key identifier: 1B:D5:F5:18:74:AB:34:27:38:2E:A8:B4:71:5D:A2:02:95:94:FD:CE Authority key identifier: 0B:C6:D2:25:F0:CE:3E:60:77:12:A9:A9:8C:45:61:91:2F:34:32:B6 Certificate issuer: /CN=0BC6D225F0CE3E607712A9A98C4561912F3432B6 Certificate serial: 104C7222F610E28249B3D51C1D4F3F83B759C70A Authority info access: rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/0BC6D225F0CE3E607712A9A98C4561912F3432B6.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/531e9720-0b62-43a8-8e1f-230684eaf9af/3/0BC6D225F0CE3E607712A9A98C4561912F3432B6.mft Manifest number: 26 Signing time: Sat 06 Sep 2025 09:49:17 +0000 Manifest this update: Sat 06 Sep 2025 09:44:17 +0000 Manifest next update: Sun 07 Sep 2025 11:35:17 +0000 Files and hashes: 1: 0BC6D225F0CE3E607712A9A98C4561912F3432B6.crl (hash: 79+gvvkLRFTB4mvTbsyX61TEh+Jw/p3/0tLzy2Q4yRU=) 2: 326130623a346530373a316330313a3a2f34382d3438203d3e20313531373034.roa (hash: VQpA5o0Pq6sWKS236BEYQWIKLgBdNGi2BEIwMERcePY=) 3: 326130623a346530373a316330323a3a2f34382d3438203d3e20323133383632.roa (hash: /X68JagauxWyaFcSb3BbJbw5DWqXyP6Pe5X7avcQNQs=) 4: 326130623a346530373a316330303a3a2f34382d3438203d3e20313531373034.roa (hash: GbSyn/a7s2Tct/cl+IXObaOaKJfLlKE/P5lfI5qam+k=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/531e9720-0b62-43a8-8e1f-230684eaf9af/3/0BC6D225F0CE3E607712A9A98C4561912F3432B6.crl rsync://rsync.paas.rpki.ripe.net/repository/531e9720-0b62-43a8-8e1f-230684eaf9af/3/0BC6D225F0CE3E607712A9A98C4561912F3432B6.mft rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/0BC6D225F0CE3E607712A9A98C4561912F3432B6.cer rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.mft rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Sep 2025 00:05:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:4c:72:22:f6:10:e2:82:49:b3:d5:1c:1d:4f:3f:83:b7:59:c7:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0BC6D225F0CE3E607712A9A98C4561912F3432B6 Validity Not Before: Sep 6 09:44:17 2025 GMT Not After : Sep 7 11:35:17 2025 GMT Subject: CN=1BD5F51874AB3427382EA8B4715DA2029594FDCE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:aa:87:c6:77:18:63:cd:fd:ae:73:2e:65:49: cb:84:f5:21:9f:24:aa:3c:14:4a:50:b6:6c:17:0b: 5f:01:d5:d9:85:fd:0a:64:8d:1d:13:b5:d7:34:82: 92:f5:4c:00:97:69:54:69:c5:a3:d3:48:76:c8:47: 29:33:e1:6b:be:3a:7b:b5:42:e5:b6:7d:b9:85:fc: 21:5f:25:80:3e:d2:da:9d:2c:bc:d5:f2:fc:60:cd: fb:b8:9e:23:36:69:68:76:79:a9:98:c4:84:f3:31: 1d:f0:d4:6d:4a:13:96:bd:a0:de:e7:0e:1f:43:25: 15:52:3d:90:4c:75:10:c1:f6:ce:33:d7:b4:50:f8: 38:a2:3d:a9:84:ea:a7:75:4e:38:d4:53:8d:db:f1: 37:00:c8:75:04:2c:8d:23:e3:b2:76:65:ac:ea:1c: ae:f6:c7:0e:66:26:63:04:19:b2:73:4a:81:64:22: 52:d9:0a:db:43:7b:76:38:d9:c7:d2:24:71:8f:6f: 07:34:e5:13:ec:29:76:7a:d9:9d:69:57:6b:e6:62: 4d:b7:eb:75:12:54:48:31:eb:16:24:cc:c9:8e:d1: 32:4a:52:49:16:70:b5:83:0f:6e:f0:94:de:00:b7: 90:98:57:cb:78:f6:81:71:62:e7:11:bb:0b:08:33: 77:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:D5:F5:18:74:AB:34:27:38:2E:A8:B4:71:5D:A2:02:95:94:FD:CE X509v3 Authority Key Identifier: keyid:0B:C6:D2:25:F0:CE:3E:60:77:12:A9:A9:8C:45:61:91:2F:34:32:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/531e9720-0b62-43a8-8e1f-230684eaf9af/3/0BC6D225F0CE3E607712A9A98C4561912F3432B6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/0BC6D225F0CE3E607712A9A98C4561912F3432B6.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/531e9720-0b62-43a8-8e1f-230684eaf9af/3/0BC6D225F0CE3E607712A9A98C4561912F3432B6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c0:75:10:45:2e:1a:13:f3:b1:54:58:7f:38:bf:a9:70:bc:54: d3:41:80:11:db:88:4c:50:8a:5b:ee:d5:1e:86:c1:94:b6:1a: 28:5b:3b:48:6e:0b:c2:29:f1:3b:bf:aa:e1:cc:fc:bd:23:d5: 9c:d7:de:ad:41:5b:2b:cc:0c:17:9b:bf:7c:dd:b5:77:7d:e2: 81:81:99:dc:15:a9:f4:9d:4b:69:9c:2e:cd:cd:31:a6:14:fa: 4f:78:93:5c:22:f7:3c:0b:5e:3f:3d:6d:ac:32:b2:95:aa:f2: 6b:6a:55:c4:81:b7:4a:22:3c:9d:c6:25:b7:44:4e:7e:b6:8c: 7c:35:6e:45:ef:96:f2:3f:70:a1:e5:04:64:8a:de:50:de:b6: 35:50:61:9d:10:2b:07:38:98:97:0b:5c:4d:30:7a:1a:3f:42: 52:df:c1:56:67:b5:58:da:64:3f:9f:b9:3d:e4:17:94:58:79: 44:22:4f:80:28:0e:be:6a:4e:24:37:a1:23:50:39:a0:1b:7f: 7a:aa:62:a2:9c:82:6f:42:80:ce:35:ca:2a:50:81:3f:87:b7: 43:57:83:2d:70:1f:30:c1:ae:24:bf:d9:7d:ed:f5:0d:b4:97: 7a:ab:14:8b:4a:2d:af:53:9a:01:e2:dc:32:f2:35:40:bd:22: cf:91:45:86 -----BEGIN CERTIFICATE----- MIIFbTCCBFWgAwIBAgIUEExyIvYQ4oJJs9UcHU8/g7dZxwowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEJDNkQyMjVGMENFM0U2MDc3MTJBOUE5OEM0NTYxOTEy RjM0MzJCNjAeFw0yNTA5MDYwOTQ0MTdaFw0yNTA5MDcxMTM1MTdaMDMxMTAvBgNV BAMTKDFCRDVGNTE4NzRBQjM0MjczODJFQThCNDcxNURBMjAyOTU5NEZEQ0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRqofGdxhjzf2ucy5lScuE9SGf JKo8FEpQtmwXC18B1dmF/QpkjR0Ttdc0gpL1TACXaVRpxaPTSHbIRykz4Wu+Onu1 QuW2fbmF/CFfJYA+0tqdLLzV8vxgzfu4niM2aWh2eamYxITzMR3w1G1KE5a9oN7n Dh9DJRVSPZBMdRDB9s4z17RQ+DiiPamE6qd1TjjUU43b8TcAyHUELI0j47J2Zazq HK72xw5mJmMEGbJzSoFkIlLZCttDe3Y42cfSJHGPbwc05RPsKXZ62Z1pV2vmYk23 63USVEgx6xYkzMmO0TJKUkkWcLWDD27wlN4At5CYV8t49oFxYucRuwsIM3dTAgMB AAGjggJ3MIICczAdBgNVHQ4EFgQUG9X1GHSrNCc4Lqi0cV2iApWU/c4wHwYDVR0j BBgwFoAUC8bSJfDOPmB3EqmpjEVhkS80MrYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNTMxZTk3MjAtMGI2Mi00M2E4LThlMWYtMjMwNjg0ZWFm OWFmLzMvMEJDNkQyMjVGMENFM0U2MDc3MTJBOUE5OEM0NTYxOTEyRjM0MzJCNi5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzgxYTQ0NTY2NDU4ZTQ1NzhiNjdlZWQz MDUzZjgyMGY1LzEvMEJDNkQyMjVGMENFM0U2MDc3MTJBOUE5OEM0NTYxOTEyRjM0 MzJCNi5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS81MzFlOTcyMC0w YjYyLTQzYTgtOGUxZi0yMzA2ODRlYWY5YWYvMy8wQkM2RDIyNUYwQ0UzRTYwNzcx MkE5QTk4QzQ1NjE5MTJGMzQzMkI2Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwHUQRS4aE/OxVFh/OL+p cLxU00GAEduITFCKW+7VHobBlLYaKFs7SG4LwinxO7+q4cz8vSPVnNferUFbK8wM F5u/fN21d33igYGZ3BWp9J1LaZwuzc0xphT6T3iTXCL3PAtePz1trDKylarya2pV xIG3SiI8ncYlt0ROfraMfDVuRe+W8j9woeUEZIreUN62NVBhnRArBziYlwtcTTB6 Gj9CUt/BVme1WNpkP5+5PeQXlFh5RCJPgCgOvmpOJDehI1A5oBt/eqpiopyCb0KA zjXKKlCBP4e3Q1eDLXAfMMGuJL/Zfe31DbSXeqsUi0otr1OaAeLcMvI1QL0iz5FF hg== -----END CERTIFICATE-----Generated at Sat Sep 6 16:28:59 2025 by rpki-client