$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/531e9720-0b62-43a8-8e1f-230684eaf9af/3/0BC6D225F0CE3E607712A9A98C4561912F3432B6.mft File: 0BC6D225F0CE3E607712A9A98C4561912F3432B6.mft (raw, json) Hash identifier: 0AQ1RHcFiVcx3ZZq7o1OefcivTpOFQJ+QudUp82KIh0= Subject key identifier: E7:E6:25:C2:95:10:92:28:6B:EF:99:E6:CD:9D:44:3C:DF:1C:AD:17 Authority key identifier: 0B:C6:D2:25:F0:CE:3E:60:77:12:A9:A9:8C:45:61:91:2F:34:32:B6 Certificate issuer: /CN=0BC6D225F0CE3E607712A9A98C4561912F3432B6 Certificate serial: 5CA3071CD6FAE3891185794852339EC00F95BF73 Authority info access: rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/0BC6D225F0CE3E607712A9A98C4561912F3432B6.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/531e9720-0b62-43a8-8e1f-230684eaf9af/3/0BC6D225F0CE3E607712A9A98C4561912F3432B6.mft Manifest number: 62 Signing time: Tue 21 Oct 2025 16:14:27 +0000 Manifest this update: Tue 21 Oct 2025 16:09:27 +0000 Manifest next update: Wed 22 Oct 2025 19:03:27 +0000 Files and hashes: 1: 326130623a346530373a316330313a3a2f34382d3438203d3e20313531373034.roa (hash: VQpA5o0Pq6sWKS236BEYQWIKLgBdNGi2BEIwMERcePY=) 2: 326130623a346530373a316330303a3a2f34382d3438203d3e20313531373034.roa (hash: GbSyn/a7s2Tct/cl+IXObaOaKJfLlKE/P5lfI5qam+k=) 3: 326130623a346530373a316330323a3a2f34382d3438203d3e20323133383632.roa (hash: /X68JagauxWyaFcSb3BbJbw5DWqXyP6Pe5X7avcQNQs=) 4: 0BC6D225F0CE3E607712A9A98C4561912F3432B6.crl (hash: e3khfj+qmFibF1yLhWTLc/zeXG+D16UT8VmfFnLxIok=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/531e9720-0b62-43a8-8e1f-230684eaf9af/3/0BC6D225F0CE3E607712A9A98C4561912F3432B6.crl rsync://rsync.paas.rpki.ripe.net/repository/531e9720-0b62-43a8-8e1f-230684eaf9af/3/0BC6D225F0CE3E607712A9A98C4561912F3432B6.mft rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/0BC6D225F0CE3E607712A9A98C4561912F3432B6.cer rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.mft rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 22 Oct 2025 19:03:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:a3:07:1c:d6:fa:e3:89:11:85:79:48:52:33:9e:c0:0f:95:bf:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0BC6D225F0CE3E607712A9A98C4561912F3432B6 Validity Not Before: Oct 21 16:09:27 2025 GMT Not After : Oct 22 19:03:27 2025 GMT Subject: CN=E7E625C2951092286BEF99E6CD9D443CDF1CAD17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:fd:05:15:9b:c0:37:61:2c:05:29:34:ea:27: f3:e7:2d:01:ea:c4:27:5f:05:25:c5:3d:88:64:c2: af:80:78:f3:cc:66:20:75:47:ae:46:d0:10:99:f5: 09:65:4d:46:55:ea:e1:42:9f:94:18:99:4e:59:28: e9:f6:f4:30:c1:6d:90:8d:c2:25:72:42:42:97:03: 4d:43:71:50:e3:23:a3:d3:b6:e0:8a:22:5d:cb:f6: fa:13:8c:ed:6b:c8:7a:15:cb:e7:91:d4:dc:09:66: ed:59:ce:37:14:93:2f:db:c1:4a:f7:1b:83:6e:d6: 28:11:8d:30:71:87:c1:c6:c6:78:2a:43:a5:ae:6e: 55:68:fc:4b:7c:da:07:66:d9:ab:ff:f3:d5:fd:01: 95:8e:8b:a1:8d:1e:b1:97:50:5c:00:c4:95:57:2e: 23:21:66:29:41:e6:8c:b0:fd:9f:d2:c5:57:f1:7d: f6:99:9e:dc:e7:f2:98:b5:dd:e4:63:bc:17:52:a1: d2:75:c3:72:d5:70:27:6b:89:37:d8:da:4d:f1:df: ff:da:62:53:f6:5f:e1:4b:87:c8:79:f1:72:b6:69: a4:2f:eb:d9:16:22:f9:45:32:35:b9:3f:ec:0b:24: f2:ea:77:0e:a9:8a:a8:6a:61:3b:c3:71:31:f2:91: e9:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:E6:25:C2:95:10:92:28:6B:EF:99:E6:CD:9D:44:3C:DF:1C:AD:17 X509v3 Authority Key Identifier: keyid:0B:C6:D2:25:F0:CE:3E:60:77:12:A9:A9:8C:45:61:91:2F:34:32:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/531e9720-0b62-43a8-8e1f-230684eaf9af/3/0BC6D225F0CE3E607712A9A98C4561912F3432B6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/0BC6D225F0CE3E607712A9A98C4561912F3432B6.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/531e9720-0b62-43a8-8e1f-230684eaf9af/3/0BC6D225F0CE3E607712A9A98C4561912F3432B6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:04:62:1a:33:8c:67:49:80:32:3e:d1:31:d6:a6:1c:cc:7d: 7c:68:6a:4e:03:5d:17:a6:47:95:37:09:ac:12:21:b8:32:26: d4:99:c9:e9:89:e8:d4:c2:85:09:52:c7:9c:81:af:21:5b:2f: f5:b5:3b:dd:0e:6c:ed:23:b5:1e:bb:07:9d:87:da:5a:db:9f: dd:03:53:56:ee:aa:fc:ce:56:43:b1:5b:e8:6f:dc:b8:f5:1b: e6:76:ed:86:f6:5a:92:ff:8c:a5:fa:63:11:ab:a4:ba:1f:c3: e3:7c:35:58:58:85:2e:e3:c5:e1:5b:9e:81:41:d2:22:3f:7e: 4c:87:8d:a8:69:f0:b7:5c:33:63:6a:95:ef:83:85:ad:40:36: 3d:a4:46:88:bb:ae:16:be:21:91:a7:5c:a8:7b:24:f3:06:3b: 22:e7:ea:6a:6f:3c:ad:13:29:e3:75:d1:ed:34:99:95:d8:45: 10:53:21:bf:1f:e9:0e:b3:13:69:7e:97:10:d9:0e:e4:d0:cb: 35:12:3d:07:a2:f0:67:9b:b7:01:79:c4:f9:db:ba:c7:1c:e7: 42:97:b2:3a:77:db:ee:84:fc:97:1e:e5:f2:1d:b9:28:f5:99: 65:3b:4f:d8:d0:92:26:04:5f:fb:fe:53:fa:ae:68:3f:a7:db: 60:15:3a:5e -----BEGIN CERTIFICATE----- MIIFbTCCBFWgAwIBAgIUXKMHHNb644kRhXlIUjOewA+Vv3MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEJDNkQyMjVGMENFM0U2MDc3MTJBOUE5OEM0NTYxOTEy RjM0MzJCNjAeFw0yNTEwMjExNjA5MjdaFw0yNTEwMjIxOTAzMjdaMDMxMTAvBgNV BAMTKEU3RTYyNUMyOTUxMDkyMjg2QkVGOTlFNkNEOUQ0NDNDREYxQ0FEMTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDL/QUVm8A3YSwFKTTqJ/PnLQHq xCdfBSXFPYhkwq+AePPMZiB1R65G0BCZ9QllTUZV6uFCn5QYmU5ZKOn29DDBbZCN wiVyQkKXA01DcVDjI6PTtuCKIl3L9voTjO1ryHoVy+eR1NwJZu1ZzjcUky/bwUr3 G4Nu1igRjTBxh8HGxngqQ6WublVo/Et82gdm2av/89X9AZWOi6GNHrGXUFwAxJVX LiMhZilB5oyw/Z/SxVfxffaZntzn8pi13eRjvBdSodJ1w3LVcCdriTfY2k3x3//a YlP2X+FLh8h58XK2aaQv69kWIvlFMjW5P+wLJPLqdw6piqhqYTvDcTHykem3AgMB AAGjggJ3MIICczAdBgNVHQ4EFgQU5+YlwpUQkihr75nmzZ1EPN8crRcwHwYDVR0j BBgwFoAUC8bSJfDOPmB3EqmpjEVhkS80MrYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNTMxZTk3MjAtMGI2Mi00M2E4LThlMWYtMjMwNjg0ZWFm OWFmLzMvMEJDNkQyMjVGMENFM0U2MDc3MTJBOUE5OEM0NTYxOTEyRjM0MzJCNi5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzgxYTQ0NTY2NDU4ZTQ1NzhiNjdlZWQz MDUzZjgyMGY1LzEvMEJDNkQyMjVGMENFM0U2MDc3MTJBOUE5OEM0NTYxOTEyRjM0 MzJCNi5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS81MzFlOTcyMC0w YjYyLTQzYTgtOGUxZi0yMzA2ODRlYWY5YWYvMy8wQkM2RDIyNUYwQ0UzRTYwNzcx MkE5QTk4QzQ1NjE5MTJGMzQzMkI2Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABgRiGjOMZ0mAMj7RMdam HMx9fGhqTgNdF6ZHlTcJrBIhuDIm1JnJ6Yno1MKFCVLHnIGvIVsv9bU73Q5s7SO1 HrsHnYfaWtuf3QNTVu6q/M5WQ7Fb6G/cuPUb5nbthvZakv+MpfpjEaukuh/D43w1 WFiFLuPF4VuegUHSIj9+TIeNqGnwt1wzY2qV74OFrUA2PaRGiLuuFr4hkadcqHsk 8wY7Iufqam88rRMp43XR7TSZldhFEFMhvx/pDrMTaX6XENkO5NDLNRI9B6LwZ5u3 AXnE+du6xxznQpeyOnfb7oT8lx7l8h25KPWZZTtP2NCSJgRf+/5T+q5oP6fbYBU6 Xg== -----END CERTIFICATE-----Generated at Wed Oct 22 12:10:42 2025 by rpki-client