$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/531e9720-0b62-43a8-8e1f-230684eaf9af/3/0BC6D225F0CE3E607712A9A98C4561912F3432B6.mft File: 0BC6D225F0CE3E607712A9A98C4561912F3432B6.mft (raw, json) Hash identifier: uJdllKa0Ag6yB8JBiTpA3TGg+A1FuyA6VFQ3HRtzVAE= Subject key identifier: B6:4C:32:A2:7C:E0:20:04:59:12:E1:BB:69:44:E3:CC:08:16:47:6C Authority key identifier: 0B:C6:D2:25:F0:CE:3E:60:77:12:A9:A9:8C:45:61:91:2F:34:32:B6 Certificate issuer: /CN=0BC6D225F0CE3E607712A9A98C4561912F3432B6 Certificate serial: 3F91F40CDA49F6D938B6F8EF52E7704CFF5711A9 Authority info access: rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/0BC6D225F0CE3E607712A9A98C4561912F3432B6.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/531e9720-0b62-43a8-8e1f-230684eaf9af/3/0BC6D225F0CE3E607712A9A98C4561912F3432B6.mft Manifest number: 020E Signing time: Fri 04 Sep 2026 13:01:20 +0000 Manifest this update: Fri 04 Sep 2026 12:56:20 +0000 Manifest next update: Sat 05 Sep 2026 15:05:20 +0000 Files and hashes: 1: 326130623a346530373a316330313a3a2f34382d3438203d3e20313531373034.roa (hash: 0ULXldxk/0eSWpclGLE70Em7/bissXZuMoO5VQhOO28=) 2: 0BC6D225F0CE3E607712A9A98C4561912F3432B6.crl (hash: BrXfXZ1JgQug6mia5fgZBM+B6JUx3fuHd3VsBerM+S8=) 3: 326130623a346530373a316330323a3a2f34382d3438203d3e20313531373034.roa (hash: KL/ldm3b1AJMdY1QolVaUnbSkBg2mqpZUeWvBmihjnM=) 4: 326130623a346530373a316330343a3a2f34382d3438203d3e20313531373034.roa (hash: YHC+/trBPqR3Izb59lUeCAauUW49i7hzZ9zUDI0VhRM=) 5: 326130623a346530373a316330303a3a2f34382d3438203d3e20313531373034.roa (hash: 9BHpytc7pXx6aIvZB3fYpuWzlGukQUf0KjUB6iLDphc=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/531e9720-0b62-43a8-8e1f-230684eaf9af/3/0BC6D225F0CE3E607712A9A98C4561912F3432B6.crl rsync://rsync.paas.rpki.ripe.net/repository/531e9720-0b62-43a8-8e1f-230684eaf9af/3/0BC6D225F0CE3E607712A9A98C4561912F3432B6.mft rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/0BC6D225F0CE3E607712A9A98C4561912F3432B6.cer rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.mft rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 05 Sep 2026 14:10:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:91:f4:0c:da:49:f6:d9:38:b6:f8:ef:52:e7:70:4c:ff:57:11:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0BC6D225F0CE3E607712A9A98C4561912F3432B6 Validity Not Before: Sep 4 12:56:20 2026 GMT Not After : Sep 5 15:05:20 2026 GMT Subject: CN=B64C32A27CE020045912E1BB6944E3CC0816476C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:52:be:d1:83:c7:42:ee:c1:af:90:27:64:03: 52:10:7e:ed:eb:55:b9:b1:18:91:fa:d6:7c:e3:c8: 69:40:7a:5c:af:a9:09:b0:4c:75:5e:8c:8e:24:7c: be:33:53:56:01:f9:24:04:f5:09:d5:fc:c5:24:34: 9c:d1:06:69:ab:c9:98:04:2a:91:fc:c4:0b:da:18: da:6c:7f:30:88:23:4e:04:4b:d7:ba:54:8c:a7:17: 1b:9f:c3:18:5c:21:53:dd:65:75:38:6d:be:9b:3d: f7:fa:ef:a1:df:f6:5f:51:11:19:58:80:a9:c2:24: 35:86:e7:38:f6:ab:31:c6:15:b0:6e:ab:88:31:aa: b9:c6:d7:83:a0:9f:70:25:9e:a6:fa:27:bf:c0:27: 26:d6:5c:60:f4:fb:00:16:d1:74:a7:5d:f7:58:b5: 7e:17:87:21:cb:c8:f0:09:f8:69:6b:17:0a:2a:22: bc:6c:7f:ed:d1:c9:85:54:c6:50:59:e6:84:6f:f2: d4:64:3f:21:e4:24:d8:53:89:4e:0d:14:e6:fa:68: 92:ea:6d:2c:df:3e:63:74:68:88:f0:bf:25:56:81: 51:4b:f3:a0:75:7d:ba:2e:71:21:64:ae:d7:8c:cc: bb:b5:bc:63:b1:e7:d9:e4:c4:61:31:d0:b3:c2:b8: b9:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:4C:32:A2:7C:E0:20:04:59:12:E1:BB:69:44:E3:CC:08:16:47:6C X509v3 Authority Key Identifier: keyid:0B:C6:D2:25:F0:CE:3E:60:77:12:A9:A9:8C:45:61:91:2F:34:32:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/531e9720-0b62-43a8-8e1f-230684eaf9af/3/0BC6D225F0CE3E607712A9A98C4561912F3432B6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/0BC6D225F0CE3E607712A9A98C4561912F3432B6.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/531e9720-0b62-43a8-8e1f-230684eaf9af/3/0BC6D225F0CE3E607712A9A98C4561912F3432B6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 92:6f:f1:44:bc:4c:cc:87:63:1f:f3:b5:57:d4:35:4a:6c:74: 09:b0:8a:21:f2:6d:3c:a5:a7:3a:37:7e:3f:0c:ed:68:a1:90: a9:24:3f:38:09:6f:4c:07:1d:a7:0f:e8:c7:47:4c:4c:ee:9a: b2:56:96:39:72:95:5c:16:67:0d:d6:e7:07:c5:ef:be:41:a5: 38:6e:f2:e7:ef:af:ab:7b:98:98:9d:12:9b:5c:1a:52:4a:03: 4b:c6:4d:78:d7:a8:98:72:fa:19:d5:d4:a3:8e:5d:cf:08:74: 85:43:4f:e5:71:b8:21:e1:12:e3:59:ec:03:39:7e:94:ab:52: 88:b3:b8:c7:c7:52:78:25:0f:27:49:43:40:e9:d3:8c:eb:f5: 97:dd:90:59:95:00:54:e3:2e:be:b3:b3:a4:80:67:f3:a1:bb: c7:2a:c7:30:56:bd:7c:c8:0b:30:93:3c:12:2f:be:b2:87:c1: bd:72:df:5d:44:12:cd:fe:d0:f8:ac:cc:6c:d3:e9:09:3d:87: 2b:43:1b:e5:0a:b3:a0:17:15:8b:c9:ec:37:4a:7b:97:ed:cd: 7d:36:8a:72:ad:d9:2e:5e:c6:30:0a:0a:7b:5a:89:61:e1:cd: b3:a0:be:0a:f5:0c:f5:99:d4:d6:bf:8c:ec:4f:14:b1:20:da: f4:ca:42:47 -----BEGIN CERTIFICATE----- MIIFbTCCBFWgAwIBAgIUP5H0DNpJ9tk4tvjvUudwTP9XEakwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEJDNkQyMjVGMENFM0U2MDc3MTJBOUE5OEM0NTYxOTEy RjM0MzJCNjAeFw0yNjA5MDQxMjU2MjBaFw0yNjA5MDUxNTA1MjBaMDMxMTAvBgNV BAMTKEI2NEMzMkEyN0NFMDIwMDQ1OTEyRTFCQjY5NDRFM0NDMDgxNjQ3NkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmUr7Rg8dC7sGvkCdkA1IQfu3r VbmxGJH61nzjyGlAelyvqQmwTHVejI4kfL4zU1YB+SQE9QnV/MUkNJzRBmmryZgE KpH8xAvaGNpsfzCII04ES9e6VIynFxufwxhcIVPdZXU4bb6bPff676Hf9l9RERlY gKnCJDWG5zj2qzHGFbBuq4gxqrnG14Ogn3Alnqb6J7/AJybWXGD0+wAW0XSnXfdY tX4XhyHLyPAJ+GlrFwoqIrxsf+3RyYVUxlBZ5oRv8tRkPyHkJNhTiU4NFOb6aJLq bSzfPmN0aIjwvyVWgVFL86B1fboucSFkrteMzLu1vGOx59nkxGEx0LPCuLmzAgMB AAGjggJ3MIICczAdBgNVHQ4EFgQUtkwyonzgIARZEuG7aUTjzAgWR2wwHwYDVR0j BBgwFoAUC8bSJfDOPmB3EqmpjEVhkS80MrYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNTMxZTk3MjAtMGI2Mi00M2E4LThlMWYtMjMwNjg0ZWFm OWFmLzMvMEJDNkQyMjVGMENFM0U2MDc3MTJBOUE5OEM0NTYxOTEyRjM0MzJCNi5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzgxYTQ0NTY2NDU4ZTQ1NzhiNjdlZWQz MDUzZjgyMGY1LzEvMEJDNkQyMjVGMENFM0U2MDc3MTJBOUE5OEM0NTYxOTEyRjM0 MzJCNi5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS81MzFlOTcyMC0w YjYyLTQzYTgtOGUxZi0yMzA2ODRlYWY5YWYvMy8wQkM2RDIyNUYwQ0UzRTYwNzcx MkE5QTk4QzQ1NjE5MTJGMzQzMkI2Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkm/xRLxMzIdjH/O1V9Q1 Smx0CbCKIfJtPKWnOjd+PwztaKGQqSQ/OAlvTAcdpw/ox0dMTO6aslaWOXKVXBZn DdbnB8XvvkGlOG7y5++vq3uYmJ0Sm1waUkoDS8ZNeNeomHL6GdXUo45dzwh0hUNP 5XG4IeES41nsAzl+lKtSiLO4x8dSeCUPJ0lDQOnTjOv1l92QWZUAVOMuvrOzpIBn 86G7xyrHMFa9fMgLMJM8Ei++sofBvXLfXUQSzf7Q+KzMbNPpCT2HK0Mb5QqzoBcV i8nsN0p7l+3NfTaKcq3ZLl7GMAoKe1qJYeHNs6C+CvUM9ZnU1r+M7E8UsSDa9MpC Rw== -----END CERTIFICATE-----Generated at Sat Sep 5 00:36:14 2026 by rpki-client