$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/531e9720-0b62-43a8-8e1f-230684eaf9af/3/0BC6D225F0CE3E607712A9A98C4561912F3432B6.mft File: 0BC6D225F0CE3E607712A9A98C4561912F3432B6.mft (raw, json) Hash identifier: PmMhPGkM0+fRE8nj8ZCVRpNKaJ+pRc8Lyu/72tDRqjA= Subject key identifier: 5D:78:77:6D:B9:47:E3:E8:6A:1C:D8:D4:9C:07:2F:33:EE:F3:07:39 Authority key identifier: 0B:C6:D2:25:F0:CE:3E:60:77:12:A9:A9:8C:45:61:91:2F:34:32:B6 Certificate issuer: /CN=0BC6D225F0CE3E607712A9A98C4561912F3432B6 Certificate serial: 5A941DCE3B287779831E9902C1DE779C4791FF8D Authority info access: rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/0BC6D225F0CE3E607712A9A98C4561912F3432B6.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/531e9720-0b62-43a8-8e1f-230684eaf9af/3/0BC6D225F0CE3E607712A9A98C4561912F3432B6.mft Manifest number: 01D2 Signing time: Tue 21 Jul 2026 06:05:42 +0000 Manifest this update: Tue 21 Jul 2026 06:00:42 +0000 Manifest next update: Wed 22 Jul 2026 06:58:42 +0000 Files and hashes: 1: 326130623a346530373a316330323a3a2f34382d3438203d3e20313531373034.roa (hash: KL/ldm3b1AJMdY1QolVaUnbSkBg2mqpZUeWvBmihjnM=) 2: 0BC6D225F0CE3E607712A9A98C4561912F3432B6.crl (hash: 03/pQnHQ1ObM86ns9T5mwNL22RsbjxDkduTHxXG2ZDQ=) 3: 326130623a346530373a316330303a3a2f34382d3438203d3e20313531373034.roa (hash: 9BHpytc7pXx6aIvZB3fYpuWzlGukQUf0KjUB6iLDphc=) 4: 326130623a346530373a316330313a3a2f34382d3438203d3e20313531373034.roa (hash: 0ULXldxk/0eSWpclGLE70Em7/bissXZuMoO5VQhOO28=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/531e9720-0b62-43a8-8e1f-230684eaf9af/3/0BC6D225F0CE3E607712A9A98C4561912F3432B6.crl rsync://rsync.paas.rpki.ripe.net/repository/531e9720-0b62-43a8-8e1f-230684eaf9af/3/0BC6D225F0CE3E607712A9A98C4561912F3432B6.mft rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/0BC6D225F0CE3E607712A9A98C4561912F3432B6.cer rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.mft rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 22 Jul 2026 06:58:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:94:1d:ce:3b:28:77:79:83:1e:99:02:c1:de:77:9c:47:91:ff:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0BC6D225F0CE3E607712A9A98C4561912F3432B6 Validity Not Before: Jul 21 06:00:42 2026 GMT Not After : Jul 22 06:58:42 2026 GMT Subject: CN=5D78776DB947E3E86A1CD8D49C072F33EEF30739 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:f5:0f:79:79:4a:36:62:4f:55:99:3e:1e:bd: 9d:38:6a:49:d8:a2:49:11:6e:3c:5e:8e:ac:5f:68: 74:3f:34:21:61:05:f4:7a:86:06:06:95:35:7f:25: b3:de:7a:24:ca:a2:98:7b:ec:b5:3c:a1:eb:37:5c: c3:5c:f1:2e:56:23:4e:02:ec:b1:09:93:63:31:14: a1:47:9c:6a:82:03:b6:16:2a:31:7a:05:22:f9:f0: fe:24:4d:3b:18:cd:59:d8:19:70:ac:91:fa:39:79: b5:2a:99:b4:7a:3f:64:40:58:45:62:6e:35:20:32: 1a:f1:86:9d:67:17:cd:32:31:fc:5d:d4:a2:ab:b3: 8a:1a:d5:c6:3b:e1:ff:2c:88:24:ef:2b:99:80:ba: e9:69:07:ba:98:64:3b:c9:d0:3c:e2:d5:48:3d:9f: 79:d3:30:3a:95:aa:04:c1:2e:df:4d:2b:8f:c1:d7: c4:9e:c6:e8:54:1e:51:a7:ab:70:3a:e9:81:c5:f4: 21:eb:98:53:7c:e8:7e:bf:8c:d1:7b:54:55:9c:59: 2a:62:0e:0f:55:eb:b8:bd:2c:0c:f2:1b:0d:54:eb: e6:8c:5e:d1:5d:80:79:0d:0f:a9:d7:5e:ce:d1:b4: a5:fc:df:46:29:5a:14:ce:5f:35:19:51:bb:a7:0d: 7b:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:78:77:6D:B9:47:E3:E8:6A:1C:D8:D4:9C:07:2F:33:EE:F3:07:39 X509v3 Authority Key Identifier: keyid:0B:C6:D2:25:F0:CE:3E:60:77:12:A9:A9:8C:45:61:91:2F:34:32:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/531e9720-0b62-43a8-8e1f-230684eaf9af/3/0BC6D225F0CE3E607712A9A98C4561912F3432B6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/0BC6D225F0CE3E607712A9A98C4561912F3432B6.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/531e9720-0b62-43a8-8e1f-230684eaf9af/3/0BC6D225F0CE3E607712A9A98C4561912F3432B6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:06:4d:fe:d3:4e:f1:67:f9:63:91:c7:49:d3:63:fe:db:c0: 88:5a:dc:35:fc:0c:af:f0:2b:43:99:16:e6:fd:d6:ee:46:02: 71:ab:1e:a4:b1:dd:ab:30:ac:47:29:19:fa:b5:e3:21:c2:ed: 9d:35:9f:a6:4d:96:a3:6c:c9:e7:a1:91:8d:c7:c6:2e:3d:1a: c4:6e:ca:67:9c:e9:9c:b8:ed:98:a1:f2:4d:f7:5b:dd:b2:6d: 61:68:f7:92:f4:aa:4f:8b:62:27:fd:27:2d:52:7f:c9:a3:9b: 0b:4d:ff:2c:93:c5:4d:e7:6e:24:e0:40:6c:68:82:6f:30:84: df:40:a9:e6:19:58:f8:00:c7:5e:b8:07:68:41:2a:db:91:4f: 38:51:4c:da:65:75:cc:82:a5:71:bc:e2:db:ab:bf:46:37:12: 50:ff:9c:aa:51:85:79:4c:f0:c7:0b:33:b9:3d:04:3b:58:89: e2:c8:dc:a7:e8:88:28:65:1d:0e:9f:17:fc:b7:a0:7c:16:63: d3:7d:e1:87:a2:4c:a1:5c:18:00:62:71:42:1f:7a:d4:93:8b: 80:a1:cc:88:69:72:a9:93:95:cd:51:99:9f:f0:9a:60:99:9b: 98:7f:4a:b7:b6:f3:1a:a1:5d:d2:1d:88:b1:89:ea:57:78:9e: d6:15:cb:68 -----BEGIN CERTIFICATE----- MIIFbTCCBFWgAwIBAgIUWpQdzjsod3mDHpkCwd53nEeR/40wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEJDNkQyMjVGMENFM0U2MDc3MTJBOUE5OEM0NTYxOTEy RjM0MzJCNjAeFw0yNjA3MjEwNjAwNDJaFw0yNjA3MjIwNjU4NDJaMDMxMTAvBgNV BAMTKDVENzg3NzZEQjk0N0UzRTg2QTFDRDhENDlDMDcyRjMzRUVGMzA3MzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDD9Q95eUo2Yk9VmT4evZ04aknY okkRbjxejqxfaHQ/NCFhBfR6hgYGlTV/JbPeeiTKoph77LU8oes3XMNc8S5WI04C 7LEJk2MxFKFHnGqCA7YWKjF6BSL58P4kTTsYzVnYGXCskfo5ebUqmbR6P2RAWEVi bjUgMhrxhp1nF80yMfxd1KKrs4oa1cY74f8siCTvK5mAuulpB7qYZDvJ0Dzi1Ug9 n3nTMDqVqgTBLt9NK4/B18SexuhUHlGnq3A66YHF9CHrmFN86H6/jNF7VFWcWSpi Dg9V67i9LAzyGw1U6+aMXtFdgHkND6nXXs7RtKX830YpWhTOXzUZUbunDXsPAgMB AAGjggJ3MIICczAdBgNVHQ4EFgQUXXh3bblH4+hqHNjUnAcvM+7zBzkwHwYDVR0j BBgwFoAUC8bSJfDOPmB3EqmpjEVhkS80MrYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNTMxZTk3MjAtMGI2Mi00M2E4LThlMWYtMjMwNjg0ZWFm OWFmLzMvMEJDNkQyMjVGMENFM0U2MDc3MTJBOUE5OEM0NTYxOTEyRjM0MzJCNi5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzgxYTQ0NTY2NDU4ZTQ1NzhiNjdlZWQz MDUzZjgyMGY1LzEvMEJDNkQyMjVGMENFM0U2MDc3MTJBOUE5OEM0NTYxOTEyRjM0 MzJCNi5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS81MzFlOTcyMC0w YjYyLTQzYTgtOGUxZi0yMzA2ODRlYWY5YWYvMy8wQkM2RDIyNUYwQ0UzRTYwNzcx MkE5QTk4QzQ1NjE5MTJGMzQzMkI2Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFgZN/tNO8Wf5Y5HHSdNj /tvAiFrcNfwMr/ArQ5kW5v3W7kYCcasepLHdqzCsRykZ+rXjIcLtnTWfpk2Wo2zJ 56GRjcfGLj0axG7KZ5zpnLjtmKHyTfdb3bJtYWj3kvSqT4tiJ/0nLVJ/yaObC03/ LJPFTeduJOBAbGiCbzCE30Cp5hlY+ADHXrgHaEEq25FPOFFM2mV1zIKlcbzi26u/ RjcSUP+cqlGFeUzwxwszuT0EO1iJ4sjcp+iIKGUdDp8X/LegfBZj033hh6JMoVwY AGJxQh961JOLgKHMiGlyqZOVzVGZn/CaYJmbmH9Kt7bzGqFd0h2IsYnqV3ie1hXL aA== -----END CERTIFICATE-----Generated at Tue Jul 21 20:35:04 2026 by rpki-client