$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/9/B6479E0904B301975B19D2BFF42BE08DBFD68D65.mft File: B6479E0904B301975B19D2BFF42BE08DBFD68D65.mft (raw, json) Hash identifier: UIOw/4ZOy+GdF0hK7zbtI63U0c3jJsNfwrveeUFAlOs= Subject key identifier: 59:4C:64:4E:97:B4:9C:DC:F4:8A:AB:E6:25:4D:CF:5B:F8:E4:E6:B2 Authority key identifier: B6:47:9E:09:04:B3:01:97:5B:19:D2:BF:F4:2B:E0:8D:BF:D6:8D:65 Certificate issuer: /CN=B6479E0904B301975B19D2BFF42BE08DBFD68D65 Certificate serial: 48C0EC4613AD4819E34E0F9F0BE1EF135C243923 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/B6479E0904B301975B19D2BFF42BE08DBFD68D65.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/9/B6479E0904B301975B19D2BFF42BE08DBFD68D65.mft Manifest number: 0261 Signing time: Tue 22 Sep 2026 12:33:01 +0000 Manifest this update: Tue 22 Sep 2026 12:28:01 +0000 Manifest next update: Wed 23 Sep 2026 15:57:01 +0000 Files and hashes: 1: B6479E0904B301975B19D2BFF42BE08DBFD68D65.crl (hash: 7XJqt7y7KTC9q99srcZtQA8QrdWqQ8OsumtsPu69EPg=) 2: 326130353a646663353a623030623a3a2f34382d3438203d3e20323033303639.roa (hash: FkfWJe29iHnNlJdMbmZJIXc57ti+3ftPAFjBN1jj2Hs=) 3: 326130353a646663353a3a2f33322d3332203d3e20323033303639.roa (hash: 1TfiGVzOrsDaGT5s8N1oSkECX3MMsr3gXEgw7UF/3c0=) 4: 326130353a646663353a3a2f34372d3437203d3e20323033303639.roa (hash: TnOKZ29z57WPuuAiM1ZmtS5ep5yz6fX+hNHGNg6nE64=) 5: 326130353a646663353a326630303a3a2f34302d3430203d3e20323033303639.roa (hash: h+i5iNq2HhuYpHClFvwdiV/aTyG+CJ60spe5U0eVWQY=) 6: 326130353a646663353a31303a3a2f34372d3437203d3e20323033303639.roa (hash: 43/Hl3X+BREyxQjjJV5Oda1rLTc1IyLJ2mCyE8ROtmI=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/9/B6479E0904B301975B19D2BFF42BE08DBFD68D65.crl rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/9/B6479E0904B301975B19D2BFF42BE08DBFD68D65.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/B6479E0904B301975B19D2BFF42BE08DBFD68D65.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 22 Sep 2026 23:56:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:c0:ec:46:13:ad:48:19:e3:4e:0f:9f:0b:e1:ef:13:5c:24:39:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B6479E0904B301975B19D2BFF42BE08DBFD68D65 Validity Not Before: Sep 22 12:28:01 2026 GMT Not After : Sep 23 15:57:01 2026 GMT Subject: CN=594C644E97B49CDCF48AABE6254DCF5BF8E4E6B2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:1d:0c:f3:a8:01:1f:72:18:c8:d2:98:06:0e: 7a:94:4d:20:53:41:e9:39:9d:e8:03:1b:50:55:4c: 24:75:64:fe:0e:ae:9d:5a:d7:fc:b3:46:0b:98:ad: 5e:1c:90:6a:96:d5:8f:2a:aa:e7:19:4e:f6:99:d3: 6f:a2:45:9a:df:80:c7:f9:16:88:0c:ff:04:15:bd: f5:70:2e:fe:e6:6f:0e:31:c0:8f:e8:53:c8:89:17: 5a:9e:10:03:3a:94:7a:01:47:6e:b7:0d:d1:f2:3f: ed:2b:1c:1b:a5:df:7f:ec:33:e5:ed:dd:78:13:de: 1c:03:29:3a:28:5c:63:70:de:16:d8:8d:cf:ce:13: aa:8b:dd:ff:51:79:bf:0f:e9:0d:78:75:a9:cb:98: 52:02:4a:fa:d9:8f:9c:c1:f6:62:ec:8b:e6:f1:cc: 71:19:be:0b:57:56:88:95:fe:50:78:1d:17:82:af: 62:e3:25:25:d7:d9:b2:17:1c:f0:70:d5:79:2d:d4: da:45:20:11:30:99:53:db:75:3a:7c:31:43:8f:9e: 4b:39:de:1b:4b:fd:ec:a7:10:2f:8a:dc:e1:c9:46: 1c:66:67:a6:8b:35:c1:72:6c:15:4a:ed:78:fa:b0: 37:e1:e4:e2:75:d0:62:c0:d2:d2:b3:d3:94:5e:ce: 6a:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:4C:64:4E:97:B4:9C:DC:F4:8A:AB:E6:25:4D:CF:5B:F8:E4:E6:B2 X509v3 Authority Key Identifier: keyid:B6:47:9E:09:04:B3:01:97:5B:19:D2:BF:F4:2B:E0:8D:BF:D6:8D:65 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/9/B6479E0904B301975B19D2BFF42BE08DBFD68D65.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/B6479E0904B301975B19D2BFF42BE08DBFD68D65.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/9/B6479E0904B301975B19D2BFF42BE08DBFD68D65.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:1d:b3:25:6f:9b:15:68:fb:ac:70:22:13:e4:3b:c0:6a:d4: f0:ee:5b:32:0a:49:08:7e:92:96:7a:51:20:5c:12:74:32:90: ce:d1:25:c7:55:ca:02:54:96:21:9a:d1:e6:56:bb:3c:c3:5f: 48:b8:b7:5f:f8:2c:99:03:19:a1:49:50:64:2e:5a:9b:26:80: 93:e2:f6:31:b7:c1:28:5c:74:bc:c4:44:25:e0:00:fc:3e:24: 6c:8b:70:0f:f2:2f:7b:64:f8:95:04:b7:66:73:77:06:34:8e: d2:89:98:25:e3:64:f8:78:c4:c4:01:17:cf:bb:8e:bd:32:23: 85:5a:5d:8f:67:ea:78:62:e6:c0:ed:cc:3f:20:8d:09:d0:e0: 85:38:0c:9b:48:49:a4:59:c1:2f:53:db:63:c0:7d:74:d9:d6: 63:b8:2c:09:0d:62:f8:4d:fc:75:0d:22:2d:62:a8:82:ea:da: da:cb:01:d1:de:cb:f6:9a:23:58:69:7e:c6:d6:5b:40:55:a8: db:64:ea:89:66:cc:3b:1f:c1:1e:c8:75:23:3c:6a:0f:45:a7: 21:2f:86:fa:14:b9:06:a8:f1:9e:99:a7:e4:00:79:3c:07:ae: 8a:6f:f7:7b:73:e0:52:ca:da:10:ae:e1:09:6c:8f:a1:e5:7b: d0:3b:e9:35 -----BEGIN CERTIFICATE----- MIIFbTCCBFWgAwIBAgIUSMDsRhOtSBnjTg+fC+HvE1wkOSMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjY0NzlFMDkwNEIzMDE5NzVCMTlEMkJGRjQyQkUwOERC RkQ2OEQ2NTAeFw0yNjA5MjIxMjI4MDFaFw0yNjA5MjMxNTU3MDFaMDMxMTAvBgNV BAMTKDU5NEM2NDRFOTdCNDlDRENGNDhBQUJFNjI1NERDRjVCRjhFNEU2QjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+HQzzqAEfchjI0pgGDnqUTSBT Qek5negDG1BVTCR1ZP4Orp1a1/yzRguYrV4ckGqW1Y8qqucZTvaZ02+iRZrfgMf5 FogM/wQVvfVwLv7mbw4xwI/oU8iJF1qeEAM6lHoBR263DdHyP+0rHBul33/sM+Xt 3XgT3hwDKTooXGNw3hbYjc/OE6qL3f9Reb8P6Q14danLmFICSvrZj5zB9mLsi+bx zHEZvgtXVoiV/lB4HReCr2LjJSXX2bIXHPBw1Xkt1NpFIBEwmVPbdTp8MUOPnks5 3htL/eynEC+K3OHJRhxmZ6aLNcFybBVK7Xj6sDfh5OJ10GLA0tKz05RezmrbAgMB AAGjggJ3MIICczAdBgNVHQ4EFgQUWUxkTpe0nNz0iqvmJU3PW/jk5rIwHwYDVR0j BBgwFoAUtkeeCQSzAZdbGdK/9Cvgjb/WjWUwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMWJmOGU5NzctNzI3OC00NmNmLWFiZDEtOTljZDFmZDJi ZTRlLzkvQjY0NzlFMDkwNEIzMDE5NzVCMTlEMkJGRjQyQkUwOERCRkQ2OEQ2NS5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1 YzkxYmUzZjlkLzcvQjY0NzlFMDkwNEIzMDE5NzVCMTlEMkJGRjQyQkUwOERCRkQ2 OEQ2NS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8xYmY4ZTk3Ny03 Mjc4LTQ2Y2YtYWJkMS05OWNkMWZkMmJlNGUvOS9CNjQ3OUUwOTA0QjMwMTk3NUIx OUQyQkZGNDJCRTA4REJGRDY4RDY1Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeR2zJW+bFWj7rHAiE+Q7 wGrU8O5bMgpJCH6SlnpRIFwSdDKQztElx1XKAlSWIZrR5la7PMNfSLi3X/gsmQMZ oUlQZC5amyaAk+L2MbfBKFx0vMREJeAA/D4kbItwD/Ive2T4lQS3ZnN3BjSO0omY JeNk+HjExAEXz7uOvTIjhVpdj2fqeGLmwO3MPyCNCdDghTgMm0hJpFnBL1PbY8B9 dNnWY7gsCQ1i+E38dQ0iLWKogura2ssB0d7L9pojWGl+xtZbQFWo22TqiWbMOx/B Hsh1IzxqD0WnIS+G+hS5Bqjxnpmn5AB5PAeuim/3e3PgUsraEK7hCWyPoeV70Dvp NQ== -----END CERTIFICATE-----Generated at Tue Sep 22 16:36:53 2026 by rpki-client