$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/531e9720-0b62-43a8-8e1f-230684eaf9af/3/0BC6D225F0CE3E607712A9A98C4561912F3432B6.mft File: 0BC6D225F0CE3E607712A9A98C4561912F3432B6.mft (raw, json) Hash identifier: N9WSudfW+SXSiCfFR/FCL/Uf7ZIyJNBTfnusL4RouQA= Subject key identifier: 01:D8:8E:06:8A:56:76:10:FA:C1:69:94:29:61:61:5A:1F:B9:88:11 Authority key identifier: 0B:C6:D2:25:F0:CE:3E:60:77:12:A9:A9:8C:45:61:91:2F:34:32:B6 Certificate issuer: /CN=0BC6D225F0CE3E607712A9A98C4561912F3432B6 Certificate serial: 11646A56DA35F3B29DC59E08B6787B07602BF9EB Authority info access: rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/0BC6D225F0CE3E607712A9A98C4561912F3432B6.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/531e9720-0b62-43a8-8e1f-230684eaf9af/3/0BC6D225F0CE3E607712A9A98C4561912F3432B6.mft Manifest number: 0114 Signing time: Mon 02 Mar 2026 01:19:27 +0000 Manifest this update: Mon 02 Mar 2026 01:14:27 +0000 Manifest next update: Tue 03 Mar 2026 02:05:27 +0000 Files and hashes: 1: 326130623a346530373a316330313a3a2f34382d3438203d3e20313531373034.roa (hash: VQpA5o0Pq6sWKS236BEYQWIKLgBdNGi2BEIwMERcePY=) 2: 326130623a346530373a316330323a3a2f34382d3438203d3e20313531373034.roa (hash: KL/ldm3b1AJMdY1QolVaUnbSkBg2mqpZUeWvBmihjnM=) 3: 0BC6D225F0CE3E607712A9A98C4561912F3432B6.crl (hash: 4Bp1FcbtLNMy/6dsH1Vxn7mFcRjwEI8r7ftRP42cptI=) 4: 326130623a346530373a316330303a3a2f34382d3438203d3e20313531373034.roa (hash: GbSyn/a7s2Tct/cl+IXObaOaKJfLlKE/P5lfI5qam+k=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/531e9720-0b62-43a8-8e1f-230684eaf9af/3/0BC6D225F0CE3E607712A9A98C4561912F3432B6.crl rsync://rsync.paas.rpki.ripe.net/repository/531e9720-0b62-43a8-8e1f-230684eaf9af/3/0BC6D225F0CE3E607712A9A98C4561912F3432B6.mft rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/0BC6D225F0CE3E607712A9A98C4561912F3432B6.cer rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.mft rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Mar 2026 23:15:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:64:6a:56:da:35:f3:b2:9d:c5:9e:08:b6:78:7b:07:60:2b:f9:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0BC6D225F0CE3E607712A9A98C4561912F3432B6 Validity Not Before: Mar 2 01:14:27 2026 GMT Not After : Mar 3 02:05:27 2026 GMT Subject: CN=01D88E068A567610FAC169942961615A1FB98811 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:1c:68:5e:19:9e:72:42:b1:57:e7:2a:91:90: c0:1d:6d:df:0e:c3:36:a7:f9:20:6e:28:63:2c:5b: 85:95:58:90:78:53:21:f2:a6:14:a4:e1:13:87:fa: 95:8a:c9:fa:66:b4:d2:3b:d4:f8:57:7d:50:ae:44: 91:77:1b:12:67:7d:d9:4e:67:f9:37:a2:8e:a0:a5: 50:30:df:15:3f:ba:46:f6:aa:4d:c7:70:c5:2b:fc: c7:6f:84:d9:30:f4:ae:cf:cd:f7:bc:be:01:62:5f: e5:a8:f5:84:81:37:9d:5f:f5:7f:09:ec:ad:41:17: 52:cd:8f:76:51:91:9d:53:d1:fe:d4:ed:d2:04:06: d8:98:00:7d:9d:28:1b:4c:dc:44:f0:5b:75:c5:28: 00:cb:e2:9a:23:fc:bf:42:96:50:85:3e:65:57:2a: 89:89:d4:3d:3c:8e:be:6a:f5:bc:87:8c:81:d6:9c: 6e:ec:a7:75:71:9a:4c:63:6f:fc:23:96:dd:5b:b6: 9d:00:50:b2:11:57:4c:77:ca:52:02:72:67:bd:45: e4:3e:ed:7d:09:2c:c2:d3:48:77:ba:61:4a:16:48: 7b:4a:fa:5f:3b:da:56:3b:26:a8:d9:4f:53:51:1a: 41:9b:ea:2a:2a:fc:91:c7:c3:5e:06:0b:b8:09:3a: de:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:D8:8E:06:8A:56:76:10:FA:C1:69:94:29:61:61:5A:1F:B9:88:11 X509v3 Authority Key Identifier: keyid:0B:C6:D2:25:F0:CE:3E:60:77:12:A9:A9:8C:45:61:91:2F:34:32:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/531e9720-0b62-43a8-8e1f-230684eaf9af/3/0BC6D225F0CE3E607712A9A98C4561912F3432B6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/0BC6D225F0CE3E607712A9A98C4561912F3432B6.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/531e9720-0b62-43a8-8e1f-230684eaf9af/3/0BC6D225F0CE3E607712A9A98C4561912F3432B6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:0d:20:47:6c:14:53:e1:4f:c8:4c:9d:54:48:34:9b:2e:47: ba:1c:7a:eb:1b:6d:5e:69:02:65:56:d1:80:c0:99:10:8a:cc: 23:dc:c9:24:d5:e2:26:5e:45:eb:30:b7:3a:64:5b:94:1a:df: af:41:78:28:15:47:32:1e:e5:0a:9a:65:0d:20:85:8e:09:81: 67:85:a2:4a:de:16:ab:43:c7:b6:90:21:ec:7d:f3:98:42:c3: a3:32:52:f7:39:6a:69:dd:5e:48:1a:a3:f4:2e:98:cf:be:af: f7:3c:72:20:8a:d5:96:08:00:73:9f:78:9d:ab:b5:1a:99:6a: 60:97:d3:33:0a:00:b8:b8:dc:b7:94:d3:b0:a7:60:81:d4:a9: b6:45:16:27:b9:f5:31:17:ae:68:49:b0:28:c3:15:17:b9:d4: 15:5c:24:32:aa:20:b1:31:b8:a7:c1:37:74:75:b8:1c:4f:a5: ff:df:01:ef:c9:ec:a0:f2:6c:c2:fc:a2:9e:5e:71:2c:68:85: 1d:05:48:8d:c1:77:0a:2e:d5:50:ff:11:ff:ff:bb:cb:ec:b4: ab:57:38:5c:cf:a6:c6:69:9b:05:47:52:e8:1b:41:57:8b:10: 97:0b:33:2e:72:76:20:ee:66:e3:51:05:ac:a3:ff:e5:27:2b: 0b:c0:93:15 -----BEGIN CERTIFICATE----- MIIFbTCCBFWgAwIBAgIUEWRqVto187KdxZ4Itnh7B2Ar+eswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEJDNkQyMjVGMENFM0U2MDc3MTJBOUE5OEM0NTYxOTEy RjM0MzJCNjAeFw0yNjAzMDIwMTE0MjdaFw0yNjAzMDMwMjA1MjdaMDMxMTAvBgNV BAMTKDAxRDg4RTA2OEE1Njc2MTBGQUMxNjk5NDI5NjE2MTVBMUZCOTg4MTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFHGheGZ5yQrFX5yqRkMAdbd8O wzan+SBuKGMsW4WVWJB4UyHyphSk4ROH+pWKyfpmtNI71PhXfVCuRJF3GxJnfdlO Z/k3oo6gpVAw3xU/ukb2qk3HcMUr/MdvhNkw9K7Pzfe8vgFiX+Wo9YSBN51f9X8J 7K1BF1LNj3ZRkZ1T0f7U7dIEBtiYAH2dKBtM3ETwW3XFKADL4poj/L9CllCFPmVX KomJ1D08jr5q9byHjIHWnG7sp3Vxmkxjb/wjlt1btp0AULIRV0x3ylICcme9ReQ+ 7X0JLMLTSHe6YUoWSHtK+l872lY7JqjZT1NRGkGb6ioq/JHHw14GC7gJOt65AgMB AAGjggJ3MIICczAdBgNVHQ4EFgQUAdiOBopWdhD6wWmUKWFhWh+5iBEwHwYDVR0j BBgwFoAUC8bSJfDOPmB3EqmpjEVhkS80MrYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNTMxZTk3MjAtMGI2Mi00M2E4LThlMWYtMjMwNjg0ZWFm OWFmLzMvMEJDNkQyMjVGMENFM0U2MDc3MTJBOUE5OEM0NTYxOTEyRjM0MzJCNi5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzgxYTQ0NTY2NDU4ZTQ1NzhiNjdlZWQz MDUzZjgyMGY1LzEvMEJDNkQyMjVGMENFM0U2MDc3MTJBOUE5OEM0NTYxOTEyRjM0 MzJCNi5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS81MzFlOTcyMC0w YjYyLTQzYTgtOGUxZi0yMzA2ODRlYWY5YWYvMy8wQkM2RDIyNUYwQ0UzRTYwNzcx MkE5QTk4QzQ1NjE5MTJGMzQzMkI2Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKg0gR2wUU+FPyEydVEg0 my5Huhx66xttXmkCZVbRgMCZEIrMI9zJJNXiJl5F6zC3OmRblBrfr0F4KBVHMh7l CpplDSCFjgmBZ4WiSt4Wq0PHtpAh7H3zmELDozJS9zlqad1eSBqj9C6Yz76v9zxy IIrVlggAc594nau1GplqYJfTMwoAuLjct5TTsKdggdSptkUWJ7n1MReuaEmwKMMV F7nUFVwkMqogsTG4p8E3dHW4HE+l/98B78nsoPJswvyinl5xLGiFHQVIjcF3Ci7V UP8R//+7y+y0q1c4XM+mxmmbBUdS6BtBV4sQlwszLnJ2IO5m41EFrKP/5ScrC8CT FQ== -----END CERTIFICATE-----Generated at Mon Mar 2 14:29:21 2026 by rpki-client