$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/531e9720-0b62-43a8-8e1f-230684eaf9af/3/0BC6D225F0CE3E607712A9A98C4561912F3432B6.mft File: 0BC6D225F0CE3E607712A9A98C4561912F3432B6.mft (raw, json) Hash identifier: rIz8zL7Qt5CNyK+EH4O5yC4G8UhvWI9q0dfDB5A6GPI= Subject key identifier: 0E:DA:F8:7E:00:B2:9C:2B:D5:9D:C6:33:B9:E2:78:A1:CE:7F:70:E1 Authority key identifier: 0B:C6:D2:25:F0:CE:3E:60:77:12:A9:A9:8C:45:61:91:2F:34:32:B6 Certificate issuer: /CN=0BC6D225F0CE3E607712A9A98C4561912F3432B6 Certificate serial: 3037A5C048823C668023546DFA471B28B97E373A Authority info access: rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/0BC6D225F0CE3E607712A9A98C4561912F3432B6.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/531e9720-0b62-43a8-8e1f-230684eaf9af/3/0BC6D225F0CE3E607712A9A98C4561912F3432B6.mft Manifest number: 0152 Signing time: Fri 17 Apr 2026 14:04:27 +0000 Manifest this update: Fri 17 Apr 2026 13:59:27 +0000 Manifest next update: Sat 18 Apr 2026 15:04:27 +0000 Files and hashes: 1: 326130623a346530373a316330313a3a2f34382d3438203d3e20313531373034.roa (hash: VQpA5o0Pq6sWKS236BEYQWIKLgBdNGi2BEIwMERcePY=) 2: 326130623a346530373a316330323a3a2f34382d3438203d3e20313531373034.roa (hash: KL/ldm3b1AJMdY1QolVaUnbSkBg2mqpZUeWvBmihjnM=) 3: 0BC6D225F0CE3E607712A9A98C4561912F3432B6.crl (hash: u/r3miCs2UWCbafoTmYW7uxhb3CsE76r2RUe8ooPnI4=) 4: 326130623a346530373a316330303a3a2f34382d3438203d3e20313531373034.roa (hash: GbSyn/a7s2Tct/cl+IXObaOaKJfLlKE/P5lfI5qam+k=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/531e9720-0b62-43a8-8e1f-230684eaf9af/3/0BC6D225F0CE3E607712A9A98C4561912F3432B6.crl rsync://rsync.paas.rpki.ripe.net/repository/531e9720-0b62-43a8-8e1f-230684eaf9af/3/0BC6D225F0CE3E607712A9A98C4561912F3432B6.mft rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/0BC6D225F0CE3E607712A9A98C4561912F3432B6.cer rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.mft rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 18 Apr 2026 15:04:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:37:a5:c0:48:82:3c:66:80:23:54:6d:fa:47:1b:28:b9:7e:37:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0BC6D225F0CE3E607712A9A98C4561912F3432B6 Validity Not Before: Apr 17 13:59:27 2026 GMT Not After : Apr 18 15:04:27 2026 GMT Subject: CN=0EDAF87E00B29C2BD59DC633B9E278A1CE7F70E1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:55:ab:1b:39:a1:39:8e:af:ca:76:f6:b7:58: d2:62:85:94:92:9e:a8:2c:47:ee:76:96:6d:c6:86: 08:72:e1:43:40:56:0f:1f:e3:d7:44:9a:39:ca:ef: 53:fe:d6:66:9c:45:1b:d1:75:99:d1:5e:f8:3a:e1: fe:2f:e7:a6:c0:b0:f3:8c:cd:da:a9:14:2d:62:9b: 41:50:76:41:a7:3f:b6:ba:5d:7f:24:70:1a:d0:52: 9b:d4:7b:2e:f5:60:7e:c2:4e:d5:ce:c1:46:76:47: d5:40:54:ba:85:8d:e0:74:91:26:32:5f:fd:2e:0f: 31:94:e8:32:08:ef:02:15:07:e7:53:71:d7:9b:b0: e6:a1:98:36:67:1d:15:73:90:a8:49:ca:28:b1:be: 31:26:0d:4f:0d:1f:e5:fa:ea:0d:62:9e:b0:97:bd: 45:49:c3:f0:fe:e8:de:b7:5c:6c:c3:60:d1:ff:fd: a2:ca:e8:db:76:45:ac:d7:d3:ed:fb:46:7b:a5:3f: 60:4d:b9:b1:53:ef:ff:e5:3a:53:84:5a:25:de:3a: f1:fe:80:7e:53:29:9b:7f:5c:75:64:e5:7c:0e:7b: 96:00:69:07:87:e3:bf:44:d6:ed:06:eb:d8:68:76: d4:8d:34:1e:39:1a:8f:c4:9d:e0:3b:38:dd:0c:b3: de:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:DA:F8:7E:00:B2:9C:2B:D5:9D:C6:33:B9:E2:78:A1:CE:7F:70:E1 X509v3 Authority Key Identifier: keyid:0B:C6:D2:25:F0:CE:3E:60:77:12:A9:A9:8C:45:61:91:2F:34:32:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/531e9720-0b62-43a8-8e1f-230684eaf9af/3/0BC6D225F0CE3E607712A9A98C4561912F3432B6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/0BC6D225F0CE3E607712A9A98C4561912F3432B6.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/531e9720-0b62-43a8-8e1f-230684eaf9af/3/0BC6D225F0CE3E607712A9A98C4561912F3432B6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption af:f4:ab:35:a1:0f:b9:97:69:d6:d5:82:e3:57:9a:fd:4f:a7: e2:25:9b:41:2d:6c:ed:4b:69:4f:5b:86:e6:ec:b1:b5:88:6a: 8d:8d:89:49:9f:86:65:90:be:64:58:4a:1c:2f:c4:7b:7f:c8: 52:cf:63:d2:8d:ec:b9:0d:00:9a:fa:41:08:6d:fe:d8:9c:83: ac:44:c2:35:2b:54:39:d3:89:75:d7:b2:9a:b7:0d:2c:3a:39: eb:34:3a:33:87:2b:84:e8:be:87:99:e3:45:72:15:0a:b8:b1: d6:e9:6b:25:fd:c7:17:6c:4e:f6:c2:db:de:da:98:74:a7:00: 8d:5f:68:ac:85:4d:2f:8a:df:5a:20:4a:5a:64:01:4a:bc:ee: b0:63:96:a1:f3:47:8f:bd:41:78:d2:8a:41:03:3f:7b:05:b5: 2a:06:a9:34:3c:19:58:fc:3d:ac:98:c6:73:36:14:7d:aa:a7: c6:06:5a:9e:f4:c5:52:ee:07:6e:15:26:ef:78:f4:6e:05:35: dc:53:54:19:65:14:53:70:7e:1b:31:a0:ed:d3:38:2f:b4:67: 88:15:f2:2f:83:ff:9e:7b:7c:8e:b8:b3:cb:fd:7a:4d:e7:7a: 44:74:33:07:07:12:41:7c:12:fa:70:58:c4:71:87:f3:4d:a4: 95:83:b7:04 -----BEGIN CERTIFICATE----- MIIFbTCCBFWgAwIBAgIUMDelwEiCPGaAI1Rt+kcbKLl+NzowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEJDNkQyMjVGMENFM0U2MDc3MTJBOUE5OEM0NTYxOTEy RjM0MzJCNjAeFw0yNjA0MTcxMzU5MjdaFw0yNjA0MTgxNTA0MjdaMDMxMTAvBgNV BAMTKDBFREFGODdFMDBCMjlDMkJENTlEQzYzM0I5RTI3OEExQ0U3RjcwRTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsVasbOaE5jq/Kdva3WNJihZSS nqgsR+52lm3Ghghy4UNAVg8f49dEmjnK71P+1macRRvRdZnRXvg64f4v56bAsPOM zdqpFC1im0FQdkGnP7a6XX8kcBrQUpvUey71YH7CTtXOwUZ2R9VAVLqFjeB0kSYy X/0uDzGU6DII7wIVB+dTcdebsOahmDZnHRVzkKhJyiixvjEmDU8NH+X66g1inrCX vUVJw/D+6N63XGzDYNH//aLK6Nt2RazX0+37RnulP2BNubFT7//lOlOEWiXeOvH+ gH5TKZt/XHVk5XwOe5YAaQeH479E1u0G69hodtSNNB45Go/EneA7ON0Ms95VAgMB AAGjggJ3MIICczAdBgNVHQ4EFgQUDtr4fgCynCvVncYzueJ4oc5/cOEwHwYDVR0j BBgwFoAUC8bSJfDOPmB3EqmpjEVhkS80MrYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNTMxZTk3MjAtMGI2Mi00M2E4LThlMWYtMjMwNjg0ZWFm OWFmLzMvMEJDNkQyMjVGMENFM0U2MDc3MTJBOUE5OEM0NTYxOTEyRjM0MzJCNi5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzgxYTQ0NTY2NDU4ZTQ1NzhiNjdlZWQz MDUzZjgyMGY1LzEvMEJDNkQyMjVGMENFM0U2MDc3MTJBOUE5OEM0NTYxOTEyRjM0 MzJCNi5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS81MzFlOTcyMC0w YjYyLTQzYTgtOGUxZi0yMzA2ODRlYWY5YWYvMy8wQkM2RDIyNUYwQ0UzRTYwNzcx MkE5QTk4QzQ1NjE5MTJGMzQzMkI2Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAr/SrNaEPuZdp1tWC41ea /U+n4iWbQS1s7UtpT1uG5uyxtYhqjY2JSZ+GZZC+ZFhKHC/Ee3/IUs9j0o3suQ0A mvpBCG3+2JyDrETCNStUOdOJddeymrcNLDo56zQ6M4crhOi+h5njRXIVCrix1ulr Jf3HF2xO9sLb3tqYdKcAjV9orIVNL4rfWiBKWmQBSrzusGOWofNHj71BeNKKQQM/ ewW1KgapNDwZWPw9rJjGczYUfaqnxgZanvTFUu4HbhUm73j0bgU13FNUGWUUU3B+ GzGg7dM4L7RniBXyL4P/nnt8jrizy/16Ted6RHQzBwcSQXwS+nBYxHGH802klYO3 BA== -----END CERTIFICATE-----Generated at Sat Apr 18 00:01:35 2026 by rpki-client