$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/531e9720-0b62-43a8-8e1f-230684eaf9af/3/0BC6D225F0CE3E607712A9A98C4561912F3432B6.mft File: 0BC6D225F0CE3E607712A9A98C4561912F3432B6.mft (raw, json) Hash identifier: xI2oUmQG36dsCd2FyIuVzTLjszB6pMqdvyHdV0Nrx5Q= Subject key identifier: A6:D8:87:ED:25:B2:FF:C2:06:93:77:42:94:8F:D5:37:0A:31:1F:B8 Authority key identifier: 0B:C6:D2:25:F0:CE:3E:60:77:12:A9:A9:8C:45:61:91:2F:34:32:B6 Certificate issuer: /CN=0BC6D225F0CE3E607712A9A98C4561912F3432B6 Certificate serial: 0ACF94816F526C6918957B972FD92490F8509B58 Authority info access: rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/0BC6D225F0CE3E607712A9A98C4561912F3432B6.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/531e9720-0b62-43a8-8e1f-230684eaf9af/3/0BC6D225F0CE3E607712A9A98C4561912F3432B6.mft Manifest number: 019F Signing time: Sat 13 Jun 2026 06:18:00 +0000 Manifest this update: Sat 13 Jun 2026 06:13:00 +0000 Manifest next update: Sun 14 Jun 2026 09:52:00 +0000 Files and hashes: 1: 326130623a346530373a316330303a3a2f34382d3438203d3e20313531373034.roa (hash: GbSyn/a7s2Tct/cl+IXObaOaKJfLlKE/P5lfI5qam+k=) 2: 326130623a346530373a316330323a3a2f34382d3438203d3e20313531373034.roa (hash: KL/ldm3b1AJMdY1QolVaUnbSkBg2mqpZUeWvBmihjnM=) 3: 0BC6D225F0CE3E607712A9A98C4561912F3432B6.crl (hash: whpcZMOaDVIcB9nPHRLLGwamCFZa8po2SmnL276rZqM=) 4: 326130623a346530373a316330313a3a2f34382d3438203d3e20313531373034.roa (hash: VQpA5o0Pq6sWKS236BEYQWIKLgBdNGi2BEIwMERcePY=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/531e9720-0b62-43a8-8e1f-230684eaf9af/3/0BC6D225F0CE3E607712A9A98C4561912F3432B6.crl rsync://rsync.paas.rpki.ripe.net/repository/531e9720-0b62-43a8-8e1f-230684eaf9af/3/0BC6D225F0CE3E607712A9A98C4561912F3432B6.mft rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/0BC6D225F0CE3E607712A9A98C4561912F3432B6.cer rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.mft rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Jun 2026 09:52:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:cf:94:81:6f:52:6c:69:18:95:7b:97:2f:d9:24:90:f8:50:9b:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0BC6D225F0CE3E607712A9A98C4561912F3432B6 Validity Not Before: Jun 13 06:13:00 2026 GMT Not After : Jun 14 09:52:00 2026 GMT Subject: CN=A6D887ED25B2FFC206937742948FD5370A311FB8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:98:c5:51:32:75:cf:88:83:60:63:68:c0:fd: 8f:7d:ad:61:f1:1f:20:82:b4:91:05:bf:e6:b3:d4: 55:9c:f0:7b:02:8d:27:f1:1a:10:64:b1:f6:ee:ca: c2:72:e9:93:36:91:63:4c:fc:fa:65:95:e1:3b:48: cc:74:90:58:74:69:81:d7:f1:27:e5:51:c1:a0:d0: c3:fe:16:c2:0a:fe:e8:a0:68:31:20:93:9a:8e:a3: 37:3b:b8:96:9b:e4:ed:4f:9a:b2:b0:cf:3c:1f:a7: 88:4c:ce:3e:6a:df:35:ab:09:56:2b:a2:b7:e6:b4: 9d:1b:7d:f7:2d:05:27:c4:ae:58:f5:ed:01:2e:4a: b6:bf:c9:ec:41:e7:72:28:1b:6e:e0:dc:38:1f:01: 04:9b:19:90:c6:b2:8e:bb:6e:c6:1b:ca:76:8b:36: a5:5b:4f:08:96:63:36:88:1d:01:b3:3d:46:9f:b7: 30:f7:3e:a2:70:5a:16:6c:13:fc:3f:8b:ed:ed:46: 8f:9c:f1:4f:7b:50:c3:14:4b:3e:77:87:da:21:a0: 93:1a:74:a7:ff:9a:3a:f2:56:d2:5d:fb:e6:66:4c: 7a:fa:91:8d:f4:59:41:a4:61:07:f6:e1:ee:b0:7a: 59:72:bd:77:03:4f:99:f8:52:9d:96:68:6a:7f:1f: d4:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:D8:87:ED:25:B2:FF:C2:06:93:77:42:94:8F:D5:37:0A:31:1F:B8 X509v3 Authority Key Identifier: keyid:0B:C6:D2:25:F0:CE:3E:60:77:12:A9:A9:8C:45:61:91:2F:34:32:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/531e9720-0b62-43a8-8e1f-230684eaf9af/3/0BC6D225F0CE3E607712A9A98C4561912F3432B6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/0BC6D225F0CE3E607712A9A98C4561912F3432B6.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/531e9720-0b62-43a8-8e1f-230684eaf9af/3/0BC6D225F0CE3E607712A9A98C4561912F3432B6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b4:e7:c5:07:a8:62:90:b2:2f:01:90:9a:57:a1:e3:ba:19:7e: 1a:07:cd:4b:ee:96:92:41:9d:18:63:4d:b1:b2:60:8e:00:cb: 45:14:91:81:c4:9c:83:69:1b:18:8a:9b:bc:91:72:03:70:67: ef:c5:c7:9b:1f:e9:74:d7:1c:f2:dc:08:dc:be:60:52:77:83: 5a:53:a8:3e:42:6c:6f:d4:42:3c:c4:db:77:54:46:34:72:cc: 2c:ea:8c:4a:69:73:39:72:50:a4:f3:61:37:e3:fa:f6:d2:26: ae:29:57:9e:ca:bb:72:e5:9d:80:56:41:83:bd:8c:d6:7e:95: 78:ae:c2:5b:ed:77:96:c3:ab:f9:85:fa:cf:5b:85:35:1f:dd: 84:f2:26:25:65:87:3e:4a:c4:16:be:93:fd:bb:de:f4:79:3f: bd:ea:a6:f9:d1:c2:1a:00:84:5f:88:25:22:25:3f:db:18:b9: 08:18:76:2e:41:e2:35:a6:3b:ac:7e:9b:8b:f1:49:e6:d9:05: a7:9e:f0:92:7a:7a:16:63:fe:05:e4:75:8a:08:28:f0:fd:45: f9:f3:84:d8:80:3c:0e:77:94:91:15:64:0a:f3:3f:f0:99:24: 14:12:0c:09:19:9e:8b:4c:9e:90:d8:6a:ed:8f:fa:90:27:0e: 96:32:19:bf -----BEGIN CERTIFICATE----- MIIFbTCCBFWgAwIBAgIUCs+UgW9SbGkYlXuXL9kkkPhQm1gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEJDNkQyMjVGMENFM0U2MDc3MTJBOUE5OEM0NTYxOTEy RjM0MzJCNjAeFw0yNjA2MTMwNjEzMDBaFw0yNjA2MTQwOTUyMDBaMDMxMTAvBgNV BAMTKEE2RDg4N0VEMjVCMkZGQzIwNjkzNzc0Mjk0OEZENTM3MEEzMTFGQjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7mMVRMnXPiINgY2jA/Y99rWHx HyCCtJEFv+az1FWc8HsCjSfxGhBksfbuysJy6ZM2kWNM/PplleE7SMx0kFh0aYHX 8SflUcGg0MP+FsIK/uigaDEgk5qOozc7uJab5O1PmrKwzzwfp4hMzj5q3zWrCVYr orfmtJ0bffctBSfErlj17QEuSra/yexB53IoG27g3DgfAQSbGZDGso67bsYbynaL NqVbTwiWYzaIHQGzPUaftzD3PqJwWhZsE/w/i+3tRo+c8U97UMMUSz53h9ohoJMa dKf/mjryVtJd++ZmTHr6kY30WUGkYQf24e6wellyvXcDT5n4Up2WaGp/H9QjAgMB AAGjggJ3MIICczAdBgNVHQ4EFgQUptiH7SWy/8IGk3dClI/VNwoxH7gwHwYDVR0j BBgwFoAUC8bSJfDOPmB3EqmpjEVhkS80MrYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNTMxZTk3MjAtMGI2Mi00M2E4LThlMWYtMjMwNjg0ZWFm OWFmLzMvMEJDNkQyMjVGMENFM0U2MDc3MTJBOUE5OEM0NTYxOTEyRjM0MzJCNi5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzgxYTQ0NTY2NDU4ZTQ1NzhiNjdlZWQz MDUzZjgyMGY1LzEvMEJDNkQyMjVGMENFM0U2MDc3MTJBOUE5OEM0NTYxOTEyRjM0 MzJCNi5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS81MzFlOTcyMC0w YjYyLTQzYTgtOGUxZi0yMzA2ODRlYWY5YWYvMy8wQkM2RDIyNUYwQ0UzRTYwNzcx MkE5QTk4QzQ1NjE5MTJGMzQzMkI2Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtOfFB6hikLIvAZCaV6Hj uhl+GgfNS+6WkkGdGGNNsbJgjgDLRRSRgcScg2kbGIqbvJFyA3Bn78XHmx/pdNcc 8twI3L5gUneDWlOoPkJsb9RCPMTbd1RGNHLMLOqMSmlzOXJQpPNhN+P69tImrilX nsq7cuWdgFZBg72M1n6VeK7CW+13lsOr+YX6z1uFNR/dhPImJWWHPkrEFr6T/bve 9Hk/veqm+dHCGgCEX4glIiU/2xi5CBh2LkHiNaY7rH6bi/FJ5tkFp57wknp6FmP+ BeR1iggo8P1F+fOE2IA8DneUkRVkCvM/8JkkFBIMCRmei0yekNhq7Y/6kCcOljIZ vw== -----END CERTIFICATE-----Generated at Sun Jun 14 00:49:54 2026 by rpki-client