$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/531e9720-0b62-43a8-8e1f-230684eaf9af/3/0BC6D225F0CE3E607712A9A98C4561912F3432B6.mft File: 0BC6D225F0CE3E607712A9A98C4561912F3432B6.mft (raw, json) Hash identifier: JGkbwyrRjPvJknIM0eXK3wEqfEcP3mXvd3YdeNHFjgI= Subject key identifier: 3F:B6:81:20:06:3C:5C:C2:12:71:A3:A9:18:AC:A0:C4:CD:0B:43:C2 Authority key identifier: 0B:C6:D2:25:F0:CE:3E:60:77:12:A9:A9:8C:45:61:91:2F:34:32:B6 Certificate issuer: /CN=0BC6D225F0CE3E607712A9A98C4561912F3432B6 Certificate serial: 2179BE759E75DC330EDB16A6A3220815FD9C2813 Authority info access: rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/0BC6D225F0CE3E607712A9A98C4561912F3432B6.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/531e9720-0b62-43a8-8e1f-230684eaf9af/3/0BC6D225F0CE3E607712A9A98C4561912F3432B6.mft Manifest number: 75 Signing time: Wed 05 Nov 2025 03:09:27 +0000 Manifest this update: Wed 05 Nov 2025 03:04:27 +0000 Manifest next update: Thu 06 Nov 2025 04:54:27 +0000 Files and hashes: 1: 0BC6D225F0CE3E607712A9A98C4561912F3432B6.crl (hash: yDW+1+GaglPd4jZWxlE2YE3MMytfuIGuKk/yoCopPtU=) 2: 326130623a346530373a316330323a3a2f34382d3438203d3e20323133383632.roa (hash: /X68JagauxWyaFcSb3BbJbw5DWqXyP6Pe5X7avcQNQs=) 3: 326130623a346530373a316330303a3a2f34382d3438203d3e20313531373034.roa (hash: GbSyn/a7s2Tct/cl+IXObaOaKJfLlKE/P5lfI5qam+k=) 4: 326130623a346530373a316330313a3a2f34382d3438203d3e20313531373034.roa (hash: VQpA5o0Pq6sWKS236BEYQWIKLgBdNGi2BEIwMERcePY=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/531e9720-0b62-43a8-8e1f-230684eaf9af/3/0BC6D225F0CE3E607712A9A98C4561912F3432B6.crl rsync://rsync.paas.rpki.ripe.net/repository/531e9720-0b62-43a8-8e1f-230684eaf9af/3/0BC6D225F0CE3E607712A9A98C4561912F3432B6.mft rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/0BC6D225F0CE3E607712A9A98C4561912F3432B6.cer rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.mft rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 05 Nov 2025 19:14:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:79:be:75:9e:75:dc:33:0e:db:16:a6:a3:22:08:15:fd:9c:28:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0BC6D225F0CE3E607712A9A98C4561912F3432B6 Validity Not Before: Nov 5 03:04:27 2025 GMT Not After : Nov 6 04:54:27 2025 GMT Subject: CN=3FB68120063C5CC21271A3A918ACA0C4CD0B43C2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:c7:7f:06:25:09:4d:6a:bf:67:63:5c:54:6d: f3:0f:8f:33:de:52:d0:57:80:86:81:a0:9b:c0:f5: 02:55:e1:9a:25:24:13:88:d1:1d:24:dd:dc:d7:36: fe:23:80:11:33:93:13:50:74:d3:b3:a7:f2:99:3e: 08:c6:e6:fc:19:51:a9:fa:7a:da:f5:f9:04:2b:8d: 2a:14:92:33:84:e2:0e:ca:38:1e:bd:70:ac:f6:5e: 55:10:f9:40:8e:21:90:29:ec:63:f0:0b:20:7b:9c: 92:e6:fd:3f:d4:b8:cb:db:13:50:1f:e2:5f:41:ca: 84:df:55:93:a0:df:c0:b3:63:64:83:91:42:cb:e2: 92:f7:b5:b2:dd:76:58:c5:a1:41:d0:38:73:14:59: d2:ad:89:a1:3b:d5:3d:1b:08:d1:f5:a3:29:25:86: c4:26:dc:75:02:15:92:50:62:fb:8f:00:d9:18:c1: 55:e1:a6:b0:12:80:a2:c4:b6:4e:35:73:70:ab:8a: 22:15:49:f5:7d:2c:da:70:f0:6c:8e:6d:d4:57:a3: c5:52:15:fa:69:e2:ee:b6:52:c6:9a:6d:7b:2d:e8: a3:f0:20:47:ad:c7:10:a8:d0:03:28:a1:83:88:57: 44:39:7b:de:85:de:37:7f:ee:ba:25:ef:67:a3:7a: 02:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:B6:81:20:06:3C:5C:C2:12:71:A3:A9:18:AC:A0:C4:CD:0B:43:C2 X509v3 Authority Key Identifier: keyid:0B:C6:D2:25:F0:CE:3E:60:77:12:A9:A9:8C:45:61:91:2F:34:32:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/531e9720-0b62-43a8-8e1f-230684eaf9af/3/0BC6D225F0CE3E607712A9A98C4561912F3432B6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/0BC6D225F0CE3E607712A9A98C4561912F3432B6.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/531e9720-0b62-43a8-8e1f-230684eaf9af/3/0BC6D225F0CE3E607712A9A98C4561912F3432B6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:d2:8e:85:c4:a5:e2:77:51:d4:59:ce:da:f8:71:29:a9:b9: 7e:3f:a6:6e:dd:da:b1:bb:21:cd:fe:8b:f1:e2:9d:e3:f1:4d: c3:8b:dd:bb:5b:7d:07:47:f9:63:17:24:e4:6f:73:3d:08:d9: 62:47:82:38:2d:9e:ef:01:89:22:88:f8:c7:7a:46:d3:26:57: 39:47:ae:a2:40:76:77:c2:14:bf:9d:c3:e9:a3:eb:ca:0a:04: d2:e5:2e:48:4c:92:a2:1f:ea:ce:27:08:ba:51:1d:b7:da:3d: 7a:49:bf:70:5a:d8:4a:02:20:73:5c:cf:45:a0:6c:f0:6b:e1: 35:1c:68:ce:b0:4e:be:52:13:44:68:6d:2d:f9:52:77:a1:a9: 14:d5:72:ec:ca:5d:5a:fd:83:04:60:3c:dc:6d:7b:6b:49:ac: 16:a1:21:af:1b:c8:de:ff:24:94:45:f6:b4:12:62:8b:75:76: b1:40:f5:f8:33:bd:21:e7:b1:5a:e6:b7:5c:95:10:a9:db:5e: 70:2d:7b:55:5f:3a:6c:a5:5e:0b:b6:78:95:00:cd:06:b5:02: 0e:8b:03:c5:6a:c3:13:c4:a4:6a:98:7b:a5:fe:f3:e7:8e:fa: ce:f3:a8:f6:6b:a5:b4:8e:99:36:23:20:8a:16:05:60:13:8b: a7:57:eb:9d -----BEGIN CERTIFICATE----- MIIFbTCCBFWgAwIBAgIUIXm+dZ513DMO2xamoyIIFf2cKBMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEJDNkQyMjVGMENFM0U2MDc3MTJBOUE5OEM0NTYxOTEy RjM0MzJCNjAeFw0yNTExMDUwMzA0MjdaFw0yNTExMDYwNDU0MjdaMDMxMTAvBgNV BAMTKDNGQjY4MTIwMDYzQzVDQzIxMjcxQTNBOTE4QUNBMEM0Q0QwQjQzQzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCcx38GJQlNar9nY1xUbfMPjzPe UtBXgIaBoJvA9QJV4ZolJBOI0R0k3dzXNv4jgBEzkxNQdNOzp/KZPgjG5vwZUan6 etr1+QQrjSoUkjOE4g7KOB69cKz2XlUQ+UCOIZAp7GPwCyB7nJLm/T/UuMvbE1Af 4l9ByoTfVZOg38CzY2SDkULL4pL3tbLddljFoUHQOHMUWdKtiaE71T0bCNH1oykl hsQm3HUCFZJQYvuPANkYwVXhprASgKLEtk41c3CriiIVSfV9LNpw8GyObdRXo8VS Ffpp4u62UsaabXst6KPwIEetxxCo0AMooYOIV0Q5e96F3jd/7rol72ejegJfAgMB AAGjggJ3MIICczAdBgNVHQ4EFgQUP7aBIAY8XMIScaOpGKygxM0LQ8IwHwYDVR0j BBgwFoAUC8bSJfDOPmB3EqmpjEVhkS80MrYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNTMxZTk3MjAtMGI2Mi00M2E4LThlMWYtMjMwNjg0ZWFm OWFmLzMvMEJDNkQyMjVGMENFM0U2MDc3MTJBOUE5OEM0NTYxOTEyRjM0MzJCNi5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzgxYTQ0NTY2NDU4ZTQ1NzhiNjdlZWQz MDUzZjgyMGY1LzEvMEJDNkQyMjVGMENFM0U2MDc3MTJBOUE5OEM0NTYxOTEyRjM0 MzJCNi5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS81MzFlOTcyMC0w YjYyLTQzYTgtOGUxZi0yMzA2ODRlYWY5YWYvMy8wQkM2RDIyNUYwQ0UzRTYwNzcx MkE5QTk4QzQ1NjE5MTJGMzQzMkI2Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAStKOhcSl4ndR1FnO2vhx Kam5fj+mbt3asbshzf6L8eKd4/FNw4vdu1t9B0f5Yxck5G9zPQjZYkeCOC2e7wGJ Ioj4x3pG0yZXOUeuokB2d8IUv53D6aPrygoE0uUuSEySoh/qzicIulEdt9o9ekm/ cFrYSgIgc1zPRaBs8GvhNRxozrBOvlITRGhtLflSd6GpFNVy7MpdWv2DBGA83G17 a0msFqEhrxvI3v8klEX2tBJii3V2sUD1+DO9IeexWua3XJUQqdtecC17VV86bKVe C7Z4lQDNBrUCDosDxWrDE8Skaph7pf7z5476zvOo9multI6ZNiMgihYFYBOLp1fr nQ== -----END CERTIFICATE-----Generated at Wed Nov 5 09:55:33 2025 by rpki-client