$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/531e9720-0b62-43a8-8e1f-230684eaf9af/3/0BC6D225F0CE3E607712A9A98C4561912F3432B6.mft File: 0BC6D225F0CE3E607712A9A98C4561912F3432B6.mft (raw, json) Hash identifier: EMlNjhIwoLv5/gto82wgp2nl3Zmtif5FbrnrDODKiXo= Subject key identifier: AC:BA:22:A5:9E:FF:23:55:3D:19:67:E5:EC:B6:6A:69:11:5B:B5:20 Authority key identifier: 0B:C6:D2:25:F0:CE:3E:60:77:12:A9:A9:8C:45:61:91:2F:34:32:B6 Certificate issuer: /CN=0BC6D225F0CE3E607712A9A98C4561912F3432B6 Certificate serial: 12CBD7B64D56538BF396962DD969362739745EDD Authority info access: rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/0BC6D225F0CE3E607712A9A98C4561912F3432B6.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/531e9720-0b62-43a8-8e1f-230684eaf9af/3/0BC6D225F0CE3E607712A9A98C4561912F3432B6.mft Manifest number: 0240 Signing time: Sun 11 Oct 2026 11:13:24 +0000 Manifest this update: Sun 11 Oct 2026 11:08:24 +0000 Manifest next update: Mon 12 Oct 2026 13:18:24 +0000 Files and hashes: 1: 0BC6D225F0CE3E607712A9A98C4561912F3432B6.crl (hash: utQx57Ic9SCdTo2aqPV0IzQGLOjjc+pP4fh0PM6p7UE=) 2: 326130623a346530373a316330333a3a2f34382d3438203d3e20323134343835.roa (hash: zPqi+GWy7GJ+kq9mxidL3Cv/L27NlElS9NX8D2AsBYM=) 3: 326130623a346530373a316330313a3a2f34382d3438203d3e20313531373034.roa (hash: 0ULXldxk/0eSWpclGLE70Em7/bissXZuMoO5VQhOO28=) 4: 326130623a346530373a316330303a3a2f34382d3438203d3e20313531373034.roa (hash: 9BHpytc7pXx6aIvZB3fYpuWzlGukQUf0KjUB6iLDphc=) 5: 326130623a346530373a316330343a3a2f34382d3438203d3e20313531373034.roa (hash: YHC+/trBPqR3Izb59lUeCAauUW49i7hzZ9zUDI0VhRM=) 6: 326130623a346530373a316330323a3a2f34382d3438203d3e20313531373034.roa (hash: KL/ldm3b1AJMdY1QolVaUnbSkBg2mqpZUeWvBmihjnM=) 7: 326130623a346530373a316330353a3a2f34382d3438203d3e20313531373034.roa (hash: klgVth/TtNnRat+Cjm7g/vn2bJkgb8SLrowCN2zlal8=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/531e9720-0b62-43a8-8e1f-230684eaf9af/3/0BC6D225F0CE3E607712A9A98C4561912F3432B6.crl rsync://rsync.paas.rpki.ripe.net/repository/531e9720-0b62-43a8-8e1f-230684eaf9af/3/0BC6D225F0CE3E607712A9A98C4561912F3432B6.mft rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/0BC6D225F0CE3E607712A9A98C4561912F3432B6.cer rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.mft rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Oct 2026 13:18:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:cb:d7:b6:4d:56:53:8b:f3:96:96:2d:d9:69:36:27:39:74:5e:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0BC6D225F0CE3E607712A9A98C4561912F3432B6 Validity Not Before: Oct 11 11:08:24 2026 GMT Not After : Oct 12 13:18:24 2026 GMT Subject: CN=ACBA22A59EFF23553D1967E5ECB66A69115BB520 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:01:ca:2b:c7:80:49:4c:41:27:ab:1e:30:0e: 56:4b:99:8c:78:c1:60:45:37:1b:97:42:a4:40:89: e4:44:bc:b1:e0:54:87:dd:42:f7:af:1e:67:a9:ee: 4a:d7:cf:d8:84:2a:c2:5a:a2:59:89:26:19:44:53: 18:1f:8a:cd:66:b4:e5:7f:3f:6f:db:10:1f:3c:2f: cd:7f:fd:60:16:56:5f:ba:3a:ed:21:14:7e:f8:21: 01:07:ec:bc:93:1d:8c:6a:e4:9f:d1:6a:a4:28:35: eb:8b:ab:47:31:e4:e1:ad:e0:6a:4e:bb:0b:c5:99: ac:30:1b:18:ef:8d:db:15:d8:01:54:ed:69:83:28: 35:0d:48:05:04:1c:03:37:ba:a3:81:e7:17:da:30: 6f:6e:71:38:cc:a0:7c:94:a9:7f:70:c5:72:64:0d: f3:61:c7:c4:3e:d2:f3:cb:6a:29:5c:8c:1b:bb:37: f0:c3:67:de:ac:46:b1:44:db:9e:a8:bc:a5:7e:8d: 8c:2d:1c:2e:02:40:f9:ff:66:45:68:f5:cc:6c:38: 20:34:0a:5a:20:5b:4b:01:df:ae:29:67:13:c4:7e: 00:71:c1:4d:3d:56:38:47:72:52:4f:0e:20:01:f7: 47:fc:a3:d1:f0:ef:d3:53:43:4f:d3:43:32:98:6a: a7:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:BA:22:A5:9E:FF:23:55:3D:19:67:E5:EC:B6:6A:69:11:5B:B5:20 X509v3 Authority Key Identifier: keyid:0B:C6:D2:25:F0:CE:3E:60:77:12:A9:A9:8C:45:61:91:2F:34:32:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/531e9720-0b62-43a8-8e1f-230684eaf9af/3/0BC6D225F0CE3E607712A9A98C4561912F3432B6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/0BC6D225F0CE3E607712A9A98C4561912F3432B6.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/531e9720-0b62-43a8-8e1f-230684eaf9af/3/0BC6D225F0CE3E607712A9A98C4561912F3432B6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 93:3e:38:74:3b:fa:07:57:54:dd:d6:cd:f1:cd:81:4d:63:8a: 77:e5:74:51:36:50:60:60:69:41:20:e3:b7:e3:56:51:35:49: 39:05:c7:61:32:db:c0:66:fc:65:6f:0f:42:41:84:f5:15:76: 57:62:80:55:1f:37:d5:dc:45:7a:b2:bb:a3:48:87:8d:ad:7f: ce:f8:11:32:72:18:78:84:8e:47:10:a6:6d:b7:3d:20:0b:da: 55:d6:33:e2:5b:9e:b9:28:1e:aa:64:d8:88:f3:60:aa:55:c2: c8:ae:ff:f4:bc:0f:a4:ff:86:f7:8d:49:84:fc:9d:c5:aa:1e: cc:e0:4a:fa:e8:2a:64:46:3e:2d:3f:09:be:89:09:aa:18:ff: 37:33:fb:fe:36:48:43:1f:97:4c:6c:9a:1d:ec:6c:5d:d7:1f: 01:d7:dd:7d:6a:6b:42:dd:1d:d1:8e:45:2c:1f:94:4d:ae:1e: 16:bf:a4:d1:4b:14:d9:a3:ff:97:5f:8b:d2:40:8e:c3:83:57: df:03:1b:98:72:05:9d:e5:1d:2e:38:f9:a8:f6:d9:09:aa:fd: 73:35:7b:1c:d3:2a:01:fb:52:cc:b5:e4:03:8c:da:c1:9a:fd: c6:83:c5:78:83:06:78:54:76:1d:33:e0:2d:9b:ed:3a:db:64: 02:7d:e8:1c -----BEGIN CERTIFICATE----- MIIFbTCCBFWgAwIBAgIUEsvXtk1WU4vzlpYt2Wk2Jzl0Xt0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEJDNkQyMjVGMENFM0U2MDc3MTJBOUE5OEM0NTYxOTEy RjM0MzJCNjAeFw0yNjEwMTExMTA4MjRaFw0yNjEwMTIxMzE4MjRaMDMxMTAvBgNV BAMTKEFDQkEyMkE1OUVGRjIzNTUzRDE5NjdFNUVDQjY2QTY5MTE1QkI1MjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCAcorx4BJTEEnqx4wDlZLmYx4 wWBFNxuXQqRAieREvLHgVIfdQvevHmep7krXz9iEKsJaolmJJhlEUxgfis1mtOV/ P2/bEB88L81//WAWVl+6Ou0hFH74IQEH7LyTHYxq5J/RaqQoNeuLq0cx5OGt4GpO uwvFmawwGxjvjdsV2AFU7WmDKDUNSAUEHAM3uqOB5xfaMG9ucTjMoHyUqX9wxXJk DfNhx8Q+0vPLailcjBu7N/DDZ96sRrFE256ovKV+jYwtHC4CQPn/ZkVo9cxsOCA0 ClogW0sB364pZxPEfgBxwU09VjhHclJPDiAB90f8o9Hw79NTQ0/TQzKYaqe7AgMB AAGjggJ3MIICczAdBgNVHQ4EFgQUrLoipZ7/I1U9GWfl7LZqaRFbtSAwHwYDVR0j BBgwFoAUC8bSJfDOPmB3EqmpjEVhkS80MrYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNTMxZTk3MjAtMGI2Mi00M2E4LThlMWYtMjMwNjg0ZWFm OWFmLzMvMEJDNkQyMjVGMENFM0U2MDc3MTJBOUE5OEM0NTYxOTEyRjM0MzJCNi5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzgxYTQ0NTY2NDU4ZTQ1NzhiNjdlZWQz MDUzZjgyMGY1LzEvMEJDNkQyMjVGMENFM0U2MDc3MTJBOUE5OEM0NTYxOTEyRjM0 MzJCNi5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS81MzFlOTcyMC0w YjYyLTQzYTgtOGUxZi0yMzA2ODRlYWY5YWYvMy8wQkM2RDIyNUYwQ0UzRTYwNzcx MkE5QTk4QzQ1NjE5MTJGMzQzMkI2Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkz44dDv6B1dU3dbN8c2B TWOKd+V0UTZQYGBpQSDjt+NWUTVJOQXHYTLbwGb8ZW8PQkGE9RV2V2KAVR831dxF erK7o0iHja1/zvgRMnIYeISORxCmbbc9IAvaVdYz4lueuSgeqmTYiPNgqlXCyK7/ 9LwPpP+G941JhPydxaoezOBK+ugqZEY+LT8JvokJqhj/NzP7/jZIQx+XTGyaHexs XdcfAdfdfWprQt0d0Y5FLB+UTa4eFr+k0UsU2aP/l1+L0kCOw4NX3wMbmHIFneUd Ljj5qPbZCar9czV7HNMqAftSzLXkA4zawZr9xoPFeIMGeFR2HTPgLZvtOttkAn3o HA== -----END CERTIFICATE-----Generated at Mon Oct 12 02:08:56 2026 by rpki-client