$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09718f08-bb39-4a09-a4c0-1f40248a6d15/3/B52300C5AE6278B608E231E431C3DD0EAF6A6BC2.mft File: B52300C5AE6278B608E231E431C3DD0EAF6A6BC2.mft (raw, json) Hash identifier: KjR/gvhZ2c2Joc/1hdRUI6ML5hMmUscmnZsQV43clOo= Subject key identifier: D9:EE:F5:90:DC:E2:E4:73:E7:72:7A:F9:45:6B:F2:C6:3C:37:1C:26 Authority key identifier: B5:23:00:C5:AE:62:78:B6:08:E2:31:E4:31:C3:DD:0E:AF:6A:6B:C2 Certificate issuer: /CN=B52300C5AE6278B608E231E431C3DD0EAF6A6BC2 Certificate serial: 7E7835C6920E9A73A014C6B6EA615220AD276A4D Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/B52300C5AE6278B608E231E431C3DD0EAF6A6BC2.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09718f08-bb39-4a09-a4c0-1f40248a6d15/3/B52300C5AE6278B608E231E431C3DD0EAF6A6BC2.mft Manifest number: 92 Signing time: Wed 25 Mar 2026 18:52:12 +0000 Manifest this update: Wed 25 Mar 2026 18:47:12 +0000 Manifest next update: Thu 26 Mar 2026 22:14:12 +0000 Files and hashes: 1: 326131343a373538313a393966333a3a2f34382d3438203d3e20323134333434.roa (hash: J6emFQdlETu7H0STfMe+srRexcrGlCk0y+BgTI9eJls=) 2: 326131343a373538313a393930313a3a2f34382d3438203d3e20323134333434.roa (hash: a3vn+r3Xd1ZweP+VfXPkybQsxnlpFwKhPGkq1Aja1ws=) 3: 326131343a373538313a393930343a3a2f34382d3438203d3e20323134333434.roa (hash: JSmiAu7ed33+J2eg2ZQ/ocsiovRypTOUdvXbpKPSbI8=) 4: 326131343a373538313a393930323a3a2f34382d3438203d3e20323134333434.roa (hash: TyFBqgR7vYeMd4/BuVueO5zwkcDAg7G5uk0/d+OPki0=) 5: B52300C5AE6278B608E231E431C3DD0EAF6A6BC2.crl (hash: 1qioPxnH09j9/OCKKzorNo5kGSU0clzyqIlmel5KHkQ=) 6: 326131343a373538313a393938383a3a2f34382d3438203d3e20323134333434.roa (hash: dhPIT0Huo/8bMcCCD9CENzV8Oc7GRGv2lkOyyJSz4lY=) 7: 326131343a373538313a393966323a3a2f34382d3438203d3e20323134333434.roa (hash: Oe9b7D8DtLCyHfTEelgxQzMm3GoJ4G9/0gwwATaJfro=) 8: 326131343a373538313a393930303a3a2f34382d3438203d3e20323134333434.roa (hash: kGAxqipewjTBEOV3BSA8JRTiGthe14AWzEgdY5VhMKs=) 9: 326131343a373538313a393966313a3a2f34382d3438203d3e20323134333434.roa (hash: uczfpozVS217kWRATgpEenuL/t1nbJiCmQMwvAEpV8o=) 10: 326131343a373538313a393930353a3a2f34382d3438203d3e20323134333434.roa (hash: WvJ+nlXPCuTRZnP7e6XF03QrjAocsMrvYbQ3ZQ/eNBY=) 11: 326131343a373538313a393966353a3a2f34382d3438203d3e20323134333434.roa (hash: HcA7KRdnBWzY7hEKVhGFuUdyfwcYU7b6FuC/duUcRFU=) 12: 326131343a373538313a393930333a3a2f34382d3438203d3e20323134333434.roa (hash: odpWIoGfrHyjA/EqLrY/tj6kKgasd1C7YcR9JizUkBA=) 13: 326131343a373538313a393966343a3a2f34382d3438203d3e20323134333434.roa (hash: spTh8DstCVqtG/UUp5lMqUt7m9/HXGTEzcFQEa7vRbE=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09718f08-bb39-4a09-a4c0-1f40248a6d15/3/B52300C5AE6278B608E231E431C3DD0EAF6A6BC2.crl rsync://rsync.paas.rpki.ripe.net/repository/09718f08-bb39-4a09-a4c0-1f40248a6d15/3/B52300C5AE6278B608E231E431C3DD0EAF6A6BC2.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/B52300C5AE6278B608E231E431C3DD0EAF6A6BC2.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 26 Mar 2026 22:14:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:78:35:c6:92:0e:9a:73:a0:14:c6:b6:ea:61:52:20:ad:27:6a:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B52300C5AE6278B608E231E431C3DD0EAF6A6BC2 Validity Not Before: Mar 25 18:47:12 2026 GMT Not After : Mar 26 22:14:12 2026 GMT Subject: CN=D9EEF590DCE2E473E7727AF9456BF2C63C371C26 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:6c:e3:32:21:b7:6b:fb:68:a4:11:89:11:c5: 57:b6:d7:ca:49:1d:05:25:dc:04:4c:c5:2a:24:67: 95:06:f7:e9:c2:2c:67:0f:3d:da:92:59:72:ba:11: 7a:62:3e:f4:91:a6:64:f8:07:eb:c3:22:9e:de:90: ef:c7:ae:dc:d2:5c:99:60:fc:3c:b9:92:c5:2b:1f: 7c:f8:b8:0a:41:d1:4e:89:4f:3a:af:ad:d2:24:59: f7:00:3d:0f:a5:4f:44:6b:99:55:9c:bd:01:f9:98: 03:36:61:e2:ea:5b:a0:f0:5b:bb:40:2e:cf:dd:15: dd:fe:c0:af:e2:3c:2d:64:c0:cf:73:29:dc:11:21: b4:f5:cc:ce:1e:14:e3:73:53:1f:1a:7e:ac:d9:3b: df:f8:58:a1:f9:13:30:d4:94:5b:d4:1d:18:70:5e: df:d3:e9:9c:f6:13:68:2d:b5:c8:8b:75:51:49:b3: 48:f8:a4:37:b8:47:e4:5d:6b:6e:ca:f2:9c:42:08: 71:a5:0d:7b:cb:d1:29:37:70:68:f2:84:b0:71:2a: 65:4a:e3:fe:72:92:1f:11:fe:af:8f:b2:f8:37:8d: f6:f1:c5:b2:04:9e:6c:24:07:7f:67:57:25:9e:c5: f7:a5:a2:dc:db:bf:2c:68:ca:19:08:e4:77:4d:4a: 6f:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:EE:F5:90:DC:E2:E4:73:E7:72:7A:F9:45:6B:F2:C6:3C:37:1C:26 X509v3 Authority Key Identifier: keyid:B5:23:00:C5:AE:62:78:B6:08:E2:31:E4:31:C3:DD:0E:AF:6A:6B:C2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/09718f08-bb39-4a09-a4c0-1f40248a6d15/3/B52300C5AE6278B608E231E431C3DD0EAF6A6BC2.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/B52300C5AE6278B608E231E431C3DD0EAF6A6BC2.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09718f08-bb39-4a09-a4c0-1f40248a6d15/3/B52300C5AE6278B608E231E431C3DD0EAF6A6BC2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:84:f7:a7:ae:9c:8d:6b:98:46:e8:78:9f:b6:6f:fc:ee:4a: 20:2c:c9:70:55:cf:dd:d2:2d:35:18:92:3c:aa:a0:b5:21:d1: a6:5c:23:26:b9:d8:23:58:cb:7e:f0:b6:e8:a8:ba:6d:3c:6f: b9:53:4b:e7:31:f6:24:87:fd:df:92:91:27:89:dd:a9:a9:c2: 49:ec:41:3a:43:63:3c:88:59:c2:96:02:17:bd:4d:bd:fd:4f: 54:70:4e:a0:f3:41:b1:32:aa:8d:cb:7f:f3:b2:95:d3:24:fc: 1c:5b:a1:6d:dd:05:28:37:73:a3:58:11:0c:db:75:a2:7c:8b: ee:98:86:75:45:60:7b:de:c4:c6:58:bb:c3:e8:be:2d:45:26: 42:1c:be:0f:11:27:70:5a:bb:21:af:b3:a3:c0:62:fe:1e:14: 53:4f:ce:ac:0d:9c:18:6b:16:6e:38:67:ab:5a:66:f9:7c:a4: 2c:da:9b:ce:61:19:cd:d3:32:56:52:90:a8:9b:c6:b2:77:af: 0f:1f:bb:9d:86:38:7d:f1:3d:8b:de:ab:bb:e4:2b:ff:e1:5f: 72:35:67:71:9b:3f:64:0e:78:49:86:4d:a2:72:73:5d:5e:33: 39:78:e6:2e:2f:98:03:d1:d2:dc:28:11:db:03:ab:e9:68:0c: c5:5c:e4:07 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUfng1xpIOmnOgFMa26mFSIK0nak0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjUyMzAwQzVBRTYyNzhCNjA4RTIzMUU0MzFDM0REMEVB RjZBNkJDMjAeFw0yNjAzMjUxODQ3MTJaFw0yNjAzMjYyMjE0MTJaMDMxMTAvBgNV BAMTKEQ5RUVGNTkwRENFMkU0NzNFNzcyN0FGOTQ1NkJGMkM2M0MzNzFDMjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/bOMyIbdr+2ikEYkRxVe218pJ HQUl3ARMxSokZ5UG9+nCLGcPPdqSWXK6EXpiPvSRpmT4B+vDIp7ekO/HrtzSXJlg /Dy5ksUrH3z4uApB0U6JTzqvrdIkWfcAPQ+lT0RrmVWcvQH5mAM2YeLqW6DwW7tA Ls/dFd3+wK/iPC1kwM9zKdwRIbT1zM4eFONzUx8afqzZO9/4WKH5EzDUlFvUHRhw Xt/T6Zz2E2gttciLdVFJs0j4pDe4R+Rda27K8pxCCHGlDXvL0Sk3cGjyhLBxKmVK 4/5ykh8R/q+Psvg3jfbxxbIEnmwkB39nVyWexfelotzbvyxoyhkI5HdNSm+BAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQU2e71kNzi5HPncnr5RWvyxjw3HCYwHwYDVR0j BBgwFoAUtSMAxa5ieLYI4jHkMcPdDq9qa8IwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMDk3MThmMDgtYmIzOS00YTA5LWE0YzAtMWY0MDI0OGE2 ZDE1LzMvQjUyMzAwQzVBRTYyNzhCNjA4RTIzMUU0MzFDM0REMEVBRjZBNkJDMi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC9CNTIzMDBDNUFFNjI3OEI2MDhFMjMxRTQz MUMzREQwRUFGNkE2QkMyLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzA5NzE4ZjA4LWJiMzktNGEwOS1hNGMwLTFmNDAyNDhhNmQxNS8zL0I1MjMwMEM1 QUU2Mjc4QjYwOEUyMzFFNDMxQzNERDBFQUY2QTZCQzIubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQA8hPen rpyNa5hG6Hiftm/87kogLMlwVc/d0i01GJI8qqC1IdGmXCMmudgjWMt+8LboqLpt PG+5U0vnMfYkh/3fkpEnid2pqcJJ7EE6Q2M8iFnClgIXvU29/U9UcE6g80GxMqqN y3/zspXTJPwcW6Ft3QUoN3OjWBEM23WifIvumIZ1RWB73sTGWLvD6L4tRSZCHL4P ESdwWrshr7OjwGL+HhRTT86sDZwYaxZuOGerWmb5fKQs2pvOYRnN0zJWUpCom8ay d68PH7udhjh98T2L3qu75Cv/4V9yNWdxmz9kDnhJhk2icnNdXjM5eOYuL5gD0dLc KBHbA6vpaAzFXOQH -----END CERTIFICATE-----Generated at Thu Mar 26 15:27:41 2026 by rpki-client