$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/4/521525856CBBA6D9D2254221C280DC930734AAB8.mft File: 521525856CBBA6D9D2254221C280DC930734AAB8.mft (raw, json) Hash identifier: q1wdNVT2q9Vdy34bIbjexkSnv1Pew50ZtFTiYBxOlD0= Subject key identifier: 5F:AC:CA:39:D9:7C:46:E2:C7:FC:EC:A9:24:53:D7:2D:84:70:CB:DD Authority key identifier: 52:15:25:85:6C:BB:A6:D9:D2:25:42:21:C2:80:DC:93:07:34:AA:B8 Certificate issuer: /CN=521525856CBBA6D9D2254221C280DC930734AAB8 Certificate serial: 6AA3FE0C660142A0AD0CD5ED543AD8E04DDE4DCB Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/521525856CBBA6D9D2254221C280DC930734AAB8.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/4/521525856CBBA6D9D2254221C280DC930734AAB8.mft Manifest number: 91 Signing time: Sun 19 Oct 2025 16:20:51 +0000 Manifest this update: Sun 19 Oct 2025 16:15:51 +0000 Manifest next update: Mon 20 Oct 2025 18:03:51 +0000 Files and hashes: 1: 326130363a613030333a3a2f34382d3438203d3e20323030363736.roa (hash: PNV+6g1yuxZfiOErO1rlD/OjvHSDnl045B3ycAeUEw8=) 2: 521525856CBBA6D9D2254221C280DC930734AAB8.crl (hash: zrdIAdFgh7KiZZ5T5Fj489uuHvohX8J4XK78pfG2SQY=) 3: 326130363a613030333a623030623a3a2f34382d3438203d3e20323030363736.roa (hash: kunZD4UEEwcG2nc99Wb+xz1yK+IdIm7SjegbAra8chc=) 4: 326130363a613030333a313131313a3a2f34382d3438203d3e20323030363736.roa (hash: rOXq6KopS7nNrxLenr0thMMbHkGjihkrbeGzvVQ4fNc=) 5: 326130363a613030333a666666663a3a2f34382d3438203d3e203530373535.roa (hash: HVzJ9R68GMwZO9EL/DI2ZLp1a+F6uNrFmfl8+YGeZKc=) 6: 39342e32342e3130382e302f32342d3234203d3e20323030363736.roa (hash: hbkkIcLL2dVYKU+9BKXYxvOgTE4cVlfb37zj8sIKpS0=) 7: 326130363a613030333a313333373a3a2f34382d3438203d3e20323030363736.roa (hash: qr/bfrnor+1gB61vuOA1czljaK/VRJBauBs1U2EbENw=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/4/521525856CBBA6D9D2254221C280DC930734AAB8.crl rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/4/521525856CBBA6D9D2254221C280DC930734AAB8.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/521525856CBBA6D9D2254221C280DC930734AAB8.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 20 Oct 2025 18:03:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:a3:fe:0c:66:01:42:a0:ad:0c:d5:ed:54:3a:d8:e0:4d:de:4d:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=521525856CBBA6D9D2254221C280DC930734AAB8 Validity Not Before: Oct 19 16:15:51 2025 GMT Not After : Oct 20 18:03:51 2025 GMT Subject: CN=5FACCA39D97C46E2C7FCECA92453D72D8470CBDD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:7c:62:7c:af:41:7a:f3:66:be:9f:89:7c:4b: ff:d6:53:9a:4b:25:9e:5a:eb:51:47:8d:e7:33:b0: e2:59:30:cf:23:ac:e4:32:98:37:80:37:33:aa:55: 22:7e:2e:e9:b0:83:0b:2e:86:c8:42:60:a4:b4:fd: 78:a7:08:08:40:fc:63:2c:e0:ec:27:cd:04:4b:79: 55:33:2b:46:00:6e:fd:d5:d3:a4:9e:df:68:21:31: 32:de:aa:8c:19:d9:39:0a:27:81:f9:a2:d5:e4:41: cf:58:72:ba:6c:f1:0b:a2:cf:d6:26:ea:ad:d2:30: 56:41:3f:9e:22:61:01:82:b5:1e:1d:94:45:6b:33: 2d:90:87:ea:e8:3f:64:00:40:1d:4f:d1:f3:51:2a: d1:8e:b7:d6:81:a2:6a:bf:56:52:80:66:ac:c1:7f: 8a:11:8b:22:d4:41:be:df:3a:90:db:fe:c7:90:76: 12:fd:6d:90:4e:67:3d:c8:99:c1:16:9b:ac:b2:9c: 45:55:ea:3a:08:0d:f3:b4:6b:f1:b0:86:05:1c:68: 08:cc:40:39:df:b4:17:d5:85:13:e1:36:da:4c:53: 75:37:0d:fd:24:bb:c8:9f:d8:11:61:fe:af:df:2d: 79:db:6c:6d:4b:b6:ca:8d:13:0c:ea:47:49:72:27: fd:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:AC:CA:39:D9:7C:46:E2:C7:FC:EC:A9:24:53:D7:2D:84:70:CB:DD X509v3 Authority Key Identifier: keyid:52:15:25:85:6C:BB:A6:D9:D2:25:42:21:C2:80:DC:93:07:34:AA:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/4/521525856CBBA6D9D2254221C280DC930734AAB8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/521525856CBBA6D9D2254221C280DC930734AAB8.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/4/521525856CBBA6D9D2254221C280DC930734AAB8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:b0:20:6a:71:e9:04:8d:5c:72:37:85:53:66:63:2c:2e:15: 28:ec:0b:88:43:ae:19:95:68:47:cc:de:5d:87:d7:a4:da:99: c5:47:1a:a2:6f:6a:0f:dd:56:9c:a4:2d:3f:24:7e:b1:0b:bc: 96:1f:e7:e0:92:6b:dc:55:ed:f1:83:85:54:42:f2:b8:eb:8b: 5b:43:ae:de:18:57:4f:78:2d:a5:99:aa:57:c8:3a:ce:e1:68: 35:79:dc:a0:f3:19:25:29:e0:48:b5:bd:dc:8f:e1:5e:37:c1: 79:2e:40:c8:35:f2:37:6c:1c:65:6d:94:fe:3e:f1:e6:c4:0c: 2d:ff:a0:cd:6e:e9:83:d0:79:bb:3f:ba:a1:a5:77:f2:2a:cf: 7d:76:b5:1f:86:88:78:61:3f:c8:7f:8d:fb:e5:38:25:a4:75: 39:d5:b5:07:eb:ba:d3:0e:7f:9b:2c:18:bc:7d:a8:60:82:64: 72:91:e6:ad:fb:b4:4c:44:6e:88:c5:da:19:50:f9:f6:0c:45: c9:5f:42:ef:7d:c1:02:1c:8f:e9:d3:2d:4a:a9:e9:ea:c3:75: 22:75:4b:4d:0e:0a:6e:0f:1c:6d:7d:2d:04:25:ad:1c:77:cd: 6d:05:0a:0d:31:a0:27:28:0c:e9:ba:3d:3e:04:5d:3c:29:fd: a5:79:27:2b -----BEGIN CERTIFICATE----- MIIFbTCCBFWgAwIBAgIUaqP+DGYBQqCtDNXtVDrY4E3eTcswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTIxNTI1ODU2Q0JCQTZEOUQyMjU0MjIxQzI4MERDOTMw NzM0QUFCODAeFw0yNTEwMTkxNjE1NTFaFw0yNTEwMjAxODAzNTFaMDMxMTAvBgNV BAMTKDVGQUNDQTM5RDk3QzQ2RTJDN0ZDRUNBOTI0NTNENzJEODQ3MENCREQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCifGJ8r0F682a+n4l8S//WU5pL JZ5a61FHjeczsOJZMM8jrOQymDeANzOqVSJ+LumwgwsuhshCYKS0/XinCAhA/GMs 4OwnzQRLeVUzK0YAbv3V06Se32ghMTLeqowZ2TkKJ4H5otXkQc9Ycrps8Quiz9Ym 6q3SMFZBP54iYQGCtR4dlEVrMy2Qh+roP2QAQB1P0fNRKtGOt9aBomq/VlKAZqzB f4oRiyLUQb7fOpDb/seQdhL9bZBOZz3ImcEWm6yynEVV6joIDfO0a/GwhgUcaAjM QDnftBfVhRPhNtpMU3U3Df0ku8if2BFh/q/fLXnbbG1LtsqNEwzqR0lyJ/3jAgMB AAGjggJ3MIICczAdBgNVHQ4EFgQUX6zKOdl8RuLH/OypJFPXLYRwy90wHwYDVR0j BBgwFoAUUhUlhWy7ptnSJUIhwoDckwc0qrgwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMmFjYTNjYTYtMzRjYy00NzcyLWJhYzAtYTM1ZGQwMTk1 Y2U3LzQvNTIxNTI1ODU2Q0JCQTZEOUQyMjU0MjIxQzI4MERDOTMwNzM0QUFCOC5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1 YzkxYmUzZjlkLzcvNTIxNTI1ODU2Q0JCQTZEOUQyMjU0MjIxQzI4MERDOTMwNzM0 QUFCOC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8yYWNhM2NhNi0z NGNjLTQ3NzItYmFjMC1hMzVkZDAxOTVjZTcvNC81MjE1MjU4NTZDQkJBNkQ5RDIy NTQyMjFDMjgwREM5MzA3MzRBQUI4Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJLAganHpBI1ccjeFU2Zj LC4VKOwLiEOuGZVoR8zeXYfXpNqZxUcaom9qD91WnKQtPyR+sQu8lh/n4JJr3FXt 8YOFVELyuOuLW0Ou3hhXT3gtpZmqV8g6zuFoNXncoPMZJSngSLW93I/hXjfBeS5A yDXyN2wcZW2U/j7x5sQMLf+gzW7pg9B5uz+6oaV38irPfXa1H4aIeGE/yH+N++U4 JaR1OdW1B+u60w5/mywYvH2oYIJkcpHmrfu0TERuiMXaGVD59gxFyV9C733BAhyP 6dMtSqnp6sN1InVLTQ4Kbg8cbX0tBCWtHHfNbQUKDTGgJygM6bo9PgRdPCn9pXkn Kw== -----END CERTIFICATE-----Generated at Mon Oct 20 09:44:24 2025 by rpki-client