$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/4/521525856CBBA6D9D2254221C280DC930734AAB8.mft File: 521525856CBBA6D9D2254221C280DC930734AAB8.mft (raw, json) Hash identifier: J7Jwm5o711avqj6Fk1RFpbPAf/ns/lg4OZhdzX8crGE= Subject key identifier: 17:82:53:E5:8A:F4:1A:C0:BE:B8:39:CE:AD:12:93:25:B7:CC:79:04 Authority key identifier: 52:15:25:85:6C:BB:A6:D9:D2:25:42:21:C2:80:DC:93:07:34:AA:B8 Certificate issuer: /CN=521525856CBBA6D9D2254221C280DC930734AAB8 Certificate serial: 6669DDA67DCD4EE4328BA5DDE0761677B9D4C01C Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/521525856CBBA6D9D2254221C280DC930734AAB8.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/4/521525856CBBA6D9D2254221C280DC930734AAB8.mft Manifest number: 0162 Signing time: Wed 25 Mar 2026 23:49:41 +0000 Manifest this update: Wed 25 Mar 2026 23:44:41 +0000 Manifest next update: Fri 27 Mar 2026 02:14:41 +0000 Files and hashes: 1: 521525856CBBA6D9D2254221C280DC930734AAB8.crl (hash: SQ/HMGjkF2fEj9zqnX7R+zr9rXlh+ICzoHoqKfPjVOA=) 2: 326130363a613030333a313333373a3a2f34382d3438203d3e20323030363736.roa (hash: qr/bfrnor+1gB61vuOA1czljaK/VRJBauBs1U2EbENw=) 3: 326130363a613030333a3a2f34382d3438203d3e20323030363736.roa (hash: PNV+6g1yuxZfiOErO1rlD/OjvHSDnl045B3ycAeUEw8=) 4: 326130363a613030333a313131313a3a2f34382d3438203d3e20323030363736.roa (hash: rOXq6KopS7nNrxLenr0thMMbHkGjihkrbeGzvVQ4fNc=) 5: 326130363a613030333a666666663a3a2f34382d3438203d3e203530373535.roa (hash: HVzJ9R68GMwZO9EL/DI2ZLp1a+F6uNrFmfl8+YGeZKc=) 6: 39342e32342e3130382e302f32342d3234203d3e20323030363736.roa (hash: hbkkIcLL2dVYKU+9BKXYxvOgTE4cVlfb37zj8sIKpS0=) 7: 326130363a613030333a623030623a3a2f34382d3438203d3e20323030363736.roa (hash: kunZD4UEEwcG2nc99Wb+xz1yK+IdIm7SjegbAra8chc=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/4/521525856CBBA6D9D2254221C280DC930734AAB8.crl rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/4/521525856CBBA6D9D2254221C280DC930734AAB8.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/521525856CBBA6D9D2254221C280DC930734AAB8.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 27 Mar 2026 00:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:69:dd:a6:7d:cd:4e:e4:32:8b:a5:dd:e0:76:16:77:b9:d4:c0:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=521525856CBBA6D9D2254221C280DC930734AAB8 Validity Not Before: Mar 25 23:44:41 2026 GMT Not After : Mar 27 02:14:41 2026 GMT Subject: CN=178253E58AF41AC0BEB839CEAD129325B7CC7904 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:8a:f0:bc:e1:5e:91:43:b5:30:3a:4b:ba:80: 71:49:3d:1a:f6:67:49:0e:0c:0e:50:96:a7:39:bb: 80:2e:d5:9e:05:a2:0b:46:34:22:26:39:77:18:0d: 02:94:e6:a8:9c:77:2d:35:d5:81:c6:5a:4d:d2:d2: dc:37:60:f0:47:8e:b2:8e:87:7d:58:a8:d0:bc:54: 41:9b:66:07:50:f9:0e:a6:44:cc:a9:8c:3f:77:7b: 12:82:47:aa:99:4b:c9:85:c1:e7:e9:58:ce:a0:9a: 8e:34:c0:26:d7:55:12:77:59:59:2a:e7:fb:87:d0: 22:3b:f5:7d:24:f1:db:00:2d:35:fc:07:f4:fd:ee: fe:7f:5c:33:d5:1b:81:24:b2:87:5d:e1:63:ce:4b: bf:86:c2:06:10:b8:eb:7e:a8:29:0f:2e:6b:11:94: 44:ce:c3:61:7b:ec:4d:92:12:1b:52:26:3c:9f:cc: f0:2e:b3:0d:c6:2a:d4:60:9c:68:64:90:76:e1:83: cb:ae:3a:55:a6:06:15:a6:66:c3:79:0f:d4:8e:83: 57:64:7a:62:42:17:74:f0:68:c0:22:ec:2a:23:c5: 0c:ab:03:ed:73:e2:b0:83:1d:aa:1a:a6:64:dd:a4: 54:bc:24:6b:54:b5:e4:04:65:da:a1:83:8e:5e:8e: 03:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:82:53:E5:8A:F4:1A:C0:BE:B8:39:CE:AD:12:93:25:B7:CC:79:04 X509v3 Authority Key Identifier: keyid:52:15:25:85:6C:BB:A6:D9:D2:25:42:21:C2:80:DC:93:07:34:AA:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/4/521525856CBBA6D9D2254221C280DC930734AAB8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/521525856CBBA6D9D2254221C280DC930734AAB8.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/4/521525856CBBA6D9D2254221C280DC930734AAB8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:fb:9c:f4:49:8c:b1:e6:60:ba:ef:c9:0a:f1:9f:7f:4f:f6: 0d:d1:72:54:d3:56:99:d5:5a:f4:db:5d:75:f6:38:9a:60:7a: 3b:2e:34:41:6e:ba:3f:63:3c:a3:56:ec:1e:4f:2c:a6:e5:87: 77:2a:41:b4:b2:a4:29:23:b2:37:83:be:94:47:9d:f9:90:a9: 4b:ef:c6:30:4c:36:8c:dc:95:c6:37:1f:99:45:e1:c2:e8:77: 65:98:12:7f:19:ec:68:6c:e3:7e:ef:a5:79:d8:f2:c3:58:a6: 0d:7e:37:da:08:f6:3d:3e:f9:10:d8:16:dc:bc:68:50:2b:c5: 04:ff:42:ec:26:d2:08:c5:b9:0b:67:67:c7:42:d8:20:ee:3d: 24:9c:89:a2:73:6c:88:ef:13:05:f6:2b:7b:c1:8d:a5:24:8c: d9:1a:5f:cc:87:93:4d:66:bd:e4:90:e5:0b:e2:da:5c:93:03: 99:e3:0c:2b:5b:46:72:0a:46:9b:9d:d0:9c:36:9b:d1:a6:c7: 8a:d4:be:db:b0:68:5c:fc:1c:51:8b:65:87:15:1b:cc:6d:1d: c1:ce:88:d4:85:ef:d2:9e:25:7e:92:51:75:1a:3b:57:7c:a3: 27:50:51:b0:a1:3c:ba:44:8b:e3:7f:a8:1d:94:48:74:7a:e9: 06:1d:9a:99 -----BEGIN CERTIFICATE----- MIIFbTCCBFWgAwIBAgIUZmndpn3NTuQyi6Xd4HYWd7nUwBwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTIxNTI1ODU2Q0JCQTZEOUQyMjU0MjIxQzI4MERDOTMw NzM0QUFCODAeFw0yNjAzMjUyMzQ0NDFaFw0yNjAzMjcwMjE0NDFaMDMxMTAvBgNV BAMTKDE3ODI1M0U1OEFGNDFBQzBCRUI4MzlDRUFEMTI5MzI1QjdDQzc5MDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgivC84V6RQ7UwOku6gHFJPRr2 Z0kODA5Qlqc5u4Au1Z4FogtGNCImOXcYDQKU5qicdy011YHGWk3S0tw3YPBHjrKO h31YqNC8VEGbZgdQ+Q6mRMypjD93exKCR6qZS8mFwefpWM6gmo40wCbXVRJ3WVkq 5/uH0CI79X0k8dsALTX8B/T97v5/XDPVG4Eksodd4WPOS7+GwgYQuOt+qCkPLmsR lETOw2F77E2SEhtSJjyfzPAusw3GKtRgnGhkkHbhg8uuOlWmBhWmZsN5D9SOg1dk emJCF3TwaMAi7CojxQyrA+1z4rCDHaoapmTdpFS8JGtUteQEZdqhg45ejgMfAgMB AAGjggJ3MIICczAdBgNVHQ4EFgQUF4JT5Yr0GsC+uDnOrRKTJbfMeQQwHwYDVR0j BBgwFoAUUhUlhWy7ptnSJUIhwoDckwc0qrgwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMmFjYTNjYTYtMzRjYy00NzcyLWJhYzAtYTM1ZGQwMTk1 Y2U3LzQvNTIxNTI1ODU2Q0JCQTZEOUQyMjU0MjIxQzI4MERDOTMwNzM0QUFCOC5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1 YzkxYmUzZjlkLzcvNTIxNTI1ODU2Q0JCQTZEOUQyMjU0MjIxQzI4MERDOTMwNzM0 QUFCOC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8yYWNhM2NhNi0z NGNjLTQ3NzItYmFjMC1hMzVkZDAxOTVjZTcvNC81MjE1MjU4NTZDQkJBNkQ5RDIy NTQyMjFDMjgwREM5MzA3MzRBQUI4Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAh/uc9EmMseZguu/JCvGf f0/2DdFyVNNWmdVa9NtddfY4mmB6Oy40QW66P2M8o1bsHk8spuWHdypBtLKkKSOy N4O+lEed+ZCpS+/GMEw2jNyVxjcfmUXhwuh3ZZgSfxnsaGzjfu+ledjyw1imDX43 2gj2PT75ENgW3LxoUCvFBP9C7CbSCMW5C2dnx0LYIO49JJyJonNsiO8TBfYre8GN pSSM2RpfzIeTTWa95JDlC+LaXJMDmeMMK1tGcgpGm53QnDab0abHitS+27BoXPwc UYtlhxUbzG0dwc6I1IXv0p4lfpJRdRo7V3yjJ1BRsKE8ukSL43+oHZRIdHrpBh2a mQ== -----END CERTIFICATE-----Generated at Thu Mar 26 08:54:11 2026 by rpki-client