$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/4/521525856CBBA6D9D2254221C280DC930734AAB8.mft File: 521525856CBBA6D9D2254221C280DC930734AAB8.mft (raw, json) Hash identifier: HMEZ7zxz3bce4gzd63Juvw5qY8K8xWv0COuargfv8q8= Subject key identifier: A0:93:D3:84:B6:07:A1:E7:11:4B:E6:CB:E4:64:4F:37:AB:B6:12:22 Authority key identifier: 52:15:25:85:6C:BB:A6:D9:D2:25:42:21:C2:80:DC:93:07:34:AA:B8 Certificate issuer: /CN=521525856CBBA6D9D2254221C280DC930734AAB8 Certificate serial: 4039E75BB31426E7BDA5A0204C1F75187A1F34DB Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/521525856CBBA6D9D2254221C280DC930734AAB8.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/4/521525856CBBA6D9D2254221C280DC930734AAB8.mft Manifest number: 0202 Signing time: Thu 23 Jul 2026 08:27:01 +0000 Manifest this update: Thu 23 Jul 2026 08:22:01 +0000 Manifest next update: Fri 24 Jul 2026 09:55:01 +0000 Files and hashes: 1: 326130363a613030333a313333373a3a2f34382d3438203d3e20323030363736.roa (hash: y6dlRvQ6Ei4ylbtG2E1Fsbq6bkYPEiXc/hP5pnr/A5s=) 2: 326130363a613030333a313131313a3a2f34382d3438203d3e20323030363736.roa (hash: reSiEjWqNL5bMfSb8NDNP7L36wtpl2UMV26XqCjhnmE=) 3: 326130363a613030333a666666663a3a2f34382d3438203d3e203530373535.roa (hash: ZhHRzDFs7fBtUGvR8pxFCEtpL9Hraol9iZdGLjWUEvI=) 4: 521525856CBBA6D9D2254221C280DC930734AAB8.crl (hash: JDBbRmPDeDEYGlQUk+mu3BpgoTdzaq/ruu70SW9LSZU=) 5: 326130363a613030333a3a2f34382d3438203d3e20323030363736.roa (hash: hctWuN+nHCxcPnxwlB0HaZTfqv5a4O8gc3WDRLEEUrc=) 6: 326130363a613030333a623030623a3a2f34382d3438203d3e20323030363736.roa (hash: Pecsaqccf5tHcdlTeF7bCwVmz7JER7H8qSHLGuqWRMI=) 7: 39342e32342e3130382e302f32342d3234203d3e20323030363736.roa (hash: HSErQq3crkyzVJa6g9ayoDntWunwG4uTUMd6ifKsOLU=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/4/521525856CBBA6D9D2254221C280DC930734AAB8.crl rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/4/521525856CBBA6D9D2254221C280DC930734AAB8.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/521525856CBBA6D9D2254221C280DC930734AAB8.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 24 Jul 2026 09:55:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:39:e7:5b:b3:14:26:e7:bd:a5:a0:20:4c:1f:75:18:7a:1f:34:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=521525856CBBA6D9D2254221C280DC930734AAB8 Validity Not Before: Jul 23 08:22:01 2026 GMT Not After : Jul 24 09:55:01 2026 GMT Subject: CN=A093D384B607A1E7114BE6CBE4644F37ABB61222 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:a3:c8:28:fd:7c:68:33:c4:e6:0f:e8:c6:a2: 29:65:21:90:ab:f1:4a:36:15:81:04:6a:7f:5b:8d: 73:ac:20:5c:f1:ee:76:02:fe:d9:4b:e7:ab:c3:84: 0e:71:08:90:b5:ba:db:38:58:72:1e:12:a1:78:85: b5:7b:99:7d:e7:12:da:30:a6:a8:41:d2:06:8c:66: 79:e4:f1:12:13:eb:de:8c:54:12:d4:a1:1d:1e:8f: e3:36:5a:5a:e6:1b:37:43:37:a3:a8:60:63:37:6d: 9f:60:40:25:e5:e4:3d:c4:5c:dc:44:6d:50:85:b5: 60:0d:05:4f:a8:05:50:f8:98:5a:bd:6e:32:70:4c: 20:f9:b3:01:f7:7f:35:67:28:6a:70:2f:f2:63:f0: 8b:ca:d2:29:65:48:cf:55:58:00:02:1e:71:a2:25: 49:e3:9f:8f:ee:b7:63:e0:f4:b1:35:57:4b:3b:25: 63:61:bc:8b:71:04:fe:8f:3c:ee:81:aa:bc:91:94: 4b:f2:b4:33:91:dd:89:bf:44:19:f9:bb:71:ce:f0: c0:cd:97:f2:be:79:a0:eb:e1:d3:b6:aa:11:75:f5: a4:0e:3f:80:f6:31:21:2a:36:b4:49:a2:a8:ac:fd: f4:9d:89:f3:ff:d8:f8:fd:28:b5:1a:08:4f:1a:e0: 20:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:93:D3:84:B6:07:A1:E7:11:4B:E6:CB:E4:64:4F:37:AB:B6:12:22 X509v3 Authority Key Identifier: keyid:52:15:25:85:6C:BB:A6:D9:D2:25:42:21:C2:80:DC:93:07:34:AA:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/4/521525856CBBA6D9D2254221C280DC930734AAB8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/521525856CBBA6D9D2254221C280DC930734AAB8.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/4/521525856CBBA6D9D2254221C280DC930734AAB8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:3d:f7:b8:a9:98:6e:c2:f4:10:9b:9c:89:1c:d9:db:78:ec: 62:3b:97:97:3d:86:5f:03:8b:b8:75:41:c8:20:25:de:da:ec: de:33:49:61:00:64:b7:bc:50:47:ae:7e:93:ee:9f:34:89:70: e0:b5:c3:0a:dd:24:56:ce:d3:db:52:27:bd:98:07:1c:06:4a: 12:3e:33:59:d6:0d:ab:fd:0e:19:db:7b:e4:88:95:4e:c8:db: 71:ba:f0:ed:32:04:15:24:b6:67:bb:28:10:bd:be:fb:ed:90: a7:e7:82:5f:76:17:5c:ec:2e:40:d8:2f:fc:40:71:4d:a3:a2: 0b:76:ac:ed:ab:dc:eb:e7:0a:67:b5:e6:56:75:e5:b2:8b:5d: 42:0c:01:44:03:01:8d:1f:27:02:ed:ad:18:32:e9:d6:3a:2a: 81:ee:e1:b5:26:b9:4e:d1:87:df:49:c2:db:89:43:1f:9a:0a: 3a:3c:95:16:1b:e2:8f:44:22:21:95:ed:54:02:22:0f:15:a5: cb:7c:71:e9:77:72:79:72:b0:c0:88:2d:6b:54:9b:31:02:1b: c9:b6:fa:8b:f7:05:2c:3f:f7:bc:ca:f6:6d:82:8c:59:12:c3: 56:bb:67:49:3b:6d:f5:af:88:5e:c6:ec:52:20:1d:0f:63:db: 5a:e7:d3:63 -----BEGIN CERTIFICATE----- MIIFbTCCBFWgAwIBAgIUQDnnW7MUJue9paAgTB91GHofNNswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTIxNTI1ODU2Q0JCQTZEOUQyMjU0MjIxQzI4MERDOTMw NzM0QUFCODAeFw0yNjA3MjMwODIyMDFaFw0yNjA3MjQwOTU1MDFaMDMxMTAvBgNV BAMTKEEwOTNEMzg0QjYwN0ExRTcxMTRCRTZDQkU0NjQ0RjM3QUJCNjEyMjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCio8go/XxoM8TmD+jGoillIZCr 8Uo2FYEEan9bjXOsIFzx7nYC/tlL56vDhA5xCJC1uts4WHIeEqF4hbV7mX3nEtow pqhB0gaMZnnk8RIT696MVBLUoR0ej+M2WlrmGzdDN6OoYGM3bZ9gQCXl5D3EXNxE bVCFtWANBU+oBVD4mFq9bjJwTCD5swH3fzVnKGpwL/Jj8IvK0illSM9VWAACHnGi JUnjn4/ut2Pg9LE1V0s7JWNhvItxBP6PPO6BqryRlEvytDOR3Ym/RBn5u3HO8MDN l/K+eaDr4dO2qhF19aQOP4D2MSEqNrRJoqis/fSdifP/2Pj9KLUaCE8a4CDZAgMB AAGjggJ3MIICczAdBgNVHQ4EFgQUoJPThLYHoecRS+bL5GRPN6u2EiIwHwYDVR0j BBgwFoAUUhUlhWy7ptnSJUIhwoDckwc0qrgwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMmFjYTNjYTYtMzRjYy00NzcyLWJhYzAtYTM1ZGQwMTk1 Y2U3LzQvNTIxNTI1ODU2Q0JCQTZEOUQyMjU0MjIxQzI4MERDOTMwNzM0QUFCOC5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1 YzkxYmUzZjlkLzcvNTIxNTI1ODU2Q0JCQTZEOUQyMjU0MjIxQzI4MERDOTMwNzM0 QUFCOC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8yYWNhM2NhNi0z NGNjLTQ3NzItYmFjMC1hMzVkZDAxOTVjZTcvNC81MjE1MjU4NTZDQkJBNkQ5RDIy NTQyMjFDMjgwREM5MzA3MzRBQUI4Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAez33uKmYbsL0EJuciRzZ 23jsYjuXlz2GXwOLuHVByCAl3trs3jNJYQBkt7xQR65+k+6fNIlw4LXDCt0kVs7T 21InvZgHHAZKEj4zWdYNq/0OGdt75IiVTsjbcbrw7TIEFSS2Z7soEL2+++2Qp+eC X3YXXOwuQNgv/EBxTaOiC3as7avc6+cKZ7XmVnXlsotdQgwBRAMBjR8nAu2tGDLp 1joqge7htSa5TtGH30nC24lDH5oKOjyVFhvij0QiIZXtVAIiDxWly3xx6XdyeXKw wIgta1SbMQIbybb6i/cFLD/3vMr2bYKMWRLDVrtnSTtt9a+IXsbsUiAdD2PbWufT Yw== -----END CERTIFICATE-----Generated at Fri Jul 24 03:07:23 2026 by rpki-client