$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/4/521525856CBBA6D9D2254221C280DC930734AAB8.mft File: 521525856CBBA6D9D2254221C280DC930734AAB8.mft (raw, json) Hash identifier: ccL+Sm2ukJgT7qkWzEd+zT9YY7B3EYgylvJosOELwkY= Subject key identifier: 3C:A3:37:55:A5:9C:5A:D2:A1:4F:07:BB:EC:2F:11:D2:CA:6F:55:85 Authority key identifier: 52:15:25:85:6C:BB:A6:D9:D2:25:42:21:C2:80:DC:93:07:34:AA:B8 Certificate issuer: /CN=521525856CBBA6D9D2254221C280DC930734AAB8 Certificate serial: 3EEB01301E30F3D383DFCD895A8138807EB3A6D7 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/521525856CBBA6D9D2254221C280DC930734AAB8.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/4/521525856CBBA6D9D2254221C280DC930734AAB8.mft Manifest number: 01A1 Signing time: Tue 12 May 2026 11:37:43 +0000 Manifest this update: Tue 12 May 2026 11:32:43 +0000 Manifest next update: Wed 13 May 2026 12:12:43 +0000 Files and hashes: 1: 326130363a613030333a313131313a3a2f34382d3438203d3e20323030363736.roa (hash: rOXq6KopS7nNrxLenr0thMMbHkGjihkrbeGzvVQ4fNc=) 2: 326130363a613030333a623030623a3a2f34382d3438203d3e20323030363736.roa (hash: kunZD4UEEwcG2nc99Wb+xz1yK+IdIm7SjegbAra8chc=) 3: 39342e32342e3130382e302f32342d3234203d3e20323030363736.roa (hash: hbkkIcLL2dVYKU+9BKXYxvOgTE4cVlfb37zj8sIKpS0=) 4: 326130363a613030333a3a2f34382d3438203d3e20323030363736.roa (hash: PNV+6g1yuxZfiOErO1rlD/OjvHSDnl045B3ycAeUEw8=) 5: 326130363a613030333a313333373a3a2f34382d3438203d3e20323030363736.roa (hash: qr/bfrnor+1gB61vuOA1czljaK/VRJBauBs1U2EbENw=) 6: 521525856CBBA6D9D2254221C280DC930734AAB8.crl (hash: L+tg2+T/9a6bkdIPJuh5f/k83X7Q3c4MYHOXBF4IqZ8=) 7: 326130363a613030333a666666663a3a2f34382d3438203d3e203530373535.roa (hash: HVzJ9R68GMwZO9EL/DI2ZLp1a+F6uNrFmfl8+YGeZKc=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/4/521525856CBBA6D9D2254221C280DC930734AAB8.crl rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/4/521525856CBBA6D9D2254221C280DC930734AAB8.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/521525856CBBA6D9D2254221C280DC930734AAB8.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 13 May 2026 12:12:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:eb:01:30:1e:30:f3:d3:83:df:cd:89:5a:81:38:80:7e:b3:a6:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=521525856CBBA6D9D2254221C280DC930734AAB8 Validity Not Before: May 12 11:32:43 2026 GMT Not After : May 13 12:12:43 2026 GMT Subject: CN=3CA33755A59C5AD2A14F07BBEC2F11D2CA6F5585 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:d4:9a:e2:de:a5:2b:58:44:8a:11:98:62:ee: 0e:ef:22:40:2b:69:bf:59:d3:f4:f4:13:26:1b:e1: 11:b9:db:67:5d:10:41:d2:10:69:a8:9f:d2:81:8c: b3:73:bb:e0:e4:80:0f:ff:73:b6:c2:85:ea:fa:a1: c8:23:ed:4e:12:25:1c:93:3b:32:71:33:83:11:e2: 8e:19:4e:1c:4c:27:87:f1:c1:75:20:61:37:07:bc: 53:a3:63:f1:d6:95:1f:65:0a:63:7b:1b:32:08:3b: 3c:e0:f7:99:88:9a:12:cb:34:61:42:3a:56:46:63: 90:e3:6d:3b:98:bf:7d:87:87:0b:85:f6:3b:97:7f: 94:43:d7:7a:49:9d:8e:4c:92:ca:33:ee:bb:e5:9f: 51:81:1f:55:02:c8:41:b4:34:59:b4:02:59:67:64: 5c:61:7c:c5:27:d9:26:13:7d:0e:cd:34:49:2c:46: 20:50:7c:9f:ff:eb:10:dd:29:72:88:15:00:eb:56: cd:98:70:8f:19:9c:6f:2d:3b:30:cd:a9:85:7f:9c: 16:b5:81:b5:7e:37:3c:f7:f2:f8:05:be:d4:4c:cd: 6d:73:5e:c9:b8:18:cd:34:bd:29:4b:a1:88:22:24: 82:ec:0c:69:1d:26:a6:b4:e1:33:8b:d1:29:64:91: 42:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:A3:37:55:A5:9C:5A:D2:A1:4F:07:BB:EC:2F:11:D2:CA:6F:55:85 X509v3 Authority Key Identifier: keyid:52:15:25:85:6C:BB:A6:D9:D2:25:42:21:C2:80:DC:93:07:34:AA:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/4/521525856CBBA6D9D2254221C280DC930734AAB8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/521525856CBBA6D9D2254221C280DC930734AAB8.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/4/521525856CBBA6D9D2254221C280DC930734AAB8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:59:81:d2:b0:76:55:e6:55:23:1e:8f:00:be:2b:4c:b6:11: 31:27:e5:5b:96:21:bb:2f:da:8a:2e:98:9b:b4:a8:7a:9b:75: df:86:23:d4:46:66:7a:8e:85:fc:b0:b0:98:81:24:f9:12:43: 57:34:e7:20:16:96:1f:c4:33:40:a7:8e:cc:bf:6c:e9:bc:98: 73:39:ae:b1:8b:7d:38:37:61:01:05:02:da:8b:c4:3a:d3:3f: 64:04:61:fe:4c:c1:8a:30:d1:fc:aa:55:eb:44:cd:fb:b3:40: 3e:73:b8:46:96:28:c2:05:df:15:d3:5c:08:be:9f:7c:c1:2d: e4:97:47:4a:90:46:89:a5:9b:72:ff:e1:9b:1a:4c:b9:3e:b8: a3:4e:1f:17:e3:5c:ba:1d:1d:f9:4e:7b:ab:a2:be:a6:86:ff: 32:51:73:98:ed:a4:21:ce:c7:eb:70:95:1d:21:08:7e:e0:ab: e9:68:a0:f2:54:b1:e3:a1:b7:99:15:a5:c1:fa:59:bf:11:f2: 77:2a:b9:24:b7:c7:d0:9e:3b:09:c9:28:af:83:a8:12:c1:23: 4b:69:07:d5:63:88:73:15:f3:f4:19:8c:4c:17:35:c9:15:1d: 95:d2:4e:13:7e:71:33:16:56:47:2b:06:45:b8:8c:d6:65:79: 15:02:9e:82 -----BEGIN CERTIFICATE----- MIIFbTCCBFWgAwIBAgIUPusBMB4w89OD382JWoE4gH6zptcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTIxNTI1ODU2Q0JCQTZEOUQyMjU0MjIxQzI4MERDOTMw NzM0QUFCODAeFw0yNjA1MTIxMTMyNDNaFw0yNjA1MTMxMjEyNDNaMDMxMTAvBgNV BAMTKDNDQTMzNzU1QTU5QzVBRDJBMTRGMDdCQkVDMkYxMUQyQ0E2RjU1ODUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC41Jri3qUrWESKEZhi7g7vIkAr ab9Z0/T0EyYb4RG522ddEEHSEGmon9KBjLNzu+DkgA//c7bCher6ocgj7U4SJRyT OzJxM4MR4o4ZThxMJ4fxwXUgYTcHvFOjY/HWlR9lCmN7GzIIOzzg95mImhLLNGFC OlZGY5DjbTuYv32HhwuF9juXf5RD13pJnY5Mksoz7rvln1GBH1UCyEG0NFm0Alln ZFxhfMUn2SYTfQ7NNEksRiBQfJ//6xDdKXKIFQDrVs2YcI8ZnG8tOzDNqYV/nBa1 gbV+Nzz38vgFvtRMzW1zXsm4GM00vSlLoYgiJILsDGkdJqa04TOL0SlkkUILAgMB AAGjggJ3MIICczAdBgNVHQ4EFgQUPKM3VaWcWtKhTwe77C8R0spvVYUwHwYDVR0j BBgwFoAUUhUlhWy7ptnSJUIhwoDckwc0qrgwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMmFjYTNjYTYtMzRjYy00NzcyLWJhYzAtYTM1ZGQwMTk1 Y2U3LzQvNTIxNTI1ODU2Q0JCQTZEOUQyMjU0MjIxQzI4MERDOTMwNzM0QUFCOC5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1 YzkxYmUzZjlkLzcvNTIxNTI1ODU2Q0JCQTZEOUQyMjU0MjIxQzI4MERDOTMwNzM0 QUFCOC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8yYWNhM2NhNi0z NGNjLTQ3NzItYmFjMC1hMzVkZDAxOTVjZTcvNC81MjE1MjU4NTZDQkJBNkQ5RDIy NTQyMjFDMjgwREM5MzA3MzRBQUI4Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbVmB0rB2VeZVIx6PAL4r TLYRMSflW5Yhuy/aii6Ym7Soept134Yj1EZmeo6F/LCwmIEk+RJDVzTnIBaWH8Qz QKeOzL9s6byYczmusYt9ODdhAQUC2ovEOtM/ZARh/kzBijDR/KpV60TN+7NAPnO4 RpYowgXfFdNcCL6ffMEt5JdHSpBGiaWbcv/hmxpMuT64o04fF+Ncuh0d+U57q6K+ pob/MlFzmO2kIc7H63CVHSEIfuCr6Wig8lSx46G3mRWlwfpZvxHydyq5JLfH0J47 Cckor4OoEsEjS2kH1WOIcxXz9BmMTBc1yRUdldJOE35xMxZWRysGRbiM1mV5FQKe gg== -----END CERTIFICATE-----Generated at Wed May 13 06:24:34 2026 by rpki-client