$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/4/521525856CBBA6D9D2254221C280DC930734AAB8.mft File: 521525856CBBA6D9D2254221C280DC930734AAB8.mft (raw, json) Hash identifier: +xWmzu2ad6DCzq5BtO5z5hFQRrWRHLgp154nRKQ8a0Y= Subject key identifier: 57:96:44:04:65:6D:42:A4:59:62:90:A9:43:D3:A4:5D:69:C7:20:FE Authority key identifier: 52:15:25:85:6C:BB:A6:D9:D2:25:42:21:C2:80:DC:93:07:34:AA:B8 Certificate issuer: /CN=521525856CBBA6D9D2254221C280DC930734AAB8 Certificate serial: 6311858E080F95D078391DFF98DB5688E32436D0 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/521525856CBBA6D9D2254221C280DC930734AAB8.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/4/521525856CBBA6D9D2254221C280DC930734AAB8.mft Manifest number: 45 Signing time: Sat 23 Aug 2025 13:37:52 +0000 Manifest this update: Sat 23 Aug 2025 13:32:52 +0000 Manifest next update: Sun 24 Aug 2025 15:13:52 +0000 Files and hashes: 1: 326130363a613030333a623030623a3a2f34382d3438203d3e20323030363736.roa (hash: kunZD4UEEwcG2nc99Wb+xz1yK+IdIm7SjegbAra8chc=) 2: 326130363a613030333a313333373a3a2f34382d3438203d3e20323030363736.roa (hash: qr/bfrnor+1gB61vuOA1czljaK/VRJBauBs1U2EbENw=) 3: 326130363a613030333a3a2f34382d3438203d3e20323030363736.roa (hash: PNV+6g1yuxZfiOErO1rlD/OjvHSDnl045B3ycAeUEw8=) 4: 521525856CBBA6D9D2254221C280DC930734AAB8.crl (hash: MEUD+4hMzbn8kUme7UepQFOvuoiYGpRHZHdXvuwn9UY=) 5: 326130363a613030333a666666663a3a2f34382d3438203d3e203530373535.roa (hash: HVzJ9R68GMwZO9EL/DI2ZLp1a+F6uNrFmfl8+YGeZKc=) 6: 326130363a613030333a313131313a3a2f34382d3438203d3e20323030363736.roa (hash: rOXq6KopS7nNrxLenr0thMMbHkGjihkrbeGzvVQ4fNc=) 7: 39342e32342e3130382e302f32342d3234203d3e20323030363736.roa (hash: hbkkIcLL2dVYKU+9BKXYxvOgTE4cVlfb37zj8sIKpS0=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/4/521525856CBBA6D9D2254221C280DC930734AAB8.crl rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/4/521525856CBBA6D9D2254221C280DC930734AAB8.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/521525856CBBA6D9D2254221C280DC930734AAB8.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 24 Aug 2025 13:34:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:11:85:8e:08:0f:95:d0:78:39:1d:ff:98:db:56:88:e3:24:36:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=521525856CBBA6D9D2254221C280DC930734AAB8 Validity Not Before: Aug 23 13:32:52 2025 GMT Not After : Aug 24 15:13:52 2025 GMT Subject: CN=57964404656D42A4596290A943D3A45D69C720FE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:d5:eb:57:bf:67:b3:52:0b:5b:75:52:ec:b7: 81:e5:f4:38:2f:92:3d:6e:cc:3d:20:cb:f8:e9:e2: 41:10:10:4c:f4:1e:4f:9b:cd:6c:c1:8b:0f:19:a9: b1:30:1f:96:5d:5e:bf:d7:08:a6:3d:2f:f6:19:52: 42:ea:48:93:2e:f2:86:b0:6f:58:36:bb:f1:1f:4b: df:65:22:38:29:07:e2:9f:2c:69:44:05:a5:e2:cf: d0:ab:09:25:78:22:2f:ab:63:09:24:f8:ac:3d:0c: 8d:bc:9e:c3:59:04:30:fc:76:f6:60:8c:8e:7d:65: 34:96:1e:1f:01:42:0d:ff:71:7e:5f:8b:17:d4:aa: 0e:b1:76:1a:a2:98:a1:2f:55:ea:86:ec:2a:ca:8e: ba:06:b8:f7:60:b6:05:5a:cd:de:95:69:74:29:8a: b3:4d:88:1b:9d:f6:1e:2a:55:32:c3:79:25:27:dc: d8:9d:fb:21:6b:1f:08:1c:7d:54:76:a0:82:0f:5c: 27:2c:cf:36:d2:7a:38:0d:a8:10:ce:38:87:a2:d0: 24:6a:ae:30:03:97:f4:7b:66:e0:50:00:c4:6c:48: 88:aa:0b:85:68:70:9c:64:9e:46:34:d3:fd:a4:b1: af:79:32:19:fb:d4:ca:b7:4a:cd:06:e1:94:4b:f2: 99:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:96:44:04:65:6D:42:A4:59:62:90:A9:43:D3:A4:5D:69:C7:20:FE X509v3 Authority Key Identifier: keyid:52:15:25:85:6C:BB:A6:D9:D2:25:42:21:C2:80:DC:93:07:34:AA:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/4/521525856CBBA6D9D2254221C280DC930734AAB8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/521525856CBBA6D9D2254221C280DC930734AAB8.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/4/521525856CBBA6D9D2254221C280DC930734AAB8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:8e:a7:b6:70:44:26:f8:a7:3a:b9:0f:0f:f7:2e:c4:a0:d7: 51:ae:99:c5:20:54:d8:72:ca:98:77:af:9a:72:dc:46:6b:22: 6a:76:21:0e:cc:e9:1b:85:b6:49:f5:6c:1c:76:3b:e7:1b:8d: cd:88:ab:54:a0:22:1f:ff:24:79:90:da:7a:7b:91:59:14:65: 5a:86:7f:b5:ab:d1:d3:20:c3:14:dd:0d:2e:f7:c3:9c:90:d1: 5e:74:fc:2c:99:c7:11:74:f5:23:81:10:a0:85:26:65:a7:c6: 47:f1:6c:97:94:11:7d:45:d8:e6:fb:01:bd:87:53:51:ff:15: b7:3d:ef:85:e9:9c:52:94:82:5f:08:96:5f:1d:1d:00:b1:d5: 94:90:29:3c:35:37:af:89:34:86:b1:b1:d0:87:ab:1b:38:64: 99:79:07:fe:6f:83:ec:24:7d:4b:57:66:3c:e9:f5:94:f5:a9: 3b:40:bc:51:77:b3:3c:b4:c5:c5:68:eb:2c:4e:f6:47:59:ea: 9c:ec:9f:71:a4:5c:73:56:d1:91:2e:d4:9e:c3:ff:fc:e2:73: 7f:2b:14:7d:8b:ee:f4:0a:d0:34:82:3d:48:fb:45:62:a1:8f: f6:5e:02:e2:8c:d2:81:91:35:42:4d:67:80:a9:2d:bf:17:00: 0e:8f:2b:41 -----BEGIN CERTIFICATE----- MIIFbTCCBFWgAwIBAgIUYxGFjggPldB4OR3/mNtWiOMkNtAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTIxNTI1ODU2Q0JCQTZEOUQyMjU0MjIxQzI4MERDOTMw NzM0QUFCODAeFw0yNTA4MjMxMzMyNTJaFw0yNTA4MjQxNTEzNTJaMDMxMTAvBgNV BAMTKDU3OTY0NDA0NjU2RDQyQTQ1OTYyOTBBOTQzRDNBNDVENjlDNzIwRkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDy1etXv2ezUgtbdVLst4Hl9Dgv kj1uzD0gy/jp4kEQEEz0Hk+bzWzBiw8ZqbEwH5ZdXr/XCKY9L/YZUkLqSJMu8oaw b1g2u/EfS99lIjgpB+KfLGlEBaXiz9CrCSV4Ii+rYwkk+Kw9DI28nsNZBDD8dvZg jI59ZTSWHh8BQg3/cX5fixfUqg6xdhqimKEvVeqG7CrKjroGuPdgtgVazd6VaXQp irNNiBud9h4qVTLDeSUn3Nid+yFrHwgcfVR2oIIPXCcszzbSejgNqBDOOIei0CRq rjADl/R7ZuBQAMRsSIiqC4VocJxknkY00/2ksa95Mhn71Mq3Ss0G4ZRL8pnVAgMB AAGjggJ3MIICczAdBgNVHQ4EFgQUV5ZEBGVtQqRZYpCpQ9OkXWnHIP4wHwYDVR0j BBgwFoAUUhUlhWy7ptnSJUIhwoDckwc0qrgwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMmFjYTNjYTYtMzRjYy00NzcyLWJhYzAtYTM1ZGQwMTk1 Y2U3LzQvNTIxNTI1ODU2Q0JCQTZEOUQyMjU0MjIxQzI4MERDOTMwNzM0QUFCOC5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1 YzkxYmUzZjlkLzcvNTIxNTI1ODU2Q0JCQTZEOUQyMjU0MjIxQzI4MERDOTMwNzM0 QUFCOC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8yYWNhM2NhNi0z NGNjLTQ3NzItYmFjMC1hMzVkZDAxOTVjZTcvNC81MjE1MjU4NTZDQkJBNkQ5RDIy NTQyMjFDMjgwREM5MzA3MzRBQUI4Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANY6ntnBEJvinOrkPD/cu xKDXUa6ZxSBU2HLKmHevmnLcRmsianYhDszpG4W2SfVsHHY75xuNzYirVKAiH/8k eZDaenuRWRRlWoZ/tavR0yDDFN0NLvfDnJDRXnT8LJnHEXT1I4EQoIUmZafGR/Fs l5QRfUXY5vsBvYdTUf8Vtz3vhemcUpSCXwiWXx0dALHVlJApPDU3r4k0hrGx0Ier GzhkmXkH/m+D7CR9S1dmPOn1lPWpO0C8UXezPLTFxWjrLE72R1nqnOyfcaRcc1bR kS7UnsP//OJzfysUfYvu9ArQNII9SPtFYqGP9l4C4ozSgZE1Qk1ngKktvxcADo8r QQ== -----END CERTIFICATE-----Generated at Sat Aug 23 19:44:03 2025 by rpki-client