$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/4/521525856CBBA6D9D2254221C280DC930734AAB8.mft File: 521525856CBBA6D9D2254221C280DC930734AAB8.mft (raw, json) Hash identifier: I1kX3Co0ymI2minR0SxuTcDrCGdPsioZ+WxSvLbuxvQ= Subject key identifier: D7:81:30:E9:77:F0:1A:57:25:2E:61:AC:FB:B9:B3:F7:71:F8:19:1A Authority key identifier: 52:15:25:85:6C:BB:A6:D9:D2:25:42:21:C2:80:DC:93:07:34:AA:B8 Certificate issuer: /CN=521525856CBBA6D9D2254221C280DC930734AAB8 Certificate serial: 45107928A186233338934EC6A0386DDEBF7DD345 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/521525856CBBA6D9D2254221C280DC930734AAB8.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/4/521525856CBBA6D9D2254221C280DC930734AAB8.mft Manifest number: 0255 Signing time: Thu 24 Sep 2026 03:26:12 +0000 Manifest this update: Thu 24 Sep 2026 03:21:12 +0000 Manifest next update: Fri 25 Sep 2026 05:05:12 +0000 Files and hashes: 1: 326130363a613030333a623030623a3a2f34382d3438203d3e20323030363736.roa (hash: Pecsaqccf5tHcdlTeF7bCwVmz7JER7H8qSHLGuqWRMI=) 2: 39342e32342e3130382e302f32342d3234203d3e20323030363736.roa (hash: HSErQq3crkyzVJa6g9ayoDntWunwG4uTUMd6ifKsOLU=) 3: 326130363a613030333a313131313a3a2f34382d3438203d3e20323030363736.roa (hash: reSiEjWqNL5bMfSb8NDNP7L36wtpl2UMV26XqCjhnmE=) 4: 521525856CBBA6D9D2254221C280DC930734AAB8.crl (hash: ro1QmHSfU/7dTdsL4sQJAn2CQSYuzsBnPak4Htn+XkU=) 5: 326130363a613030333a3a2f34382d3438203d3e20323030363736.roa (hash: hctWuN+nHCxcPnxwlB0HaZTfqv5a4O8gc3WDRLEEUrc=) 6: 326130363a613030333a313333373a3a2f34382d3438203d3e20323030363736.roa (hash: y6dlRvQ6Ei4ylbtG2E1Fsbq6bkYPEiXc/hP5pnr/A5s=) 7: 326130363a613030333a666666663a3a2f34382d3438203d3e203530373535.roa (hash: ZhHRzDFs7fBtUGvR8pxFCEtpL9Hraol9iZdGLjWUEvI=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/4/521525856CBBA6D9D2254221C280DC930734AAB8.crl rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/4/521525856CBBA6D9D2254221C280DC930734AAB8.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/521525856CBBA6D9D2254221C280DC930734AAB8.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 25 Sep 2026 05:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:10:79:28:a1:86:23:33:38:93:4e:c6:a0:38:6d:de:bf:7d:d3:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=521525856CBBA6D9D2254221C280DC930734AAB8 Validity Not Before: Sep 24 03:21:12 2026 GMT Not After : Sep 25 05:05:12 2026 GMT Subject: CN=D78130E977F01A57252E61ACFBB9B3F771F8191A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:eb:c6:29:63:3c:55:3f:d7:19:bc:40:31:82: d8:52:38:eb:84:a1:9f:94:da:79:bf:a6:dd:17:3c: c7:6f:6c:dd:6c:97:52:7d:19:f8:3f:b4:1e:bb:47: cc:f1:14:2c:df:75:91:cc:0d:e5:a3:9d:98:30:15: d9:ac:0a:4f:d6:c8:25:90:f0:b0:52:d0:c0:89:2e: 96:f0:7a:ec:98:43:37:e7:e2:8a:6f:13:2e:9a:c6: a2:77:b4:f4:d7:af:b4:77:91:32:67:86:c6:6f:23: a4:93:d5:de:b4:40:10:da:f5:2d:a5:44:99:6d:7d: 9f:51:d1:26:5d:7b:3c:53:03:3d:1b:1f:9a:58:a9: 09:72:86:87:dd:a4:6d:a5:ee:fd:be:ce:b5:25:96: e9:cc:1e:fa:73:ae:da:f5:47:4d:06:fe:b9:f1:00: 5c:e9:85:a8:68:3c:4d:46:e6:85:45:46:f3:e9:21: 9e:f5:e7:b3:86:6c:a4:93:d0:11:6a:95:fb:25:b3: e5:22:45:13:b0:96:f9:dc:1a:ca:8e:3e:4a:fe:aa: ca:6e:72:27:8d:d6:b7:c8:f1:aa:d4:92:bc:73:0e: da:95:43:b0:ac:0b:97:a0:95:a6:a3:b5:9a:d8:e4: 8e:4e:31:45:f5:60:6c:f7:d9:bd:a0:4d:41:de:ce: eb:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:81:30:E9:77:F0:1A:57:25:2E:61:AC:FB:B9:B3:F7:71:F8:19:1A X509v3 Authority Key Identifier: keyid:52:15:25:85:6C:BB:A6:D9:D2:25:42:21:C2:80:DC:93:07:34:AA:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/4/521525856CBBA6D9D2254221C280DC930734AAB8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/521525856CBBA6D9D2254221C280DC930734AAB8.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/4/521525856CBBA6D9D2254221C280DC930734AAB8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:94:e7:b7:98:34:80:78:72:81:c6:38:7c:08:a6:03:6e:ad: e3:43:c3:14:a1:b4:03:27:c6:80:bc:7f:a5:ea:7b:aa:2f:3c: b1:63:26:be:95:b8:5e:f6:88:23:ee:75:e4:6f:1b:fe:de:95: b1:87:16:c6:83:54:81:db:75:f0:c0:20:6e:8c:6a:8c:9e:b1: ee:b4:ac:69:81:56:43:ad:5d:f4:17:65:ba:08:dd:47:7b:23: 59:8b:f8:26:c8:bc:0c:81:aa:d9:c0:5f:a5:f8:9f:a6:36:20: 2e:6f:07:26:56:9d:b1:00:91:84:2c:25:11:89:14:47:92:b1: a7:7a:cf:15:bd:7f:83:af:83:9f:40:13:cc:1a:59:3d:2b:96: 1d:0c:53:75:01:e2:d1:cb:bd:76:af:02:58:42:7a:1d:f2:04: fa:8a:d8:fb:d8:fb:7d:f6:50:93:03:6d:ab:15:a9:dc:53:da: b8:71:78:cd:48:d2:8c:65:67:3a:fa:ad:5e:44:51:62:85:50: 1f:60:78:df:fd:01:08:12:eb:0f:f9:cc:53:03:27:08:32:52: ab:11:ed:db:07:2a:80:c7:5c:7c:44:d8:36:d5:1f:69:95:e0: c5:63:bc:35:23:01:ee:6b:f6:d2:b5:8c:04:e6:f8:c0:d8:25: 30:ee:9f:b1 -----BEGIN CERTIFICATE----- MIIFbTCCBFWgAwIBAgIURRB5KKGGIzM4k07GoDht3r9900UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTIxNTI1ODU2Q0JCQTZEOUQyMjU0MjIxQzI4MERDOTMw NzM0QUFCODAeFw0yNjA5MjQwMzIxMTJaFw0yNjA5MjUwNTA1MTJaMDMxMTAvBgNV BAMTKEQ3ODEzMEU5NzdGMDFBNTcyNTJFNjFBQ0ZCQjlCM0Y3NzFGODE5MUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDk68YpYzxVP9cZvEAxgthSOOuE oZ+U2nm/pt0XPMdvbN1sl1J9Gfg/tB67R8zxFCzfdZHMDeWjnZgwFdmsCk/WyCWQ 8LBS0MCJLpbweuyYQzfn4opvEy6axqJ3tPTXr7R3kTJnhsZvI6ST1d60QBDa9S2l RJltfZ9R0SZdezxTAz0bH5pYqQlyhofdpG2l7v2+zrUllunMHvpzrtr1R00G/rnx AFzphahoPE1G5oVFRvPpIZ7157OGbKST0BFqlfsls+UiRROwlvncGsqOPkr+qspu cieN1rfI8arUkrxzDtqVQ7CsC5eglaajtZrY5I5OMUX1YGz32b2gTUHezuvRAgMB AAGjggJ3MIICczAdBgNVHQ4EFgQU14Ew6XfwGlclLmGs+7mz93H4GRowHwYDVR0j BBgwFoAUUhUlhWy7ptnSJUIhwoDckwc0qrgwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMmFjYTNjYTYtMzRjYy00NzcyLWJhYzAtYTM1ZGQwMTk1 Y2U3LzQvNTIxNTI1ODU2Q0JCQTZEOUQyMjU0MjIxQzI4MERDOTMwNzM0QUFCOC5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1 YzkxYmUzZjlkLzcvNTIxNTI1ODU2Q0JCQTZEOUQyMjU0MjIxQzI4MERDOTMwNzM0 QUFCOC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8yYWNhM2NhNi0z NGNjLTQ3NzItYmFjMC1hMzVkZDAxOTVjZTcvNC81MjE1MjU4NTZDQkJBNkQ5RDIy NTQyMjFDMjgwREM5MzA3MzRBQUI4Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVpTnt5g0gHhygcY4fAim A26t40PDFKG0AyfGgLx/pep7qi88sWMmvpW4XvaII+515G8b/t6VsYcWxoNUgdt1 8MAgboxqjJ6x7rSsaYFWQ61d9BdlugjdR3sjWYv4Jsi8DIGq2cBfpfifpjYgLm8H JladsQCRhCwlEYkUR5Kxp3rPFb1/g6+Dn0ATzBpZPSuWHQxTdQHi0cu9dq8CWEJ6 HfIE+orY+9j7ffZQkwNtqxWp3FPauHF4zUjSjGVnOvqtXkRRYoVQH2B43/0BCBLr D/nMUwMnCDJSqxHt2wcqgMdcfETYNtUfaZXgxWO8NSMB7mv20rWMBOb4wNglMO6f sQ== -----END CERTIFICATE-----Generated at Thu Sep 24 11:43:56 2026 by rpki-client