$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/1/52285B8754F215EBEAB614DEB86E66DA3B37320C.mft File: 52285B8754F215EBEAB614DEB86E66DA3B37320C.mft (raw, json) Hash identifier: yZ2z4Mpw1WgkYcIHC5ylKbhnj8NzEaKI+L+hTO+LlUw= Subject key identifier: 59:0F:A9:A3:13:D2:E8:1E:B6:79:DE:39:78:45:F0:7F:71:DF:D3:87 Authority key identifier: 52:28:5B:87:54:F2:15:EB:EA:B6:14:DE:B8:6E:66:DA:3B:37:32:0C Certificate issuer: /CN=52285B8754F215EBEAB614DEB86E66DA3B37320C Certificate serial: 4B10618EA7939C101654AB28CA117B8C37CF145D Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/52285B8754F215EBEAB614DEB86E66DA3B37320C.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/1/52285B8754F215EBEAB614DEB86E66DA3B37320C.mft Manifest number: 01FA Signing time: Sat 23 Aug 2025 15:29:26 +0000 Manifest this update: Sat 23 Aug 2025 15:24:26 +0000 Manifest next update: Sun 24 Aug 2025 18:36:26 +0000 Files and hashes: 1: 52285B8754F215EBEAB614DEB86E66DA3B37320C.crl (hash: UXzCE/luvN8wD0PTjlKlJtXRykKq4NMstkoDQT3GOsE=) 2: 326131343a373538313a623030303a3a2f33362d3336203d3e20323135303834.roa (hash: 8Iv1HdyRUhjcvQFIVfomOSyv77EzHn71qEiaLSvjvAE=) 3: 326131343a373538313a6632303a3a2f34382d3438203d3e20313533313736.roa (hash: Q+SHdUagvI6KZ73P7qEzwFM/MmpC3zK1RzbKHzMJDSM=) 4: 326131343a373538313a6632303a3a2f34342d3434203d3e20323135303834.roa (hash: ikRuOA2n8u4zq4qR5S8PkgRSZxYIGPGee0tyFklQIEM=) 5: 326131343a373538313a6130303a3a2f34302d3430203d3e20323135303834.roa (hash: 6SMGzy0qxU/C5+Cz9d8WI56z67FiL2uOHLuZUmmEFig=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/1/52285B8754F215EBEAB614DEB86E66DA3B37320C.crl rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/1/52285B8754F215EBEAB614DEB86E66DA3B37320C.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/52285B8754F215EBEAB614DEB86E66DA3B37320C.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 24 Aug 2025 12:25:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:10:61:8e:a7:93:9c:10:16:54:ab:28:ca:11:7b:8c:37:cf:14:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=52285B8754F215EBEAB614DEB86E66DA3B37320C Validity Not Before: Aug 23 15:24:26 2025 GMT Not After : Aug 24 18:36:26 2025 GMT Subject: CN=590FA9A313D2E81EB679DE397845F07F71DFD387 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:56:f7:da:4a:f9:f8:f3:52:90:21:ef:d2:d6: 0b:33:fd:af:b3:8d:7b:18:a5:d3:a1:71:5f:cb:d5: 5f:96:ef:fa:bb:26:25:bb:eb:c1:2f:b2:86:7b:dc: e5:07:19:7c:36:24:34:20:c3:73:5e:ef:e2:80:56: e5:ac:5f:02:d9:2f:dd:2e:5c:3d:48:84:ce:fb:ca: c4:bd:6a:ef:97:fc:7e:12:71:c9:4d:f0:ea:52:20: 57:ca:45:78:3c:ad:b8:72:c4:18:a8:2b:07:90:b9: 88:ea:0f:ed:83:6c:1c:fb:0f:d1:fa:da:b0:78:8e: 29:15:4a:9a:27:18:b9:30:5e:7b:b9:d2:d5:3d:a1: d1:1b:39:d0:60:f3:68:ea:cf:03:1b:31:6e:d4:69: 17:66:b1:7b:04:04:b8:54:74:fe:60:78:a2:9f:4d: 36:a5:dc:be:c0:f8:b4:03:23:ab:fc:a9:4e:7e:b2: 6d:43:6d:56:d0:97:b0:5f:e0:6e:77:77:96:99:8e: da:1b:0c:7d:05:2a:b2:e0:fc:1c:a9:8b:8a:3e:1b: 95:f9:dd:63:a9:25:d7:d5:74:2c:37:90:a3:54:68: e0:8f:2d:ea:b7:be:af:be:89:b6:dd:b5:97:c2:13: fa:08:12:7c:35:e3:bb:c4:d8:5b:25:d6:73:f0:5a: d0:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:0F:A9:A3:13:D2:E8:1E:B6:79:DE:39:78:45:F0:7F:71:DF:D3:87 X509v3 Authority Key Identifier: keyid:52:28:5B:87:54:F2:15:EB:EA:B6:14:DE:B8:6E:66:DA:3B:37:32:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/1/52285B8754F215EBEAB614DEB86E66DA3B37320C.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/52285B8754F215EBEAB614DEB86E66DA3B37320C.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/1/52285B8754F215EBEAB614DEB86E66DA3B37320C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:9d:eb:33:04:37:23:9b:d2:f8:fa:db:55:d7:a8:09:9d:7b: a9:31:45:af:01:97:de:84:cc:39:be:58:cf:74:f2:ff:d0:d2: cd:37:0b:41:1c:fe:05:cd:0d:24:be:15:a8:76:b0:f5:1f:49: 04:10:6d:2d:8f:55:17:ee:c2:7b:4a:ca:32:19:68:6d:6f:49: a4:bc:c1:bf:b4:91:d2:e5:1e:1f:c1:08:be:3b:3d:8b:e2:29: a2:1c:6a:bd:07:b1:3f:29:8c:8d:60:33:df:f7:7c:a0:15:ad: 04:fe:02:a6:f7:0e:eb:66:7c:d5:5e:3b:88:fb:fd:df:ed:93: 80:38:14:b9:a3:cf:9f:aa:15:b2:b5:90:dc:a4:48:a1:47:0b: a5:2e:f4:96:a2:0b:41:10:66:ff:e8:6b:84:a0:05:b6:9e:eb: 46:a1:ae:4d:2a:a5:ea:0f:31:64:d1:64:71:ce:13:7d:23:de: 6a:80:d2:e2:c9:cc:36:24:b0:44:62:ab:84:64:2f:b9:67:50: 51:b5:df:74:96:79:26:04:03:58:de:27:c2:35:a6:47:14:e2: bd:12:9f:53:d2:89:59:d3:a3:97:b4:56:26:92:c6:25:59:27: b0:7b:05:23:6a:cb:3e:45:03:f6:ed:47:2f:ef:e2:f8:bc:d6: 8c:9d:f1:9d -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUSxBhjqeTnBAWVKsoyhF7jDfPFF0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTIyODVCODc1NEYyMTVFQkVBQjYxNERFQjg2RTY2REEz QjM3MzIwQzAeFw0yNTA4MjMxNTI0MjZaFw0yNTA4MjQxODM2MjZaMDMxMTAvBgNV BAMTKDU5MEZBOUEzMTNEMkU4MUVCNjc5REUzOTc4NDVGMDdGNzFERkQzODcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDoVvfaSvn481KQIe/S1gsz/a+z jXsYpdOhcV/L1V+W7/q7JiW768EvsoZ73OUHGXw2JDQgw3Ne7+KAVuWsXwLZL90u XD1IhM77ysS9au+X/H4ScclN8OpSIFfKRXg8rbhyxBioKweQuYjqD+2DbBz7D9H6 2rB4jikVSponGLkwXnu50tU9odEbOdBg82jqzwMbMW7UaRdmsXsEBLhUdP5geKKf TTal3L7A+LQDI6v8qU5+sm1DbVbQl7Bf4G53d5aZjtobDH0FKrLg/Bypi4o+G5X5 3WOpJdfVdCw3kKNUaOCPLeq3vq++ibbdtZfCE/oIEnw147vE2Fsl1nPwWtDrAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUWQ+poxPS6B62ed45eEXwf3Hf04cwHwYDVR0j BBgwFoAUUihbh1TyFevqthTeuG5m2js3MgwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOGQ1Y2QxNGUtNWY2My00ZjFjLTk0ZTMtMjcwNTBjMjY2 NDgwLzEvNTIyODVCODc1NEYyMTVFQkVBQjYxNERFQjg2RTY2REEzQjM3MzIwQy5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC81MjI4NUI4NzU0RjIxNUVCRUFCNjE0REVC ODZFNjZEQTNCMzczMjBDLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzhkNWNkMTRlLTVmNjMtNGYxYy05NGUzLTI3MDUwYzI2NjQ4MC8xLzUyMjg1Qjg3 NTRGMjE1RUJFQUI2MTRERUI4NkU2NkRBM0IzNzMyMEMubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQA4nesz BDcjm9L4+ttV16gJnXupMUWvAZfehMw5vljPdPL/0NLNNwtBHP4FzQ0kvhWodrD1 H0kEEG0tj1UX7sJ7SsoyGWhtb0mkvMG/tJHS5R4fwQi+Oz2L4imiHGq9B7E/KYyN YDPf93ygFa0E/gKm9w7rZnzVXjuI+/3f7ZOAOBS5o8+fqhWytZDcpEihRwulLvSW ogtBEGb/6GuEoAW2nutGoa5NKqXqDzFk0WRxzhN9I95qgNLiycw2JLBEYquEZC+5 Z1BRtd90lnkmBANY3ifCNaZHFOK9Ep9T0olZ06OXtFYmksYlWSewewUjass+RQP2 7Ucv7+L4vNaMnfGd -----END CERTIFICATE-----Generated at Sat Aug 23 19:47:51 2025 by rpki-client