$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/1/52285B8754F215EBEAB614DEB86E66DA3B37320C.mft File: 52285B8754F215EBEAB614DEB86E66DA3B37320C.mft (raw, json) Hash identifier: lnrRjjfuqIY1sd7D4HWHBjFmpVWxP74CKjvgBBBF4Xc= Subject key identifier: B8:49:3A:3E:37:36:83:B0:BE:ED:24:41:F2:5F:84:33:E3:46:EE:CC Authority key identifier: 52:28:5B:87:54:F2:15:EB:EA:B6:14:DE:B8:6E:66:DA:3B:37:32:0C Certificate issuer: /CN=52285B8754F215EBEAB614DEB86E66DA3B37320C Certificate serial: 2FC7711EC35D6568DAA47632BA66177C96F57F63 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/52285B8754F215EBEAB614DEB86E66DA3B37320C.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/1/52285B8754F215EBEAB614DEB86E66DA3B37320C.mft Manifest number: 02CD Signing time: Wed 25 Mar 2026 05:55:48 +0000 Manifest this update: Wed 25 Mar 2026 05:50:48 +0000 Manifest next update: Thu 26 Mar 2026 09:50:48 +0000 Files and hashes: 1: 326131343a373538313a6130303a3a2f34302d3430203d3e20323135303834.roa (hash: 6SMGzy0qxU/C5+Cz9d8WI56z67FiL2uOHLuZUmmEFig=) 2: 326131343a373538313a623030303a3a2f33362d3336203d3e20323135303834.roa (hash: 8Iv1HdyRUhjcvQFIVfomOSyv77EzHn71qEiaLSvjvAE=) 3: 326131343a373538313a6632303a3a2f34342d3434203d3e20323135303834.roa (hash: ikRuOA2n8u4zq4qR5S8PkgRSZxYIGPGee0tyFklQIEM=) 4: 52285B8754F215EBEAB614DEB86E66DA3B37320C.crl (hash: L+KEnK3GWsB4kvg6LzOA2d/vTyJYxUi/XcJ5LQ8VPa8=) 5: 326131343a373538313a6632303a3a2f34382d3438203d3e20313533313736.roa (hash: Q+SHdUagvI6KZ73P7qEzwFM/MmpC3zK1RzbKHzMJDSM=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/1/52285B8754F215EBEAB614DEB86E66DA3B37320C.crl rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/1/52285B8754F215EBEAB614DEB86E66DA3B37320C.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/52285B8754F215EBEAB614DEB86E66DA3B37320C.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 26 Mar 2026 09:50:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:c7:71:1e:c3:5d:65:68:da:a4:76:32:ba:66:17:7c:96:f5:7f:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=52285B8754F215EBEAB614DEB86E66DA3B37320C Validity Not Before: Mar 25 05:50:48 2026 GMT Not After : Mar 26 09:50:48 2026 GMT Subject: CN=B8493A3E373683B0BEED2441F25F8433E346EECC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:ce:f6:b1:08:ab:38:51:bb:b2:31:9b:20:14: 1b:2a:b2:d9:0f:e5:be:c2:e2:52:92:56:48:91:ea: 8f:02:ad:9e:df:c9:e2:85:67:3a:f7:83:fa:0a:38: e6:ca:1a:09:4c:fc:d7:ec:17:63:9d:e0:4e:94:36: a1:4f:bc:55:24:4e:76:b6:4e:57:2b:72:9b:45:f6: fb:8f:7d:a6:13:06:f6:af:1a:7c:63:8e:ff:e5:57: dd:d2:e8:2b:51:55:b7:a8:a9:7e:1c:ba:ec:63:ae: 4a:a3:25:f6:71:f8:a8:67:fc:97:bf:b8:6a:5e:ee: c1:0b:8c:a5:1e:8d:9d:cb:57:ce:17:3c:b4:9a:11: 00:eb:c6:37:e8:f3:3f:46:9c:44:cb:1d:30:b2:7b: ef:0f:65:6a:0c:d9:1b:23:4c:de:39:8b:4b:43:55: 28:44:c0:0d:c6:1d:0f:68:41:3f:ec:6c:7f:32:56: 33:bf:25:0b:08:03:7d:ff:f8:d3:41:71:46:b6:54: 8c:07:bf:ce:1f:41:59:8d:1f:18:6d:15:88:31:34: d4:04:d1:28:c8:95:01:8d:91:48:1b:c5:ef:76:75: ad:bd:6e:09:77:d0:45:ce:9b:f0:f3:53:ce:e4:03: a5:7d:ef:e8:7b:e9:b5:da:d1:e5:e2:5b:2e:b6:76: f4:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:49:3A:3E:37:36:83:B0:BE:ED:24:41:F2:5F:84:33:E3:46:EE:CC X509v3 Authority Key Identifier: keyid:52:28:5B:87:54:F2:15:EB:EA:B6:14:DE:B8:6E:66:DA:3B:37:32:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/1/52285B8754F215EBEAB614DEB86E66DA3B37320C.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/52285B8754F215EBEAB614DEB86E66DA3B37320C.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/1/52285B8754F215EBEAB614DEB86E66DA3B37320C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:f7:a9:aa:d7:0a:5c:b0:dc:f3:7a:8a:5e:5c:08:f1:47:11: 0a:54:85:02:11:d7:d4:b6:f5:45:2d:88:fd:56:af:7f:9b:cb: d1:b8:f2:46:ac:f3:83:2d:1f:fd:76:fe:31:35:ef:f2:7f:8c: 89:da:a2:18:e1:59:65:27:76:92:a8:9f:95:dd:a3:1d:64:19: 1d:35:11:fd:78:58:d2:46:c6:9a:f5:0b:c4:f2:74:88:92:16: 62:06:e4:a7:c1:8e:88:f6:75:8e:82:76:e6:47:31:3d:b6:6f: 45:65:64:f6:53:c9:fb:49:9c:80:ef:77:68:65:34:68:ce:f5: 68:cd:e1:53:19:c7:c9:4e:ad:d6:31:31:5f:fd:43:94:a9:a5: 31:aa:81:0d:76:39:a9:af:2b:2f:4f:f9:b9:48:e8:e2:89:b9: 0f:ce:34:d5:5e:76:5c:9e:ef:2f:3c:aa:21:9f:90:41:1d:72: 71:7d:93:1f:37:dc:05:fa:5a:75:6f:ef:94:22:b5:a6:c5:01: d8:bb:83:e1:cf:ae:66:7f:1b:ae:b5:5a:46:32:be:d1:bb:97: cb:d7:08:0d:6b:02:d7:49:c1:a3:2a:87:c6:29:f9:d3:17:06: 7d:ee:87:34:b3:9f:d9:24:c4:d1:86:c9:36:0c:7d:ce:92:e1: d7:e9:07:02 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUL8dxHsNdZWjapHYyumYXfJb1f2MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTIyODVCODc1NEYyMTVFQkVBQjYxNERFQjg2RTY2REEz QjM3MzIwQzAeFw0yNjAzMjUwNTUwNDhaFw0yNjAzMjYwOTUwNDhaMDMxMTAvBgNV BAMTKEI4NDkzQTNFMzczNjgzQjBCRUVEMjQ0MUYyNUY4NDMzRTM0NkVFQ0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClzvaxCKs4UbuyMZsgFBsqstkP 5b7C4lKSVkiR6o8CrZ7fyeKFZzr3g/oKOObKGglM/NfsF2Od4E6UNqFPvFUkTna2 TlcrcptF9vuPfaYTBvavGnxjjv/lV93S6CtRVbeoqX4cuuxjrkqjJfZx+Khn/Je/ uGpe7sELjKUejZ3LV84XPLSaEQDrxjfo8z9GnETLHTCye+8PZWoM2RsjTN45i0tD VShEwA3GHQ9oQT/sbH8yVjO/JQsIA33/+NNBcUa2VIwHv84fQVmNHxhtFYgxNNQE 0SjIlQGNkUgbxe92da29bgl30EXOm/DzU87kA6V97+h76bXa0eXiWy62dvRlAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUuEk6Pjc2g7C+7SRB8l+EM+NG7swwHwYDVR0j BBgwFoAUUihbh1TyFevqthTeuG5m2js3MgwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOGQ1Y2QxNGUtNWY2My00ZjFjLTk0ZTMtMjcwNTBjMjY2 NDgwLzEvNTIyODVCODc1NEYyMTVFQkVBQjYxNERFQjg2RTY2REEzQjM3MzIwQy5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC81MjI4NUI4NzU0RjIxNUVCRUFCNjE0REVC ODZFNjZEQTNCMzczMjBDLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzhkNWNkMTRlLTVmNjMtNGYxYy05NGUzLTI3MDUwYzI2NjQ4MC8xLzUyMjg1Qjg3 NTRGMjE1RUJFQUI2MTRERUI4NkU2NkRBM0IzNzMyMEMubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCG96mq 1wpcsNzzeopeXAjxRxEKVIUCEdfUtvVFLYj9Vq9/m8vRuPJGrPODLR/9dv4xNe/y f4yJ2qIY4VllJ3aSqJ+V3aMdZBkdNRH9eFjSRsaa9QvE8nSIkhZiBuSnwY6I9nWO gnbmRzE9tm9FZWT2U8n7SZyA73doZTRozvVozeFTGcfJTq3WMTFf/UOUqaUxqoEN djmprysvT/m5SOjiibkPzjTVXnZcnu8vPKohn5BBHXJxfZMfN9wF+lp1b++UIrWm xQHYu4Phz65mfxuutVpGMr7Ru5fL1wgNawLXScGjKofGKfnTFwZ97oc0s5/ZJMTR hsk2DH3OkuHX6QcC -----END CERTIFICATE-----Generated at Wed Mar 25 23:15:49 2026 by rpki-client