$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/1/52285B8754F215EBEAB614DEB86E66DA3B37320C.mft File: 52285B8754F215EBEAB614DEB86E66DA3B37320C.mft (raw, json) Hash identifier: MluWyxwQo5fEqUcklTKeKs/jmlSkRkLLZWIVN4hcBYU= Subject key identifier: E4:5A:59:AC:35:77:31:FD:C1:21:70:8B:6E:DE:12:5D:4D:CA:77:51 Authority key identifier: 52:28:5B:87:54:F2:15:EB:EA:B6:14:DE:B8:6E:66:DA:3B:37:32:0C Certificate issuer: /CN=52285B8754F215EBEAB614DEB86E66DA3B37320C Certificate serial: 1C6740CB485DE36E1185EA763F82B0EE9043CD40 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/52285B8754F215EBEAB614DEB86E66DA3B37320C.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/1/52285B8754F215EBEAB614DEB86E66DA3B37320C.mft Manifest number: 036F Signing time: Thu 23 Jul 2026 15:53:12 +0000 Manifest this update: Thu 23 Jul 2026 15:48:12 +0000 Manifest next update: Fri 24 Jul 2026 17:08:12 +0000 Files and hashes: 1: 52285B8754F215EBEAB614DEB86E66DA3B37320C.crl (hash: HJO21P6ubE4Np9CNSxNvUu+HCk+Njazo6+tpQtqDD9I=) 2: 326131343a373538313a6632303a3a2f34342d3434203d3e20323135303834.roa (hash: /AaiYsKWuqRgDvvUADUKcufSQBbG5oanOxBGHWa2vLA=) 3: 326131343a373538313a6130303a3a2f34302d3430203d3e20323135303834.roa (hash: AMf8FFzkyNRTCLs/i7swnRAL3WtJKbW6+Q9+QH2tffk=) 4: 326131343a373538313a623030303a3a2f33362d3336203d3e20323135303834.roa (hash: N9L4nbL2Uo4P069vOshVKkJFc321LxJpH/q85ffpRGI=) 5: 326131343a373538313a6632303a3a2f34382d3438203d3e20313533313736.roa (hash: 8KUcwV+ZBGNa1TWr9TAbw1mQOwKknHp9Hus4NY1ZuW4=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/1/52285B8754F215EBEAB614DEB86E66DA3B37320C.crl rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/1/52285B8754F215EBEAB614DEB86E66DA3B37320C.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/52285B8754F215EBEAB614DEB86E66DA3B37320C.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 24 Jul 2026 14:03:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:67:40:cb:48:5d:e3:6e:11:85:ea:76:3f:82:b0:ee:90:43:cd:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=52285B8754F215EBEAB614DEB86E66DA3B37320C Validity Not Before: Jul 23 15:48:12 2026 GMT Not After : Jul 24 17:08:12 2026 GMT Subject: CN=E45A59AC357731FDC121708B6EDE125D4DCA7751 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:19:5d:9f:1b:c5:4b:5f:4d:1c:25:d5:9b:46: 4d:31:28:d0:e3:75:f2:3c:46:9e:3a:a6:b8:33:d5: dc:61:17:1e:4b:1c:40:5e:54:fa:ec:bd:e5:13:27: 8d:2a:39:f6:eb:f3:77:36:33:5a:70:70:c6:fb:dd: 14:20:1a:89:0e:a3:16:92:3c:16:3b:6f:57:9d:41: f9:ab:46:a9:d2:5b:3a:85:67:0c:de:c5:ca:f4:9e: c4:1a:ed:ac:37:bb:5d:ff:a4:89:17:de:ae:b7:c0: 41:6c:d1:27:53:ad:e6:6d:2f:8c:64:e4:79:a6:bc: a1:8a:a5:f1:9e:9d:f4:9b:a4:53:f3:26:72:69:08: 20:f8:46:e8:b8:e0:21:39:b8:82:ab:7a:b8:a2:49: 83:c5:43:bf:02:c8:78:c4:a9:bb:6e:d7:6b:21:7c: 5e:23:cc:0c:13:c4:56:47:99:53:7d:60:b0:e4:92: 48:59:f4:e9:4e:af:ca:d3:bd:3e:7f:97:62:32:39: 85:4f:79:ae:b9:d6:3a:f9:ea:0e:64:6e:55:c4:ab: a9:fd:10:40:ad:c3:24:6d:a0:56:fa:70:b4:f2:f6: dd:23:7c:02:34:a9:bb:35:41:de:e1:d8:f6:d6:c9: bc:ab:86:bb:65:66:02:8a:57:ce:65:6b:67:71:ec: 11:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:5A:59:AC:35:77:31:FD:C1:21:70:8B:6E:DE:12:5D:4D:CA:77:51 X509v3 Authority Key Identifier: keyid:52:28:5B:87:54:F2:15:EB:EA:B6:14:DE:B8:6E:66:DA:3B:37:32:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/1/52285B8754F215EBEAB614DEB86E66DA3B37320C.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/52285B8754F215EBEAB614DEB86E66DA3B37320C.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/1/52285B8754F215EBEAB614DEB86E66DA3B37320C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 59:88:08:6b:be:86:61:88:83:ec:86:e9:1c:6b:03:a8:10:44: 1f:1f:1a:ba:6d:8b:e9:92:46:a3:15:35:30:de:2c:cb:eb:40: 1a:bd:c9:85:40:ae:ec:0c:aa:8f:a5:d0:34:f5:b7:8a:9d:25: 19:09:fb:5c:fa:01:26:75:c0:16:2b:06:69:63:25:30:a2:e6: b3:1f:87:93:2d:92:d7:15:59:aa:bd:4a:dc:5e:3e:94:21:a2: 36:02:54:23:db:ce:b7:6d:d4:5b:f4:7a:e1:43:d2:1b:05:3e: a6:a4:8a:d6:17:0b:2b:9c:33:b2:d4:f8:1f:3d:e6:75:34:d4: b9:3c:55:6a:b7:5b:36:6a:c2:fc:62:d5:52:a5:5e:78:51:30: 1d:24:a7:ad:17:77:08:a4:2a:bb:2e:4a:83:f5:42:7b:2b:29: f6:44:7a:10:e8:1b:92:e3:66:7e:4a:87:aa:fd:9c:40:57:08: 40:1e:01:cd:95:e6:89:90:9b:0f:20:22:09:7a:7b:05:af:5d: bc:80:a0:32:95:51:7d:bb:53:5e:2f:8b:74:aa:2f:40:cb:dc: 82:2a:66:44:88:49:be:c8:f5:c1:1f:c2:cf:73:4e:98:b2:b0: 08:9a:88:8e:68:84:c1:16:51:c7:45:89:ff:e3:5b:55:02:e1: 62:9b:df:23 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUHGdAy0hd424Rhep2P4Kw7pBDzUAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTIyODVCODc1NEYyMTVFQkVBQjYxNERFQjg2RTY2REEz QjM3MzIwQzAeFw0yNjA3MjMxNTQ4MTJaFw0yNjA3MjQxNzA4MTJaMDMxMTAvBgNV BAMTKEU0NUE1OUFDMzU3NzMxRkRDMTIxNzA4QjZFREUxMjVENERDQTc3NTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCSGV2fG8VLX00cJdWbRk0xKNDj dfI8Rp46prgz1dxhFx5LHEBeVPrsveUTJ40qOfbr83c2M1pwcMb73RQgGokOoxaS PBY7b1edQfmrRqnSWzqFZwzexcr0nsQa7aw3u13/pIkX3q63wEFs0SdTreZtL4xk 5HmmvKGKpfGenfSbpFPzJnJpCCD4Rui44CE5uIKreriiSYPFQ78CyHjEqbtu12sh fF4jzAwTxFZHmVN9YLDkkkhZ9OlOr8rTvT5/l2IyOYVPea651jr56g5kblXEq6n9 EECtwyRtoFb6cLTy9t0jfAI0qbs1Qd7h2PbWybyrhrtlZgKKV85la2dx7BHHAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQU5FpZrDV3Mf3BIXCLbt4SXU3Kd1EwHwYDVR0j BBgwFoAUUihbh1TyFevqthTeuG5m2js3MgwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOGQ1Y2QxNGUtNWY2My00ZjFjLTk0ZTMtMjcwNTBjMjY2 NDgwLzEvNTIyODVCODc1NEYyMTVFQkVBQjYxNERFQjg2RTY2REEzQjM3MzIwQy5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC81MjI4NUI4NzU0RjIxNUVCRUFCNjE0REVC ODZFNjZEQTNCMzczMjBDLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzhkNWNkMTRlLTVmNjMtNGYxYy05NGUzLTI3MDUwYzI2NjQ4MC8xLzUyMjg1Qjg3 NTRGMjE1RUJFQUI2MTRERUI4NkU2NkRBM0IzNzMyMEMubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBZiAhr voZhiIPshukcawOoEEQfHxq6bYvpkkajFTUw3izL60AavcmFQK7sDKqPpdA09beK nSUZCftc+gEmdcAWKwZpYyUwouazH4eTLZLXFVmqvUrcXj6UIaI2AlQj2863bdRb 9HrhQ9IbBT6mpIrWFwsrnDOy1PgfPeZ1NNS5PFVqt1s2asL8YtVSpV54UTAdJKet F3cIpCq7LkqD9UJ7Kyn2RHoQ6BuS42Z+Soeq/ZxAVwhAHgHNleaJkJsPICIJensF r128gKAylVF9u1NeL4t0qi9Ay9yCKmZEiEm+yPXBH8LPc06YsrAImoiOaITBFlHH RYn/41tVAuFim98j -----END CERTIFICATE-----Generated at Thu Jul 23 20:26:44 2026 by rpki-client