$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/1/52285B8754F215EBEAB614DEB86E66DA3B37320C.mft File: 52285B8754F215EBEAB614DEB86E66DA3B37320C.mft (raw, json) Hash identifier: x3TRSOKN46zb5JqIGO/Kvo5o7JU+gTm3GFwQwOgytAY= Subject key identifier: 6E:45:2A:95:C6:26:DE:25:2F:4C:1F:AE:88:9E:BD:8E:17:21:AB:99 Authority key identifier: 52:28:5B:87:54:F2:15:EB:EA:B6:14:DE:B8:6E:66:DA:3B:37:32:0C Certificate issuer: /CN=52285B8754F215EBEAB614DEB86E66DA3B37320C Certificate serial: 74656E0D36AE209CF2310CDE9ED1954EB478D9AA Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/52285B8754F215EBEAB614DEB86E66DA3B37320C.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/1/52285B8754F215EBEAB614DEB86E66DA3B37320C.mft Manifest number: 030E Signing time: Tue 12 May 2026 06:12:57 +0000 Manifest this update: Tue 12 May 2026 06:07:57 +0000 Manifest next update: Wed 13 May 2026 10:11:57 +0000 Files and hashes: 1: 326131343a373538313a6632303a3a2f34382d3438203d3e20313533313736.roa (hash: Q+SHdUagvI6KZ73P7qEzwFM/MmpC3zK1RzbKHzMJDSM=) 2: 326131343a373538313a6130303a3a2f34302d3430203d3e20323135303834.roa (hash: AMf8FFzkyNRTCLs/i7swnRAL3WtJKbW6+Q9+QH2tffk=) 3: 52285B8754F215EBEAB614DEB86E66DA3B37320C.crl (hash: lOZYb/DSJSgTN7Q3XpDqOVe1LAysVgOy6REyBF6mjxE=) 4: 326131343a373538313a6632303a3a2f34342d3434203d3e20323135303834.roa (hash: /AaiYsKWuqRgDvvUADUKcufSQBbG5oanOxBGHWa2vLA=) 5: 326131343a373538313a623030303a3a2f33362d3336203d3e20323135303834.roa (hash: N9L4nbL2Uo4P069vOshVKkJFc321LxJpH/q85ffpRGI=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/1/52285B8754F215EBEAB614DEB86E66DA3B37320C.crl rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/1/52285B8754F215EBEAB614DEB86E66DA3B37320C.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/52285B8754F215EBEAB614DEB86E66DA3B37320C.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 13 May 2026 10:11:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:65:6e:0d:36:ae:20:9c:f2:31:0c:de:9e:d1:95:4e:b4:78:d9:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=52285B8754F215EBEAB614DEB86E66DA3B37320C Validity Not Before: May 12 06:07:57 2026 GMT Not After : May 13 10:11:57 2026 GMT Subject: CN=6E452A95C626DE252F4C1FAE889EBD8E1721AB99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:4e:ed:4b:af:e1:da:93:61:d2:ae:42:d4:8d: 6e:2e:d4:60:7b:de:a8:47:39:91:60:71:b5:68:00: ea:da:94:9c:24:3e:be:7c:c2:c8:b3:b0:12:85:2d: eb:6b:58:1b:d9:0a:75:09:df:7a:b1:cc:96:c4:c6: 75:a0:ec:f8:7b:82:b4:8e:ec:c0:b9:7d:57:30:2e: 20:bd:7d:aa:1d:c8:af:15:f9:7e:8c:e5:35:0a:01: bc:38:be:2f:fb:fa:6b:c0:d2:d5:7b:28:a4:51:04: e9:33:24:29:7f:a2:df:72:c5:a6:de:20:da:33:57: e2:7e:7a:a1:27:9c:5f:61:73:16:03:e2:cd:28:e6: ca:af:6c:d4:73:98:be:9d:5f:8a:87:69:0c:db:4f: 25:f5:8e:34:af:4c:aa:8d:6a:b6:d7:b2:64:0f:d7: 84:27:c2:2b:8e:78:4b:f9:09:09:d7:66:03:5b:e6: 5a:9f:24:54:05:8e:ec:bc:d9:99:da:f6:1b:16:d5: c7:c0:cc:23:a1:c1:1f:8a:ee:57:74:6e:6d:49:b5: 0b:dd:98:fc:96:77:ae:12:f4:09:4e:f3:e5:0e:d1: 7a:f3:8d:16:59:a0:17:e7:4e:69:f0:7e:15:19:f4: 2a:36:c2:af:77:9c:ce:84:8a:cf:ef:4c:68:7e:83: d2:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:45:2A:95:C6:26:DE:25:2F:4C:1F:AE:88:9E:BD:8E:17:21:AB:99 X509v3 Authority Key Identifier: keyid:52:28:5B:87:54:F2:15:EB:EA:B6:14:DE:B8:6E:66:DA:3B:37:32:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/1/52285B8754F215EBEAB614DEB86E66DA3B37320C.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/52285B8754F215EBEAB614DEB86E66DA3B37320C.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/1/52285B8754F215EBEAB614DEB86E66DA3B37320C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:e7:ad:71:00:ad:46:4f:bd:50:74:00:f1:e0:fc:00:78:f7: 40:69:28:f9:a6:a1:03:b2:a0:d7:f2:6e:d6:07:6b:69:02:13: 9c:fb:d5:d8:8d:dc:d9:3b:cd:a4:0e:05:a8:07:d4:dd:65:65: 82:73:b6:7c:3a:9e:1e:72:1d:28:53:c4:39:e6:84:4f:cb:29: d2:82:96:40:16:c6:87:f6:de:3e:a0:10:66:2a:da:cc:56:0a: e0:50:95:d1:4a:97:1f:cd:8a:1c:5f:7e:3b:e1:62:93:2b:88: 5b:35:cb:18:c7:da:1e:00:de:c6:a9:fd:9a:b2:6c:1d:d2:8b: cc:b0:49:03:57:01:3d:25:95:c5:ff:fe:63:e1:c0:2f:ea:0e: 06:dd:75:d2:6c:c4:51:c3:d0:ab:74:66:b4:db:90:96:00:a5: 16:5b:4e:33:62:08:02:8a:be:be:ac:34:da:5e:ab:72:01:cd: 65:48:f3:6d:28:35:05:d2:5d:8b:c1:20:ab:05:cf:3c:1a:ce: f6:da:44:e8:6c:ac:ac:9d:91:06:2f:f7:29:d2:d4:39:07:c8: 57:17:88:ad:c4:50:69:6f:23:24:4f:1b:98:ca:77:82:c9:60: cb:ce:84:1b:d2:09:dd:21:90:d8:ea:1d:73:60:3d:10:20:f3: 07:65:78:46 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUdGVuDTauIJzyMQzentGVTrR42aowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTIyODVCODc1NEYyMTVFQkVBQjYxNERFQjg2RTY2REEz QjM3MzIwQzAeFw0yNjA1MTIwNjA3NTdaFw0yNjA1MTMxMDExNTdaMDMxMTAvBgNV BAMTKDZFNDUyQTk1QzYyNkRFMjUyRjRDMUZBRTg4OUVCRDhFMTcyMUFCOTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1Tu1Lr+Hak2HSrkLUjW4u1GB7 3qhHOZFgcbVoAOralJwkPr58wsizsBKFLetrWBvZCnUJ33qxzJbExnWg7Ph7grSO 7MC5fVcwLiC9faodyK8V+X6M5TUKAbw4vi/7+mvA0tV7KKRRBOkzJCl/ot9yxabe INozV+J+eqEnnF9hcxYD4s0o5sqvbNRzmL6dX4qHaQzbTyX1jjSvTKqNarbXsmQP 14QnwiuOeEv5CQnXZgNb5lqfJFQFjuy82Zna9hsW1cfAzCOhwR+K7ld0bm1JtQvd mPyWd64S9AlO8+UO0XrzjRZZoBfnTmnwfhUZ9Co2wq93nM6Eis/vTGh+g9LZAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUbkUqlcYm3iUvTB+uiJ69jhchq5kwHwYDVR0j BBgwFoAUUihbh1TyFevqthTeuG5m2js3MgwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOGQ1Y2QxNGUtNWY2My00ZjFjLTk0ZTMtMjcwNTBjMjY2 NDgwLzEvNTIyODVCODc1NEYyMTVFQkVBQjYxNERFQjg2RTY2REEzQjM3MzIwQy5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC81MjI4NUI4NzU0RjIxNUVCRUFCNjE0REVC ODZFNjZEQTNCMzczMjBDLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzhkNWNkMTRlLTVmNjMtNGYxYy05NGUzLTI3MDUwYzI2NjQ4MC8xLzUyMjg1Qjg3 NTRGMjE1RUJFQUI2MTRERUI4NkU2NkRBM0IzNzMyMEMubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBO561x AK1GT71QdADx4PwAePdAaSj5pqEDsqDX8m7WB2tpAhOc+9XYjdzZO82kDgWoB9Td ZWWCc7Z8Op4ech0oU8Q55oRPyynSgpZAFsaH9t4+oBBmKtrMVgrgUJXRSpcfzYoc X3474WKTK4hbNcsYx9oeAN7Gqf2asmwd0ovMsEkDVwE9JZXF//5j4cAv6g4G3XXS bMRRw9CrdGa025CWAKUWW04zYggCir6+rDTaXqtyAc1lSPNtKDUF0l2LwSCrBc88 Gs722kTobKysnZEGL/cp0tQ5B8hXF4itxFBpbyMkTxuYyneCyWDLzoQb0gndIZDY 6h1zYD0QIPMHZXhG -----END CERTIFICATE-----Generated at Wed May 13 04:15:25 2026 by rpki-client