$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/1/52285B8754F215EBEAB614DEB86E66DA3B37320C.mft File: 52285B8754F215EBEAB614DEB86E66DA3B37320C.mft (raw, json) Hash identifier: uYn/o2dxgRUsDFAt14wYb/Dowz4TJS8QVnpCOymrZoc= Subject key identifier: D7:57:9C:A6:35:20:E8:13:36:8D:F4:27:70:F2:19:22:F3:F0:12:7A Authority key identifier: 52:28:5B:87:54:F2:15:EB:EA:B6:14:DE:B8:6E:66:DA:3B:37:32:0C Certificate issuer: /CN=52285B8754F215EBEAB614DEB86E66DA3B37320C Certificate serial: 1EAEE631E7B51D0946619FE18A814A843DEF9F85 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/52285B8754F215EBEAB614DEB86E66DA3B37320C.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/1/52285B8754F215EBEAB614DEB86E66DA3B37320C.mft Manifest number: 01D0 Signing time: Wed 23 Jul 2025 08:03:23 +0000 Manifest this update: Wed 23 Jul 2025 07:58:23 +0000 Manifest next update: Thu 24 Jul 2025 08:03:23 +0000 Files and hashes: 1: 52285B8754F215EBEAB614DEB86E66DA3B37320C.crl (hash: ipUn0kj7aIQrWr4W/faan7r6MKmvl4dmHUyMrANwMUc=) 2: 326131343a373538313a623030303a3a2f33362d3336203d3e20323135303834.roa (hash: 8Iv1HdyRUhjcvQFIVfomOSyv77EzHn71qEiaLSvjvAE=) 3: 326131343a373538313a6632303a3a2f34382d3438203d3e20313533313736.roa (hash: Q+SHdUagvI6KZ73P7qEzwFM/MmpC3zK1RzbKHzMJDSM=) 4: 326131343a373538313a6632303a3a2f34342d3434203d3e20323135303834.roa (hash: ikRuOA2n8u4zq4qR5S8PkgRSZxYIGPGee0tyFklQIEM=) 5: 326131343a373538313a6130303a3a2f34302d3430203d3e20323135303834.roa (hash: 6SMGzy0qxU/C5+Cz9d8WI56z67FiL2uOHLuZUmmEFig=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/1/52285B8754F215EBEAB614DEB86E66DA3B37320C.crl rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/1/52285B8754F215EBEAB614DEB86E66DA3B37320C.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/52285B8754F215EBEAB614DEB86E66DA3B37320C.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 23 Jul 2025 22:27:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:ae:e6:31:e7:b5:1d:09:46:61:9f:e1:8a:81:4a:84:3d:ef:9f:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=52285B8754F215EBEAB614DEB86E66DA3B37320C Validity Not Before: Jul 23 07:58:23 2025 GMT Not After : Jul 24 08:03:23 2025 GMT Subject: CN=D7579CA63520E813368DF42770F21922F3F0127A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:e0:f3:91:05:43:74:ee:2f:95:5a:ee:f9:74: 6b:49:05:f9:75:7a:2f:0f:a7:ef:5e:1b:19:b0:b5: 20:ae:c8:f6:b2:c5:1f:f5:a6:9f:75:22:9b:0d:99: 57:3e:e4:40:bd:1f:98:39:cb:30:cd:c8:c4:ae:e3: 5d:99:f3:45:42:a7:d0:77:7f:be:fd:a5:d5:b4:8a: 8a:79:98:37:b1:df:32:11:a5:b9:26:02:a4:e7:52: d2:6b:57:36:7d:4c:2f:e6:8e:c5:d2:0a:f7:e9:ef: 67:c9:e1:3c:33:23:03:9e:71:e1:81:72:25:b8:da: 85:1a:f3:19:e2:10:2d:af:12:97:d7:d1:96:73:51: ef:d0:a6:cf:4a:40:25:09:88:a6:67:33:46:96:f4: 18:50:9d:d7:68:1d:93:35:87:2b:87:ed:bf:a0:64: 32:21:e7:60:df:13:d1:81:15:a2:fb:ad:0d:6a:d0: b5:a4:4f:4b:97:7d:71:e1:58:2c:76:e0:7b:ed:26: b8:9a:f5:fc:e7:c9:cd:5f:ee:a0:26:36:1d:cc:a0: 82:64:8d:32:39:e8:40:2d:84:f8:a2:3e:e3:68:0b: 1e:c3:a3:3e:a3:76:1a:44:a2:29:3c:84:96:e1:62: 66:02:9b:74:18:a1:69:67:9d:da:5b:61:a3:de:49: 18:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:57:9C:A6:35:20:E8:13:36:8D:F4:27:70:F2:19:22:F3:F0:12:7A X509v3 Authority Key Identifier: keyid:52:28:5B:87:54:F2:15:EB:EA:B6:14:DE:B8:6E:66:DA:3B:37:32:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/1/52285B8754F215EBEAB614DEB86E66DA3B37320C.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/52285B8754F215EBEAB614DEB86E66DA3B37320C.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/1/52285B8754F215EBEAB614DEB86E66DA3B37320C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:ba:cb:b0:a5:ca:e0:28:70:06:63:4d:a3:5e:29:1a:f1:68: 6f:fd:40:62:c3:8b:c5:80:75:44:a9:04:99:d9:e8:95:c6:1a: 50:5a:73:f5:af:3d:d0:e4:0f:50:eb:be:52:e5:11:86:16:89: e5:de:7c:07:c1:f7:5d:87:76:da:73:eb:0c:97:af:0f:1b:07: 2d:2a:a8:22:89:4f:43:f2:be:19:80:fe:f5:4f:8f:58:68:39: a6:5b:a1:96:3b:83:aa:d5:07:2b:00:ba:e3:62:e7:26:12:0c: b1:d9:5f:fb:52:37:d5:ac:56:db:16:68:96:2b:1d:f4:53:fc: 72:4f:e0:b8:38:ea:13:1f:64:e9:26:bb:9b:c1:62:1f:5b:d5: f5:f1:57:e6:3c:0d:f7:2c:50:7c:4d:ec:28:57:ea:0b:ba:b1: 6b:be:6d:77:85:29:bd:d2:d0:c3:ca:b5:ba:68:9e:65:a2:67: 91:40:27:8a:ab:a3:c3:f0:6c:37:6e:df:12:4d:90:59:12:ef: 60:ad:5f:40:e8:5a:d1:16:3b:b7:75:19:e6:25:2d:be:f7:5f: 4e:75:a7:81:b1:06:ba:5c:3e:dd:fb:bd:ce:4a:69:1d:d5:31: 23:aa:28:e3:33:70:8d:31:60:e7:21:2c:1e:25:b3:c4:e7:8a: dc:a1:ad:8b -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUHq7mMee1HQlGYZ/hioFKhD3vn4UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTIyODVCODc1NEYyMTVFQkVBQjYxNERFQjg2RTY2REEz QjM3MzIwQzAeFw0yNTA3MjMwNzU4MjNaFw0yNTA3MjQwODAzMjNaMDMxMTAvBgNV BAMTKEQ3NTc5Q0E2MzUyMEU4MTMzNjhERjQyNzcwRjIxOTIyRjNGMDEyN0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCy4PORBUN07i+VWu75dGtJBfl1 ei8Pp+9eGxmwtSCuyPayxR/1pp91IpsNmVc+5EC9H5g5yzDNyMSu412Z80VCp9B3 f779pdW0iop5mDex3zIRpbkmAqTnUtJrVzZ9TC/mjsXSCvfp72fJ4TwzIwOeceGB ciW42oUa8xniEC2vEpfX0ZZzUe/Qps9KQCUJiKZnM0aW9BhQnddoHZM1hyuH7b+g ZDIh52DfE9GBFaL7rQ1q0LWkT0uXfXHhWCx24HvtJria9fznyc1f7qAmNh3MoIJk jTI56EAthPiiPuNoCx7Doz6jdhpEoik8hJbhYmYCm3QYoWlnndpbYaPeSRiXAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQU11ecpjUg6BM2jfQncPIZIvPwEnowHwYDVR0j BBgwFoAUUihbh1TyFevqthTeuG5m2js3MgwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOGQ1Y2QxNGUtNWY2My00ZjFjLTk0ZTMtMjcwNTBjMjY2 NDgwLzEvNTIyODVCODc1NEYyMTVFQkVBQjYxNERFQjg2RTY2REEzQjM3MzIwQy5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC81MjI4NUI4NzU0RjIxNUVCRUFCNjE0REVC ODZFNjZEQTNCMzczMjBDLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzhkNWNkMTRlLTVmNjMtNGYxYy05NGUzLTI3MDUwYzI2NjQ4MC8xLzUyMjg1Qjg3 NTRGMjE1RUJFQUI2MTRERUI4NkU2NkRBM0IzNzMyMEMubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCHusuw pcrgKHAGY02jXika8Whv/UBiw4vFgHVEqQSZ2eiVxhpQWnP1rz3Q5A9Q675S5RGG Fonl3nwHwfddh3bac+sMl68PGwctKqgiiU9D8r4ZgP71T49YaDmmW6GWO4Oq1Qcr ALrjYucmEgyx2V/7UjfVrFbbFmiWKx30U/xyT+C4OOoTH2TpJrubwWIfW9X18Vfm PA33LFB8TewoV+oLurFrvm13hSm90tDDyrW6aJ5lomeRQCeKq6PD8Gw3bt8STZBZ Eu9grV9A6FrRFju3dRnmJS2+919OdaeBsQa6XD7d+73OSmkd1TEjqijjM3CNMWDn ISweJbPE54rcoa2L -----END CERTIFICATE-----Generated at Wed Jul 23 11:15:03 2025 by rpki-client