$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09718f08-bb39-4a09-a4c0-1f40248a6d15/3/B52300C5AE6278B608E231E431C3DD0EAF6A6BC2.mft File: B52300C5AE6278B608E231E431C3DD0EAF6A6BC2.mft (raw, json) Hash identifier: 5wMul8B7nqm7GXWGSTOXYIaFLEcYgUUQ+f9HuePY864= Subject key identifier: 98:2C:80:0A:6A:CE:10:B3:63:DE:D9:76:C4:23:63:FB:B4:54:02:FE Authority key identifier: B5:23:00:C5:AE:62:78:B6:08:E2:31:E4:31:C3:DD:0E:AF:6A:6B:C2 Certificate issuer: /CN=B52300C5AE6278B608E231E431C3DD0EAF6A6BC2 Certificate serial: 29A5024641E5210C6E54760D495F51981626FB3E Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/B52300C5AE6278B608E231E431C3DD0EAF6A6BC2.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09718f08-bb39-4a09-a4c0-1f40248a6d15/3/B52300C5AE6278B608E231E431C3DD0EAF6A6BC2.mft Manifest number: 82 Signing time: Fri 13 Mar 2026 20:27:47 +0000 Manifest this update: Fri 13 Mar 2026 20:22:47 +0000 Manifest next update: Sat 14 Mar 2026 23:15:47 +0000 Files and hashes: 1: 326131343a373538313a393930313a3a2f34382d3438203d3e20323134333434.roa (hash: a3vn+r3Xd1ZweP+VfXPkybQsxnlpFwKhPGkq1Aja1ws=) 2: 326131343a373538313a393966323a3a2f34382d3438203d3e20323134333434.roa (hash: Oe9b7D8DtLCyHfTEelgxQzMm3GoJ4G9/0gwwATaJfro=) 3: 326131343a373538313a393930333a3a2f34382d3438203d3e20323134333434.roa (hash: odpWIoGfrHyjA/EqLrY/tj6kKgasd1C7YcR9JizUkBA=) 4: 326131343a373538313a393966343a3a2f34382d3438203d3e20323134333434.roa (hash: spTh8DstCVqtG/UUp5lMqUt7m9/HXGTEzcFQEa7vRbE=) 5: 326131343a373538313a393930303a3a2f34382d3438203d3e20323134333434.roa (hash: kGAxqipewjTBEOV3BSA8JRTiGthe14AWzEgdY5VhMKs=) 6: 326131343a373538313a393966313a3a2f34382d3438203d3e20323134333434.roa (hash: uczfpozVS217kWRATgpEenuL/t1nbJiCmQMwvAEpV8o=) 7: 326131343a373538313a393930353a3a2f34382d3438203d3e20323134333434.roa (hash: WvJ+nlXPCuTRZnP7e6XF03QrjAocsMrvYbQ3ZQ/eNBY=) 8: 326131343a373538313a393930323a3a2f34382d3438203d3e20323134333434.roa (hash: TyFBqgR7vYeMd4/BuVueO5zwkcDAg7G5uk0/d+OPki0=) 9: 326131343a373538313a393966333a3a2f34382d3438203d3e20323134333434.roa (hash: J6emFQdlETu7H0STfMe+srRexcrGlCk0y+BgTI9eJls=) 10: B52300C5AE6278B608E231E431C3DD0EAF6A6BC2.crl (hash: 7qRC25JD2OQBlGQ/vkfAy9s8pchYawIbrRnV82Ora8c=) 11: 326131343a373538313a393966353a3a2f34382d3438203d3e20323134333434.roa (hash: HcA7KRdnBWzY7hEKVhGFuUdyfwcYU7b6FuC/duUcRFU=) 12: 326131343a373538313a393930343a3a2f34382d3438203d3e20323134333434.roa (hash: JSmiAu7ed33+J2eg2ZQ/ocsiovRypTOUdvXbpKPSbI8=) 13: 326131343a373538313a393938383a3a2f34382d3438203d3e20323134333434.roa (hash: dhPIT0Huo/8bMcCCD9CENzV8Oc7GRGv2lkOyyJSz4lY=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09718f08-bb39-4a09-a4c0-1f40248a6d15/3/B52300C5AE6278B608E231E431C3DD0EAF6A6BC2.crl rsync://rsync.paas.rpki.ripe.net/repository/09718f08-bb39-4a09-a4c0-1f40248a6d15/3/B52300C5AE6278B608E231E431C3DD0EAF6A6BC2.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/B52300C5AE6278B608E231E431C3DD0EAF6A6BC2.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 14 Mar 2026 23:15:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:a5:02:46:41:e5:21:0c:6e:54:76:0d:49:5f:51:98:16:26:fb:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B52300C5AE6278B608E231E431C3DD0EAF6A6BC2 Validity Not Before: Mar 13 20:22:47 2026 GMT Not After : Mar 14 23:15:47 2026 GMT Subject: CN=982C800A6ACE10B363DED976C42363FBB45402FE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:3a:4a:c8:a9:e4:41:80:8d:ea:17:00:d7:1e: c1:e8:0e:aa:e7:0d:f3:a8:e9:e1:42:5a:54:1c:55: 8a:e2:b4:51:f0:a5:0e:99:4d:f6:f2:6d:cc:d1:89: fb:e3:5f:60:05:53:5c:2b:f2:e5:f2:30:79:14:65: fa:d2:1f:9a:e9:01:51:02:cc:96:bf:ca:6c:08:82: c6:30:8f:10:34:b4:27:52:7a:ba:c5:17:f4:b0:a3: c5:84:94:de:70:1f:8b:59:96:a5:e0:a9:39:7b:dc: 99:fa:37:27:72:9e:7b:a8:c7:8a:e1:a4:93:d4:6e: 58:2c:ea:60:13:3b:ac:c8:f1:a3:ab:d9:77:f3:1b: 26:74:bf:e0:be:ca:7c:34:d5:78:c4:53:6d:8d:bc: 00:ba:75:bc:e6:d2:50:c6:67:d5:6e:f9:e0:b0:e5: 6f:fd:0e:6d:08:34:bf:73:e3:76:21:d0:c3:bc:82: 0f:8b:b0:a5:74:c7:f0:7f:f6:cd:df:cc:1e:e8:00: e8:84:0f:70:bc:12:9d:05:7a:4e:eb:ec:ac:3a:80: e0:44:8d:93:fd:5c:04:13:3e:bc:cd:0d:c3:16:a6: 9d:27:fe:53:21:0f:cb:1c:cf:a5:64:c3:01:d3:87: 67:e1:9f:f8:2d:5c:bf:f6:81:11:01:af:59:cb:82: d9:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:2C:80:0A:6A:CE:10:B3:63:DE:D9:76:C4:23:63:FB:B4:54:02:FE X509v3 Authority Key Identifier: keyid:B5:23:00:C5:AE:62:78:B6:08:E2:31:E4:31:C3:DD:0E:AF:6A:6B:C2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/09718f08-bb39-4a09-a4c0-1f40248a6d15/3/B52300C5AE6278B608E231E431C3DD0EAF6A6BC2.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/B52300C5AE6278B608E231E431C3DD0EAF6A6BC2.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09718f08-bb39-4a09-a4c0-1f40248a6d15/3/B52300C5AE6278B608E231E431C3DD0EAF6A6BC2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:31:4d:07:3f:31:c9:cb:45:d0:b7:75:6c:31:40:74:cc:97: 24:eb:7a:c1:3b:bc:85:22:4e:ad:fc:ba:06:0b:52:86:71:d7: 13:9e:32:97:b9:21:e7:65:9c:3e:f3:fb:39:d9:fb:a2:c3:8b: 93:b1:25:8d:33:b7:18:db:6f:df:b2:df:c2:63:ce:ca:fa:06: 30:b6:55:29:55:c1:5c:40:99:ce:eb:23:1e:c3:24:cf:4b:c6: b6:dc:3a:97:67:21:d4:6e:a5:97:e2:a2:c0:ea:e6:c7:b5:75: 46:23:bb:3d:66:17:dc:26:8b:42:1b:dd:97:0d:af:32:5f:cd: 7e:09:34:8f:0c:1c:8d:58:cd:bf:3b:72:f3:c0:22:72:4f:cf: af:a9:5e:f3:bb:90:52:c1:5d:2b:59:8e:84:1f:a8:3e:3b:84: a7:38:14:cc:47:f1:38:a8:e7:d8:29:a7:6b:59:8f:b5:9a:84: 1d:51:cc:f2:ed:11:fc:16:5d:8e:a7:64:23:80:68:47:d9:c0: 9f:e6:9d:30:ed:1a:95:f5:96:10:6e:18:1e:80:e3:a3:d8:7a: 5e:4a:4f:c2:74:8b:81:1a:a4:01:f0:47:bc:8e:a5:52:4f:a6: ef:2b:e3:ec:c3:25:c7:00:c0:6d:7f:f8:4c:df:9d:b4:da:66: 48:d5:07:17 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUKaUCRkHlIQxuVHYNSV9RmBYm+z4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjUyMzAwQzVBRTYyNzhCNjA4RTIzMUU0MzFDM0REMEVB RjZBNkJDMjAeFw0yNjAzMTMyMDIyNDdaFw0yNjAzMTQyMzE1NDdaMDMxMTAvBgNV BAMTKDk4MkM4MDBBNkFDRTEwQjM2M0RFRDk3NkM0MjM2M0ZCQjQ1NDAyRkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAOkrIqeRBgI3qFwDXHsHoDqrn DfOo6eFCWlQcVYritFHwpQ6ZTfbybczRifvjX2AFU1wr8uXyMHkUZfrSH5rpAVEC zJa/ymwIgsYwjxA0tCdSerrFF/Swo8WElN5wH4tZlqXgqTl73Jn6Nydynnuox4rh pJPUblgs6mATO6zI8aOr2XfzGyZ0v+C+ynw01XjEU22NvAC6dbzm0lDGZ9Vu+eCw 5W/9Dm0INL9z43Yh0MO8gg+LsKV0x/B/9s3fzB7oAOiED3C8Ep0Fek7r7Kw6gOBE jZP9XAQTPrzNDcMWpp0n/lMhD8scz6VkwwHTh2fhn/gtXL/2gREBr1nLgtnvAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUmCyACmrOELNj3tl2xCNj+7RUAv4wHwYDVR0j BBgwFoAUtSMAxa5ieLYI4jHkMcPdDq9qa8IwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMDk3MThmMDgtYmIzOS00YTA5LWE0YzAtMWY0MDI0OGE2 ZDE1LzMvQjUyMzAwQzVBRTYyNzhCNjA4RTIzMUU0MzFDM0REMEVBRjZBNkJDMi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC9CNTIzMDBDNUFFNjI3OEI2MDhFMjMxRTQz MUMzREQwRUFGNkE2QkMyLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzA5NzE4ZjA4LWJiMzktNGEwOS1hNGMwLTFmNDAyNDhhNmQxNS8zL0I1MjMwMEM1 QUU2Mjc4QjYwOEUyMzFFNDMxQzNERDBFQUY2QTZCQzIubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAsMU0H PzHJy0XQt3VsMUB0zJck63rBO7yFIk6t/LoGC1KGcdcTnjKXuSHnZZw+8/s52fui w4uTsSWNM7cY22/fst/CY87K+gYwtlUpVcFcQJnO6yMewyTPS8a23DqXZyHUbqWX 4qLA6ubHtXVGI7s9ZhfcJotCG92XDa8yX81+CTSPDByNWM2/O3LzwCJyT8+vqV7z u5BSwV0rWY6EH6g+O4SnOBTMR/E4qOfYKadrWY+1moQdUczy7RH8Fl2Op2QjgGhH 2cCf5p0w7RqV9ZYQbhgegOOj2HpeSk/CdIuBGqQB8Ee8jqVST6bvK+PswyXHAMBt f/hM35202mZI1QcX -----END CERTIFICATE-----Generated at Sat Mar 14 14:29:29 2026 by rpki-client