$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/4/521525856CBBA6D9D2254221C280DC930734AAB8.mft File: 521525856CBBA6D9D2254221C280DC930734AAB8.mft (raw, json) Hash identifier: c++sCAdlD/LrhRuEBFHuxe5fMYHV9MLu+bzhFdLXkqE= Subject key identifier: C5:08:00:DC:BC:53:21:89:0E:6B:65:A3:96:A8:11:B3:E7:71:61:90 Authority key identifier: 52:15:25:85:6C:BB:A6:D9:D2:25:42:21:C2:80:DC:93:07:34:AA:B8 Certificate issuer: /CN=521525856CBBA6D9D2254221C280DC930734AAB8 Certificate serial: 359C7608F4C74E405A07B1C17D9009E75F1FA5C9 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/521525856CBBA6D9D2254221C280DC930734AAB8.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/4/521525856CBBA6D9D2254221C280DC930734AAB8.mft Manifest number: 82 Signing time: Wed 08 Oct 2025 04:50:06 +0000 Manifest this update: Wed 08 Oct 2025 04:45:06 +0000 Manifest next update: Thu 09 Oct 2025 06:17:06 +0000 Files and hashes: 1: 326130363a613030333a313333373a3a2f34382d3438203d3e20323030363736.roa (hash: qr/bfrnor+1gB61vuOA1czljaK/VRJBauBs1U2EbENw=) 2: 326130363a613030333a623030623a3a2f34382d3438203d3e20323030363736.roa (hash: kunZD4UEEwcG2nc99Wb+xz1yK+IdIm7SjegbAra8chc=) 3: 521525856CBBA6D9D2254221C280DC930734AAB8.crl (hash: 3W24e+fL28+brW0ISRELoZoyj6c6E5ccNq7ooagNPCs=) 4: 326130363a613030333a3a2f34382d3438203d3e20323030363736.roa (hash: PNV+6g1yuxZfiOErO1rlD/OjvHSDnl045B3ycAeUEw8=) 5: 39342e32342e3130382e302f32342d3234203d3e20323030363736.roa (hash: hbkkIcLL2dVYKU+9BKXYxvOgTE4cVlfb37zj8sIKpS0=) 6: 326130363a613030333a313131313a3a2f34382d3438203d3e20323030363736.roa (hash: rOXq6KopS7nNrxLenr0thMMbHkGjihkrbeGzvVQ4fNc=) 7: 326130363a613030333a666666663a3a2f34382d3438203d3e203530373535.roa (hash: HVzJ9R68GMwZO9EL/DI2ZLp1a+F6uNrFmfl8+YGeZKc=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/4/521525856CBBA6D9D2254221C280DC930734AAB8.crl rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/4/521525856CBBA6D9D2254221C280DC930734AAB8.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/521525856CBBA6D9D2254221C280DC930734AAB8.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 09 Oct 2025 06:17:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:9c:76:08:f4:c7:4e:40:5a:07:b1:c1:7d:90:09:e7:5f:1f:a5:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=521525856CBBA6D9D2254221C280DC930734AAB8 Validity Not Before: Oct 8 04:45:06 2025 GMT Not After : Oct 9 06:17:06 2025 GMT Subject: CN=C50800DCBC5321890E6B65A396A811B3E7716190 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:36:e3:43:24:dd:bb:3e:ec:10:8e:27:1a:13: a2:6c:b9:a7:c6:70:e6:dc:84:29:e3:b3:cb:89:0e: 25:25:85:cd:54:60:0b:0e:8c:5d:9b:70:2b:00:b3: 77:49:1f:3b:19:fb:c2:67:3e:fe:8c:ab:e3:84:4f: 4e:95:94:15:11:2d:e9:8c:72:8d:01:a5:ef:3c:94: 75:1b:14:de:a1:9d:1b:da:7a:b2:5c:e1:f2:8f:52: 0a:9c:3e:17:bc:08:37:5c:b2:66:a3:ee:72:cb:d7: 93:4e:12:83:52:e3:35:df:72:bc:18:12:47:d3:d9: eb:f6:1a:55:07:ba:b7:26:63:00:fa:b0:42:7d:2b: d4:5e:1d:bb:c0:9d:cd:c0:38:a0:8e:2a:6b:f9:17: a2:fc:41:fc:41:90:9c:de:5e:2a:a1:bf:11:f5:52: 51:a2:4c:ff:9d:ed:66:38:01:c8:48:87:7d:ce:f3: 12:15:be:e6:69:aa:02:f8:2f:8f:6e:1a:ef:42:c7: 48:0e:07:11:50:64:fb:66:72:c4:62:52:78:13:93: b6:56:62:92:52:19:52:c5:69:5d:23:f8:20:2d:38: de:ad:1c:cd:fb:4c:24:b3:ab:c0:d3:c7:e8:fc:a0: fa:81:c0:cc:33:cf:92:78:3d:8a:85:66:b1:f9:4c: 58:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:08:00:DC:BC:53:21:89:0E:6B:65:A3:96:A8:11:B3:E7:71:61:90 X509v3 Authority Key Identifier: keyid:52:15:25:85:6C:BB:A6:D9:D2:25:42:21:C2:80:DC:93:07:34:AA:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/4/521525856CBBA6D9D2254221C280DC930734AAB8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/521525856CBBA6D9D2254221C280DC930734AAB8.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/4/521525856CBBA6D9D2254221C280DC930734AAB8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:69:2e:59:0f:3d:e9:96:5d:a5:ee:ff:a3:1c:5d:4e:cc:a7: 7e:5e:25:7a:19:e5:4d:7a:b6:9f:0b:1f:be:da:33:0e:34:01: 7a:f3:a1:c7:0b:20:ad:4d:30:a5:33:dd:3d:30:f9:fd:4b:53: 49:53:8a:1d:08:b7:26:5c:80:33:cb:22:55:b9:1c:dc:20:ec: e8:db:80:78:d6:5c:be:b9:d0:e1:cc:0a:78:45:14:c5:73:6f: 80:cf:13:15:34:6c:2a:b4:3c:4b:4b:3c:04:16:2e:df:0f:a4: 68:0b:48:fe:c6:a3:3e:63:c8:f0:40:84:47:a6:98:90:de:04: be:74:1f:27:d3:52:0d:82:43:18:82:20:45:8d:dc:82:57:c6: cc:1f:fa:51:1e:79:50:cb:f5:c0:e5:17:6d:e9:a7:44:65:0c: 06:13:ae:19:6d:3b:61:56:66:19:ae:61:53:44:f0:9c:02:08: f9:fb:90:c1:01:84:7c:15:cc:ff:9b:a5:45:74:f8:d0:06:6a: c2:ca:a0:42:af:13:f1:b2:4f:31:84:f2:0e:dc:21:71:54:fd: cf:88:c0:a6:97:90:46:62:e0:65:a9:1b:61:11:09:76:3d:0d: 06:c9:fb:50:96:0c:be:98:1f:5e:af:16:fc:68:96:bc:cb:67: 7a:e4:b4:6b -----BEGIN CERTIFICATE----- MIIFbTCCBFWgAwIBAgIUNZx2CPTHTkBaB7HBfZAJ518fpckwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTIxNTI1ODU2Q0JCQTZEOUQyMjU0MjIxQzI4MERDOTMw NzM0QUFCODAeFw0yNTEwMDgwNDQ1MDZaFw0yNTEwMDkwNjE3MDZaMDMxMTAvBgNV BAMTKEM1MDgwMERDQkM1MzIxODkwRTZCNjVBMzk2QTgxMUIzRTc3MTYxOTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDONuNDJN27PuwQjicaE6JsuafG cObchCnjs8uJDiUlhc1UYAsOjF2bcCsAs3dJHzsZ+8JnPv6Mq+OET06VlBURLemM co0Bpe88lHUbFN6hnRvaerJc4fKPUgqcPhe8CDdcsmaj7nLL15NOEoNS4zXfcrwY EkfT2ev2GlUHurcmYwD6sEJ9K9ReHbvAnc3AOKCOKmv5F6L8QfxBkJzeXiqhvxH1 UlGiTP+d7WY4AchIh33O8xIVvuZpqgL4L49uGu9Cx0gOBxFQZPtmcsRiUngTk7ZW YpJSGVLFaV0j+CAtON6tHM37TCSzq8DTx+j8oPqBwMwzz5J4PYqFZrH5TFiXAgMB AAGjggJ3MIICczAdBgNVHQ4EFgQUxQgA3LxTIYkOa2WjlqgRs+dxYZAwHwYDVR0j BBgwFoAUUhUlhWy7ptnSJUIhwoDckwc0qrgwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMmFjYTNjYTYtMzRjYy00NzcyLWJhYzAtYTM1ZGQwMTk1 Y2U3LzQvNTIxNTI1ODU2Q0JCQTZEOUQyMjU0MjIxQzI4MERDOTMwNzM0QUFCOC5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1 YzkxYmUzZjlkLzcvNTIxNTI1ODU2Q0JCQTZEOUQyMjU0MjIxQzI4MERDOTMwNzM0 QUFCOC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8yYWNhM2NhNi0z NGNjLTQ3NzItYmFjMC1hMzVkZDAxOTVjZTcvNC81MjE1MjU4NTZDQkJBNkQ5RDIy NTQyMjFDMjgwREM5MzA3MzRBQUI4Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdGkuWQ896ZZdpe7/oxxd Tsynfl4lehnlTXq2nwsfvtozDjQBevOhxwsgrU0wpTPdPTD5/UtTSVOKHQi3JlyA M8siVbkc3CDs6NuAeNZcvrnQ4cwKeEUUxXNvgM8TFTRsKrQ8S0s8BBYu3w+kaAtI /sajPmPI8ECER6aYkN4EvnQfJ9NSDYJDGIIgRY3cglfGzB/6UR55UMv1wOUXbemn RGUMBhOuGW07YVZmGa5hU0TwnAII+fuQwQGEfBXM/5ulRXT40AZqwsqgQq8T8bJP MYTyDtwhcVT9z4jAppeQRmLgZakbYREJdj0NBsn7UJYMvpgfXq8W/GiWvMtneuS0 aw== -----END CERTIFICATE-----Generated at Wed Oct 8 21:22:23 2025 by rpki-client