$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/4/521525856CBBA6D9D2254221C280DC930734AAB8.mft File: 521525856CBBA6D9D2254221C280DC930734AAB8.mft (raw, json) Hash identifier: hoM3Pu4IXJiYo4hwjekLBCD4b9QaqK/OHuFHmJMGCZU= Subject key identifier: D8:88:FC:98:48:BE:69:17:B8:1F:D0:96:E1:D8:C5:12:48:B6:CB:BB Authority key identifier: 52:15:25:85:6C:BB:A6:D9:D2:25:42:21:C2:80:DC:93:07:34:AA:B8 Certificate issuer: /CN=521525856CBBA6D9D2254221C280DC930734AAB8 Certificate serial: 7464DDDE23B6E5C8C8F6DFE90E1D7FE3B4F37A12 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/521525856CBBA6D9D2254221C280DC930734AAB8.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/4/521525856CBBA6D9D2254221C280DC930734AAB8.mft Manifest number: 40 Signing time: Tue 19 Aug 2025 22:27:44 +0000 Manifest this update: Tue 19 Aug 2025 22:22:44 +0000 Manifest next update: Thu 21 Aug 2025 02:07:44 +0000 Files and hashes: 1: 326130363a613030333a3a2f34382d3438203d3e20323030363736.roa (hash: PNV+6g1yuxZfiOErO1rlD/OjvHSDnl045B3ycAeUEw8=) 2: 521525856CBBA6D9D2254221C280DC930734AAB8.crl (hash: U4z/W8MVAf2R5IEgABdW0PWfv7lUOpTxclYOjveCl/8=) 3: 39342e32342e3130382e302f32342d3234203d3e20323030363736.roa (hash: hbkkIcLL2dVYKU+9BKXYxvOgTE4cVlfb37zj8sIKpS0=) 4: 326130363a613030333a313333373a3a2f34382d3438203d3e20323030363736.roa (hash: qr/bfrnor+1gB61vuOA1czljaK/VRJBauBs1U2EbENw=) 5: 326130363a613030333a623030623a3a2f34382d3438203d3e20323030363736.roa (hash: kunZD4UEEwcG2nc99Wb+xz1yK+IdIm7SjegbAra8chc=) 6: 326130363a613030333a666666663a3a2f34382d3438203d3e203530373535.roa (hash: HVzJ9R68GMwZO9EL/DI2ZLp1a+F6uNrFmfl8+YGeZKc=) 7: 326130363a613030333a313131313a3a2f34382d3438203d3e20323030363736.roa (hash: rOXq6KopS7nNrxLenr0thMMbHkGjihkrbeGzvVQ4fNc=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/4/521525856CBBA6D9D2254221C280DC930734AAB8.crl rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/4/521525856CBBA6D9D2254221C280DC930734AAB8.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/521525856CBBA6D9D2254221C280DC930734AAB8.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 21 Aug 2025 02:07:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:64:dd:de:23:b6:e5:c8:c8:f6:df:e9:0e:1d:7f:e3:b4:f3:7a:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=521525856CBBA6D9D2254221C280DC930734AAB8 Validity Not Before: Aug 19 22:22:44 2025 GMT Not After : Aug 21 02:07:44 2025 GMT Subject: CN=D888FC9848BE6917B81FD096E1D8C51248B6CBBB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:ed:24:8c:a6:cd:cd:30:f0:f6:b8:11:7c:b7: a7:f8:bb:67:ca:78:2b:8e:16:4a:91:b4:2f:14:39: bd:03:1f:e4:b9:20:e8:96:66:7e:78:95:c8:56:c5: 59:ec:bb:97:5a:00:15:ae:52:13:c0:32:a1:3e:71: 25:5f:46:66:c5:32:5c:70:46:ad:4a:53:bd:f2:1f: e8:d3:d3:cc:e7:f4:b5:fa:a2:5d:f9:fe:38:0c:c0: ea:f6:69:55:17:77:f4:35:20:60:f5:27:cc:55:3c: cb:6f:be:3f:30:1a:34:df:77:80:22:f2:d2:ee:5b: 3e:84:df:23:57:b6:68:a9:9a:10:81:9d:38:6e:85: c7:c6:f3:90:53:9d:68:e7:aa:53:da:63:70:02:9a: 11:8a:2f:2e:e4:d8:b9:32:29:c9:e2:c7:51:60:a8: 61:5d:70:fe:0d:99:20:ef:88:d1:20:a4:df:48:dd: e1:11:68:d4:b1:58:2a:16:c7:85:d9:50:b6:47:2c: 50:92:94:24:9c:07:98:ad:ed:87:fe:33:97:b0:90: cc:24:b5:a0:17:47:fe:d1:ba:ed:32:ea:90:4b:d8: 64:46:ec:ba:c8:d4:e9:d1:49:c4:7b:c9:b1:61:57: ed:f2:3c:c6:4a:1e:c3:58:99:12:a6:47:bc:6c:62: 69:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:88:FC:98:48:BE:69:17:B8:1F:D0:96:E1:D8:C5:12:48:B6:CB:BB X509v3 Authority Key Identifier: keyid:52:15:25:85:6C:BB:A6:D9:D2:25:42:21:C2:80:DC:93:07:34:AA:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/4/521525856CBBA6D9D2254221C280DC930734AAB8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/521525856CBBA6D9D2254221C280DC930734AAB8.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/4/521525856CBBA6D9D2254221C280DC930734AAB8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:63:77:54:65:06:1c:eb:f4:e2:37:b1:4d:40:46:98:3c:cc: 83:c7:16:13:0f:18:a7:c9:96:1f:38:da:48:40:49:ae:89:11: ed:9d:2b:9a:2b:4a:1e:8f:a5:f2:22:18:65:b9:5a:17:19:e9: 6a:0d:7e:f9:c4:4a:84:94:8d:64:7d:b3:65:37:fe:cb:fc:86: f7:ca:0f:9a:ed:d2:a9:50:4d:48:02:24:e5:79:15:84:f1:21: 02:71:88:0d:af:39:ae:45:26:25:b9:e8:40:da:d8:2c:68:c7: 8f:25:93:9f:56:87:82:5d:02:95:d8:6f:11:5d:e0:10:57:cb: 2b:20:e0:00:df:55:7d:22:70:2c:3a:e5:68:9e:97:ed:eb:68: 51:91:49:56:b3:71:40:d0:c4:0f:b9:04:68:f7:7d:43:d2:59: f3:85:a8:fd:12:65:a0:e3:d5:c0:54:c6:aa:39:63:a4:27:5b: 23:5e:ea:af:dc:dd:8c:22:78:1b:20:e9:48:43:3b:e5:6b:59: 50:a4:81:32:85:ee:9b:14:bb:29:05:c8:ea:f8:17:7f:ec:59: c5:e1:2e:0d:41:f8:53:14:12:48:37:72:ee:55:a6:03:5d:ac: 0f:4b:30:62:96:3a:b1:92:13:08:36:36:8b:c7:ce:45:81:45: 6a:d6:f7:80 -----BEGIN CERTIFICATE----- MIIFbTCCBFWgAwIBAgIUdGTd3iO25cjI9t/pDh1/47TzehIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTIxNTI1ODU2Q0JCQTZEOUQyMjU0MjIxQzI4MERDOTMw NzM0QUFCODAeFw0yNTA4MTkyMjIyNDRaFw0yNTA4MjEwMjA3NDRaMDMxMTAvBgNV BAMTKEQ4ODhGQzk4NDhCRTY5MTdCODFGRDA5NkUxRDhDNTEyNDhCNkNCQkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDI7SSMps3NMPD2uBF8t6f4u2fK eCuOFkqRtC8UOb0DH+S5IOiWZn54lchWxVnsu5daABWuUhPAMqE+cSVfRmbFMlxw Rq1KU73yH+jT08zn9LX6ol35/jgMwOr2aVUXd/Q1IGD1J8xVPMtvvj8wGjTfd4Ai 8tLuWz6E3yNXtmipmhCBnThuhcfG85BTnWjnqlPaY3ACmhGKLy7k2LkyKcnix1Fg qGFdcP4NmSDviNEgpN9I3eERaNSxWCoWx4XZULZHLFCSlCScB5it7Yf+M5ewkMwk taAXR/7Ruu0y6pBL2GRG7LrI1OnRScR7ybFhV+3yPMZKHsNYmRKmR7xsYmkVAgMB AAGjggJ3MIICczAdBgNVHQ4EFgQU2Ij8mEi+aRe4H9CW4djFEki2y7swHwYDVR0j BBgwFoAUUhUlhWy7ptnSJUIhwoDckwc0qrgwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMmFjYTNjYTYtMzRjYy00NzcyLWJhYzAtYTM1ZGQwMTk1 Y2U3LzQvNTIxNTI1ODU2Q0JCQTZEOUQyMjU0MjIxQzI4MERDOTMwNzM0QUFCOC5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1 YzkxYmUzZjlkLzcvNTIxNTI1ODU2Q0JCQTZEOUQyMjU0MjIxQzI4MERDOTMwNzM0 QUFCOC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8yYWNhM2NhNi0z NGNjLTQ3NzItYmFjMC1hMzVkZDAxOTVjZTcvNC81MjE1MjU4NTZDQkJBNkQ5RDIy NTQyMjFDMjgwREM5MzA3MzRBQUI4Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgmN3VGUGHOv04jexTUBG mDzMg8cWEw8Yp8mWHzjaSEBJrokR7Z0rmitKHo+l8iIYZblaFxnpag1++cRKhJSN ZH2zZTf+y/yG98oPmu3SqVBNSAIk5XkVhPEhAnGIDa85rkUmJbnoQNrYLGjHjyWT n1aHgl0CldhvEV3gEFfLKyDgAN9VfSJwLDrlaJ6X7etoUZFJVrNxQNDED7kEaPd9 Q9JZ84Wo/RJloOPVwFTGqjljpCdbI17qr9zdjCJ4GyDpSEM75WtZUKSBMoXumxS7 KQXI6vgXf+xZxeEuDUH4UxQSSDdy7lWmA12sD0swYpY6sZITCDY2i8fORYFFatb3 gA== -----END CERTIFICATE-----Generated at Wed Aug 20 18:44:54 2025 by rpki-client