$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/4/521525856CBBA6D9D2254221C280DC930734AAB8.mft File: 521525856CBBA6D9D2254221C280DC930734AAB8.mft (raw, json) Hash identifier: wOWx/Szh8Kud//nBRaYDY3uWAQWKpDyyT5K7NNamQ5k= Subject key identifier: 95:EC:5E:17:F8:5F:78:85:F9:4D:FD:70:42:DA:47:DF:03:21:6B:2F Authority key identifier: 52:15:25:85:6C:BB:A6:D9:D2:25:42:21:C2:80:DC:93:07:34:AA:B8 Certificate issuer: /CN=521525856CBBA6D9D2254221C280DC930734AAB8 Certificate serial: 42B037A8839A82A3861F623345D91BEA2D8B291C Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/521525856CBBA6D9D2254221C280DC930734AAB8.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/4/521525856CBBA6D9D2254221C280DC930734AAB8.mft Manifest number: 01F0 Signing time: Thu 09 Jul 2026 23:08:20 +0000 Manifest this update: Thu 09 Jul 2026 23:03:20 +0000 Manifest next update: Sat 11 Jul 2026 00:37:20 +0000 Files and hashes: 1: 326130363a613030333a313131313a3a2f34382d3438203d3e20323030363736.roa (hash: reSiEjWqNL5bMfSb8NDNP7L36wtpl2UMV26XqCjhnmE=) 2: 326130363a613030333a666666663a3a2f34382d3438203d3e203530373535.roa (hash: ZhHRzDFs7fBtUGvR8pxFCEtpL9Hraol9iZdGLjWUEvI=) 3: 521525856CBBA6D9D2254221C280DC930734AAB8.crl (hash: ZXhIrt9e5MzL1w9qmVpblTeNzqiZ6/AtvvVUPbS8seY=) 4: 39342e32342e3130382e302f32342d3234203d3e20323030363736.roa (hash: HSErQq3crkyzVJa6g9ayoDntWunwG4uTUMd6ifKsOLU=) 5: 326130363a613030333a3a2f34382d3438203d3e20323030363736.roa (hash: hctWuN+nHCxcPnxwlB0HaZTfqv5a4O8gc3WDRLEEUrc=) 6: 326130363a613030333a623030623a3a2f34382d3438203d3e20323030363736.roa (hash: Pecsaqccf5tHcdlTeF7bCwVmz7JER7H8qSHLGuqWRMI=) 7: 326130363a613030333a313333373a3a2f34382d3438203d3e20323030363736.roa (hash: y6dlRvQ6Ei4ylbtG2E1Fsbq6bkYPEiXc/hP5pnr/A5s=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/4/521525856CBBA6D9D2254221C280DC930734AAB8.crl rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/4/521525856CBBA6D9D2254221C280DC930734AAB8.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/521525856CBBA6D9D2254221C280DC930734AAB8.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 11 Jul 2026 00:37:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:b0:37:a8:83:9a:82:a3:86:1f:62:33:45:d9:1b:ea:2d:8b:29:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=521525856CBBA6D9D2254221C280DC930734AAB8 Validity Not Before: Jul 9 23:03:20 2026 GMT Not After : Jul 11 00:37:20 2026 GMT Subject: CN=95EC5E17F85F7885F94DFD7042DA47DF03216B2F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:d8:bc:de:07:6f:0d:cc:26:ab:b0:a5:be:28: 65:8f:4c:72:6e:69:42:a7:c3:f1:bf:9f:9c:19:8c: d3:f7:f4:70:c1:b6:06:64:24:59:01:f1:e3:a2:ce: b9:7c:c8:a0:14:c9:fe:86:0d:54:3b:e3:15:3d:37: a8:bd:95:fa:5b:f6:26:ae:fc:11:33:74:ed:01:60: 4f:8c:71:29:66:e4:87:ac:fc:4f:84:de:f8:95:e3: 4c:5b:11:f8:1c:fc:91:82:05:bd:31:21:fd:e2:79: 3a:a1:16:47:01:d7:84:8f:1f:8c:91:37:3b:ca:24: 33:90:4c:c4:aa:cd:05:f8:4f:80:f0:87:30:1d:0a: d7:e2:28:5f:89:fe:04:96:81:a4:2d:00:45:e1:df: 94:40:28:01:b4:f8:b3:aa:5c:c8:2a:d7:ac:93:af: 92:d1:0a:71:a0:2b:70:44:c8:c2:63:48:d7:7f:89: 50:6a:f7:69:82:79:93:48:dd:b3:f8:08:0a:66:11: ab:00:fd:60:15:2a:a1:ef:0c:08:d3:08:01:d8:7f: cb:13:ea:7f:4b:d5:ae:01:48:b3:ca:e1:4f:c6:c7: d0:5e:4a:c5:7b:bf:01:2a:26:aa:a9:a1:6a:eb:ef: 13:2a:24:86:37:4d:42:f3:99:31:cf:78:94:77:d8: fd:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:EC:5E:17:F8:5F:78:85:F9:4D:FD:70:42:DA:47:DF:03:21:6B:2F X509v3 Authority Key Identifier: keyid:52:15:25:85:6C:BB:A6:D9:D2:25:42:21:C2:80:DC:93:07:34:AA:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/4/521525856CBBA6D9D2254221C280DC930734AAB8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/521525856CBBA6D9D2254221C280DC930734AAB8.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/4/521525856CBBA6D9D2254221C280DC930734AAB8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:be:29:3c:bc:75:48:98:75:c5:48:9a:0c:7c:39:60:9a:e6: e4:e7:4d:a7:05:bd:01:86:81:72:33:84:fc:6e:11:c6:5a:80: 66:c0:7a:10:4d:4d:e7:b8:81:06:9c:c5:8e:b6:7b:7b:08:b8: 69:b8:40:11:b4:d7:af:71:7e:be:33:b3:71:71:5b:47:35:ef: 02:5e:dc:17:bf:e1:fc:f5:a1:0b:c6:62:0b:83:8f:ca:8a:bb: 41:0c:10:92:e4:f5:ba:72:c3:4a:da:99:08:77:98:2b:f5:ab: 82:9e:44:f5:43:54:ff:e9:e7:8a:89:4a:9a:c0:bb:d0:0b:ac: 11:87:3f:bb:23:64:73:16:ae:03:4b:5d:c9:1d:f1:a9:52:df: 5c:52:ba:9c:95:76:6a:17:75:38:f8:fa:14:03:9b:49:3d:81: 21:26:7c:79:3f:b5:ca:36:73:e4:ea:2f:4b:08:f4:0b:53:52: 41:64:dd:dd:21:d9:1c:1c:7c:4c:ad:34:ee:8e:b7:2b:65:80: 2f:03:25:98:4c:2b:b9:fd:b1:26:a6:b5:24:db:5f:bf:56:e2: 2a:d3:4b:8a:8b:03:c8:a6:dc:01:66:9f:4e:c9:df:b7:b1:f5: 1e:f5:6c:56:04:f7:21:76:74:58:cb:46:02:3a:d9:5d:2f:50: 61:d3:81:a6 -----BEGIN CERTIFICATE----- MIIFbTCCBFWgAwIBAgIUQrA3qIOagqOGH2IzRdkb6i2LKRwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTIxNTI1ODU2Q0JCQTZEOUQyMjU0MjIxQzI4MERDOTMw NzM0QUFCODAeFw0yNjA3MDkyMzAzMjBaFw0yNjA3MTEwMDM3MjBaMDMxMTAvBgNV BAMTKDk1RUM1RTE3Rjg1Rjc4ODVGOTRERkQ3MDQyREE0N0RGMDMyMTZCMkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCt2LzeB28NzCarsKW+KGWPTHJu aUKnw/G/n5wZjNP39HDBtgZkJFkB8eOizrl8yKAUyf6GDVQ74xU9N6i9lfpb9iau /BEzdO0BYE+McSlm5Ies/E+E3viV40xbEfgc/JGCBb0xIf3ieTqhFkcB14SPH4yR NzvKJDOQTMSqzQX4T4DwhzAdCtfiKF+J/gSWgaQtAEXh35RAKAG0+LOqXMgq16yT r5LRCnGgK3BEyMJjSNd/iVBq92mCeZNI3bP4CApmEasA/WAVKqHvDAjTCAHYf8sT 6n9L1a4BSLPK4U/Gx9BeSsV7vwEqJqqpoWrr7xMqJIY3TULzmTHPeJR32P3LAgMB AAGjggJ3MIICczAdBgNVHQ4EFgQUlexeF/hfeIX5Tf1wQtpH3wMhay8wHwYDVR0j BBgwFoAUUhUlhWy7ptnSJUIhwoDckwc0qrgwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMmFjYTNjYTYtMzRjYy00NzcyLWJhYzAtYTM1ZGQwMTk1 Y2U3LzQvNTIxNTI1ODU2Q0JCQTZEOUQyMjU0MjIxQzI4MERDOTMwNzM0QUFCOC5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1 YzkxYmUzZjlkLzcvNTIxNTI1ODU2Q0JCQTZEOUQyMjU0MjIxQzI4MERDOTMwNzM0 QUFCOC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8yYWNhM2NhNi0z NGNjLTQ3NzItYmFjMC1hMzVkZDAxOTVjZTcvNC81MjE1MjU4NTZDQkJBNkQ5RDIy NTQyMjFDMjgwREM5MzA3MzRBQUI4Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf74pPLx1SJh1xUiaDHw5 YJrm5OdNpwW9AYaBcjOE/G4RxlqAZsB6EE1N57iBBpzFjrZ7ewi4abhAEbTXr3F+ vjOzcXFbRzXvAl7cF7/h/PWhC8ZiC4OPyoq7QQwQkuT1unLDStqZCHeYK/Wrgp5E 9UNU/+nniolKmsC70AusEYc/uyNkcxauA0tdyR3xqVLfXFK6nJV2ahd1OPj6FAOb ST2BISZ8eT+1yjZz5OovSwj0C1NSQWTd3SHZHBx8TK007o63K2WALwMlmEwruf2x Jqa1JNtfv1biKtNLiosDyKbcAWafTsnft7H1HvVsVgT3IXZ0WMtGAjrZXS9QYdOB pg== -----END CERTIFICATE-----Generated at Fri Jul 10 15:13:55 2026 by rpki-client