$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/4/521525856CBBA6D9D2254221C280DC930734AAB8.mft File: 521525856CBBA6D9D2254221C280DC930734AAB8.mft (raw, json) Hash identifier: S4Vvbkdpq9H3olwUIsdwO36/MJsO7j3ikT38OrH6apQ= Subject key identifier: 28:F0:10:5E:1E:E9:2A:69:69:36:D7:00:68:C8:AE:89:B7:59:8E:BF Authority key identifier: 52:15:25:85:6C:BB:A6:D9:D2:25:42:21:C2:80:DC:93:07:34:AA:B8 Certificate issuer: /CN=521525856CBBA6D9D2254221C280DC930734AAB8 Certificate serial: 57F7E8CD7AB07B97E5F077CB7A0BFB5677C3BD57 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/521525856CBBA6D9D2254221C280DC930734AAB8.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/4/521525856CBBA6D9D2254221C280DC930734AAB8.mft Manifest number: 026C Signing time: Sun 11 Oct 2026 05:06:44 +0000 Manifest this update: Sun 11 Oct 2026 05:01:44 +0000 Manifest next update: Mon 12 Oct 2026 07:07:44 +0000 Files and hashes: 1: 326130363a613030333a313333373a3a2f34382d3438203d3e20323030363736.roa (hash: y6dlRvQ6Ei4ylbtG2E1Fsbq6bkYPEiXc/hP5pnr/A5s=) 2: 326130363a613030333a3a2f34382d3438203d3e20323030363736.roa (hash: hctWuN+nHCxcPnxwlB0HaZTfqv5a4O8gc3WDRLEEUrc=) 3: 326130363a613030333a313131313a3a2f34382d3438203d3e20323030363736.roa (hash: reSiEjWqNL5bMfSb8NDNP7L36wtpl2UMV26XqCjhnmE=) 4: 521525856CBBA6D9D2254221C280DC930734AAB8.crl (hash: NrzXh+T/d6sbOJo1MnvWxvBO8OXeUZCFOcqqSneLOgQ=) 5: 326130363a613030333a666666663a3a2f34382d3438203d3e203530373535.roa (hash: ZhHRzDFs7fBtUGvR8pxFCEtpL9Hraol9iZdGLjWUEvI=) 6: 326130363a613030333a623030623a3a2f34382d3438203d3e20323030363736.roa (hash: Pecsaqccf5tHcdlTeF7bCwVmz7JER7H8qSHLGuqWRMI=) 7: 39342e32342e3130382e302f32342d3234203d3e20323030363736.roa (hash: HSErQq3crkyzVJa6g9ayoDntWunwG4uTUMd6ifKsOLU=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/4/521525856CBBA6D9D2254221C280DC930734AAB8.crl rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/4/521525856CBBA6D9D2254221C280DC930734AAB8.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/521525856CBBA6D9D2254221C280DC930734AAB8.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Oct 2026 03:31:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:f7:e8:cd:7a:b0:7b:97:e5:f0:77:cb:7a:0b:fb:56:77:c3:bd:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=521525856CBBA6D9D2254221C280DC930734AAB8 Validity Not Before: Oct 11 05:01:44 2026 GMT Not After : Oct 12 07:07:44 2026 GMT Subject: CN=28F0105E1EE92A696936D70068C8AE89B7598EBF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:16:75:01:e9:45:07:dd:82:a0:5d:60:53:df: 96:21:55:2b:6a:16:69:5d:6c:ea:d0:47:46:6f:46: 37:3b:40:43:d8:de:5f:e0:1c:0e:d0:18:ca:e0:bd: 1f:52:41:c0:43:56:29:0b:46:f0:53:5c:11:38:70: 58:08:15:94:d5:c3:eb:17:5f:c2:be:11:dc:83:ee: 33:ba:16:c1:18:92:89:0e:9a:ef:00:13:af:96:ba: ad:ec:82:ed:9b:7b:d2:4e:10:6b:23:9b:89:5e:0a: f9:d1:d8:f0:5a:c7:43:25:77:f9:71:9d:90:08:4e: 9d:cf:be:f8:f7:fc:36:4c:95:4e:46:78:09:98:7c: d0:97:8e:94:85:52:aa:bc:a1:61:a2:31:a1:fe:38: cd:99:e2:21:59:92:02:b4:63:cb:8e:18:d1:ac:fe: f9:ef:f8:14:76:37:19:8b:fe:6d:30:32:46:d5:18: 78:0d:5f:14:29:c8:5b:15:24:16:69:72:e0:55:6d: 5c:19:78:d8:8d:55:16:7e:df:b2:94:b9:94:c1:df: b7:4a:22:cc:5f:cd:92:97:bc:9e:bd:5b:8e:86:3c: 24:5a:9f:38:c6:d0:5b:c8:f5:64:82:12:a8:45:4d: ee:c2:dc:47:ee:57:1e:69:b3:6c:b2:38:24:15:b2: e0:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:F0:10:5E:1E:E9:2A:69:69:36:D7:00:68:C8:AE:89:B7:59:8E:BF X509v3 Authority Key Identifier: keyid:52:15:25:85:6C:BB:A6:D9:D2:25:42:21:C2:80:DC:93:07:34:AA:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/4/521525856CBBA6D9D2254221C280DC930734AAB8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/521525856CBBA6D9D2254221C280DC930734AAB8.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/4/521525856CBBA6D9D2254221C280DC930734AAB8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6f:e3:9e:67:11:15:b2:ed:ca:89:f0:43:f1:8d:30:af:0b:ed: f2:ed:53:2e:b2:e6:d7:d3:28:51:2c:76:bb:03:91:15:e5:8c: 85:67:9c:64:63:1b:d2:e8:7b:31:2c:a5:5f:2d:d9:d9:a4:53: 69:72:a6:53:2f:ac:a8:10:05:ec:ec:96:3c:0c:03:36:69:59: c6:6f:60:0e:8d:1b:0e:22:7c:67:c9:95:bc:5f:b0:26:6e:6a: 74:4f:f7:34:0b:22:b2:47:2f:8d:ad:25:d0:0e:f3:e1:ac:29: 38:7c:0c:f7:e2:9b:82:3f:7f:91:6d:79:74:65:d9:0e:25:45: 80:d3:bb:e1:4b:85:64:93:95:89:88:87:fd:85:7f:69:88:a5: 50:44:2c:b3:fd:d3:c9:41:97:d6:99:37:ac:c9:96:20:35:f0: 87:30:52:2e:3d:7e:b9:3f:dc:a4:68:5d:63:9c:a9:35:22:0c: 7a:79:d4:cf:46:5b:7d:4c:5c:dd:ad:c6:73:e0:06:23:56:28: d2:e3:43:e3:60:d7:fc:b5:b1:34:15:08:44:86:27:01:1b:d4: a5:c6:4b:3e:c0:d4:a2:30:82:94:ca:4e:2f:02:67:96:4e:a4: 12:6d:f8:0d:72:4f:0f:f3:2c:47:e8:52:33:84:4a:93:7a:aa: 97:da:ca:99 -----BEGIN CERTIFICATE----- MIIFbTCCBFWgAwIBAgIUV/fozXqwe5fl8HfLegv7VnfDvVcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTIxNTI1ODU2Q0JCQTZEOUQyMjU0MjIxQzI4MERDOTMw NzM0QUFCODAeFw0yNjEwMTEwNTAxNDRaFw0yNjEwMTIwNzA3NDRaMDMxMTAvBgNV BAMTKDI4RjAxMDVFMUVFOTJBNjk2OTM2RDcwMDY4QzhBRTg5Qjc1OThFQkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCeFnUB6UUH3YKgXWBT35YhVStq FmldbOrQR0ZvRjc7QEPY3l/gHA7QGMrgvR9SQcBDVikLRvBTXBE4cFgIFZTVw+sX X8K+EdyD7jO6FsEYkokOmu8AE6+Wuq3sgu2be9JOEGsjm4leCvnR2PBax0Mld/lx nZAITp3Pvvj3/DZMlU5GeAmYfNCXjpSFUqq8oWGiMaH+OM2Z4iFZkgK0Y8uOGNGs /vnv+BR2NxmL/m0wMkbVGHgNXxQpyFsVJBZpcuBVbVwZeNiNVRZ+37KUuZTB37dK IsxfzZKXvJ69W46GPCRanzjG0FvI9WSCEqhFTe7C3EfuVx5ps2yyOCQVsuAnAgMB AAGjggJ3MIICczAdBgNVHQ4EFgQUKPAQXh7pKmlpNtcAaMiuibdZjr8wHwYDVR0j BBgwFoAUUhUlhWy7ptnSJUIhwoDckwc0qrgwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMmFjYTNjYTYtMzRjYy00NzcyLWJhYzAtYTM1ZGQwMTk1 Y2U3LzQvNTIxNTI1ODU2Q0JCQTZEOUQyMjU0MjIxQzI4MERDOTMwNzM0QUFCOC5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1 YzkxYmUzZjlkLzcvNTIxNTI1ODU2Q0JCQTZEOUQyMjU0MjIxQzI4MERDOTMwNzM0 QUFCOC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8yYWNhM2NhNi0z NGNjLTQ3NzItYmFjMC1hMzVkZDAxOTVjZTcvNC81MjE1MjU4NTZDQkJBNkQ5RDIy NTQyMjFDMjgwREM5MzA3MzRBQUI4Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAb+OeZxEVsu3KifBD8Y0w rwvt8u1TLrLm19MoUSx2uwORFeWMhWecZGMb0uh7MSylXy3Z2aRTaXKmUy+sqBAF 7OyWPAwDNmlZxm9gDo0bDiJ8Z8mVvF+wJm5qdE/3NAsiskcvja0l0A7z4awpOHwM 9+Kbgj9/kW15dGXZDiVFgNO74UuFZJOViYiH/YV/aYilUEQss/3TyUGX1pk3rMmW IDXwhzBSLj1+uT/cpGhdY5ypNSIMennUz0ZbfUxc3a3Gc+AGI1Yo0uND42DX/LWx NBUIRIYnARvUpcZLPsDUojCClMpOLwJnlk6kEm34DXJPD/MsR+hSM4RKk3qql9rK mQ== -----END CERTIFICATE-----Generated at Sun Oct 11 10:50:24 2026 by rpki-client