$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/4/521525856CBBA6D9D2254221C280DC930734AAB8.mft File: 521525856CBBA6D9D2254221C280DC930734AAB8.mft (raw, json) Hash identifier: 7e4lRuo8gh8JwQPWewgZsKuhMMzV1dcErgcZ9iXqBtE= Subject key identifier: 4D:AB:77:1A:53:5E:ED:74:CB:09:D7:C3:AD:36:C0:8F:AE:5E:01:51 Authority key identifier: 52:15:25:85:6C:BB:A6:D9:D2:25:42:21:C2:80:DC:93:07:34:AA:B8 Certificate issuer: /CN=521525856CBBA6D9D2254221C280DC930734AAB8 Certificate serial: 3C39F3B960FD68F766CB12F046EB2FF83A1EB614 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/521525856CBBA6D9D2254221C280DC930734AAB8.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/4/521525856CBBA6D9D2254221C280DC930734AAB8.mft Manifest number: 01B2 Signing time: Mon 25 May 2026 01:57:54 +0000 Manifest this update: Mon 25 May 2026 01:52:54 +0000 Manifest next update: Tue 26 May 2026 04:24:54 +0000 Files and hashes: 1: 326130363a613030333a313333373a3a2f34382d3438203d3e20323030363736.roa (hash: qr/bfrnor+1gB61vuOA1czljaK/VRJBauBs1U2EbENw=) 2: 326130363a613030333a3a2f34382d3438203d3e20323030363736.roa (hash: PNV+6g1yuxZfiOErO1rlD/OjvHSDnl045B3ycAeUEw8=) 3: 521525856CBBA6D9D2254221C280DC930734AAB8.crl (hash: pntwmKLWUmQHIMyWcsA2zoWuYZrwpTVSrvWrF6wCPqk=) 4: 326130363a613030333a313131313a3a2f34382d3438203d3e20323030363736.roa (hash: rOXq6KopS7nNrxLenr0thMMbHkGjihkrbeGzvVQ4fNc=) 5: 326130363a613030333a666666663a3a2f34382d3438203d3e203530373535.roa (hash: HVzJ9R68GMwZO9EL/DI2ZLp1a+F6uNrFmfl8+YGeZKc=) 6: 39342e32342e3130382e302f32342d3234203d3e20323030363736.roa (hash: hbkkIcLL2dVYKU+9BKXYxvOgTE4cVlfb37zj8sIKpS0=) 7: 326130363a613030333a623030623a3a2f34382d3438203d3e20323030363736.roa (hash: kunZD4UEEwcG2nc99Wb+xz1yK+IdIm7SjegbAra8chc=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/4/521525856CBBA6D9D2254221C280DC930734AAB8.crl rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/4/521525856CBBA6D9D2254221C280DC930734AAB8.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/521525856CBBA6D9D2254221C280DC930734AAB8.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 26 May 2026 04:24:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:39:f3:b9:60:fd:68:f7:66:cb:12:f0:46:eb:2f:f8:3a:1e:b6:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=521525856CBBA6D9D2254221C280DC930734AAB8 Validity Not Before: May 25 01:52:54 2026 GMT Not After : May 26 04:24:54 2026 GMT Subject: CN=4DAB771A535EED74CB09D7C3AD36C08FAE5E0151 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:8c:24:f0:4e:9e:20:ce:b7:9d:54:89:ae:e8: 35:02:84:99:62:cd:7d:fb:c3:f2:1f:94:b8:06:9f: 94:ff:e6:db:84:80:ae:d0:08:e6:27:22:3c:29:46: f8:cb:5a:92:9b:69:8f:db:b6:da:bb:a0:71:69:7f: 67:67:9f:8d:72:13:d1:d5:f5:e5:5d:11:cd:eb:c7: 2a:ea:70:23:68:51:9a:f5:37:2c:54:8f:66:be:13: 00:90:c8:55:db:d1:30:3a:3c:42:1c:63:da:fc:be: 05:2e:e7:18:09:8a:4f:7d:b8:5d:eb:18:86:4e:95: d3:de:42:78:23:fb:06:a7:1f:d9:34:c4:3d:e8:f6: a1:d0:a8:c5:20:79:98:0c:ce:78:15:7f:62:39:7c: 67:d8:b5:84:88:e6:1f:5f:bf:93:ef:fa:8c:75:b0: 24:51:d7:2d:c1:5e:d3:e9:2c:f6:59:40:1e:2a:6a: 4f:c7:e9:f9:84:d5:f2:61:dc:40:10:1e:b8:92:92: ae:a9:2d:0c:74:dc:dd:8d:d9:ad:ce:c0:0f:9d:46: eb:b5:ee:ce:b3:c1:01:f9:5a:61:4f:42:36:d6:d2: fb:c2:c1:48:54:5b:00:92:08:10:a1:ec:bf:70:fd: 43:61:6a:ca:f6:7c:64:78:db:44:37:11:cd:22:36: 8c:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:AB:77:1A:53:5E:ED:74:CB:09:D7:C3:AD:36:C0:8F:AE:5E:01:51 X509v3 Authority Key Identifier: keyid:52:15:25:85:6C:BB:A6:D9:D2:25:42:21:C2:80:DC:93:07:34:AA:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/4/521525856CBBA6D9D2254221C280DC930734AAB8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/521525856CBBA6D9D2254221C280DC930734AAB8.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/4/521525856CBBA6D9D2254221C280DC930734AAB8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:0f:38:da:f2:55:66:e0:04:58:e4:c5:8f:b2:6e:4e:91:fc: c4:21:51:ad:73:1f:40:31:d3:ea:e7:de:76:7e:18:f3:15:6d: e9:60:14:d8:01:a1:23:c8:0c:6d:5c:0f:ff:0f:f2:2e:9c:fd: 37:ef:22:a7:9d:0e:3e:58:3a:8d:7c:e8:10:af:a4:7a:39:e2: 4f:b7:33:85:d4:46:a9:6d:ed:53:e3:d3:9d:10:13:e9:4d:34: a2:27:7d:ab:a2:d0:06:95:60:3f:fc:fe:6e:bf:72:84:0f:8a: e7:8d:81:b7:8b:99:4b:0b:31:75:8d:38:24:19:cc:e4:80:1b: 2a:73:2b:1a:e5:e9:3a:cf:3d:63:5a:32:4b:7b:42:14:7c:a8: d2:51:40:36:48:2e:8c:f8:0d:ff:f4:67:86:cd:e1:c0:ab:28: 40:9a:c7:d2:4c:af:d8:e3:29:f2:37:47:66:82:4d:ad:a8:d3: 72:83:73:08:e5:a4:e5:85:6c:24:01:bf:26:72:07:31:7e:83: 29:b5:94:1e:ed:9a:f7:54:0d:6b:a5:77:da:ad:e2:cd:16:f4: 75:fb:74:85:5b:18:8a:fc:af:29:5b:54:05:21:c0:71:41:51: bb:7a:00:ec:4c:6d:39:e7:b0:c6:b0:92:de:7c:c4:8f:c8:5c: 67:5b:3e:63 -----BEGIN CERTIFICATE----- MIIFbTCCBFWgAwIBAgIUPDnzuWD9aPdmyxLwRusv+DoethQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTIxNTI1ODU2Q0JCQTZEOUQyMjU0MjIxQzI4MERDOTMw NzM0QUFCODAeFw0yNjA1MjUwMTUyNTRaFw0yNjA1MjYwNDI0NTRaMDMxMTAvBgNV BAMTKDREQUI3NzFBNTM1RUVENzRDQjA5RDdDM0FEMzZDMDhGQUU1RTAxNTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNjCTwTp4gzredVImu6DUChJli zX37w/IflLgGn5T/5tuEgK7QCOYnIjwpRvjLWpKbaY/bttq7oHFpf2dnn41yE9HV 9eVdEc3rxyrqcCNoUZr1NyxUj2a+EwCQyFXb0TA6PEIcY9r8vgUu5xgJik99uF3r GIZOldPeQngj+wanH9k0xD3o9qHQqMUgeZgMzngVf2I5fGfYtYSI5h9fv5Pv+ox1 sCRR1y3BXtPpLPZZQB4qak/H6fmE1fJh3EAQHriSkq6pLQx03N2N2a3OwA+dRuu1 7s6zwQH5WmFPQjbW0vvCwUhUWwCSCBCh7L9w/UNhasr2fGR420Q3Ec0iNoznAgMB AAGjggJ3MIICczAdBgNVHQ4EFgQUTat3GlNe7XTLCdfDrTbAj65eAVEwHwYDVR0j BBgwFoAUUhUlhWy7ptnSJUIhwoDckwc0qrgwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMmFjYTNjYTYtMzRjYy00NzcyLWJhYzAtYTM1ZGQwMTk1 Y2U3LzQvNTIxNTI1ODU2Q0JCQTZEOUQyMjU0MjIxQzI4MERDOTMwNzM0QUFCOC5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1 YzkxYmUzZjlkLzcvNTIxNTI1ODU2Q0JCQTZEOUQyMjU0MjIxQzI4MERDOTMwNzM0 QUFCOC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8yYWNhM2NhNi0z NGNjLTQ3NzItYmFjMC1hMzVkZDAxOTVjZTcvNC81MjE1MjU4NTZDQkJBNkQ5RDIy NTQyMjFDMjgwREM5MzA3MzRBQUI4Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVA842vJVZuAEWOTFj7Ju TpH8xCFRrXMfQDHT6ufedn4Y8xVt6WAU2AGhI8gMbVwP/w/yLpz9N+8ip50OPlg6 jXzoEK+kejniT7czhdRGqW3tU+PTnRAT6U00oid9q6LQBpVgP/z+br9yhA+K542B t4uZSwsxdY04JBnM5IAbKnMrGuXpOs89Y1oyS3tCFHyo0lFANkgujPgN//Rnhs3h wKsoQJrH0kyv2OMp8jdHZoJNrajTcoNzCOWk5YVsJAG/JnIHMX6DKbWUHu2a91QN a6V32q3izRb0dft0hVsYivyvKVtUBSHAcUFRu3oA7ExtOeewxrCS3nzEj8hcZ1s+ Yw== -----END CERTIFICATE-----Generated at Mon May 25 15:46:30 2026 by rpki-client