$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/4/521525856CBBA6D9D2254221C280DC930734AAB8.mft File: 521525856CBBA6D9D2254221C280DC930734AAB8.mft (raw, json) Hash identifier: cvQaEGBJiVlvVRFhEbFxrJLVIg/R5P664Y8BN96flVM= Subject key identifier: B0:D1:23:A3:33:34:86:53:A7:AD:1A:4F:7B:5C:B1:E7:29:A4:25:F7 Authority key identifier: 52:15:25:85:6C:BB:A6:D9:D2:25:42:21:C2:80:DC:93:07:34:AA:B8 Certificate issuer: /CN=521525856CBBA6D9D2254221C280DC930734AAB8 Certificate serial: 049948442F96612587C379DBA0C1D392CA01BF24 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/521525856CBBA6D9D2254221C280DC930734AAB8.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/4/521525856CBBA6D9D2254221C280DC930734AAB8.mft Manifest number: 022F Signing time: Wed 26 Aug 2026 04:55:00 +0000 Manifest this update: Wed 26 Aug 2026 04:50:00 +0000 Manifest next update: Thu 27 Aug 2026 06:28:00 +0000 Files and hashes: 1: 326130363a613030333a313333373a3a2f34382d3438203d3e20323030363736.roa (hash: y6dlRvQ6Ei4ylbtG2E1Fsbq6bkYPEiXc/hP5pnr/A5s=) 2: 326130363a613030333a666666663a3a2f34382d3438203d3e203530373535.roa (hash: ZhHRzDFs7fBtUGvR8pxFCEtpL9Hraol9iZdGLjWUEvI=) 3: 39342e32342e3130382e302f32342d3234203d3e20323030363736.roa (hash: HSErQq3crkyzVJa6g9ayoDntWunwG4uTUMd6ifKsOLU=) 4: 326130363a613030333a3a2f34382d3438203d3e20323030363736.roa (hash: hctWuN+nHCxcPnxwlB0HaZTfqv5a4O8gc3WDRLEEUrc=) 5: 326130363a613030333a623030623a3a2f34382d3438203d3e20323030363736.roa (hash: Pecsaqccf5tHcdlTeF7bCwVmz7JER7H8qSHLGuqWRMI=) 6: 326130363a613030333a313131313a3a2f34382d3438203d3e20323030363736.roa (hash: reSiEjWqNL5bMfSb8NDNP7L36wtpl2UMV26XqCjhnmE=) 7: 521525856CBBA6D9D2254221C280DC930734AAB8.crl (hash: mPsp8WuwqZNIUKAdomQRK3lOnxBo5ENx5ut7AP8xg0w=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/4/521525856CBBA6D9D2254221C280DC930734AAB8.crl rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/4/521525856CBBA6D9D2254221C280DC930734AAB8.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/521525856CBBA6D9D2254221C280DC930734AAB8.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 26 Aug 2026 23:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:99:48:44:2f:96:61:25:87:c3:79:db:a0:c1:d3:92:ca:01:bf:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=521525856CBBA6D9D2254221C280DC930734AAB8 Validity Not Before: Aug 26 04:50:00 2026 GMT Not After : Aug 27 06:28:00 2026 GMT Subject: CN=B0D123A333348653A7AD1A4F7B5CB1E729A425F7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:a4:2d:e8:97:87:ee:ef:96:2a:7d:7d:15:2b: 92:ee:a2:ae:3e:8b:07:7c:af:b3:8a:70:41:0d:d2: db:c8:28:79:a8:44:97:4d:88:57:cc:b1:b4:37:3f: 70:b6:79:e0:a4:98:20:14:fd:8d:7d:4b:04:c1:40: bd:2d:92:96:0c:7e:50:73:a4:f9:05:0b:36:d7:7f: 53:57:37:2f:66:4c:bf:03:84:bb:b6:8a:78:80:45: 4d:62:ea:90:d6:bc:60:39:50:3c:64:21:77:86:b4: 84:23:f8:a3:4f:ed:e7:9c:7e:97:5d:df:83:2c:ce: fa:e4:d5:bd:99:1f:10:d1:9a:49:70:51:cf:54:46: ae:b3:a6:1e:82:8e:37:cb:ef:14:e4:5e:9b:e2:2d: c7:5a:e0:85:f1:7d:bf:bd:51:2b:a4:62:a6:e5:9e: aa:bc:97:16:78:70:9c:84:7f:9c:72:8d:c2:ef:72: 2c:14:d3:07:6a:97:aa:a7:b4:1b:9d:53:d2:34:89: 7b:e5:5f:96:99:9f:9b:27:5f:73:af:75:35:31:0a: 9d:e5:a4:89:d1:27:0b:1d:28:e5:30:3a:0e:16:b5: 7d:27:ae:d8:05:de:3d:85:d9:85:74:a2:88:3b:da: 1a:df:0e:c3:c4:8b:5f:c5:6d:c2:78:65:6e:2f:1a: 6f:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:D1:23:A3:33:34:86:53:A7:AD:1A:4F:7B:5C:B1:E7:29:A4:25:F7 X509v3 Authority Key Identifier: keyid:52:15:25:85:6C:BB:A6:D9:D2:25:42:21:C2:80:DC:93:07:34:AA:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/4/521525856CBBA6D9D2254221C280DC930734AAB8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/521525856CBBA6D9D2254221C280DC930734AAB8.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/4/521525856CBBA6D9D2254221C280DC930734AAB8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:30:c2:1c:65:76:e7:c1:ad:b0:f7:22:f0:fb:a6:76:75:ce: e4:89:b4:e3:3b:fe:9e:94:24:82:5d:ac:41:3a:40:ff:3d:72: 85:84:31:3d:b7:67:68:51:5a:b8:be:06:55:de:85:55:96:16: 68:55:de:a0:78:87:2d:2c:39:01:ad:5c:4f:fe:8a:6c:3a:c1: a7:df:f1:40:15:2f:c5:c2:81:9c:bd:60:1c:e4:2f:13:1e:9a: 12:73:0d:f1:39:6f:dd:a3:54:36:ff:3d:0f:22:59:25:0c:4f: db:96:8d:dd:1b:47:7f:d2:70:99:f2:6f:c9:de:d6:70:63:dc: 96:11:8e:af:c3:a3:3b:14:83:bd:51:19:c9:53:51:66:b4:9b: 30:54:92:63:be:84:92:5f:f7:b4:e1:91:4c:f3:e6:c2:af:fa: fc:1a:39:74:01:6a:95:1b:13:25:b6:eb:2a:4e:3e:87:9b:2d: 5b:a2:e6:dc:b8:7c:69:60:e9:b1:65:a0:9e:af:81:07:e6:cd: d1:8f:2e:93:8d:6e:5e:49:ae:8e:e4:c1:6d:9a:c9:99:48:1b: cf:ac:b1:ca:fd:49:33:82:23:8b:ab:44:3b:b0:dd:52:ed:8c: fb:e5:b0:8f:e8:e7:56:3d:b1:af:ba:52:77:61:2c:52:f1:ac: c9:fb:8a:65 -----BEGIN CERTIFICATE----- MIIFbTCCBFWgAwIBAgIUBJlIRC+WYSWHw3nboMHTksoBvyQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTIxNTI1ODU2Q0JCQTZEOUQyMjU0MjIxQzI4MERDOTMw NzM0QUFCODAeFw0yNjA4MjYwNDUwMDBaFw0yNjA4MjcwNjI4MDBaMDMxMTAvBgNV BAMTKEIwRDEyM0EzMzMzNDg2NTNBN0FEMUE0RjdCNUNCMUU3MjlBNDI1RjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIpC3ol4fu75YqfX0VK5Luoq4+ iwd8r7OKcEEN0tvIKHmoRJdNiFfMsbQ3P3C2eeCkmCAU/Y19SwTBQL0tkpYMflBz pPkFCzbXf1NXNy9mTL8DhLu2iniARU1i6pDWvGA5UDxkIXeGtIQj+KNP7eecfpdd 34Mszvrk1b2ZHxDRmklwUc9URq6zph6CjjfL7xTkXpviLcda4IXxfb+9USukYqbl nqq8lxZ4cJyEf5xyjcLvciwU0wdql6qntBudU9I0iXvlX5aZn5snX3OvdTUxCp3l pInRJwsdKOUwOg4WtX0nrtgF3j2F2YV0oog72hrfDsPEi1/FbcJ4ZW4vGm8VAgMB AAGjggJ3MIICczAdBgNVHQ4EFgQUsNEjozM0hlOnrRpPe1yx5ymkJfcwHwYDVR0j BBgwFoAUUhUlhWy7ptnSJUIhwoDckwc0qrgwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMmFjYTNjYTYtMzRjYy00NzcyLWJhYzAtYTM1ZGQwMTk1 Y2U3LzQvNTIxNTI1ODU2Q0JCQTZEOUQyMjU0MjIxQzI4MERDOTMwNzM0QUFCOC5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1 YzkxYmUzZjlkLzcvNTIxNTI1ODU2Q0JCQTZEOUQyMjU0MjIxQzI4MERDOTMwNzM0 QUFCOC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8yYWNhM2NhNi0z NGNjLTQ3NzItYmFjMC1hMzVkZDAxOTVjZTcvNC81MjE1MjU4NTZDQkJBNkQ5RDIy NTQyMjFDMjgwREM5MzA3MzRBQUI4Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADTDCHGV258GtsPci8Pum dnXO5Im04zv+npQkgl2sQTpA/z1yhYQxPbdnaFFauL4GVd6FVZYWaFXeoHiHLSw5 Aa1cT/6KbDrBp9/xQBUvxcKBnL1gHOQvEx6aEnMN8Tlv3aNUNv89DyJZJQxP25aN 3RtHf9JwmfJvyd7WcGPclhGOr8OjOxSDvVEZyVNRZrSbMFSSY76Ekl/3tOGRTPPm wq/6/Bo5dAFqlRsTJbbrKk4+h5stW6Lm3Lh8aWDpsWWgnq+BB+bN0Y8uk41uXkmu juTBbZrJmUgbz6yxyv1JM4Iji6tEO7DdUu2M++Wwj+jnVj2xr7pSd2EsUvGsyfuK ZQ== -----END CERTIFICATE-----Generated at Wed Aug 26 08:07:17 2026 by rpki-client