$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/4/521525856CBBA6D9D2254221C280DC930734AAB8.mft File: 521525856CBBA6D9D2254221C280DC930734AAB8.mft (raw, json) Hash identifier: dmEz0SDzfOL1UFaUlR97FYYWl7M83H155Xrab2UlWGc= Subject key identifier: 1A:45:94:58:74:D5:88:B8:43:A4:29:C0:A8:29:56:2F:2C:DE:7A:99 Authority key identifier: 52:15:25:85:6C:BB:A6:D9:D2:25:42:21:C2:80:DC:93:07:34:AA:B8 Certificate issuer: /CN=521525856CBBA6D9D2254221C280DC930734AAB8 Certificate serial: 6C34044F14842712F17FAA42511B906F75188827 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/521525856CBBA6D9D2254221C280DC930734AAB8.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/4/521525856CBBA6D9D2254221C280DC930734AAB8.mft Manifest number: 0145 Signing time: Wed 04 Mar 2026 03:58:46 +0000 Manifest this update: Wed 04 Mar 2026 03:53:46 +0000 Manifest next update: Thu 05 Mar 2026 06:24:46 +0000 Files and hashes: 1: 326130363a613030333a313131313a3a2f34382d3438203d3e20323030363736.roa (hash: rOXq6KopS7nNrxLenr0thMMbHkGjihkrbeGzvVQ4fNc=) 2: 521525856CBBA6D9D2254221C280DC930734AAB8.crl (hash: zKy5tWTugTib4956k1XQPYXu35uRrh+EQb0LRRHfz1s=) 3: 326130363a613030333a313333373a3a2f34382d3438203d3e20323030363736.roa (hash: qr/bfrnor+1gB61vuOA1czljaK/VRJBauBs1U2EbENw=) 4: 326130363a613030333a623030623a3a2f34382d3438203d3e20323030363736.roa (hash: kunZD4UEEwcG2nc99Wb+xz1yK+IdIm7SjegbAra8chc=) 5: 326130363a613030333a3a2f34382d3438203d3e20323030363736.roa (hash: PNV+6g1yuxZfiOErO1rlD/OjvHSDnl045B3ycAeUEw8=) 6: 39342e32342e3130382e302f32342d3234203d3e20323030363736.roa (hash: hbkkIcLL2dVYKU+9BKXYxvOgTE4cVlfb37zj8sIKpS0=) 7: 326130363a613030333a666666663a3a2f34382d3438203d3e203530373535.roa (hash: HVzJ9R68GMwZO9EL/DI2ZLp1a+F6uNrFmfl8+YGeZKc=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/4/521525856CBBA6D9D2254221C280DC930734AAB8.crl rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/4/521525856CBBA6D9D2254221C280DC930734AAB8.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/521525856CBBA6D9D2254221C280DC930734AAB8.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 05 Mar 2026 06:24:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:34:04:4f:14:84:27:12:f1:7f:aa:42:51:1b:90:6f:75:18:88:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=521525856CBBA6D9D2254221C280DC930734AAB8 Validity Not Before: Mar 4 03:53:46 2026 GMT Not After : Mar 5 06:24:46 2026 GMT Subject: CN=1A45945874D588B843A429C0A829562F2CDE7A99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:1a:99:d6:cd:b0:f3:fe:cc:56:14:f2:05:14: c4:cb:5f:7f:22:9a:58:c0:5f:89:c0:de:8a:fb:bf: 98:4e:a2:a1:51:4b:29:91:4b:f7:6e:09:66:ff:fd: d8:6b:5a:4f:48:16:2c:77:82:c9:c7:27:2c:df:58: 35:21:1b:e0:eb:6b:32:c1:f2:87:93:ea:63:af:86: f4:13:51:3e:a4:59:10:4c:e6:5d:99:a4:a4:0a:b7: ab:0e:a8:c2:0a:b2:4b:d3:14:f1:c7:9d:ef:c1:1f: d8:29:68:da:e2:8b:7d:9f:61:98:cd:83:2b:94:2f: 0c:fb:71:83:2f:16:47:8e:d4:be:5b:6a:52:70:fb: 07:de:f1:fe:d7:44:3d:fb:ad:2b:8e:fd:c4:1a:ea: 98:62:70:b0:0e:d9:ba:3e:98:0b:f6:0a:06:eb:f4: 9c:34:ae:15:bd:71:c0:3d:eb:a7:b3:c5:19:af:90: 49:2d:d1:ac:73:a4:c0:c4:86:f6:38:6e:09:10:11: 47:a4:e8:83:26:df:c1:6b:84:45:fb:b9:4d:d2:64: 26:38:08:fc:3c:a0:42:25:c2:00:f9:00:b6:2f:92: e6:b4:50:41:fe:d3:86:1d:e8:fc:7c:1b:9c:57:5c: ee:bc:87:c1:1a:b8:2a:30:a1:95:b1:d9:9e:a4:d3: 28:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:45:94:58:74:D5:88:B8:43:A4:29:C0:A8:29:56:2F:2C:DE:7A:99 X509v3 Authority Key Identifier: keyid:52:15:25:85:6C:BB:A6:D9:D2:25:42:21:C2:80:DC:93:07:34:AA:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/4/521525856CBBA6D9D2254221C280DC930734AAB8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/521525856CBBA6D9D2254221C280DC930734AAB8.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/4/521525856CBBA6D9D2254221C280DC930734AAB8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:d2:fc:a6:de:f8:77:14:e0:b0:17:c1:8f:f4:22:ad:f5:18: ee:5f:24:0e:01:d6:e6:60:c5:c4:22:c0:ef:f8:0a:da:26:e0: 6f:fd:dd:1a:da:a5:24:62:2d:a9:90:93:30:ab:c1:e6:95:fb: fd:1a:aa:11:3f:8b:06:1e:1c:dc:78:21:39:a4:96:c3:80:3c: e5:f5:38:dd:4d:c5:5b:61:81:94:05:9f:1c:59:b6:16:1a:ab: bd:12:fd:33:9d:fe:7e:f6:75:4d:36:37:dd:f9:aa:e5:63:0a: a8:5e:70:a6:5f:28:5e:1c:26:9a:35:53:42:94:19:b6:51:db: 5b:9f:3e:3d:28:e1:ec:ef:73:1e:96:fd:24:fa:cf:8c:39:b7: 23:3a:7d:0f:97:21:20:da:b7:7e:5c:60:a1:44:43:e4:6e:5a: b7:79:b2:5f:98:aa:10:6a:4e:e2:74:46:23:16:8e:bf:9d:d0: 0c:7a:62:22:37:19:72:a6:3a:21:53:f5:3c:0b:74:2c:f9:f7: 8e:e5:b0:da:ab:e6:66:f0:ed:a8:8a:c7:02:72:7b:74:c1:b6: c9:9b:c0:10:84:1a:79:d0:6d:4a:20:62:ec:23:46:b2:b3:00: 28:0b:9a:6d:0d:1e:04:18:1f:83:a0:08:21:af:e6:08:0d:27: a9:6a:11:5e -----BEGIN CERTIFICATE----- MIIFbTCCBFWgAwIBAgIUbDQETxSEJxLxf6pCURuQb3UYiCcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTIxNTI1ODU2Q0JCQTZEOUQyMjU0MjIxQzI4MERDOTMw NzM0QUFCODAeFw0yNjAzMDQwMzUzNDZaFw0yNjAzMDUwNjI0NDZaMDMxMTAvBgNV BAMTKDFBNDU5NDU4NzRENTg4Qjg0M0E0MjlDMEE4Mjk1NjJGMkNERTdBOTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCXGpnWzbDz/sxWFPIFFMTLX38i mljAX4nA3or7v5hOoqFRSymRS/duCWb//dhrWk9IFix3gsnHJyzfWDUhG+DrazLB 8oeT6mOvhvQTUT6kWRBM5l2ZpKQKt6sOqMIKskvTFPHHne/BH9gpaNrii32fYZjN gyuULwz7cYMvFkeO1L5balJw+wfe8f7XRD37rSuO/cQa6phicLAO2bo+mAv2Cgbr 9Jw0rhW9ccA966ezxRmvkEkt0axzpMDEhvY4bgkQEUek6IMm38FrhEX7uU3SZCY4 CPw8oEIlwgD5ALYvkua0UEH+04Yd6Px8G5xXXO68h8EauCowoZWx2Z6k0yjnAgMB AAGjggJ3MIICczAdBgNVHQ4EFgQUGkWUWHTViLhDpCnAqClWLyzeepkwHwYDVR0j BBgwFoAUUhUlhWy7ptnSJUIhwoDckwc0qrgwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMmFjYTNjYTYtMzRjYy00NzcyLWJhYzAtYTM1ZGQwMTk1 Y2U3LzQvNTIxNTI1ODU2Q0JCQTZEOUQyMjU0MjIxQzI4MERDOTMwNzM0QUFCOC5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1 YzkxYmUzZjlkLzcvNTIxNTI1ODU2Q0JCQTZEOUQyMjU0MjIxQzI4MERDOTMwNzM0 QUFCOC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8yYWNhM2NhNi0z NGNjLTQ3NzItYmFjMC1hMzVkZDAxOTVjZTcvNC81MjE1MjU4NTZDQkJBNkQ5RDIy NTQyMjFDMjgwREM5MzA3MzRBQUI4Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL9L8pt74dxTgsBfBj/Qi rfUY7l8kDgHW5mDFxCLA7/gK2ibgb/3dGtqlJGItqZCTMKvB5pX7/RqqET+LBh4c 3HghOaSWw4A85fU43U3FW2GBlAWfHFm2FhqrvRL9M53+fvZ1TTY33fmq5WMKqF5w pl8oXhwmmjVTQpQZtlHbW58+PSjh7O9zHpb9JPrPjDm3Izp9D5chINq3flxgoURD 5G5at3myX5iqEGpO4nRGIxaOv53QDHpiIjcZcqY6IVP1PAt0LPn3juWw2qvmZvDt qIrHAnJ7dMG2yZvAEIQaedBtSiBi7CNGsrMAKAuabQ0eBBgfg6AIIa/mCA0nqWoR Xg== -----END CERTIFICATE-----Generated at Wed Mar 4 19:05:02 2026 by rpki-client