$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/1/52285B8754F215EBEAB614DEB86E66DA3B37320C.mft File: 52285B8754F215EBEAB614DEB86E66DA3B37320C.mft (raw, json) Hash identifier: lqPZU14LWnqv6tJcQYzeLPt4UuBy/NbWdNuB+3aqWTI= Subject key identifier: CA:8A:53:1D:79:98:7B:EF:FB:33:6A:59:B3:0F:55:E1:7A:FC:CC:C6 Authority key identifier: 52:28:5B:87:54:F2:15:EB:EA:B6:14:DE:B8:6E:66:DA:3B:37:32:0C Certificate issuer: /CN=52285B8754F215EBEAB614DEB86E66DA3B37320C Certificate serial: 01C1BEFC1C8D49A0B0022C58B1DBF629013006E2 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/52285B8754F215EBEAB614DEB86E66DA3B37320C.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/1/52285B8754F215EBEAB614DEB86E66DA3B37320C.mft Manifest number: 0234 Signing time: Thu 23 Oct 2025 19:21:23 +0000 Manifest this update: Thu 23 Oct 2025 19:16:23 +0000 Manifest next update: Fri 24 Oct 2025 19:43:23 +0000 Files and hashes: 1: 326131343a373538313a623030303a3a2f33362d3336203d3e20323135303834.roa (hash: 8Iv1HdyRUhjcvQFIVfomOSyv77EzHn71qEiaLSvjvAE=) 2: 52285B8754F215EBEAB614DEB86E66DA3B37320C.crl (hash: eZVbhsVxB6JLqzGJMc6uN0TrW8sibCLTMzxSfMnycAM=) 3: 326131343a373538313a6130303a3a2f34302d3430203d3e20323135303834.roa (hash: 6SMGzy0qxU/C5+Cz9d8WI56z67FiL2uOHLuZUmmEFig=) 4: 326131343a373538313a6632303a3a2f34382d3438203d3e20313533313736.roa (hash: Q+SHdUagvI6KZ73P7qEzwFM/MmpC3zK1RzbKHzMJDSM=) 5: 326131343a373538313a6632303a3a2f34342d3434203d3e20323135303834.roa (hash: ikRuOA2n8u4zq4qR5S8PkgRSZxYIGPGee0tyFklQIEM=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/1/52285B8754F215EBEAB614DEB86E66DA3B37320C.crl rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/1/52285B8754F215EBEAB614DEB86E66DA3B37320C.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/52285B8754F215EBEAB614DEB86E66DA3B37320C.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 24 Oct 2025 19:43:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:c1:be:fc:1c:8d:49:a0:b0:02:2c:58:b1:db:f6:29:01:30:06:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=52285B8754F215EBEAB614DEB86E66DA3B37320C Validity Not Before: Oct 23 19:16:23 2025 GMT Not After : Oct 24 19:43:23 2025 GMT Subject: CN=CA8A531D79987BEFFB336A59B30F55E17AFCCCC6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:ec:a2:57:ed:41:c4:20:f4:7e:2b:59:1a:72: 03:c6:56:cb:fe:9e:a5:5a:33:63:79:01:28:4a:58: f8:07:e3:e9:2f:18:ca:55:f4:b9:63:49:c0:07:3b: 65:f5:d4:26:00:72:67:13:a6:18:37:ff:4c:01:ce: d0:c4:dd:f7:a6:cb:0d:f8:ec:16:68:98:88:b9:36: f4:2b:00:c6:f2:36:d8:bb:9c:a2:74:2e:cd:20:c4: 0f:e4:ba:43:47:fc:a2:1e:9b:0d:b1:b4:4c:30:1a: 2d:54:c0:4e:7f:ca:59:16:f6:3a:24:28:88:3a:29: fe:e2:1c:c8:ed:8f:9f:62:37:81:3d:4d:46:bd:75: 90:c4:84:07:97:84:f7:0a:90:67:41:42:24:e3:5e: 6c:17:75:15:fc:69:4b:a5:a1:b4:81:ea:3f:91:e8: 2a:fe:6b:52:ac:d1:27:d8:24:d0:e3:58:33:07:dd: 25:f7:ed:99:0b:f8:03:54:0a:1c:18:9d:7d:f8:78: b3:6c:0e:e1:f2:e8:42:2b:eb:e7:57:ab:6c:f6:e2: 24:fb:25:e3:d1:69:2c:17:0e:5d:87:0f:8c:45:21: 43:78:be:76:c8:bc:43:a1:67:9d:11:35:11:8d:2b: 02:4c:31:99:37:0f:bf:c5:44:52:d5:a8:8c:cd:89: 16:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:8A:53:1D:79:98:7B:EF:FB:33:6A:59:B3:0F:55:E1:7A:FC:CC:C6 X509v3 Authority Key Identifier: keyid:52:28:5B:87:54:F2:15:EB:EA:B6:14:DE:B8:6E:66:DA:3B:37:32:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/1/52285B8754F215EBEAB614DEB86E66DA3B37320C.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/52285B8754F215EBEAB614DEB86E66DA3B37320C.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/1/52285B8754F215EBEAB614DEB86E66DA3B37320C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:a8:1e:1e:6d:26:e1:92:1d:c2:19:b6:8d:f8:ba:8e:95:4e: 57:25:32:42:12:de:ba:61:ed:44:1c:ae:b9:68:f4:c7:b6:11: dd:9b:38:e1:12:71:f6:7d:67:73:18:1f:ab:df:af:2c:f5:e5: 94:97:03:df:09:25:65:69:ec:ff:77:a8:ec:0d:34:fa:8d:02: da:d5:23:05:36:33:36:83:ec:b3:59:3a:4e:74:db:de:94:8d: 20:52:6e:c4:6b:9b:e1:a9:c0:34:c5:8a:2b:c5:d9:23:b6:1d: 7d:00:2f:cd:ec:cf:ba:0f:f8:7b:ab:57:9d:e0:0e:c2:26:02: e6:3c:16:e5:6d:4b:5a:48:08:c7:cf:8e:93:33:50:36:2f:aa: 52:ac:a3:b5:45:4d:6d:9a:80:03:53:b1:4e:bb:4d:93:bb:b3: 57:33:dc:3c:15:41:04:50:99:9a:dd:7b:74:36:ca:c9:90:20: c6:46:f4:0d:d4:a8:61:21:c3:33:3c:9f:d5:12:58:89:8c:19: 5f:3a:94:63:f1:7f:2c:ef:ad:77:c2:29:79:4f:b6:76:fc:b6: 57:35:7e:5e:27:ab:a3:4a:5b:99:38:ba:c4:86:5f:54:a9:92: 93:c6:0f:5f:50:39:d5:60:ac:ea:6b:22:6a:0d:58:92:5e:6b: c1:5c:97:81 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUAcG+/ByNSaCwAixYsdv2KQEwBuIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTIyODVCODc1NEYyMTVFQkVBQjYxNERFQjg2RTY2REEz QjM3MzIwQzAeFw0yNTEwMjMxOTE2MjNaFw0yNTEwMjQxOTQzMjNaMDMxMTAvBgNV BAMTKENBOEE1MzFENzk5ODdCRUZGQjMzNkE1OUIzMEY1NUUxN0FGQ0NDQzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC07KJX7UHEIPR+K1kacgPGVsv+ nqVaM2N5AShKWPgH4+kvGMpV9LljScAHO2X11CYAcmcTphg3/0wBztDE3femyw34 7BZomIi5NvQrAMbyNti7nKJ0Ls0gxA/kukNH/KIemw2xtEwwGi1UwE5/ylkW9jok KIg6Kf7iHMjtj59iN4E9TUa9dZDEhAeXhPcKkGdBQiTjXmwXdRX8aUulobSB6j+R 6Cr+a1Ks0SfYJNDjWDMH3SX37ZkL+ANUChwYnX34eLNsDuHy6EIr6+dXq2z24iT7 JePRaSwXDl2HD4xFIUN4vnbIvEOhZ50RNRGNKwJMMZk3D7/FRFLVqIzNiRYnAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUyopTHXmYe+/7M2pZsw9V4Xr8zMYwHwYDVR0j BBgwFoAUUihbh1TyFevqthTeuG5m2js3MgwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOGQ1Y2QxNGUtNWY2My00ZjFjLTk0ZTMtMjcwNTBjMjY2 NDgwLzEvNTIyODVCODc1NEYyMTVFQkVBQjYxNERFQjg2RTY2REEzQjM3MzIwQy5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC81MjI4NUI4NzU0RjIxNUVCRUFCNjE0REVC ODZFNjZEQTNCMzczMjBDLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzhkNWNkMTRlLTVmNjMtNGYxYy05NGUzLTI3MDUwYzI2NjQ4MC8xLzUyMjg1Qjg3 NTRGMjE1RUJFQUI2MTRERUI4NkU2NkRBM0IzNzMyMEMubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAoqB4e bSbhkh3CGbaN+LqOlU5XJTJCEt66Ye1EHK65aPTHthHdmzjhEnH2fWdzGB+r368s 9eWUlwPfCSVlaez/d6jsDTT6jQLa1SMFNjM2g+yzWTpOdNvelI0gUm7Ea5vhqcA0 xYorxdkjth19AC/N7M+6D/h7q1ed4A7CJgLmPBblbUtaSAjHz46TM1A2L6pSrKO1 RU1tmoADU7FOu02Tu7NXM9w8FUEEUJma3Xt0NsrJkCDGRvQN1KhhIcMzPJ/VEliJ jBlfOpRj8X8s7613wil5T7Z2/LZXNX5eJ6ujSluZOLrEhl9UqZKTxg9fUDnVYKzq ayJqDViSXmvBXJeB -----END CERTIFICATE-----Generated at Fri Oct 24 04:31:03 2025 by rpki-client