$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/1/52285B8754F215EBEAB614DEB86E66DA3B37320C.mft File: 52285B8754F215EBEAB614DEB86E66DA3B37320C.mft (raw, json) Hash identifier: Z9xNDLhAdLNo4qFhGGzdmEUl8DDV7mwPuUGkSBj6dvo= Subject key identifier: 50:23:E7:47:5A:21:E9:5C:23:F5:89:36:91:03:93:7E:A3:0A:D6:25 Authority key identifier: 52:28:5B:87:54:F2:15:EB:EA:B6:14:DE:B8:6E:66:DA:3B:37:32:0C Certificate issuer: /CN=52285B8754F215EBEAB614DEB86E66DA3B37320C Certificate serial: 104F3A3D539A40D57CC1FF0AE48DE5F464BDEBBD Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/52285B8754F215EBEAB614DEB86E66DA3B37320C.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/1/52285B8754F215EBEAB614DEB86E66DA3B37320C.mft Manifest number: 03DF Signing time: Thu 15 Oct 2026 13:58:16 +0000 Manifest this update: Thu 15 Oct 2026 13:53:16 +0000 Manifest next update: Fri 16 Oct 2026 15:33:16 +0000 Files and hashes: 1: 326131343a373538313a6632303a3a2f34342d3434203d3e20323135303834.roa (hash: /AaiYsKWuqRgDvvUADUKcufSQBbG5oanOxBGHWa2vLA=) 2: 326131343a373538313a6632303a3a2f34382d3438203d3e20313533313736.roa (hash: 8KUcwV+ZBGNa1TWr9TAbw1mQOwKknHp9Hus4NY1ZuW4=) 3: 52285B8754F215EBEAB614DEB86E66DA3B37320C.crl (hash: VogE+q8812U+9qh3dhBbVc5A4XoyeumLMS1vrVht7+0=) 4: 326131343a373538313a6130303a3a2f34302d3430203d3e20323135303834.roa (hash: AMf8FFzkyNRTCLs/i7swnRAL3WtJKbW6+Q9+QH2tffk=) 5: 326131343a373538313a623030303a3a2f33362d3336203d3e20323135303834.roa (hash: N9L4nbL2Uo4P069vOshVKkJFc321LxJpH/q85ffpRGI=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/1/52285B8754F215EBEAB614DEB86E66DA3B37320C.crl rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/1/52285B8754F215EBEAB614DEB86E66DA3B37320C.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/52285B8754F215EBEAB614DEB86E66DA3B37320C.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 16 Oct 2026 08:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:4f:3a:3d:53:9a:40:d5:7c:c1:ff:0a:e4:8d:e5:f4:64:bd:eb:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=52285B8754F215EBEAB614DEB86E66DA3B37320C Validity Not Before: Oct 15 13:53:16 2026 GMT Not After : Oct 16 15:33:16 2026 GMT Subject: CN=5023E7475A21E95C23F589369103937EA30AD625 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:fe:c6:d7:7d:43:85:30:f9:f3:d9:36:27:80: 7a:b9:a5:7b:0b:e5:96:ae:a0:39:38:11:5c:90:f3: 64:b5:89:3b:93:11:6c:f4:10:bd:c5:3b:4f:73:1e: 69:97:48:ef:a9:6d:0d:8f:b8:be:dd:31:d7:46:4d: 48:6b:4a:c9:be:57:65:8a:3e:c0:85:c2:0f:90:16: 9e:64:f7:ac:c8:14:eb:a3:55:3c:58:8f:dd:1f:ae: 57:d2:66:7c:b5:40:9b:7e:df:31:8f:e9:f3:05:f8: 57:32:ba:82:55:99:68:32:39:36:e4:7f:0c:62:4c: 47:72:d7:c7:7f:f3:54:cb:52:24:38:73:a7:94:26: 60:c1:0f:ed:f7:5d:7b:9a:cf:cf:5a:80:0f:ce:2b: a8:e0:45:9d:f6:65:cb:fe:15:a4:b0:82:41:8b:41: 2e:41:6a:1f:a4:c2:04:81:19:85:10:9b:1a:a2:21: 70:6e:c6:63:f8:e3:2e:13:ea:fb:4b:0a:50:c4:7a: a8:d9:15:15:a6:fa:25:d2:df:5a:c5:7f:2f:e2:4a: f2:17:a7:88:c7:6d:e7:4c:60:ea:d0:23:32:4c:28: 2c:75:6f:22:d1:83:45:0a:84:53:fd:ee:30:49:df: df:73:49:9f:b3:18:15:47:1a:cd:96:ad:5a:ab:d3: d8:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:23:E7:47:5A:21:E9:5C:23:F5:89:36:91:03:93:7E:A3:0A:D6:25 X509v3 Authority Key Identifier: keyid:52:28:5B:87:54:F2:15:EB:EA:B6:14:DE:B8:6E:66:DA:3B:37:32:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/1/52285B8754F215EBEAB614DEB86E66DA3B37320C.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/52285B8754F215EBEAB614DEB86E66DA3B37320C.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/1/52285B8754F215EBEAB614DEB86E66DA3B37320C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 98:a8:b1:d4:da:5a:86:4a:e4:20:b9:75:66:c8:b7:7b:83:63: 9d:f4:e6:23:30:c6:a8:99:56:38:1e:18:6b:b7:c0:a2:3f:bd: 37:64:f8:79:d5:4e:ee:a5:48:3d:0d:39:89:7b:89:61:83:01: e2:81:3d:85:c4:4d:84:d8:2b:7c:33:cf:6a:ac:65:a8:c1:9d: 1a:78:21:e7:56:2f:25:22:b8:4d:55:5a:5b:2b:39:91:34:57: 1c:b5:8f:4f:b6:76:a3:ff:61:27:53:32:77:fb:1f:a6:52:e6: 9f:22:09:3c:c2:58:06:37:4e:c1:9e:8d:ed:47:45:c9:b7:ce: 25:72:06:41:3a:9b:92:80:ae:68:ba:90:dd:e5:d5:cf:b3:45: e9:1e:69:d3:bc:14:e4:61:a4:13:55:d7:4d:ec:2a:25:72:3d: b9:e9:53:fc:3d:e3:14:d9:ed:70:7f:7c:90:4e:bf:a9:10:f8: be:54:91:29:eb:d2:ac:72:0f:21:6a:d7:5a:05:e3:50:1b:1c: d1:5e:ce:62:15:79:66:cb:d0:d7:18:4d:46:04:6b:e7:b9:45: e2:f2:a1:2d:b2:30:44:d0:30:05:8c:2a:6d:5d:71:fa:6d:3b: 25:9c:99:ec:c4:4e:c9:7b:7b:7c:60:34:1f:5a:e6:78:03:c1: 2f:05:7f:40 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUEE86PVOaQNV8wf8K5I3l9GS9670wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTIyODVCODc1NEYyMTVFQkVBQjYxNERFQjg2RTY2REEz QjM3MzIwQzAeFw0yNjEwMTUxMzUzMTZaFw0yNjEwMTYxNTMzMTZaMDMxMTAvBgNV BAMTKDUwMjNFNzQ3NUEyMUU5NUMyM0Y1ODkzNjkxMDM5MzdFQTMwQUQ2MjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCS/sbXfUOFMPnz2TYngHq5pXsL 5ZauoDk4EVyQ82S1iTuTEWz0EL3FO09zHmmXSO+pbQ2PuL7dMddGTUhrSsm+V2WK PsCFwg+QFp5k96zIFOujVTxYj90frlfSZny1QJt+3zGP6fMF+FcyuoJVmWgyOTbk fwxiTEdy18d/81TLUiQ4c6eUJmDBD+33XXuaz89agA/OK6jgRZ32Zcv+FaSwgkGL QS5Bah+kwgSBGYUQmxqiIXBuxmP44y4T6vtLClDEeqjZFRWm+iXS31rFfy/iSvIX p4jHbedMYOrQIzJMKCx1byLRg0UKhFP97jBJ399zSZ+zGBVHGs2WrVqr09jXAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUUCPnR1oh6Vwj9Yk2kQOTfqMK1iUwHwYDVR0j BBgwFoAUUihbh1TyFevqthTeuG5m2js3MgwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOGQ1Y2QxNGUtNWY2My00ZjFjLTk0ZTMtMjcwNTBjMjY2 NDgwLzEvNTIyODVCODc1NEYyMTVFQkVBQjYxNERFQjg2RTY2REEzQjM3MzIwQy5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC81MjI4NUI4NzU0RjIxNUVCRUFCNjE0REVC ODZFNjZEQTNCMzczMjBDLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzhkNWNkMTRlLTVmNjMtNGYxYy05NGUzLTI3MDUwYzI2NjQ4MC8xLzUyMjg1Qjg3 NTRGMjE1RUJFQUI2MTRERUI4NkU2NkRBM0IzNzMyMEMubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCYqLHU 2lqGSuQguXVmyLd7g2Od9OYjMMaomVY4Hhhrt8CiP703ZPh51U7upUg9DTmJe4lh gwHigT2FxE2E2Ct8M89qrGWowZ0aeCHnVi8lIrhNVVpbKzmRNFcctY9Ptnaj/2En UzJ3+x+mUuafIgk8wlgGN07Bno3tR0XJt84lcgZBOpuSgK5oupDd5dXPs0XpHmnT vBTkYaQTVddN7Colcj256VP8PeMU2e1wf3yQTr+pEPi+VJEp69Kscg8hatdaBeNQ GxzRXs5iFXlmy9DXGE1GBGvnuUXi8qEtsjBE0DAFjCptXXH6bTslnJnsxE7Je3t8 YDQfWuZ4A8EvBX9A -----END CERTIFICATE-----Generated at Thu Oct 15 19:06:52 2026 by rpki-client