$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/1/52285B8754F215EBEAB614DEB86E66DA3B37320C.mft File: 52285B8754F215EBEAB614DEB86E66DA3B37320C.mft (raw, json) Hash identifier: eEQNmYQz3RxAqK5UACZfsFRGcYh8BJVzNkGAZKLi5V4= Subject key identifier: 67:88:E7:0B:18:E9:86:2B:6F:E4:A0:DD:1E:93:E5:2D:60:F2:30:14 Authority key identifier: 52:28:5B:87:54:F2:15:EB:EA:B6:14:DE:B8:6E:66:DA:3B:37:32:0C Certificate issuer: /CN=52285B8754F215EBEAB614DEB86E66DA3B37320C Certificate serial: 0B832447867E25D768A0D31CEE5FE0A0F6E91E1D Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/52285B8754F215EBEAB614DEB86E66DA3B37320C.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/1/52285B8754F215EBEAB614DEB86E66DA3B37320C.mft Manifest number: 034E Signing time: Sun 28 Jun 2026 18:52:30 +0000 Manifest this update: Sun 28 Jun 2026 18:47:30 +0000 Manifest next update: Mon 29 Jun 2026 19:21:30 +0000 Files and hashes: 1: 326131343a373538313a6632303a3a2f34342d3434203d3e20323135303834.roa (hash: /AaiYsKWuqRgDvvUADUKcufSQBbG5oanOxBGHWa2vLA=) 2: 326131343a373538313a623030303a3a2f33362d3336203d3e20323135303834.roa (hash: N9L4nbL2Uo4P069vOshVKkJFc321LxJpH/q85ffpRGI=) 3: 52285B8754F215EBEAB614DEB86E66DA3B37320C.crl (hash: iziWvJzs8D8dl8PLE+IEe+pZPQ0sLG2nHE1WCAUR5Cw=) 4: 326131343a373538313a6130303a3a2f34302d3430203d3e20323135303834.roa (hash: AMf8FFzkyNRTCLs/i7swnRAL3WtJKbW6+Q9+QH2tffk=) 5: 326131343a373538313a6632303a3a2f34382d3438203d3e20313533313736.roa (hash: 8KUcwV+ZBGNa1TWr9TAbw1mQOwKknHp9Hus4NY1ZuW4=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/1/52285B8754F215EBEAB614DEB86E66DA3B37320C.crl rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/1/52285B8754F215EBEAB614DEB86E66DA3B37320C.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/52285B8754F215EBEAB614DEB86E66DA3B37320C.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 29 Jun 2026 19:21:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:83:24:47:86:7e:25:d7:68:a0:d3:1c:ee:5f:e0:a0:f6:e9:1e:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=52285B8754F215EBEAB614DEB86E66DA3B37320C Validity Not Before: Jun 28 18:47:30 2026 GMT Not After : Jun 29 19:21:30 2026 GMT Subject: CN=6788E70B18E9862B6FE4A0DD1E93E52D60F23014 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:65:a0:7b:8a:4c:f1:d3:da:96:a2:f1:f5:9b: b6:a3:9c:8d:f9:cf:c5:39:ba:bc:05:c7:de:4a:86: c4:92:1c:3a:d8:95:d5:7f:b5:03:b3:07:02:f7:1e: e0:7c:37:4b:60:d6:59:ca:24:d5:e2:3a:af:1e:da: 04:b3:4e:00:61:8c:d8:f8:29:b2:ef:e6:de:05:17: b0:c5:ca:6e:4e:5e:5a:e1:6a:ab:2b:2e:5c:79:9c: 1f:fc:70:81:aa:30:8e:ec:76:0c:0e:b1:34:c7:0a: 10:57:3e:10:1b:82:82:b7:2f:60:57:57:fc:a5:12: 7f:a9:ee:f7:60:71:42:a6:dd:9e:7d:b0:21:83:aa: a1:33:fb:37:ed:07:1c:9e:8f:ef:d2:f1:24:54:24: a3:ba:13:d2:40:c3:2c:86:07:e1:d4:41:2b:27:f3: e4:fb:87:8c:9e:ff:42:da:3e:f7:d1:ca:17:0d:ee: d6:d7:23:87:ad:3d:63:b2:e0:3e:67:b4:5f:b9:40: b6:d1:ed:f2:f4:b6:0f:26:cb:00:44:ea:9e:c5:6f: 44:e5:12:e1:a9:ad:a9:b8:31:b4:35:df:bf:0c:81: 6a:83:35:0f:16:b2:c4:9c:23:4c:0a:ed:21:be:e4: aa:43:fd:9a:96:14:6e:67:e7:81:ce:a7:dd:ce:83: 5b:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:88:E7:0B:18:E9:86:2B:6F:E4:A0:DD:1E:93:E5:2D:60:F2:30:14 X509v3 Authority Key Identifier: keyid:52:28:5B:87:54:F2:15:EB:EA:B6:14:DE:B8:6E:66:DA:3B:37:32:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/1/52285B8754F215EBEAB614DEB86E66DA3B37320C.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/52285B8754F215EBEAB614DEB86E66DA3B37320C.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/1/52285B8754F215EBEAB614DEB86E66DA3B37320C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:c5:31:8a:3f:ba:1e:db:96:6e:ef:c9:f5:9f:2d:a4:5e:6d: d5:7e:5b:13:b2:bf:40:37:f6:2a:10:21:ef:35:54:b3:2c:53: 1c:f5:c9:16:f4:2e:bb:6e:61:fd:50:27:54:88:b4:13:3a:a3: 35:ca:53:10:87:ee:ea:d1:60:32:56:76:07:8a:9f:0e:2b:7c: b6:a8:30:4a:43:df:6c:28:df:28:65:bc:5f:0f:d6:d5:f9:09: 23:40:2c:56:f5:a4:18:9a:9e:52:14:56:37:8a:fb:91:c9:95: 23:7f:94:80:1d:9b:88:62:80:d4:46:a0:3c:f4:b4:23:51:f5: a4:24:42:30:16:45:1c:20:15:e3:c2:0d:a3:02:04:bd:ac:13: 19:bc:a0:a3:73:8e:40:fa:db:c6:6a:22:b3:0b:c5:c8:d5:b8: 34:0c:95:01:07:9d:62:be:b1:8c:ad:c1:02:c5:13:a6:f0:17: ea:11:a7:1d:72:40:2e:95:1b:a2:da:4a:9c:ef:17:e9:c4:ec: 40:32:e9:e9:30:ad:8b:c3:e0:6b:c5:89:45:ce:f6:b2:de:79: 46:53:97:49:82:91:71:73:47:a6:f8:59:9d:a5:13:fe:2d:fc: 6a:01:75:70:b3:d5:d4:85:08:36:1c:52:73:91:a6:4c:ec:9f: e4:2b:1b:ba -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUC4MkR4Z+JddooNMc7l/goPbpHh0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTIyODVCODc1NEYyMTVFQkVBQjYxNERFQjg2RTY2REEz QjM3MzIwQzAeFw0yNjA2MjgxODQ3MzBaFw0yNjA2MjkxOTIxMzBaMDMxMTAvBgNV BAMTKDY3ODhFNzBCMThFOTg2MkI2RkU0QTBERDFFOTNFNTJENjBGMjMwMTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJZaB7ikzx09qWovH1m7ajnI35 z8U5urwFx95KhsSSHDrYldV/tQOzBwL3HuB8N0tg1lnKJNXiOq8e2gSzTgBhjNj4 KbLv5t4FF7DFym5OXlrhaqsrLlx5nB/8cIGqMI7sdgwOsTTHChBXPhAbgoK3L2BX V/ylEn+p7vdgcUKm3Z59sCGDqqEz+zftBxyej+/S8SRUJKO6E9JAwyyGB+HUQSsn 8+T7h4ye/0LaPvfRyhcN7tbXI4etPWOy4D5ntF+5QLbR7fL0tg8mywBE6p7Fb0Tl EuGpram4MbQ1378MgWqDNQ8WssScI0wK7SG+5KpD/ZqWFG5n54HOp93Og1sPAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUZ4jnCxjphitv5KDdHpPlLWDyMBQwHwYDVR0j BBgwFoAUUihbh1TyFevqthTeuG5m2js3MgwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOGQ1Y2QxNGUtNWY2My00ZjFjLTk0ZTMtMjcwNTBjMjY2 NDgwLzEvNTIyODVCODc1NEYyMTVFQkVBQjYxNERFQjg2RTY2REEzQjM3MzIwQy5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC81MjI4NUI4NzU0RjIxNUVCRUFCNjE0REVC ODZFNjZEQTNCMzczMjBDLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzhkNWNkMTRlLTVmNjMtNGYxYy05NGUzLTI3MDUwYzI2NjQ4MC8xLzUyMjg1Qjg3 NTRGMjE1RUJFQUI2MTRERUI4NkU2NkRBM0IzNzMyMEMubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAkxTGK P7oe25Zu78n1ny2kXm3VflsTsr9AN/YqECHvNVSzLFMc9ckW9C67bmH9UCdUiLQT OqM1ylMQh+7q0WAyVnYHip8OK3y2qDBKQ99sKN8oZbxfD9bV+QkjQCxW9aQYmp5S FFY3ivuRyZUjf5SAHZuIYoDURqA89LQjUfWkJEIwFkUcIBXjwg2jAgS9rBMZvKCj c45A+tvGaiKzC8XI1bg0DJUBB51ivrGMrcECxROm8BfqEacdckAulRui2kqc7xfp xOxAMunpMK2Lw+BrxYlFzvay3nlGU5dJgpFxc0em+FmdpRP+LfxqAXVws9XUhQg2 HFJzkaZM7J/kKxu6 -----END CERTIFICATE-----Generated at Mon Jun 29 11:43:25 2026 by rpki-client