$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/1/52285B8754F215EBEAB614DEB86E66DA3B37320C.mft File: 52285B8754F215EBEAB614DEB86E66DA3B37320C.mft (raw, json) Hash identifier: MFD1icFIIkxFLNpOAE52rB9h2r8S47W8oSqvpdDnGO8= Subject key identifier: 5A:C7:73:6E:E0:98:0E:AD:D3:6D:41:98:73:F7:26:84:DC:C0:02:B3 Authority key identifier: 52:28:5B:87:54:F2:15:EB:EA:B6:14:DE:B8:6E:66:DA:3B:37:32:0C Certificate issuer: /CN=52285B8754F215EBEAB614DEB86E66DA3B37320C Certificate serial: 512217D3E0C16E4E2245BA0D1E5884518B96B403 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/52285B8754F215EBEAB614DEB86E66DA3B37320C.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/1/52285B8754F215EBEAB614DEB86E66DA3B37320C.mft Manifest number: 039B Signing time: Tue 25 Aug 2026 23:26:48 +0000 Manifest this update: Tue 25 Aug 2026 23:21:48 +0000 Manifest next update: Thu 27 Aug 2026 01:03:48 +0000 Files and hashes: 1: 52285B8754F215EBEAB614DEB86E66DA3B37320C.crl (hash: HvZrhMdgCKtoJvv0PKMpDnYjmpHTOtwtHqgIENTg33Q=) 2: 326131343a373538313a6130303a3a2f34302d3430203d3e20323135303834.roa (hash: AMf8FFzkyNRTCLs/i7swnRAL3WtJKbW6+Q9+QH2tffk=) 3: 326131343a373538313a6632303a3a2f34342d3434203d3e20323135303834.roa (hash: /AaiYsKWuqRgDvvUADUKcufSQBbG5oanOxBGHWa2vLA=) 4: 326131343a373538313a6632303a3a2f34382d3438203d3e20313533313736.roa (hash: 8KUcwV+ZBGNa1TWr9TAbw1mQOwKknHp9Hus4NY1ZuW4=) 5: 326131343a373538313a623030303a3a2f33362d3336203d3e20323135303834.roa (hash: N9L4nbL2Uo4P069vOshVKkJFc321LxJpH/q85ffpRGI=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/1/52285B8754F215EBEAB614DEB86E66DA3B37320C.crl rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/1/52285B8754F215EBEAB614DEB86E66DA3B37320C.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/52285B8754F215EBEAB614DEB86E66DA3B37320C.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 27 Aug 2026 01:03:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:22:17:d3:e0:c1:6e:4e:22:45:ba:0d:1e:58:84:51:8b:96:b4:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=52285B8754F215EBEAB614DEB86E66DA3B37320C Validity Not Before: Aug 25 23:21:48 2026 GMT Not After : Aug 27 01:03:48 2026 GMT Subject: CN=5AC7736EE0980EADD36D419873F72684DCC002B3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:54:41:ea:ef:48:e2:8d:c7:cf:3c:ec:88:20: 4a:a5:03:bf:7c:12:73:80:b2:24:2b:ae:57:1a:e1: 64:ed:f9:e2:f1:a8:9f:08:c2:51:ed:f9:85:54:85: 5e:7a:fa:70:cc:4d:2c:f5:ee:d1:74:89:d9:d9:28: de:71:77:bc:3e:3c:de:53:11:98:e7:61:ec:8c:da: d2:e7:6a:d9:31:36:1f:60:4c:f5:41:6f:26:2d:da: b9:73:34:af:9c:83:d2:d6:e7:57:3d:37:65:aa:54: e4:72:40:ae:52:64:b7:83:40:af:66:de:bf:f9:b8: 6c:df:2f:7a:fb:a4:8b:5d:71:6a:09:41:35:26:80: 62:5f:0e:41:8a:8e:83:09:35:c7:ad:e5:fa:68:a5: 00:3a:bc:77:3b:d2:ef:fd:33:1e:b6:b0:15:f1:15: 8a:5b:6d:35:1f:cb:62:0b:9e:89:e8:59:cb:7c:1b: c8:37:55:81:76:c8:00:0b:a1:f7:3c:3d:45:f0:37: b9:3a:00:a2:04:72:61:da:2e:53:d7:c0:9a:c3:24: a3:ef:2d:2b:41:2c:6b:bf:08:b0:70:0d:92:54:b7: e0:92:90:ac:50:a5:4d:bb:72:1c:cd:05:25:30:bf: 02:97:fe:5e:e8:52:e0:bd:b5:60:38:fd:3f:fb:f1: 90:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:C7:73:6E:E0:98:0E:AD:D3:6D:41:98:73:F7:26:84:DC:C0:02:B3 X509v3 Authority Key Identifier: keyid:52:28:5B:87:54:F2:15:EB:EA:B6:14:DE:B8:6E:66:DA:3B:37:32:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/1/52285B8754F215EBEAB614DEB86E66DA3B37320C.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/52285B8754F215EBEAB614DEB86E66DA3B37320C.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/1/52285B8754F215EBEAB614DEB86E66DA3B37320C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:3c:35:90:d8:3e:a3:30:ff:34:53:73:b9:57:c8:cb:ee:fb: 18:f7:be:a1:af:02:6b:5f:0e:0b:21:6b:1f:b0:3e:55:26:29: e8:20:43:9d:2e:46:5b:b4:1f:f3:cb:ff:7c:39:db:b5:c8:43: bd:a7:87:31:b6:3b:ad:01:f3:13:01:8c:77:23:56:92:26:7f: 17:ba:b9:b4:d5:5a:be:95:55:25:2c:9a:02:d0:52:8d:f1:57: d6:0a:7d:83:0a:48:8e:1f:64:f2:47:18:83:80:91:e9:9c:8e: 8b:60:9f:1d:54:03:57:2e:54:ab:76:aa:f1:ea:28:4d:04:74: 11:1a:c3:0e:c4:f7:54:91:32:e7:a4:72:de:c6:60:5d:fb:77: c8:d6:a8:2c:de:e7:c7:74:df:27:77:b7:f7:5c:36:4d:6c:3c: eb:e5:c4:99:40:f0:c2:bb:a1:22:a5:bd:83:59:0f:a1:d5:2a: 73:fe:f4:c0:6e:ef:de:e5:86:a9:b6:a9:ac:09:c4:8d:06:e1: 89:c1:4f:6f:de:74:b9:0e:a3:2c:b8:fd:45:e4:4d:10:48:d5: f0:eb:c0:41:a2:d5:0f:08:1c:1c:59:72:96:36:61:89:50:43: c6:35:df:b7:25:cb:6d:f2:53:89:a6:e1:17:9b:22:b5:6f:63: 78:eb:d0:29 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUUSIX0+DBbk4iRboNHliEUYuWtAMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTIyODVCODc1NEYyMTVFQkVBQjYxNERFQjg2RTY2REEz QjM3MzIwQzAeFw0yNjA4MjUyMzIxNDhaFw0yNjA4MjcwMTAzNDhaMDMxMTAvBgNV BAMTKDVBQzc3MzZFRTA5ODBFQUREMzZENDE5ODczRjcyNjg0RENDMDAyQjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCXVEHq70jijcfPPOyIIEqlA798 EnOAsiQrrlca4WTt+eLxqJ8IwlHt+YVUhV56+nDMTSz17tF0idnZKN5xd7w+PN5T EZjnYeyM2tLnatkxNh9gTPVBbyYt2rlzNK+cg9LW51c9N2WqVORyQK5SZLeDQK9m 3r/5uGzfL3r7pItdcWoJQTUmgGJfDkGKjoMJNcet5fpopQA6vHc70u/9Mx62sBXx FYpbbTUfy2ILnonoWct8G8g3VYF2yAALofc8PUXwN7k6AKIEcmHaLlPXwJrDJKPv LStBLGu/CLBwDZJUt+CSkKxQpU27chzNBSUwvwKX/l7oUuC9tWA4/T/78ZDpAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUWsdzbuCYDq3TbUGYc/cmhNzAArMwHwYDVR0j BBgwFoAUUihbh1TyFevqthTeuG5m2js3MgwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOGQ1Y2QxNGUtNWY2My00ZjFjLTk0ZTMtMjcwNTBjMjY2 NDgwLzEvNTIyODVCODc1NEYyMTVFQkVBQjYxNERFQjg2RTY2REEzQjM3MzIwQy5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC81MjI4NUI4NzU0RjIxNUVCRUFCNjE0REVC ODZFNjZEQTNCMzczMjBDLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzhkNWNkMTRlLTVmNjMtNGYxYy05NGUzLTI3MDUwYzI2NjQ4MC8xLzUyMjg1Qjg3 NTRGMjE1RUJFQUI2MTRERUI4NkU2NkRBM0IzNzMyMEMubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBqPDWQ 2D6jMP80U3O5V8jL7vsY976hrwJrXw4LIWsfsD5VJinoIEOdLkZbtB/zy/98Odu1 yEO9p4cxtjutAfMTAYx3I1aSJn8Xurm01Vq+lVUlLJoC0FKN8VfWCn2DCkiOH2Ty RxiDgJHpnI6LYJ8dVANXLlSrdqrx6ihNBHQRGsMOxPdUkTLnpHLexmBd+3fI1qgs 3ufHdN8nd7f3XDZNbDzr5cSZQPDCu6Eipb2DWQ+h1Spz/vTAbu/e5YaptqmsCcSN BuGJwU9v3nS5DqMsuP1F5E0QSNXw68BBotUPCBwcWXKWNmGJUEPGNd+3Jctt8lOJ puEXmyK1b2N469Ap -----END CERTIFICATE-----Generated at Wed Aug 26 18:00:01 2026 by rpki-client