$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/1/52285B8754F215EBEAB614DEB86E66DA3B37320C.mft File: 52285B8754F215EBEAB614DEB86E66DA3B37320C.mft (raw, json) Hash identifier: z/+Uf6+6pMSHPJ1JKeRYTHXX2mBm/OYYzKcynt2+GjA= Subject key identifier: 0E:EE:9A:03:83:E6:3F:07:B6:0B:14:06:EA:74:A0:BC:AB:56:97:B5 Authority key identifier: 52:28:5B:87:54:F2:15:EB:EA:B6:14:DE:B8:6E:66:DA:3B:37:32:0C Certificate issuer: /CN=52285B8754F215EBEAB614DEB86E66DA3B37320C Certificate serial: 3996F67ED4714E22629B1CFC22E068FB26C08A04 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/52285B8754F215EBEAB614DEB86E66DA3B37320C.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/1/52285B8754F215EBEAB614DEB86E66DA3B37320C.mft Manifest number: 02BE Signing time: Sat 14 Mar 2026 00:10:07 +0000 Manifest this update: Sat 14 Mar 2026 00:05:07 +0000 Manifest next update: Sun 15 Mar 2026 00:22:07 +0000 Files and hashes: 1: 52285B8754F215EBEAB614DEB86E66DA3B37320C.crl (hash: 3DeUwmL14h1R3T5udwWeBvhjg+yYR6s870Y3MJG0T+U=) 2: 326131343a373538313a6130303a3a2f34302d3430203d3e20323135303834.roa (hash: 6SMGzy0qxU/C5+Cz9d8WI56z67FiL2uOHLuZUmmEFig=) 3: 326131343a373538313a623030303a3a2f33362d3336203d3e20323135303834.roa (hash: 8Iv1HdyRUhjcvQFIVfomOSyv77EzHn71qEiaLSvjvAE=) 4: 326131343a373538313a6632303a3a2f34382d3438203d3e20313533313736.roa (hash: Q+SHdUagvI6KZ73P7qEzwFM/MmpC3zK1RzbKHzMJDSM=) 5: 326131343a373538313a6632303a3a2f34342d3434203d3e20323135303834.roa (hash: ikRuOA2n8u4zq4qR5S8PkgRSZxYIGPGee0tyFklQIEM=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/1/52285B8754F215EBEAB614DEB86E66DA3B37320C.crl rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/1/52285B8754F215EBEAB614DEB86E66DA3B37320C.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/52285B8754F215EBEAB614DEB86E66DA3B37320C.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 15 Mar 2026 00:22:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:96:f6:7e:d4:71:4e:22:62:9b:1c:fc:22:e0:68:fb:26:c0:8a:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=52285B8754F215EBEAB614DEB86E66DA3B37320C Validity Not Before: Mar 14 00:05:07 2026 GMT Not After : Mar 15 00:22:07 2026 GMT Subject: CN=0EEE9A0383E63F07B60B1406EA74A0BCAB5697B5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:91:06:b9:0b:e4:bd:d8:74:0c:29:5c:ba:37: 7c:4e:88:c8:f8:c5:e0:cc:84:cd:96:04:82:5c:ee: b2:de:f9:1f:e4:76:a4:98:18:35:aa:bb:f7:c6:cd: 65:9e:7d:b1:94:22:34:e3:a5:d0:bd:22:6e:19:2b: 69:4f:c6:4f:95:35:95:ad:d8:60:f5:1f:b8:8a:84: 3b:dd:7e:b4:5b:9f:be:82:41:f8:ea:bd:6d:43:92: 59:a7:98:27:f3:d1:3e:e4:99:2e:10:b7:fd:30:0b: bc:8d:7b:07:9f:e3:2a:2d:e8:d4:99:d3:de:e0:74: 1b:d1:8e:f9:2f:96:19:2c:b0:f5:cf:b7:67:c2:39: e4:26:e0:63:3b:b7:d5:01:ab:57:23:b2:1b:88:bb: 9a:df:28:37:a7:f6:a8:9b:4a:7f:80:30:5a:d9:e0: a0:af:ae:e3:c5:6f:c6:05:ae:77:47:b7:2a:20:f5: 3c:00:72:b8:f8:64:69:bd:33:05:c3:c4:30:09:0d: 54:07:4e:aa:a0:98:6c:bf:97:7e:d7:e0:47:21:dc: b5:22:e5:4b:7c:b5:6d:70:41:43:a0:77:eb:51:a5: a2:81:d7:7f:4e:0d:ca:31:c1:46:f5:4e:d4:87:2f: e9:c1:01:a9:e4:a5:2c:0e:d2:d7:78:c2:d5:0c:40: 8e:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:EE:9A:03:83:E6:3F:07:B6:0B:14:06:EA:74:A0:BC:AB:56:97:B5 X509v3 Authority Key Identifier: keyid:52:28:5B:87:54:F2:15:EB:EA:B6:14:DE:B8:6E:66:DA:3B:37:32:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/1/52285B8754F215EBEAB614DEB86E66DA3B37320C.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/52285B8754F215EBEAB614DEB86E66DA3B37320C.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/1/52285B8754F215EBEAB614DEB86E66DA3B37320C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8e:2e:fa:eb:b4:62:50:04:9f:70:d2:fb:58:af:8e:f3:96:f0: 6e:62:ad:2e:20:b4:05:a1:70:d9:d8:97:83:ab:41:c7:6e:0e: c1:4c:3d:53:71:bd:2f:23:ec:b6:a9:10:0e:ca:c5:45:13:98: e3:73:a7:4b:f7:db:08:12:60:1b:70:bb:0f:bd:09:87:ed:a2: f0:5c:b4:75:a8:ee:58:30:5c:0d:e3:02:50:09:71:77:c6:79: 42:aa:30:35:77:a9:0e:a5:a0:05:65:97:25:bf:3c:27:1b:e0: 8a:7a:bf:eb:18:67:c9:af:9a:60:a2:09:22:b9:a4:5e:72:0d: c8:61:a3:38:8a:7e:e0:8c:f2:35:48:4d:7a:1f:ba:24:43:ac: 41:68:26:ae:9c:63:57:5c:dc:c3:ca:13:9a:07:6b:ff:ba:31: 74:be:cc:51:93:fb:b8:8f:6c:96:3e:18:b8:9b:37:6e:05:b9: 2d:cf:23:27:85:8c:cb:44:e5:2e:02:72:3a:93:23:dc:14:f0: 93:e8:5f:dd:2c:13:a7:68:92:aa:be:76:6f:19:49:9f:bb:f4: 0e:10:75:78:92:4b:bd:9f:69:48:07:76:96:f1:62:e0:a3:80: 76:0f:82:51:24:99:68:a7:01:fa:08:fd:d8:f4:b8:73:a4:9b: cd:34:9c:94 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUOZb2ftRxTiJimxz8IuBo+ybAigQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTIyODVCODc1NEYyMTVFQkVBQjYxNERFQjg2RTY2REEz QjM3MzIwQzAeFw0yNjAzMTQwMDA1MDdaFw0yNjAzMTUwMDIyMDdaMDMxMTAvBgNV BAMTKDBFRUU5QTAzODNFNjNGMDdCNjBCMTQwNkVBNzRBMEJDQUI1Njk3QjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIkQa5C+S92HQMKVy6N3xOiMj4 xeDMhM2WBIJc7rLe+R/kdqSYGDWqu/fGzWWefbGUIjTjpdC9Im4ZK2lPxk+VNZWt 2GD1H7iKhDvdfrRbn76CQfjqvW1DklmnmCfz0T7kmS4Qt/0wC7yNewef4yot6NSZ 097gdBvRjvkvlhkssPXPt2fCOeQm4GM7t9UBq1cjshuIu5rfKDen9qibSn+AMFrZ 4KCvruPFb8YFrndHtyog9TwAcrj4ZGm9MwXDxDAJDVQHTqqgmGy/l37X4Ech3LUi 5Ut8tW1wQUOgd+tRpaKB139ODcoxwUb1TtSHL+nBAankpSwO0td4wtUMQI5VAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUDu6aA4PmPwe2CxQG6nSgvKtWl7UwHwYDVR0j BBgwFoAUUihbh1TyFevqthTeuG5m2js3MgwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOGQ1Y2QxNGUtNWY2My00ZjFjLTk0ZTMtMjcwNTBjMjY2 NDgwLzEvNTIyODVCODc1NEYyMTVFQkVBQjYxNERFQjg2RTY2REEzQjM3MzIwQy5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC81MjI4NUI4NzU0RjIxNUVCRUFCNjE0REVC ODZFNjZEQTNCMzczMjBDLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzhkNWNkMTRlLTVmNjMtNGYxYy05NGUzLTI3MDUwYzI2NjQ4MC8xLzUyMjg1Qjg3 NTRGMjE1RUJFQUI2MTRERUI4NkU2NkRBM0IzNzMyMEMubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCOLvrr tGJQBJ9w0vtYr47zlvBuYq0uILQFoXDZ2JeDq0HHbg7BTD1Tcb0vI+y2qRAOysVF E5jjc6dL99sIEmAbcLsPvQmH7aLwXLR1qO5YMFwN4wJQCXF3xnlCqjA1d6kOpaAF ZZclvzwnG+CKer/rGGfJr5pgogkiuaRecg3IYaM4in7gjPI1SE16H7okQ6xBaCau nGNXXNzDyhOaB2v/ujF0vsxRk/u4j2yWPhi4mzduBbktzyMnhYzLROUuAnI6kyPc FPCT6F/dLBOnaJKqvnZvGUmfu/QOEHV4kku9n2lIB3aW8WLgo4B2D4JRJJlopwH6 CP3Y9LhzpJvNNJyU -----END CERTIFICATE-----Generated at Sat Mar 14 14:38:59 2026 by rpki-client