$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/1/52285B8754F215EBEAB614DEB86E66DA3B37320C.mft File: 52285B8754F215EBEAB614DEB86E66DA3B37320C.mft (raw, json) Hash identifier: mB55DedS6gI5OVlfZNY8l911qY8D9skV8SCpJ/TeofI= Subject key identifier: 73:A6:C4:CD:72:C2:0A:49:34:DD:31:5B:66:03:77:F2:5D:A1:B8:E9 Authority key identifier: 52:28:5B:87:54:F2:15:EB:EA:B6:14:DE:B8:6E:66:DA:3B:37:32:0C Certificate issuer: /CN=52285B8754F215EBEAB614DEB86E66DA3B37320C Certificate serial: 50C06DC5DFBAD98ACA132F0CDF01DACD868D8F7C Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/52285B8754F215EBEAB614DEB86E66DA3B37320C.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/1/52285B8754F215EBEAB614DEB86E66DA3B37320C.mft Manifest number: 0311 Signing time: Thu 14 May 2026 13:43:02 +0000 Manifest this update: Thu 14 May 2026 13:38:02 +0000 Manifest next update: Fri 15 May 2026 17:17:02 +0000 Files and hashes: 1: 326131343a373538313a6632303a3a2f34342d3434203d3e20323135303834.roa (hash: /AaiYsKWuqRgDvvUADUKcufSQBbG5oanOxBGHWa2vLA=) 2: 52285B8754F215EBEAB614DEB86E66DA3B37320C.crl (hash: X0VTPTBoaMl/OIkpzJ5CeR9JdtOKIM9hMlLTT1O6cVY=) 3: 326131343a373538313a6632303a3a2f34382d3438203d3e20313533313736.roa (hash: Q+SHdUagvI6KZ73P7qEzwFM/MmpC3zK1RzbKHzMJDSM=) 4: 326131343a373538313a6130303a3a2f34302d3430203d3e20323135303834.roa (hash: AMf8FFzkyNRTCLs/i7swnRAL3WtJKbW6+Q9+QH2tffk=) 5: 326131343a373538313a623030303a3a2f33362d3336203d3e20323135303834.roa (hash: N9L4nbL2Uo4P069vOshVKkJFc321LxJpH/q85ffpRGI=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/1/52285B8754F215EBEAB614DEB86E66DA3B37320C.crl rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/1/52285B8754F215EBEAB614DEB86E66DA3B37320C.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/52285B8754F215EBEAB614DEB86E66DA3B37320C.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 15 May 2026 17:17:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:c0:6d:c5:df:ba:d9:8a:ca:13:2f:0c:df:01:da:cd:86:8d:8f:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=52285B8754F215EBEAB614DEB86E66DA3B37320C Validity Not Before: May 14 13:38:02 2026 GMT Not After : May 15 17:17:02 2026 GMT Subject: CN=73A6C4CD72C20A4934DD315B660377F25DA1B8E9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:f1:ee:49:fc:f0:67:f9:07:1a:fa:0a:e1:7d: ec:e8:d6:12:e9:fa:4a:8c:84:2f:50:1d:ac:72:de: ae:b4:f5:d8:5c:b4:8f:21:a2:ee:8c:8b:0b:23:93: 1b:91:58:49:e4:6b:e2:86:ec:fb:60:0f:2f:70:74: 4c:63:17:1d:03:a1:db:a1:3e:49:67:f4:44:9e:d0: fb:e2:c5:f7:43:0c:86:d0:6c:b1:d7:f7:5c:76:70: 9d:1f:73:71:ff:1f:b5:07:be:c1:a0:e6:a3:c0:08: a3:5a:99:76:b8:ad:ed:4e:ea:ce:cd:7a:7c:44:21: f7:25:1f:14:e0:24:1f:42:20:fb:fa:08:12:dd:a4: 31:79:da:25:c2:72:8d:99:90:cd:e9:4a:5b:b3:cc: c4:0c:38:d3:03:3a:7e:60:7f:cf:fa:1b:ad:3d:03: cf:e5:22:d8:61:52:b7:81:90:aa:dd:d6:77:3b:af: 03:1d:61:46:dc:9d:c6:fb:83:ee:d4:07:59:36:e6: f8:f0:39:8e:fb:c9:fd:85:fd:71:47:7e:20:38:cb: 6d:ed:70:4b:8f:29:4e:9b:f1:ff:f4:18:fa:db:97: 46:df:f3:34:a6:06:7c:c4:5a:00:aa:4f:c0:48:68: 50:9b:ae:79:df:fd:c7:26:9c:1b:9e:24:a2:2f:c5: 40:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:A6:C4:CD:72:C2:0A:49:34:DD:31:5B:66:03:77:F2:5D:A1:B8:E9 X509v3 Authority Key Identifier: keyid:52:28:5B:87:54:F2:15:EB:EA:B6:14:DE:B8:6E:66:DA:3B:37:32:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/1/52285B8754F215EBEAB614DEB86E66DA3B37320C.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/52285B8754F215EBEAB614DEB86E66DA3B37320C.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/1/52285B8754F215EBEAB614DEB86E66DA3B37320C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:17:43:e8:9e:1d:0f:35:59:a0:3b:29:12:ca:67:4c:0c:59: a3:34:0f:3a:f2:df:b4:b5:44:46:44:84:7c:ec:ff:c5:c1:dd: c6:38:3f:f3:88:13:4b:54:06:e9:03:c6:4f:a0:20:0e:33:fb: 6c:49:a7:7f:d8:f1:27:59:cf:4f:6b:d3:fb:50:ea:fa:b9:8f: 31:26:a0:ec:b9:13:3c:3b:b9:1e:17:4a:ae:86:c4:65:db:a2: 9e:80:be:ff:1f:92:60:d7:0f:a0:fd:f1:38:f6:dc:b1:df:15: 5c:b7:a7:bb:56:e5:99:3e:1f:b9:a1:ba:69:f1:dc:0b:f7:eb: 52:0e:60:fc:0b:48:e8:23:2a:49:b2:14:27:7f:e8:e4:7f:08: eb:e5:3f:67:36:44:b6:6a:19:1e:06:94:db:3c:d6:f2:b5:8d: ff:85:68:e8:82:52:4b:ad:44:90:82:62:4e:c6:4e:90:f8:98: 10:1d:f8:62:a2:1e:40:75:88:fd:34:d6:e6:20:bb:e3:82:30: 35:fa:f3:69:a8:91:6d:8c:41:60:43:79:b5:74:94:57:02:dd: b8:0a:8c:ac:a0:f5:1f:f1:f6:4e:26:f8:b2:7a:d1:0d:ca:bc: f9:44:a7:b1:83:03:61:f5:32:4f:ac:ee:db:42:08:d2:e1:bf: 4c:35:76:24 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUUMBtxd+62YrKEy8M3wHazYaNj3wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTIyODVCODc1NEYyMTVFQkVBQjYxNERFQjg2RTY2REEz QjM3MzIwQzAeFw0yNjA1MTQxMzM4MDJaFw0yNjA1MTUxNzE3MDJaMDMxMTAvBgNV BAMTKDczQTZDNENENzJDMjBBNDkzNEREMzE1QjY2MDM3N0YyNURBMUI4RTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDt8e5J/PBn+Qca+grhfezo1hLp +kqMhC9QHaxy3q609dhctI8hou6MiwsjkxuRWEnka+KG7PtgDy9wdExjFx0Doduh Pkln9ESe0PvixfdDDIbQbLHX91x2cJ0fc3H/H7UHvsGg5qPACKNamXa4re1O6s7N enxEIfclHxTgJB9CIPv6CBLdpDF52iXCco2ZkM3pSluzzMQMONMDOn5gf8/6G609 A8/lIthhUreBkKrd1nc7rwMdYUbcncb7g+7UB1k25vjwOY77yf2F/XFHfiA4y23t cEuPKU6b8f/0GPrbl0bf8zSmBnzEWgCqT8BIaFCbrnnf/ccmnBueJKIvxUDhAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUc6bEzXLCCkk03TFbZgN38l2huOkwHwYDVR0j BBgwFoAUUihbh1TyFevqthTeuG5m2js3MgwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOGQ1Y2QxNGUtNWY2My00ZjFjLTk0ZTMtMjcwNTBjMjY2 NDgwLzEvNTIyODVCODc1NEYyMTVFQkVBQjYxNERFQjg2RTY2REEzQjM3MzIwQy5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC81MjI4NUI4NzU0RjIxNUVCRUFCNjE0REVC ODZFNjZEQTNCMzczMjBDLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzhkNWNkMTRlLTVmNjMtNGYxYy05NGUzLTI3MDUwYzI2NjQ4MC8xLzUyMjg1Qjg3 NTRGMjE1RUJFQUI2MTRERUI4NkU2NkRBM0IzNzMyMEMubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCLF0Po nh0PNVmgOykSymdMDFmjNA868t+0tURGRIR87P/Fwd3GOD/ziBNLVAbpA8ZPoCAO M/tsSad/2PEnWc9Pa9P7UOr6uY8xJqDsuRM8O7keF0quhsRl26KegL7/H5Jg1w+g /fE49tyx3xVct6e7VuWZPh+5obpp8dwL9+tSDmD8C0joIypJshQnf+jkfwjr5T9n NkS2ahkeBpTbPNbytY3/hWjoglJLrUSQgmJOxk6Q+JgQHfhioh5AdYj9NNbmILvj gjA1+vNpqJFtjEFgQ3m1dJRXAt24CoysoPUf8fZOJviyetENyrz5RKexgwNh9TJP rO7bQgjS4b9MNXYk -----END CERTIFICATE-----Generated at Fri May 15 07:03:03 2026 by rpki-client