$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09718f08-bb39-4a09-a4c0-1f40248a6d15/3/B52300C5AE6278B608E231E431C3DD0EAF6A6BC2.mft File: B52300C5AE6278B608E231E431C3DD0EAF6A6BC2.mft (raw, json) Hash identifier: 4g5X1/zgKcWrR9/Hda+sSIf9ppIswDlYnddXV1gDViw= Subject key identifier: BC:D2:21:B6:E0:43:DB:27:59:ED:3B:81:3B:11:0C:67:01:4F:66:E5 Authority key identifier: B5:23:00:C5:AE:62:78:B6:08:E2:31:E4:31:C3:DD:0E:AF:6A:6B:C2 Certificate issuer: /CN=B52300C5AE6278B608E231E431C3DD0EAF6A6BC2 Certificate serial: 4D4C73584B9911E284FA984DD351F90013B8B990 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/B52300C5AE6278B608E231E431C3DD0EAF6A6BC2.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09718f08-bb39-4a09-a4c0-1f40248a6d15/3/B52300C5AE6278B608E231E431C3DD0EAF6A6BC2.mft Manifest number: 73 Signing time: Mon 02 Mar 2026 06:07:44 +0000 Manifest this update: Mon 02 Mar 2026 06:02:44 +0000 Manifest next update: Tue 03 Mar 2026 09:09:44 +0000 Files and hashes: 1: 326131343a373538313a393966313a3a2f34382d3438203d3e20323134333434.roa (hash: uczfpozVS217kWRATgpEenuL/t1nbJiCmQMwvAEpV8o=) 2: 326131343a373538313a393966343a3a2f34382d3438203d3e20323134333434.roa (hash: spTh8DstCVqtG/UUp5lMqUt7m9/HXGTEzcFQEa7vRbE=) 3: B52300C5AE6278B608E231E431C3DD0EAF6A6BC2.crl (hash: 0PivWmwCBeT7OFnGIxEB/ri2aVpJ0BZxFEPuqUS98Wk=) 4: 326131343a373538313a393930323a3a2f34382d3438203d3e20323134333434.roa (hash: TyFBqgR7vYeMd4/BuVueO5zwkcDAg7G5uk0/d+OPki0=) 5: 326131343a373538313a393966353a3a2f34382d3438203d3e20323134333434.roa (hash: HcA7KRdnBWzY7hEKVhGFuUdyfwcYU7b6FuC/duUcRFU=) 6: 326131343a373538313a393930343a3a2f34382d3438203d3e20323134333434.roa (hash: JSmiAu7ed33+J2eg2ZQ/ocsiovRypTOUdvXbpKPSbI8=) 7: 326131343a373538313a393930303a3a2f34382d3438203d3e20323134333434.roa (hash: kGAxqipewjTBEOV3BSA8JRTiGthe14AWzEgdY5VhMKs=) 8: 326131343a373538313a393930313a3a2f34382d3438203d3e20323134333434.roa (hash: a3vn+r3Xd1ZweP+VfXPkybQsxnlpFwKhPGkq1Aja1ws=) 9: 326131343a373538313a393938383a3a2f34382d3438203d3e20323134333434.roa (hash: dhPIT0Huo/8bMcCCD9CENzV8Oc7GRGv2lkOyyJSz4lY=) 10: 326131343a373538313a393930353a3a2f34382d3438203d3e20323134333434.roa (hash: WvJ+nlXPCuTRZnP7e6XF03QrjAocsMrvYbQ3ZQ/eNBY=) 11: 326131343a373538313a393966333a3a2f34382d3438203d3e20323134333434.roa (hash: J6emFQdlETu7H0STfMe+srRexcrGlCk0y+BgTI9eJls=) 12: 326131343a373538313a393930333a3a2f34382d3438203d3e20323134333434.roa (hash: odpWIoGfrHyjA/EqLrY/tj6kKgasd1C7YcR9JizUkBA=) 13: 326131343a373538313a393966323a3a2f34382d3438203d3e20323134333434.roa (hash: Oe9b7D8DtLCyHfTEelgxQzMm3GoJ4G9/0gwwATaJfro=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09718f08-bb39-4a09-a4c0-1f40248a6d15/3/B52300C5AE6278B608E231E431C3DD0EAF6A6BC2.crl rsync://rsync.paas.rpki.ripe.net/repository/09718f08-bb39-4a09-a4c0-1f40248a6d15/3/B52300C5AE6278B608E231E431C3DD0EAF6A6BC2.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/B52300C5AE6278B608E231E431C3DD0EAF6A6BC2.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 03 Mar 2026 09:09:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:4c:73:58:4b:99:11:e2:84:fa:98:4d:d3:51:f9:00:13:b8:b9:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B52300C5AE6278B608E231E431C3DD0EAF6A6BC2 Validity Not Before: Mar 2 06:02:44 2026 GMT Not After : Mar 3 09:09:44 2026 GMT Subject: CN=BCD221B6E043DB2759ED3B813B110C67014F66E5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:30:f6:ed:7d:0a:c9:b3:dd:5a:bf:e5:1d:89: 39:fb:a8:ce:a2:fb:79:7d:84:49:31:76:95:25:13: 3d:1f:7e:0f:c5:eb:11:1f:5d:1d:6f:fd:ea:ca:a1: c7:9c:dc:5a:b4:9f:6b:7a:d9:51:f1:6c:b3:71:d6: 1d:65:7b:28:2c:75:19:a2:ef:f1:f7:81:a6:4b:30: 7d:c9:c3:8a:8e:91:0f:73:78:24:6b:e0:7c:3f:a9: ca:5a:80:ab:0e:e7:a7:bf:6e:fe:57:14:c6:1e:e4: 81:84:74:6e:06:5a:8f:63:43:37:2f:1c:22:80:49: b7:85:cd:cc:51:f5:11:ca:9f:41:7c:a0:08:d0:15: e8:fe:e2:5e:3e:c6:55:48:03:d0:c2:4e:3a:ec:05: ba:f9:b5:59:3d:f1:c5:ef:5f:a3:52:c8:ea:ec:1c: bc:d6:f6:59:7d:25:72:5b:73:3a:87:cc:fa:69:c7: e6:69:f9:07:94:ce:0a:12:64:0e:a8:27:3e:ed:9d: b1:db:ff:4e:e6:ee:c5:57:89:bb:33:ae:07:ee:6b: 9b:eb:d3:21:3a:2d:8c:e7:f2:07:0a:3b:34:82:63: d0:fb:a1:57:1d:26:ca:2b:2f:7d:1d:28:70:7c:51: 9f:4a:08:ce:4a:62:c2:db:4c:e1:de:be:d9:8a:59: 2b:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:D2:21:B6:E0:43:DB:27:59:ED:3B:81:3B:11:0C:67:01:4F:66:E5 X509v3 Authority Key Identifier: keyid:B5:23:00:C5:AE:62:78:B6:08:E2:31:E4:31:C3:DD:0E:AF:6A:6B:C2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/09718f08-bb39-4a09-a4c0-1f40248a6d15/3/B52300C5AE6278B608E231E431C3DD0EAF6A6BC2.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/B52300C5AE6278B608E231E431C3DD0EAF6A6BC2.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09718f08-bb39-4a09-a4c0-1f40248a6d15/3/B52300C5AE6278B608E231E431C3DD0EAF6A6BC2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:0e:e3:cd:4d:5d:ee:7a:ba:f1:56:b2:94:9c:22:92:39:1f: 40:4c:f4:6c:65:16:f8:34:13:1a:61:6f:01:1a:59:ad:83:b5: 4b:c8:3f:9c:8e:27:fe:33:df:71:56:e5:31:d5:37:44:87:71: 3a:d2:96:e7:d2:57:65:7d:75:19:5e:3b:f6:3a:c0:30:fc:f1: 1e:09:5b:61:8c:0e:66:ae:06:af:9a:5c:23:c1:41:8e:7f:da: 50:4a:57:87:a9:76:59:97:9b:df:28:e8:d0:5e:83:00:25:79: 0b:da:1c:1a:3e:0e:a2:16:f1:51:e8:62:10:bd:4a:d2:16:2c: 17:dd:7b:15:77:3d:10:c9:12:a6:ac:88:48:ce:8b:af:4a:4f: 81:a6:2a:0e:c6:b4:12:41:f0:b4:76:2b:e8:51:3f:72:18:52: 83:e0:20:bd:9e:47:fa:59:5e:5c:8d:92:0c:f9:7c:e3:14:44: b3:b3:b1:eb:06:3a:d4:f1:ee:31:38:e8:0f:af:3d:15:84:15: 13:e3:88:27:79:92:0d:63:81:e0:40:30:46:a9:c2:a7:d3:ee: b9:9f:e1:65:56:23:09:07:9c:61:bb:b1:48:0a:6d:84:e8:93: 2c:0c:57:b9:69:36:fa:43:c2:3d:d4:0a:47:5b:20:87:16:e2: 86:42:ef:c2 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUTUxzWEuZEeKE+phN01H5ABO4uZAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjUyMzAwQzVBRTYyNzhCNjA4RTIzMUU0MzFDM0REMEVB RjZBNkJDMjAeFw0yNjAzMDIwNjAyNDRaFw0yNjAzMDMwOTA5NDRaMDMxMTAvBgNV BAMTKEJDRDIyMUI2RTA0M0RCMjc1OUVEM0I4MTNCMTEwQzY3MDE0RjY2RTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCOMPbtfQrJs91av+UdiTn7qM6i +3l9hEkxdpUlEz0ffg/F6xEfXR1v/erKocec3Fq0n2t62VHxbLNx1h1leygsdRmi 7/H3gaZLMH3Jw4qOkQ9zeCRr4Hw/qcpagKsO56e/bv5XFMYe5IGEdG4GWo9jQzcv HCKASbeFzcxR9RHKn0F8oAjQFej+4l4+xlVIA9DCTjrsBbr5tVk98cXvX6NSyOrs HLzW9ll9JXJbczqHzPppx+Zp+QeUzgoSZA6oJz7tnbHb/07m7sVXibszrgfua5vr 0yE6LYzn8gcKOzSCY9D7oVcdJsorL30dKHB8UZ9KCM5KYsLbTOHevtmKWSvvAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUvNIhtuBD2ydZ7TuBOxEMZwFPZuUwHwYDVR0j BBgwFoAUtSMAxa5ieLYI4jHkMcPdDq9qa8IwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMDk3MThmMDgtYmIzOS00YTA5LWE0YzAtMWY0MDI0OGE2 ZDE1LzMvQjUyMzAwQzVBRTYyNzhCNjA4RTIzMUU0MzFDM0REMEVBRjZBNkJDMi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC9CNTIzMDBDNUFFNjI3OEI2MDhFMjMxRTQz MUMzREQwRUFGNkE2QkMyLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzA5NzE4ZjA4LWJiMzktNGEwOS1hNGMwLTFmNDAyNDhhNmQxNS8zL0I1MjMwMEM1 QUU2Mjc4QjYwOEUyMzFFNDMxQzNERDBFQUY2QTZCQzIubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCXDuPN TV3uerrxVrKUnCKSOR9ATPRsZRb4NBMaYW8BGlmtg7VLyD+cjif+M99xVuUx1TdE h3E60pbn0ldlfXUZXjv2OsAw/PEeCVthjA5mrgavmlwjwUGOf9pQSleHqXZZl5vf KOjQXoMAJXkL2hwaPg6iFvFR6GIQvUrSFiwX3XsVdz0QyRKmrIhIzouvSk+BpioO xrQSQfC0divoUT9yGFKD4CC9nkf6WV5cjZIM+XzjFESzs7HrBjrU8e4xOOgPrz0V hBUT44gneZINY4HgQDBGqcKn0+65n+FlViMJB5xhu7FICm2E6JMsDFe5aTb6Q8I9 1ApHWyCHFuKGQu/C -----END CERTIFICATE-----Generated at Mon Mar 2 20:14:54 2026 by rpki-client