$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/4/521525856CBBA6D9D2254221C280DC930734AAB8.mft File: 521525856CBBA6D9D2254221C280DC930734AAB8.mft (raw, json) Hash identifier: tlcq51BNJ5t9Zerc5U5Rk4r80iExFZueqE6LkzT25po= Subject key identifier: 43:84:C5:D8:DA:10:DA:E6:99:EF:11:C9:C0:5D:49:DE:6E:6A:4F:C9 Authority key identifier: 52:15:25:85:6C:BB:A6:D9:D2:25:42:21:C2:80:DC:93:07:34:AA:B8 Certificate issuer: /CN=521525856CBBA6D9D2254221C280DC930734AAB8 Certificate serial: 074612CF2C38938B232E4B4176EF53E107EC4622 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/521525856CBBA6D9D2254221C280DC930734AAB8.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/4/521525856CBBA6D9D2254221C280DC930734AAB8.mft Manifest number: 0257 Signing time: Fri 25 Sep 2026 14:21:12 +0000 Manifest this update: Fri 25 Sep 2026 14:16:12 +0000 Manifest next update: Sat 26 Sep 2026 15:38:12 +0000 Files and hashes: 1: 326130363a613030333a623030623a3a2f34382d3438203d3e20323030363736.roa (hash: Pecsaqccf5tHcdlTeF7bCwVmz7JER7H8qSHLGuqWRMI=) 2: 326130363a613030333a666666663a3a2f34382d3438203d3e203530373535.roa (hash: ZhHRzDFs7fBtUGvR8pxFCEtpL9Hraol9iZdGLjWUEvI=) 3: 521525856CBBA6D9D2254221C280DC930734AAB8.crl (hash: B2eyadKSHSS5b2Aq1Ye/vPxcASMxAIo+wb3OygEEA/k=) 4: 326130363a613030333a313131313a3a2f34382d3438203d3e20323030363736.roa (hash: reSiEjWqNL5bMfSb8NDNP7L36wtpl2UMV26XqCjhnmE=) 5: 326130363a613030333a313333373a3a2f34382d3438203d3e20323030363736.roa (hash: y6dlRvQ6Ei4ylbtG2E1Fsbq6bkYPEiXc/hP5pnr/A5s=) 6: 39342e32342e3130382e302f32342d3234203d3e20323030363736.roa (hash: HSErQq3crkyzVJa6g9ayoDntWunwG4uTUMd6ifKsOLU=) 7: 326130363a613030333a3a2f34382d3438203d3e20323030363736.roa (hash: hctWuN+nHCxcPnxwlB0HaZTfqv5a4O8gc3WDRLEEUrc=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/4/521525856CBBA6D9D2254221C280DC930734AAB8.crl rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/4/521525856CBBA6D9D2254221C280DC930734AAB8.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/521525856CBBA6D9D2254221C280DC930734AAB8.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 26 Sep 2026 08:02:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:46:12:cf:2c:38:93:8b:23:2e:4b:41:76:ef:53:e1:07:ec:46:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=521525856CBBA6D9D2254221C280DC930734AAB8 Validity Not Before: Sep 25 14:16:12 2026 GMT Not After : Sep 26 15:38:12 2026 GMT Subject: CN=4384C5D8DA10DAE699EF11C9C05D49DE6E6A4FC9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:ae:bf:87:2c:c8:8d:97:75:6c:d7:91:1c:95: 7e:6c:cd:a6:18:79:72:72:1c:86:b8:9c:e2:3d:f1: 0e:78:c4:77:45:0d:09:ef:c1:b3:77:91:1e:88:ca: 84:98:79:a7:43:9e:7b:ac:7b:57:1b:56:9c:05:9e: 3e:31:13:81:8c:ce:f2:91:57:18:cf:ad:1c:96:13: 38:e8:d6:00:6d:a5:32:90:99:97:9d:fc:bf:0b:04: 74:7f:a2:c9:fb:55:b2:df:7f:4a:9d:ca:52:93:df: b0:e0:9a:46:34:8e:d0:7a:aa:45:89:74:3d:47:34: 19:86:a3:4b:05:3a:2f:17:30:e5:91:53:11:8a:d0: 63:83:f6:f4:77:fb:a4:66:7c:5c:d0:3c:7f:6f:b1: 29:47:33:cb:f3:16:0d:2d:17:6d:88:8e:8b:59:43: 2d:ea:7d:ee:a1:50:be:2d:76:92:65:1d:65:01:83: 44:24:bb:a3:e5:66:ed:5e:99:c9:c1:4c:1b:d4:f0: 44:a6:bf:0a:c0:4c:16:f9:fc:43:2a:7f:8e:fd:81: 3c:b8:4c:4e:c5:6e:40:98:03:34:df:06:69:4f:35: de:da:9c:71:0f:b4:0a:22:92:f5:7a:45:98:00:a3: 3a:c2:15:10:29:ae:ce:6f:82:77:27:d2:06:1d:e8: b3:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:84:C5:D8:DA:10:DA:E6:99:EF:11:C9:C0:5D:49:DE:6E:6A:4F:C9 X509v3 Authority Key Identifier: keyid:52:15:25:85:6C:BB:A6:D9:D2:25:42:21:C2:80:DC:93:07:34:AA:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/4/521525856CBBA6D9D2254221C280DC930734AAB8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/521525856CBBA6D9D2254221C280DC930734AAB8.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/4/521525856CBBA6D9D2254221C280DC930734AAB8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:cc:65:00:d2:73:c1:1d:31:e5:41:95:a1:ef:3e:00:4d:e7: cd:96:f9:4a:26:f8:2a:27:d2:54:44:a7:a3:57:57:b7:a4:63: c0:0c:61:fd:dc:31:71:51:90:1f:63:12:95:22:3f:90:8e:8b: 3c:ae:61:91:69:a4:00:4d:3c:b2:6a:53:9a:ee:9c:3e:73:dc: 48:ff:57:1a:75:8f:f9:67:e7:77:b2:06:fe:41:a9:86:f2:e1: fc:86:0a:ff:97:df:2c:3c:38:8d:2a:53:58:69:ee:f9:82:3c: 52:75:19:76:70:72:e7:27:df:38:bc:c0:fb:e5:8a:4d:93:12: 5c:2b:54:20:ca:9c:b4:66:b0:ce:cf:92:bc:93:6c:b2:07:68: 60:4b:ba:2f:0c:76:21:15:8c:e8:4d:40:47:ff:a5:8c:ba:fa: 61:fa:1b:59:ef:fe:76:79:45:52:f3:24:f7:aa:d1:df:b0:e6: cf:28:41:38:bf:45:ca:ad:36:e4:87:68:d6:db:f2:53:d8:49: f4:ae:61:a1:e1:aa:56:ca:64:03:56:8f:fd:21:0c:c6:1f:3e: a3:3f:70:49:34:e5:01:b2:1e:02:0b:04:30:de:ef:ef:20:f7: d8:0f:a6:5f:ec:ac:44:82:17:f2:6d:eb:53:7c:87:8e:a9:a1: b6:ee:ca:a4 -----BEGIN CERTIFICATE----- MIIFbTCCBFWgAwIBAgIUB0YSzyw4k4sjLktBdu9T4QfsRiIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTIxNTI1ODU2Q0JCQTZEOUQyMjU0MjIxQzI4MERDOTMw NzM0QUFCODAeFw0yNjA5MjUxNDE2MTJaFw0yNjA5MjYxNTM4MTJaMDMxMTAvBgNV BAMTKDQzODRDNUQ4REExMERBRTY5OUVGMTFDOUMwNUQ0OURFNkU2QTRGQzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDsrr+HLMiNl3Vs15EclX5szaYY eXJyHIa4nOI98Q54xHdFDQnvwbN3kR6IyoSYeadDnnuse1cbVpwFnj4xE4GMzvKR VxjPrRyWEzjo1gBtpTKQmZed/L8LBHR/osn7VbLff0qdylKT37DgmkY0jtB6qkWJ dD1HNBmGo0sFOi8XMOWRUxGK0GOD9vR3+6RmfFzQPH9vsSlHM8vzFg0tF22IjotZ Qy3qfe6hUL4tdpJlHWUBg0Qku6PlZu1emcnBTBvU8ESmvwrATBb5/EMqf479gTy4 TE7FbkCYAzTfBmlPNd7anHEPtAoikvV6RZgAozrCFRAprs5vgncn0gYd6LN3AgMB AAGjggJ3MIICczAdBgNVHQ4EFgQUQ4TF2NoQ2uaZ7xHJwF1J3m5qT8kwHwYDVR0j BBgwFoAUUhUlhWy7ptnSJUIhwoDckwc0qrgwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMmFjYTNjYTYtMzRjYy00NzcyLWJhYzAtYTM1ZGQwMTk1 Y2U3LzQvNTIxNTI1ODU2Q0JCQTZEOUQyMjU0MjIxQzI4MERDOTMwNzM0QUFCOC5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1 YzkxYmUzZjlkLzcvNTIxNTI1ODU2Q0JCQTZEOUQyMjU0MjIxQzI4MERDOTMwNzM0 QUFCOC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8yYWNhM2NhNi0z NGNjLTQ3NzItYmFjMC1hMzVkZDAxOTVjZTcvNC81MjE1MjU4NTZDQkJBNkQ5RDIy NTQyMjFDMjgwREM5MzA3MzRBQUI4Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaMxlANJzwR0x5UGVoe8+ AE3nzZb5Sib4KifSVESno1dXt6RjwAxh/dwxcVGQH2MSlSI/kI6LPK5hkWmkAE08 smpTmu6cPnPcSP9XGnWP+Wfnd7IG/kGphvLh/IYK/5ffLDw4jSpTWGnu+YI8UnUZ dnBy5yffOLzA++WKTZMSXCtUIMqctGawzs+SvJNssgdoYEu6Lwx2IRWM6E1AR/+l jLr6YfobWe/+dnlFUvMk96rR37DmzyhBOL9Fyq025Ido1tvyU9hJ9K5hoeGqVspk A1aP/SEMxh8+oz9wSTTlAbIeAgsEMN7v7yD32A+mX+ysRIIX8m3rU3yHjqmhtu7K pA== -----END CERTIFICATE-----Generated at Fri Sep 25 17:56:39 2026 by rpki-client