$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/4/521525856CBBA6D9D2254221C280DC930734AAB8.mft File: 521525856CBBA6D9D2254221C280DC930734AAB8.mft (raw, json) Hash identifier: M7otlMpOCLeIwZgXSHSnsDS50nCku2ygKnPy5a5ViSg= Subject key identifier: 91:AF:84:A9:84:F7:85:19:C7:A1:A1:21:38:BE:7F:B8:CC:E3:0F:3B Authority key identifier: 52:15:25:85:6C:BB:A6:D9:D2:25:42:21:C2:80:DC:93:07:34:AA:B8 Certificate issuer: /CN=521525856CBBA6D9D2254221C280DC930734AAB8 Certificate serial: 15D0192A4C237BF8647D27008CA933D083019B86 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/521525856CBBA6D9D2254221C280DC930734AAB8.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/4/521525856CBBA6D9D2254221C280DC930734AAB8.mft Manifest number: 0209 Signing time: Tue 28 Jul 2026 15:27:09 +0000 Manifest this update: Tue 28 Jul 2026 15:22:09 +0000 Manifest next update: Wed 29 Jul 2026 15:55:09 +0000 Files and hashes: 1: 39342e32342e3130382e302f32342d3234203d3e20323030363736.roa (hash: HSErQq3crkyzVJa6g9ayoDntWunwG4uTUMd6ifKsOLU=) 2: 326130363a613030333a623030623a3a2f34382d3438203d3e20323030363736.roa (hash: Pecsaqccf5tHcdlTeF7bCwVmz7JER7H8qSHLGuqWRMI=) 3: 326130363a613030333a313333373a3a2f34382d3438203d3e20323030363736.roa (hash: y6dlRvQ6Ei4ylbtG2E1Fsbq6bkYPEiXc/hP5pnr/A5s=) 4: 521525856CBBA6D9D2254221C280DC930734AAB8.crl (hash: bMpYAEXxUx+zgPM2PcVKqFgBqXnlmR2d8Pn6UcN/m/A=) 5: 326130363a613030333a3a2f34382d3438203d3e20323030363736.roa (hash: hctWuN+nHCxcPnxwlB0HaZTfqv5a4O8gc3WDRLEEUrc=) 6: 326130363a613030333a666666663a3a2f34382d3438203d3e203530373535.roa (hash: ZhHRzDFs7fBtUGvR8pxFCEtpL9Hraol9iZdGLjWUEvI=) 7: 326130363a613030333a313131313a3a2f34382d3438203d3e20323030363736.roa (hash: reSiEjWqNL5bMfSb8NDNP7L36wtpl2UMV26XqCjhnmE=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/4/521525856CBBA6D9D2254221C280DC930734AAB8.crl rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/4/521525856CBBA6D9D2254221C280DC930734AAB8.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/521525856CBBA6D9D2254221C280DC930734AAB8.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 29 Jul 2026 14:18:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:d0:19:2a:4c:23:7b:f8:64:7d:27:00:8c:a9:33:d0:83:01:9b:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=521525856CBBA6D9D2254221C280DC930734AAB8 Validity Not Before: Jul 28 15:22:09 2026 GMT Not After : Jul 29 15:55:09 2026 GMT Subject: CN=91AF84A984F78519C7A1A12138BE7FB8CCE30F3B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:3e:c6:e2:93:7d:3f:09:4c:33:1c:6d:2d:cd: 70:90:67:9a:a2:0f:93:00:57:a9:56:ee:08:8b:06: f7:39:ef:97:1f:29:d0:86:81:d0:c5:a4:54:ea:22: 33:09:b9:5c:5b:a1:88:a7:5d:c9:71:d0:58:e2:e8: c2:2d:d7:93:b3:bd:62:5b:af:ae:0b:f7:6b:43:57: 3a:4e:8c:b1:83:6b:cc:e9:49:5f:5a:b0:73:4d:ca: 85:59:a4:04:f3:ab:24:59:b2:ed:50:5c:86:67:89: 7f:28:bc:98:5f:a2:28:96:8a:6f:92:6e:43:72:6d: fd:8b:db:57:68:46:50:2d:cd:ca:e7:68:37:dd:23: d7:ec:46:17:1b:32:f3:83:72:d8:d1:2e:74:b5:3f: 6a:89:6f:bc:c2:09:22:92:91:4b:59:8d:39:7d:09: 66:cc:39:6e:35:90:88:0f:3e:35:8d:52:5e:9e:bd: a9:0f:70:cb:0c:4c:d4:15:50:be:85:11:63:5a:25: b6:fe:9f:eb:65:fc:81:82:f1:ac:f3:e8:56:ba:75: 09:dc:97:3b:52:5f:fb:7c:8c:fc:d8:8a:7c:b1:a5: 5e:e5:cc:ff:24:46:9d:07:e5:0e:e2:1f:dd:83:b7: 7a:05:aa:61:da:f9:9e:1a:51:12:44:86:fd:ab:e6: 80:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:AF:84:A9:84:F7:85:19:C7:A1:A1:21:38:BE:7F:B8:CC:E3:0F:3B X509v3 Authority Key Identifier: keyid:52:15:25:85:6C:BB:A6:D9:D2:25:42:21:C2:80:DC:93:07:34:AA:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/4/521525856CBBA6D9D2254221C280DC930734AAB8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/521525856CBBA6D9D2254221C280DC930734AAB8.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/4/521525856CBBA6D9D2254221C280DC930734AAB8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:57:80:94:96:e1:1b:97:00:9f:8a:1a:d6:e6:8f:00:96:c3: 31:72:ab:7e:ed:84:e7:23:09:40:77:65:db:24:94:19:51:a2: 63:bd:37:9d:3f:b6:36:cf:0d:db:82:6a:1b:f7:f3:4b:12:36: 69:46:8c:45:84:b0:c0:be:10:16:f7:94:7e:4d:66:35:79:0e: a7:34:c3:68:2b:00:56:fc:d4:f2:04:39:c9:cb:b9:2a:fb:98: 66:b8:10:e9:0f:aa:65:2c:73:f0:12:3f:a3:43:98:1c:04:d3: 64:1a:ac:cd:0b:3f:aa:60:52:2d:a2:1b:d2:93:eb:ab:d4:f3: 36:0f:85:67:38:fc:8a:d1:f4:60:72:1c:9c:ff:ec:07:05:83: 2c:12:4c:80:fe:91:01:88:73:3e:d0:29:bd:00:15:eb:f8:13: 83:24:f3:f3:2d:b8:cf:1e:da:3b:46:ab:41:6a:5c:85:02:c0: 00:02:a4:50:01:e8:37:c1:9d:2d:bb:0d:a8:99:db:88:e6:96: 4c:3f:5e:b3:77:e8:7d:11:88:06:0c:73:11:6b:c5:24:11:0f: 0c:35:ed:2a:53:ad:46:21:c6:2d:d5:21:eb:19:01:fd:20:22: b5:02:45:74:e1:37:d4:9a:9c:b3:3d:d3:e0:96:60:98:87:08: 79:1b:72:02 -----BEGIN CERTIFICATE----- MIIFbTCCBFWgAwIBAgIUFdAZKkwje/hkfScAjKkz0IMBm4YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTIxNTI1ODU2Q0JCQTZEOUQyMjU0MjIxQzI4MERDOTMw NzM0QUFCODAeFw0yNjA3MjgxNTIyMDlaFw0yNjA3MjkxNTU1MDlaMDMxMTAvBgNV BAMTKDkxQUY4NEE5ODRGNzg1MTlDN0ExQTEyMTM4QkU3RkI4Q0NFMzBGM0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxPsbik30/CUwzHG0tzXCQZ5qi D5MAV6lW7giLBvc575cfKdCGgdDFpFTqIjMJuVxboYinXclx0Fji6MIt15OzvWJb r64L92tDVzpOjLGDa8zpSV9asHNNyoVZpATzqyRZsu1QXIZniX8ovJhfoiiWim+S bkNybf2L21doRlAtzcrnaDfdI9fsRhcbMvODctjRLnS1P2qJb7zCCSKSkUtZjTl9 CWbMOW41kIgPPjWNUl6evakPcMsMTNQVUL6FEWNaJbb+n+tl/IGC8azz6Fa6dQnc lztSX/t8jPzYinyxpV7lzP8kRp0H5Q7iH92Dt3oFqmHa+Z4aURJEhv2r5oAHAgMB AAGjggJ3MIICczAdBgNVHQ4EFgQUka+EqYT3hRnHoaEhOL5/uMzjDzswHwYDVR0j BBgwFoAUUhUlhWy7ptnSJUIhwoDckwc0qrgwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMmFjYTNjYTYtMzRjYy00NzcyLWJhYzAtYTM1ZGQwMTk1 Y2U3LzQvNTIxNTI1ODU2Q0JCQTZEOUQyMjU0MjIxQzI4MERDOTMwNzM0QUFCOC5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1 YzkxYmUzZjlkLzcvNTIxNTI1ODU2Q0JCQTZEOUQyMjU0MjIxQzI4MERDOTMwNzM0 QUFCOC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8yYWNhM2NhNi0z NGNjLTQ3NzItYmFjMC1hMzVkZDAxOTVjZTcvNC81MjE1MjU4NTZDQkJBNkQ5RDIy NTQyMjFDMjgwREM5MzA3MzRBQUI4Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANleAlJbhG5cAn4oa1uaP AJbDMXKrfu2E5yMJQHdl2ySUGVGiY703nT+2Ns8N24JqG/fzSxI2aUaMRYSwwL4Q FveUfk1mNXkOpzTDaCsAVvzU8gQ5ycu5KvuYZrgQ6Q+qZSxz8BI/o0OYHATTZBqs zQs/qmBSLaIb0pPrq9TzNg+FZzj8itH0YHIcnP/sBwWDLBJMgP6RAYhzPtApvQAV 6/gTgyTz8y24zx7aO0arQWpchQLAAAKkUAHoN8GdLbsNqJnbiOaWTD9es3fofRGI BgxzEWvFJBEPDDXtKlOtRiHGLdUh6xkB/SAitQJFdOE31Jqcsz3T4JZgmIcIeRty Ag== -----END CERTIFICATE-----Generated at Tue Jul 28 21:38:29 2026 by rpki-client