$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/1/52285B8754F215EBEAB614DEB86E66DA3B37320C.mft File: 52285B8754F215EBEAB614DEB86E66DA3B37320C.mft (raw, json) Hash identifier: 0WjQxcUAamXwR4SOTc5C/7O+uNoB3fdD+Q09qsvF89Q= Subject key identifier: 9C:41:29:A3:0D:A9:44:F8:B7:67:B5:5F:B9:C6:E9:F3:E0:07:2A:AE Authority key identifier: 52:28:5B:87:54:F2:15:EB:EA:B6:14:DE:B8:6E:66:DA:3B:37:32:0C Certificate issuer: /CN=52285B8754F215EBEAB614DEB86E66DA3B37320C Certificate serial: 1DEBBB772D99FEAB6A8BAFFD40747521E5BADC0A Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/52285B8754F215EBEAB614DEB86E66DA3B37320C.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/1/52285B8754F215EBEAB614DEB86E66DA3B37320C.mft Manifest number: 0339 Signing time: Fri 12 Jun 2026 18:09:10 +0000 Manifest this update: Fri 12 Jun 2026 18:04:10 +0000 Manifest next update: Sat 13 Jun 2026 20:58:10 +0000 Files and hashes: 1: 326131343a373538313a6632303a3a2f34382d3438203d3e20313533313736.roa (hash: 8KUcwV+ZBGNa1TWr9TAbw1mQOwKknHp9Hus4NY1ZuW4=) 2: 326131343a373538313a623030303a3a2f33362d3336203d3e20323135303834.roa (hash: N9L4nbL2Uo4P069vOshVKkJFc321LxJpH/q85ffpRGI=) 3: 326131343a373538313a6632303a3a2f34342d3434203d3e20323135303834.roa (hash: /AaiYsKWuqRgDvvUADUKcufSQBbG5oanOxBGHWa2vLA=) 4: 326131343a373538313a6130303a3a2f34302d3430203d3e20323135303834.roa (hash: AMf8FFzkyNRTCLs/i7swnRAL3WtJKbW6+Q9+QH2tffk=) 5: 52285B8754F215EBEAB614DEB86E66DA3B37320C.crl (hash: S+m7aP2hVSraPUSmjIFmswRf/seES+/YT8mbuiMBswM=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/1/52285B8754F215EBEAB614DEB86E66DA3B37320C.crl rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/1/52285B8754F215EBEAB614DEB86E66DA3B37320C.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/52285B8754F215EBEAB614DEB86E66DA3B37320C.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 13 Jun 2026 20:58:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:eb:bb:77:2d:99:fe:ab:6a:8b:af:fd:40:74:75:21:e5:ba:dc:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=52285B8754F215EBEAB614DEB86E66DA3B37320C Validity Not Before: Jun 12 18:04:10 2026 GMT Not After : Jun 13 20:58:10 2026 GMT Subject: CN=9C4129A30DA944F8B767B55FB9C6E9F3E0072AAE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:92:a6:6e:ac:b0:35:00:7b:e3:c3:97:81:ba: c8:7b:34:ba:00:89:61:82:df:4e:9b:05:1c:67:d3: 47:e9:12:71:4c:77:84:de:57:93:ec:b4:a9:9e:39: c4:78:38:d6:bc:ac:48:93:70:2f:6d:df:48:99:93: ac:ea:47:a2:03:30:e6:4b:23:13:6e:ab:30:8d:7b: de:4c:30:80:2c:d4:9a:7a:da:6f:5c:ba:3b:90:a2: 36:cf:80:66:0a:c4:92:4b:3e:30:3c:15:4a:3a:8e: c9:a8:cd:9d:8b:05:e1:5d:7a:ab:e2:b5:49:e9:a8: 41:ff:63:28:65:0e:70:53:06:6f:76:5f:6a:0a:79: ba:5a:8a:ca:8e:c8:60:fc:28:9b:91:7e:37:1b:98: 4c:f8:dc:4f:e8:6c:97:22:79:1c:91:22:30:aa:40: bf:99:32:a1:db:4e:64:d7:ee:90:6b:2c:1b:cd:81: b1:08:f8:97:fc:6c:b0:d9:bc:db:cc:a1:f5:6e:e8: b3:7f:14:19:63:bb:a5:13:32:35:f1:18:30:7a:77: cb:cd:92:09:d3:97:ad:85:45:a3:3f:9a:12:a5:d8: ed:c4:d0:c7:92:4a:37:78:f9:93:04:92:60:86:e0: ec:78:67:04:67:b8:76:72:49:e3:6c:0c:80:3a:41: 24:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:41:29:A3:0D:A9:44:F8:B7:67:B5:5F:B9:C6:E9:F3:E0:07:2A:AE X509v3 Authority Key Identifier: keyid:52:28:5B:87:54:F2:15:EB:EA:B6:14:DE:B8:6E:66:DA:3B:37:32:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/1/52285B8754F215EBEAB614DEB86E66DA3B37320C.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/52285B8754F215EBEAB614DEB86E66DA3B37320C.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/1/52285B8754F215EBEAB614DEB86E66DA3B37320C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:10:f9:dc:56:27:1e:2b:29:97:2c:de:31:1a:e2:b9:73:6b: 9e:71:8f:22:8f:da:9b:02:28:f3:c3:63:0a:8f:60:2d:70:ea: fd:5f:c6:d7:89:75:f0:21:0a:72:7e:44:11:0c:c5:54:a8:69: 9c:2f:72:b3:d2:f3:41:f4:66:a8:ce:65:06:37:e4:9d:2b:1d: 48:27:02:b4:23:48:6e:ce:12:35:28:1b:ca:a6:32:e6:1e:f4: aa:22:f9:d2:ba:74:76:55:20:70:0b:5c:08:ca:ba:d3:42:18: a3:88:bf:c2:89:67:fc:5c:cf:fa:2c:e5:c2:34:a2:50:88:dc: b6:c7:60:13:71:f1:09:73:fa:5c:ee:a5:42:c7:6b:ff:8b:a1: f3:62:a2:28:8a:83:f0:74:67:75:64:c6:a0:cb:5f:97:44:27: 41:43:f7:5d:4b:2a:46:4d:29:0d:ff:93:66:97:03:60:b5:a6: d9:ba:60:7e:dc:81:04:8e:09:5d:e7:59:e6:d2:c5:34:94:58: 31:71:3b:cc:32:1a:53:f6:31:ed:69:c2:ff:28:b8:82:27:18: bb:e3:35:62:d7:fa:04:5d:ec:b9:b4:60:ac:b2:5f:fc:76:90: 8c:b3:30:10:8d:d0:1c:b3:d2:81:e6:45:f0:50:ab:c5:3d:fe: f6:36:c9:76 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUHeu7dy2Z/qtqi6/9QHR1IeW63AowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTIyODVCODc1NEYyMTVFQkVBQjYxNERFQjg2RTY2REEz QjM3MzIwQzAeFw0yNjA2MTIxODA0MTBaFw0yNjA2MTMyMDU4MTBaMDMxMTAvBgNV BAMTKDlDNDEyOUEzMERBOTQ0RjhCNzY3QjU1RkI5QzZFOUYzRTAwNzJBQUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfkqZurLA1AHvjw5eBush7NLoA iWGC306bBRxn00fpEnFMd4TeV5PstKmeOcR4ONa8rEiTcC9t30iZk6zqR6IDMOZL IxNuqzCNe95MMIAs1Jp62m9cujuQojbPgGYKxJJLPjA8FUo6jsmozZ2LBeFdeqvi tUnpqEH/YyhlDnBTBm92X2oKebpaisqOyGD8KJuRfjcbmEz43E/obJcieRyRIjCq QL+ZMqHbTmTX7pBrLBvNgbEI+Jf8bLDZvNvMofVu6LN/FBlju6UTMjXxGDB6d8vN kgnTl62FRaM/mhKl2O3E0MeSSjd4+ZMEkmCG4Ox4ZwRnuHZySeNsDIA6QSSnAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUnEEpow2pRPi3Z7Vfucbp8+AHKq4wHwYDVR0j BBgwFoAUUihbh1TyFevqthTeuG5m2js3MgwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOGQ1Y2QxNGUtNWY2My00ZjFjLTk0ZTMtMjcwNTBjMjY2 NDgwLzEvNTIyODVCODc1NEYyMTVFQkVBQjYxNERFQjg2RTY2REEzQjM3MzIwQy5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC81MjI4NUI4NzU0RjIxNUVCRUFCNjE0REVC ODZFNjZEQTNCMzczMjBDLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzhkNWNkMTRlLTVmNjMtNGYxYy05NGUzLTI3MDUwYzI2NjQ4MC8xLzUyMjg1Qjg3 NTRGMjE1RUJFQUI2MTRERUI4NkU2NkRBM0IzNzMyMEMubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBfEPnc ViceKymXLN4xGuK5c2uecY8ij9qbAijzw2MKj2AtcOr9X8bXiXXwIQpyfkQRDMVU qGmcL3Kz0vNB9GaozmUGN+SdKx1IJwK0I0huzhI1KBvKpjLmHvSqIvnSunR2VSBw C1wIyrrTQhijiL/CiWf8XM/6LOXCNKJQiNy2x2ATcfEJc/pc7qVCx2v/i6HzYqIo ioPwdGd1ZMagy1+XRCdBQ/ddSypGTSkN/5NmlwNgtabZumB+3IEEjgld51nm0sU0 lFgxcTvMMhpT9jHtacL/KLiCJxi74zVi1/oEXey5tGCssl/8dpCMszAQjdAcs9KB 5kXwUKvFPf72Nsl2 -----END CERTIFICATE-----Generated at Sat Jun 13 13:57:16 2026 by rpki-client