$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/1/52285B8754F215EBEAB614DEB86E66DA3B37320C.mft File: 52285B8754F215EBEAB614DEB86E66DA3B37320C.mft (raw, json) Hash identifier: IU7LOdZQpoGaINcuJdKXHHEYFBwZPB2RnL4PoVM9yqo= Subject key identifier: 30:F5:2F:6F:88:31:BD:59:69:6A:F9:CD:3B:F6:10:63:BC:2A:56:0B Authority key identifier: 52:28:5B:87:54:F2:15:EB:EA:B6:14:DE:B8:6E:66:DA:3B:37:32:0C Certificate issuer: /CN=52285B8754F215EBEAB614DEB86E66DA3B37320C Certificate serial: 406D707B46053E1BEA99168F69F1250FEF87CD72 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/52285B8754F215EBEAB614DEB86E66DA3B37320C.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/1/52285B8754F215EBEAB614DEB86E66DA3B37320C.mft Manifest number: 02AD Signing time: Sat 28 Feb 2026 23:33:30 +0000 Manifest this update: Sat 28 Feb 2026 23:28:30 +0000 Manifest next update: Mon 02 Mar 2026 02:32:30 +0000 Files and hashes: 1: 326131343a373538313a623030303a3a2f33362d3336203d3e20323135303834.roa (hash: 8Iv1HdyRUhjcvQFIVfomOSyv77EzHn71qEiaLSvjvAE=) 2: 326131343a373538313a6632303a3a2f34382d3438203d3e20313533313736.roa (hash: Q+SHdUagvI6KZ73P7qEzwFM/MmpC3zK1RzbKHzMJDSM=) 3: 52285B8754F215EBEAB614DEB86E66DA3B37320C.crl (hash: rXDL1JzoFIe3GO7JgvW1ca3vPnUbcGvsTRTHgblF3fg=) 4: 326131343a373538313a6130303a3a2f34302d3430203d3e20323135303834.roa (hash: 6SMGzy0qxU/C5+Cz9d8WI56z67FiL2uOHLuZUmmEFig=) 5: 326131343a373538313a6632303a3a2f34342d3434203d3e20323135303834.roa (hash: ikRuOA2n8u4zq4qR5S8PkgRSZxYIGPGee0tyFklQIEM=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/1/52285B8754F215EBEAB614DEB86E66DA3B37320C.crl rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/1/52285B8754F215EBEAB614DEB86E66DA3B37320C.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/52285B8754F215EBEAB614DEB86E66DA3B37320C.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Mar 2026 02:32:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:6d:70:7b:46:05:3e:1b:ea:99:16:8f:69:f1:25:0f:ef:87:cd:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=52285B8754F215EBEAB614DEB86E66DA3B37320C Validity Not Before: Feb 28 23:28:30 2026 GMT Not After : Mar 2 02:32:30 2026 GMT Subject: CN=30F52F6F8831BD59696AF9CD3BF61063BC2A560B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:61:26:bb:c0:87:ba:5f:4b:e0:72:b3:62:b6: 16:4d:51:95:34:fd:bd:6c:e8:da:32:5a:0c:25:7b: aa:45:d3:8f:de:f7:e4:30:c7:49:1b:fe:94:13:4b: 65:a1:42:49:8f:4d:7a:ae:2e:63:31:3e:eb:eb:ba: 04:a9:ba:da:e2:da:6a:2a:e8:6d:26:40:02:8c:fa: 04:48:49:9c:15:26:da:00:23:77:e9:98:bb:e1:b4: 00:f7:f0:76:4e:2a:2f:08:06:c8:b0:93:bc:d4:79: 02:45:03:f9:4c:ad:fa:93:7b:97:b1:5b:83:d8:fe: 5f:6f:14:84:ee:c5:62:3f:82:2b:c8:a3:81:3b:a2: 3d:0d:1a:13:28:a0:a6:c4:7a:fe:34:ed:a4:1a:9c: 9f:8f:34:93:30:cc:df:ba:0c:1b:8b:3c:72:26:03: 46:22:3e:b4:c2:bb:5b:3d:ca:5e:09:6c:18:48:2c: 5d:e1:7c:f3:04:5e:99:b2:87:db:bd:98:3a:6e:cb: d8:47:3d:7c:e3:e2:82:fa:59:46:42:75:f1:2a:e4: 31:09:9d:15:40:83:7d:26:51:7d:bd:93:2f:35:6b: ee:59:18:34:62:8a:1d:20:8b:a7:84:77:07:cd:c7: e6:75:1f:1e:17:a0:5e:ea:fe:c4:3e:21:1a:ce:e5: 78:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:F5:2F:6F:88:31:BD:59:69:6A:F9:CD:3B:F6:10:63:BC:2A:56:0B X509v3 Authority Key Identifier: keyid:52:28:5B:87:54:F2:15:EB:EA:B6:14:DE:B8:6E:66:DA:3B:37:32:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/1/52285B8754F215EBEAB614DEB86E66DA3B37320C.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/52285B8754F215EBEAB614DEB86E66DA3B37320C.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/1/52285B8754F215EBEAB614DEB86E66DA3B37320C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:28:05:b1:bf:13:9e:25:0e:39:0a:e4:a9:22:2b:eb:8c:b1: 68:78:81:fa:45:6a:be:ff:eb:47:14:30:3e:9e:3d:f2:00:d8: 77:41:d7:59:cc:26:0f:f0:f6:c5:03:82:3d:62:80:37:3e:a4: d2:e2:65:a7:3a:f8:4f:1e:db:4a:4d:51:23:cf:46:c3:20:d0: bd:00:47:de:2d:bb:25:cf:64:3b:da:e9:f3:aa:3b:ab:98:dc: 6e:3d:ce:16:2b:5a:8e:1a:b4:23:94:12:76:c2:19:9e:39:80: 3d:2a:b5:8f:f6:e1:ac:0c:06:03:78:37:26:51:95:a4:59:92: 95:6f:19:b3:1a:ea:9f:d0:bb:66:f0:78:81:bf:dc:c9:ef:5e: c7:48:3f:c2:c6:f2:70:aa:94:99:5d:90:5f:bf:98:8b:ca:2b: 2d:20:41:bc:65:fe:a4:9c:0b:ae:d9:af:46:fe:9b:f2:c9:3b: 9c:65:02:c2:9a:e2:93:87:7e:a4:7f:fd:f6:84:95:88:6c:88: 0b:28:ec:fc:a8:0f:8b:a5:25:cf:79:c3:d4:ec:79:4d:9b:77: ec:cb:ba:7a:0d:c2:28:24:f3:8d:0e:3c:a1:b1:e6:90:42:57: ff:b2:06:ae:7e:f8:8a:04:ea:19:40:5a:a6:53:95:29:4b:27: 39:30:1c:04 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUQG1we0YFPhvqmRaPafElD++HzXIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTIyODVCODc1NEYyMTVFQkVBQjYxNERFQjg2RTY2REEz QjM3MzIwQzAeFw0yNjAyMjgyMzI4MzBaFw0yNjAzMDIwMjMyMzBaMDMxMTAvBgNV BAMTKDMwRjUyRjZGODgzMUJENTk2OTZBRjlDRDNCRjYxMDYzQkMyQTU2MEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCiYSa7wIe6X0vgcrNithZNUZU0 /b1s6NoyWgwle6pF04/e9+Qwx0kb/pQTS2WhQkmPTXquLmMxPuvrugSputri2moq 6G0mQAKM+gRISZwVJtoAI3fpmLvhtAD38HZOKi8IBsiwk7zUeQJFA/lMrfqTe5ex W4PY/l9vFITuxWI/givIo4E7oj0NGhMooKbEev407aQanJ+PNJMwzN+6DBuLPHIm A0YiPrTCu1s9yl4JbBhILF3hfPMEXpmyh9u9mDpuy9hHPXzj4oL6WUZCdfEq5DEJ nRVAg30mUX29ky81a+5ZGDRiih0gi6eEdwfNx+Z1Hx4XoF7q/sQ+IRrO5XiDAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUMPUvb4gxvVlpavnNO/YQY7wqVgswHwYDVR0j BBgwFoAUUihbh1TyFevqthTeuG5m2js3MgwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOGQ1Y2QxNGUtNWY2My00ZjFjLTk0ZTMtMjcwNTBjMjY2 NDgwLzEvNTIyODVCODc1NEYyMTVFQkVBQjYxNERFQjg2RTY2REEzQjM3MzIwQy5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC81MjI4NUI4NzU0RjIxNUVCRUFCNjE0REVC ODZFNjZEQTNCMzczMjBDLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzhkNWNkMTRlLTVmNjMtNGYxYy05NGUzLTI3MDUwYzI2NjQ4MC8xLzUyMjg1Qjg3 NTRGMjE1RUJFQUI2MTRERUI4NkU2NkRBM0IzNzMyMEMubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQASKAWx vxOeJQ45CuSpIivrjLFoeIH6RWq+/+tHFDA+nj3yANh3QddZzCYP8PbFA4I9YoA3 PqTS4mWnOvhPHttKTVEjz0bDINC9AEfeLbslz2Q72unzqjurmNxuPc4WK1qOGrQj lBJ2whmeOYA9KrWP9uGsDAYDeDcmUZWkWZKVbxmzGuqf0Ltm8HiBv9zJ717HSD/C xvJwqpSZXZBfv5iLyistIEG8Zf6knAuu2a9G/pvyyTucZQLCmuKTh36kf/32hJWI bIgLKOz8qA+LpSXPecPU7HlNm3fsy7p6DcIoJPONDjyhseaQQlf/sgaufviKBOoZ QFqmU5UpSyc5MBwE -----END CERTIFICATE-----Generated at Sun Mar 1 16:28:35 2026 by rpki-client