$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/1/52285B8754F215EBEAB614DEB86E66DA3B37320C.mft File: 52285B8754F215EBEAB614DEB86E66DA3B37320C.mft (raw, json) Hash identifier: kGN7Arnq3pbEtumI8fnZhATQNVWibkxAKlpATSlgMu0= Subject key identifier: D5:C7:5E:19:A7:EA:0D:4C:46:4A:75:E7:56:40:BD:38:5E:1B:EC:48 Authority key identifier: 52:28:5B:87:54:F2:15:EB:EA:B6:14:DE:B8:6E:66:DA:3B:37:32:0C Certificate issuer: /CN=52285B8754F215EBEAB614DEB86E66DA3B37320C Certificate serial: 4767EC963F96D1F47F3AB7FAABB88F6C037D3758 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/52285B8754F215EBEAB614DEB86E66DA3B37320C.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/1/52285B8754F215EBEAB614DEB86E66DA3B37320C.mft Manifest number: 03C0 Signing time: Tue 22 Sep 2026 08:22:34 +0000 Manifest this update: Tue 22 Sep 2026 08:17:34 +0000 Manifest next update: Wed 23 Sep 2026 08:33:34 +0000 Files and hashes: 1: 326131343a373538313a6632303a3a2f34382d3438203d3e20313533313736.roa (hash: 8KUcwV+ZBGNa1TWr9TAbw1mQOwKknHp9Hus4NY1ZuW4=) 2: 326131343a373538313a6130303a3a2f34302d3430203d3e20323135303834.roa (hash: AMf8FFzkyNRTCLs/i7swnRAL3WtJKbW6+Q9+QH2tffk=) 3: 326131343a373538313a623030303a3a2f33362d3336203d3e20323135303834.roa (hash: N9L4nbL2Uo4P069vOshVKkJFc321LxJpH/q85ffpRGI=) 4: 326131343a373538313a6632303a3a2f34342d3434203d3e20323135303834.roa (hash: /AaiYsKWuqRgDvvUADUKcufSQBbG5oanOxBGHWa2vLA=) 5: 52285B8754F215EBEAB614DEB86E66DA3B37320C.crl (hash: 9srueUK2HbbDi5txnQoy4tQpgG0E1Uq3RpcdG7D5K+M=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/1/52285B8754F215EBEAB614DEB86E66DA3B37320C.crl rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/1/52285B8754F215EBEAB614DEB86E66DA3B37320C.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/52285B8754F215EBEAB614DEB86E66DA3B37320C.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 23 Sep 2026 08:33:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:67:ec:96:3f:96:d1:f4:7f:3a:b7:fa:ab:b8:8f:6c:03:7d:37:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=52285B8754F215EBEAB614DEB86E66DA3B37320C Validity Not Before: Sep 22 08:17:34 2026 GMT Not After : Sep 23 08:33:34 2026 GMT Subject: CN=D5C75E19A7EA0D4C464A75E75640BD385E1BEC48 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:88:8d:86:27:0c:14:eb:b3:56:ad:f5:91:f1: 57:d8:75:a0:d4:a1:4b:88:b0:f5:7f:fd:07:32:eb: 09:d2:08:fd:80:70:3e:fa:7d:63:a1:43:e9:6e:5c: 2c:15:7d:93:88:a1:60:5d:64:6d:30:dc:a9:0e:08: fa:6c:c7:44:24:0c:24:48:20:c7:c1:28:fe:7b:d7: bd:ee:fc:9c:e8:11:25:ae:a8:50:33:bf:1a:6d:0b: 73:0d:21:6b:e4:46:1a:92:6f:72:90:8a:0f:6d:2f: 3a:4f:dd:6d:a8:1a:30:6c:74:08:88:69:c4:1a:5b: 0a:77:dd:5a:88:30:f9:54:75:a4:44:b2:52:a1:f2: 8c:33:ad:7e:ae:85:06:be:b7:c4:05:25:f8:a0:88: b2:41:4c:43:7f:30:a5:cf:4c:5e:6c:8d:95:7e:c1: 4b:1e:62:01:5c:4b:13:9c:ca:8e:19:97:a2:02:cb: 40:99:d9:43:e4:86:a5:4c:6a:df:d0:4c:b9:db:96: ba:cc:6e:cd:b2:6f:c7:82:1e:63:0f:04:ef:fa:47: 0e:c2:c7:33:3d:29:d6:0e:85:db:d7:78:40:ad:6d: aa:ab:bb:68:ca:9e:91:62:07:f4:54:15:45:b5:e9: 14:70:f0:86:e7:eb:b8:94:b6:6b:b4:b2:71:e9:01: 92:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:C7:5E:19:A7:EA:0D:4C:46:4A:75:E7:56:40:BD:38:5E:1B:EC:48 X509v3 Authority Key Identifier: keyid:52:28:5B:87:54:F2:15:EB:EA:B6:14:DE:B8:6E:66:DA:3B:37:32:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/1/52285B8754F215EBEAB614DEB86E66DA3B37320C.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/52285B8754F215EBEAB614DEB86E66DA3B37320C.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/1/52285B8754F215EBEAB614DEB86E66DA3B37320C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:c0:5b:c7:8a:ed:6a:59:f7:b8:e3:41:a2:42:16:48:81:0d: 67:13:ce:d3:84:fc:90:e8:ac:84:e3:f3:24:78:05:81:fa:3e: b3:53:e0:51:38:f2:8b:31:e2:3a:cb:8f:e7:63:9e:cb:34:8d: 47:b7:d4:f1:27:3d:42:29:30:20:70:5c:4e:af:02:b1:79:ce: e3:b0:53:5c:3a:47:95:5c:4a:70:9d:72:fd:86:d2:04:28:fb: 48:95:19:c0:61:db:86:2d:5f:bb:d0:4e:66:8f:3d:b6:9e:0d: 6e:21:c3:77:ae:fe:a4:78:05:e0:95:f4:c6:00:71:dc:28:b6: d9:bb:71:80:c9:0f:6f:3f:8a:c0:ba:01:36:2f:37:7c:ce:6d: dc:03:54:44:a2:30:9b:94:97:85:91:42:b4:2d:7f:d7:f2:aa: 7c:84:e0:1e:96:c2:b8:7b:8b:c7:b8:6c:10:2b:af:fe:20:3b: 8c:03:23:7c:fc:1c:a8:70:5a:28:62:5e:ea:aa:ce:d3:1f:97: ca:db:cc:b7:dc:f7:4a:d3:d4:cc:19:95:df:71:48:b8:9c:08: 9c:e9:cd:d6:74:ee:c9:25:41:ef:38:33:55:63:4d:c4:b0:bc: 12:77:3c:ab:f1:42:b0:1c:36:94:c8:43:25:dd:31:52:c2:08: dc:7b:99:36 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUR2fslj+W0fR/Orf6q7iPbAN9N1gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTIyODVCODc1NEYyMTVFQkVBQjYxNERFQjg2RTY2REEz QjM3MzIwQzAeFw0yNjA5MjIwODE3MzRaFw0yNjA5MjMwODMzMzRaMDMxMTAvBgNV BAMTKEQ1Qzc1RTE5QTdFQTBENEM0NjRBNzVFNzU2NDBCRDM4NUUxQkVDNDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyiI2GJwwU67NWrfWR8VfYdaDU oUuIsPV//Qcy6wnSCP2AcD76fWOhQ+luXCwVfZOIoWBdZG0w3KkOCPpsx0QkDCRI IMfBKP57173u/JzoESWuqFAzvxptC3MNIWvkRhqSb3KQig9tLzpP3W2oGjBsdAiI acQaWwp33VqIMPlUdaREslKh8owzrX6uhQa+t8QFJfigiLJBTEN/MKXPTF5sjZV+ wUseYgFcSxOcyo4Zl6ICy0CZ2UPkhqVMat/QTLnblrrMbs2yb8eCHmMPBO/6Rw7C xzM9KdYOhdvXeECtbaqru2jKnpFiB/RUFUW16RRw8Ibn67iUtmu0snHpAZKlAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQU1cdeGafqDUxGSnXnVkC9OF4b7EgwHwYDVR0j BBgwFoAUUihbh1TyFevqthTeuG5m2js3MgwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOGQ1Y2QxNGUtNWY2My00ZjFjLTk0ZTMtMjcwNTBjMjY2 NDgwLzEvNTIyODVCODc1NEYyMTVFQkVBQjYxNERFQjg2RTY2REEzQjM3MzIwQy5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC81MjI4NUI4NzU0RjIxNUVCRUFCNjE0REVC ODZFNjZEQTNCMzczMjBDLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzhkNWNkMTRlLTVmNjMtNGYxYy05NGUzLTI3MDUwYzI2NjQ4MC8xLzUyMjg1Qjg3 NTRGMjE1RUJFQUI2MTRERUI4NkU2NkRBM0IzNzMyMEMubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQB5wFvH iu1qWfe440GiQhZIgQ1nE87ThPyQ6KyE4/MkeAWB+j6zU+BROPKLMeI6y4/nY57L NI1Ht9TxJz1CKTAgcFxOrwKxec7jsFNcOkeVXEpwnXL9htIEKPtIlRnAYduGLV+7 0E5mjz22ng1uIcN3rv6keAXglfTGAHHcKLbZu3GAyQ9vP4rAugE2Lzd8zm3cA1RE ojCblJeFkUK0LX/X8qp8hOAelsK4e4vHuGwQK6/+IDuMAyN8/ByocFooYl7qqs7T H5fK28y33PdK09TMGZXfcUi4nAic6c3WdO7JJUHvODNVY03EsLwSdzyr8UKwHDaU yEMl3TFSwgjce5k2 -----END CERTIFICATE-----Generated at Tue Sep 22 21:49:15 2026 by rpki-client