$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/1/52285B8754F215EBEAB614DEB86E66DA3B37320C.mft File: 52285B8754F215EBEAB614DEB86E66DA3B37320C.mft (raw, json) Hash identifier: NXlaux602TMclnJf7s4O60sVxJcO285L6l3PLwFk2+s= Subject key identifier: BA:CD:91:12:E5:C4:B0:F8:B9:3A:49:9D:78:D7:C2:77:77:DA:B7:D8 Authority key identifier: 52:28:5B:87:54:F2:15:EB:EA:B6:14:DE:B8:6E:66:DA:3B:37:32:0C Certificate issuer: /CN=52285B8754F215EBEAB614DEB86E66DA3B37320C Certificate serial: 378F704E3CE99B4631E5EAED60C82CEB42B036F7 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/52285B8754F215EBEAB614DEB86E66DA3B37320C.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/1/52285B8754F215EBEAB614DEB86E66DA3B37320C.mft Manifest number: 02EB Signing time: Thu 16 Apr 2026 20:22:04 +0000 Manifest this update: Thu 16 Apr 2026 20:17:04 +0000 Manifest next update: Sat 18 Apr 2026 00:21:04 +0000 Files and hashes: 1: 326131343a373538313a6632303a3a2f34382d3438203d3e20313533313736.roa (hash: Q+SHdUagvI6KZ73P7qEzwFM/MmpC3zK1RzbKHzMJDSM=) 2: 326131343a373538313a6632303a3a2f34342d3434203d3e20323135303834.roa (hash: ikRuOA2n8u4zq4qR5S8PkgRSZxYIGPGee0tyFklQIEM=) 3: 52285B8754F215EBEAB614DEB86E66DA3B37320C.crl (hash: b/E/OSw/SVzBuVrrl5upJdq8MnteTn+tpsIf0dIKhCU=) 4: 326131343a373538313a6130303a3a2f34302d3430203d3e20323135303834.roa (hash: 6SMGzy0qxU/C5+Cz9d8WI56z67FiL2uOHLuZUmmEFig=) 5: 326131343a373538313a623030303a3a2f33362d3336203d3e20323135303834.roa (hash: 8Iv1HdyRUhjcvQFIVfomOSyv77EzHn71qEiaLSvjvAE=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/1/52285B8754F215EBEAB614DEB86E66DA3B37320C.crl rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/1/52285B8754F215EBEAB614DEB86E66DA3B37320C.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/52285B8754F215EBEAB614DEB86E66DA3B37320C.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 18 Apr 2026 00:21:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:8f:70:4e:3c:e9:9b:46:31:e5:ea:ed:60:c8:2c:eb:42:b0:36:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=52285B8754F215EBEAB614DEB86E66DA3B37320C Validity Not Before: Apr 16 20:17:04 2026 GMT Not After : Apr 18 00:21:04 2026 GMT Subject: CN=BACD9112E5C4B0F8B93A499D78D7C27777DAB7D8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:ab:ad:57:3c:f2:02:b7:cb:bb:a6:38:9c:34: c5:8c:e7:7b:be:36:5e:9c:60:c7:fb:e6:4b:74:17: 77:6a:c6:67:eb:5d:b9:09:d7:d1:0e:fb:7d:f9:2f: d8:e6:47:96:91:23:51:e8:88:71:42:51:02:81:d4: 2c:eb:20:9f:70:25:6e:4e:76:c8:38:fa:fa:ae:e8: da:80:82:e3:27:9a:c7:14:26:ac:9c:80:35:63:fa: fe:5c:ca:75:7d:e9:b8:bd:c3:ec:44:54:ac:f1:b8: fd:65:16:f5:e9:32:87:c1:39:85:7e:09:ed:78:c6: 0e:b5:f5:33:c8:47:00:c4:8b:57:19:ea:c2:ea:26: 99:e3:b6:bc:20:30:0b:d1:3e:69:72:b5:91:76:c1: d7:d0:3d:d1:e6:8f:30:ed:ad:bc:75:e1:76:63:fd: c1:ac:7e:02:d9:8d:09:9e:fe:26:3d:4e:ee:fa:c8: 32:03:a9:3c:51:35:c5:59:3d:8a:b5:99:f6:7d:a1: 1c:28:72:5c:ca:2c:6b:cc:82:9d:6b:d3:86:0b:95: f4:ee:9d:e3:85:64:40:29:7f:03:a7:40:ba:07:62: bc:4c:25:b1:b4:74:e6:15:2c:06:3c:72:de:7d:44: 73:3e:ac:f3:f5:0a:52:a0:ed:4f:f6:80:ce:78:c9: 74:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:CD:91:12:E5:C4:B0:F8:B9:3A:49:9D:78:D7:C2:77:77:DA:B7:D8 X509v3 Authority Key Identifier: keyid:52:28:5B:87:54:F2:15:EB:EA:B6:14:DE:B8:6E:66:DA:3B:37:32:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/1/52285B8754F215EBEAB614DEB86E66DA3B37320C.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/52285B8754F215EBEAB614DEB86E66DA3B37320C.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/1/52285B8754F215EBEAB614DEB86E66DA3B37320C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:ff:73:a3:d4:f0:2c:3c:98:3d:1f:5e:bd:40:73:17:e4:bd: 89:7a:f7:74:0d:53:c6:40:01:8e:d9:13:b7:b7:dd:d1:08:34: e1:e6:a9:9b:51:a4:e7:1e:76:ec:72:1e:58:9c:7a:41:1d:c7: 5e:72:74:11:55:ed:54:ef:5b:15:0e:14:ef:46:6b:4c:ce:2c: f2:e2:ab:a6:06:40:83:47:b5:88:c4:a4:e6:89:ed:ef:88:01: 2a:78:21:a8:90:63:5f:d5:42:49:0c:32:29:13:fa:26:51:9e: e0:ee:12:df:c4:62:1b:2e:6f:0d:a6:cb:d8:06:c0:63:ed:99: 62:fe:b7:63:81:b8:5e:82:6f:90:fb:bc:b0:00:ff:f1:cb:54: 77:9d:8c:2c:a0:ab:f1:8f:f8:5d:21:d4:0d:a6:36:94:70:47: 7f:79:bd:ba:4e:ea:31:60:81:68:46:df:6b:8f:c6:ae:fd:d5: 5c:3a:66:25:30:64:02:02:aa:5a:73:19:91:14:15:fa:71:ca: 36:ba:d9:5d:7d:38:9d:7b:b5:7f:13:c5:16:aa:e2:77:02:68: 61:d1:52:5b:e5:68:94:13:92:bc:d2:a6:87:aa:3d:30:9e:c1: c1:2c:79:20:b4:45:a8:01:13:03:a4:49:6c:8f:8e:b5:6d:42: 5e:47:7e:2e -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUN49wTjzpm0Yx5ertYMgs60KwNvcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTIyODVCODc1NEYyMTVFQkVBQjYxNERFQjg2RTY2REEz QjM3MzIwQzAeFw0yNjA0MTYyMDE3MDRaFw0yNjA0MTgwMDIxMDRaMDMxMTAvBgNV BAMTKEJBQ0Q5MTEyRTVDNEIwRjhCOTNBNDk5RDc4RDdDMjc3NzdEQUI3RDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClq61XPPICt8u7pjicNMWM53u+ Nl6cYMf75kt0F3dqxmfrXbkJ19EO+335L9jmR5aRI1HoiHFCUQKB1CzrIJ9wJW5O dsg4+vqu6NqAguMnmscUJqycgDVj+v5cynV96bi9w+xEVKzxuP1lFvXpMofBOYV+ Ce14xg619TPIRwDEi1cZ6sLqJpnjtrwgMAvRPmlytZF2wdfQPdHmjzDtrbx14XZj /cGsfgLZjQme/iY9Tu76yDIDqTxRNcVZPYq1mfZ9oRwoclzKLGvMgp1r04YLlfTu neOFZEApfwOnQLoHYrxMJbG0dOYVLAY8ct59RHM+rPP1ClKg7U/2gM54yXRZAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUus2REuXEsPi5OkmdeNfCd3fat9gwHwYDVR0j BBgwFoAUUihbh1TyFevqthTeuG5m2js3MgwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOGQ1Y2QxNGUtNWY2My00ZjFjLTk0ZTMtMjcwNTBjMjY2 NDgwLzEvNTIyODVCODc1NEYyMTVFQkVBQjYxNERFQjg2RTY2REEzQjM3MzIwQy5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC81MjI4NUI4NzU0RjIxNUVCRUFCNjE0REVC ODZFNjZEQTNCMzczMjBDLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzhkNWNkMTRlLTVmNjMtNGYxYy05NGUzLTI3MDUwYzI2NjQ4MC8xLzUyMjg1Qjg3 NTRGMjE1RUJFQUI2MTRERUI4NkU2NkRBM0IzNzMyMEMubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBx/3Oj 1PAsPJg9H169QHMX5L2Jevd0DVPGQAGO2RO3t93RCDTh5qmbUaTnHnbsch5YnHpB HcdecnQRVe1U71sVDhTvRmtMzizy4qumBkCDR7WIxKTmie3viAEqeCGokGNf1UJJ DDIpE/omUZ7g7hLfxGIbLm8NpsvYBsBj7Zli/rdjgbhegm+Q+7ywAP/xy1R3nYws oKvxj/hdIdQNpjaUcEd/eb26TuoxYIFoRt9rj8au/dVcOmYlMGQCAqpacxmRFBX6 cco2utldfTide7V/E8UWquJ3Amhh0VJb5WiUE5K80qaHqj0wnsHBLHkgtEWoARMD pElsj461bUJeR34u -----END CERTIFICATE-----Generated at Fri Apr 17 16:18:08 2026 by rpki-client