$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3E870B9A7003C4FD9C51BD354A9DEFA3FB77B4A9.mft File: 3E870B9A7003C4FD9C51BD354A9DEFA3FB77B4A9.mft (raw, json) Hash identifier: DSC6+F5+cCWUYsG3vkWdvu+3UWMn9kBHDRIOo/1w4Ko= Subject key identifier: 8A:C0:EF:DD:44:F2:2C:56:78:44:66:D7:AD:95:FC:9D:5E:17:04:3D Authority key identifier: 3E:87:0B:9A:70:03:C4:FD:9C:51:BD:35:4A:9D:EF:A3:FB:77:B4:A9 Certificate issuer: /CN=3e870b9a7003c4fd9c51bd354a9defa3fb77b4a9 Certificate serial: 71F2F4A8B5DFB1CA1159402EBCA76A6EF7E7A0F9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PocLmnADxP2cUb01Sp3vo_t3tKk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3E870B9A7003C4FD9C51BD354A9DEFA3FB77B4A9.mft Manifest number: 070A Signing time: Sat 13 Jun 2026 01:27:53 +0000 Manifest this update: Sat 13 Jun 2026 01:22:53 +0000 Manifest next update: Sun 14 Jun 2026 01:41:53 +0000 Files and hashes: 1: 3E870B9A7003C4FD9C51BD354A9DEFA3FB77B4A9.crl (hash: GoPVfoJSIb4PDay6SSw3DKMjvaRdt1SQiXKAy5rq7g4=) 2: 3138352e3231332e3234302e302f32342d3234203d3e20323135373033.roa (hash: KdpamzjNMoBH12606SSHSE8fPB2oVEwY+/Ehf6CDJmA=) 3: 3138352e3231332e3234332e302f32342d3234203d3e20323034393238.roa (hash: /82U/4ZCS1l7tEmRqZdiqoHQfHkAV0iGqgAdCf0IY6Q=) 4: 3138352e3232392e3230312e302f32342d3234203d3e20323030303137.roa (hash: PCz6aeIUTtC34FXSr6irNuWXyhZRMV7yjZ9OeA9cKuk=) 5: 3138352e3133302e36302e302f32342d3234203d3e203131383738.roa (hash: IVpkKpecJIjzuckRW19RYnHFzcqeOz1CHzHhlqd09/8=) 6: 3138352e3131312e3138382e302f32342d3234203d3e203632353633.roa (hash: X7Tn/GpCSEBlmrST5TEKgAjVIubIFvn/OXAnR/EzN3o=) 7: 3138352e3231332e3234332e302f32342d3234203d3e203330343536.roa (hash: HHWDsn/geYTSKOK374fOgzwqQ04cratsjB9aVUs6qO0=) 8: 3138352e3133302e36322e302f32342d3234203d3e20323036313530.roa (hash: 0Uta0mciJtwdV1pzRO+5GA2qv0qJ2rULFPtgrlRyMi0=) 9: 39312e3133322e3232372e302f32342d3234203d3e20323132333834.roa (hash: eh1Z74wbnDki2jWa8j9mKK2ooveQFWs0ccPHyRr5G7Y=) 10: 3138352e3234342e39352e302f32342d3234203d3e2039333034.roa (hash: sFAOUSD7hd0lBBY5HPUN0ymlfkvwOAzzt94UPfXefWU=) 11: 3138352e3232392e3230302e302f32342d3234203d3e20323037303139.roa (hash: 1bceaNlyoOp1upDNmtgefthFRPSg/dp+QwWX8BNP7X8=) 12: 3138352e3232392e3230322e302f32342d3234203d3e20323130303330.roa (hash: LqK97diQcFrb4344S9ThgI9qIfk24xWO2D6Fzod4ApM=) 13: 3138352e3231332e3234322e302f32342d3234203d3e203232343237.roa (hash: rxGzTHw2ETBLYdKcURKX80/JYXYHlHWFPETTk7njjlE=) 14: 3138352e3133302e36332e302f32342d3234203d3e203332313831.roa (hash: krs6rxjGgkgxIC0XFsSJIDbJbJTaOxRVYKdhwP98j0o=) 15: 326130363a356563303a3a2f34382d3438203d3e20323034363933.roa (hash: 1uKLPQUne0QcXblB3NW5HCIymd03TIpdjdnWqSBKxm8=) 16: 3138352e3133302e36312e302f32342d3234203d3e20323732363936.roa (hash: iEuXNsbf+xsxf1NL3afxi/eNCMhpHPndZJ3OWTl2z+U=) 17: 3138352e3232392e3230332e302f32342d3234203d3e20323034333939.roa (hash: o2s9iRRo/HWpVNV66/X3K8Nx40dZXcSQ+ar/RSKpLZ4=) 18: 39312e3133322e3232372e302f32342d3234203d3e20323132333335.roa (hash: 4nM6t6s+oklrwoQsrohzelZ9jLVJM3XAMUC6E2raQWI=) 19: 3138352e3231332e3234312e302f32342d3234203d3e20323131303932.roa (hash: 7qy707kA5n1DMqz1ORJoFL0VX7ypxya3lTKn4BjX8QI=) 20: 3138352e3234342e39342e302f32342d3234203d3e20333937343233.roa (hash: oZOogcZA7gOpZC0s0tbGMXCZZe5qdoNGw7VhUnq2iag=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3E870B9A7003C4FD9C51BD354A9DEFA3FB77B4A9.crl rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3E870B9A7003C4FD9C51BD354A9DEFA3FB77B4A9.mft rsync://rpki.ripe.net/repository/DEFAULT/PocLmnADxP2cUb01Sp3vo_t3tKk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Jun 2026 01:41:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:f2:f4:a8:b5:df:b1:ca:11:59:40:2e:bc:a7:6a:6e:f7:e7:a0:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e870b9a7003c4fd9c51bd354a9defa3fb77b4a9 Validity Not Before: Jun 13 01:22:53 2026 GMT Not After : Jun 14 01:41:53 2026 GMT Subject: CN=8AC0EFDD44F22C56784466D7AD95FC9D5E17043D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:da:1f:a1:50:df:b3:03:99:bb:2f:43:16:14: 7e:9e:73:27:b9:86:d1:95:4f:32:10:54:50:35:da: ae:63:4c:96:bd:85:c0:68:6a:6e:d5:93:f9:f9:51: ca:ae:c6:ce:c5:b3:d6:6b:52:19:15:24:2b:38:7e: d6:72:42:51:d1:e4:f1:c5:3a:73:5d:c8:ba:75:0e: e4:a5:6d:2c:ed:8b:56:03:57:39:84:db:fd:68:47: fa:8c:ca:7f:d8:96:3f:e2:be:5f:2e:f8:33:a2:be: 5f:a5:68:d5:d3:71:54:7e:da:ce:61:dc:cd:d4:61: 27:5c:a4:54:2c:4f:cd:7d:b8:fb:35:e5:96:18:12: f5:94:5f:13:45:49:ce:d7:1a:e2:e3:4a:17:59:da: 0d:80:e6:45:17:8b:5d:b2:47:a5:2b:64:72:a5:b7: 2a:48:e2:f8:de:52:f1:b8:12:54:91:a3:55:19:80: fb:22:de:54:7b:80:73:af:73:1d:e2:9a:7f:39:08: 9e:d7:a2:38:b2:49:83:ed:70:fd:5d:17:07:a6:d3: e5:0a:0e:bf:42:4f:c9:9c:97:57:d0:78:67:ec:f1: b4:6f:63:15:de:90:1c:e9:e9:5b:42:28:55:f8:e9: e7:76:c7:e6:19:e3:e5:99:79:1c:8c:7d:04:1b:1e: d7:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:C0:EF:DD:44:F2:2C:56:78:44:66:D7:AD:95:FC:9D:5E:17:04:3D X509v3 Authority Key Identifier: keyid:3E:87:0B:9A:70:03:C4:FD:9C:51:BD:35:4A:9D:EF:A3:FB:77:B4:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3E870B9A7003C4FD9C51BD354A9DEFA3FB77B4A9.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PocLmnADxP2cUb01Sp3vo_t3tKk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3E870B9A7003C4FD9C51BD354A9DEFA3FB77B4A9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b5:8c:2c:a0:c3:ef:b4:3c:f7:de:06:ab:0a:62:6a:12:8b:97: 33:34:63:ab:2c:36:06:d1:b5:ed:72:9d:bb:a2:9c:a3:1b:7d: 00:d2:8a:33:4e:ca:a5:cf:2e:73:49:25:63:e0:b3:fe:9a:30: 84:21:94:cb:4e:42:f9:cd:70:98:ab:ff:48:6a:cb:8c:c9:21: cf:9b:0b:04:ec:95:31:63:56:ea:68:79:68:28:c7:0b:e6:94: 79:9c:d4:1f:5b:82:de:17:91:d8:e2:4e:dc:62:a8:a6:a8:4f: d8:c1:92:10:5d:28:3c:d2:20:5f:27:5f:28:a9:30:43:9c:60: fc:ec:98:65:61:2d:c7:ec:54:e2:c1:d0:34:04:b2:97:74:09: 59:69:33:75:ff:cd:63:5a:e0:4b:6a:86:35:8a:f9:54:dd:31: dd:5e:d0:c0:fd:eb:2e:28:f0:90:2b:dc:cd:e5:c9:a0:6b:94: 8d:55:e2:1d:2c:58:3e:2c:73:9a:40:27:f7:af:9f:bc:43:10: c6:46:e9:54:90:75:cc:e0:7f:b1:ec:0c:90:88:3c:3b:3f:92: d6:81:50:5b:d5:4d:dc:5d:4c:f3:2c:8a:ed:c0:23:07:1b:40: de:49:1c:1f:4a:25:6e:d2:57:9b:9f:b3:dd:f1:ef:f7:23:95: 6f:f1:16:a6 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUcfL0qLXfscoRWUAuvKdqbvfnoPkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM2U4NzBiOWE3MDAzYzRmZDljNTFiZDM1NGE5ZGVmYTNm Yjc3YjRhOTAeFw0yNjA2MTMwMTIyNTNaFw0yNjA2MTQwMTQxNTNaMDMxMTAvBgNV BAMTKDhBQzBFRkRENDRGMjJDNTY3ODQ0NjZEN0FEOTVGQzlENUUxNzA0M0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDb2h+hUN+zA5m7L0MWFH6ecye5 htGVTzIQVFA12q5jTJa9hcBoam7Vk/n5Ucquxs7Fs9ZrUhkVJCs4ftZyQlHR5PHF OnNdyLp1DuSlbSzti1YDVzmE2/1oR/qMyn/Ylj/ivl8u+DOivl+laNXTcVR+2s5h 3M3UYSdcpFQsT819uPs15ZYYEvWUXxNFSc7XGuLjShdZ2g2A5kUXi12yR6UrZHKl typI4vjeUvG4ElSRo1UZgPsi3lR7gHOvcx3imn85CJ7XojiySYPtcP1dFwem0+UK Dr9CT8mcl1fQeGfs8bRvYxXekBzp6VtCKFX46ed2x+YZ4+WZeRyMfQQbHtdVAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUisDv3UTyLFZ4RGbXrZX8nV4XBD0wHwYDVR0j BBgwFoAUPocLmnADxP2cUb01Sp3vo/t3tKkwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYzVkMThlODItNGQ2OC00NWE2LWE1ZGYtY2FjMTE1YWQy Mjc5LzAvM0U4NzBCOUE3MDAzQzRGRDlDNTFCRDM1NEE5REVGQTNGQjc3QjRBOS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1BvY0xtbkFEeFAyY1ViMDFTcDN2b190 M3RLay5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9jNWQxOGU4Mi00 ZDY4LTQ1YTYtYTVkZi1jYWMxMTVhZDIyNzkvMC8zRTg3MEI5QTcwMDNDNEZEOUM1 MUJEMzU0QTlERUZBM0ZCNzdCNEE5Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtYwsoMPvtDz33garCmJq EouXMzRjqyw2BtG17XKdu6Kcoxt9ANKKM07Kpc8uc0klY+Cz/powhCGUy05C+c1w mKv/SGrLjMkhz5sLBOyVMWNW6mh5aCjHC+aUeZzUH1uC3heR2OJO3GKopqhP2MGS EF0oPNIgXydfKKkwQ5xg/OyYZWEtx+xU4sHQNASyl3QJWWkzdf/NY1rgS2qGNYr5 VN0x3V7QwP3rLijwkCvczeXJoGuUjVXiHSxYPixzmkAn96+fvEMQxkbpVJB1zOB/ sewMkIg8Oz+S1oFQW9VN3F1M8yyK7cAjBxtA3kkcH0olbtJXm5+z3fHv9yOVb/EW pg== -----END CERTIFICATE-----Generated at Sat Jun 13 19:27:10 2026 by rpki-client