$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3E870B9A7003C4FD9C51BD354A9DEFA3FB77B4A9.mft File: 3E870B9A7003C4FD9C51BD354A9DEFA3FB77B4A9.mft (raw, json) Hash identifier: WuKPfbunaoAilGPglGKbI+9QYJ/x9jg/dJK4GYRSm98= Subject key identifier: BA:95:57:18:2D:46:CA:39:C5:6A:37:3C:57:8B:AE:70:B9:B5:B1:6E Authority key identifier: 3E:87:0B:9A:70:03:C4:FD:9C:51:BD:35:4A:9D:EF:A3:FB:77:B4:A9 Certificate issuer: /CN=3e870b9a7003c4fd9c51bd354a9defa3fb77b4a9 Certificate serial: 0A1D2CAE1ED68AF74765FF77D9E1F26CDD706855 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PocLmnADxP2cUb01Sp3vo_t3tKk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3E870B9A7003C4FD9C51BD354A9DEFA3FB77B4A9.mft Manifest number: 07A3 Signing time: Mon 21 Sep 2026 15:55:46 +0000 Manifest this update: Mon 21 Sep 2026 15:50:46 +0000 Manifest next update: Tue 22 Sep 2026 17:49:46 +0000 Files and hashes: 1: 3E870B9A7003C4FD9C51BD354A9DEFA3FB77B4A9.crl (hash: oabvow4DjLKZltiJ4NKCsbroW5ce7kDCaA/61M8vdfA=) 2: 3138352e3232392e3230312e302f32342d3234203d3e20323030303137.roa (hash: PCz6aeIUTtC34FXSr6irNuWXyhZRMV7yjZ9OeA9cKuk=) 3: 3138352e3131312e3138382e302f32342d3234203d3e203632353633.roa (hash: X7Tn/GpCSEBlmrST5TEKgAjVIubIFvn/OXAnR/EzN3o=) 4: 3138352e3231332e3234312e302f32342d3234203d3e203230343733.roa (hash: ME9v7cOeLgqdWL4SWS9m0HsfFEm4m9vPx70KgvsaHKM=) 5: 3138352e3232392e3230302e302f32342d3234203d3e2039333034.roa (hash: Msloifrt/kLCe0SjqxgGF92lnUxKU95znivEpNjSmVE=) 6: 3138352e3232392e3230332e302f32342d3234203d3e20323034333939.roa (hash: o2s9iRRo/HWpVNV66/X3K8Nx40dZXcSQ+ar/RSKpLZ4=) 7: 3138352e3231332e3234302e302f32342d3234203d3e20323135373033.roa (hash: KdpamzjNMoBH12606SSHSE8fPB2oVEwY+/Ehf6CDJmA=) 8: 3138352e3232392e3230322e302f32342d3234203d3e20323130303330.roa (hash: Iq7mX+2Gdzh11Cz+eab6E5JpoAS8/V5c+VHbjbSnpR0=) 9: 3138352e3231332e3234332e302f32342d3234203d3e203330343536.roa (hash: HHWDsn/geYTSKOK374fOgzwqQ04cratsjB9aVUs6qO0=) 10: 3138352e3234342e39342e302f32342d3234203d3e20333937343233.roa (hash: oZOogcZA7gOpZC0s0tbGMXCZZe5qdoNGw7VhUnq2iag=) 11: 3138352e3231332e3234322e302f32342d3234203d3e203232343237.roa (hash: rxGzTHw2ETBLYdKcURKX80/JYXYHlHWFPETTk7njjlE=) 12: 3138352e3231332e3234312e302f32342d3234203d3e20323031393037.roa (hash: H+hJVSb3SoCTrrahZtJtGrpdA3V7alBDYoRJDY20rZ8=) 13: 3138352e3133302e36322e302f32342d3234203d3e20323036313530.roa (hash: 0Uta0mciJtwdV1pzRO+5GA2qv0qJ2rULFPtgrlRyMi0=) 14: 3138352e3133302e36302e302f32342d3234203d3e203131383738.roa (hash: IVpkKpecJIjzuckRW19RYnHFzcqeOz1CHzHhlqd09/8=) 15: 326130363a356563303a3a2f34382d3438203d3e20323034363933.roa (hash: S1/Y/6EPQQnfPCOtjeEUzrWHJ84koF95fYG1w/Kcp2o=) 16: 3138352e3133302e36312e302f32342d3234203d3e20323732363936.roa (hash: iEuXNsbf+xsxf1NL3afxi/eNCMhpHPndZJ3OWTl2z+U=) 17: 3138352e3133302e36332e302f32342d3234203d3e203332313831.roa (hash: NGEavlC9krxVQb4oA8xeNjVMdvRiumafje1lIvRB/hg=) 18: 39312e3133322e3232372e302f32342d3234203d3e20323132333335.roa (hash: 4nM6t6s+oklrwoQsrohzelZ9jLVJM3XAMUC6E2raQWI=) 19: 3138352e3234342e39352e302f32342d3234203d3e203330303538.roa (hash: 18I/ng9HI5XuObuxE8W3wRTkaWJpr3T1qz3Rt9UUAds=) 20: 39312e3133322e3232372e302f32342d3234203d3e20323132333834.roa (hash: eh1Z74wbnDki2jWa8j9mKK2ooveQFWs0ccPHyRr5G7Y=) 21: 3138352e3231332e3234332e302f32342d3234203d3e20323034393238.roa (hash: uCL1WpQqTZHx28v635AJc2UxBy3JsNUOhCCjsYiSzdI=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3E870B9A7003C4FD9C51BD354A9DEFA3FB77B4A9.crl rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3E870B9A7003C4FD9C51BD354A9DEFA3FB77B4A9.mft rsync://rpki.ripe.net/repository/DEFAULT/PocLmnADxP2cUb01Sp3vo_t3tKk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 22 Sep 2026 17:49:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:1d:2c:ae:1e:d6:8a:f7:47:65:ff:77:d9:e1:f2:6c:dd:70:68:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e870b9a7003c4fd9c51bd354a9defa3fb77b4a9 Validity Not Before: Sep 21 15:50:46 2026 GMT Not After : Sep 22 17:49:46 2026 GMT Subject: CN=BA9557182D46CA39C56A373C578BAE70B9B5B16E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:b5:db:d5:72:a5:11:2d:2a:fb:5f:c3:88:be: 42:71:ea:db:82:d4:5d:ee:a7:d4:f2:5a:2e:f8:b6: 04:30:67:ce:5d:c0:7f:ce:f3:29:0a:c9:5e:5f:d1: f9:f6:1f:2d:f7:18:6a:98:ae:58:f0:6b:3b:79:12: cd:c1:a1:a2:af:e3:ed:4f:2f:35:49:30:0c:82:33: a6:81:a3:bb:bc:ad:46:d1:44:ec:4d:96:24:9e:a1: 4d:0f:e5:e0:45:76:8b:68:79:7e:d3:ce:4b:08:62: f4:94:1e:94:95:f4:77:d8:e9:b5:31:eb:e2:ea:64: 5f:93:79:e0:f4:3d:ea:be:c8:b7:72:e0:7e:90:d3: df:02:cf:12:ab:f8:56:e5:a0:92:51:4e:ff:16:ad: ee:a7:70:d0:41:3d:ca:d3:a2:50:e8:90:d5:13:41: 5e:89:91:75:f2:56:e0:84:7c:c6:31:b6:ca:2c:3b: 01:89:9f:56:06:0b:b3:67:b0:69:60:e5:b7:ec:2f: da:94:83:6e:2f:7e:9f:cb:97:b9:81:fe:8f:0d:fc: b0:f0:7f:44:ee:7b:fc:d9:6b:cf:30:dd:d3:ed:40: d3:43:bb:a8:af:d4:a9:51:61:67:7b:c3:cd:d1:43: a5:98:95:12:ee:f6:03:00:b7:b0:11:1f:4d:1e:fa: ac:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:95:57:18:2D:46:CA:39:C5:6A:37:3C:57:8B:AE:70:B9:B5:B1:6E X509v3 Authority Key Identifier: keyid:3E:87:0B:9A:70:03:C4:FD:9C:51:BD:35:4A:9D:EF:A3:FB:77:B4:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3E870B9A7003C4FD9C51BD354A9DEFA3FB77B4A9.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PocLmnADxP2cUb01Sp3vo_t3tKk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3E870B9A7003C4FD9C51BD354A9DEFA3FB77B4A9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:df:1c:fa:15:66:ae:b7:cc:dd:f1:53:b2:b3:ea:61:e7:d0: e7:56:23:cf:60:0e:8d:58:10:8f:4b:24:4e:89:3a:b1:36:e4: 28:e0:3b:fa:99:16:3d:53:57:09:46:05:4e:25:fa:ff:4d:b4: 3d:f7:4c:6f:3e:90:ab:86:ae:a3:a3:d4:5e:b1:2b:47:fa:10: 71:7e:65:1c:75:7f:9c:2f:2f:a0:f9:44:c3:71:41:1f:79:7b: 66:9e:92:2b:24:57:f0:07:f5:70:3f:44:50:73:ed:f9:e6:76: ff:fa:aa:92:b2:3a:5c:4b:b5:dc:4c:ce:26:52:7a:36:e1:4e: 6e:3b:bb:a4:eb:58:18:21:8c:0e:0c:57:f5:7e:50:97:69:b6: 37:23:ef:2b:50:a4:a9:6f:0b:af:96:81:9e:1c:e3:73:93:f7: 90:16:c8:ed:95:b1:d6:4d:ce:8a:ee:37:0e:ad:5d:ab:a6:f7: 98:b8:77:13:fd:e0:a5:13:6a:74:e4:64:46:f5:06:58:28:88: 65:86:c8:db:65:25:fd:e0:21:69:da:59:31:a1:a7:b1:89:c6: 31:b0:f1:e5:7c:b9:4c:32:ea:31:27:7f:ba:b9:94:3d:b8:54: 52:40:c9:20:d4:87:3a:e0:42:21:0a:8b:28:28:a5:a3:1f:05: 01:82:49:c0 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUCh0srh7WivdHZf932eHybN1waFUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM2U4NzBiOWE3MDAzYzRmZDljNTFiZDM1NGE5ZGVmYTNm Yjc3YjRhOTAeFw0yNjA5MjExNTUwNDZaFw0yNjA5MjIxNzQ5NDZaMDMxMTAvBgNV BAMTKEJBOTU1NzE4MkQ0NkNBMzlDNTZBMzczQzU3OEJBRTcwQjlCNUIxNkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDptdvVcqURLSr7X8OIvkJx6tuC 1F3up9TyWi74tgQwZ85dwH/O8ykKyV5f0fn2Hy33GGqYrljwazt5Es3BoaKv4+1P LzVJMAyCM6aBo7u8rUbRROxNliSeoU0P5eBFdotoeX7TzksIYvSUHpSV9HfY6bUx 6+LqZF+TeeD0Peq+yLdy4H6Q098CzxKr+FbloJJRTv8Wre6ncNBBPcrTolDokNUT QV6JkXXyVuCEfMYxtsosOwGJn1YGC7NnsGlg5bfsL9qUg24vfp/Ll7mB/o8N/LDw f0Tue/zZa88w3dPtQNNDu6iv1KlRYWd7w83RQ6WYlRLu9gMAt7ARH00e+qxVAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUupVXGC1GyjnFajc8V4uucLm1sW4wHwYDVR0j BBgwFoAUPocLmnADxP2cUb01Sp3vo/t3tKkwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYzVkMThlODItNGQ2OC00NWE2LWE1ZGYtY2FjMTE1YWQy Mjc5LzAvM0U4NzBCOUE3MDAzQzRGRDlDNTFCRDM1NEE5REVGQTNGQjc3QjRBOS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1BvY0xtbkFEeFAyY1ViMDFTcDN2b190 M3RLay5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9jNWQxOGU4Mi00 ZDY4LTQ1YTYtYTVkZi1jYWMxMTVhZDIyNzkvMC8zRTg3MEI5QTcwMDNDNEZEOUM1 MUJEMzU0QTlERUZBM0ZCNzdCNEE5Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGd8c+hVmrrfM3fFTsrPq YefQ51Yjz2AOjVgQj0skTok6sTbkKOA7+pkWPVNXCUYFTiX6/020PfdMbz6Qq4au o6PUXrErR/oQcX5lHHV/nC8voPlEw3FBH3l7Zp6SKyRX8Af1cD9EUHPt+eZ2//qq krI6XEu13EzOJlJ6NuFObju7pOtYGCGMDgxX9X5Ql2m2NyPvK1CkqW8Lr5aBnhzj c5P3kBbI7ZWx1k3Oiu43Dq1dq6b3mLh3E/3gpRNqdORkRvUGWCiIZYbI22Ul/eAh adpZMaGnsYnGMbDx5Xy5TDLqMSd/urmUPbhUUkDJINSHOuBCIQqLKCilox8FAYJJ wA== -----END CERTIFICATE-----Generated at Tue Sep 22 12:44:37 2026 by rpki-client