$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3E870B9A7003C4FD9C51BD354A9DEFA3FB77B4A9.mft File: 3E870B9A7003C4FD9C51BD354A9DEFA3FB77B4A9.mft (raw, json) Hash identifier: EF9X71JfiBZLIaQOaprbOWrrtIDn4xIwt4bE31m/iMQ= Subject key identifier: CE:0E:5C:34:38:EC:2F:EF:31:42:ED:DA:55:84:09:FE:AA:FD:AF:2E Authority key identifier: 3E:87:0B:9A:70:03:C4:FD:9C:51:BD:35:4A:9D:EF:A3:FB:77:B4:A9 Certificate issuer: /CN=3e870b9a7003c4fd9c51bd354a9defa3fb77b4a9 Certificate serial: 459539BC8D1A3C8457DD2FD41EB3A879B6E35E91 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PocLmnADxP2cUb01Sp3vo_t3tKk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3E870B9A7003C4FD9C51BD354A9DEFA3FB77B4A9.mft Manifest number: 0752 Signing time: Tue 28 Jul 2026 04:12:09 +0000 Manifest this update: Tue 28 Jul 2026 04:07:09 +0000 Manifest next update: Wed 29 Jul 2026 07:33:09 +0000 Files and hashes: 1: 3138352e3133302e36302e302f32342d3234203d3e203131383738.roa (hash: IVpkKpecJIjzuckRW19RYnHFzcqeOz1CHzHhlqd09/8=) 2: 3138352e3231332e3234312e302f32342d3234203d3e203235313938.roa (hash: /VSRAbQWRdnISeNPCesTwz43zE7GsIAapcnfDbJ/Ckc=) 3: 3138352e3232392e3230332e302f32342d3234203d3e20323034333939.roa (hash: o2s9iRRo/HWpVNV66/X3K8Nx40dZXcSQ+ar/RSKpLZ4=) 4: 3E870B9A7003C4FD9C51BD354A9DEFA3FB77B4A9.crl (hash: o+wPhLq5TbUCLJQurMcfgg9vSMK1iDC2Fp1KdCS4x2s=) 5: 3138352e3232392e3230302e302f32342d3234203d3e20383334.roa (hash: GeFFzvt6Q/zjQpJ8DLO3Ri2bMdnOM5XsQZvzfBI3bRA=) 6: 3138352e3232392e3230312e302f32342d3234203d3e20323030303137.roa (hash: PCz6aeIUTtC34FXSr6irNuWXyhZRMV7yjZ9OeA9cKuk=) 7: 3138352e3231332e3234322e302f32342d3234203d3e203232343237.roa (hash: rxGzTHw2ETBLYdKcURKX80/JYXYHlHWFPETTk7njjlE=) 8: 326130363a356563303a3a2f34382d3438203d3e20323034363933.roa (hash: 1uKLPQUne0QcXblB3NW5HCIymd03TIpdjdnWqSBKxm8=) 9: 39312e3133322e3232372e302f32342d3234203d3e20323132333834.roa (hash: eh1Z74wbnDki2jWa8j9mKK2ooveQFWs0ccPHyRr5G7Y=) 10: 3138352e3133302e36312e302f32342d3234203d3e20323732363936.roa (hash: iEuXNsbf+xsxf1NL3afxi/eNCMhpHPndZJ3OWTl2z+U=) 11: 3138352e3131312e3138382e302f32342d3234203d3e203632353633.roa (hash: X7Tn/GpCSEBlmrST5TEKgAjVIubIFvn/OXAnR/EzN3o=) 12: 3138352e3232392e3230322e302f32342d3234203d3e20323130303330.roa (hash: LqK97diQcFrb4344S9ThgI9qIfk24xWO2D6Fzod4ApM=) 13: 3138352e3133302e36322e302f32342d3234203d3e20323036313530.roa (hash: 0Uta0mciJtwdV1pzRO+5GA2qv0qJ2rULFPtgrlRyMi0=) 14: 3138352e3133302e36332e302f32342d3234203d3e203332313831.roa (hash: NGEavlC9krxVQb4oA8xeNjVMdvRiumafje1lIvRB/hg=) 15: 3138352e3231332e3234332e302f32342d3234203d3e20323034393238.roa (hash: /82U/4ZCS1l7tEmRqZdiqoHQfHkAV0iGqgAdCf0IY6Q=) 16: 39312e3133322e3232372e302f32342d3234203d3e20323132333335.roa (hash: 4nM6t6s+oklrwoQsrohzelZ9jLVJM3XAMUC6E2raQWI=) 17: 3138352e3231332e3234302e302f32342d3234203d3e20323135373033.roa (hash: KdpamzjNMoBH12606SSHSE8fPB2oVEwY+/Ehf6CDJmA=) 18: 3138352e3231332e3234332e302f32342d3234203d3e203330343536.roa (hash: HHWDsn/geYTSKOK374fOgzwqQ04cratsjB9aVUs6qO0=) 19: 3138352e3234342e39342e302f32342d3234203d3e20333937343233.roa (hash: oZOogcZA7gOpZC0s0tbGMXCZZe5qdoNGw7VhUnq2iag=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3E870B9A7003C4FD9C51BD354A9DEFA3FB77B4A9.crl rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3E870B9A7003C4FD9C51BD354A9DEFA3FB77B4A9.mft rsync://rpki.ripe.net/repository/DEFAULT/PocLmnADxP2cUb01Sp3vo_t3tKk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 29 Jul 2026 07:33:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:95:39:bc:8d:1a:3c:84:57:dd:2f:d4:1e:b3:a8:79:b6:e3:5e:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e870b9a7003c4fd9c51bd354a9defa3fb77b4a9 Validity Not Before: Jul 28 04:07:09 2026 GMT Not After : Jul 29 07:33:09 2026 GMT Subject: CN=CE0E5C3438EC2FEF3142EDDA558409FEAAFDAF2E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:8a:f1:a9:2d:58:75:ee:11:dd:7c:d7:17:15: cd:7c:91:ab:52:22:a6:ba:cb:d4:09:72:09:02:e0: aa:5e:eb:ed:e8:3d:db:33:8a:be:d4:2d:9b:32:39: 0d:39:2a:5b:83:84:4c:1a:4e:a9:50:3f:27:9a:41: be:ba:5f:d2:2d:b0:89:3c:75:4d:03:d8:61:b2:86: 6e:ff:26:04:d1:8d:28:d5:3a:46:0f:dd:c5:a7:9c: 39:4f:a3:48:06:1f:9f:cb:2d:c2:da:b9:30:5a:3c: d2:e4:37:ab:16:33:81:05:bd:80:b0:c5:10:d7:de: fa:64:f1:3e:81:a3:43:f4:22:82:43:c0:e1:44:14: 3a:1d:9a:06:53:51:2c:2a:2c:c3:5b:b3:bb:d5:9f: 37:ad:12:e1:88:a0:69:2a:93:28:98:b0:ea:50:36: d7:00:a9:b6:d4:8e:24:3e:f3:5e:75:83:83:23:ae: 30:5b:38:7e:7c:42:ea:6f:e4:d2:62:a7:71:50:70: 2f:bc:bc:d2:c9:54:63:43:a4:11:bc:10:25:69:ba: 5b:bc:49:7b:8c:11:c0:cb:08:b7:bc:11:52:ca:18: 61:63:8d:37:d4:f2:3d:7c:6f:3b:ae:64:35:c4:77: 86:a8:89:bc:55:78:8d:5b:4e:a7:d5:25:1f:0a:66: bb:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:0E:5C:34:38:EC:2F:EF:31:42:ED:DA:55:84:09:FE:AA:FD:AF:2E X509v3 Authority Key Identifier: keyid:3E:87:0B:9A:70:03:C4:FD:9C:51:BD:35:4A:9D:EF:A3:FB:77:B4:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3E870B9A7003C4FD9C51BD354A9DEFA3FB77B4A9.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PocLmnADxP2cUb01Sp3vo_t3tKk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3E870B9A7003C4FD9C51BD354A9DEFA3FB77B4A9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:f1:06:73:eb:3e:69:b0:d7:85:d4:8e:15:ba:af:63:7a:bc: cf:90:33:87:66:0e:dd:90:6f:1a:d2:0a:59:88:ca:9f:88:d3: d3:ee:77:23:65:a4:25:b6:35:12:db:91:77:b1:34:a7:34:9a: 92:83:1c:99:b1:ab:7a:d7:65:8c:f4:ec:cb:a9:f3:3e:ba:44: c2:af:82:d6:77:b8:20:cd:3b:65:36:69:0c:86:95:81:1c:f9: 4d:df:e3:15:c1:a5:87:20:d1:a6:ce:a4:fc:46:a5:66:33:78: a0:7c:db:52:a2:c0:5e:37:1b:41:ee:53:a5:53:99:44:10:6b: 1a:31:2f:6c:02:7b:4d:4f:42:b7:1c:2c:15:04:46:99:28:2e: c5:ef:14:c1:ff:95:10:7a:58:4f:73:e6:22:02:25:25:0a:f6: 31:b5:16:8c:7d:75:f6:85:b3:27:b1:32:cb:af:37:8e:c7:15: 3e:22:68:3c:df:6b:25:d2:9e:70:a0:9d:e9:1b:a5:d3:11:27: 45:53:3d:fc:64:42:4a:e5:67:31:ce:5e:01:7b:bb:d0:b5:2f: 29:01:87:62:d0:81:e2:d1:13:d4:a6:72:ac:5c:df:46:79:26: b4:14:1b:12:b4:4e:d8:31:e6:0b:77:24:07:f8:c5:b8:24:6b: c4:c1:ec:ef -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIURZU5vI0aPIRX3S/UHrOoebbjXpEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM2U4NzBiOWE3MDAzYzRmZDljNTFiZDM1NGE5ZGVmYTNm Yjc3YjRhOTAeFw0yNjA3MjgwNDA3MDlaFw0yNjA3MjkwNzMzMDlaMDMxMTAvBgNV BAMTKENFMEU1QzM0MzhFQzJGRUYzMTQyRUREQTU1ODQwOUZFQUFGREFGMkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvivGpLVh17hHdfNcXFc18katS Iqa6y9QJcgkC4Kpe6+3oPdszir7ULZsyOQ05KluDhEwaTqlQPyeaQb66X9ItsIk8 dU0D2GGyhm7/JgTRjSjVOkYP3cWnnDlPo0gGH5/LLcLauTBaPNLkN6sWM4EFvYCw xRDX3vpk8T6Bo0P0IoJDwOFEFDodmgZTUSwqLMNbs7vVnzetEuGIoGkqkyiYsOpQ NtcAqbbUjiQ+8151g4MjrjBbOH58Qupv5NJip3FQcC+8vNLJVGNDpBG8ECVpulu8 SXuMEcDLCLe8EVLKGGFjjTfU8j18bzuuZDXEd4aoibxVeI1bTqfVJR8KZrtvAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUzg5cNDjsL+8xQu3aVYQJ/qr9ry4wHwYDVR0j BBgwFoAUPocLmnADxP2cUb01Sp3vo/t3tKkwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYzVkMThlODItNGQ2OC00NWE2LWE1ZGYtY2FjMTE1YWQy Mjc5LzAvM0U4NzBCOUE3MDAzQzRGRDlDNTFCRDM1NEE5REVGQTNGQjc3QjRBOS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1BvY0xtbkFEeFAyY1ViMDFTcDN2b190 M3RLay5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9jNWQxOGU4Mi00 ZDY4LTQ1YTYtYTVkZi1jYWMxMTVhZDIyNzkvMC8zRTg3MEI5QTcwMDNDNEZEOUM1 MUJEMzU0QTlERUZBM0ZCNzdCNEE5Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATPEGc+s+abDXhdSOFbqv Y3q8z5Azh2YO3ZBvGtIKWYjKn4jT0+53I2WkJbY1EtuRd7E0pzSakoMcmbGretdl jPTsy6nzPrpEwq+C1ne4IM07ZTZpDIaVgRz5Td/jFcGlhyDRps6k/EalZjN4oHzb UqLAXjcbQe5TpVOZRBBrGjEvbAJ7TU9CtxwsFQRGmSguxe8Uwf+VEHpYT3PmIgIl JQr2MbUWjH119oWzJ7Eyy683jscVPiJoPN9rJdKecKCd6Rul0xEnRVM9/GRCSuVn Mc5eAXu70LUvKQGHYtCB4tET1KZyrFzfRnkmtBQbErRO2DHmC3ckB/jFuCRrxMHs 7w== -----END CERTIFICATE-----Generated at Tue Jul 28 21:43:46 2026 by rpki-client