$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3E870B9A7003C4FD9C51BD354A9DEFA3FB77B4A9.mft File: 3E870B9A7003C4FD9C51BD354A9DEFA3FB77B4A9.mft (raw, json) Hash identifier: Ha+urjO6pPjYJQwSb6hs1SB67WD7bk735sPPI/zXDsg= Subject key identifier: B9:4D:68:9E:49:76:F3:5B:49:5C:5C:38:E6:54:F4:FC:7A:14:9C:5A Authority key identifier: 3E:87:0B:9A:70:03:C4:FD:9C:51:BD:35:4A:9D:EF:A3:FB:77:B4:A9 Certificate issuer: /CN=3e870b9a7003c4fd9c51bd354a9defa3fb77b4a9 Certificate serial: 5A00E01B839AE0F4EEDF4786487CC2C0C66E98F9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PocLmnADxP2cUb01Sp3vo_t3tKk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3E870B9A7003C4FD9C51BD354A9DEFA3FB77B4A9.mft Manifest number: 07B7 Signing time: Sun 04 Oct 2026 10:50:31 +0000 Manifest this update: Sun 04 Oct 2026 10:45:31 +0000 Manifest next update: Mon 05 Oct 2026 12:10:31 +0000 Files and hashes: 1: 3138352e3131312e3138382e302f32342d3234203d3e203632353633.roa (hash: X7Tn/GpCSEBlmrST5TEKgAjVIubIFvn/OXAnR/EzN3o=) 2: 326130363a356563303a3a2f34382d3438203d3e20323034363933.roa (hash: S1/Y/6EPQQnfPCOtjeEUzrWHJ84koF95fYG1w/Kcp2o=) 3: 3138352e3231332e3234302e302f32342d3234203d3e20323135373033.roa (hash: KdpamzjNMoBH12606SSHSE8fPB2oVEwY+/Ehf6CDJmA=) 4: 3138352e3234342e39352e302f32342d3234203d3e203330303538.roa (hash: 18I/ng9HI5XuObuxE8W3wRTkaWJpr3T1qz3Rt9UUAds=) 5: 3138352e3232392e3230322e302f32342d3234203d3e20323130303330.roa (hash: Iq7mX+2Gdzh11Cz+eab6E5JpoAS8/V5c+VHbjbSnpR0=) 6: 3138352e3231332e3234322e302f32342d3234203d3e203232343237.roa (hash: rxGzTHw2ETBLYdKcURKX80/JYXYHlHWFPETTk7njjlE=) 7: 3138352e3133302e36312e302f32342d3234203d3e20323732363936.roa (hash: iEuXNsbf+xsxf1NL3afxi/eNCMhpHPndZJ3OWTl2z+U=) 8: 3138352e3232392e3230312e302f32342d3234203d3e20323030303137.roa (hash: PCz6aeIUTtC34FXSr6irNuWXyhZRMV7yjZ9OeA9cKuk=) 9: 3E870B9A7003C4FD9C51BD354A9DEFA3FB77B4A9.crl (hash: nvYloBR8s3UdpiplSr/KIZ5vLrPVIoLr8q5VudvTTSs=) 10: 3138352e3232392e3230332e302f32342d3234203d3e20323034333939.roa (hash: Gs5ABbPfJ5toptQiquFm8oqwgutT9zFFUytweKBCefo=) 11: 3138352e3232392e3230302e302f32342d3234203d3e2039333034.roa (hash: Msloifrt/kLCe0SjqxgGF92lnUxKU95znivEpNjSmVE=) 12: 3138352e3234342e39342e302f32342d3234203d3e20333937343233.roa (hash: oZOogcZA7gOpZC0s0tbGMXCZZe5qdoNGw7VhUnq2iag=) 13: 3138352e3231332e3234332e302f32342d3234203d3e203330343536.roa (hash: HHWDsn/geYTSKOK374fOgzwqQ04cratsjB9aVUs6qO0=) 14: 3138352e3133302e36322e302f32342d3234203d3e20323036313530.roa (hash: 0Uta0mciJtwdV1pzRO+5GA2qv0qJ2rULFPtgrlRyMi0=) 15: 3138352e3133302e36302e302f32342d3234203d3e203131383738.roa (hash: IVpkKpecJIjzuckRW19RYnHFzcqeOz1CHzHhlqd09/8=) 16: 3138352e3231332e3234332e302f32342d3234203d3e20323034393238.roa (hash: uCL1WpQqTZHx28v635AJc2UxBy3JsNUOhCCjsYiSzdI=) 17: 39312e3133322e3232372e302f32342d3234203d3e20323132333335.roa (hash: 4nM6t6s+oklrwoQsrohzelZ9jLVJM3XAMUC6E2raQWI=) 18: 3138352e3133302e36332e302f32342d3234203d3e203332313831.roa (hash: NGEavlC9krxVQb4oA8xeNjVMdvRiumafje1lIvRB/hg=) 19: 39312e3133322e3232372e302f32342d3234203d3e20323132333834.roa (hash: eh1Z74wbnDki2jWa8j9mKK2ooveQFWs0ccPHyRr5G7Y=) 20: 3138352e3231332e3234312e302f32342d3234203d3e20383334.roa (hash: NT24G3YBxt+Nx48SRGwFgZp6k5CCt9Z8IH8ktbk2nbc=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3E870B9A7003C4FD9C51BD354A9DEFA3FB77B4A9.crl rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3E870B9A7003C4FD9C51BD354A9DEFA3FB77B4A9.mft rsync://rpki.ripe.net/repository/DEFAULT/PocLmnADxP2cUb01Sp3vo_t3tKk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 05 Oct 2026 12:07:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:00:e0:1b:83:9a:e0:f4:ee:df:47:86:48:7c:c2:c0:c6:6e:98:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e870b9a7003c4fd9c51bd354a9defa3fb77b4a9 Validity Not Before: Oct 4 10:45:31 2026 GMT Not After : Oct 5 12:10:31 2026 GMT Subject: CN=B94D689E4976F35B495C5C38E654F4FC7A149C5A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:a1:35:b4:17:5c:1c:d1:07:54:7a:46:f3:12: fd:bf:32:77:99:4b:a9:8d:48:38:1c:fc:3d:7f:e9: 97:65:39:e2:da:e5:fa:b6:2a:0c:42:5a:de:e0:f3: 55:91:1a:c4:93:e2:14:3c:4d:26:bc:bd:65:39:5b: 4c:e0:ce:46:2e:fd:4f:66:97:fc:c8:1e:6b:78:0d: eb:6b:96:5c:c0:ec:09:58:61:c3:e8:4b:60:96:aa: bf:39:8e:11:22:c4:0a:37:55:d7:51:b7:20:56:8b: 04:bb:ba:33:34:74:11:fc:3b:15:fa:e0:07:bf:96: ff:1a:e6:53:6f:c5:e4:c9:5f:bc:e2:6e:be:60:ad: 94:d3:59:3c:6c:c1:18:2d:a4:ae:66:04:5a:53:e8: 09:1b:f6:c9:cd:18:9c:b8:3b:08:5f:68:52:92:08: 0a:27:b3:d3:07:ca:a1:20:bd:f1:98:b1:dd:96:be: 51:19:da:72:34:10:18:70:76:90:d3:10:ba:1b:6d: d6:09:0c:f4:53:4c:90:65:60:b3:3e:ab:ad:ba:60: 94:aa:53:9b:73:d2:0d:08:d8:d0:e4:8e:b9:45:4a: d5:92:25:f2:a5:e6:b0:0b:59:e2:47:81:df:89:79: 9f:07:d6:0f:67:5f:a4:87:b3:b7:41:9c:df:f0:45: b5:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:4D:68:9E:49:76:F3:5B:49:5C:5C:38:E6:54:F4:FC:7A:14:9C:5A X509v3 Authority Key Identifier: keyid:3E:87:0B:9A:70:03:C4:FD:9C:51:BD:35:4A:9D:EF:A3:FB:77:B4:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3E870B9A7003C4FD9C51BD354A9DEFA3FB77B4A9.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PocLmnADxP2cUb01Sp3vo_t3tKk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3E870B9A7003C4FD9C51BD354A9DEFA3FB77B4A9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:55:e4:77:6b:6f:fa:31:95:84:fc:df:c1:49:60:52:76:eb: e4:bf:81:6b:6e:6c:6b:25:de:95:5b:84:3e:81:a1:d8:d1:47: fb:92:6e:89:38:a9:af:c1:28:8d:da:a1:01:37:94:bf:21:87: 4c:f6:79:eb:b0:a4:24:d5:7e:d5:27:20:6c:81:60:65:58:51: 65:df:99:84:03:66:ea:4b:de:73:12:8e:6a:d1:31:f8:97:cc: 16:6d:3a:d7:27:34:46:ea:00:20:3a:9f:f5:9d:1d:0d:71:e6: e7:cc:96:78:aa:e6:45:43:67:b5:e5:0e:b3:37:af:4b:79:03: fa:15:f1:50:f2:6d:94:1a:fa:b6:e7:e1:40:a9:35:f9:ad:93: 31:2a:5f:f9:f2:04:61:81:07:84:f4:e7:76:dc:ab:9c:65:b6: 5a:b5:23:8e:fc:d8:32:69:ef:8f:08:b7:ad:a4:42:c3:a3:cf: fa:65:08:0f:a0:41:0e:26:0a:3c:3a:bc:b7:16:2c:0d:e0:e3: ea:52:5a:17:0a:35:ac:84:3f:6e:58:b0:2f:f1:ca:57:49:ad: d6:a3:1f:b5:6c:4f:c9:47:c7:6c:e2:37:ac:62:cc:7a:da:43: 41:67:b6:91:25:cb:7f:2b:eb:b6:fe:67:c9:3a:9b:c9:9b:56: df:ec:00:56 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUWgDgG4Oa4PTu30eGSHzCwMZumPkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM2U4NzBiOWE3MDAzYzRmZDljNTFiZDM1NGE5ZGVmYTNm Yjc3YjRhOTAeFw0yNjEwMDQxMDQ1MzFaFw0yNjEwMDUxMjEwMzFaMDMxMTAvBgNV BAMTKEI5NEQ2ODlFNDk3NkYzNUI0OTVDNUMzOEU2NTRGNEZDN0ExNDlDNUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCioTW0F1wc0QdUekbzEv2/MneZ S6mNSDgc/D1/6ZdlOeLa5fq2KgxCWt7g81WRGsST4hQ8TSa8vWU5W0zgzkYu/U9m l/zIHmt4DetrllzA7AlYYcPoS2CWqr85jhEixAo3VddRtyBWiwS7ujM0dBH8OxX6 4Ae/lv8a5lNvxeTJX7zibr5grZTTWTxswRgtpK5mBFpT6Akb9snNGJy4OwhfaFKS CAons9MHyqEgvfGYsd2WvlEZ2nI0EBhwdpDTELobbdYJDPRTTJBlYLM+q626YJSq U5tz0g0I2NDkjrlFStWSJfKl5rALWeJHgd+JeZ8H1g9nX6SHs7dBnN/wRbXhAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUuU1onkl281tJXFw45lT0/HoUnFowHwYDVR0j BBgwFoAUPocLmnADxP2cUb01Sp3vo/t3tKkwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYzVkMThlODItNGQ2OC00NWE2LWE1ZGYtY2FjMTE1YWQy Mjc5LzAvM0U4NzBCOUE3MDAzQzRGRDlDNTFCRDM1NEE5REVGQTNGQjc3QjRBOS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1BvY0xtbkFEeFAyY1ViMDFTcDN2b190 M3RLay5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9jNWQxOGU4Mi00 ZDY4LTQ1YTYtYTVkZi1jYWMxMTVhZDIyNzkvMC8zRTg3MEI5QTcwMDNDNEZEOUM1 MUJEMzU0QTlERUZBM0ZCNzdCNEE5Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdVXkd2tv+jGVhPzfwUlg Unbr5L+Ba25sayXelVuEPoGh2NFH+5JuiTipr8EojdqhATeUvyGHTPZ567CkJNV+ 1ScgbIFgZVhRZd+ZhANm6kvecxKOatEx+JfMFm061yc0RuoAIDqf9Z0dDXHm58yW eKrmRUNnteUOszevS3kD+hXxUPJtlBr6tufhQKk1+a2TMSpf+fIEYYEHhPTndtyr nGW2WrUjjvzYMmnvjwi3raRCw6PP+mUID6BBDiYKPDq8txYsDeDj6lJaFwo1rIQ/ bliwL/HKV0mt1qMftWxPyUfHbOI3rGLMetpDQWe2kSXLfyvrtv5nyTqbyZtW3+wA Vg== -----END CERTIFICATE-----Generated at Sun Oct 4 18:09:25 2026 by rpki-client