$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fadebb9d-33cc-429b-aa35-10634a8b1dd4/0/35B52EF20A5730A6261D6D1916C6B747FF3C2852.mft File: 35B52EF20A5730A6261D6D1916C6B747FF3C2852.mft (raw, json) Hash identifier: /WahcqzoqKVpMmqrBw70aUfpoggmaSElhhaoMQhU7hM= Subject key identifier: E1:0C:61:D0:6F:6A:F4:22:E9:D2:61:28:6C:64:05:6D:95:E0:BC:D2 Authority key identifier: 35:B5:2E:F2:0A:57:30:A6:26:1D:6D:19:16:C6:B7:47:FF:3C:28:52 Certificate issuer: /CN=35B52EF20A5730A6261D6D1916C6B747FF3C2852 Certificate serial: 1CA5BAD0E917794E28ACDEC31E232FE15DEAA255 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/35B52EF20A5730A6261D6D1916C6B747FF3C2852.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fadebb9d-33cc-429b-aa35-10634a8b1dd4/0/35B52EF20A5730A6261D6D1916C6B747FF3C2852.mft Manifest number: 0305 Signing time: Mon 21 Sep 2026 10:02:43 +0000 Manifest this update: Mon 21 Sep 2026 09:57:43 +0000 Manifest next update: Tue 22 Sep 2026 12:04:43 +0000 Files and hashes: 1: 326131343a373538313a326630303a3a2f34382d3438203d3e20343031333836.roa (hash: hhnXez1MtyG/OWqeDWj8Yk7vwpb6xK8SsXbhq+WvHw8=) 2: 326131343a373538313a323330303a3a2f34302d3430203d3e20343031333836.roa (hash: GU9+rKAYRqNo9YIwP+TkUZlOwC3QOJ/ceUAdYXuG73A=) 3: 326131343a373538313a323030303a3a2f34302d3438203d3e20333936303530.roa (hash: sHH5EXfl8KcOz9d8oEb74NyMVuJWDbdSziQULSKFDd4=) 4: 326131343a373538313a323830303a3a2f34302d3438203d3e20323039313039.roa (hash: BgI8MCbrdQrLXGBmcxKTWUA61uXQRIT/7G+jUcNg+Cg=) 5: 326131343a373538313a323130303a3a2f34302d3430203d3e20343031333836.roa (hash: DLjQUjmP+DsaW9+BMh56ieI2Ec94mZJVyHTBFU7NtcI=) 6: 326131343a373538313a323930303a3a2f34302d3438203d3e20323039313039.roa (hash: fNdgpZfzM+lTdkTHtAnx5kJSH3iOKuMJEshssLvwnVk=) 7: 326131343a373538313a323730303a3a2f34302d3438203d3e20323039313039.roa (hash: r2FAoLHwIu8mKalLeNKMfevbe6TYD4tj8Lmhtg3K0Jc=) 8: 326131343a373538313a323230303a3a2f34302d3430203d3e20343031333836.roa (hash: WHkf4m6DzfoyrufCoOAxeFwtqFzFGCors6ZbsGaGLa8=) 9: 326131343a373538313a323030303a3a2f34302d3438203d3e20343031333836.roa (hash: UDRqDR0JMowXqg92cpDjRfR7VLQyzzQdpbzczBoUKPE=) 10: 35B52EF20A5730A6261D6D1916C6B747FF3C2852.crl (hash: p+hZdT8vvtDcgSrmw3UU6uJEvmPlT3opjYyzD6GTI1w=) 11: 326131343a373538313a323030303a3a2f34302d3438203d3e20323039313039.roa (hash: tf4CnuzuqcNJkCPREEFPykMzx34y8Ud9hQ2hyeqIDkc=) 12: 326131343a373538313a326630313a3a2f34382d3438203d3e20343031333836.roa (hash: qMwS539lNZFoubA7sJWCkka1wt0G8zXYNPGQsBc3Exo=) 13: 326131343a373538313a323630303a3a2f34302d3438203d3e20323039313039.roa (hash: vUmqEtEfYQI1zWEs+VA6phQsPoAXeEbQEq0Kg2kwRRk=) 14: 326131343a373538313a323530303a3a2f34302d3430203d3e203134343437.roa (hash: RGywHnxAYLuO6cDdu+OqsmlkwS7ZjWl9Xx30KtT8IYc=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fadebb9d-33cc-429b-aa35-10634a8b1dd4/0/35B52EF20A5730A6261D6D1916C6B747FF3C2852.crl rsync://rsync.paas.rpki.ripe.net/repository/fadebb9d-33cc-429b-aa35-10634a8b1dd4/0/35B52EF20A5730A6261D6D1916C6B747FF3C2852.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/35B52EF20A5730A6261D6D1916C6B747FF3C2852.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 22 Sep 2026 12:04:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:a5:ba:d0:e9:17:79:4e:28:ac:de:c3:1e:23:2f:e1:5d:ea:a2:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35B52EF20A5730A6261D6D1916C6B747FF3C2852 Validity Not Before: Sep 21 09:57:43 2026 GMT Not After : Sep 22 12:04:43 2026 GMT Subject: CN=E10C61D06F6AF422E9D261286C64056D95E0BCD2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:c5:c7:b1:7c:65:2d:6a:4b:c6:85:ab:9a:e9: 14:16:1b:8e:64:a4:79:a2:9e:94:49:73:85:33:cc: 96:cb:fb:fd:a9:69:07:51:ca:59:ec:7d:22:ce:5e: 2b:66:92:df:0c:73:e5:6e:a3:c3:28:40:0a:7a:aa: c4:a9:ba:cf:ef:12:c2:28:fb:f3:7a:dc:80:f2:70: b1:6d:92:68:44:72:89:0b:2c:34:b6:72:43:3a:b0: 89:8d:2d:7a:3e:f2:ce:e2:ef:b5:37:ac:bb:c4:73: 67:b6:47:c8:4b:bb:e3:aa:e9:ad:c7:0a:51:df:1c: fe:6a:0e:6e:78:7d:ab:4b:e8:e2:38:1a:58:14:67: e5:a2:53:72:83:70:74:8d:08:b8:cd:35:a8:7b:d8: 95:f0:42:a7:b4:4c:04:2b:44:7a:c3:76:9b:fc:a4: b2:f9:fe:3a:63:d6:7c:ba:3d:2b:5d:19:8d:4f:28: 1c:2f:40:4c:63:2f:85:b0:29:2e:57:61:66:65:91: c9:ce:5e:a2:de:c6:25:c6:46:82:2c:fa:5e:0d:11: d7:33:64:ac:c7:05:e5:68:da:5e:11:84:36:94:9c: 2d:f9:6c:3b:ec:2d:aa:2b:9a:54:11:3e:ce:29:24: 5d:ca:4f:d8:bf:7e:cb:c8:09:b5:83:ea:1d:a0:d2: 47:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:0C:61:D0:6F:6A:F4:22:E9:D2:61:28:6C:64:05:6D:95:E0:BC:D2 X509v3 Authority Key Identifier: keyid:35:B5:2E:F2:0A:57:30:A6:26:1D:6D:19:16:C6:B7:47:FF:3C:28:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fadebb9d-33cc-429b-aa35-10634a8b1dd4/0/35B52EF20A5730A6261D6D1916C6B747FF3C2852.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/35B52EF20A5730A6261D6D1916C6B747FF3C2852.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fadebb9d-33cc-429b-aa35-10634a8b1dd4/0/35B52EF20A5730A6261D6D1916C6B747FF3C2852.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:2f:ee:7d:d6:c5:ae:3c:93:17:3a:89:33:2f:a8:2c:36:fa: c2:0c:d4:cc:8c:30:d8:24:31:77:42:f7:cc:66:69:ea:ff:8d: 26:fc:a4:51:21:c1:6b:2f:66:75:ec:11:c1:e0:44:e1:33:38: 8a:ca:a5:bb:e1:a6:35:16:33:a1:00:ef:7d:3a:a7:ee:6b:4f: d3:9c:fd:57:bd:1a:ef:7c:2a:c9:5d:32:de:38:f2:3c:ad:8e: 34:eb:da:53:d6:0a:24:60:82:86:16:36:5a:63:1a:0e:8b:b2: ed:ce:25:04:60:ab:05:0b:23:0f:ee:47:96:a9:57:a2:30:56: 31:e4:c2:f3:64:94:4a:c8:4d:4c:ff:33:8c:69:a9:2a:81:56: 90:4d:96:0c:c5:4e:55:68:49:d6:d5:5a:57:47:f7:11:31:36: bc:1a:10:90:12:7d:25:c5:d3:f5:34:0f:d4:4c:27:f6:82:72: 9c:3a:a4:e1:89:60:31:b4:b5:83:f2:4d:f8:c4:f9:81:a1:cf: 9b:ce:18:bf:85:86:e3:bc:1b:8e:c2:26:a8:3c:78:9d:6c:aa: ea:1e:0f:41:ac:a5:be:37:b1:6f:0e:9f:13:b3:2e:d4:eb:41: 02:b6:6a:3c:ef:ca:a2:2c:e3:df:a8:4e:18:cb:b7:bc:20:55: fc:6a:ae:5f -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUHKW60OkXeU4orN7DHiMv4V3qolUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzVCNTJFRjIwQTU3MzBBNjI2MUQ2RDE5MTZDNkI3NDdG RjNDMjg1MjAeFw0yNjA5MjEwOTU3NDNaFw0yNjA5MjIxMjA0NDNaMDMxMTAvBgNV BAMTKEUxMEM2MUQwNkY2QUY0MjJFOUQyNjEyODZDNjQwNTZEOTVFMEJDRDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgxcexfGUtakvGhaua6RQWG45k pHminpRJc4UzzJbL+/2paQdRylnsfSLOXitmkt8Mc+Vuo8MoQAp6qsSpus/vEsIo +/N63IDycLFtkmhEcokLLDS2ckM6sImNLXo+8s7i77U3rLvEc2e2R8hLu+Oq6a3H ClHfHP5qDm54fatL6OI4GlgUZ+WiU3KDcHSNCLjNNah72JXwQqe0TAQrRHrDdpv8 pLL5/jpj1ny6PStdGY1PKBwvQExjL4WwKS5XYWZlkcnOXqLexiXGRoIs+l4NEdcz ZKzHBeVo2l4RhDaUnC35bDvsLaormlQRPs4pJF3KT9i/fsvICbWD6h2g0kflAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQU4Qxh0G9q9CLp0mEobGQFbZXgvNIwHwYDVR0j BBgwFoAUNbUu8gpXMKYmHW0ZFsa3R/88KFIwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZmFkZWJiOWQtMzNjYy00MjliLWFhMzUtMTA2MzRhOGIx ZGQ0LzAvMzVCNTJFRjIwQTU3MzBBNjI2MUQ2RDE5MTZDNkI3NDdGRjNDMjg1Mi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC8zNUI1MkVGMjBBNTczMEE2MjYxRDZEMTkx NkM2Qjc0N0ZGM0MyODUyLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2ZhZGViYjlkLTMzY2MtNDI5Yi1hYTM1LTEwNjM0YThiMWRkNC8wLzM1QjUyRUYy MEE1NzMwQTYyNjFENkQxOTE2QzZCNzQ3RkYzQzI4NTIubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBpL+59 1sWuPJMXOokzL6gsNvrCDNTMjDDYJDF3QvfMZmnq/40m/KRRIcFrL2Z17BHB4ETh MziKyqW74aY1FjOhAO99Oqfua0/TnP1XvRrvfCrJXTLeOPI8rY4069pT1gokYIKG FjZaYxoOi7LtziUEYKsFCyMP7keWqVeiMFYx5MLzZJRKyE1M/zOMaakqgVaQTZYM xU5VaEnW1VpXR/cRMTa8GhCQEn0lxdP1NA/UTCf2gnKcOqThiWAxtLWD8k34xPmB oc+bzhi/hYbjvBuOwiaoPHidbKrqHg9BrKW+N7FvDp8Tsy7U60ECtmo878qiLOPf qE4Yy7e8IFX8aq5f -----END CERTIFICATE-----Generated at Tue Sep 22 05:07:16 2026 by rpki-client