$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fadebb9d-33cc-429b-aa35-10634a8b1dd4/0/35B52EF20A5730A6261D6D1916C6B747FF3C2852.mft File: 35B52EF20A5730A6261D6D1916C6B747FF3C2852.mft (raw, json) Hash identifier: j59vV9oUk1Ed1YLf7mrarSM332CH+3Z6sSpNqIsoCLo= Subject key identifier: 76:D1:BD:AB:3C:89:7E:60:57:3D:AD:5D:BB:F4:6C:BD:B6:EC:FA:DC Authority key identifier: 35:B5:2E:F2:0A:57:30:A6:26:1D:6D:19:16:C6:B7:47:FF:3C:28:52 Certificate issuer: /CN=35B52EF20A5730A6261D6D1916C6B747FF3C2852 Certificate serial: 40ADAF12A0DAE21CCF35607E280DCD832FC1AC9A Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/35B52EF20A5730A6261D6D1916C6B747FF3C2852.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fadebb9d-33cc-429b-aa35-10634a8b1dd4/0/35B52EF20A5730A6261D6D1916C6B747FF3C2852.mft Manifest number: 01F3 Signing time: Sun 01 Mar 2026 14:46:46 +0000 Manifest this update: Sun 01 Mar 2026 14:41:45 +0000 Manifest next update: Mon 02 Mar 2026 18:16:45 +0000 Files and hashes: 1: 326131343a373538313a323030303a3a2f34302d3438203d3e20323039313039.roa (hash: lRerEWAZYVnj4WeC0lksu5JXgu5ks2mpqCgBEDRR0Q0=) 2: 326131343a373538313a323030303a3a2f34302d3438203d3e20343031333836.roa (hash: pi4F6jgMqqwUP1FTiOnfocpEw1DljOaDr1vx1pIBms8=) 3: 326131343a373538313a323030303a3a2f34302d3438203d3e20323135333634.roa (hash: iPZr810Wf3G2BF1Yx0TXVCnIMBYWmzqlqsIx/XIB/Cc=) 4: 326131343a373538313a323530303a3a2f34302d3430203d3e203134343437.roa (hash: 2DfIdT8hQ452p9tTWwGSgv6G5KrCdvIla2RYi0wqius=) 5: 326131343a373538313a323030303a3a2f34302d3438203d3e20333936303530.roa (hash: yUvus43IfO0AT/ck5bMQHbMTgP3EN2v06hq4szCBm40=) 6: 326131343a373538313a323130303a3a2f34302d3430203d3e20343031333836.roa (hash: DLjQUjmP+DsaW9+BMh56ieI2Ec94mZJVyHTBFU7NtcI=) 7: 35B52EF20A5730A6261D6D1916C6B747FF3C2852.crl (hash: i+gpey+HNeaXHWkpHTXkml93wvnlQdcGUdIMTp14U8g=) 8: 326131343a373538313a323330303a3a2f34302d3430203d3e20343031333836.roa (hash: GU9+rKAYRqNo9YIwP+TkUZlOwC3QOJ/ceUAdYXuG73A=) 9: 326131343a373538313a323630303a3a2f34302d3438203d3e20323039313039.roa (hash: Ah/styCnPIoGFWiO0PQ2rB66bvMdDv2NyL9mrkcrCj4=) 10: 326131343a373538313a326630313a3a2f34382d3438203d3e20343031333836.roa (hash: qMwS539lNZFoubA7sJWCkka1wt0G8zXYNPGQsBc3Exo=) 11: 326131343a373538313a323830303a3a2f34302d3438203d3e20323039313039.roa (hash: U1r4ZvjM4KXIBEm7hpH6+0Qd/LSsHMlknATpB6yDZ90=) 12: 326131343a373538313a326630303a3a2f34382d3438203d3e20343031333836.roa (hash: hhnXez1MtyG/OWqeDWj8Yk7vwpb6xK8SsXbhq+WvHw8=) 13: 326131343a373538313a323230303a3a2f34302d3430203d3e20343031333836.roa (hash: WHkf4m6DzfoyrufCoOAxeFwtqFzFGCors6ZbsGaGLa8=) 14: 326131343a373538313a323030303a3a2f34302d3438203d3e20323136333234.roa (hash: bje5aLLUqgAL8DyPjKPS1MwDhANSqShDo64yB6sarZo=) 15: 326131343a373538313a323730303a3a2f34302d3438203d3e20323039313039.roa (hash: MFKFuWCDL66Zxs5f3hEeRn+2JW7mEBoWjT7f6AJBOhM=) 16: 326131343a373538313a323930303a3a2f34302d3438203d3e20323039313039.roa (hash: ENamU9VlpUh2S5yKvYrAp12SwLl/9Jv38ffU+yHH5Iw=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fadebb9d-33cc-429b-aa35-10634a8b1dd4/0/35B52EF20A5730A6261D6D1916C6B747FF3C2852.crl rsync://rsync.paas.rpki.ripe.net/repository/fadebb9d-33cc-429b-aa35-10634a8b1dd4/0/35B52EF20A5730A6261D6D1916C6B747FF3C2852.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/35B52EF20A5730A6261D6D1916C6B747FF3C2852.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Mar 2026 18:16:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:ad:af:12:a0:da:e2:1c:cf:35:60:7e:28:0d:cd:83:2f:c1:ac:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35B52EF20A5730A6261D6D1916C6B747FF3C2852 Validity Not Before: Mar 1 14:41:45 2026 GMT Not After : Mar 2 18:16:45 2026 GMT Subject: CN=76D1BDAB3C897E60573DAD5DBBF46CBDB6ECFADC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:d9:c8:0d:fc:b1:b5:e7:10:31:b7:c4:fa:bd: 82:d6:01:3b:e6:0d:1b:ed:c0:66:72:b7:1e:9a:d0: 99:30:42:e3:10:6b:98:88:2c:fb:75:a9:11:c5:04: 1f:7f:89:24:1b:66:32:ab:30:0e:a8:41:1a:81:aa: ac:8c:d7:17:de:f0:e5:21:de:ee:c8:a5:78:b0:73: bd:0c:d8:db:86:63:3b:04:76:a4:80:40:47:e2:bf: 8a:8f:ad:ab:f6:c5:01:b8:0d:3b:ff:42:05:52:3e: 41:e2:5d:e3:d8:44:9b:67:03:63:9e:43:e2:30:51: 4b:3b:f3:5a:1a:0e:d3:1b:92:f0:96:96:0b:be:62: c3:60:96:d4:a9:59:20:07:d6:68:a4:52:1b:fa:24: 53:b2:0d:99:14:b4:b4:02:36:23:bc:cd:88:21:9c: bf:78:7b:b3:d8:1c:d6:e1:8e:b6:f1:29:91:3a:c0: 73:12:57:3e:2c:31:43:7f:85:3f:a7:dc:9f:d8:a4: 9c:7a:b9:4e:8f:c6:7d:5b:f8:c1:fa:ce:97:c4:ac: 18:56:d0:3f:f6:6a:f6:71:45:cb:0d:d2:36:78:91: fb:b2:40:9f:f0:10:36:87:06:85:09:a6:10:a9:0d: 2b:81:db:83:1f:dc:28:20:02:e4:a9:fa:96:9e:db: 70:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:D1:BD:AB:3C:89:7E:60:57:3D:AD:5D:BB:F4:6C:BD:B6:EC:FA:DC X509v3 Authority Key Identifier: keyid:35:B5:2E:F2:0A:57:30:A6:26:1D:6D:19:16:C6:B7:47:FF:3C:28:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fadebb9d-33cc-429b-aa35-10634a8b1dd4/0/35B52EF20A5730A6261D6D1916C6B747FF3C2852.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/35B52EF20A5730A6261D6D1916C6B747FF3C2852.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fadebb9d-33cc-429b-aa35-10634a8b1dd4/0/35B52EF20A5730A6261D6D1916C6B747FF3C2852.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a4:5d:87:93:c0:3d:e4:07:84:c0:d0:c9:c7:34:1c:76:d6:08: ef:9c:ab:1d:3d:8f:6a:a0:9c:97:67:6c:f5:a5:8b:15:ec:e5: 04:e5:d1:f7:44:61:02:1c:96:ba:f5:ff:54:74:ef:8d:7a:bf: e2:e2:b3:a8:23:72:74:fd:80:da:93:68:5c:25:36:62:f0:fe: 60:02:e5:02:0d:cf:14:e4:50:ec:a4:b3:4e:f7:4c:2b:14:c4: 14:ae:ba:b0:23:f8:bd:30:ab:58:d8:0e:bb:15:fd:08:e1:61: bf:84:a3:d9:74:81:39:ea:26:7d:fc:09:58:5a:c0:a8:3f:5d: a5:b0:d4:61:ca:81:ef:cd:8d:87:89:39:c2:6e:58:c8:10:32: 2b:d5:9c:66:85:87:68:54:53:93:3e:8c:33:ee:4b:bb:ec:e2: 83:fe:b3:c9:7a:5d:a0:17:d5:56:65:5f:63:5f:aa:31:87:28: d3:5f:2e:df:66:2c:42:89:c9:dc:fe:9f:98:28:b5:ad:8d:c3: df:c1:00:05:0c:f9:d1:eb:e6:e3:45:2d:64:bb:a2:80:10:6d: 1f:c1:3f:b4:33:c2:f1:c8:0e:24:79:9c:f2:f8:3e:71:55:ba: f0:d3:ae:75:64:96:50:a0:5e:18:0f:6f:71:54:c0:a0:6f:7c: a6:01:ba:00 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUQK2vEqDa4hzPNWB+KA3Ngy/BrJowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzVCNTJFRjIwQTU3MzBBNjI2MUQ2RDE5MTZDNkI3NDdG RjNDMjg1MjAeFw0yNjAzMDExNDQxNDVaFw0yNjAzMDIxODE2NDVaMDMxMTAvBgNV BAMTKDc2RDFCREFCM0M4OTdFNjA1NzNEQUQ1REJCRjQ2Q0JEQjZFQ0ZBREMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCT2cgN/LG15xAxt8T6vYLWATvm DRvtwGZytx6a0JkwQuMQa5iILPt1qRHFBB9/iSQbZjKrMA6oQRqBqqyM1xfe8OUh 3u7IpXiwc70M2NuGYzsEdqSAQEfiv4qPrav2xQG4DTv/QgVSPkHiXePYRJtnA2Oe Q+IwUUs781oaDtMbkvCWlgu+YsNgltSpWSAH1mikUhv6JFOyDZkUtLQCNiO8zYgh nL94e7PYHNbhjrbxKZE6wHMSVz4sMUN/hT+n3J/YpJx6uU6Pxn1b+MH6zpfErBhW 0D/2avZxRcsN0jZ4kfuyQJ/wEDaHBoUJphCpDSuB24Mf3CggAuSp+pae23BRAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUdtG9qzyJfmBXPa1du/Rsvbbs+twwHwYDVR0j BBgwFoAUNbUu8gpXMKYmHW0ZFsa3R/88KFIwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZmFkZWJiOWQtMzNjYy00MjliLWFhMzUtMTA2MzRhOGIx ZGQ0LzAvMzVCNTJFRjIwQTU3MzBBNjI2MUQ2RDE5MTZDNkI3NDdGRjNDMjg1Mi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC8zNUI1MkVGMjBBNTczMEE2MjYxRDZEMTkx NkM2Qjc0N0ZGM0MyODUyLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2ZhZGViYjlkLTMzY2MtNDI5Yi1hYTM1LTEwNjM0YThiMWRkNC8wLzM1QjUyRUYy MEE1NzMwQTYyNjFENkQxOTE2QzZCNzQ3RkYzQzI4NTIubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCkXYeT wD3kB4TA0MnHNBx21gjvnKsdPY9qoJyXZ2z1pYsV7OUE5dH3RGECHJa69f9UdO+N er/i4rOoI3J0/YDak2hcJTZi8P5gAuUCDc8U5FDspLNO90wrFMQUrrqwI/i9MKtY 2A67Ff0I4WG/hKPZdIE56iZ9/AlYWsCoP12lsNRhyoHvzY2HiTnCbljIEDIr1Zxm hYdoVFOTPowz7ku77OKD/rPJel2gF9VWZV9jX6oxhyjTXy7fZixCicnc/p+YKLWt jcPfwQAFDPnR6+bjRS1ku6KAEG0fwT+0M8LxyA4keZzy+D5xVbrw0651ZJZQoF4Y D29xVMCgb3ymAboA -----END CERTIFICATE-----Generated at Mon Mar 2 11:18:07 2026 by rpki-client