$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fadebb9d-33cc-429b-aa35-10634a8b1dd4/0/35B52EF20A5730A6261D6D1916C6B747FF3C2852.mft File: 35B52EF20A5730A6261D6D1916C6B747FF3C2852.mft (raw, json) Hash identifier: fvt3HEbtzpN+m5nKzc0ZAEJEAKh+uVcIcTopmhghMTE= Subject key identifier: E0:AE:15:E7:4F:52:61:A8:F4:91:F4:A2:2D:B6:AA:3A:C2:1A:09:29 Authority key identifier: 35:B5:2E:F2:0A:57:30:A6:26:1D:6D:19:16:C6:B7:47:FF:3C:28:52 Certificate issuer: /CN=35B52EF20A5730A6261D6D1916C6B747FF3C2852 Certificate serial: 0FEC3FC43636B8D9228EB6D0DC164B083E485280 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/35B52EF20A5730A6261D6D1916C6B747FF3C2852.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fadebb9d-33cc-429b-aa35-10634a8b1dd4/0/35B52EF20A5730A6261D6D1916C6B747FF3C2852.mft Manifest number: 95 Signing time: Sun 15 Jun 2025 03:20:17 +0000 Manifest this update: Sun 15 Jun 2025 03:15:16 +0000 Manifest next update: Mon 16 Jun 2025 04:00:16 +0000 Files and hashes: 1: 326131343a373538313a323030303a3a2f34302d3438203d3e20323135333634.roa (hash: iPZr810Wf3G2BF1Yx0TXVCnIMBYWmzqlqsIx/XIB/Cc=) 2: 326131343a373538313a323230303a3a2f34302d3430203d3e20343031333836.roa (hash: xASXurrkB21YmULJQ68AjQqXl8iRC/GmjrwM45TRghc=) 3: 35B52EF20A5730A6261D6D1916C6B747FF3C2852.crl (hash: UCs37NgiYUU2SiDNjviR1jHOmLpLsn82yuAnZzM2Zog=) 4: 326131343a373538313a323130303a3a2f34302d3430203d3e20343031333836.roa (hash: T25tbrYVZpBemZDjqgpA9HPrUcZHUwwg3LOVGpsmSZ8=) 5: 326131343a373538313a326630313a3a2f34382d3438203d3e20343031333836.roa (hash: SLj141CGncsBb5vfud/Xh4MbUscTfgukNtFTpVVNYzk=) 6: 326131343a373538313a323330303a3a2f34302d3430203d3e20343031333836.roa (hash: 0cCFPlcOjS3xWnb1dJLZXDYv3McRJuNCq2FLbccHCeQ=) 7: 326131343a373538313a323030303a3a2f34302d3438203d3e20333936303530.roa (hash: yUvus43IfO0AT/ck5bMQHbMTgP3EN2v06hq4szCBm40=) 8: 326131343a373538313a323030303a3a2f34302d3438203d3e20323136333234.roa (hash: bje5aLLUqgAL8DyPjKPS1MwDhANSqShDo64yB6sarZo=) 9: 326131343a373538313a323030303a3a2f34302d3438203d3e20343031333836.roa (hash: pi4F6jgMqqwUP1FTiOnfocpEw1DljOaDr1vx1pIBms8=) 10: 326131343a373538313a326630303a3a2f34382d3438203d3e20343031333836.roa (hash: PQEJzzZkaWaRihPz0qFSxn/fBL9FvQBY7Es5NvynDQM=) 11: 326131343a373538313a323030303a3a2f34302d3438203d3e20323039313039.roa (hash: lRerEWAZYVnj4WeC0lksu5JXgu5ks2mpqCgBEDRR0Q0=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fadebb9d-33cc-429b-aa35-10634a8b1dd4/0/35B52EF20A5730A6261D6D1916C6B747FF3C2852.crl rsync://rsync.paas.rpki.ripe.net/repository/fadebb9d-33cc-429b-aa35-10634a8b1dd4/0/35B52EF20A5730A6261D6D1916C6B747FF3C2852.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/35B52EF20A5730A6261D6D1916C6B747FF3C2852.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 15 Jun 2025 16:41:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:ec:3f:c4:36:36:b8:d9:22:8e:b6:d0:dc:16:4b:08:3e:48:52:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35B52EF20A5730A6261D6D1916C6B747FF3C2852 Validity Not Before: Jun 15 03:15:16 2025 GMT Not After : Jun 16 04:00:16 2025 GMT Subject: CN=E0AE15E74F5261A8F491F4A22DB6AA3AC21A0929 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:58:c0:e7:6b:62:9d:25:83:ac:23:b0:fa:0d: e5:5b:9d:d2:90:d8:48:10:4b:0e:2b:5f:a1:fd:c7: 9d:d4:8f:56:96:80:ff:c0:a1:0d:49:09:35:a8:3f: 35:e5:8c:52:7e:68:81:fa:48:b7:e4:58:42:2e:52: 19:8b:69:8e:d6:64:d2:c0:84:7a:0b:74:e0:d8:fc: a7:73:b4:9d:04:93:6a:8c:f9:72:f0:52:df:83:28: 81:fa:e0:be:2b:1c:d8:be:b3:fb:1e:ce:f0:e3:71: 09:27:7f:58:7d:c0:bc:ba:f9:af:67:bb:25:8f:21: 0f:47:c8:34:30:a4:18:f3:2c:7d:fd:19:28:1d:b1: 14:85:a7:4b:94:fe:a7:26:54:58:7e:ec:0a:35:69: 97:ce:a6:b8:70:d7:b1:47:72:fe:b8:74:ee:c7:ae: 0e:b8:35:83:bc:ff:fa:34:41:e9:30:46:2a:f9:d0: 31:ff:ff:aa:72:74:81:a5:eb:bb:11:ce:0b:a3:d5: 35:85:ec:34:2f:2b:28:fc:19:3c:a6:f7:ee:4f:26: f3:d9:28:a3:32:0c:1d:bd:46:42:2e:75:d0:9b:24: 03:9f:55:08:ba:ce:a5:04:9d:6f:96:d2:7d:a0:bd: f6:89:a3:4c:1c:b0:d9:2c:f4:0c:92:eb:bd:92:84: ce:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:AE:15:E7:4F:52:61:A8:F4:91:F4:A2:2D:B6:AA:3A:C2:1A:09:29 X509v3 Authority Key Identifier: keyid:35:B5:2E:F2:0A:57:30:A6:26:1D:6D:19:16:C6:B7:47:FF:3C:28:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fadebb9d-33cc-429b-aa35-10634a8b1dd4/0/35B52EF20A5730A6261D6D1916C6B747FF3C2852.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/35B52EF20A5730A6261D6D1916C6B747FF3C2852.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fadebb9d-33cc-429b-aa35-10634a8b1dd4/0/35B52EF20A5730A6261D6D1916C6B747FF3C2852.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:55:ed:16:88:f8:9e:1a:3d:ae:3a:6e:21:d0:e4:41:50:12: 17:c8:56:66:cc:ad:9e:9d:9e:62:44:95:34:e9:1a:34:4f:90: 22:84:0e:25:b1:34:54:68:1d:86:60:35:64:fe:5a:6a:77:d5: af:a3:e7:68:83:78:31:d1:2d:fa:86:28:66:6e:ee:ff:fc:87: 0a:3a:5a:06:ba:0e:33:0c:5d:70:c8:a4:f1:5f:9f:da:0d:37: cb:ae:df:2d:a4:64:25:58:66:05:4b:44:c0:8b:00:e6:35:b0: a4:a8:bc:fb:a7:63:56:87:13:34:71:3e:36:2b:00:45:7e:0f: d3:ae:06:e0:13:f1:a8:f7:b5:ab:66:ca:46:14:8b:70:b6:cd: c2:1a:cc:99:69:34:3f:6c:9e:7f:87:9c:6d:ed:ee:24:a8:8b: 38:c2:40:0c:2f:d9:1b:1a:86:e3:8e:1f:83:d9:e3:7c:86:92: 6d:cd:8f:ee:e1:8c:45:22:9a:e7:03:7d:a2:f6:b8:ab:4c:61: c4:e3:2b:fe:52:22:af:31:08:40:b2:df:e0:2a:70:1e:f2:05: cb:04:62:92:f0:3b:2f:fa:dc:c8:a1:aa:61:d7:03:0f:fb:96: cf:80:49:2c:37:0b:5d:78:3b:30:f6:f2:7e:ca:54:b6:f6:fc: 2b:84:ef:cf -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUD+w/xDY2uNkijrbQ3BZLCD5IUoAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzVCNTJFRjIwQTU3MzBBNjI2MUQ2RDE5MTZDNkI3NDdG RjNDMjg1MjAeFw0yNTA2MTUwMzE1MTZaFw0yNTA2MTYwNDAwMTZaMDMxMTAvBgNV BAMTKEUwQUUxNUU3NEY1MjYxQThGNDkxRjRBMjJEQjZBQTNBQzIxQTA5MjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8WMDna2KdJYOsI7D6DeVbndKQ 2EgQSw4rX6H9x53Uj1aWgP/AoQ1JCTWoPzXljFJ+aIH6SLfkWEIuUhmLaY7WZNLA hHoLdODY/KdztJ0Ek2qM+XLwUt+DKIH64L4rHNi+s/sezvDjcQknf1h9wLy6+a9n uyWPIQ9HyDQwpBjzLH39GSgdsRSFp0uU/qcmVFh+7Ao1aZfOprhw17FHcv64dO7H rg64NYO8//o0QekwRir50DH//6pydIGl67sRzguj1TWF7DQvKyj8GTym9+5PJvPZ KKMyDB29RkIuddCbJAOfVQi6zqUEnW+W0n2gvfaJo0wcsNks9AyS672ShM5PAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQU4K4V509SYaj0kfSiLbaqOsIaCSkwHwYDVR0j BBgwFoAUNbUu8gpXMKYmHW0ZFsa3R/88KFIwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZmFkZWJiOWQtMzNjYy00MjliLWFhMzUtMTA2MzRhOGIx ZGQ0LzAvMzVCNTJFRjIwQTU3MzBBNjI2MUQ2RDE5MTZDNkI3NDdGRjNDMjg1Mi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC8zNUI1MkVGMjBBNTczMEE2MjYxRDZEMTkx NkM2Qjc0N0ZGM0MyODUyLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2ZhZGViYjlkLTMzY2MtNDI5Yi1hYTM1LTEwNjM0YThiMWRkNC8wLzM1QjUyRUYy MEE1NzMwQTYyNjFENkQxOTE2QzZCNzQ3RkYzQzI4NTIubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCEVe0W iPieGj2uOm4h0ORBUBIXyFZmzK2enZ5iRJU06Ro0T5AihA4lsTRUaB2GYDVk/lpq d9Wvo+dog3gx0S36hihmbu7//IcKOloGug4zDF1wyKTxX5/aDTfLrt8tpGQlWGYF S0TAiwDmNbCkqLz7p2NWhxM0cT42KwBFfg/TrgbgE/Go97WrZspGFItwts3CGsyZ aTQ/bJ5/h5xt7e4kqIs4wkAML9kbGobjjh+D2eN8hpJtzY/u4YxFIprnA32i9rir TGHE4yv+UiKvMQhAst/gKnAe8gXLBGKS8Dsv+tzIoaph1wMP+5bPgEksNwtdeDsw 9vJ+ylS29vwrhO/P -----END CERTIFICATE-----Generated at Sun Jun 15 09:12:11 2025 by rpki-client