$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fadebb9d-33cc-429b-aa35-10634a8b1dd4/0/35B52EF20A5730A6261D6D1916C6B747FF3C2852.mft File: 35B52EF20A5730A6261D6D1916C6B747FF3C2852.mft (raw, json) Hash identifier: vDQudQb3DV+3xrW/4vZ1lNfoWRWwlAHb+Yqyq9jTSZ8= Subject key identifier: D6:9A:D9:68:81:9B:EF:4B:AE:CD:25:FA:E3:BC:06:37:04:BE:07:A6 Authority key identifier: 35:B5:2E:F2:0A:57:30:A6:26:1D:6D:19:16:C6:B7:47:FF:3C:28:52 Certificate issuer: /CN=35B52EF20A5730A6261D6D1916C6B747FF3C2852 Certificate serial: 7E41C4ED9F010E63A82A48D53CE42D567F1F7655 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/35B52EF20A5730A6261D6D1916C6B747FF3C2852.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fadebb9d-33cc-429b-aa35-10634a8b1dd4/0/35B52EF20A5730A6261D6D1916C6B747FF3C2852.mft Manifest number: 02BC Signing time: Wed 29 Jul 2026 05:12:24 +0000 Manifest this update: Wed 29 Jul 2026 05:07:24 +0000 Manifest next update: Thu 30 Jul 2026 06:12:24 +0000 Files and hashes: 1: 326131343a373538313a323330303a3a2f34302d3430203d3e20343031333836.roa (hash: GU9+rKAYRqNo9YIwP+TkUZlOwC3QOJ/ceUAdYXuG73A=) 2: 326131343a373538313a323030303a3a2f34302d3438203d3e20333936303530.roa (hash: sHH5EXfl8KcOz9d8oEb74NyMVuJWDbdSziQULSKFDd4=) 3: 326131343a373538313a323530303a3a2f34302d3430203d3e203134343437.roa (hash: RGywHnxAYLuO6cDdu+OqsmlkwS7ZjWl9Xx30KtT8IYc=) 4: 35B52EF20A5730A6261D6D1916C6B747FF3C2852.crl (hash: aLxA/VBHePrUsOKvO5tKGb/lXxFBfFRg2fjLkFIczZE=) 5: 326131343a373538313a323030303a3a2f34302d3438203d3e20343031333836.roa (hash: UDRqDR0JMowXqg92cpDjRfR7VLQyzzQdpbzczBoUKPE=) 6: 326131343a373538313a323030303a3a2f34302d3438203d3e20323039313039.roa (hash: tf4CnuzuqcNJkCPREEFPykMzx34y8Ud9hQ2hyeqIDkc=) 7: 326131343a373538313a323030303a3a2f34302d3438203d3e20323135333634.roa (hash: Qbpxn6m6N57BLQ/qLjGEPLIZz8aoJQbWLiHDKsDlsdk=) 8: 326131343a373538313a326630303a3a2f34382d3438203d3e20343031333836.roa (hash: hhnXez1MtyG/OWqeDWj8Yk7vwpb6xK8SsXbhq+WvHw8=) 9: 326131343a373538313a323830303a3a2f34302d3438203d3e20323039313039.roa (hash: BgI8MCbrdQrLXGBmcxKTWUA61uXQRIT/7G+jUcNg+Cg=) 10: 326131343a373538313a323630303a3a2f34302d3438203d3e20323039313039.roa (hash: vUmqEtEfYQI1zWEs+VA6phQsPoAXeEbQEq0Kg2kwRRk=) 11: 326131343a373538313a323730303a3a2f34302d3438203d3e20323039313039.roa (hash: r2FAoLHwIu8mKalLeNKMfevbe6TYD4tj8Lmhtg3K0Jc=) 12: 326131343a373538313a323030303a3a2f34302d3438203d3e20323136333234.roa (hash: 94LHGHEmr5Ow8y0LgQ8OziBDUOK8WBX/6zymxyfianM=) 13: 326131343a373538313a323130303a3a2f34302d3430203d3e20343031333836.roa (hash: DLjQUjmP+DsaW9+BMh56ieI2Ec94mZJVyHTBFU7NtcI=) 14: 326131343a373538313a326630313a3a2f34382d3438203d3e20343031333836.roa (hash: qMwS539lNZFoubA7sJWCkka1wt0G8zXYNPGQsBc3Exo=) 15: 326131343a373538313a323930303a3a2f34302d3438203d3e20323039313039.roa (hash: fNdgpZfzM+lTdkTHtAnx5kJSH3iOKuMJEshssLvwnVk=) 16: 326131343a373538313a323230303a3a2f34302d3430203d3e20343031333836.roa (hash: WHkf4m6DzfoyrufCoOAxeFwtqFzFGCors6ZbsGaGLa8=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fadebb9d-33cc-429b-aa35-10634a8b1dd4/0/35B52EF20A5730A6261D6D1916C6B747FF3C2852.crl rsync://rsync.paas.rpki.ripe.net/repository/fadebb9d-33cc-429b-aa35-10634a8b1dd4/0/35B52EF20A5730A6261D6D1916C6B747FF3C2852.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/35B52EF20A5730A6261D6D1916C6B747FF3C2852.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 30 Jul 2026 06:12:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:41:c4:ed:9f:01:0e:63:a8:2a:48:d5:3c:e4:2d:56:7f:1f:76:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35B52EF20A5730A6261D6D1916C6B747FF3C2852 Validity Not Before: Jul 29 05:07:24 2026 GMT Not After : Jul 30 06:12:24 2026 GMT Subject: CN=D69AD968819BEF4BAECD25FAE3BC063704BE07A6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:46:8e:bd:b9:4c:42:4a:73:5d:a5:d7:1f:16: 44:7e:a4:21:f3:d9:fb:6a:9d:3e:8f:a5:96:81:eb: 73:6c:5c:75:46:7c:ca:3b:06:be:64:2f:a9:4e:fe: 98:3f:d2:dc:29:16:63:0f:47:20:40:91:fa:16:d0: 74:c1:23:0b:1c:e7:af:d3:5a:3b:cc:97:d8:b2:3b: eb:2a:97:22:6f:0d:3d:54:e8:6a:53:16:b6:aa:70: e5:e5:89:60:b3:ed:a2:7b:d3:b3:62:98:3e:9e:44: 41:7d:dc:23:90:da:ea:a5:e7:ab:c2:cd:60:26:d5: ad:46:bc:6f:54:c1:8b:53:f2:7e:f5:4f:30:50:f2: 12:92:ee:91:4f:78:7d:6e:12:29:68:c9:0a:9e:cc: d3:42:29:da:7f:31:30:92:4a:47:0c:4d:1b:fc:a7: 24:54:3b:f1:61:33:81:13:a8:27:f8:4e:2c:9e:14: 99:63:87:19:1e:b2:fa:12:c5:74:ca:71:53:e9:57: 09:aa:03:1a:44:d5:27:4f:d8:76:ae:61:19:8a:bb: 3f:f0:f4:29:d9:60:ff:08:5f:87:86:32:9f:84:66: 20:74:2b:01:30:fb:b4:b5:7b:34:b6:a6:f7:d5:79: fd:09:ff:6f:92:a7:6a:95:e3:9f:1b:76:38:bd:09: 7c:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:9A:D9:68:81:9B:EF:4B:AE:CD:25:FA:E3:BC:06:37:04:BE:07:A6 X509v3 Authority Key Identifier: keyid:35:B5:2E:F2:0A:57:30:A6:26:1D:6D:19:16:C6:B7:47:FF:3C:28:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fadebb9d-33cc-429b-aa35-10634a8b1dd4/0/35B52EF20A5730A6261D6D1916C6B747FF3C2852.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/35B52EF20A5730A6261D6D1916C6B747FF3C2852.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fadebb9d-33cc-429b-aa35-10634a8b1dd4/0/35B52EF20A5730A6261D6D1916C6B747FF3C2852.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:42:11:f8:59:f7:ff:8b:99:94:bd:d7:2b:00:49:39:0e:54: fc:25:be:66:d4:2c:56:ab:08:0f:90:25:57:23:a2:af:ff:dd: 80:ac:75:15:1f:99:17:1a:17:21:e4:66:63:e7:25:11:2c:bb: 55:c1:46:7a:a8:cc:2b:90:8e:bb:25:5c:c1:49:d2:d5:ad:09: ef:9d:44:e1:56:1e:a9:2f:c7:d1:e1:52:ce:5a:77:a1:6d:40: d2:dd:50:35:c1:de:2a:e9:2f:5e:94:d6:11:6d:34:a0:82:b9: e3:ff:37:f4:9f:32:1c:b1:6f:00:99:61:b1:69:70:1f:34:b3: 28:f2:9e:38:8a:3d:9b:2a:ec:8f:2f:b8:d1:7e:3c:a3:c2:08: 05:08:f5:76:c9:be:b9:ef:b0:85:62:7a:63:92:b6:e2:35:20: 4e:4d:7e:20:9d:2a:44:ec:39:1a:4f:91:43:84:dc:58:2b:e3: 58:54:d5:53:08:ca:76:ae:c9:d8:20:aa:0b:f6:3a:d9:8c:2a: f0:6e:22:00:18:4f:93:bf:ad:56:9e:fe:97:d2:6d:6d:1a:2d: ce:95:f7:c2:a7:92:22:d6:36:75:66:0c:44:60:83:ea:59:c8: ea:bc:39:1d:f9:5c:7c:2c:8c:41:aa:5d:3d:53:8e:4d:99:6a: f6:da:d2:26 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUfkHE7Z8BDmOoKkjVPOQtVn8fdlUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzVCNTJFRjIwQTU3MzBBNjI2MUQ2RDE5MTZDNkI3NDdG RjNDMjg1MjAeFw0yNjA3MjkwNTA3MjRaFw0yNjA3MzAwNjEyMjRaMDMxMTAvBgNV BAMTKEQ2OUFEOTY4ODE5QkVGNEJBRUNEMjVGQUUzQkMwNjM3MDRCRTA3QTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvRo69uUxCSnNdpdcfFkR+pCHz 2ftqnT6PpZaB63NsXHVGfMo7Br5kL6lO/pg/0twpFmMPRyBAkfoW0HTBIwsc56/T WjvMl9iyO+sqlyJvDT1U6GpTFraqcOXliWCz7aJ707NimD6eREF93COQ2uql56vC zWAm1a1GvG9UwYtT8n71TzBQ8hKS7pFPeH1uEiloyQqezNNCKdp/MTCSSkcMTRv8 pyRUO/FhM4ETqCf4TiyeFJljhxkesvoSxXTKcVPpVwmqAxpE1SdP2HauYRmKuz/w 9CnZYP8IX4eGMp+EZiB0KwEw+7S1ezS2pvfVef0J/2+Sp2qV458bdji9CXzzAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQU1prZaIGb70uuzSX647wGNwS+B6YwHwYDVR0j BBgwFoAUNbUu8gpXMKYmHW0ZFsa3R/88KFIwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZmFkZWJiOWQtMzNjYy00MjliLWFhMzUtMTA2MzRhOGIx ZGQ0LzAvMzVCNTJFRjIwQTU3MzBBNjI2MUQ2RDE5MTZDNkI3NDdGRjNDMjg1Mi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC8zNUI1MkVGMjBBNTczMEE2MjYxRDZEMTkx NkM2Qjc0N0ZGM0MyODUyLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2ZhZGViYjlkLTMzY2MtNDI5Yi1hYTM1LTEwNjM0YThiMWRkNC8wLzM1QjUyRUYy MEE1NzMwQTYyNjFENkQxOTE2QzZCNzQ3RkYzQzI4NTIubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQARQhH4 Wff/i5mUvdcrAEk5DlT8Jb5m1CxWqwgPkCVXI6Kv/92ArHUVH5kXGhch5GZj5yUR LLtVwUZ6qMwrkI67JVzBSdLVrQnvnUThVh6pL8fR4VLOWnehbUDS3VA1wd4q6S9e lNYRbTSggrnj/zf0nzIcsW8AmWGxaXAfNLMo8p44ij2bKuyPL7jRfjyjwggFCPV2 yb6577CFYnpjkrbiNSBOTX4gnSpE7DkaT5FDhNxYK+NYVNVTCMp2rsnYIKoL9jrZ jCrwbiIAGE+Tv61Wnv6X0m1tGi3OlffCp5Ii1jZ1ZgxEYIPqWcjqvDkd+Vx8LIxB ql09U45NmWr22tIm -----END CERTIFICATE-----Generated at Wed Jul 29 18:28:56 2026 by rpki-client