$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fadebb9d-33cc-429b-aa35-10634a8b1dd4/0/35B52EF20A5730A6261D6D1916C6B747FF3C2852.mft File: 35B52EF20A5730A6261D6D1916C6B747FF3C2852.mft (raw, json) Hash identifier: dIqHsCyVjEOCDzO2C0DTJErGGg8IWccX0Zb4L2afIhw= Subject key identifier: 8E:31:C7:D6:48:05:93:48:BF:7F:5A:6A:3F:E1:A6:E4:28:96:5E:D5 Authority key identifier: 35:B5:2E:F2:0A:57:30:A6:26:1D:6D:19:16:C6:B7:47:FF:3C:28:52 Certificate issuer: /CN=35B52EF20A5730A6261D6D1916C6B747FF3C2852 Certificate serial: 415805C16771A42314B61BC1D14F0307B54ADB7B Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/35B52EF20A5730A6261D6D1916C6B747FF3C2852.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fadebb9d-33cc-429b-aa35-10634a8b1dd4/0/35B52EF20A5730A6261D6D1916C6B747FF3C2852.mft Manifest number: DA Signing time: Tue 05 Aug 2025 23:33:31 +0000 Manifest this update: Tue 05 Aug 2025 23:28:31 +0000 Manifest next update: Thu 07 Aug 2025 01:07:31 +0000 Files and hashes: 1: 326131343a373538313a326630313a3a2f34382d3438203d3e20343031333836.roa (hash: SLj141CGncsBb5vfud/Xh4MbUscTfgukNtFTpVVNYzk=) 2: 326131343a373538313a323030303a3a2f34302d3438203d3e20323039313039.roa (hash: lRerEWAZYVnj4WeC0lksu5JXgu5ks2mpqCgBEDRR0Q0=) 3: 326131343a373538313a323030303a3a2f34302d3438203d3e20323135333634.roa (hash: iPZr810Wf3G2BF1Yx0TXVCnIMBYWmzqlqsIx/XIB/Cc=) 4: 326131343a373538313a323030303a3a2f34302d3438203d3e20323136333234.roa (hash: bje5aLLUqgAL8DyPjKPS1MwDhANSqShDo64yB6sarZo=) 5: 326131343a373538313a326630303a3a2f34382d3438203d3e20343031333836.roa (hash: PQEJzzZkaWaRihPz0qFSxn/fBL9FvQBY7Es5NvynDQM=) 6: 326131343a373538313a323230303a3a2f34302d3430203d3e20343031333836.roa (hash: xASXurrkB21YmULJQ68AjQqXl8iRC/GmjrwM45TRghc=) 7: 326131343a373538313a323030303a3a2f34302d3438203d3e20343031333836.roa (hash: pi4F6jgMqqwUP1FTiOnfocpEw1DljOaDr1vx1pIBms8=) 8: 326131343a373538313a323030303a3a2f34302d3438203d3e20333936303530.roa (hash: yUvus43IfO0AT/ck5bMQHbMTgP3EN2v06hq4szCBm40=) 9: 35B52EF20A5730A6261D6D1916C6B747FF3C2852.crl (hash: 3MEwB02a/qELAU0w2Y+TNIrXaSec9Ys1kqAp87s3zkM=) 10: 326131343a373538313a323330303a3a2f34302d3430203d3e20343031333836.roa (hash: 0cCFPlcOjS3xWnb1dJLZXDYv3McRJuNCq2FLbccHCeQ=) 11: 326131343a373538313a323130303a3a2f34302d3430203d3e20343031333836.roa (hash: T25tbrYVZpBemZDjqgpA9HPrUcZHUwwg3LOVGpsmSZ8=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fadebb9d-33cc-429b-aa35-10634a8b1dd4/0/35B52EF20A5730A6261D6D1916C6B747FF3C2852.crl rsync://rsync.paas.rpki.ripe.net/repository/fadebb9d-33cc-429b-aa35-10634a8b1dd4/0/35B52EF20A5730A6261D6D1916C6B747FF3C2852.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/35B52EF20A5730A6261D6D1916C6B747FF3C2852.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 06 Aug 2025 23:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:58:05:c1:67:71:a4:23:14:b6:1b:c1:d1:4f:03:07:b5:4a:db:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35B52EF20A5730A6261D6D1916C6B747FF3C2852 Validity Not Before: Aug 5 23:28:31 2025 GMT Not After : Aug 7 01:07:31 2025 GMT Subject: CN=8E31C7D648059348BF7F5A6A3FE1A6E428965ED5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:8f:ce:1c:75:1e:ca:59:e7:d5:49:64:a4:33: 25:af:86:d5:3d:d1:28:7a:66:c8:3f:de:c4:c0:ab: d5:23:fa:5a:4c:c8:51:bb:21:94:20:45:fc:9b:e8: 00:53:0e:20:1e:69:ad:db:22:45:61:ba:8b:12:10: 45:ee:be:07:75:91:d8:73:eb:61:bf:7f:d2:01:71: 60:cb:2d:f3:ee:5a:54:56:c0:58:3e:dc:22:e1:7d: 3f:6a:1d:9e:ff:76:2d:17:f3:bd:4a:e6:c1:a5:f2: 05:aa:65:de:25:2e:e0:2d:fb:b6:10:18:b1:2a:51: 88:1e:35:b5:9b:92:28:4e:cb:09:a0:b4:40:00:99: bd:be:1b:e5:d8:50:83:3a:08:12:1c:0b:db:a3:63: d9:db:f1:78:83:96:91:73:ca:56:65:4b:b5:a2:ae: 2a:9e:86:66:d6:35:ee:05:3a:a0:82:c2:89:8b:df: 86:e1:3a:75:1a:62:72:6e:29:80:46:f6:9e:27:24: d3:aa:92:ba:9a:e1:39:67:57:6e:d7:02:a9:d7:27: 4e:2c:5e:5f:fe:7a:e2:9b:7f:c4:4f:f0:bd:cd:27: 10:d1:42:38:50:1c:51:37:dc:29:57:8f:3d:60:83: 33:56:36:03:cd:0c:d8:16:d1:86:7c:c9:aa:7b:12: ee:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:31:C7:D6:48:05:93:48:BF:7F:5A:6A:3F:E1:A6:E4:28:96:5E:D5 X509v3 Authority Key Identifier: keyid:35:B5:2E:F2:0A:57:30:A6:26:1D:6D:19:16:C6:B7:47:FF:3C:28:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fadebb9d-33cc-429b-aa35-10634a8b1dd4/0/35B52EF20A5730A6261D6D1916C6B747FF3C2852.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/35B52EF20A5730A6261D6D1916C6B747FF3C2852.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fadebb9d-33cc-429b-aa35-10634a8b1dd4/0/35B52EF20A5730A6261D6D1916C6B747FF3C2852.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:a8:71:c3:b8:f8:9c:d1:4c:98:4d:b3:d2:08:e6:d7:68:78: 57:a3:d0:9f:22:d0:72:22:b1:a3:5d:dd:74:01:43:51:ba:e2: 8b:f4:fe:f8:9e:b1:4f:fe:89:9d:de:94:27:e4:08:56:21:b1: 28:eb:1e:9b:8d:3b:e2:2c:47:d4:05:41:c5:9b:db:22:1b:6c: 73:3b:e7:45:9b:67:c1:f8:e4:88:c5:62:94:b0:57:ef:1d:0c: a2:06:f2:bf:d7:3b:06:d4:0f:d3:ec:1a:e6:5f:3e:0a:bc:e0: 16:56:fa:8f:92:98:4b:77:69:88:a3:d2:11:d8:f7:81:92:d8: 0b:66:2c:75:0f:05:62:05:69:46:ad:c7:a7:48:bd:85:76:3d: 48:b7:68:17:7b:d1:12:a3:27:55:ee:8c:6c:99:7f:8d:eb:f1: 8d:df:e7:d5:4f:ad:a0:5d:45:55:aa:2f:93:c6:b3:5f:52:54: 7d:7b:0a:55:b3:12:6e:12:5a:2c:0d:ff:6c:dc:f2:78:69:fa: 52:64:18:07:c3:11:23:42:40:77:fb:43:04:0a:65:15:94:f1: fc:dc:57:9a:5b:07:26:eb:51:db:24:cb:8c:eb:cb:b7:67:ef: 52:5a:ab:bd:f4:e5:cb:f0:e5:9a:1f:c9:1f:c9:19:d3:2d:96: 28:4c:13:a3 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUQVgFwWdxpCMUthvB0U8DB7VK23swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzVCNTJFRjIwQTU3MzBBNjI2MUQ2RDE5MTZDNkI3NDdG RjNDMjg1MjAeFw0yNTA4MDUyMzI4MzFaFw0yNTA4MDcwMTA3MzFaMDMxMTAvBgNV BAMTKDhFMzFDN0Q2NDgwNTkzNDhCRjdGNUE2QTNGRTFBNkU0Mjg5NjVFRDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQj84cdR7KWefVSWSkMyWvhtU9 0Sh6Zsg/3sTAq9Uj+lpMyFG7IZQgRfyb6ABTDiAeaa3bIkVhuosSEEXuvgd1kdhz 62G/f9IBcWDLLfPuWlRWwFg+3CLhfT9qHZ7/di0X871K5sGl8gWqZd4lLuAt+7YQ GLEqUYgeNbWbkihOywmgtEAAmb2+G+XYUIM6CBIcC9ujY9nb8XiDlpFzylZlS7Wi riqehmbWNe4FOqCCwomL34bhOnUaYnJuKYBG9p4nJNOqkrqa4TlnV27XAqnXJ04s Xl/+euKbf8RP8L3NJxDRQjhQHFE33ClXjz1ggzNWNgPNDNgW0YZ8yap7Eu61AgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUjjHH1kgFk0i/f1pqP+Gm5CiWXtUwHwYDVR0j BBgwFoAUNbUu8gpXMKYmHW0ZFsa3R/88KFIwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZmFkZWJiOWQtMzNjYy00MjliLWFhMzUtMTA2MzRhOGIx ZGQ0LzAvMzVCNTJFRjIwQTU3MzBBNjI2MUQ2RDE5MTZDNkI3NDdGRjNDMjg1Mi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC8zNUI1MkVGMjBBNTczMEE2MjYxRDZEMTkx NkM2Qjc0N0ZGM0MyODUyLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2ZhZGViYjlkLTMzY2MtNDI5Yi1hYTM1LTEwNjM0YThiMWRkNC8wLzM1QjUyRUYy MEE1NzMwQTYyNjFENkQxOTE2QzZCNzQ3RkYzQzI4NTIubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQB0qHHD uPic0UyYTbPSCObXaHhXo9CfItByIrGjXd10AUNRuuKL9P74nrFP/omd3pQn5AhW IbEo6x6bjTviLEfUBUHFm9siG2xzO+dFm2fB+OSIxWKUsFfvHQyiBvK/1zsG1A/T 7BrmXz4KvOAWVvqPkphLd2mIo9IR2PeBktgLZix1DwViBWlGrcenSL2Fdj1It2gX e9ESoydV7oxsmX+N6/GN3+fVT62gXUVVqi+TxrNfUlR9ewpVsxJuElosDf9s3PJ4 afpSZBgHwxEjQkB3+0MECmUVlPH83FeaWwcm61HbJMuM68u3Z+9SWqu99OXL8OWa H8kfyRnTLZYoTBOj -----END CERTIFICATE-----Generated at Wed Aug 6 07:58:45 2025 by rpki-client