$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fadebb9d-33cc-429b-aa35-10634a8b1dd4/0/35B52EF20A5730A6261D6D1916C6B747FF3C2852.mft File: 35B52EF20A5730A6261D6D1916C6B747FF3C2852.mft (raw, json) Hash identifier: ASjXUCgETJdqJ74alTRHNKIHlmIc2UOU5wXEQMFgLGw= Subject key identifier: C9:85:43:AE:29:FA:B8:9D:C8:36:8C:F5:0D:2F:41:E8:D4:A0:B0:40 Authority key identifier: 35:B5:2E:F2:0A:57:30:A6:26:1D:6D:19:16:C6:B7:47:FF:3C:28:52 Certificate issuer: /CN=35B52EF20A5730A6261D6D1916C6B747FF3C2852 Certificate serial: 2D964B3BCCE49745F3069504671459E6EA5968BF Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/35B52EF20A5730A6261D6D1916C6B747FF3C2852.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fadebb9d-33cc-429b-aa35-10634a8b1dd4/0/35B52EF20A5730A6261D6D1916C6B747FF3C2852.mft Manifest number: C8 Signing time: Wed 23 Jul 2025 08:58:06 +0000 Manifest this update: Wed 23 Jul 2025 08:53:06 +0000 Manifest next update: Thu 24 Jul 2025 11:14:06 +0000 Files and hashes: 1: 326131343a373538313a323330303a3a2f34302d3430203d3e20343031333836.roa (hash: 0cCFPlcOjS3xWnb1dJLZXDYv3McRJuNCq2FLbccHCeQ=) 2: 326131343a373538313a326630303a3a2f34382d3438203d3e20343031333836.roa (hash: PQEJzzZkaWaRihPz0qFSxn/fBL9FvQBY7Es5NvynDQM=) 3: 326131343a373538313a323030303a3a2f34302d3438203d3e20323135333634.roa (hash: iPZr810Wf3G2BF1Yx0TXVCnIMBYWmzqlqsIx/XIB/Cc=) 4: 326131343a373538313a323230303a3a2f34302d3430203d3e20343031333836.roa (hash: xASXurrkB21YmULJQ68AjQqXl8iRC/GmjrwM45TRghc=) 5: 326131343a373538313a326630313a3a2f34382d3438203d3e20343031333836.roa (hash: SLj141CGncsBb5vfud/Xh4MbUscTfgukNtFTpVVNYzk=) 6: 326131343a373538313a323030303a3a2f34302d3438203d3e20333936303530.roa (hash: yUvus43IfO0AT/ck5bMQHbMTgP3EN2v06hq4szCBm40=) 7: 326131343a373538313a323130303a3a2f34302d3430203d3e20343031333836.roa (hash: T25tbrYVZpBemZDjqgpA9HPrUcZHUwwg3LOVGpsmSZ8=) 8: 35B52EF20A5730A6261D6D1916C6B747FF3C2852.crl (hash: 7HnvqTUHtqGQjyk4Q4NPNCjHkGCtdxlvTZGjiYO21N0=) 9: 326131343a373538313a323030303a3a2f34302d3438203d3e20323039313039.roa (hash: lRerEWAZYVnj4WeC0lksu5JXgu5ks2mpqCgBEDRR0Q0=) 10: 326131343a373538313a323030303a3a2f34302d3438203d3e20323136333234.roa (hash: bje5aLLUqgAL8DyPjKPS1MwDhANSqShDo64yB6sarZo=) 11: 326131343a373538313a323030303a3a2f34302d3438203d3e20343031333836.roa (hash: pi4F6jgMqqwUP1FTiOnfocpEw1DljOaDr1vx1pIBms8=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fadebb9d-33cc-429b-aa35-10634a8b1dd4/0/35B52EF20A5730A6261D6D1916C6B747FF3C2852.crl rsync://rsync.paas.rpki.ripe.net/repository/fadebb9d-33cc-429b-aa35-10634a8b1dd4/0/35B52EF20A5730A6261D6D1916C6B747FF3C2852.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/35B52EF20A5730A6261D6D1916C6B747FF3C2852.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 23 Jul 2025 22:27:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:96:4b:3b:cc:e4:97:45:f3:06:95:04:67:14:59:e6:ea:59:68:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35B52EF20A5730A6261D6D1916C6B747FF3C2852 Validity Not Before: Jul 23 08:53:06 2025 GMT Not After : Jul 24 11:14:06 2025 GMT Subject: CN=C98543AE29FAB89DC8368CF50D2F41E8D4A0B040 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:ce:0f:4f:81:4b:71:11:23:75:d0:5c:a9:ae: c7:e5:4c:e7:21:2a:56:54:f1:cb:a2:9d:a1:dc:60: 46:62:f7:3e:d5:0f:a5:d0:61:f6:3e:45:fd:11:e9: 6e:98:cb:1c:6c:f3:f3:02:b2:03:18:5a:a3:9e:cd: 9c:c5:ba:da:cf:8c:7d:5e:e8:0c:75:d0:4a:d5:54: 67:f2:87:44:88:9a:4b:96:b3:7e:8a:c2:f2:7b:be: 3b:49:7e:cf:a7:bb:cb:c9:f8:76:0d:10:bd:68:47: d1:67:6e:3b:bf:fc:dc:78:be:78:fa:3b:1a:1c:e1: 2b:5f:8f:17:47:d7:a8:0c:1b:a6:d1:fa:3e:fc:f7: 26:31:9a:c8:f5:a1:12:84:b4:75:83:96:2e:10:d3: b7:4e:e0:27:55:4a:5d:3b:8f:b1:eb:6f:0c:6b:a8: 5d:fc:21:e3:62:e0:d4:20:3f:2c:c2:fa:fe:a3:17: 71:4f:71:f6:3a:57:39:89:88:f3:f3:ed:42:c0:35: 92:42:33:3c:20:8d:c4:3a:40:a2:05:83:0e:4b:95: 0c:bc:b3:9d:75:39:c7:2a:69:ce:43:42:0c:2f:9d: 6c:95:d6:41:40:e1:3b:a8:7e:72:d3:6d:23:c0:d3: c3:4e:69:10:22:27:b1:8c:a5:11:96:41:f5:d7:11: c7:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:85:43:AE:29:FA:B8:9D:C8:36:8C:F5:0D:2F:41:E8:D4:A0:B0:40 X509v3 Authority Key Identifier: keyid:35:B5:2E:F2:0A:57:30:A6:26:1D:6D:19:16:C6:B7:47:FF:3C:28:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fadebb9d-33cc-429b-aa35-10634a8b1dd4/0/35B52EF20A5730A6261D6D1916C6B747FF3C2852.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/35B52EF20A5730A6261D6D1916C6B747FF3C2852.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fadebb9d-33cc-429b-aa35-10634a8b1dd4/0/35B52EF20A5730A6261D6D1916C6B747FF3C2852.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:05:eb:8c:00:c6:48:b8:e2:5d:af:bc:0a:66:5d:c9:e9:cb: 05:6d:13:a8:ef:63:d7:3c:77:44:25:b6:6d:86:fb:3c:6d:d8: 80:94:52:c7:42:b6:b7:30:9a:a3:a7:22:d7:1d:01:12:af:ed: 0b:14:6c:91:c0:c8:a3:10:8d:67:42:4a:7a:30:fc:81:40:b4: 16:d0:1e:70:a5:30:84:72:71:c2:e0:db:cd:af:21:16:45:9f: f4:22:3e:d5:e7:f5:87:6e:9e:7e:0f:94:97:f3:7e:2c:5a:ce: d7:27:94:be:cb:1d:47:4e:d7:d1:6e:4e:e6:86:ac:7e:cc:40: 77:b8:fd:1e:8d:44:92:6f:6c:90:6f:51:e9:8c:ea:10:77:0d: d0:63:97:19:eb:ad:5e:03:f8:a7:fa:9e:65:81:cf:5e:c5:aa: 36:55:5a:54:ee:58:81:b6:d1:2f:bc:ac:be:78:df:79:8e:0f: 03:4c:c0:3c:5b:eb:2e:37:26:f3:3c:ed:82:8d:d7:cb:2b:3f: af:e2:a7:07:e8:9c:c0:06:bc:29:89:50:c5:1f:9f:45:c0:9c: c8:a2:a9:fd:41:03:85:30:27:47:b3:f8:0b:73:6f:e4:5b:6a: 1b:e4:37:b7:01:ba:98:4f:b8:70:5d:3a:ef:7e:91:e4:53:e4: 5a:a2:88:63 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIULZZLO8zkl0XzBpUEZxRZ5upZaL8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzVCNTJFRjIwQTU3MzBBNjI2MUQ2RDE5MTZDNkI3NDdG RjNDMjg1MjAeFw0yNTA3MjMwODUzMDZaFw0yNTA3MjQxMTE0MDZaMDMxMTAvBgNV BAMTKEM5ODU0M0FFMjlGQUI4OURDODM2OENGNTBEMkY0MUU4RDRBMEIwNDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQzg9PgUtxESN10FyprsflTOch KlZU8cuinaHcYEZi9z7VD6XQYfY+Rf0R6W6Yyxxs8/MCsgMYWqOezZzFutrPjH1e 6Ax10ErVVGfyh0SImkuWs36KwvJ7vjtJfs+nu8vJ+HYNEL1oR9Fnbju//Nx4vnj6 Oxoc4StfjxdH16gMG6bR+j789yYxmsj1oRKEtHWDli4Q07dO4CdVSl07j7Hrbwxr qF38IeNi4NQgPyzC+v6jF3FPcfY6VzmJiPPz7ULANZJCMzwgjcQ6QKIFgw5LlQy8 s511Occqac5DQgwvnWyV1kFA4TuofnLTbSPA08NOaRAiJ7GMpRGWQfXXEcfzAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUyYVDrin6uJ3INoz1DS9B6NSgsEAwHwYDVR0j BBgwFoAUNbUu8gpXMKYmHW0ZFsa3R/88KFIwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZmFkZWJiOWQtMzNjYy00MjliLWFhMzUtMTA2MzRhOGIx ZGQ0LzAvMzVCNTJFRjIwQTU3MzBBNjI2MUQ2RDE5MTZDNkI3NDdGRjNDMjg1Mi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC8zNUI1MkVGMjBBNTczMEE2MjYxRDZEMTkx NkM2Qjc0N0ZGM0MyODUyLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2ZhZGViYjlkLTMzY2MtNDI5Yi1hYTM1LTEwNjM0YThiMWRkNC8wLzM1QjUyRUYy MEE1NzMwQTYyNjFENkQxOTE2QzZCNzQ3RkYzQzI4NTIubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCIBeuM AMZIuOJdr7wKZl3J6csFbROo72PXPHdEJbZthvs8bdiAlFLHQra3MJqjpyLXHQES r+0LFGyRwMijEI1nQkp6MPyBQLQW0B5wpTCEcnHC4NvNryEWRZ/0Ij7V5/WHbp5+ D5SX834sWs7XJ5S+yx1HTtfRbk7mhqx+zEB3uP0ejUSSb2yQb1HpjOoQdw3QY5cZ 661eA/in+p5lgc9exao2VVpU7liBttEvvKy+eN95jg8DTMA8W+suNybzPO2CjdfL Kz+v4qcH6JzABrwpiVDFH59FwJzIoqn9QQOFMCdHs/gLc2/kW2ob5De3AbqYT7hw XTrvfpHkU+Raoohj -----END CERTIFICATE-----Generated at Wed Jul 23 11:58:19 2025 by rpki-client