$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3E870B9A7003C4FD9C51BD354A9DEFA3FB77B4A9.mft File: 3E870B9A7003C4FD9C51BD354A9DEFA3FB77B4A9.mft (raw, json) Hash identifier: jvjWH8TufJ6iVPk11CUJXkNhBc3J8m8B/LxMK7MZT9s= Subject key identifier: 11:1A:2B:60:77:8C:D2:C7:64:14:2A:50:AE:F0:6B:56:88:13:C5:F2 Authority key identifier: 3E:87:0B:9A:70:03:C4:FD:9C:51:BD:35:4A:9D:EF:A3:FB:77:B4:A9 Certificate issuer: /CN=3e870b9a7003c4fd9c51bd354a9defa3fb77b4a9 Certificate serial: 3F5DD7D35A007D2D24169BA7DB34B657D19564D8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PocLmnADxP2cUb01Sp3vo_t3tKk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3E870B9A7003C4FD9C51BD354A9DEFA3FB77B4A9.mft Manifest number: 067B Signing time: Thu 05 Mar 2026 13:50:15 +0000 Manifest this update: Thu 05 Mar 2026 13:45:15 +0000 Manifest next update: Fri 06 Mar 2026 15:40:15 +0000 Files and hashes: 1: 3138352e3231332e3234322e302f32342d3234203d3e203232343237.roa (hash: rxGzTHw2ETBLYdKcURKX80/JYXYHlHWFPETTk7njjlE=) 2: 3138352e3232392e3230322e302f32342d3234203d3e20323130303330.roa (hash: LqK97diQcFrb4344S9ThgI9qIfk24xWO2D6Fzod4ApM=) 3: 326130363a356563303a3a2f34382d3438203d3e20323034363933.roa (hash: 1uKLPQUne0QcXblB3NW5HCIymd03TIpdjdnWqSBKxm8=) 4: 3138352e3232392e3230312e302f32342d3234203d3e20323030303137.roa (hash: PCz6aeIUTtC34FXSr6irNuWXyhZRMV7yjZ9OeA9cKuk=) 5: 3138352e3231332e3234302e302f32342d3234203d3e20323135373033.roa (hash: 5U9kh/Q1+pD8ktgLTSH2rTlmtF2qNT/hbi1XnCHITmo=) 6: 3138352e3234342e39352e302f32342d3234203d3e203230343733.roa (hash: wcPx+O7KmTHA1Z17UF9VIIdo6IS06Ij+d7NLeipHdoU=) 7: 3138352e3133302e36312e302f32342d3234203d3e20323732363936.roa (hash: nzc+7vTx0fxusJ8QBUU0nZ0s/13eeYO5i8RfnoHHUhc=) 8: 3138352e3131312e3138382e302f32342d3234203d3e203632353633.roa (hash: X7Tn/GpCSEBlmrST5TEKgAjVIubIFvn/OXAnR/EzN3o=) 9: 3138352e3232392e3230332e302f32342d3234203d3e20323034333939.roa (hash: o2s9iRRo/HWpVNV66/X3K8Nx40dZXcSQ+ar/RSKpLZ4=) 10: 3138352e3234342e39342e302f32342d3234203d3e20333937343233.roa (hash: oZOogcZA7gOpZC0s0tbGMXCZZe5qdoNGw7VhUnq2iag=) 11: 3E870B9A7003C4FD9C51BD354A9DEFA3FB77B4A9.crl (hash: W7vtAsxKNZjLUbZESioZu3B6SwRxW7UwqLWLksjQ2H8=) 12: 3138352e3133302e36302e302f32342d3234203d3e203131383738.roa (hash: IVpkKpecJIjzuckRW19RYnHFzcqeOz1CHzHhlqd09/8=) 13: 39312e3133322e3232372e302f32342d3234203d3e20323132333834.roa (hash: eh1Z74wbnDki2jWa8j9mKK2ooveQFWs0ccPHyRr5G7Y=) 14: 3138352e3133302e36322e302f32342d3234203d3e20323036313530.roa (hash: 0Uta0mciJtwdV1pzRO+5GA2qv0qJ2rULFPtgrlRyMi0=) 15: 3138352e3231332e3234312e302f32342d3234203d3e203631323732.roa (hash: ZRXMJB81EQGqLoTW9rCPLjbdmz5JtoX/ioguz/yH9B4=) 16: 3138352e3231332e3234332e302f32342d3234203d3e203330343536.roa (hash: HHWDsn/geYTSKOK374fOgzwqQ04cratsjB9aVUs6qO0=) 17: 3138352e3232392e3230302e302f32342d3234203d3e20313335343032.roa (hash: +dPRMdq4kTZhc1HP4XUoHFPE1GHvKzT91NAn4oQHjN8=) 18: 3138352e3133302e36332e302f32342d3234203d3e203332313831.roa (hash: krs6rxjGgkgxIC0XFsSJIDbJbJTaOxRVYKdhwP98j0o=) 19: 39312e3133322e3232372e302f32342d3234203d3e20323132333335.roa (hash: 4nM6t6s+oklrwoQsrohzelZ9jLVJM3XAMUC6E2raQWI=) 20: 3138352e3234342e39352e302f32342d3234203d3e203134363138.roa (hash: BX+afd5v4CnQw1Csb+gERO9bOUf9cjiesQkq05EVznU=) 21: 3138352e3231332e3234332e302f32342d3234203d3e20323034393238.roa (hash: /82U/4ZCS1l7tEmRqZdiqoHQfHkAV0iGqgAdCf0IY6Q=) 22: 3138352e3234342e39352e302f32342d3234203d3e203136353039.roa (hash: tBBH3ivLD6QCOuz/zDI7JAWzO8l/tRZui9Xrn0qJpA4=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3E870B9A7003C4FD9C51BD354A9DEFA3FB77B4A9.crl rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3E870B9A7003C4FD9C51BD354A9DEFA3FB77B4A9.mft rsync://rpki.ripe.net/repository/DEFAULT/PocLmnADxP2cUb01Sp3vo_t3tKk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 06 Mar 2026 15:20:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:5d:d7:d3:5a:00:7d:2d:24:16:9b:a7:db:34:b6:57:d1:95:64:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e870b9a7003c4fd9c51bd354a9defa3fb77b4a9 Validity Not Before: Mar 5 13:45:15 2026 GMT Not After : Mar 6 15:40:15 2026 GMT Subject: CN=111A2B60778CD2C764142A50AEF06B568813C5F2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:15:c9:cb:c3:00:84:12:63:4b:f1:fd:0b:0a: 62:ee:b1:a6:d7:5c:b3:b4:fc:40:18:ca:3a:6b:91: 63:01:5f:4d:53:d0:2b:09:0a:53:4a:23:3d:10:2b: 40:41:28:e8:85:de:a2:74:a2:eb:97:d8:45:41:c6: e1:79:9c:81:1a:58:e5:70:bc:84:51:19:86:cf:3e: e9:e4:bb:95:f2:e7:88:56:2f:fa:55:39:c0:b4:1b: 51:70:36:5d:d7:e6:7d:44:97:d2:bb:4e:ba:09:16: 0f:bc:14:15:45:00:54:db:92:fe:08:fe:0a:dc:6f: 8d:bf:a2:0c:11:78:91:30:dc:99:48:fe:ca:57:56: 5b:a7:b0:fb:36:4b:1a:17:2d:39:50:10:ee:32:b2: 32:2e:ad:15:a9:ef:d0:db:86:b5:25:a8:2b:2c:c5: 5d:23:b0:72:e8:cc:7a:24:c0:e9:8a:ce:ef:b4:0d: d4:a0:1b:1c:75:71:72:53:6d:99:9f:e7:0c:10:d4: d2:82:d2:a8:c9:a6:ca:8f:d4:16:43:37:be:b7:a2: 5b:86:70:d2:7b:b4:81:80:a3:d7:ae:48:46:01:f8: a1:57:7b:73:32:0a:c4:50:6f:ca:67:fd:e3:1f:6b: c7:7a:3b:15:15:93:d2:83:13:ab:95:d4:06:30:c1: b0:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:1A:2B:60:77:8C:D2:C7:64:14:2A:50:AE:F0:6B:56:88:13:C5:F2 X509v3 Authority Key Identifier: keyid:3E:87:0B:9A:70:03:C4:FD:9C:51:BD:35:4A:9D:EF:A3:FB:77:B4:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3E870B9A7003C4FD9C51BD354A9DEFA3FB77B4A9.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PocLmnADxP2cUb01Sp3vo_t3tKk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3E870B9A7003C4FD9C51BD354A9DEFA3FB77B4A9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:4e:23:7b:30:d7:6f:dc:cd:ed:c3:8e:0d:ba:35:00:40:9f: 1d:52:54:c1:27:24:33:7e:45:6b:7c:57:35:49:3b:30:2e:29: 2c:31:99:e6:10:d1:38:4e:7a:14:5b:00:6a:99:a9:27:3a:72: 19:df:0a:6b:24:78:08:f8:09:2d:32:4d:58:e9:45:3b:8e:fa: 81:d9:91:7f:6e:10:91:a5:61:a3:be:8f:7f:78:e4:6b:ca:5f: 9c:bc:f9:df:5d:b4:f9:d8:29:e5:f0:86:99:c9:c3:71:55:89: 9f:d1:49:01:2d:6f:71:52:84:25:ae:af:f9:09:8c:cd:8a:bb: b1:05:11:67:55:5e:88:2d:8a:53:8e:78:7a:f8:84:fd:d1:11: a1:1d:20:71:af:c4:14:a1:3f:c0:70:b9:47:2e:3f:f8:c4:17: ea:a7:95:73:f8:ec:a7:0a:c3:c6:02:8d:29:89:2c:dc:1c:ca: 92:59:59:b6:ba:15:fa:04:9f:56:62:3e:fb:42:2a:82:27:9b: 66:a5:8d:d1:31:26:8b:2b:12:2b:65:a0:b6:1d:4e:39:f7:cc: 77:8c:d3:9b:05:2e:1c:7e:c2:87:d6:5d:12:f3:d5:d2:49:eb: c2:f9:9e:79:26:5f:52:34:5f:f8:a8:51:c1:b3:ed:68:75:e7: 23:f7:c0:a6 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUP13X01oAfS0kFpun2zS2V9GVZNgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM2U4NzBiOWE3MDAzYzRmZDljNTFiZDM1NGE5ZGVmYTNm Yjc3YjRhOTAeFw0yNjAzMDUxMzQ1MTVaFw0yNjAzMDYxNTQwMTVaMDMxMTAvBgNV BAMTKDExMUEyQjYwNzc4Q0QyQzc2NDE0MkE1MEFFRjA2QjU2ODgxM0M1RjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzFcnLwwCEEmNL8f0LCmLusabX XLO0/EAYyjprkWMBX01T0CsJClNKIz0QK0BBKOiF3qJ0ouuX2EVBxuF5nIEaWOVw vIRRGYbPPunku5Xy54hWL/pVOcC0G1FwNl3X5n1El9K7TroJFg+8FBVFAFTbkv4I /grcb42/ogwReJEw3JlI/spXVlunsPs2SxoXLTlQEO4ysjIurRWp79DbhrUlqCss xV0jsHLozHokwOmKzu+0DdSgGxx1cXJTbZmf5wwQ1NKC0qjJpsqP1BZDN763oluG cNJ7tIGAo9euSEYB+KFXe3MyCsRQb8pn/eMfa8d6OxUVk9KDE6uV1AYwwbAhAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUERorYHeM0sdkFCpQrvBrVogTxfIwHwYDVR0j BBgwFoAUPocLmnADxP2cUb01Sp3vo/t3tKkwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYzVkMThlODItNGQ2OC00NWE2LWE1ZGYtY2FjMTE1YWQy Mjc5LzAvM0U4NzBCOUE3MDAzQzRGRDlDNTFCRDM1NEE5REVGQTNGQjc3QjRBOS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1BvY0xtbkFEeFAyY1ViMDFTcDN2b190 M3RLay5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9jNWQxOGU4Mi00 ZDY4LTQ1YTYtYTVkZi1jYWMxMTVhZDIyNzkvMC8zRTg3MEI5QTcwMDNDNEZEOUM1 MUJEMzU0QTlERUZBM0ZCNzdCNEE5Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE04jezDXb9zN7cOODbo1 AECfHVJUwSckM35Fa3xXNUk7MC4pLDGZ5hDROE56FFsAapmpJzpyGd8KayR4CPgJ LTJNWOlFO476gdmRf24QkaVho76Pf3jka8pfnLz53120+dgp5fCGmcnDcVWJn9FJ AS1vcVKEJa6v+QmMzYq7sQURZ1VeiC2KU454eviE/dERoR0gca/EFKE/wHC5Ry4/ +MQX6qeVc/jspwrDxgKNKYks3BzKkllZtroV+gSfVmI++0IqgiebZqWN0TEmiysS K2Wgth1OOffMd4zTmwUuHH7Ch9ZdEvPV0knrwvmeeSZfUjRf+KhRwbPtaHXnI/fA pg== -----END CERTIFICATE-----Generated at Thu Mar 5 16:58:15 2026 by rpki-client