$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3E870B9A7003C4FD9C51BD354A9DEFA3FB77B4A9.mft File: 3E870B9A7003C4FD9C51BD354A9DEFA3FB77B4A9.mft (raw, json) Hash identifier: XOwbXNDEbf4PAFeXriJuNgFdH5NRBAiLQxLuHIKs7wM= Subject key identifier: 29:11:6E:47:C0:7B:13:05:5F:C0:94:A4:8B:93:F7:D9:63:7D:E0:F9 Authority key identifier: 3E:87:0B:9A:70:03:C4:FD:9C:51:BD:35:4A:9D:EF:A3:FB:77:B4:A9 Certificate issuer: /CN=3e870b9a7003c4fd9c51bd354a9defa3fb77b4a9 Certificate serial: 17E39F60025919B57F0BAB454E38CB52E0D53433 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PocLmnADxP2cUb01Sp3vo_t3tKk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3E870B9A7003C4FD9C51BD354A9DEFA3FB77B4A9.mft Manifest number: 06C8 Signing time: Mon 27 Apr 2026 03:55:57 +0000 Manifest this update: Mon 27 Apr 2026 03:50:57 +0000 Manifest next update: Tue 28 Apr 2026 05:11:57 +0000 Files and hashes: 1: 39312e3133322e3232372e302f32342d3234203d3e20323132333335.roa (hash: 4nM6t6s+oklrwoQsrohzelZ9jLVJM3XAMUC6E2raQWI=) 2: 3138352e3232392e3230322e302f32342d3234203d3e20323130303330.roa (hash: LqK97diQcFrb4344S9ThgI9qIfk24xWO2D6Fzod4ApM=) 3: 3E870B9A7003C4FD9C51BD354A9DEFA3FB77B4A9.crl (hash: FkrVQI80OcRKDND9fO7+xKt8YoxjRM6LUMB18v1FTcI=) 4: 3138352e3133302e36312e302f32342d3234203d3e20323732363936.roa (hash: nzc+7vTx0fxusJ8QBUU0nZ0s/13eeYO5i8RfnoHHUhc=) 5: 3138352e3232392e3230302e302f32342d3234203d3e20323037303139.roa (hash: 1bceaNlyoOp1upDNmtgefthFRPSg/dp+QwWX8BNP7X8=) 6: 3138352e3231332e3234332e302f32342d3234203d3e203330343536.roa (hash: HHWDsn/geYTSKOK374fOgzwqQ04cratsjB9aVUs6qO0=) 7: 3138352e3231332e3234332e302f32342d3234203d3e20323034393238.roa (hash: /82U/4ZCS1l7tEmRqZdiqoHQfHkAV0iGqgAdCf0IY6Q=) 8: 3138352e3232392e3230332e302f32342d3234203d3e20323034333939.roa (hash: o2s9iRRo/HWpVNV66/X3K8Nx40dZXcSQ+ar/RSKpLZ4=) 9: 3138352e3131312e3138382e302f32342d3234203d3e203632353633.roa (hash: X7Tn/GpCSEBlmrST5TEKgAjVIubIFvn/OXAnR/EzN3o=) 10: 3138352e3231332e3234312e302f32342d3234203d3e20333935343730.roa (hash: YhzV2KtcuLsnnub8luasZeZrUhyCrUUtZDrQmh3b0AM=) 11: 3138352e3133302e36302e302f32342d3234203d3e203131383738.roa (hash: IVpkKpecJIjzuckRW19RYnHFzcqeOz1CHzHhlqd09/8=) 12: 3138352e3234342e39342e302f32342d3234203d3e20333937343233.roa (hash: oZOogcZA7gOpZC0s0tbGMXCZZe5qdoNGw7VhUnq2iag=) 13: 3138352e3232392e3230312e302f32342d3234203d3e20323030303137.roa (hash: PCz6aeIUTtC34FXSr6irNuWXyhZRMV7yjZ9OeA9cKuk=) 14: 3138352e3133302e36332e302f32342d3234203d3e203332313831.roa (hash: krs6rxjGgkgxIC0XFsSJIDbJbJTaOxRVYKdhwP98j0o=) 15: 3138352e3231332e3234302e302f32342d3234203d3e20323135373033.roa (hash: KdpamzjNMoBH12606SSHSE8fPB2oVEwY+/Ehf6CDJmA=) 16: 39312e3133322e3232372e302f32342d3234203d3e20323132333834.roa (hash: eh1Z74wbnDki2jWa8j9mKK2ooveQFWs0ccPHyRr5G7Y=) 17: 3138352e3231332e3234322e302f32342d3234203d3e203232343237.roa (hash: rxGzTHw2ETBLYdKcURKX80/JYXYHlHWFPETTk7njjlE=) 18: 326130363a356563303a3a2f34382d3438203d3e20323034363933.roa (hash: 1uKLPQUne0QcXblB3NW5HCIymd03TIpdjdnWqSBKxm8=) 19: 3138352e3234342e39352e302f32342d3234203d3e20323039313034.roa (hash: PNy8kHfErJW4J8db5MQNciyd0WzMVWGxz0WDCg6nr0Y=) 20: 3138352e3133302e36322e302f32342d3234203d3e20323036313530.roa (hash: 0Uta0mciJtwdV1pzRO+5GA2qv0qJ2rULFPtgrlRyMi0=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3E870B9A7003C4FD9C51BD354A9DEFA3FB77B4A9.crl rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3E870B9A7003C4FD9C51BD354A9DEFA3FB77B4A9.mft rsync://rpki.ripe.net/repository/DEFAULT/PocLmnADxP2cUb01Sp3vo_t3tKk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 28 Apr 2026 05:11:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:e3:9f:60:02:59:19:b5:7f:0b:ab:45:4e:38:cb:52:e0:d5:34:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e870b9a7003c4fd9c51bd354a9defa3fb77b4a9 Validity Not Before: Apr 27 03:50:57 2026 GMT Not After : Apr 28 05:11:57 2026 GMT Subject: CN=29116E47C07B13055FC094A48B93F7D9637DE0F9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:0f:30:90:03:18:74:55:01:f6:f2:bb:6b:6b: 41:ca:1f:93:33:8e:75:0c:91:93:65:fc:78:cd:97: 89:45:a4:02:b7:f9:5c:41:b9:9c:04:b9:f4:88:45: 75:af:6b:59:ce:94:60:b7:83:9f:18:67:eb:b9:e3: 7f:7b:84:75:a5:57:8d:c6:7b:0e:ac:c6:96:3d:2a: d3:83:8a:ab:a1:4f:64:b5:3f:a9:2e:a3:83:08:ab: f5:0d:0b:be:04:37:73:20:64:d0:0e:33:f8:da:59: cd:60:59:46:b4:20:98:90:8c:32:08:10:01:da:a8: a6:0b:29:18:7d:9b:11:07:a1:51:4e:95:18:93:ec: 26:ba:96:bd:d0:31:71:14:13:b7:55:80:a6:85:7e: e4:6b:73:7d:eb:66:0f:bf:e1:bc:94:13:e9:53:0b: f3:03:b8:e2:7a:c0:88:79:e9:ee:a8:ad:31:c0:09: 87:4b:4c:0d:93:6e:6a:98:03:dd:55:c3:8e:ef:13: 52:63:fe:e6:f1:22:54:d6:f3:4f:79:f6:53:83:7f: 99:b4:26:9c:12:7b:ed:e4:d4:88:c9:2f:e8:28:34: 71:c9:4b:79:e7:9d:24:61:59:b2:5c:85:38:d3:49: 30:ab:af:38:77:7e:16:7a:bf:38:18:b8:bd:22:a6: 6c:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:11:6E:47:C0:7B:13:05:5F:C0:94:A4:8B:93:F7:D9:63:7D:E0:F9 X509v3 Authority Key Identifier: keyid:3E:87:0B:9A:70:03:C4:FD:9C:51:BD:35:4A:9D:EF:A3:FB:77:B4:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3E870B9A7003C4FD9C51BD354A9DEFA3FB77B4A9.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PocLmnADxP2cUb01Sp3vo_t3tKk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3E870B9A7003C4FD9C51BD354A9DEFA3FB77B4A9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:d2:24:58:f9:d4:23:8b:9f:b9:8c:73:54:2a:1b:76:e3:9c: e8:09:44:e9:fc:08:3a:cb:14:10:1a:27:36:51:be:66:35:55: 45:00:73:a3:11:40:2c:fc:45:b3:59:cf:0b:2c:d0:d6:4d:a5: d3:55:73:c1:5e:8c:af:12:8a:3f:8b:32:10:a0:fa:d7:0d:04: e9:4f:d0:a2:48:5a:db:3a:7c:1a:f7:c1:e2:67:0c:74:48:30: 66:af:8c:c2:49:24:bf:0c:9c:4a:03:e5:f7:fb:4e:3b:c0:5e: 1f:b8:3d:d0:c5:f9:3c:1b:15:54:62:ff:af:db:04:94:7d:f6: 28:4c:63:00:66:6c:67:86:a9:a8:22:a7:ef:39:a3:04:aa:46: f0:c1:72:d6:58:13:95:83:d3:40:e8:18:d4:e1:01:9a:91:35: be:87:93:f9:11:84:4b:bf:f1:13:e2:c4:ac:5e:0c:4d:f4:c4: fc:15:c0:d7:43:9c:23:15:b8:c7:7c:18:01:64:ed:b2:3a:6f: 5f:af:93:0b:7d:d9:7d:6a:fc:c1:a9:e7:24:79:bd:d6:b7:0f: 88:cd:cf:85:2a:d2:cb:e5:fd:4d:3c:23:6b:73:fa:c2:99:29: 9a:68:7e:44:67:50:1c:1d:87:c1:f5:05:b9:12:57:bf:02:2c: 51:0d:66:89 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUF+OfYAJZGbV/C6tFTjjLUuDVNDMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM2U4NzBiOWE3MDAzYzRmZDljNTFiZDM1NGE5ZGVmYTNm Yjc3YjRhOTAeFw0yNjA0MjcwMzUwNTdaFw0yNjA0MjgwNTExNTdaMDMxMTAvBgNV BAMTKDI5MTE2RTQ3QzA3QjEzMDU1RkMwOTRBNDhCOTNGN0Q5NjM3REUwRjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLDzCQAxh0VQH28rtra0HKH5Mz jnUMkZNl/HjNl4lFpAK3+VxBuZwEufSIRXWva1nOlGC3g58YZ+u54397hHWlV43G ew6sxpY9KtODiquhT2S1P6kuo4MIq/UNC74EN3MgZNAOM/jaWc1gWUa0IJiQjDII EAHaqKYLKRh9mxEHoVFOlRiT7Ca6lr3QMXEUE7dVgKaFfuRrc33rZg+/4byUE+lT C/MDuOJ6wIh56e6orTHACYdLTA2TbmqYA91Vw47vE1Jj/ubxIlTW80959lODf5m0 JpwSe+3k1IjJL+goNHHJS3nnnSRhWbJchTjTSTCrrzh3fhZ6vzgYuL0ipmwBAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUKRFuR8B7EwVfwJSki5P32WN94PkwHwYDVR0j BBgwFoAUPocLmnADxP2cUb01Sp3vo/t3tKkwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYzVkMThlODItNGQ2OC00NWE2LWE1ZGYtY2FjMTE1YWQy Mjc5LzAvM0U4NzBCOUE3MDAzQzRGRDlDNTFCRDM1NEE5REVGQTNGQjc3QjRBOS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1BvY0xtbkFEeFAyY1ViMDFTcDN2b190 M3RLay5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9jNWQxOGU4Mi00 ZDY4LTQ1YTYtYTVkZi1jYWMxMTVhZDIyNzkvMC8zRTg3MEI5QTcwMDNDNEZEOUM1 MUJEMzU0QTlERUZBM0ZCNzdCNEE5Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkdIkWPnUI4ufuYxzVCob duOc6AlE6fwIOssUEBonNlG+ZjVVRQBzoxFALPxFs1nPCyzQ1k2l01VzwV6MrxKK P4syEKD61w0E6U/Qokha2zp8GvfB4mcMdEgwZq+MwkkkvwycSgPl9/tOO8BeH7g9 0MX5PBsVVGL/r9sElH32KExjAGZsZ4apqCKn7zmjBKpG8MFy1lgTlYPTQOgY1OEB mpE1voeT+RGES7/xE+LErF4MTfTE/BXA10OcIxW4x3wYAWTtsjpvX6+TC33ZfWr8 wannJHm91rcPiM3PhSrSy+X9TTwja3P6wpkpmmh+RGdQHB2HwfUFuRJXvwIsUQ1m iQ== -----END CERTIFICATE-----Generated at Mon Apr 27 19:48:45 2026 by rpki-client