$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3E870B9A7003C4FD9C51BD354A9DEFA3FB77B4A9.mft File: 3E870B9A7003C4FD9C51BD354A9DEFA3FB77B4A9.mft (raw, json) Hash identifier: XQVZJ+cSnZcR9qkEGeR7mhB+LzAD7UQIA4kLueekH3o= Subject key identifier: DD:5B:56:A7:1B:EA:A4:13:2E:B9:76:E2:C1:68:7F:12:D6:85:6F:17 Authority key identifier: 3E:87:0B:9A:70:03:C4:FD:9C:51:BD:35:4A:9D:EF:A3:FB:77:B4:A9 Certificate issuer: /CN=3e870b9a7003c4fd9c51bd354a9defa3fb77b4a9 Certificate serial: 7390100BFB074B99135F2333141A9BB7F0CE516F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PocLmnADxP2cUb01Sp3vo_t3tKk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3E870B9A7003C4FD9C51BD354A9DEFA3FB77B4A9.mft Manifest number: 0750 Signing time: Sun 26 Jul 2026 13:56:30 +0000 Manifest this update: Sun 26 Jul 2026 13:51:30 +0000 Manifest next update: Mon 27 Jul 2026 17:48:30 +0000 Files and hashes: 1: 326130363a356563303a3a2f34382d3438203d3e20323034363933.roa (hash: 1uKLPQUne0QcXblB3NW5HCIymd03TIpdjdnWqSBKxm8=) 2: 3138352e3231332e3234332e302f32342d3234203d3e203330343536.roa (hash: HHWDsn/geYTSKOK374fOgzwqQ04cratsjB9aVUs6qO0=) 3: 39312e3133322e3232372e302f32342d3234203d3e20323132333335.roa (hash: 4nM6t6s+oklrwoQsrohzelZ9jLVJM3XAMUC6E2raQWI=) 4: 3138352e3133302e36302e302f32342d3234203d3e203131383738.roa (hash: IVpkKpecJIjzuckRW19RYnHFzcqeOz1CHzHhlqd09/8=) 5: 3138352e3131312e3138382e302f32342d3234203d3e203632353633.roa (hash: X7Tn/GpCSEBlmrST5TEKgAjVIubIFvn/OXAnR/EzN3o=) 6: 3138352e3231332e3234312e302f32342d3234203d3e203235313938.roa (hash: /VSRAbQWRdnISeNPCesTwz43zE7GsIAapcnfDbJ/Ckc=) 7: 39312e3133322e3232372e302f32342d3234203d3e20323132333834.roa (hash: eh1Z74wbnDki2jWa8j9mKK2ooveQFWs0ccPHyRr5G7Y=) 8: 3E870B9A7003C4FD9C51BD354A9DEFA3FB77B4A9.crl (hash: nb9IeHUspvgZLXoJvtNTawmB6Kp0tbK6MWQ8dKze2QA=) 9: 3138352e3234342e39342e302f32342d3234203d3e20333937343233.roa (hash: oZOogcZA7gOpZC0s0tbGMXCZZe5qdoNGw7VhUnq2iag=) 10: 3138352e3133302e36332e302f32342d3234203d3e203332313831.roa (hash: NGEavlC9krxVQb4oA8xeNjVMdvRiumafje1lIvRB/hg=) 11: 3138352e3232392e3230322e302f32342d3234203d3e20323130303330.roa (hash: LqK97diQcFrb4344S9ThgI9qIfk24xWO2D6Fzod4ApM=) 12: 3138352e3231332e3234302e302f32342d3234203d3e20323135373033.roa (hash: KdpamzjNMoBH12606SSHSE8fPB2oVEwY+/Ehf6CDJmA=) 13: 3138352e3231332e3234332e302f32342d3234203d3e20323034393238.roa (hash: /82U/4ZCS1l7tEmRqZdiqoHQfHkAV0iGqgAdCf0IY6Q=) 14: 3138352e3133302e36322e302f32342d3234203d3e20323036313530.roa (hash: 0Uta0mciJtwdV1pzRO+5GA2qv0qJ2rULFPtgrlRyMi0=) 15: 3138352e3232392e3230312e302f32342d3234203d3e20323030303137.roa (hash: PCz6aeIUTtC34FXSr6irNuWXyhZRMV7yjZ9OeA9cKuk=) 16: 3138352e3231332e3234322e302f32342d3234203d3e203232343237.roa (hash: rxGzTHw2ETBLYdKcURKX80/JYXYHlHWFPETTk7njjlE=) 17: 3138352e3232392e3230332e302f32342d3234203d3e20323034333939.roa (hash: o2s9iRRo/HWpVNV66/X3K8Nx40dZXcSQ+ar/RSKpLZ4=) 18: 3138352e3133302e36312e302f32342d3234203d3e20323732363936.roa (hash: iEuXNsbf+xsxf1NL3afxi/eNCMhpHPndZJ3OWTl2z+U=) 19: 3138352e3232392e3230302e302f32342d3234203d3e20383334.roa (hash: GeFFzvt6Q/zjQpJ8DLO3Ri2bMdnOM5XsQZvzfBI3bRA=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3E870B9A7003C4FD9C51BD354A9DEFA3FB77B4A9.crl rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3E870B9A7003C4FD9C51BD354A9DEFA3FB77B4A9.mft rsync://rpki.ripe.net/repository/DEFAULT/PocLmnADxP2cUb01Sp3vo_t3tKk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 27 Jul 2026 17:48:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:90:10:0b:fb:07:4b:99:13:5f:23:33:14:1a:9b:b7:f0:ce:51:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e870b9a7003c4fd9c51bd354a9defa3fb77b4a9 Validity Not Before: Jul 26 13:51:30 2026 GMT Not After : Jul 27 17:48:30 2026 GMT Subject: CN=DD5B56A71BEAA4132EB976E2C1687F12D6856F17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:c3:89:20:f6:1b:71:30:36:fa:45:cf:da:67: 78:a7:ea:33:bd:ba:7a:f1:97:3a:c0:93:cd:52:ce: df:56:2e:2b:55:95:ab:a6:ce:c0:b7:a7:b0:cb:ee: ce:c2:21:5c:8d:e1:d4:8b:dc:dd:7a:7c:13:a8:ca: 98:3f:07:c2:d7:bb:f0:ee:9c:01:3a:d8:36:c7:3d: ce:80:16:fe:71:40:e0:d8:3c:3f:cc:ab:1c:2d:19: 3d:a9:8e:02:9d:ff:ab:f2:c6:b9:5d:e4:c6:85:8b: c5:97:2b:78:90:48:72:e9:7d:bf:b8:63:7c:7d:24: c5:34:b4:88:1d:4f:93:2e:f9:28:a6:fc:34:e8:8a: e3:ec:9e:42:e4:57:3a:fb:bd:49:b6:ee:91:76:01: b7:2c:a8:c7:81:6e:2b:d4:14:57:e1:e0:36:fd:09: 4e:b8:62:d8:78:14:58:fe:25:0f:3b:97:6e:f8:0b: c2:2d:a8:21:e0:89:50:af:31:1a:19:85:d9:e7:de: 66:5d:bf:eb:28:c7:93:0e:d1:7f:eb:ff:a9:b6:ec: e9:ca:97:96:54:81:fd:dc:9f:7e:b2:72:c1:0a:4c: b1:00:d5:52:1e:40:1b:06:31:5d:52:cc:38:d2:89: c6:7c:9e:02:55:60:c5:f5:bf:46:7d:1b:6a:4b:8b: a4:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:5B:56:A7:1B:EA:A4:13:2E:B9:76:E2:C1:68:7F:12:D6:85:6F:17 X509v3 Authority Key Identifier: keyid:3E:87:0B:9A:70:03:C4:FD:9C:51:BD:35:4A:9D:EF:A3:FB:77:B4:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3E870B9A7003C4FD9C51BD354A9DEFA3FB77B4A9.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PocLmnADxP2cUb01Sp3vo_t3tKk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3E870B9A7003C4FD9C51BD354A9DEFA3FB77B4A9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d1:96:2c:dc:2a:24:e0:b2:65:3d:5c:a9:70:4d:a7:e8:e8:08: 17:92:e5:c1:6f:d2:f5:f7:be:46:c1:aa:07:4f:1f:fc:c5:7e: ca:b7:d1:65:88:11:25:36:34:73:f3:31:a2:94:fc:59:8c:ce: 76:6d:ae:69:ba:1e:c0:c1:6e:9d:70:df:d8:df:f5:55:b5:02: 4e:b7:2a:68:a7:b6:d3:30:56:2c:07:32:2c:61:ba:7a:85:c5: 9c:1e:69:cf:6c:8b:e2:bc:d6:0c:a5:4d:f3:9f:60:57:c0:bc: bb:8e:cf:a0:8e:29:8f:71:a7:02:99:09:19:41:c7:6f:30:18: bb:0f:ca:ae:b9:8d:87:1c:7e:71:97:ad:e9:83:11:28:71:7a: 1a:1e:31:4b:fb:44:5c:53:35:87:1a:50:52:98:6c:d4:a5:e2: 62:b3:45:64:65:9b:be:b0:96:57:01:3c:22:0d:3e:3d:82:a1: 81:c3:4c:67:bb:a7:c1:96:e1:17:f1:52:0f:15:ae:97:04:f7: c1:b9:e8:ea:14:24:cb:ba:e4:1e:76:06:43:52:67:8d:5d:e9: d6:e9:bf:c4:e7:0b:84:93:ea:73:5b:ae:c9:53:22:74:08:8e: 23:fd:9e:c3:26:39:7a:0e:db:ed:f0:11:6e:13:b1:69:a3:2a: fd:a9:72:b5 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUc5AQC/sHS5kTXyMzFBqbt/DOUW8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM2U4NzBiOWE3MDAzYzRmZDljNTFiZDM1NGE5ZGVmYTNm Yjc3YjRhOTAeFw0yNjA3MjYxMzUxMzBaFw0yNjA3MjcxNzQ4MzBaMDMxMTAvBgNV BAMTKERENUI1NkE3MUJFQUE0MTMyRUI5NzZFMkMxNjg3RjEyRDY4NTZGMTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSw4kg9htxMDb6Rc/aZ3in6jO9 unrxlzrAk81Szt9WLitVlaumzsC3p7DL7s7CIVyN4dSL3N16fBOoypg/B8LXu/Du nAE62DbHPc6AFv5xQODYPD/MqxwtGT2pjgKd/6vyxrld5MaFi8WXK3iQSHLpfb+4 Y3x9JMU0tIgdT5Mu+Sim/DToiuPsnkLkVzr7vUm27pF2AbcsqMeBbivUFFfh4Db9 CU64Yth4FFj+JQ87l274C8ItqCHgiVCvMRoZhdnn3mZdv+sox5MO0X/r/6m27OnK l5ZUgf3cn36ycsEKTLEA1VIeQBsGMV1SzDjSicZ8ngJVYMX1v0Z9G2pLi6TDAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQU3VtWpxvqpBMuuXbiwWh/EtaFbxcwHwYDVR0j BBgwFoAUPocLmnADxP2cUb01Sp3vo/t3tKkwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYzVkMThlODItNGQ2OC00NWE2LWE1ZGYtY2FjMTE1YWQy Mjc5LzAvM0U4NzBCOUE3MDAzQzRGRDlDNTFCRDM1NEE5REVGQTNGQjc3QjRBOS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1BvY0xtbkFEeFAyY1ViMDFTcDN2b190 M3RLay5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9jNWQxOGU4Mi00 ZDY4LTQ1YTYtYTVkZi1jYWMxMTVhZDIyNzkvMC8zRTg3MEI5QTcwMDNDNEZEOUM1 MUJEMzU0QTlERUZBM0ZCNzdCNEE5Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA0ZYs3Cok4LJlPVypcE2n 6OgIF5LlwW/S9fe+RsGqB08f/MV+yrfRZYgRJTY0c/MxopT8WYzOdm2uaboewMFu nXDf2N/1VbUCTrcqaKe20zBWLAcyLGG6eoXFnB5pz2yL4rzWDKVN859gV8C8u47P oI4pj3GnApkJGUHHbzAYuw/KrrmNhxx+cZet6YMRKHF6Gh4xS/tEXFM1hxpQUphs 1KXiYrNFZGWbvrCWVwE8Ig0+PYKhgcNMZ7unwZbhF/FSDxWulwT3wbno6hQky7rk HnYGQ1JnjV3p1um/xOcLhJPqc1uuyVMidAiOI/2ewyY5eg7b7fARbhOxaaMq/aly tQ== -----END CERTIFICATE-----Generated at Mon Jul 27 08:06:07 2026 by rpki-client