$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3E870B9A7003C4FD9C51BD354A9DEFA3FB77B4A9.mft File: 3E870B9A7003C4FD9C51BD354A9DEFA3FB77B4A9.mft (raw, json) Hash identifier: GatmobWk2gymE5NBRnZPIXcgSRnj3YGnkRcQA8qMywk= Subject key identifier: 55:1C:5D:64:6D:3B:3E:06:98:0B:BE:36:42:A4:67:1A:E0:FF:8C:52 Authority key identifier: 3E:87:0B:9A:70:03:C4:FD:9C:51:BD:35:4A:9D:EF:A3:FB:77:B4:A9 Certificate issuer: /CN=3e870b9a7003c4fd9c51bd354a9defa3fb77b4a9 Certificate serial: 0AB56032C354D4D39C53CEB322AAD72A4D449BA5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PocLmnADxP2cUb01Sp3vo_t3tKk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3E870B9A7003C4FD9C51BD354A9DEFA3FB77B4A9.mft Manifest number: 07D5 Signing time: Mon 26 Oct 2026 15:02:58 +0000 Manifest this update: Mon 26 Oct 2026 14:57:58 +0000 Manifest next update: Tue 27 Oct 2026 16:18:58 +0000 Files and hashes: 1: 3138352e3232392e3230312e302f32342d3234203d3e20323030303137.roa (hash: PCz6aeIUTtC34FXSr6irNuWXyhZRMV7yjZ9OeA9cKuk=) 2: 3138352e3231332e3234302e302f32342d3234203d3e20323135373033.roa (hash: KdpamzjNMoBH12606SSHSE8fPB2oVEwY+/Ehf6CDJmA=) 3: 3E870B9A7003C4FD9C51BD354A9DEFA3FB77B4A9.crl (hash: zdnVRQ0XU64vwxrkvzFUWT9shvAWGf1fy+KG4x/sLFI=) 4: 3138352e3231332e3234332e302f32342d3234203d3e203330343536.roa (hash: HHWDsn/geYTSKOK374fOgzwqQ04cratsjB9aVUs6qO0=) 5: 326130363a356563303a3a2f34382d3438203d3e20323034363933.roa (hash: S1/Y/6EPQQnfPCOtjeEUzrWHJ84koF95fYG1w/Kcp2o=) 6: 3138352e3133302e36322e302f32342d3234203d3e20323036313530.roa (hash: 0Uta0mciJtwdV1pzRO+5GA2qv0qJ2rULFPtgrlRyMi0=) 7: 3138352e3234342e39342e302f32342d3234203d3e20333937343233.roa (hash: oZOogcZA7gOpZC0s0tbGMXCZZe5qdoNGw7VhUnq2iag=) 8: 3138352e3231332e3234312e302f32342d3234203d3e20313938393639.roa (hash: arMan30Pwjm+vSmHPbVurL3FVQfk93jH/QNSshjzWhE=) 9: 3138352e3133302e36302e302f32342d3234203d3e203131383738.roa (hash: IVpkKpecJIjzuckRW19RYnHFzcqeOz1CHzHhlqd09/8=) 10: 3138352e3234342e39352e302f32342d3234203d3e203330303538.roa (hash: 18I/ng9HI5XuObuxE8W3wRTkaWJpr3T1qz3Rt9UUAds=) 11: 3138352e3232392e3230332e302f32342d3234203d3e20323034333939.roa (hash: Gs5ABbPfJ5toptQiquFm8oqwgutT9zFFUytweKBCefo=) 12: 3138352e3231332e3234322e302f32342d3234203d3e203232343237.roa (hash: rxGzTHw2ETBLYdKcURKX80/JYXYHlHWFPETTk7njjlE=) 13: 3138352e3232392e3230302e302f32342d3234203d3e2039333034.roa (hash: Msloifrt/kLCe0SjqxgGF92lnUxKU95znivEpNjSmVE=) 14: 3138352e3231332e3234332e302f32342d3234203d3e20323034393238.roa (hash: uCL1WpQqTZHx28v635AJc2UxBy3JsNUOhCCjsYiSzdI=) 15: 39312e3133322e3232372e302f32342d3234203d3e20323132333335.roa (hash: F9tU4X7OXQCTU9T1C6y/YaRD8bbRdcBCUgGAUyYNbxk=) 16: 3138352e3131312e3138382e302f32342d3234203d3e203632353633.roa (hash: X7Tn/GpCSEBlmrST5TEKgAjVIubIFvn/OXAnR/EzN3o=) 17: 39312e3133322e3232372e302f32342d3234203d3e20323132333834.roa (hash: jolibaL2ixdnuD9/RuPi6xUG4iKUc2qeMI4fX7YfJjA=) 18: 3138352e3133302e36312e302f32342d3234203d3e20323732363936.roa (hash: iEuXNsbf+xsxf1NL3afxi/eNCMhpHPndZJ3OWTl2z+U=) 19: 3138352e3232392e3230322e302f32342d3234203d3e20323130303330.roa (hash: Iq7mX+2Gdzh11Cz+eab6E5JpoAS8/V5c+VHbjbSnpR0=) 20: 3138352e3133302e36332e302f32342d3234203d3e203332313831.roa (hash: NGEavlC9krxVQb4oA8xeNjVMdvRiumafje1lIvRB/hg=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3E870B9A7003C4FD9C51BD354A9DEFA3FB77B4A9.crl rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3E870B9A7003C4FD9C51BD354A9DEFA3FB77B4A9.mft rsync://rpki.ripe.net/repository/DEFAULT/PocLmnADxP2cUb01Sp3vo_t3tKk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Oct 2026 16:18:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:b5:60:32:c3:54:d4:d3:9c:53:ce:b3:22:aa:d7:2a:4d:44:9b:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e870b9a7003c4fd9c51bd354a9defa3fb77b4a9 Validity Not Before: Oct 26 14:57:58 2026 GMT Not After : Oct 27 16:18:58 2026 GMT Subject: CN=551C5D646D3B3E06980BBE3642A4671AE0FF8C52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:39:bf:73:8a:7a:54:db:3f:06:d0:9e:c2:2c: d7:0e:d9:28:7d:bc:51:73:7b:c8:81:70:45:b9:53: 0d:cd:d8:e1:dc:2f:c0:65:79:26:3d:66:a0:52:12: 61:16:4d:bc:34:78:d2:78:71:25:4b:7c:50:9d:e0: 0b:43:08:57:12:65:07:50:00:03:ee:b5:60:fa:8a: bf:cf:0e:10:ca:97:d0:11:d0:d4:25:6f:ed:e3:31: 4f:73:5f:55:1d:77:3a:24:93:d2:92:35:23:31:90: 48:4d:5b:ee:ae:3b:a2:94:9e:32:f5:09:67:db:aa: 4f:6f:e8:de:d9:c3:bb:c4:46:f0:5b:ef:34:17:03: 5c:aa:5f:e1:9b:28:a0:22:14:8a:5e:c4:db:ba:89: e2:dc:96:35:1e:be:04:c8:20:96:ec:85:04:20:d8: e7:46:23:2d:8f:05:10:05:48:75:a8:cf:45:b1:38: 16:9d:fc:56:ff:6c:a0:97:98:ad:e8:6e:45:a9:a9: 3c:63:22:35:0e:b7:3d:8e:b9:93:a2:35:40:7e:aa: 7d:bb:6f:63:c7:bb:25:56:cf:e5:dc:da:7c:72:08: b8:4f:da:61:2c:bd:07:39:6c:d0:ee:13:da:ee:6f: 11:87:9f:b0:d0:5b:71:52:8b:ac:c2:50:68:a8:fc: 45:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:1C:5D:64:6D:3B:3E:06:98:0B:BE:36:42:A4:67:1A:E0:FF:8C:52 X509v3 Authority Key Identifier: keyid:3E:87:0B:9A:70:03:C4:FD:9C:51:BD:35:4A:9D:EF:A3:FB:77:B4:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3E870B9A7003C4FD9C51BD354A9DEFA3FB77B4A9.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PocLmnADxP2cUb01Sp3vo_t3tKk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3E870B9A7003C4FD9C51BD354A9DEFA3FB77B4A9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:dc:51:bd:7c:3a:1a:5f:51:3f:0f:d9:6a:0d:74:61:b2:90: a9:48:5b:db:b8:bd:85:21:a4:5c:a9:dd:fa:6c:2b:60:11:ce: 08:8c:7d:46:75:24:1a:c9:1d:a0:8e:b4:59:ea:9b:7e:65:9d: d2:a6:e0:9d:12:f8:f6:4f:a4:ae:90:22:2e:bc:8c:37:aa:a0: 88:a3:9a:9d:16:c7:2b:68:bc:c1:e1:8f:de:9b:fb:91:5d:3f: e9:a0:fb:4e:09:89:57:49:60:8f:01:d4:e1:a3:1b:f6:a8:e4: ad:01:d2:5a:79:ed:14:b5:1e:c0:56:bf:c6:69:5c:21:e4:48: d3:b7:25:19:39:34:c9:c8:5b:b6:08:27:ee:cc:cf:b2:d8:7b: 32:3a:f1:d4:f3:2b:a9:4d:f2:2b:fe:e6:30:d9:74:80:a5:77: 84:f4:f8:7a:70:d2:b2:2a:2e:dd:f8:95:f4:76:74:f9:13:8b: f2:df:da:bf:73:a1:ad:e7:13:97:c6:11:d2:26:7c:cf:cf:bc: e7:7f:80:67:02:dc:ae:1d:46:dd:96:4f:4e:11:4c:fa:3e:cb: 39:22:02:45:e1:63:1f:ee:13:98:a9:b7:94:22:23:d9:f8:90: a1:83:85:98:18:11:a7:1c:70:15:7a:c4:11:3f:70:ac:e1:dd: d1:86:ac:ba -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUCrVgMsNU1NOcU86zIqrXKk1Em6UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM2U4NzBiOWE3MDAzYzRmZDljNTFiZDM1NGE5ZGVmYTNm Yjc3YjRhOTAeFw0yNjEwMjYxNDU3NThaFw0yNjEwMjcxNjE4NThaMDMxMTAvBgNV BAMTKDU1MUM1RDY0NkQzQjNFMDY5ODBCQkUzNjQyQTQ2NzFBRTBGRjhDNTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBOb9zinpU2z8G0J7CLNcO2Sh9 vFFze8iBcEW5Uw3N2OHcL8BleSY9ZqBSEmEWTbw0eNJ4cSVLfFCd4AtDCFcSZQdQ AAPutWD6ir/PDhDKl9AR0NQlb+3jMU9zX1Uddzokk9KSNSMxkEhNW+6uO6KUnjL1 CWfbqk9v6N7Zw7vERvBb7zQXA1yqX+GbKKAiFIpexNu6ieLcljUevgTIIJbshQQg 2OdGIy2PBRAFSHWoz0WxOBad/Fb/bKCXmK3obkWpqTxjIjUOtz2OuZOiNUB+qn27 b2PHuyVWz+Xc2nxyCLhP2mEsvQc5bNDuE9rubxGHn7DQW3FSi6zCUGio/EUXAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUVRxdZG07PgaYC742QqRnGuD/jFIwHwYDVR0j BBgwFoAUPocLmnADxP2cUb01Sp3vo/t3tKkwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYzVkMThlODItNGQ2OC00NWE2LWE1ZGYtY2FjMTE1YWQy Mjc5LzAvM0U4NzBCOUE3MDAzQzRGRDlDNTFCRDM1NEE5REVGQTNGQjc3QjRBOS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1BvY0xtbkFEeFAyY1ViMDFTcDN2b190 M3RLay5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9jNWQxOGU4Mi00 ZDY4LTQ1YTYtYTVkZi1jYWMxMTVhZDIyNzkvMC8zRTg3MEI5QTcwMDNDNEZEOUM1 MUJEMzU0QTlERUZBM0ZCNzdCNEE5Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC9xRvXw6Gl9RPw/Zag10 YbKQqUhb27i9hSGkXKnd+mwrYBHOCIx9RnUkGskdoI60WeqbfmWd0qbgnRL49k+k rpAiLryMN6qgiKOanRbHK2i8weGP3pv7kV0/6aD7TgmJV0lgjwHU4aMb9qjkrQHS WnntFLUewFa/xmlcIeRI07clGTk0ychbtggn7szPsth7Mjrx1PMrqU3yK/7mMNl0 gKV3hPT4enDSsiou3fiV9HZ0+ROL8t/av3OhrecTl8YR0iZ8z8+853+AZwLcrh1G 3ZZPThFM+j7LOSICReFjH+4TmKm3lCIj2fiQoYOFmBgRpxxwFXrEET9wrOHd0Yas ug== -----END CERTIFICATE-----Generated at Tue Oct 27 03:02:30 2026 by rpki-client