$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3E870B9A7003C4FD9C51BD354A9DEFA3FB77B4A9.mft File: 3E870B9A7003C4FD9C51BD354A9DEFA3FB77B4A9.mft (raw, json) Hash identifier: UMFOk6mVOBZm/SR11QVPw867qznFrHq+UTtxK0AuKug= Subject key identifier: 15:90:88:E0:7C:7D:D8:2A:E9:BF:9A:8F:A2:E9:9E:F0:87:4B:99:A3 Authority key identifier: 3E:87:0B:9A:70:03:C4:FD:9C:51:BD:35:4A:9D:EF:A3:FB:77:B4:A9 Certificate issuer: /CN=3e870b9a7003c4fd9c51bd354a9defa3fb77b4a9 Certificate serial: 3FA7D5AECD1B75C1F4DF249BB350019F2D11F538 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PocLmnADxP2cUb01Sp3vo_t3tKk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3E870B9A7003C4FD9C51BD354A9DEFA3FB77B4A9.mft Manifest number: 0708 Signing time: Thu 11 Jun 2026 10:55:11 +0000 Manifest this update: Thu 11 Jun 2026 10:50:11 +0000 Manifest next update: Fri 12 Jun 2026 14:01:11 +0000 Files and hashes: 1: 3138352e3232392e3230312e302f32342d3234203d3e20323030303137.roa (hash: PCz6aeIUTtC34FXSr6irNuWXyhZRMV7yjZ9OeA9cKuk=) 2: 39312e3133322e3232372e302f32342d3234203d3e20323132333335.roa (hash: 4nM6t6s+oklrwoQsrohzelZ9jLVJM3XAMUC6E2raQWI=) 3: 3138352e3232392e3230302e302f32342d3234203d3e20323037303139.roa (hash: 1bceaNlyoOp1upDNmtgefthFRPSg/dp+QwWX8BNP7X8=) 4: 3138352e3133302e36302e302f32342d3234203d3e203131383738.roa (hash: IVpkKpecJIjzuckRW19RYnHFzcqeOz1CHzHhlqd09/8=) 5: 3138352e3131312e3138382e302f32342d3234203d3e203632353633.roa (hash: X7Tn/GpCSEBlmrST5TEKgAjVIubIFvn/OXAnR/EzN3o=) 6: 3138352e3133302e36312e302f32342d3234203d3e20323732363936.roa (hash: iEuXNsbf+xsxf1NL3afxi/eNCMhpHPndZJ3OWTl2z+U=) 7: 3138352e3231332e3234332e302f32342d3234203d3e203330343536.roa (hash: HHWDsn/geYTSKOK374fOgzwqQ04cratsjB9aVUs6qO0=) 8: 3138352e3231332e3234332e302f32342d3234203d3e20323034393238.roa (hash: /82U/4ZCS1l7tEmRqZdiqoHQfHkAV0iGqgAdCf0IY6Q=) 9: 3138352e3133302e36332e302f32342d3234203d3e203332313831.roa (hash: krs6rxjGgkgxIC0XFsSJIDbJbJTaOxRVYKdhwP98j0o=) 10: 3138352e3232392e3230332e302f32342d3234203d3e20323034333939.roa (hash: o2s9iRRo/HWpVNV66/X3K8Nx40dZXcSQ+ar/RSKpLZ4=) 11: 326130363a356563303a3a2f34382d3438203d3e20323034363933.roa (hash: 1uKLPQUne0QcXblB3NW5HCIymd03TIpdjdnWqSBKxm8=) 12: 3138352e3133302e36322e302f32342d3234203d3e20323036313530.roa (hash: 0Uta0mciJtwdV1pzRO+5GA2qv0qJ2rULFPtgrlRyMi0=) 13: 3138352e3234342e39342e302f32342d3234203d3e20333937343233.roa (hash: oZOogcZA7gOpZC0s0tbGMXCZZe5qdoNGw7VhUnq2iag=) 14: 3138352e3231332e3234312e302f32342d3234203d3e20323131303932.roa (hash: 7qy707kA5n1DMqz1ORJoFL0VX7ypxya3lTKn4BjX8QI=) 15: 3138352e3231332e3234302e302f32342d3234203d3e20323135373033.roa (hash: KdpamzjNMoBH12606SSHSE8fPB2oVEwY+/Ehf6CDJmA=) 16: 3138352e3232392e3230322e302f32342d3234203d3e20323130303330.roa (hash: LqK97diQcFrb4344S9ThgI9qIfk24xWO2D6Fzod4ApM=) 17: 3E870B9A7003C4FD9C51BD354A9DEFA3FB77B4A9.crl (hash: eqpWqi+zUTej1iNw63/bUCJ7y7u4C5NcIBcBngiR8eI=) 18: 3138352e3231332e3234322e302f32342d3234203d3e203232343237.roa (hash: rxGzTHw2ETBLYdKcURKX80/JYXYHlHWFPETTk7njjlE=) 19: 39312e3133322e3232372e302f32342d3234203d3e20323132333834.roa (hash: eh1Z74wbnDki2jWa8j9mKK2ooveQFWs0ccPHyRr5G7Y=) 20: 3138352e3234342e39352e302f32342d3234203d3e2039333034.roa (hash: sFAOUSD7hd0lBBY5HPUN0ymlfkvwOAzzt94UPfXefWU=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3E870B9A7003C4FD9C51BD354A9DEFA3FB77B4A9.crl rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3E870B9A7003C4FD9C51BD354A9DEFA3FB77B4A9.mft rsync://rpki.ripe.net/repository/DEFAULT/PocLmnADxP2cUb01Sp3vo_t3tKk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Jun 2026 14:01:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:a7:d5:ae:cd:1b:75:c1:f4:df:24:9b:b3:50:01:9f:2d:11:f5:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e870b9a7003c4fd9c51bd354a9defa3fb77b4a9 Validity Not Before: Jun 11 10:50:11 2026 GMT Not After : Jun 12 14:01:11 2026 GMT Subject: CN=159088E07C7DD82AE9BF9A8FA2E99EF0874B99A3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:b8:50:6c:6a:9b:77:c9:e7:ab:09:7e:28:d2: f0:09:0a:b1:4b:76:d5:7e:b4:90:0b:bd:f9:1f:dc: 0b:62:91:66:3d:2d:cd:92:71:c2:ca:dd:96:a0:ad: 7d:40:8b:5c:81:91:aa:b3:97:a1:78:4b:36:d7:2a: af:76:90:89:55:38:ad:9f:35:56:34:f1:a6:e5:e3: 86:a3:f2:90:ad:89:51:4c:0e:8c:3f:54:15:82:f7: 2b:e4:d9:9f:9a:a6:18:37:e4:ca:58:06:25:a6:ec: 21:45:e7:f3:54:cf:61:ed:56:7d:03:22:f0:53:b1: 04:fa:53:ea:09:10:d7:1c:0b:19:13:75:a0:73:db: 8e:9f:f8:b3:c6:55:38:4c:94:ef:04:a0:ef:0d:29: 42:be:7b:14:4a:11:ce:88:f9:31:19:5b:83:c8:2c: ad:b0:ca:c6:5e:6b:6e:fe:62:9b:c9:d4:f8:70:6a: 1c:65:d0:6a:7b:2f:61:20:1a:b0:f5:cd:b7:06:a4: f7:30:ca:1f:8d:05:2b:b0:53:3f:2b:3a:20:71:3c: 82:6e:c9:f0:11:3e:20:fd:57:2d:43:18:0b:70:f4: 5d:17:35:e2:85:b3:13:c9:f7:f9:27:4c:d0:57:3b: a1:4a:b5:ea:02:95:02:1e:98:e8:cf:b9:2f:9e:7a: dd:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:90:88:E0:7C:7D:D8:2A:E9:BF:9A:8F:A2:E9:9E:F0:87:4B:99:A3 X509v3 Authority Key Identifier: keyid:3E:87:0B:9A:70:03:C4:FD:9C:51:BD:35:4A:9D:EF:A3:FB:77:B4:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3E870B9A7003C4FD9C51BD354A9DEFA3FB77B4A9.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PocLmnADxP2cUb01Sp3vo_t3tKk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3E870B9A7003C4FD9C51BD354A9DEFA3FB77B4A9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6e:de:a7:a2:4e:db:61:56:37:e8:4a:15:7b:b5:e3:e5:27:f5: 63:65:d7:a7:ff:50:e1:44:d3:30:ff:39:a2:f0:8f:83:10:c5: e2:a8:06:60:e6:16:1c:5b:7c:96:dd:18:78:5d:13:9d:31:47: be:db:e8:d4:00:70:e4:a7:b5:1c:ee:f1:82:de:d2:7a:0e:3c: 49:ec:c6:42:73:1b:f4:6e:f2:36:29:79:03:48:cf:7d:e8:fc: 12:77:f6:14:23:9e:69:d0:04:60:bf:2d:c3:41:d7:bb:b3:13: 84:c4:89:8c:28:68:3e:a0:95:4b:2e:32:6e:ca:7a:1b:e2:4c: c0:25:9d:99:1f:94:da:b5:3f:e7:e1:a2:c0:a3:9e:ad:44:a8: da:17:8e:3a:ae:3f:55:fe:ff:58:fd:db:43:23:e4:aa:cd:dc: 67:fe:2a:1a:9f:3d:2c:d9:d0:9a:a7:68:04:db:eb:7a:9e:fc: d1:84:d6:f6:75:d1:5c:97:10:b7:b5:d7:af:87:15:1a:c7:c1: 90:3d:c2:ed:44:76:57:7e:a1:0d:ce:28:db:27:1b:13:4e:c3: 0a:54:e5:eb:f0:a5:30:a5:c4:07:2b:2a:5b:f1:2c:3b:d2:c7: fc:77:3b:4d:b2:1b:92:91:32:26:ce:d5:b2:17:48:f5:b9:cf: ad:31:e7:c6 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUP6fVrs0bdcH03ySbs1ABny0R9TgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM2U4NzBiOWE3MDAzYzRmZDljNTFiZDM1NGE5ZGVmYTNm Yjc3YjRhOTAeFw0yNjA2MTExMDUwMTFaFw0yNjA2MTIxNDAxMTFaMDMxMTAvBgNV BAMTKDE1OTA4OEUwN0M3REQ4MkFFOUJGOUE4RkEyRTk5RUYwODc0Qjk5QTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUuFBsapt3yeerCX4o0vAJCrFL dtV+tJALvfkf3AtikWY9Lc2SccLK3ZagrX1Ai1yBkaqzl6F4SzbXKq92kIlVOK2f NVY08abl44aj8pCtiVFMDow/VBWC9yvk2Z+aphg35MpYBiWm7CFF5/NUz2HtVn0D IvBTsQT6U+oJENccCxkTdaBz246f+LPGVThMlO8EoO8NKUK+exRKEc6I+TEZW4PI LK2wysZea27+YpvJ1Phwahxl0Gp7L2EgGrD1zbcGpPcwyh+NBSuwUz8rOiBxPIJu yfARPiD9Vy1DGAtw9F0XNeKFsxPJ9/knTNBXO6FKteoClQIemOjPuS+eet2pAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUFZCI4Hx92Crpv5qPoume8IdLmaMwHwYDVR0j BBgwFoAUPocLmnADxP2cUb01Sp3vo/t3tKkwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYzVkMThlODItNGQ2OC00NWE2LWE1ZGYtY2FjMTE1YWQy Mjc5LzAvM0U4NzBCOUE3MDAzQzRGRDlDNTFCRDM1NEE5REVGQTNGQjc3QjRBOS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1BvY0xtbkFEeFAyY1ViMDFTcDN2b190 M3RLay5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9jNWQxOGU4Mi00 ZDY4LTQ1YTYtYTVkZi1jYWMxMTVhZDIyNzkvMC8zRTg3MEI5QTcwMDNDNEZEOUM1 MUJEMzU0QTlERUZBM0ZCNzdCNEE5Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbt6nok7bYVY36EoVe7Xj 5Sf1Y2XXp/9Q4UTTMP85ovCPgxDF4qgGYOYWHFt8lt0YeF0TnTFHvtvo1ABw5Ke1 HO7xgt7Seg48SezGQnMb9G7yNil5A0jPfej8Enf2FCOeadAEYL8tw0HXu7MThMSJ jChoPqCVSy4ybsp6G+JMwCWdmR+U2rU/5+GiwKOerUSo2heOOq4/Vf7/WP3bQyPk qs3cZ/4qGp89LNnQmqdoBNvrep780YTW9nXRXJcQt7XXr4cVGsfBkD3C7UR2V36h Dc4o2ycbE07DClTl6/ClMKXEBysqW/EsO9LH/Hc7TbIbkpEyJs7VshdI9bnPrTHn xg== -----END CERTIFICATE-----Generated at Fri Jun 12 02:47:34 2026 by rpki-client