$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fadebb9d-33cc-429b-aa35-10634a8b1dd4/0/35B52EF20A5730A6261D6D1916C6B747FF3C2852.mft File: 35B52EF20A5730A6261D6D1916C6B747FF3C2852.mft (raw, json) Hash identifier: okmlasI4cCmSiRejstuvmV1O7788JgIqBkgKT00JQug= Subject key identifier: E2:71:88:17:E0:18:53:6F:74:8D:39:FC:00:55:FD:6F:BA:5E:ED:68 Authority key identifier: 35:B5:2E:F2:0A:57:30:A6:26:1D:6D:19:16:C6:B7:47:FF:3C:28:52 Certificate issuer: /CN=35B52EF20A5730A6261D6D1916C6B747FF3C2852 Certificate serial: 6F35E514C5345D3B3E8025C935305E721E8537B9 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/35B52EF20A5730A6261D6D1916C6B747FF3C2852.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fadebb9d-33cc-429b-aa35-10634a8b1dd4/0/35B52EF20A5730A6261D6D1916C6B747FF3C2852.mft Manifest number: 010C Signing time: Tue 09 Sep 2025 16:40:06 +0000 Manifest this update: Tue 09 Sep 2025 16:35:05 +0000 Manifest next update: Wed 10 Sep 2025 16:59:05 +0000 Files and hashes: 1: 326131343a373538313a323630303a3a2f34302d3438203d3e20323039313039.roa (hash: Ah/styCnPIoGFWiO0PQ2rB66bvMdDv2NyL9mrkcrCj4=) 2: 35B52EF20A5730A6261D6D1916C6B747FF3C2852.crl (hash: EEvH2z3EVUBQKovKBXrhcvR8/rAEVh10DmFQd6oRxPo=) 3: 326131343a373538313a323030303a3a2f34302d3438203d3e20333936303530.roa (hash: yUvus43IfO0AT/ck5bMQHbMTgP3EN2v06hq4szCBm40=) 4: 326131343a373538313a323030303a3a2f34302d3438203d3e20323135333634.roa (hash: iPZr810Wf3G2BF1Yx0TXVCnIMBYWmzqlqsIx/XIB/Cc=) 5: 326131343a373538313a323530303a3a2f34302d3430203d3e203134343437.roa (hash: 2DfIdT8hQ452p9tTWwGSgv6G5KrCdvIla2RYi0wqius=) 6: 326131343a373538313a326630303a3a2f34382d3438203d3e20343031333836.roa (hash: PQEJzzZkaWaRihPz0qFSxn/fBL9FvQBY7Es5NvynDQM=) 7: 326131343a373538313a323930303a3a2f34302d3438203d3e20323039313039.roa (hash: ENamU9VlpUh2S5yKvYrAp12SwLl/9Jv38ffU+yHH5Iw=) 8: 326131343a373538313a323030303a3a2f34302d3438203d3e20323039313039.roa (hash: lRerEWAZYVnj4WeC0lksu5JXgu5ks2mpqCgBEDRR0Q0=) 9: 326131343a373538313a323730303a3a2f34302d3438203d3e20323039313039.roa (hash: MFKFuWCDL66Zxs5f3hEeRn+2JW7mEBoWjT7f6AJBOhM=) 10: 326131343a373538313a323030303a3a2f34302d3438203d3e20323136333234.roa (hash: bje5aLLUqgAL8DyPjKPS1MwDhANSqShDo64yB6sarZo=) 11: 326131343a373538313a326630313a3a2f34382d3438203d3e20343031333836.roa (hash: SLj141CGncsBb5vfud/Xh4MbUscTfgukNtFTpVVNYzk=) 12: 326131343a373538313a323230303a3a2f34302d3430203d3e20343031333836.roa (hash: xASXurrkB21YmULJQ68AjQqXl8iRC/GmjrwM45TRghc=) 13: 326131343a373538313a323030303a3a2f34302d3438203d3e20343031333836.roa (hash: pi4F6jgMqqwUP1FTiOnfocpEw1DljOaDr1vx1pIBms8=) 14: 326131343a373538313a323830303a3a2f34302d3438203d3e20323039313039.roa (hash: U1r4ZvjM4KXIBEm7hpH6+0Qd/LSsHMlknATpB6yDZ90=) 15: 326131343a373538313a323330303a3a2f34302d3430203d3e20343031333836.roa (hash: 0cCFPlcOjS3xWnb1dJLZXDYv3McRJuNCq2FLbccHCeQ=) 16: 326131343a373538313a323130303a3a2f34302d3430203d3e20343031333836.roa (hash: T25tbrYVZpBemZDjqgpA9HPrUcZHUwwg3LOVGpsmSZ8=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fadebb9d-33cc-429b-aa35-10634a8b1dd4/0/35B52EF20A5730A6261D6D1916C6B747FF3C2852.crl rsync://rsync.paas.rpki.ripe.net/repository/fadebb9d-33cc-429b-aa35-10634a8b1dd4/0/35B52EF20A5730A6261D6D1916C6B747FF3C2852.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/35B52EF20A5730A6261D6D1916C6B747FF3C2852.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 10 Sep 2025 07:29:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:35:e5:14:c5:34:5d:3b:3e:80:25:c9:35:30:5e:72:1e:85:37:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35B52EF20A5730A6261D6D1916C6B747FF3C2852 Validity Not Before: Sep 9 16:35:05 2025 GMT Not After : Sep 10 16:59:05 2025 GMT Subject: CN=E2718817E018536F748D39FC0055FD6FBA5EED68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:c0:cb:9d:23:69:80:a8:39:10:47:3a:ca:09: 2c:eb:f6:96:62:88:8d:ab:a2:2c:a6:b4:5b:4b:27: 3f:16:02:77:d0:c4:c5:8d:f0:fc:62:b7:c0:8e:e9: 90:ab:70:f2:34:6e:19:8f:1c:77:78:4f:df:10:18: 07:7f:93:a0:14:bf:e4:f5:38:6a:94:d3:db:8e:fa: 79:8a:0b:cd:a8:b5:ee:e9:5e:1e:8b:b3:1e:c6:13: dc:1c:13:42:61:fc:8d:1a:e2:f0:b9:12:75:4a:58: ce:20:ea:6a:f8:37:61:ff:9a:e3:c4:72:89:12:cc: bd:6b:78:a3:41:e1:dd:46:66:65:29:90:99:bf:12: 41:25:da:d7:33:09:8a:0f:c9:09:d5:63:54:57:48: c8:89:46:19:97:49:b2:a8:8f:7e:5f:f2:d1:d0:d4: 23:e4:63:38:a2:00:45:39:07:0f:2c:b3:7b:64:e7: 22:45:6c:5c:63:99:c3:91:eb:53:c9:7f:96:38:e8: 93:66:62:8a:17:2d:20:00:87:8f:76:f8:83:d8:07: 87:98:a7:50:51:d1:ee:ef:db:6c:2c:0c:05:da:cf: d0:39:a8:88:5f:63:15:1c:41:f4:84:0b:58:81:46: 60:e2:c8:8b:ab:83:72:ae:72:9f:9a:34:dd:61:d3: f2:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:71:88:17:E0:18:53:6F:74:8D:39:FC:00:55:FD:6F:BA:5E:ED:68 X509v3 Authority Key Identifier: keyid:35:B5:2E:F2:0A:57:30:A6:26:1D:6D:19:16:C6:B7:47:FF:3C:28:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fadebb9d-33cc-429b-aa35-10634a8b1dd4/0/35B52EF20A5730A6261D6D1916C6B747FF3C2852.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/35B52EF20A5730A6261D6D1916C6B747FF3C2852.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fadebb9d-33cc-429b-aa35-10634a8b1dd4/0/35B52EF20A5730A6261D6D1916C6B747FF3C2852.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:a4:df:7a:16:17:8a:b3:1f:20:2d:7f:ab:ab:ff:0f:66:ab: d2:63:94:27:b7:22:fb:63:02:79:78:c9:63:71:5a:ee:af:bb: 0b:50:78:b7:93:b3:b0:ef:a7:83:40:7b:fd:39:c4:77:45:56: 92:e8:f1:90:e7:22:86:30:31:5e:f1:22:5c:ae:61:f7:3b:87: fa:e3:24:84:35:d0:57:94:53:82:ce:97:1f:d4:10:50:34:b0: 18:25:1d:4c:42:5a:1b:f8:85:69:c5:76:6e:77:38:76:6c:5d: 98:73:e7:d6:04:2e:3c:fb:43:d3:26:8c:43:ce:41:c5:00:21: 68:37:cb:a5:fa:81:2b:63:f2:13:05:fa:be:4c:dd:e0:93:8c: 6e:9a:ab:3d:ce:da:42:32:22:9e:08:d5:4e:9a:30:00:a1:16: df:0c:af:1c:fc:15:b2:8c:4a:45:a1:ba:b8:3d:17:34:12:cf: 79:40:30:a8:86:63:1a:ee:a1:e0:c5:08:09:3f:ec:b7:ff:85: 7b:46:d3:8d:3e:d0:af:c6:b1:ff:ec:ed:95:8f:a2:d4:fd:b0: 00:5b:38:0d:9e:be:af:da:1b:72:2b:bf:e9:08:30:66:7e:09: ef:ac:23:14:d3:2d:86:d0:1d:e6:ab:1b:42:aa:79:93:c3:63: f8:99:6d:c1 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUbzXlFMU0XTs+gCXJNTBech6FN7kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzVCNTJFRjIwQTU3MzBBNjI2MUQ2RDE5MTZDNkI3NDdG RjNDMjg1MjAeFw0yNTA5MDkxNjM1MDVaFw0yNTA5MTAxNjU5MDVaMDMxMTAvBgNV BAMTKEUyNzE4ODE3RTAxODUzNkY3NDhEMzlGQzAwNTVGRDZGQkE1RUVENjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCSwMudI2mAqDkQRzrKCSzr9pZi iI2roiymtFtLJz8WAnfQxMWN8Pxit8CO6ZCrcPI0bhmPHHd4T98QGAd/k6AUv+T1 OGqU09uO+nmKC82ote7pXh6Lsx7GE9wcE0Jh/I0a4vC5EnVKWM4g6mr4N2H/muPE cokSzL1reKNB4d1GZmUpkJm/EkEl2tczCYoPyQnVY1RXSMiJRhmXSbKoj35f8tHQ 1CPkYziiAEU5Bw8ss3tk5yJFbFxjmcOR61PJf5Y46JNmYooXLSAAh492+IPYB4eY p1BR0e7v22wsDAXaz9A5qIhfYxUcQfSEC1iBRmDiyIurg3Kucp+aNN1h0/J/AgMB AAGjggKCMIICfjAdBgNVHQ4EFgQU4nGIF+AYU290jTn8AFX9b7pe7WgwHwYDVR0j BBgwFoAUNbUu8gpXMKYmHW0ZFsa3R/88KFIwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZmFkZWJiOWQtMzNjYy00MjliLWFhMzUtMTA2MzRhOGIx ZGQ0LzAvMzVCNTJFRjIwQTU3MzBBNjI2MUQ2RDE5MTZDNkI3NDdGRjNDMjg1Mi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC8zNUI1MkVGMjBBNTczMEE2MjYxRDZEMTkx NkM2Qjc0N0ZGM0MyODUyLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2ZhZGViYjlkLTMzY2MtNDI5Yi1hYTM1LTEwNjM0YThiMWRkNC8wLzM1QjUyRUYy MEE1NzMwQTYyNjFENkQxOTE2QzZCNzQ3RkYzQzI4NTIubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAvpN96 FheKsx8gLX+rq/8PZqvSY5QntyL7YwJ5eMljcVrur7sLUHi3k7Ow76eDQHv9OcR3 RVaS6PGQ5yKGMDFe8SJcrmH3O4f64ySENdBXlFOCzpcf1BBQNLAYJR1MQlob+IVp xXZudzh2bF2Yc+fWBC48+0PTJoxDzkHFACFoN8ul+oErY/ITBfq+TN3gk4xumqs9 ztpCMiKeCNVOmjAAoRbfDK8c/BWyjEpFobq4PRc0Es95QDCohmMa7qHgxQgJP+y3 /4V7RtONPtCvxrH/7O2Vj6LU/bAAWzgNnr6v2htyK7/pCDBmfgnvrCMU0y2G0B3m qxtCqnmTw2P4mW3B -----END CERTIFICATE-----Generated at Tue Sep 9 19:01:20 2025 by rpki-client