$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fadebb9d-33cc-429b-aa35-10634a8b1dd4/0/35B52EF20A5730A6261D6D1916C6B747FF3C2852.mft File: 35B52EF20A5730A6261D6D1916C6B747FF3C2852.mft (raw, json) Hash identifier: V8ABMiXy644gL+0oqZJ4MIaCX+B6AKgVBESE0PEUPg8= Subject key identifier: E5:E2:2D:76:44:F4:E6:5E:6B:78:C8:8C:2A:7F:CF:78:05:E1:63:89 Authority key identifier: 35:B5:2E:F2:0A:57:30:A6:26:1D:6D:19:16:C6:B7:47:FF:3C:28:52 Certificate issuer: /CN=35B52EF20A5730A6261D6D1916C6B747FF3C2852 Certificate serial: 0AA492CCA7F8625417AD820E2774816245622767 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/35B52EF20A5730A6261D6D1916C6B747FF3C2852.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fadebb9d-33cc-429b-aa35-10634a8b1dd4/0/35B52EF20A5730A6261D6D1916C6B747FF3C2852.mft Manifest number: 0240 Signing time: Mon 27 Apr 2026 13:03:53 +0000 Manifest this update: Mon 27 Apr 2026 12:58:53 +0000 Manifest next update: Tue 28 Apr 2026 13:46:53 +0000 Files and hashes: 1: 326131343a373538313a323030303a3a2f34302d3438203d3e20323039313039.roa (hash: lRerEWAZYVnj4WeC0lksu5JXgu5ks2mpqCgBEDRR0Q0=) 2: 326131343a373538313a326630303a3a2f34382d3438203d3e20343031333836.roa (hash: hhnXez1MtyG/OWqeDWj8Yk7vwpb6xK8SsXbhq+WvHw8=) 3: 326131343a373538313a323030303a3a2f34302d3438203d3e20333936303530.roa (hash: yUvus43IfO0AT/ck5bMQHbMTgP3EN2v06hq4szCBm40=) 4: 326131343a373538313a323630303a3a2f34302d3438203d3e20323039313039.roa (hash: Ah/styCnPIoGFWiO0PQ2rB66bvMdDv2NyL9mrkcrCj4=) 5: 326131343a373538313a323530303a3a2f34302d3430203d3e203134343437.roa (hash: 2DfIdT8hQ452p9tTWwGSgv6G5KrCdvIla2RYi0wqius=) 6: 326131343a373538313a323930303a3a2f34302d3438203d3e20323039313039.roa (hash: ENamU9VlpUh2S5yKvYrAp12SwLl/9Jv38ffU+yHH5Iw=) 7: 326131343a373538313a323330303a3a2f34302d3430203d3e20343031333836.roa (hash: GU9+rKAYRqNo9YIwP+TkUZlOwC3QOJ/ceUAdYXuG73A=) 8: 326131343a373538313a323030303a3a2f34302d3438203d3e20343031333836.roa (hash: pi4F6jgMqqwUP1FTiOnfocpEw1DljOaDr1vx1pIBms8=) 9: 326131343a373538313a323730303a3a2f34302d3438203d3e20323039313039.roa (hash: MFKFuWCDL66Zxs5f3hEeRn+2JW7mEBoWjT7f6AJBOhM=) 10: 326131343a373538313a323030303a3a2f34302d3438203d3e20323135333634.roa (hash: iPZr810Wf3G2BF1Yx0TXVCnIMBYWmzqlqsIx/XIB/Cc=) 11: 326131343a373538313a323230303a3a2f34302d3430203d3e20343031333836.roa (hash: WHkf4m6DzfoyrufCoOAxeFwtqFzFGCors6ZbsGaGLa8=) 12: 326131343a373538313a323030303a3a2f34302d3438203d3e20323136333234.roa (hash: bje5aLLUqgAL8DyPjKPS1MwDhANSqShDo64yB6sarZo=) 13: 326131343a373538313a326630313a3a2f34382d3438203d3e20343031333836.roa (hash: qMwS539lNZFoubA7sJWCkka1wt0G8zXYNPGQsBc3Exo=) 14: 35B52EF20A5730A6261D6D1916C6B747FF3C2852.crl (hash: SOFKVsiPS6F1bIx8Ul4jCxLBARLyeE2lszLgqgJ2OZM=) 15: 326131343a373538313a323830303a3a2f34302d3438203d3e20323039313039.roa (hash: U1r4ZvjM4KXIBEm7hpH6+0Qd/LSsHMlknATpB6yDZ90=) 16: 326131343a373538313a323130303a3a2f34302d3430203d3e20343031333836.roa (hash: DLjQUjmP+DsaW9+BMh56ieI2Ec94mZJVyHTBFU7NtcI=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fadebb9d-33cc-429b-aa35-10634a8b1dd4/0/35B52EF20A5730A6261D6D1916C6B747FF3C2852.crl rsync://rsync.paas.rpki.ripe.net/repository/fadebb9d-33cc-429b-aa35-10634a8b1dd4/0/35B52EF20A5730A6261D6D1916C6B747FF3C2852.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/35B52EF20A5730A6261D6D1916C6B747FF3C2852.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 28 Apr 2026 08:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:a4:92:cc:a7:f8:62:54:17:ad:82:0e:27:74:81:62:45:62:27:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35B52EF20A5730A6261D6D1916C6B747FF3C2852 Validity Not Before: Apr 27 12:58:53 2026 GMT Not After : Apr 28 13:46:53 2026 GMT Subject: CN=E5E22D7644F4E65E6B78C88C2A7FCF7805E16389 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:f4:64:78:c5:c3:6b:10:3a:61:77:66:0f:e8: 35:cd:a5:79:2a:9e:bd:be:40:72:e2:7e:02:f5:43: 8d:51:cb:96:d3:68:be:46:0a:cc:83:9c:5d:03:c4: 57:0e:45:18:c6:de:b7:91:a2:16:51:64:05:a1:40: c0:af:8c:f5:cb:dd:a2:3c:8e:e2:22:8a:7e:a3:5a: 26:1d:e3:fb:f7:f9:c5:53:3c:9b:f2:b8:ca:31:00: fa:22:e9:73:44:70:47:0e:ca:cc:ce:6f:03:8a:d6: 90:55:e4:64:91:81:4d:75:9c:47:b1:42:5d:42:2a: 7a:fb:05:8f:b2:92:24:4b:ab:a7:f1:85:30:d0:a3: b2:f1:c0:03:aa:ff:d9:92:3e:56:83:41:b8:34:99: fa:bf:39:a7:d9:8d:5d:64:5c:c0:a8:94:ea:40:b7: 90:1e:c4:fc:61:0b:4f:0b:22:0f:4f:9c:c0:c6:ff: 57:fd:f6:0f:4c:32:8d:82:80:ca:f3:1b:a4:ad:53: 50:fa:82:6f:34:a4:b3:28:58:71:18:8f:80:f4:ac: cb:ad:51:32:60:9f:5e:19:ad:cd:3a:98:3a:d4:45: 6b:d7:5c:09:bf:9c:44:30:83:b2:72:e2:cc:43:27: 9c:c9:76:62:93:cf:21:3e:87:b4:6c:f0:d2:9b:47: 43:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:E2:2D:76:44:F4:E6:5E:6B:78:C8:8C:2A:7F:CF:78:05:E1:63:89 X509v3 Authority Key Identifier: keyid:35:B5:2E:F2:0A:57:30:A6:26:1D:6D:19:16:C6:B7:47:FF:3C:28:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fadebb9d-33cc-429b-aa35-10634a8b1dd4/0/35B52EF20A5730A6261D6D1916C6B747FF3C2852.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/35B52EF20A5730A6261D6D1916C6B747FF3C2852.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fadebb9d-33cc-429b-aa35-10634a8b1dd4/0/35B52EF20A5730A6261D6D1916C6B747FF3C2852.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:4d:43:9b:ad:02:2f:64:0b:58:18:02:1d:7e:46:13:db:58: 7a:ac:cf:5b:6b:29:94:47:27:b8:d8:17:11:57:eb:e7:41:8d: 0c:3d:50:70:33:d9:79:0c:f3:a5:ef:87:65:0d:eb:fa:f9:66: 1e:b0:dc:d6:21:73:47:ad:b0:8a:17:86:64:4c:d0:5b:27:ce: f4:b7:65:76:96:80:b7:cb:54:37:2e:ac:0e:4e:c5:67:17:cb: 26:05:b3:94:a1:e8:f7:fa:fb:67:4e:f7:8c:18:af:94:a1:2a: 84:b9:57:56:c8:ba:98:76:4f:7b:f8:14:29:d2:65:8b:0b:e4: f5:7e:af:f8:d3:48:0f:8e:be:c5:0d:82:11:02:5b:f4:2d:73: d9:ce:57:4e:cb:c6:b1:ca:32:c4:a4:11:4f:45:a4:b8:c7:ba: 50:5e:9d:ee:3b:be:ee:0d:e5:77:b9:ae:ff:35:3e:d5:0d:9f: 4e:28:57:6c:e4:5e:cc:cc:8a:82:61:da:9a:7e:e9:13:17:f5: 70:10:b1:a3:ae:39:7f:7d:ca:8f:2d:49:ab:8c:93:51:ea:97: e4:ac:cf:8a:e6:6b:bf:55:3a:2f:d0:2a:32:62:5a:d2:cb:0a: 6a:f4:82:f8:4b:b7:c4:d1:10:e1:38:64:ce:f1:79:3d:78:68: f1:ac:a7:9d -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUCqSSzKf4YlQXrYIOJ3SBYkViJ2cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzVCNTJFRjIwQTU3MzBBNjI2MUQ2RDE5MTZDNkI3NDdG RjNDMjg1MjAeFw0yNjA0MjcxMjU4NTNaFw0yNjA0MjgxMzQ2NTNaMDMxMTAvBgNV BAMTKEU1RTIyRDc2NDRGNEU2NUU2Qjc4Qzg4QzJBN0ZDRjc4MDVFMTYzODkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCj9GR4xcNrEDphd2YP6DXNpXkq nr2+QHLifgL1Q41Ry5bTaL5GCsyDnF0DxFcORRjG3reRohZRZAWhQMCvjPXL3aI8 juIiin6jWiYd4/v3+cVTPJvyuMoxAPoi6XNEcEcOyszObwOK1pBV5GSRgU11nEex Ql1CKnr7BY+ykiRLq6fxhTDQo7LxwAOq/9mSPlaDQbg0mfq/OafZjV1kXMColOpA t5AexPxhC08LIg9PnMDG/1f99g9MMo2CgMrzG6StU1D6gm80pLMoWHEYj4D0rMut UTJgn14Zrc06mDrURWvXXAm/nEQwg7Jy4sxDJ5zJdmKTzyE+h7Rs8NKbR0O3AgMB AAGjggKCMIICfjAdBgNVHQ4EFgQU5eItdkT05l5reMiMKn/PeAXhY4kwHwYDVR0j BBgwFoAUNbUu8gpXMKYmHW0ZFsa3R/88KFIwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZmFkZWJiOWQtMzNjYy00MjliLWFhMzUtMTA2MzRhOGIx ZGQ0LzAvMzVCNTJFRjIwQTU3MzBBNjI2MUQ2RDE5MTZDNkI3NDdGRjNDMjg1Mi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC8zNUI1MkVGMjBBNTczMEE2MjYxRDZEMTkx NkM2Qjc0N0ZGM0MyODUyLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2ZhZGViYjlkLTMzY2MtNDI5Yi1hYTM1LTEwNjM0YThiMWRkNC8wLzM1QjUyRUYy MEE1NzMwQTYyNjFENkQxOTE2QzZCNzQ3RkYzQzI4NTIubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCVTUOb rQIvZAtYGAIdfkYT21h6rM9baymURye42BcRV+vnQY0MPVBwM9l5DPOl74dlDev6 +WYesNzWIXNHrbCKF4ZkTNBbJ870t2V2loC3y1Q3LqwOTsVnF8smBbOUoej3+vtn TveMGK+UoSqEuVdWyLqYdk97+BQp0mWLC+T1fq/400gPjr7FDYIRAlv0LXPZzldO y8axyjLEpBFPRaS4x7pQXp3uO77uDeV3ua7/NT7VDZ9OKFds5F7MzIqCYdqafukT F/VwELGjrjl/fcqPLUmrjJNR6pfkrM+K5mu/VTov0CoyYlrSywpq9IL4S7fE0RDh OGTO8Xk9eGjxrKed -----END CERTIFICATE-----Generated at Mon Apr 27 18:03:27 2026 by rpki-client