$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fadebb9d-33cc-429b-aa35-10634a8b1dd4/0/35B52EF20A5730A6261D6D1916C6B747FF3C2852.mft File: 35B52EF20A5730A6261D6D1916C6B747FF3C2852.mft (raw, json) Hash identifier: 0I+pJzQ19qEOi6Qfv9v7PY9FEMneeoR3x/G1G8S64u8= Subject key identifier: 13:1F:24:3B:FB:83:92:D0:09:1A:CD:9F:F8:C8:6C:01:9F:96:CE:34 Authority key identifier: 35:B5:2E:F2:0A:57:30:A6:26:1D:6D:19:16:C6:B7:47:FF:3C:28:52 Certificate issuer: /CN=35B52EF20A5730A6261D6D1916C6B747FF3C2852 Certificate serial: 64A08C68E769FA047D042168BB8FA8272B995AC6 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/35B52EF20A5730A6261D6D1916C6B747FF3C2852.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fadebb9d-33cc-429b-aa35-10634a8b1dd4/0/35B52EF20A5730A6261D6D1916C6B747FF3C2852.mft Manifest number: 0337 Signing time: Thu 29 Oct 2026 11:05:37 +0000 Manifest this update: Thu 29 Oct 2026 11:00:36 +0000 Manifest next update: Fri 30 Oct 2026 14:43:36 +0000 Files and hashes: 1: 326131343a373538313a323730303a3a2f34302d3438203d3e20323039313039.roa (hash: r2FAoLHwIu8mKalLeNKMfevbe6TYD4tj8Lmhtg3K0Jc=) 2: 326131343a373538313a323830303a3a2f34302d3438203d3e20323039313039.roa (hash: BgI8MCbrdQrLXGBmcxKTWUA61uXQRIT/7G+jUcNg+Cg=) 3: 326131343a373538313a323030303a3a2f34302d3438203d3e20333936303530.roa (hash: sHH5EXfl8KcOz9d8oEb74NyMVuJWDbdSziQULSKFDd4=) 4: 326131343a373538313a323630303a3a2f34302d3438203d3e20323039313039.roa (hash: vUmqEtEfYQI1zWEs+VA6phQsPoAXeEbQEq0Kg2kwRRk=) 5: 326131343a373538313a323030303a3a2f34302d3438203d3e20343031333836.roa (hash: UDRqDR0JMowXqg92cpDjRfR7VLQyzzQdpbzczBoUKPE=) 6: 326131343a373538313a326630313a3a2f34382d3438203d3e20343031333836.roa (hash: qMwS539lNZFoubA7sJWCkka1wt0G8zXYNPGQsBc3Exo=) 7: 35B52EF20A5730A6261D6D1916C6B747FF3C2852.crl (hash: knV/MtEvTN62qGcLEtvAsgxwMzATUOek0uWr0sy4jL8=) 8: 326131343a373538313a323030303a3a2f34302d3438203d3e20323039313039.roa (hash: tf4CnuzuqcNJkCPREEFPykMzx34y8Ud9hQ2hyeqIDkc=) 9: 326131343a373538313a323130303a3a2f34302d3430203d3e20343031333836.roa (hash: DLjQUjmP+DsaW9+BMh56ieI2Ec94mZJVyHTBFU7NtcI=) 10: 326131343a373538313a323230303a3a2f34302d3430203d3e20343031333836.roa (hash: WHkf4m6DzfoyrufCoOAxeFwtqFzFGCors6ZbsGaGLa8=) 11: 326131343a373538313a323330303a3a2f34302d3430203d3e20343031333836.roa (hash: GU9+rKAYRqNo9YIwP+TkUZlOwC3QOJ/ceUAdYXuG73A=) 12: 326131343a373538313a323530303a3a2f34302d3430203d3e203134343437.roa (hash: RGywHnxAYLuO6cDdu+OqsmlkwS7ZjWl9Xx30KtT8IYc=) 13: 326131343a373538313a326630303a3a2f34382d3438203d3e20343031333836.roa (hash: hhnXez1MtyG/OWqeDWj8Yk7vwpb6xK8SsXbhq+WvHw8=) 14: 326131343a373538313a323930303a3a2f34302d3438203d3e20323039313039.roa (hash: fNdgpZfzM+lTdkTHtAnx5kJSH3iOKuMJEshssLvwnVk=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fadebb9d-33cc-429b-aa35-10634a8b1dd4/0/35B52EF20A5730A6261D6D1916C6B747FF3C2852.crl rsync://rsync.paas.rpki.ripe.net/repository/fadebb9d-33cc-429b-aa35-10634a8b1dd4/0/35B52EF20A5730A6261D6D1916C6B747FF3C2852.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/35B52EF20A5730A6261D6D1916C6B747FF3C2852.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 30 Oct 2026 11:55:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:a0:8c:68:e7:69:fa:04:7d:04:21:68:bb:8f:a8:27:2b:99:5a:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35B52EF20A5730A6261D6D1916C6B747FF3C2852 Validity Not Before: Oct 29 11:00:36 2026 GMT Not After : Oct 30 14:43:36 2026 GMT Subject: CN=131F243BFB8392D0091ACD9FF8C86C019F96CE34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:87:5e:36:d2:f2:c6:4a:c1:cd:ca:b3:ec:f3: 0e:f6:56:20:67:9e:21:1f:01:26:79:9d:09:d8:fe: 8b:f7:e2:c0:7e:68:14:f1:8e:74:f8:39:bd:e4:ad: 85:a8:b5:72:37:5f:3a:a2:f4:54:0d:19:95:a9:e2: 21:98:60:48:2d:fb:b1:50:84:c7:a1:28:e1:0b:d8: fd:a1:ab:80:29:34:09:57:79:5a:f2:53:94:c9:7b: 0c:3e:52:fb:1b:9d:08:2c:f6:d2:d0:b2:9f:e5:19: 8a:34:0b:d7:57:1c:90:a3:d3:b2:90:10:09:04:22: 2c:9c:69:f0:a6:04:47:85:b3:9b:78:60:15:26:bb: c9:ff:49:0f:10:f2:e6:21:64:d6:9f:1a:08:e4:b4: 5e:3f:b8:78:17:07:b4:e5:77:02:87:76:0f:65:44: 76:76:53:7a:c1:a7:d5:a2:0c:37:6b:28:b2:bf:ef: fa:c4:25:59:38:10:55:49:52:6a:4f:3e:85:68:23: 36:3f:33:1c:14:5b:ae:a6:e1:5b:ad:00:a3:a5:b4: c5:d9:22:44:55:98:2f:e8:f0:b2:e6:6e:e4:27:28: 8c:a8:b6:3b:8f:4d:56:ef:09:9d:8f:92:f7:9b:a4: de:6c:25:8f:0b:43:12:b8:0f:0e:ec:51:78:96:30: 83:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:1F:24:3B:FB:83:92:D0:09:1A:CD:9F:F8:C8:6C:01:9F:96:CE:34 X509v3 Authority Key Identifier: keyid:35:B5:2E:F2:0A:57:30:A6:26:1D:6D:19:16:C6:B7:47:FF:3C:28:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fadebb9d-33cc-429b-aa35-10634a8b1dd4/0/35B52EF20A5730A6261D6D1916C6B747FF3C2852.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/35B52EF20A5730A6261D6D1916C6B747FF3C2852.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fadebb9d-33cc-429b-aa35-10634a8b1dd4/0/35B52EF20A5730A6261D6D1916C6B747FF3C2852.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9e:47:5b:3d:34:b5:91:4e:35:2f:53:c0:b4:da:af:34:f7:5a: b9:59:29:19:f2:72:9c:62:ee:91:5e:e5:ab:df:ac:b8:53:84: d0:a0:7a:c1:cf:da:89:b3:03:f9:49:28:aa:91:ea:21:9a:e2: 0a:42:b0:7b:26:c9:71:48:3a:f3:7e:8d:bf:42:03:b8:99:58: a5:28:d4:bd:b0:43:28:f8:00:da:14:19:78:f7:2d:e5:0b:d4: 93:78:1b:75:9b:fe:46:f3:27:da:06:b2:4a:e7:9e:be:96:19: a6:53:a3:e7:ee:2c:c2:71:7b:70:29:35:dd:6e:52:4c:4e:56: a5:39:f2:ba:1b:f8:1e:48:96:25:d6:b4:97:4e:58:ed:22:be: 04:ff:81:f4:ec:0d:22:4b:14:6c:85:90:d7:0e:e6:c2:96:49: c0:b6:e9:90:49:8d:3e:80:26:17:14:3f:0b:cf:e6:32:be:6a: c6:be:4e:9d:4e:39:92:38:1a:d3:2b:85:e9:ba:0b:87:50:b7: f5:dc:e8:ec:5f:dd:bf:85:41:8b:c0:cc:f3:bb:ef:0f:0f:c8: da:e8:28:1a:b4:71:b4:8a:ef:0f:fe:b9:92:4b:45:c8:4a:3b: d6:ad:7e:2f:db:ef:f3:a9:84:42:6c:5a:56:8f:43:6b:26:71: 47:07:e7:e1 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUZKCMaOdp+gR9BCFou4+oJyuZWsYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzVCNTJFRjIwQTU3MzBBNjI2MUQ2RDE5MTZDNkI3NDdG RjNDMjg1MjAeFw0yNjEwMjkxMTAwMzZaFw0yNjEwMzAxNDQzMzZaMDMxMTAvBgNV BAMTKDEzMUYyNDNCRkI4MzkyRDAwOTFBQ0Q5RkY4Qzg2QzAxOUY5NkNFMzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIh1420vLGSsHNyrPs8w72ViBn niEfASZ5nQnY/ov34sB+aBTxjnT4Ob3krYWotXI3Xzqi9FQNGZWp4iGYYEgt+7FQ hMehKOEL2P2hq4ApNAlXeVryU5TJeww+UvsbnQgs9tLQsp/lGYo0C9dXHJCj07KQ EAkEIiycafCmBEeFs5t4YBUmu8n/SQ8Q8uYhZNafGgjktF4/uHgXB7TldwKHdg9l RHZ2U3rBp9WiDDdrKLK/7/rEJVk4EFVJUmpPPoVoIzY/MxwUW66m4VutAKOltMXZ IkRVmC/o8LLmbuQnKIyotjuPTVbvCZ2PkvebpN5sJY8LQxK4Dw7sUXiWMIP5AgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUEx8kO/uDktAJGs2f+MhsAZ+WzjQwHwYDVR0j BBgwFoAUNbUu8gpXMKYmHW0ZFsa3R/88KFIwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZmFkZWJiOWQtMzNjYy00MjliLWFhMzUtMTA2MzRhOGIx ZGQ0LzAvMzVCNTJFRjIwQTU3MzBBNjI2MUQ2RDE5MTZDNkI3NDdGRjNDMjg1Mi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC8zNUI1MkVGMjBBNTczMEE2MjYxRDZEMTkx NkM2Qjc0N0ZGM0MyODUyLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2ZhZGViYjlkLTMzY2MtNDI5Yi1hYTM1LTEwNjM0YThiMWRkNC8wLzM1QjUyRUYy MEE1NzMwQTYyNjFENkQxOTE2QzZCNzQ3RkYzQzI4NTIubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCeR1s9 NLWRTjUvU8C02q8091q5WSkZ8nKcYu6RXuWr36y4U4TQoHrBz9qJswP5SSiqkeoh muIKQrB7JslxSDrzfo2/QgO4mVilKNS9sEMo+ADaFBl49y3lC9STeBt1m/5G8yfa BrJK556+lhmmU6Pn7izCcXtwKTXdblJMTlalOfK6G/geSJYl1rSXTljtIr4E/4H0 7A0iSxRshZDXDubClknAtumQSY0+gCYXFD8Lz+YyvmrGvk6dTjmSOBrTK4XpuguH ULf13OjsX92/hUGLwMzzu+8PD8ja6CgatHG0iu8P/rmSS0XISjvWrX4v2+/zqYRC bFpWj0NrJnFHB+fh -----END CERTIFICATE-----Generated at Thu Oct 29 17:04:47 2026 by rpki-client