$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fadebb9d-33cc-429b-aa35-10634a8b1dd4/0/35B52EF20A5730A6261D6D1916C6B747FF3C2852.mft File: 35B52EF20A5730A6261D6D1916C6B747FF3C2852.mft (raw, json) Hash identifier: D7v8N+f80wvL7WSuNTaBIQA0dFeaT/Wg2rCFwtyYPg8= Subject key identifier: 3D:52:41:0B:5C:07:52:6B:EA:11:E4:EE:EC:12:18:7F:44:13:C9:2E Authority key identifier: 35:B5:2E:F2:0A:57:30:A6:26:1D:6D:19:16:C6:B7:47:FF:3C:28:52 Certificate issuer: /CN=35B52EF20A5730A6261D6D1916C6B747FF3C2852 Certificate serial: 0F1B1D78C2A8AA446E9E125032ED217D0978CEA2 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/35B52EF20A5730A6261D6D1916C6B747FF3C2852.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fadebb9d-33cc-429b-aa35-10634a8b1dd4/0/35B52EF20A5730A6261D6D1916C6B747FF3C2852.mft Manifest number: 02B9 Signing time: Sun 26 Jul 2026 21:21:18 +0000 Manifest this update: Sun 26 Jul 2026 21:16:18 +0000 Manifest next update: Tue 28 Jul 2026 00:28:18 +0000 Files and hashes: 1: 326131343a373538313a326630303a3a2f34382d3438203d3e20343031333836.roa (hash: hhnXez1MtyG/OWqeDWj8Yk7vwpb6xK8SsXbhq+WvHw8=) 2: 326131343a373538313a323730303a3a2f34302d3438203d3e20323039313039.roa (hash: r2FAoLHwIu8mKalLeNKMfevbe6TYD4tj8Lmhtg3K0Jc=) 3: 326131343a373538313a323530303a3a2f34302d3430203d3e203134343437.roa (hash: RGywHnxAYLuO6cDdu+OqsmlkwS7ZjWl9Xx30KtT8IYc=) 4: 326131343a373538313a326630313a3a2f34382d3438203d3e20343031333836.roa (hash: qMwS539lNZFoubA7sJWCkka1wt0G8zXYNPGQsBc3Exo=) 5: 326131343a373538313a323130303a3a2f34302d3430203d3e20343031333836.roa (hash: DLjQUjmP+DsaW9+BMh56ieI2Ec94mZJVyHTBFU7NtcI=) 6: 326131343a373538313a323030303a3a2f34302d3438203d3e20343031333836.roa (hash: UDRqDR0JMowXqg92cpDjRfR7VLQyzzQdpbzczBoUKPE=) 7: 326131343a373538313a323330303a3a2f34302d3430203d3e20343031333836.roa (hash: GU9+rKAYRqNo9YIwP+TkUZlOwC3QOJ/ceUAdYXuG73A=) 8: 326131343a373538313a323630303a3a2f34302d3438203d3e20323039313039.roa (hash: vUmqEtEfYQI1zWEs+VA6phQsPoAXeEbQEq0Kg2kwRRk=) 9: 326131343a373538313a323030303a3a2f34302d3438203d3e20323039313039.roa (hash: tf4CnuzuqcNJkCPREEFPykMzx34y8Ud9hQ2hyeqIDkc=) 10: 326131343a373538313a323230303a3a2f34302d3430203d3e20343031333836.roa (hash: WHkf4m6DzfoyrufCoOAxeFwtqFzFGCors6ZbsGaGLa8=) 11: 326131343a373538313a323830303a3a2f34302d3438203d3e20323039313039.roa (hash: BgI8MCbrdQrLXGBmcxKTWUA61uXQRIT/7G+jUcNg+Cg=) 12: 326131343a373538313a323030303a3a2f34302d3438203d3e20323135333634.roa (hash: Qbpxn6m6N57BLQ/qLjGEPLIZz8aoJQbWLiHDKsDlsdk=) 13: 326131343a373538313a323930303a3a2f34302d3438203d3e20323039313039.roa (hash: fNdgpZfzM+lTdkTHtAnx5kJSH3iOKuMJEshssLvwnVk=) 14: 35B52EF20A5730A6261D6D1916C6B747FF3C2852.crl (hash: lrSLGv5yh9pmDZf5shY5NGAbeYo/3p2y8eItWonWceM=) 15: 326131343a373538313a323030303a3a2f34302d3438203d3e20333936303530.roa (hash: sHH5EXfl8KcOz9d8oEb74NyMVuJWDbdSziQULSKFDd4=) 16: 326131343a373538313a323030303a3a2f34302d3438203d3e20323136333234.roa (hash: 94LHGHEmr5Ow8y0LgQ8OziBDUOK8WBX/6zymxyfianM=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fadebb9d-33cc-429b-aa35-10634a8b1dd4/0/35B52EF20A5730A6261D6D1916C6B747FF3C2852.crl rsync://rsync.paas.rpki.ripe.net/repository/fadebb9d-33cc-429b-aa35-10634a8b1dd4/0/35B52EF20A5730A6261D6D1916C6B747FF3C2852.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/35B52EF20A5730A6261D6D1916C6B747FF3C2852.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 27 Jul 2026 19:23:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:1b:1d:78:c2:a8:aa:44:6e:9e:12:50:32:ed:21:7d:09:78:ce:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35B52EF20A5730A6261D6D1916C6B747FF3C2852 Validity Not Before: Jul 26 21:16:18 2026 GMT Not After : Jul 28 00:28:18 2026 GMT Subject: CN=3D52410B5C07526BEA11E4EEEC12187F4413C92E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:ac:66:ca:a3:2a:3f:db:70:c4:fa:a8:da:94: 1e:e7:f3:e4:b7:a4:3b:18:b0:c6:ee:69:c7:2a:a3: 48:f3:83:b7:ba:ff:41:65:d9:21:8b:47:b4:7d:4d: 29:1a:fa:e4:80:81:ac:e7:84:b8:bf:52:c0:78:d6: d0:ae:b0:51:f3:5d:5f:88:0f:35:6a:b1:81:30:30: 48:30:2b:9c:b6:f6:14:c7:49:ec:a2:21:4b:d7:d0: 18:4b:8f:13:b2:01:fb:68:e8:8e:b6:9d:67:4a:0f: 42:1c:5d:c4:b7:b4:1d:59:45:f7:a3:c5:44:6e:fa: 52:db:33:24:90:4e:fd:46:06:16:2c:80:62:8f:42: 76:6b:82:3b:93:14:61:03:74:b4:c9:7e:19:98:07: 4f:d9:58:e6:5b:e2:fc:22:89:10:04:d1:85:47:11: d1:fc:bf:27:b8:0c:b3:85:0b:96:35:d0:e2:da:0b: 91:2b:3e:34:66:f5:a3:d2:5d:37:c1:7c:47:9c:f9: e5:d5:10:99:b8:ac:37:c0:07:46:20:3b:b8:07:db: 0f:d0:e7:f4:b5:a5:2e:37:60:da:72:75:5e:38:44: ac:ce:ff:93:91:57:81:e8:96:49:00:ba:1e:b6:31: 25:4a:f4:b3:89:b6:7e:53:cd:86:c8:bd:22:90:2a: b0:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:52:41:0B:5C:07:52:6B:EA:11:E4:EE:EC:12:18:7F:44:13:C9:2E X509v3 Authority Key Identifier: keyid:35:B5:2E:F2:0A:57:30:A6:26:1D:6D:19:16:C6:B7:47:FF:3C:28:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fadebb9d-33cc-429b-aa35-10634a8b1dd4/0/35B52EF20A5730A6261D6D1916C6B747FF3C2852.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/35B52EF20A5730A6261D6D1916C6B747FF3C2852.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fadebb9d-33cc-429b-aa35-10634a8b1dd4/0/35B52EF20A5730A6261D6D1916C6B747FF3C2852.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:06:01:81:84:65:11:f2:cc:1c:23:76:f3:69:27:1a:cb:fb: 01:12:2a:24:e8:f6:05:73:55:81:3e:6b:4d:33:e4:87:a7:7a: 74:ef:ff:6a:b8:39:55:dd:cc:77:bf:ef:b8:a3:98:cb:e3:aa: f6:6f:9d:e0:8b:f1:e8:05:fa:ba:01:25:86:1d:f4:d9:c4:85: 24:8d:92:49:7a:20:cd:47:2e:b2:eb:a7:d6:61:5d:66:71:a0: 99:fe:c8:95:c6:43:2b:48:83:a7:65:1c:4b:e7:fd:49:61:2b: b6:ec:db:ee:b4:c0:50:7c:1c:40:1d:de:8b:93:62:af:81:02: 15:30:af:9d:bf:f3:21:d8:80:bd:95:d1:a9:75:8f:bc:d4:e0: b0:06:77:8e:26:a5:37:dd:f0:96:01:8b:94:19:f8:7c:70:52: 93:26:74:20:cc:f5:82:ab:f7:cd:cc:c2:eb:74:7f:e7:06:69: 05:4b:95:d4:af:12:d2:80:87:4b:b6:65:14:51:68:ba:53:3b: c1:ba:e4:46:a6:17:ba:de:4a:e9:63:af:70:d1:f2:5d:ef:91: ba:f8:0f:18:2b:6e:3d:23:ca:77:88:ee:43:bc:f7:3c:c1:cb: f1:b0:77:8b:68:47:6f:00:cf:24:3c:e9:72:aa:11:a0:c6:c8: 52:ce:c7:0d -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUDxsdeMKoqkRunhJQMu0hfQl4zqIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzVCNTJFRjIwQTU3MzBBNjI2MUQ2RDE5MTZDNkI3NDdG RjNDMjg1MjAeFw0yNjA3MjYyMTE2MThaFw0yNjA3MjgwMDI4MThaMDMxMTAvBgNV BAMTKDNENTI0MTBCNUMwNzUyNkJFQTExRTRFRUVDMTIxODdGNDQxM0M5MkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCprGbKoyo/23DE+qjalB7n8+S3 pDsYsMbuaccqo0jzg7e6/0Fl2SGLR7R9TSka+uSAgaznhLi/UsB41tCusFHzXV+I DzVqsYEwMEgwK5y29hTHSeyiIUvX0BhLjxOyAfto6I62nWdKD0IcXcS3tB1ZRfej xURu+lLbMySQTv1GBhYsgGKPQnZrgjuTFGEDdLTJfhmYB0/ZWOZb4vwiiRAE0YVH EdH8vye4DLOFC5Y10OLaC5ErPjRm9aPSXTfBfEec+eXVEJm4rDfAB0YgO7gH2w/Q 5/S1pS43YNpydV44RKzO/5ORV4HolkkAuh62MSVK9LOJtn5TzYbIvSKQKrB3AgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUPVJBC1wHUmvqEeTu7BIYf0QTyS4wHwYDVR0j BBgwFoAUNbUu8gpXMKYmHW0ZFsa3R/88KFIwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZmFkZWJiOWQtMzNjYy00MjliLWFhMzUtMTA2MzRhOGIx ZGQ0LzAvMzVCNTJFRjIwQTU3MzBBNjI2MUQ2RDE5MTZDNkI3NDdGRjNDMjg1Mi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC8zNUI1MkVGMjBBNTczMEE2MjYxRDZEMTkx NkM2Qjc0N0ZGM0MyODUyLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2ZhZGViYjlkLTMzY2MtNDI5Yi1hYTM1LTEwNjM0YThiMWRkNC8wLzM1QjUyRUYy MEE1NzMwQTYyNjFENkQxOTE2QzZCNzQ3RkYzQzI4NTIubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQA4BgGB hGUR8swcI3bzaScay/sBEiok6PYFc1WBPmtNM+SHp3p07/9quDlV3cx3v++4o5jL 46r2b53gi/HoBfq6ASWGHfTZxIUkjZJJeiDNRy6y66fWYV1mcaCZ/siVxkMrSIOn ZRxL5/1JYSu27NvutMBQfBxAHd6Lk2KvgQIVMK+dv/Mh2IC9ldGpdY+81OCwBneO JqU33fCWAYuUGfh8cFKTJnQgzPWCq/fNzMLrdH/nBmkFS5XUrxLSgIdLtmUUUWi6 UzvBuuRGphe63krpY69w0fJd75G6+A8YK249I8p3iO5DvPc8wcvxsHeLaEdvAM8k POlyqhGgxshSzscN -----END CERTIFICATE-----Generated at Mon Jul 27 00:54:01 2026 by rpki-client