$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fadebb9d-33cc-429b-aa35-10634a8b1dd4/0/35B52EF20A5730A6261D6D1916C6B747FF3C2852.mft File: 35B52EF20A5730A6261D6D1916C6B747FF3C2852.mft (raw, json) Hash identifier: n42xqbVlZaTgfJmqKCmA+5CDnek+7pBRiN/gjnPjluA= Subject key identifier: 7F:5F:61:80:3E:7E:06:6D:53:59:35:DB:95:D7:D3:4B:88:06:AE:14 Authority key identifier: 35:B5:2E:F2:0A:57:30:A6:26:1D:6D:19:16:C6:B7:47:FF:3C:28:52 Certificate issuer: /CN=35B52EF20A5730A6261D6D1916C6B747FF3C2852 Certificate serial: 4ACD8D348E2865B0A7B3A61EB35F1DE792FC15BD Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/35B52EF20A5730A6261D6D1916C6B747FF3C2852.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fadebb9d-33cc-429b-aa35-10634a8b1dd4/0/35B52EF20A5730A6261D6D1916C6B747FF3C2852.mft Manifest number: 0148 Signing time: Fri 24 Oct 2025 19:52:04 +0000 Manifest this update: Fri 24 Oct 2025 19:47:04 +0000 Manifest next update: Sat 25 Oct 2025 23:42:04 +0000 Files and hashes: 1: 326131343a373538313a323130303a3a2f34302d3430203d3e20343031333836.roa (hash: T25tbrYVZpBemZDjqgpA9HPrUcZHUwwg3LOVGpsmSZ8=) 2: 326131343a373538313a323930303a3a2f34302d3438203d3e20323039313039.roa (hash: ENamU9VlpUh2S5yKvYrAp12SwLl/9Jv38ffU+yHH5Iw=) 3: 326131343a373538313a326630313a3a2f34382d3438203d3e20343031333836.roa (hash: SLj141CGncsBb5vfud/Xh4MbUscTfgukNtFTpVVNYzk=) 4: 326131343a373538313a323830303a3a2f34302d3438203d3e20323039313039.roa (hash: U1r4ZvjM4KXIBEm7hpH6+0Qd/LSsHMlknATpB6yDZ90=) 5: 35B52EF20A5730A6261D6D1916C6B747FF3C2852.crl (hash: sm+expXdUL3Vr8M+t0KIbqUpjql+wlCrmSl8p7VIMj8=) 6: 326131343a373538313a323030303a3a2f34302d3438203d3e20323136333234.roa (hash: bje5aLLUqgAL8DyPjKPS1MwDhANSqShDo64yB6sarZo=) 7: 326131343a373538313a323030303a3a2f34302d3438203d3e20323135333634.roa (hash: iPZr810Wf3G2BF1Yx0TXVCnIMBYWmzqlqsIx/XIB/Cc=) 8: 326131343a373538313a323530303a3a2f34302d3430203d3e203134343437.roa (hash: 2DfIdT8hQ452p9tTWwGSgv6G5KrCdvIla2RYi0wqius=) 9: 326131343a373538313a326630303a3a2f34382d3438203d3e20343031333836.roa (hash: PQEJzzZkaWaRihPz0qFSxn/fBL9FvQBY7Es5NvynDQM=) 10: 326131343a373538313a323230303a3a2f34302d3430203d3e20343031333836.roa (hash: xASXurrkB21YmULJQ68AjQqXl8iRC/GmjrwM45TRghc=) 11: 326131343a373538313a323330303a3a2f34302d3430203d3e20343031333836.roa (hash: 0cCFPlcOjS3xWnb1dJLZXDYv3McRJuNCq2FLbccHCeQ=) 12: 326131343a373538313a323630303a3a2f34302d3438203d3e20323039313039.roa (hash: Ah/styCnPIoGFWiO0PQ2rB66bvMdDv2NyL9mrkcrCj4=) 13: 326131343a373538313a323030303a3a2f34302d3438203d3e20333936303530.roa (hash: yUvus43IfO0AT/ck5bMQHbMTgP3EN2v06hq4szCBm40=) 14: 326131343a373538313a323030303a3a2f34302d3438203d3e20343031333836.roa (hash: pi4F6jgMqqwUP1FTiOnfocpEw1DljOaDr1vx1pIBms8=) 15: 326131343a373538313a323030303a3a2f34302d3438203d3e20323039313039.roa (hash: lRerEWAZYVnj4WeC0lksu5JXgu5ks2mpqCgBEDRR0Q0=) 16: 326131343a373538313a323730303a3a2f34302d3438203d3e20323039313039.roa (hash: MFKFuWCDL66Zxs5f3hEeRn+2JW7mEBoWjT7f6AJBOhM=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fadebb9d-33cc-429b-aa35-10634a8b1dd4/0/35B52EF20A5730A6261D6D1916C6B747FF3C2852.crl rsync://rsync.paas.rpki.ripe.net/repository/fadebb9d-33cc-429b-aa35-10634a8b1dd4/0/35B52EF20A5730A6261D6D1916C6B747FF3C2852.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/35B52EF20A5730A6261D6D1916C6B747FF3C2852.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 25 Oct 2025 22:46:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:cd:8d:34:8e:28:65:b0:a7:b3:a6:1e:b3:5f:1d:e7:92:fc:15:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35B52EF20A5730A6261D6D1916C6B747FF3C2852 Validity Not Before: Oct 24 19:47:04 2025 GMT Not After : Oct 25 23:42:04 2025 GMT Subject: CN=7F5F61803E7E066D535935DB95D7D34B8806AE14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:b8:43:66:76:05:37:39:f9:66:5b:7b:7c:74: 47:71:2a:28:3f:b5:16:9d:83:c4:ba:ca:41:52:be: 01:10:9a:7c:97:68:de:3e:cb:89:19:71:63:79:60: 1c:a8:7e:5a:a6:0f:1a:9e:f7:24:83:51:f1:79:fe: be:c9:59:29:50:a0:a4:86:67:59:30:f1:52:14:df: a4:a3:c4:1c:72:e8:89:0a:9f:8a:b6:10:9c:da:13: 01:a9:a6:e3:1e:7a:b8:b0:de:bb:9d:33:95:07:4a: 38:d2:9d:50:e8:fb:bb:cf:04:fa:24:a2:c7:59:f8: dd:4e:59:7a:38:74:5e:0f:3c:3c:70:9a:65:d3:cc: 43:c7:a0:43:c3:c2:b9:a6:b9:a6:3a:82:fd:3e:cf: 6d:5b:09:ec:db:a3:b5:a5:1e:e1:0c:92:56:46:ab: 3f:75:4d:c5:f5:07:e3:ad:7b:2e:c7:b2:8a:2e:9e: ed:bb:a1:b1:da:bd:48:fc:90:d9:d2:61:67:7e:50: bc:3c:c0:97:19:c6:9c:d0:d6:32:2b:01:db:61:ac: 4e:2d:ab:53:35:6d:90:0d:4c:fa:ce:7e:ea:e5:9e: 28:b8:93:63:55:eb:86:a6:cc:64:5f:90:9b:fa:57: 9d:b2:a6:a4:27:78:f5:18:cd:07:20:47:00:15:42: 64:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:5F:61:80:3E:7E:06:6D:53:59:35:DB:95:D7:D3:4B:88:06:AE:14 X509v3 Authority Key Identifier: keyid:35:B5:2E:F2:0A:57:30:A6:26:1D:6D:19:16:C6:B7:47:FF:3C:28:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fadebb9d-33cc-429b-aa35-10634a8b1dd4/0/35B52EF20A5730A6261D6D1916C6B747FF3C2852.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/35B52EF20A5730A6261D6D1916C6B747FF3C2852.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fadebb9d-33cc-429b-aa35-10634a8b1dd4/0/35B52EF20A5730A6261D6D1916C6B747FF3C2852.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:c1:50:7e:6a:57:52:d1:f9:4f:a5:4c:d9:f3:27:42:21:1f: be:85:a0:c2:7f:15:42:43:fd:a0:8f:e9:2b:2a:4b:48:16:88: 37:5e:ef:e9:41:a3:2f:26:3f:41:5e:54:f7:27:73:4e:3f:bd: 3a:0b:3d:ae:9e:5d:6d:c1:6d:9f:63:99:9d:ff:51:fa:17:0d: e1:c5:66:8a:88:5a:4f:ab:b5:dc:2a:13:fa:44:df:7a:9b:d7: ce:16:9f:c4:e5:97:3d:1f:7c:8c:71:fd:c9:4e:93:dc:09:48: b2:e7:54:1b:b3:3b:4e:7f:96:f6:cf:c1:81:61:47:fd:7c:f1: 36:74:0a:42:ca:6d:19:1c:ac:6a:ef:40:63:0c:06:f7:e9:ad: 2a:80:c8:3d:23:d1:ab:a6:d3:24:00:d1:b4:b9:b6:8e:7e:30: 75:2b:7c:92:61:8f:ca:2a:02:ff:d7:a0:3c:57:67:d0:50:05: d7:3b:83:35:39:5f:b4:d1:82:34:ea:d6:ca:0b:44:28:25:88: 2b:8a:d0:8d:68:c1:3e:91:39:ba:a2:8a:46:4e:5c:08:cb:12: 22:84:47:66:2a:33:e8:48:7a:1e:c6:05:07:18:bf:14:3a:71: d2:bf:3c:7b:31:b3:c5:b2:9b:84:74:54:15:82:84:eb:9a:c2: 56:de:27:aa -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUSs2NNI4oZbCns6Yes18d55L8Fb0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzVCNTJFRjIwQTU3MzBBNjI2MUQ2RDE5MTZDNkI3NDdG RjNDMjg1MjAeFw0yNTEwMjQxOTQ3MDRaFw0yNTEwMjUyMzQyMDRaMDMxMTAvBgNV BAMTKDdGNUY2MTgwM0U3RTA2NkQ1MzU5MzVEQjk1RDdEMzRCODgwNkFFMTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5uENmdgU3OflmW3t8dEdxKig/ tRadg8S6ykFSvgEQmnyXaN4+y4kZcWN5YByoflqmDxqe9ySDUfF5/r7JWSlQoKSG Z1kw8VIU36SjxBxy6IkKn4q2EJzaEwGppuMeeriw3rudM5UHSjjSnVDo+7vPBPok osdZ+N1OWXo4dF4PPDxwmmXTzEPHoEPDwrmmuaY6gv0+z21bCezbo7WlHuEMklZG qz91TcX1B+Otey7Hsoounu27obHavUj8kNnSYWd+ULw8wJcZxpzQ1jIrAdthrE4t q1M1bZANTPrOfurlnii4k2NV64amzGRfkJv6V52ypqQnePUYzQcgRwAVQmQ9AgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUf19hgD5+Bm1TWTXbldfTS4gGrhQwHwYDVR0j BBgwFoAUNbUu8gpXMKYmHW0ZFsa3R/88KFIwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZmFkZWJiOWQtMzNjYy00MjliLWFhMzUtMTA2MzRhOGIx ZGQ0LzAvMzVCNTJFRjIwQTU3MzBBNjI2MUQ2RDE5MTZDNkI3NDdGRjNDMjg1Mi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC8zNUI1MkVGMjBBNTczMEE2MjYxRDZEMTkx NkM2Qjc0N0ZGM0MyODUyLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2ZhZGViYjlkLTMzY2MtNDI5Yi1hYTM1LTEwNjM0YThiMWRkNC8wLzM1QjUyRUYy MEE1NzMwQTYyNjFENkQxOTE2QzZCNzQ3RkYzQzI4NTIubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAzwVB+ aldS0flPpUzZ8ydCIR++haDCfxVCQ/2gj+krKktIFog3Xu/pQaMvJj9BXlT3J3NO P706Cz2unl1twW2fY5md/1H6Fw3hxWaKiFpPq7XcKhP6RN96m9fOFp/E5Zc9H3yM cf3JTpPcCUiy51QbsztOf5b2z8GBYUf9fPE2dApCym0ZHKxq70BjDAb36a0qgMg9 I9GrptMkANG0ubaOfjB1K3ySYY/KKgL/16A8V2fQUAXXO4M1OV+00YI06tbKC0Qo JYgritCNaME+kTm6oopGTlwIyxIihEdmKjPoSHoexgUHGL8UOnHSvzx7MbPFspuE dFQVgoTrmsJW3ieq -----END CERTIFICATE-----Generated at Sat Oct 25 09:10:43 2025 by rpki-client