$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fadebb9d-33cc-429b-aa35-10634a8b1dd4/0/35B52EF20A5730A6261D6D1916C6B747FF3C2852.mft File: 35B52EF20A5730A6261D6D1916C6B747FF3C2852.mft (raw, json) Hash identifier: q2pJKqA7beLCeVKWTHUPmXewzaHym+bw5yQ77dOsask= Subject key identifier: 2B:D3:5A:B9:00:41:A4:4E:A0:BC:57:A1:89:29:38:AE:70:DE:5E:C9 Authority key identifier: 35:B5:2E:F2:0A:57:30:A6:26:1D:6D:19:16:C6:B7:47:FF:3C:28:52 Certificate issuer: /CN=35B52EF20A5730A6261D6D1916C6B747FF3C2852 Certificate serial: 6DC8EE682D5BFEF8833B82A627D35C3B84221936 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/35B52EF20A5730A6261D6D1916C6B747FF3C2852.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fadebb9d-33cc-429b-aa35-10634a8b1dd4/0/35B52EF20A5730A6261D6D1916C6B747FF3C2852.mft Manifest number: 027C Signing time: Thu 11 Jun 2026 16:40:45 +0000 Manifest this update: Thu 11 Jun 2026 16:35:45 +0000 Manifest next update: Fri 12 Jun 2026 17:25:45 +0000 Files and hashes: 1: 326131343a373538313a323030303a3a2f34302d3438203d3e20343031333836.roa (hash: UDRqDR0JMowXqg92cpDjRfR7VLQyzzQdpbzczBoUKPE=) 2: 326131343a373538313a323030303a3a2f34302d3438203d3e20323136333234.roa (hash: 94LHGHEmr5Ow8y0LgQ8OziBDUOK8WBX/6zymxyfianM=) 3: 35B52EF20A5730A6261D6D1916C6B747FF3C2852.crl (hash: kJLX+hjy/yWEozk0awIrfqSj/4KYYU2vXO0DNeNYJYg=) 4: 326131343a373538313a323230303a3a2f34302d3430203d3e20343031333836.roa (hash: WHkf4m6DzfoyrufCoOAxeFwtqFzFGCors6ZbsGaGLa8=) 5: 326131343a373538313a323930303a3a2f34302d3438203d3e20323039313039.roa (hash: ENamU9VlpUh2S5yKvYrAp12SwLl/9Jv38ffU+yHH5Iw=) 6: 326131343a373538313a323830303a3a2f34302d3438203d3e20323039313039.roa (hash: U1r4ZvjM4KXIBEm7hpH6+0Qd/LSsHMlknATpB6yDZ90=) 7: 326131343a373538313a323330303a3a2f34302d3430203d3e20343031333836.roa (hash: GU9+rKAYRqNo9YIwP+TkUZlOwC3QOJ/ceUAdYXuG73A=) 8: 326131343a373538313a323030303a3a2f34302d3438203d3e20333936303530.roa (hash: sHH5EXfl8KcOz9d8oEb74NyMVuJWDbdSziQULSKFDd4=) 9: 326131343a373538313a326630313a3a2f34382d3438203d3e20343031333836.roa (hash: qMwS539lNZFoubA7sJWCkka1wt0G8zXYNPGQsBc3Exo=) 10: 326131343a373538313a323630303a3a2f34302d3438203d3e20323039313039.roa (hash: Ah/styCnPIoGFWiO0PQ2rB66bvMdDv2NyL9mrkcrCj4=) 11: 326131343a373538313a323130303a3a2f34302d3430203d3e20343031333836.roa (hash: DLjQUjmP+DsaW9+BMh56ieI2Ec94mZJVyHTBFU7NtcI=) 12: 326131343a373538313a323030303a3a2f34302d3438203d3e20323039313039.roa (hash: tf4CnuzuqcNJkCPREEFPykMzx34y8Ud9hQ2hyeqIDkc=) 13: 326131343a373538313a323030303a3a2f34302d3438203d3e20323135333634.roa (hash: Qbpxn6m6N57BLQ/qLjGEPLIZz8aoJQbWLiHDKsDlsdk=) 14: 326131343a373538313a323730303a3a2f34302d3438203d3e20323039313039.roa (hash: MFKFuWCDL66Zxs5f3hEeRn+2JW7mEBoWjT7f6AJBOhM=) 15: 326131343a373538313a323530303a3a2f34302d3430203d3e203134343437.roa (hash: 2DfIdT8hQ452p9tTWwGSgv6G5KrCdvIla2RYi0wqius=) 16: 326131343a373538313a326630303a3a2f34382d3438203d3e20343031333836.roa (hash: hhnXez1MtyG/OWqeDWj8Yk7vwpb6xK8SsXbhq+WvHw8=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fadebb9d-33cc-429b-aa35-10634a8b1dd4/0/35B52EF20A5730A6261D6D1916C6B747FF3C2852.crl rsync://rsync.paas.rpki.ripe.net/repository/fadebb9d-33cc-429b-aa35-10634a8b1dd4/0/35B52EF20A5730A6261D6D1916C6B747FF3C2852.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/35B52EF20A5730A6261D6D1916C6B747FF3C2852.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Jun 2026 13:27:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:c8:ee:68:2d:5b:fe:f8:83:3b:82:a6:27:d3:5c:3b:84:22:19:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35B52EF20A5730A6261D6D1916C6B747FF3C2852 Validity Not Before: Jun 11 16:35:45 2026 GMT Not After : Jun 12 17:25:45 2026 GMT Subject: CN=2BD35AB90041A44EA0BC57A1892938AE70DE5EC9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:56:5a:2b:32:96:4b:ca:f2:1b:6e:e8:de:5f: cb:24:53:04:98:ad:c3:20:65:a4:29:35:b9:44:f8: 9d:6b:43:26:6b:3c:37:ae:5b:50:35:e7:e9:c4:e5: 5a:31:69:a0:75:43:44:da:18:b0:07:09:65:13:38: d7:06:d2:03:5d:fb:2e:bc:85:80:2e:56:e7:bf:8c: 84:b8:76:b3:62:56:10:d3:f7:6b:8a:8a:29:2a:a1: 18:83:b4:05:44:6e:7c:f9:82:7b:bb:5d:dd:b8:e2: 17:59:d0:9b:29:e5:52:ca:1a:b6:f1:d6:5b:83:6d: 3f:d2:46:91:97:eb:51:8a:a8:fb:5d:73:aa:cc:eb: 83:54:91:47:fb:1b:03:43:81:75:f8:c4:da:3b:15: 05:e6:29:47:de:67:0e:e3:6f:e2:c9:e5:cf:96:0f: 06:c5:7e:d6:a5:fb:3c:c3:8e:f7:aa:36:a5:83:d7: 85:48:62:71:f7:63:4b:24:9a:6f:84:dc:96:04:50: 01:89:10:ad:0c:19:09:7d:99:fd:03:8b:58:57:28: 75:f6:0e:c4:cc:88:a0:b7:f7:03:6f:88:e3:00:8e: 4e:83:01:9a:6f:20:dc:f1:75:8b:87:f4:0b:6a:31: a8:e9:d5:e8:b5:44:b7:4d:67:d8:dc:3c:e5:cd:6d: 50:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:D3:5A:B9:00:41:A4:4E:A0:BC:57:A1:89:29:38:AE:70:DE:5E:C9 X509v3 Authority Key Identifier: keyid:35:B5:2E:F2:0A:57:30:A6:26:1D:6D:19:16:C6:B7:47:FF:3C:28:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fadebb9d-33cc-429b-aa35-10634a8b1dd4/0/35B52EF20A5730A6261D6D1916C6B747FF3C2852.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/35B52EF20A5730A6261D6D1916C6B747FF3C2852.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fadebb9d-33cc-429b-aa35-10634a8b1dd4/0/35B52EF20A5730A6261D6D1916C6B747FF3C2852.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:99:de:1f:a7:6b:12:8e:00:17:87:1f:ac:fa:8a:19:74:f9: 5b:24:1c:59:60:c6:e1:ae:d8:36:b3:18:21:14:3d:30:55:dc: 3c:96:78:bb:f7:db:50:2d:5b:9a:f4:68:08:b2:ab:a4:d2:91: 58:24:ab:c1:85:20:80:1f:20:db:b3:bd:1b:14:00:9d:83:33: f3:88:15:8f:63:24:18:f4:9b:61:eb:59:19:30:66:42:a2:33: a0:19:cd:53:df:3f:80:64:7f:0d:51:8c:a7:f4:7b:e7:30:ad: 6b:7c:26:b5:19:47:ed:e5:ba:03:9c:69:0d:5d:db:df:22:1f: dc:84:e5:f8:20:a1:b6:a7:9b:30:db:66:e3:40:0b:84:9d:3e: f4:a1:f6:b8:ab:f2:d0:6a:67:47:4d:a3:44:24:0a:55:10:43: 85:96:e0:30:63:6d:7f:c1:82:0e:42:ce:88:a1:a9:cb:9b:bb: 5b:7c:73:cb:02:7b:ce:49:e0:58:88:e8:db:7b:12:3c:57:b6: c7:83:11:08:cb:57:fe:e1:fb:70:ac:26:16:d6:9f:0f:5a:48: 77:40:1d:3f:4e:2f:94:d9:89:c8:2d:1b:81:3d:86:05:16:f4: 51:3e:e4:ac:18:27:39:19:af:24:51:9d:61:a9:e1:14:de:f2: 39:a0:65:97 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUbcjuaC1b/viDO4KmJ9NcO4QiGTYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzVCNTJFRjIwQTU3MzBBNjI2MUQ2RDE5MTZDNkI3NDdG RjNDMjg1MjAeFw0yNjA2MTExNjM1NDVaFw0yNjA2MTIxNzI1NDVaMDMxMTAvBgNV BAMTKDJCRDM1QUI5MDA0MUE0NEVBMEJDNTdBMTg5MjkzOEFFNzBERTVFQzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkVlorMpZLyvIbbujeX8skUwSY rcMgZaQpNblE+J1rQyZrPDeuW1A15+nE5VoxaaB1Q0TaGLAHCWUTONcG0gNd+y68 hYAuVue/jIS4drNiVhDT92uKiikqoRiDtAVEbnz5gnu7Xd244hdZ0Jsp5VLKGrbx 1luDbT/SRpGX61GKqPtdc6rM64NUkUf7GwNDgXX4xNo7FQXmKUfeZw7jb+LJ5c+W DwbFftal+zzDjveqNqWD14VIYnH3Y0skmm+E3JYEUAGJEK0MGQl9mf0Di1hXKHX2 DsTMiKC39wNviOMAjk6DAZpvINzxdYuH9AtqMajp1ei1RLdNZ9jcPOXNbVC/AgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUK9NauQBBpE6gvFehiSk4rnDeXskwHwYDVR0j BBgwFoAUNbUu8gpXMKYmHW0ZFsa3R/88KFIwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZmFkZWJiOWQtMzNjYy00MjliLWFhMzUtMTA2MzRhOGIx ZGQ0LzAvMzVCNTJFRjIwQTU3MzBBNjI2MUQ2RDE5MTZDNkI3NDdGRjNDMjg1Mi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC8zNUI1MkVGMjBBNTczMEE2MjYxRDZEMTkx NkM2Qjc0N0ZGM0MyODUyLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2ZhZGViYjlkLTMzY2MtNDI5Yi1hYTM1LTEwNjM0YThiMWRkNC8wLzM1QjUyRUYy MEE1NzMwQTYyNjFENkQxOTE2QzZCNzQ3RkYzQzI4NTIubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAPmd4f p2sSjgAXhx+s+ooZdPlbJBxZYMbhrtg2sxghFD0wVdw8lni799tQLVua9GgIsquk 0pFYJKvBhSCAHyDbs70bFACdgzPziBWPYyQY9Jth61kZMGZCojOgGc1T3z+AZH8N UYyn9HvnMK1rfCa1GUft5boDnGkNXdvfIh/chOX4IKG2p5sw22bjQAuEnT70ofa4 q/LQamdHTaNEJApVEEOFluAwY21/wYIOQs6IoanLm7tbfHPLAnvOSeBYiOjbexI8 V7bHgxEIy1f+4ftwrCYW1p8PWkh3QB0/Ti+U2YnILRuBPYYFFvRRPuSsGCc5Ga8k UZ1hqeEU3vI5oGWX -----END CERTIFICATE-----Generated at Thu Jun 11 20:50:27 2026 by rpki-client