$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fadebb9d-33cc-429b-aa35-10634a8b1dd4/0/35B52EF20A5730A6261D6D1916C6B747FF3C2852.mft File: 35B52EF20A5730A6261D6D1916C6B747FF3C2852.mft (raw, json) Hash identifier: bnnJA1DC2XtTqH8+a/naZIs/6WIBwk14f20PiBJfdh4= Subject key identifier: 05:1E:24:99:42:25:8D:90:AB:75:A6:38:32:23:0F:6E:38:24:08:E8 Authority key identifier: 35:B5:2E:F2:0A:57:30:A6:26:1D:6D:19:16:C6:B7:47:FF:3C:28:52 Certificate issuer: /CN=35B52EF20A5730A6261D6D1916C6B747FF3C2852 Certificate serial: 3799668BB3E7B494F583A086535073A336F87933 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/35B52EF20A5730A6261D6D1916C6B747FF3C2852.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fadebb9d-33cc-429b-aa35-10634a8b1dd4/0/35B52EF20A5730A6261D6D1916C6B747FF3C2852.mft Manifest number: 0203 Signing time: Fri 13 Mar 2026 09:46:10 +0000 Manifest this update: Fri 13 Mar 2026 09:41:08 +0000 Manifest next update: Sat 14 Mar 2026 10:37:08 +0000 Files and hashes: 1: 326131343a373538313a323230303a3a2f34302d3430203d3e20343031333836.roa (hash: WHkf4m6DzfoyrufCoOAxeFwtqFzFGCors6ZbsGaGLa8=) 2: 326131343a373538313a323030303a3a2f34302d3438203d3e20323135333634.roa (hash: iPZr810Wf3G2BF1Yx0TXVCnIMBYWmzqlqsIx/XIB/Cc=) 3: 326131343a373538313a323530303a3a2f34302d3430203d3e203134343437.roa (hash: 2DfIdT8hQ452p9tTWwGSgv6G5KrCdvIla2RYi0wqius=) 4: 326131343a373538313a323630303a3a2f34302d3438203d3e20323039313039.roa (hash: Ah/styCnPIoGFWiO0PQ2rB66bvMdDv2NyL9mrkcrCj4=) 5: 326131343a373538313a323030303a3a2f34302d3438203d3e20333936303530.roa (hash: yUvus43IfO0AT/ck5bMQHbMTgP3EN2v06hq4szCBm40=) 6: 326131343a373538313a323830303a3a2f34302d3438203d3e20323039313039.roa (hash: U1r4ZvjM4KXIBEm7hpH6+0Qd/LSsHMlknATpB6yDZ90=) 7: 326131343a373538313a326630313a3a2f34382d3438203d3e20343031333836.roa (hash: qMwS539lNZFoubA7sJWCkka1wt0G8zXYNPGQsBc3Exo=) 8: 326131343a373538313a323130303a3a2f34302d3430203d3e20343031333836.roa (hash: DLjQUjmP+DsaW9+BMh56ieI2Ec94mZJVyHTBFU7NtcI=) 9: 326131343a373538313a323030303a3a2f34302d3438203d3e20323136333234.roa (hash: bje5aLLUqgAL8DyPjKPS1MwDhANSqShDo64yB6sarZo=) 10: 326131343a373538313a323030303a3a2f34302d3438203d3e20323039313039.roa (hash: lRerEWAZYVnj4WeC0lksu5JXgu5ks2mpqCgBEDRR0Q0=) 11: 326131343a373538313a323930303a3a2f34302d3438203d3e20323039313039.roa (hash: ENamU9VlpUh2S5yKvYrAp12SwLl/9Jv38ffU+yHH5Iw=) 12: 326131343a373538313a323730303a3a2f34302d3438203d3e20323039313039.roa (hash: MFKFuWCDL66Zxs5f3hEeRn+2JW7mEBoWjT7f6AJBOhM=) 13: 326131343a373538313a323030303a3a2f34302d3438203d3e20343031333836.roa (hash: pi4F6jgMqqwUP1FTiOnfocpEw1DljOaDr1vx1pIBms8=) 14: 35B52EF20A5730A6261D6D1916C6B747FF3C2852.crl (hash: eBZoX2qDA32pSebd8Avg9md9qr95yze87Cn9UdMbNM0=) 15: 326131343a373538313a323330303a3a2f34302d3430203d3e20343031333836.roa (hash: GU9+rKAYRqNo9YIwP+TkUZlOwC3QOJ/ceUAdYXuG73A=) 16: 326131343a373538313a326630303a3a2f34382d3438203d3e20343031333836.roa (hash: hhnXez1MtyG/OWqeDWj8Yk7vwpb6xK8SsXbhq+WvHw8=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fadebb9d-33cc-429b-aa35-10634a8b1dd4/0/35B52EF20A5730A6261D6D1916C6B747FF3C2852.crl rsync://rsync.paas.rpki.ripe.net/repository/fadebb9d-33cc-429b-aa35-10634a8b1dd4/0/35B52EF20A5730A6261D6D1916C6B747FF3C2852.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/35B52EF20A5730A6261D6D1916C6B747FF3C2852.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 14 Mar 2026 09:00:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:99:66:8b:b3:e7:b4:94:f5:83:a0:86:53:50:73:a3:36:f8:79:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35B52EF20A5730A6261D6D1916C6B747FF3C2852 Validity Not Before: Mar 13 09:41:08 2026 GMT Not After : Mar 14 10:37:08 2026 GMT Subject: CN=051E249942258D90AB75A63832230F6E382408E8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:e1:1d:9a:e1:44:06:3f:06:cb:c6:87:9e:33: 7c:b3:b9:60:8b:ee:d4:15:7a:63:5e:9f:d7:79:7a: 08:19:bc:95:b3:95:89:1b:95:a0:4a:54:f6:ce:cd: ba:e1:78:b7:76:06:5e:53:c9:cd:3d:17:56:c2:96: ce:73:c9:4d:80:55:0e:29:e4:d9:de:a9:8b:ac:5b: 3f:95:5a:90:c7:68:c2:0f:7e:69:7d:4b:e4:50:4b: ad:de:eb:ce:e4:60:24:88:70:9a:29:40:55:f7:09: d3:98:f9:44:28:a8:8a:fd:96:1d:48:d2:a5:00:91: ae:fc:1b:99:38:38:f1:ed:3e:38:0c:7c:05:a3:fd: cf:ec:8c:48:23:03:7a:0b:1a:ab:7d:24:d2:90:15: 69:56:88:bd:b9:85:f5:67:7e:2a:52:3a:80:94:28: df:cf:75:e2:19:c8:ca:b0:6c:29:55:8c:19:cb:ce: c8:79:c7:2b:fb:4e:51:74:b9:2a:64:5d:31:50:dd: cd:83:6b:b2:8b:6c:78:86:39:08:4a:7c:41:58:0e: da:d2:57:58:5e:97:3c:8f:6b:9b:88:26:97:1a:40: c8:f1:72:a2:e2:d8:b2:96:dd:c4:83:c5:f5:e5:72: 57:1e:5e:e8:fb:79:40:42:01:a8:2a:58:a4:34:62: b2:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:1E:24:99:42:25:8D:90:AB:75:A6:38:32:23:0F:6E:38:24:08:E8 X509v3 Authority Key Identifier: keyid:35:B5:2E:F2:0A:57:30:A6:26:1D:6D:19:16:C6:B7:47:FF:3C:28:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fadebb9d-33cc-429b-aa35-10634a8b1dd4/0/35B52EF20A5730A6261D6D1916C6B747FF3C2852.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/35B52EF20A5730A6261D6D1916C6B747FF3C2852.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fadebb9d-33cc-429b-aa35-10634a8b1dd4/0/35B52EF20A5730A6261D6D1916C6B747FF3C2852.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:5d:bf:8a:03:e7:f0:8f:9c:cb:cb:67:d8:3c:a5:c6:58:de: 6d:e0:57:aa:c2:5e:de:88:cf:73:cd:c1:3a:0f:eb:d5:92:ed: 33:27:fc:3b:da:cf:e3:b3:96:db:f7:bb:8c:49:65:a3:32:7e: 1a:02:5f:17:66:e9:10:a9:7b:30:7d:9c:9b:b3:e0:16:a9:8f: 1c:55:6d:03:59:ef:7b:c5:ae:f8:16:1e:2e:87:8e:3e:bc:a9: a0:9c:14:c3:34:4b:24:fc:5d:54:36:c1:61:0c:0a:e0:7d:4e: aa:3e:4b:18:72:f7:b8:c1:50:ca:35:98:39:ce:f2:ef:08:9d: 73:ab:f1:ff:42:e6:44:24:81:61:43:db:e9:2f:d7:57:36:5f: cb:3f:b9:50:23:ab:bc:90:5c:f8:ce:27:47:cb:d1:48:03:40: 16:0c:4b:cb:16:b0:b9:f5:0f:fe:9a:05:51:99:83:79:73:2b: 51:a6:c3:c9:6f:24:09:64:bf:04:45:42:d1:17:b7:cf:a3:73: 6a:2f:d1:b6:c5:2d:99:77:1b:54:fa:3b:a6:fc:d5:f6:3f:68: a2:9f:35:4a:81:84:05:3b:3a:db:cb:40:fb:b3:76:e4:5e:88: f5:ed:5e:52:a5:9f:bf:43:da:bf:60:39:4d:6e:8b:b6:f9:50: 70:ed:13:af -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUN5lmi7PntJT1g6CGU1Bzozb4eTMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzVCNTJFRjIwQTU3MzBBNjI2MUQ2RDE5MTZDNkI3NDdG RjNDMjg1MjAeFw0yNjAzMTMwOTQxMDhaFw0yNjAzMTQxMDM3MDhaMDMxMTAvBgNV BAMTKDA1MUUyNDk5NDIyNThEOTBBQjc1QTYzODMyMjMwRjZFMzgyNDA4RTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDX4R2a4UQGPwbLxoeeM3yzuWCL 7tQVemNen9d5eggZvJWzlYkblaBKVPbOzbrheLd2Bl5Tyc09F1bCls5zyU2AVQ4p 5NneqYusWz+VWpDHaMIPfml9S+RQS63e687kYCSIcJopQFX3CdOY+UQoqIr9lh1I 0qUAka78G5k4OPHtPjgMfAWj/c/sjEgjA3oLGqt9JNKQFWlWiL25hfVnfipSOoCU KN/PdeIZyMqwbClVjBnLzsh5xyv7TlF0uSpkXTFQ3c2Da7KLbHiGOQhKfEFYDtrS V1helzyPa5uIJpcaQMjxcqLi2LKW3cSDxfXlclceXuj7eUBCAagqWKQ0YrKTAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUBR4kmUIljZCrdaY4MiMPbjgkCOgwHwYDVR0j BBgwFoAUNbUu8gpXMKYmHW0ZFsa3R/88KFIwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZmFkZWJiOWQtMzNjYy00MjliLWFhMzUtMTA2MzRhOGIx ZGQ0LzAvMzVCNTJFRjIwQTU3MzBBNjI2MUQ2RDE5MTZDNkI3NDdGRjNDMjg1Mi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC8zNUI1MkVGMjBBNTczMEE2MjYxRDZEMTkx NkM2Qjc0N0ZGM0MyODUyLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2ZhZGViYjlkLTMzY2MtNDI5Yi1hYTM1LTEwNjM0YThiMWRkNC8wLzM1QjUyRUYy MEE1NzMwQTYyNjFENkQxOTE2QzZCNzQ3RkYzQzI4NTIubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAeXb+K A+fwj5zLy2fYPKXGWN5t4Feqwl7eiM9zzcE6D+vVku0zJ/w72s/js5bb97uMSWWj Mn4aAl8XZukQqXswfZybs+AWqY8cVW0DWe97xa74Fh4uh44+vKmgnBTDNEsk/F1U NsFhDArgfU6qPksYcve4wVDKNZg5zvLvCJ1zq/H/QuZEJIFhQ9vpL9dXNl/LP7lQ I6u8kFz4zidHy9FIA0AWDEvLFrC59Q/+mgVRmYN5cytRpsPJbyQJZL8ERULRF7fP o3NqL9G2xS2ZdxtU+jum/NX2P2iinzVKgYQFOzrby0D7s3bkXoj17V5SpZ+/Q9q/ YDlNbou2+VBw7ROv -----END CERTIFICATE-----Generated at Fri Mar 13 15:30:42 2026 by rpki-client