$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3E870B9A7003C4FD9C51BD354A9DEFA3FB77B4A9.mft File: 3E870B9A7003C4FD9C51BD354A9DEFA3FB77B4A9.mft (raw, json) Hash identifier: PjNOvwaKhz/1Qmv+XRa+Vk6q6BU65mlpk7HDcBlyQMg= Subject key identifier: 37:B9:CF:4E:57:41:6D:9C:9B:36:99:FD:6A:D9:7D:CB:39:5D:33:B5 Authority key identifier: 3E:87:0B:9A:70:03:C4:FD:9C:51:BD:35:4A:9D:EF:A3:FB:77:B4:A9 Certificate issuer: /CN=3e870b9a7003c4fd9c51bd354a9defa3fb77b4a9 Certificate serial: 0F22633ADB9604FEB5C12D1EB784A5BC16A5B26F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PocLmnADxP2cUb01Sp3vo_t3tKk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3E870B9A7003C4FD9C51BD354A9DEFA3FB77B4A9.mft Manifest number: 0749 Signing time: Thu 23 Jul 2026 20:43:20 +0000 Manifest this update: Thu 23 Jul 2026 20:38:20 +0000 Manifest next update: Fri 24 Jul 2026 21:17:20 +0000 Files and hashes: 1: 3138352e3234342e39342e302f32342d3234203d3e20333937343233.roa (hash: oZOogcZA7gOpZC0s0tbGMXCZZe5qdoNGw7VhUnq2iag=) 2: 3138352e3133302e36302e302f32342d3234203d3e203131383738.roa (hash: IVpkKpecJIjzuckRW19RYnHFzcqeOz1CHzHhlqd09/8=) 3: 39312e3133322e3232372e302f32342d3234203d3e20323132333335.roa (hash: 4nM6t6s+oklrwoQsrohzelZ9jLVJM3XAMUC6E2raQWI=) 4: 3138352e3131312e3138382e302f32342d3234203d3e203632353633.roa (hash: X7Tn/GpCSEBlmrST5TEKgAjVIubIFvn/OXAnR/EzN3o=) 5: 3138352e3231332e3234302e302f32342d3234203d3e20323135373033.roa (hash: KdpamzjNMoBH12606SSHSE8fPB2oVEwY+/Ehf6CDJmA=) 6: 3138352e3133302e36322e302f32342d3234203d3e20323036313530.roa (hash: 0Uta0mciJtwdV1pzRO+5GA2qv0qJ2rULFPtgrlRyMi0=) 7: 326130363a356563303a3a2f34382d3438203d3e20323034363933.roa (hash: 1uKLPQUne0QcXblB3NW5HCIymd03TIpdjdnWqSBKxm8=) 8: 39312e3133322e3232372e302f32342d3234203d3e20323132333834.roa (hash: eh1Z74wbnDki2jWa8j9mKK2ooveQFWs0ccPHyRr5G7Y=) 9: 3138352e3231332e3234312e302f32342d3234203d3e20383334.roa (hash: aEYdwk8pZMpnBOQ6EYEFlIDJW4KV2rxeCh5VAdhJYA4=) 10: 3138352e3234342e39352e302f32342d3234203d3e203235313938.roa (hash: HsifrjJ4DOl71iVVQ76HW5E2rbqdGN877lYZkYfualI=) 11: 3138352e3133302e36312e302f32342d3234203d3e20323732363936.roa (hash: iEuXNsbf+xsxf1NL3afxi/eNCMhpHPndZJ3OWTl2z+U=) 12: 3E870B9A7003C4FD9C51BD354A9DEFA3FB77B4A9.crl (hash: M6NPo+Ib+AugvNU0IKKDo4TqATEOfzCi1XIhZyT+O+w=) 13: 3138352e3232392e3230312e302f32342d3234203d3e20323030303137.roa (hash: PCz6aeIUTtC34FXSr6irNuWXyhZRMV7yjZ9OeA9cKuk=) 14: 3138352e3231332e3234322e302f32342d3234203d3e203232343237.roa (hash: rxGzTHw2ETBLYdKcURKX80/JYXYHlHWFPETTk7njjlE=) 15: 3138352e3232392e3230322e302f32342d3234203d3e20323130303330.roa (hash: LqK97diQcFrb4344S9ThgI9qIfk24xWO2D6Fzod4ApM=) 16: 3138352e3231332e3234332e302f32342d3234203d3e203330343536.roa (hash: HHWDsn/geYTSKOK374fOgzwqQ04cratsjB9aVUs6qO0=) 17: 3138352e3232392e3230302e302f32342d3234203d3e203235313938.roa (hash: TY0IBnEGyC+d5Or7tdvKYxnLm96FV392uvwD5Jbdhbw=) 18: 3138352e3231332e3234332e302f32342d3234203d3e20323034393238.roa (hash: /82U/4ZCS1l7tEmRqZdiqoHQfHkAV0iGqgAdCf0IY6Q=) 19: 3138352e3133302e36332e302f32342d3234203d3e203332313831.roa (hash: NGEavlC9krxVQb4oA8xeNjVMdvRiumafje1lIvRB/hg=) 20: 3138352e3232392e3230332e302f32342d3234203d3e20323034333939.roa (hash: o2s9iRRo/HWpVNV66/X3K8Nx40dZXcSQ+ar/RSKpLZ4=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3E870B9A7003C4FD9C51BD354A9DEFA3FB77B4A9.crl rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3E870B9A7003C4FD9C51BD354A9DEFA3FB77B4A9.mft rsync://rpki.ripe.net/repository/DEFAULT/PocLmnADxP2cUb01Sp3vo_t3tKk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 24 Jul 2026 21:17:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:22:63:3a:db:96:04:fe:b5:c1:2d:1e:b7:84:a5:bc:16:a5:b2:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e870b9a7003c4fd9c51bd354a9defa3fb77b4a9 Validity Not Before: Jul 23 20:38:20 2026 GMT Not After : Jul 24 21:17:20 2026 GMT Subject: CN=37B9CF4E57416D9C9B3699FD6AD97DCB395D33B5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:72:c4:e1:15:8c:59:1e:4c:eb:96:db:91:79: 52:9d:71:81:31:48:be:a4:3b:73:e3:96:88:2e:6d: 65:15:43:86:9b:5f:a1:96:0c:ce:a7:d5:fb:cd:e0: fb:5e:a3:f3:dd:95:de:d4:55:02:ba:fa:18:6a:60: e2:55:ed:10:ad:59:a5:1b:28:18:92:56:d6:99:c8: 4f:58:2c:4d:3c:15:d4:99:75:65:35:34:d7:e6:b7: 1a:61:b8:da:70:69:33:20:1a:2e:47:00:89:45:9a: 1c:f7:35:7e:ac:67:56:fb:96:a7:a5:89:9c:fc:b5: 66:76:76:45:ce:2c:02:bc:d5:e1:09:24:b2:ad:7e: 3f:28:f3:50:ca:5e:4f:0c:a4:67:52:c1:af:37:1e: c1:ce:a5:c8:f6:da:4e:58:14:1f:96:36:1b:1d:8c: bc:b6:a7:69:e3:15:1f:4a:65:01:dc:8d:20:f5:25: 5c:7c:d1:71:bd:46:fc:57:c9:70:09:1b:00:23:0e: 8c:bb:ff:f2:09:e2:93:15:b5:e5:c6:7a:d9:b9:44: d7:20:e5:73:92:b3:14:b7:7f:df:73:b9:23:db:1d: 28:c6:7b:9a:e3:03:62:fc:1a:6b:d6:9f:06:c9:94: 94:99:62:5f:e8:45:c7:a9:dd:eb:2f:8e:19:ba:fd: de:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:B9:CF:4E:57:41:6D:9C:9B:36:99:FD:6A:D9:7D:CB:39:5D:33:B5 X509v3 Authority Key Identifier: keyid:3E:87:0B:9A:70:03:C4:FD:9C:51:BD:35:4A:9D:EF:A3:FB:77:B4:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3E870B9A7003C4FD9C51BD354A9DEFA3FB77B4A9.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PocLmnADxP2cUb01Sp3vo_t3tKk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3E870B9A7003C4FD9C51BD354A9DEFA3FB77B4A9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 98:47:7a:43:e6:a7:e5:8f:75:d9:a1:99:c9:b7:1e:2c:27:89: 78:a9:82:e7:95:c2:2a:1f:81:62:41:81:b8:3c:65:e8:2c:eb: 01:82:56:14:61:12:48:21:7b:35:fc:b7:e8:db:7b:20:3e:cc: 3b:9a:f6:6d:b5:7e:af:53:ed:f2:ee:1a:41:db:c0:02:1f:56: 1f:a2:db:3f:fc:e6:17:4f:e4:cf:74:89:20:11:ac:aa:bf:a5: ae:39:62:60:d4:36:46:8e:20:dd:fe:d2:ee:0c:dc:ad:f0:41: 16:be:3c:03:eb:e9:73:53:14:3c:c2:d7:f1:0b:03:2d:66:53: 60:f5:87:de:93:3b:24:cc:d6:95:a3:02:f9:e1:e9:b8:a7:36: 42:54:dc:10:d3:7b:de:9e:1b:23:6d:1d:11:34:5c:3f:9e:17: 00:43:dd:cf:8a:02:9b:5c:44:24:a5:e3:74:fa:53:7f:8d:18: 88:16:6e:1f:bb:de:bd:07:f1:e4:11:f7:ee:f7:14:24:5a:36: 1b:81:eb:54:59:c7:32:b7:d6:7f:32:83:63:54:5c:a2:de:3b: ac:8b:f4:49:71:da:14:f7:07:64:ef:2c:2c:8e:c3:6c:fc:0c: 15:22:64:83:7a:e4:8c:8d:ec:8f:73:63:77:a7:7b:1c:10:1a: 2a:5f:d3:f7 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUDyJjOtuWBP61wS0et4SlvBalsm8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM2U4NzBiOWE3MDAzYzRmZDljNTFiZDM1NGE5ZGVmYTNm Yjc3YjRhOTAeFw0yNjA3MjMyMDM4MjBaFw0yNjA3MjQyMTE3MjBaMDMxMTAvBgNV BAMTKDM3QjlDRjRFNTc0MTZEOUM5QjM2OTlGRDZBRDk3RENCMzk1RDMzQjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAcsThFYxZHkzrltuReVKdcYEx SL6kO3PjlogubWUVQ4abX6GWDM6n1fvN4Pteo/Pdld7UVQK6+hhqYOJV7RCtWaUb KBiSVtaZyE9YLE08FdSZdWU1NNfmtxphuNpwaTMgGi5HAIlFmhz3NX6sZ1b7lqel iZz8tWZ2dkXOLAK81eEJJLKtfj8o81DKXk8MpGdSwa83HsHOpcj22k5YFB+WNhsd jLy2p2njFR9KZQHcjSD1JVx80XG9RvxXyXAJGwAjDoy7//IJ4pMVteXGetm5RNcg 5XOSsxS3f99zuSPbHSjGe5rjA2L8GmvWnwbJlJSZYl/oRcep3esvjhm6/d55AgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUN7nPTldBbZybNpn9atl9yzldM7UwHwYDVR0j BBgwFoAUPocLmnADxP2cUb01Sp3vo/t3tKkwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYzVkMThlODItNGQ2OC00NWE2LWE1ZGYtY2FjMTE1YWQy Mjc5LzAvM0U4NzBCOUE3MDAzQzRGRDlDNTFCRDM1NEE5REVGQTNGQjc3QjRBOS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1BvY0xtbkFEeFAyY1ViMDFTcDN2b190 M3RLay5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9jNWQxOGU4Mi00 ZDY4LTQ1YTYtYTVkZi1jYWMxMTVhZDIyNzkvMC8zRTg3MEI5QTcwMDNDNEZEOUM1 MUJEMzU0QTlERUZBM0ZCNzdCNEE5Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmEd6Q+an5Y912aGZybce LCeJeKmC55XCKh+BYkGBuDxl6CzrAYJWFGESSCF7Nfy36Nt7ID7MO5r2bbV+r1Pt 8u4aQdvAAh9WH6LbP/zmF0/kz3SJIBGsqr+lrjliYNQ2Ro4g3f7S7gzcrfBBFr48 A+vpc1MUPMLX8QsDLWZTYPWH3pM7JMzWlaMC+eHpuKc2QlTcENN73p4bI20dETRc P54XAEPdz4oCm1xEJKXjdPpTf40YiBZuH7vevQfx5BH37vcUJFo2G4HrVFnHMrfW fzKDY1Rcot47rIv0SXHaFPcHZO8sLI7DbPwMFSJkg3rkjI3sj3Njd6d7HBAaKl/T 9w== -----END CERTIFICATE-----Generated at Fri Jul 24 04:26:18 2026 by rpki-client