$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3E870B9A7003C4FD9C51BD354A9DEFA3FB77B4A9.mft File: 3E870B9A7003C4FD9C51BD354A9DEFA3FB77B4A9.mft (raw, json) Hash identifier: ZAR53uz9zjHfJPRWSLN/AMnCcRGEqIiydR8xKkj7IVE= Subject key identifier: 85:B0:DE:80:4D:B0:7D:F0:CF:DE:53:55:96:E2:1B:29:99:9A:B2:25 Authority key identifier: 3E:87:0B:9A:70:03:C4:FD:9C:51:BD:35:4A:9D:EF:A3:FB:77:B4:A9 Certificate issuer: /CN=3e870b9a7003c4fd9c51bd354a9defa3fb77b4a9 Certificate serial: 32AFAA44A0C8DBE076E39372391EAE6EA187896F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PocLmnADxP2cUb01Sp3vo_t3tKk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3E870B9A7003C4FD9C51BD354A9DEFA3FB77B4A9.mft Manifest number: 07AC Signing time: Sun 27 Sep 2026 13:49:35 +0000 Manifest this update: Sun 27 Sep 2026 13:44:35 +0000 Manifest next update: Mon 28 Sep 2026 16:18:35 +0000 Files and hashes: 1: 3138352e3133302e36332e302f32342d3234203d3e203332313831.roa (hash: NGEavlC9krxVQb4oA8xeNjVMdvRiumafje1lIvRB/hg=) 2: 3138352e3231332e3234332e302f32342d3234203d3e20323034393238.roa (hash: uCL1WpQqTZHx28v635AJc2UxBy3JsNUOhCCjsYiSzdI=) 3: 3138352e3133302e36302e302f32342d3234203d3e203131383738.roa (hash: IVpkKpecJIjzuckRW19RYnHFzcqeOz1CHzHhlqd09/8=) 4: 3138352e3231332e3234312e302f32342d3234203d3e20323031393037.roa (hash: H+hJVSb3SoCTrrahZtJtGrpdA3V7alBDYoRJDY20rZ8=) 5: 3138352e3131312e3138382e302f32342d3234203d3e203632353633.roa (hash: X7Tn/GpCSEBlmrST5TEKgAjVIubIFvn/OXAnR/EzN3o=) 6: 39312e3133322e3232372e302f32342d3234203d3e20323132333834.roa (hash: eh1Z74wbnDki2jWa8j9mKK2ooveQFWs0ccPHyRr5G7Y=) 7: 3138352e3231332e3234302e302f32342d3234203d3e20323135373033.roa (hash: KdpamzjNMoBH12606SSHSE8fPB2oVEwY+/Ehf6CDJmA=) 8: 3138352e3232392e3230332e302f32342d3234203d3e20323034333939.roa (hash: Gs5ABbPfJ5toptQiquFm8oqwgutT9zFFUytweKBCefo=) 9: 3E870B9A7003C4FD9C51BD354A9DEFA3FB77B4A9.crl (hash: KMdHbt7DYK0/L/ktTmM1Bea7Q4TO60G8aRnjfc8XSMc=) 10: 3138352e3234342e39342e302f32342d3234203d3e20333937343233.roa (hash: oZOogcZA7gOpZC0s0tbGMXCZZe5qdoNGw7VhUnq2iag=) 11: 3138352e3231332e3234312e302f32342d3234203d3e203230343733.roa (hash: ME9v7cOeLgqdWL4SWS9m0HsfFEm4m9vPx70KgvsaHKM=) 12: 39312e3133322e3232372e302f32342d3234203d3e20323132333335.roa (hash: 4nM6t6s+oklrwoQsrohzelZ9jLVJM3XAMUC6E2raQWI=) 13: 3138352e3231332e3234332e302f32342d3234203d3e203330343536.roa (hash: HHWDsn/geYTSKOK374fOgzwqQ04cratsjB9aVUs6qO0=) 14: 3138352e3234342e39352e302f32342d3234203d3e203330303538.roa (hash: 18I/ng9HI5XuObuxE8W3wRTkaWJpr3T1qz3Rt9UUAds=) 15: 3138352e3232392e3230322e302f32342d3234203d3e20323130303330.roa (hash: Iq7mX+2Gdzh11Cz+eab6E5JpoAS8/V5c+VHbjbSnpR0=) 16: 3138352e3133302e36322e302f32342d3234203d3e20323036313530.roa (hash: 0Uta0mciJtwdV1pzRO+5GA2qv0qJ2rULFPtgrlRyMi0=) 17: 3138352e3133302e36312e302f32342d3234203d3e20323732363936.roa (hash: iEuXNsbf+xsxf1NL3afxi/eNCMhpHPndZJ3OWTl2z+U=) 18: 326130363a356563303a3a2f34382d3438203d3e20323034363933.roa (hash: S1/Y/6EPQQnfPCOtjeEUzrWHJ84koF95fYG1w/Kcp2o=) 19: 3138352e3231332e3234322e302f32342d3234203d3e203232343237.roa (hash: rxGzTHw2ETBLYdKcURKX80/JYXYHlHWFPETTk7njjlE=) 20: 3138352e3232392e3230302e302f32342d3234203d3e2039333034.roa (hash: Msloifrt/kLCe0SjqxgGF92lnUxKU95znivEpNjSmVE=) 21: 3138352e3232392e3230312e302f32342d3234203d3e20323030303137.roa (hash: PCz6aeIUTtC34FXSr6irNuWXyhZRMV7yjZ9OeA9cKuk=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3E870B9A7003C4FD9C51BD354A9DEFA3FB77B4A9.crl rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3E870B9A7003C4FD9C51BD354A9DEFA3FB77B4A9.mft rsync://rpki.ripe.net/repository/DEFAULT/PocLmnADxP2cUb01Sp3vo_t3tKk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 28 Sep 2026 10:02:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:af:aa:44:a0:c8:db:e0:76:e3:93:72:39:1e:ae:6e:a1:87:89:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e870b9a7003c4fd9c51bd354a9defa3fb77b4a9 Validity Not Before: Sep 27 13:44:35 2026 GMT Not After : Sep 28 16:18:35 2026 GMT Subject: CN=85B0DE804DB07DF0CFDE535596E21B29999AB225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:bd:85:92:1b:e5:fa:cf:91:a6:0d:7a:56:5f: 38:d5:01:54:4d:76:0a:0a:85:96:d2:29:5f:45:d6: 0f:40:ea:fb:91:a2:8a:3c:0e:a5:8f:82:6e:eb:f4: 48:7d:04:f3:cc:ce:b3:4e:68:c3:88:75:51:62:8f: d0:66:71:9e:1c:70:64:8e:cf:89:1e:84:c4:96:41: 9c:0e:de:2e:48:af:29:21:7e:23:18:c4:e9:81:e8: ba:75:66:cd:51:23:e4:33:76:a9:46:3c:8e:3b:ea: b6:2e:2a:9a:87:74:c7:65:81:1d:83:95:f3:5d:02: 12:4c:8f:97:a8:60:26:f8:b3:50:25:bc:c3:f5:c5: 95:97:89:40:85:11:55:ec:cc:ff:9c:c3:b2:69:71: 0b:75:95:3c:17:d6:68:51:77:54:08:12:65:6a:51: 7c:29:89:6c:19:74:42:85:76:47:61:e3:9f:dc:24: 7a:7f:c3:22:ff:96:d5:4a:f0:75:6c:71:c4:d1:29: 19:ff:13:2e:e4:84:41:cf:7f:fa:f8:aa:a4:9f:cf: 29:61:e8:2b:01:f0:f7:53:79:50:c7:4f:80:10:2e: 51:dd:5b:dd:ee:2a:50:14:6c:74:63:c9:e5:38:e9: 4d:7e:60:9b:25:1e:88:bf:40:da:74:11:9b:a9:51: 53:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:B0:DE:80:4D:B0:7D:F0:CF:DE:53:55:96:E2:1B:29:99:9A:B2:25 X509v3 Authority Key Identifier: keyid:3E:87:0B:9A:70:03:C4:FD:9C:51:BD:35:4A:9D:EF:A3:FB:77:B4:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3E870B9A7003C4FD9C51BD354A9DEFA3FB77B4A9.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PocLmnADxP2cUb01Sp3vo_t3tKk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3E870B9A7003C4FD9C51BD354A9DEFA3FB77B4A9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:67:29:ea:5c:28:04:9a:b2:f1:1c:fd:a1:ba:fb:b2:60:a8: 15:f1:ea:57:e5:5b:b9:92:25:52:18:af:ad:aa:45:76:2a:e8: 2e:ee:89:9f:0d:40:e4:e0:ff:af:d8:4e:73:b1:a7:f4:6b:5e: 38:3b:f2:b8:81:f7:e1:a0:7e:25:d6:1e:aa:d8:81:b4:1c:1b: 17:d8:ee:9f:87:1d:87:e5:7c:de:84:ae:3d:d5:7d:d1:38:09: 4e:74:e2:19:a5:e8:77:08:0b:94:9d:ed:8f:9d:77:a9:c9:62: 85:d9:b9:b0:14:32:b3:f6:23:e7:69:4f:b4:12:da:9f:25:20: 94:d1:64:b5:ab:f1:a2:f6:bf:5c:eb:64:91:e0:97:1d:e9:ec: a4:1f:41:86:b1:dd:44:59:f3:e1:d2:f7:b7:d6:b6:f7:76:e1: 84:e2:d3:dc:a5:91:d4:07:f8:c0:63:f2:a8:14:1c:a0:08:13: 04:a5:b8:71:5f:9d:69:22:72:8f:53:9b:97:19:97:a4:4b:30: e7:ef:1a:23:7a:a9:37:4e:7b:26:ec:1e:10:19:a4:22:68:85: 9f:c9:85:7a:65:8e:e4:75:64:da:04:13:9c:b3:86:ce:32:77: f2:5d:39:ed:18:4b:1d:fc:79:2f:67:e6:86:71:fb:65:05:ac: d0:c4:78:b8 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUMq+qRKDI2+B245NyOR6ubqGHiW8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM2U4NzBiOWE3MDAzYzRmZDljNTFiZDM1NGE5ZGVmYTNm Yjc3YjRhOTAeFw0yNjA5MjcxMzQ0MzVaFw0yNjA5MjgxNjE4MzVaMDMxMTAvBgNV BAMTKDg1QjBERTgwNERCMDdERjBDRkRFNTM1NTk2RTIxQjI5OTk5QUIyMjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCWvYWSG+X6z5GmDXpWXzjVAVRN dgoKhZbSKV9F1g9A6vuRooo8DqWPgm7r9Eh9BPPMzrNOaMOIdVFij9BmcZ4ccGSO z4kehMSWQZwO3i5IrykhfiMYxOmB6Lp1Zs1RI+QzdqlGPI476rYuKpqHdMdlgR2D lfNdAhJMj5eoYCb4s1AlvMP1xZWXiUCFEVXszP+cw7JpcQt1lTwX1mhRd1QIEmVq UXwpiWwZdEKFdkdh45/cJHp/wyL/ltVK8HVsccTRKRn/Ey7khEHPf/r4qqSfzylh 6CsB8PdTeVDHT4AQLlHdW93uKlAUbHRjyeU46U1+YJslHoi/QNp0EZupUVOrAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUhbDegE2wffDP3lNVluIbKZmasiUwHwYDVR0j BBgwFoAUPocLmnADxP2cUb01Sp3vo/t3tKkwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYzVkMThlODItNGQ2OC00NWE2LWE1ZGYtY2FjMTE1YWQy Mjc5LzAvM0U4NzBCOUE3MDAzQzRGRDlDNTFCRDM1NEE5REVGQTNGQjc3QjRBOS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1BvY0xtbkFEeFAyY1ViMDFTcDN2b190 M3RLay5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9jNWQxOGU4Mi00 ZDY4LTQ1YTYtYTVkZi1jYWMxMTVhZDIyNzkvMC8zRTg3MEI5QTcwMDNDNEZEOUM1 MUJEMzU0QTlERUZBM0ZCNzdCNEE5Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKWcp6lwoBJqy8Rz9obr7 smCoFfHqV+VbuZIlUhivrapFdiroLu6Jnw1A5OD/r9hOc7Gn9GteODvyuIH34aB+ JdYeqtiBtBwbF9jun4cdh+V83oSuPdV90TgJTnTiGaXodwgLlJ3tj513qclihdm5 sBQys/Yj52lPtBLanyUglNFktavxova/XOtkkeCXHenspB9BhrHdRFnz4dL3t9a2 93bhhOLT3KWR1Af4wGPyqBQcoAgTBKW4cV+daSJyj1OblxmXpEsw5+8aI3qpN057 JuweEBmkImiFn8mFemWO5HVk2gQTnLOGzjJ38l057RhLHfx5L2fmhnH7ZQWs0MR4 uA== -----END CERTIFICATE-----Generated at Sun Sep 27 19:11:10 2026 by rpki-client