$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3E870B9A7003C4FD9C51BD354A9DEFA3FB77B4A9.mft File: 3E870B9A7003C4FD9C51BD354A9DEFA3FB77B4A9.mft (raw, json) Hash identifier: BzPYQjpHAqSyl6bBA/3rqm0Fr8/cR1jJXuydM4UMooA= Subject key identifier: 70:C4:9C:9A:40:AC:8A:C7:D9:C3:AF:D1:2E:F9:07:C6:64:55:05:35 Authority key identifier: 3E:87:0B:9A:70:03:C4:FD:9C:51:BD:35:4A:9D:EF:A3:FB:77:B4:A9 Certificate issuer: /CN=3e870b9a7003c4fd9c51bd354a9defa3fb77b4a9 Certificate serial: 5E01446AE8FE725DD3D935C9C55912509934CB4C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PocLmnADxP2cUb01Sp3vo_t3tKk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3E870B9A7003C4FD9C51BD354A9DEFA3FB77B4A9.mft Manifest number: 06DD Signing time: Wed 13 May 2026 03:20:38 +0000 Manifest this update: Wed 13 May 2026 03:15:38 +0000 Manifest next update: Thu 14 May 2026 04:46:38 +0000 Files and hashes: 1: 3E870B9A7003C4FD9C51BD354A9DEFA3FB77B4A9.crl (hash: IX/PDCLuQqvXvuWu6OeP2M2Yq0KtKUYBaFZRyi+Nu9I=) 2: 3138352e3231332e3234332e302f32342d3234203d3e20323034393238.roa (hash: /82U/4ZCS1l7tEmRqZdiqoHQfHkAV0iGqgAdCf0IY6Q=) 3: 326130363a356563303a3a2f34382d3438203d3e20323034363933.roa (hash: 1uKLPQUne0QcXblB3NW5HCIymd03TIpdjdnWqSBKxm8=) 4: 3138352e3231332e3234322e302f32342d3234203d3e203232343237.roa (hash: rxGzTHw2ETBLYdKcURKX80/JYXYHlHWFPETTk7njjlE=) 5: 39312e3133322e3232372e302f32342d3234203d3e20323132333834.roa (hash: eh1Z74wbnDki2jWa8j9mKK2ooveQFWs0ccPHyRr5G7Y=) 6: 3138352e3231332e3234312e302f32342d3234203d3e20333935343730.roa (hash: YhzV2KtcuLsnnub8luasZeZrUhyCrUUtZDrQmh3b0AM=) 7: 3138352e3133302e36322e302f32342d3234203d3e20323036313530.roa (hash: 0Uta0mciJtwdV1pzRO+5GA2qv0qJ2rULFPtgrlRyMi0=) 8: 3138352e3133302e36332e302f32342d3234203d3e203332313831.roa (hash: krs6rxjGgkgxIC0XFsSJIDbJbJTaOxRVYKdhwP98j0o=) 9: 3138352e3232392e3230312e302f32342d3234203d3e20323030303137.roa (hash: PCz6aeIUTtC34FXSr6irNuWXyhZRMV7yjZ9OeA9cKuk=) 10: 3138352e3131312e3138382e302f32342d3234203d3e203632353633.roa (hash: X7Tn/GpCSEBlmrST5TEKgAjVIubIFvn/OXAnR/EzN3o=) 11: 3138352e3232392e3230332e302f32342d3234203d3e20323034333939.roa (hash: o2s9iRRo/HWpVNV66/X3K8Nx40dZXcSQ+ar/RSKpLZ4=) 12: 3138352e3231332e3234332e302f32342d3234203d3e203330343536.roa (hash: HHWDsn/geYTSKOK374fOgzwqQ04cratsjB9aVUs6qO0=) 13: 3138352e3232392e3230302e302f32342d3234203d3e20323037303139.roa (hash: 1bceaNlyoOp1upDNmtgefthFRPSg/dp+QwWX8BNP7X8=) 14: 3138352e3234342e39342e302f32342d3234203d3e20333937343233.roa (hash: oZOogcZA7gOpZC0s0tbGMXCZZe5qdoNGw7VhUnq2iag=) 15: 39312e3133322e3232372e302f32342d3234203d3e20323132333335.roa (hash: 4nM6t6s+oklrwoQsrohzelZ9jLVJM3XAMUC6E2raQWI=) 16: 3138352e3133302e36302e302f32342d3234203d3e203131383738.roa (hash: IVpkKpecJIjzuckRW19RYnHFzcqeOz1CHzHhlqd09/8=) 17: 3138352e3232392e3230322e302f32342d3234203d3e20323130303330.roa (hash: LqK97diQcFrb4344S9ThgI9qIfk24xWO2D6Fzod4ApM=) 18: 3138352e3231332e3234302e302f32342d3234203d3e20323135373033.roa (hash: KdpamzjNMoBH12606SSHSE8fPB2oVEwY+/Ehf6CDJmA=) 19: 3138352e3133302e36312e302f32342d3234203d3e20323732363936.roa (hash: nzc+7vTx0fxusJ8QBUU0nZ0s/13eeYO5i8RfnoHHUhc=) 20: 3138352e3234342e39352e302f32342d3234203d3e20323039313034.roa (hash: PNy8kHfErJW4J8db5MQNciyd0WzMVWGxz0WDCg6nr0Y=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3E870B9A7003C4FD9C51BD354A9DEFA3FB77B4A9.crl rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3E870B9A7003C4FD9C51BD354A9DEFA3FB77B4A9.mft rsync://rpki.ripe.net/repository/DEFAULT/PocLmnADxP2cUb01Sp3vo_t3tKk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 13 May 2026 23:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:01:44:6a:e8:fe:72:5d:d3:d9:35:c9:c5:59:12:50:99:34:cb:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e870b9a7003c4fd9c51bd354a9defa3fb77b4a9 Validity Not Before: May 13 03:15:38 2026 GMT Not After : May 14 04:46:38 2026 GMT Subject: CN=70C49C9A40AC8AC7D9C3AFD12EF907C664550535 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:00:ab:ea:26:43:3b:31:71:45:e2:2b:3c:eb: d1:5d:ac:53:d2:ae:82:0d:86:f7:ad:85:4f:5e:12: b7:18:99:b7:5a:00:44:4b:bd:79:48:8f:d1:47:83: fb:71:69:36:fb:ae:f2:fe:f2:ce:0a:57:7c:ac:9c: 39:76:2b:09:90:e8:a6:9b:96:7f:54:e0:e2:a5:d2: d8:72:91:72:7b:02:c0:d5:8d:06:b3:61:24:3a:f3: a6:07:7a:33:ee:40:7e:b2:16:59:bd:9a:64:00:31: d8:8d:df:f2:0e:26:10:ba:6a:d3:2b:13:1f:37:70: c6:e6:75:f4:7c:89:45:2f:49:40:0e:00:ff:f8:7f: e2:73:95:1f:0b:7a:30:d2:f1:ab:04:a0:35:70:04: 96:1c:a3:e9:d5:a7:91:7f:02:09:06:aa:1b:81:8b: 70:ac:04:66:df:fb:cc:24:75:10:4f:21:6b:77:b7: e6:20:67:aa:61:6e:55:3d:3b:b8:23:43:9d:35:82: 03:8c:64:17:c7:71:f0:54:5e:8a:c6:cf:2f:c2:42: 51:d8:98:42:7b:95:66:25:89:81:3b:11:c3:d9:dc: 04:17:fa:7a:da:0e:25:2c:ea:9c:a5:2b:ff:36:1d: b2:60:8c:5e:26:02:c7:f4:eb:5e:8e:be:89:6d:08: 84:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:C4:9C:9A:40:AC:8A:C7:D9:C3:AF:D1:2E:F9:07:C6:64:55:05:35 X509v3 Authority Key Identifier: keyid:3E:87:0B:9A:70:03:C4:FD:9C:51:BD:35:4A:9D:EF:A3:FB:77:B4:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3E870B9A7003C4FD9C51BD354A9DEFA3FB77B4A9.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PocLmnADxP2cUb01Sp3vo_t3tKk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3E870B9A7003C4FD9C51BD354A9DEFA3FB77B4A9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:85:7e:18:50:bd:79:99:f7:c0:84:52:2e:be:a9:40:67:75: df:ea:99:78:85:11:81:d9:67:04:a9:5b:bc:5b:f9:c3:a6:70: 19:7a:40:e7:69:2c:e9:69:60:39:f2:9e:32:b8:bf:bf:f7:18: 58:e4:63:22:2c:52:00:dc:eb:9e:ec:30:80:e4:ba:f3:0c:e9: 30:71:66:07:69:8b:98:17:8b:76:8f:21:05:71:64:ad:b7:3d: 2a:80:45:0d:b7:f6:2a:34:16:a1:29:0c:78:03:e5:7f:b7:e6: e1:39:d9:ac:9e:b4:55:21:a0:07:41:96:ab:2d:4b:72:7e:14: dd:f8:55:8e:4f:50:00:03:6d:82:16:83:db:09:41:0d:ba:c8: 1a:a5:7c:f2:f2:1e:c4:ee:26:1e:45:29:0f:07:d8:cf:ee:ce: c9:15:a9:06:f3:f0:20:9b:e3:45:bb:03:9d:3e:fb:6f:e8:18: dc:9e:b7:c7:e5:cc:6a:c7:35:16:be:66:8b:97:5e:7c:f9:60: e5:a9:00:57:94:de:7c:65:49:1b:14:e8:30:72:de:f0:54:2b: f1:3d:5f:65:ad:2e:74:d6:f3:68:dc:50:8a:ae:57:29:0e:da: 1f:d8:6c:66:c7:eb:b9:e1:ae:90:dd:f9:c0:fa:c5:42:dd:f8: d6:97:5d:e0 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUXgFEauj+cl3T2TXJxVkSUJk0y0wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM2U4NzBiOWE3MDAzYzRmZDljNTFiZDM1NGE5ZGVmYTNm Yjc3YjRhOTAeFw0yNjA1MTMwMzE1MzhaFw0yNjA1MTQwNDQ2MzhaMDMxMTAvBgNV BAMTKDcwQzQ5QzlBNDBBQzhBQzdEOUMzQUZEMTJFRjkwN0M2NjQ1NTA1MzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWAKvqJkM7MXFF4is869FdrFPS roINhvethU9eErcYmbdaAERLvXlIj9FHg/txaTb7rvL+8s4KV3ysnDl2KwmQ6Kab ln9U4OKl0thykXJ7AsDVjQazYSQ686YHejPuQH6yFlm9mmQAMdiN3/IOJhC6atMr Ex83cMbmdfR8iUUvSUAOAP/4f+JzlR8LejDS8asEoDVwBJYco+nVp5F/AgkGqhuB i3CsBGbf+8wkdRBPIWt3t+YgZ6phblU9O7gjQ501ggOMZBfHcfBUXorGzy/CQlHY mEJ7lWYliYE7EcPZ3AQX+nraDiUs6pylK/82HbJgjF4mAsf0616OvoltCIQXAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUcMScmkCsisfZw6/RLvkHxmRVBTUwHwYDVR0j BBgwFoAUPocLmnADxP2cUb01Sp3vo/t3tKkwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYzVkMThlODItNGQ2OC00NWE2LWE1ZGYtY2FjMTE1YWQy Mjc5LzAvM0U4NzBCOUE3MDAzQzRGRDlDNTFCRDM1NEE5REVGQTNGQjc3QjRBOS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1BvY0xtbkFEeFAyY1ViMDFTcDN2b190 M3RLay5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9jNWQxOGU4Mi00 ZDY4LTQ1YTYtYTVkZi1jYWMxMTVhZDIyNzkvMC8zRTg3MEI5QTcwMDNDNEZEOUM1 MUJEMzU0QTlERUZBM0ZCNzdCNEE5Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaIV+GFC9eZn3wIRSLr6p QGd13+qZeIURgdlnBKlbvFv5w6ZwGXpA52ks6WlgOfKeMri/v/cYWORjIixSANzr nuwwgOS68wzpMHFmB2mLmBeLdo8hBXFkrbc9KoBFDbf2KjQWoSkMeAPlf7fm4TnZ rJ60VSGgB0GWqy1Lcn4U3fhVjk9QAANtghaD2wlBDbrIGqV88vIexO4mHkUpDwfY z+7OyRWpBvPwIJvjRbsDnT77b+gY3J63x+XMasc1Fr5mi5defPlg5akAV5TefGVJ GxToMHLe8FQr8T1fZa0udNbzaNxQiq5XKQ7aH9hsZsfrueGukN35wPrFQt341pdd 4A== -----END CERTIFICATE-----Generated at Wed May 13 09:15:36 2026 by rpki-client