$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fadebb9d-33cc-429b-aa35-10634a8b1dd4/0/35B52EF20A5730A6261D6D1916C6B747FF3C2852.mft File: 35B52EF20A5730A6261D6D1916C6B747FF3C2852.mft (raw, json) Hash identifier: 2d072JS6KnEbC7kaAQHGRRzdWOo9HQq/B8WjHQhejnw= Subject key identifier: F5:2F:AA:96:7D:77:9F:2F:F4:51:C0:07:8D:5E:FA:F9:66:8D:5D:81 Authority key identifier: 35:B5:2E:F2:0A:57:30:A6:26:1D:6D:19:16:C6:B7:47:FF:3C:28:52 Certificate issuer: /CN=35B52EF20A5730A6261D6D1916C6B747FF3C2852 Certificate serial: 46D4C4EE1E538968A889313550C629570F0D8EB4 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/35B52EF20A5730A6261D6D1916C6B747FF3C2852.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fadebb9d-33cc-429b-aa35-10634a8b1dd4/0/35B52EF20A5730A6261D6D1916C6B747FF3C2852.mft Manifest number: 0141 Signing time: Sun 19 Oct 2025 13:16:33 +0000 Manifest this update: Sun 19 Oct 2025 13:11:33 +0000 Manifest next update: Mon 20 Oct 2025 16:09:33 +0000 Files and hashes: 1: 326131343a373538313a326630303a3a2f34382d3438203d3e20343031333836.roa (hash: PQEJzzZkaWaRihPz0qFSxn/fBL9FvQBY7Es5NvynDQM=) 2: 326131343a373538313a323130303a3a2f34302d3430203d3e20343031333836.roa (hash: T25tbrYVZpBemZDjqgpA9HPrUcZHUwwg3LOVGpsmSZ8=) 3: 326131343a373538313a323030303a3a2f34302d3438203d3e20323136333234.roa (hash: bje5aLLUqgAL8DyPjKPS1MwDhANSqShDo64yB6sarZo=) 4: 326131343a373538313a323730303a3a2f34302d3438203d3e20323039313039.roa (hash: MFKFuWCDL66Zxs5f3hEeRn+2JW7mEBoWjT7f6AJBOhM=) 5: 35B52EF20A5730A6261D6D1916C6B747FF3C2852.crl (hash: Zze0579rzRRBVf9oPdn77hvmpJmBdx+4drYtR9W9vus=) 6: 326131343a373538313a323930303a3a2f34302d3438203d3e20323039313039.roa (hash: ENamU9VlpUh2S5yKvYrAp12SwLl/9Jv38ffU+yHH5Iw=) 7: 326131343a373538313a323230303a3a2f34302d3430203d3e20343031333836.roa (hash: xASXurrkB21YmULJQ68AjQqXl8iRC/GmjrwM45TRghc=) 8: 326131343a373538313a323530303a3a2f34302d3430203d3e203134343437.roa (hash: 2DfIdT8hQ452p9tTWwGSgv6G5KrCdvIla2RYi0wqius=) 9: 326131343a373538313a323330303a3a2f34302d3430203d3e20343031333836.roa (hash: 0cCFPlcOjS3xWnb1dJLZXDYv3McRJuNCq2FLbccHCeQ=) 10: 326131343a373538313a323030303a3a2f34302d3438203d3e20323039313039.roa (hash: lRerEWAZYVnj4WeC0lksu5JXgu5ks2mpqCgBEDRR0Q0=) 11: 326131343a373538313a323630303a3a2f34302d3438203d3e20323039313039.roa (hash: Ah/styCnPIoGFWiO0PQ2rB66bvMdDv2NyL9mrkcrCj4=) 12: 326131343a373538313a323830303a3a2f34302d3438203d3e20323039313039.roa (hash: U1r4ZvjM4KXIBEm7hpH6+0Qd/LSsHMlknATpB6yDZ90=) 13: 326131343a373538313a323030303a3a2f34302d3438203d3e20343031333836.roa (hash: pi4F6jgMqqwUP1FTiOnfocpEw1DljOaDr1vx1pIBms8=) 14: 326131343a373538313a323030303a3a2f34302d3438203d3e20323135333634.roa (hash: iPZr810Wf3G2BF1Yx0TXVCnIMBYWmzqlqsIx/XIB/Cc=) 15: 326131343a373538313a326630313a3a2f34382d3438203d3e20343031333836.roa (hash: SLj141CGncsBb5vfud/Xh4MbUscTfgukNtFTpVVNYzk=) 16: 326131343a373538313a323030303a3a2f34302d3438203d3e20333936303530.roa (hash: yUvus43IfO0AT/ck5bMQHbMTgP3EN2v06hq4szCBm40=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fadebb9d-33cc-429b-aa35-10634a8b1dd4/0/35B52EF20A5730A6261D6D1916C6B747FF3C2852.crl rsync://rsync.paas.rpki.ripe.net/repository/fadebb9d-33cc-429b-aa35-10634a8b1dd4/0/35B52EF20A5730A6261D6D1916C6B747FF3C2852.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/35B52EF20A5730A6261D6D1916C6B747FF3C2852.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 20 Oct 2025 15:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:d4:c4:ee:1e:53:89:68:a8:89:31:35:50:c6:29:57:0f:0d:8e:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35B52EF20A5730A6261D6D1916C6B747FF3C2852 Validity Not Before: Oct 19 13:11:33 2025 GMT Not After : Oct 20 16:09:33 2025 GMT Subject: CN=F52FAA967D779F2FF451C0078D5EFAF9668D5D81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:af:54:e5:63:f1:06:a1:c2:f7:a3:72:e1:e5: 2a:b8:09:08:ef:0d:9b:4e:f2:a1:c5:0d:12:3f:73: f8:30:af:82:8e:af:30:96:a0:27:fc:8a:1c:d5:38: db:2f:03:0b:b7:34:d9:47:f3:d8:f0:56:d9:d4:eb: 85:69:88:39:04:13:1b:c0:42:b5:72:eb:74:64:37: b0:ac:19:85:db:19:7a:31:0e:95:9b:43:84:38:1c: 28:1f:3f:c4:39:83:1d:4c:0d:9f:a2:44:94:7e:3e: 88:bc:89:f6:63:11:ad:c1:15:7b:96:07:37:7f:de: a3:ab:09:f4:84:d0:57:41:ce:78:b1:c6:20:3e:e5: f8:8f:91:80:92:10:9d:69:f5:b8:02:fe:a9:a7:a4: 05:43:20:96:de:77:47:a5:07:70:4e:b6:ff:fa:d9: 42:44:a9:e6:43:97:5b:2f:e0:d8:54:1f:4d:6a:15: 2d:80:e8:ee:24:cc:ea:ef:9b:c5:dc:8a:72:fb:81: 4e:b7:43:4d:c7:e7:88:7c:2d:a9:07:75:e7:6d:fb: 8c:92:24:ec:22:15:30:5f:fb:07:d8:71:78:54:ec: 5d:8a:47:ab:15:c9:d2:ee:2a:4d:61:9d:b0:6d:ef: 01:2c:51:f4:e3:7b:ec:22:a2:33:6d:96:12:63:6d: b4:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:2F:AA:96:7D:77:9F:2F:F4:51:C0:07:8D:5E:FA:F9:66:8D:5D:81 X509v3 Authority Key Identifier: keyid:35:B5:2E:F2:0A:57:30:A6:26:1D:6D:19:16:C6:B7:47:FF:3C:28:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fadebb9d-33cc-429b-aa35-10634a8b1dd4/0/35B52EF20A5730A6261D6D1916C6B747FF3C2852.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/35B52EF20A5730A6261D6D1916C6B747FF3C2852.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fadebb9d-33cc-429b-aa35-10634a8b1dd4/0/35B52EF20A5730A6261D6D1916C6B747FF3C2852.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:02:39:2b:10:18:50:ad:32:80:1b:d5:ca:5b:6a:83:d3:22: a4:f1:63:66:c2:ed:76:87:68:ff:b0:48:65:30:e3:49:eb:74: 0b:02:e1:d6:22:63:72:20:87:b0:ce:2d:b3:bf:98:14:f1:e1: ef:95:a6:2b:eb:e6:a2:1f:37:23:18:75:07:4d:b2:23:5f:36: 52:87:c9:0d:c5:7d:62:3b:0a:f6:c0:76:61:25:2a:28:99:bc: 88:bf:df:83:bd:6e:0e:79:25:8c:fd:a1:f1:57:6d:6a:3c:a3: 5c:33:99:c1:91:0e:41:28:20:0c:9c:1d:2f:01:d7:89:66:6e: 42:fe:39:e5:44:f3:2d:a3:47:5e:16:58:16:61:3a:04:53:03: ea:03:51:16:28:25:15:d1:32:83:23:f1:d2:e0:d3:e3:ca:f3: ac:7b:43:2c:1c:df:c5:76:eb:5d:e8:37:fc:7f:1a:9e:ec:e7: 35:d8:70:98:3d:38:e5:41:89:cd:e8:de:77:65:1c:8e:e2:91: 3b:5b:0d:b8:91:e4:d1:74:47:21:70:c7:bb:99:10:01:b9:69: 32:36:37:20:cd:12:cc:89:6d:15:3d:3b:ae:8f:e2:ca:2e:a4: 70:39:30:8b:d7:1d:8b:68:f0:49:ff:02:af:91:12:c7:c7:87: 88:07:8f:24 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIURtTE7h5TiWioiTE1UMYpVw8NjrQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzVCNTJFRjIwQTU3MzBBNjI2MUQ2RDE5MTZDNkI3NDdG RjNDMjg1MjAeFw0yNTEwMTkxMzExMzNaFw0yNTEwMjAxNjA5MzNaMDMxMTAvBgNV BAMTKEY1MkZBQTk2N0Q3NzlGMkZGNDUxQzAwNzhENUVGQUY5NjY4RDVEODEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZr1TlY/EGocL3o3Lh5Sq4CQjv DZtO8qHFDRI/c/gwr4KOrzCWoCf8ihzVONsvAwu3NNlH89jwVtnU64VpiDkEExvA QrVy63RkN7CsGYXbGXoxDpWbQ4Q4HCgfP8Q5gx1MDZ+iRJR+Poi8ifZjEa3BFXuW Bzd/3qOrCfSE0FdBznixxiA+5fiPkYCSEJ1p9bgC/qmnpAVDIJbed0elB3BOtv/6 2UJEqeZDl1sv4NhUH01qFS2A6O4kzOrvm8XcinL7gU63Q03H54h8LakHdedt+4yS JOwiFTBf+wfYcXhU7F2KR6sVydLuKk1hnbBt7wEsUfTje+wiojNtlhJjbbSxAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQU9S+qln13ny/0UcAHjV76+WaNXYEwHwYDVR0j BBgwFoAUNbUu8gpXMKYmHW0ZFsa3R/88KFIwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZmFkZWJiOWQtMzNjYy00MjliLWFhMzUtMTA2MzRhOGIx ZGQ0LzAvMzVCNTJFRjIwQTU3MzBBNjI2MUQ2RDE5MTZDNkI3NDdGRjNDMjg1Mi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC8zNUI1MkVGMjBBNTczMEE2MjYxRDZEMTkx NkM2Qjc0N0ZGM0MyODUyLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2ZhZGViYjlkLTMzY2MtNDI5Yi1hYTM1LTEwNjM0YThiMWRkNC8wLzM1QjUyRUYy MEE1NzMwQTYyNjFENkQxOTE2QzZCNzQ3RkYzQzI4NTIubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAxAjkr EBhQrTKAG9XKW2qD0yKk8WNmwu12h2j/sEhlMONJ63QLAuHWImNyIIewzi2zv5gU 8eHvlaYr6+aiHzcjGHUHTbIjXzZSh8kNxX1iOwr2wHZhJSoombyIv9+DvW4OeSWM /aHxV21qPKNcM5nBkQ5BKCAMnB0vAdeJZm5C/jnlRPMto0deFlgWYToEUwPqA1EW KCUV0TKDI/HS4NPjyvOse0MsHN/Fdutd6Df8fxqe7Oc12HCYPTjlQYnN6N53ZRyO 4pE7Ww24keTRdEchcMe7mRABuWkyNjcgzRLMiW0VPTuuj+LKLqRwOTCL1x2LaPBJ /wKvkRLHx4eIB48k -----END CERTIFICATE-----Generated at Sun Oct 19 23:40:31 2025 by rpki-client