$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fadebb9d-33cc-429b-aa35-10634a8b1dd4/0/35B52EF20A5730A6261D6D1916C6B747FF3C2852.mft File: 35B52EF20A5730A6261D6D1916C6B747FF3C2852.mft (raw, json) Hash identifier: guzTF+VXpOKjneXiPEcP+iLkodh9dyiMZ3dpwl46LjE= Subject key identifier: EF:C6:23:BA:E3:8B:0E:A8:1C:55:C7:EC:B7:20:5D:C1:32:93:D0:2B Authority key identifier: 35:B5:2E:F2:0A:57:30:A6:26:1D:6D:19:16:C6:B7:47:FF:3C:28:52 Certificate issuer: /CN=35B52EF20A5730A6261D6D1916C6B747FF3C2852 Certificate serial: 30C70DA688A768D94A0A01B166981245C18F9B83 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/35B52EF20A5730A6261D6D1916C6B747FF3C2852.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fadebb9d-33cc-429b-aa35-10634a8b1dd4/0/35B52EF20A5730A6261D6D1916C6B747FF3C2852.mft Manifest number: F5 Signing time: Sat 23 Aug 2025 16:18:31 +0000 Manifest this update: Sat 23 Aug 2025 16:13:31 +0000 Manifest next update: Sun 24 Aug 2025 16:50:31 +0000 Files and hashes: 1: 326131343a373538313a323230303a3a2f34302d3430203d3e20343031333836.roa (hash: xASXurrkB21YmULJQ68AjQqXl8iRC/GmjrwM45TRghc=) 2: 326131343a373538313a323030303a3a2f34302d3438203d3e20333936303530.roa (hash: yUvus43IfO0AT/ck5bMQHbMTgP3EN2v06hq4szCBm40=) 3: 326131343a373538313a323730303a3a2f34302d3438203d3e20323039313039.roa (hash: MFKFuWCDL66Zxs5f3hEeRn+2JW7mEBoWjT7f6AJBOhM=) 4: 326131343a373538313a323130303a3a2f34302d3430203d3e20343031333836.roa (hash: T25tbrYVZpBemZDjqgpA9HPrUcZHUwwg3LOVGpsmSZ8=) 5: 326131343a373538313a323030303a3a2f34302d3438203d3e20343031333836.roa (hash: pi4F6jgMqqwUP1FTiOnfocpEw1DljOaDr1vx1pIBms8=) 6: 326131343a373538313a323030303a3a2f34302d3438203d3e20323039313039.roa (hash: lRerEWAZYVnj4WeC0lksu5JXgu5ks2mpqCgBEDRR0Q0=) 7: 326131343a373538313a323630303a3a2f34302d3438203d3e20323039313039.roa (hash: Ah/styCnPIoGFWiO0PQ2rB66bvMdDv2NyL9mrkcrCj4=) 8: 326131343a373538313a323830303a3a2f34302d3438203d3e20323039313039.roa (hash: U1r4ZvjM4KXIBEm7hpH6+0Qd/LSsHMlknATpB6yDZ90=) 9: 326131343a373538313a326630313a3a2f34382d3438203d3e20343031333836.roa (hash: SLj141CGncsBb5vfud/Xh4MbUscTfgukNtFTpVVNYzk=) 10: 326131343a373538313a326630303a3a2f34382d3438203d3e20343031333836.roa (hash: PQEJzzZkaWaRihPz0qFSxn/fBL9FvQBY7Es5NvynDQM=) 11: 326131343a373538313a323330303a3a2f34302d3430203d3e20343031333836.roa (hash: 0cCFPlcOjS3xWnb1dJLZXDYv3McRJuNCq2FLbccHCeQ=) 12: 326131343a373538313a323930303a3a2f34302d3438203d3e20323039313039.roa (hash: ENamU9VlpUh2S5yKvYrAp12SwLl/9Jv38ffU+yHH5Iw=) 13: 326131343a373538313a323030303a3a2f34302d3438203d3e20323135333634.roa (hash: iPZr810Wf3G2BF1Yx0TXVCnIMBYWmzqlqsIx/XIB/Cc=) 14: 326131343a373538313a323030303a3a2f34302d3438203d3e20323136333234.roa (hash: bje5aLLUqgAL8DyPjKPS1MwDhANSqShDo64yB6sarZo=) 15: 326131343a373538313a323530303a3a2f34302d3430203d3e203134343437.roa (hash: 2DfIdT8hQ452p9tTWwGSgv6G5KrCdvIla2RYi0wqius=) 16: 35B52EF20A5730A6261D6D1916C6B747FF3C2852.crl (hash: bjqiFdmsP/KUwCeAl5iH1RyWGEKgJj7jIX9Bijr8VyQ=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fadebb9d-33cc-429b-aa35-10634a8b1dd4/0/35B52EF20A5730A6261D6D1916C6B747FF3C2852.crl rsync://rsync.paas.rpki.ripe.net/repository/fadebb9d-33cc-429b-aa35-10634a8b1dd4/0/35B52EF20A5730A6261D6D1916C6B747FF3C2852.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/35B52EF20A5730A6261D6D1916C6B747FF3C2852.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 24 Aug 2025 12:25:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:c7:0d:a6:88:a7:68:d9:4a:0a:01:b1:66:98:12:45:c1:8f:9b:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35B52EF20A5730A6261D6D1916C6B747FF3C2852 Validity Not Before: Aug 23 16:13:31 2025 GMT Not After : Aug 24 16:50:31 2025 GMT Subject: CN=EFC623BAE38B0EA81C55C7ECB7205DC13293D02B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:31:8a:0f:00:99:ed:d7:ed:f7:57:ca:cf:5e: 6a:f6:e5:a2:50:86:16:ea:0d:3f:84:28:d5:8d:15: 84:b5:aa:ac:44:55:6e:a2:e7:f7:65:f9:51:b4:4a: 9a:18:17:2a:0f:6f:a0:ed:5d:d4:d1:c7:15:20:8a: 4e:ad:1e:80:d7:62:51:2f:b1:6b:8d:48:5d:c0:9e: 9b:b5:7e:28:4a:d5:bb:72:d5:ae:1b:cd:8c:ad:b0: c3:98:3a:08:84:70:a0:c2:89:87:be:ec:c8:e7:37: f7:2e:f4:af:49:7a:8d:fd:cd:eb:15:dc:91:71:e5: 98:db:4f:4b:c5:92:b8:2a:d3:2c:e6:94:95:f4:3c: 8d:5b:b9:84:6e:94:e1:31:f5:7f:95:e6:ca:b9:c8: 04:16:5c:74:b6:51:4a:2e:55:b5:93:1d:e6:23:04: f3:f2:bd:f4:79:bb:41:b3:74:16:8d:18:fe:56:01: 28:e6:c6:8b:3b:6d:c1:3c:d4:7a:74:f6:ef:37:d5: 6f:20:53:74:52:06:27:3c:72:65:b0:8c:ec:b3:b5: f4:1d:c3:dc:3e:66:09:e4:bd:e5:43:6c:7b:ec:e6: ce:24:07:1c:7a:13:3f:17:9f:05:5e:e0:0d:b1:17: 19:66:29:28:11:b1:ef:ca:21:14:72:1a:77:b7:65: 4b:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:C6:23:BA:E3:8B:0E:A8:1C:55:C7:EC:B7:20:5D:C1:32:93:D0:2B X509v3 Authority Key Identifier: keyid:35:B5:2E:F2:0A:57:30:A6:26:1D:6D:19:16:C6:B7:47:FF:3C:28:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fadebb9d-33cc-429b-aa35-10634a8b1dd4/0/35B52EF20A5730A6261D6D1916C6B747FF3C2852.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/35B52EF20A5730A6261D6D1916C6B747FF3C2852.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fadebb9d-33cc-429b-aa35-10634a8b1dd4/0/35B52EF20A5730A6261D6D1916C6B747FF3C2852.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:51:94:50:48:a4:58:52:48:36:49:f2:8a:c1:31:a9:6d:e1: ab:27:bb:22:4d:ed:50:38:23:47:2b:a7:a9:e9:54:5a:9d:5b: f4:87:05:8d:59:d2:67:08:b5:33:39:66:08:38:65:1c:6b:56: b1:85:77:c4:99:ed:84:0e:7a:31:67:a5:09:c0:94:16:0b:03: 1a:4c:42:ec:1c:b9:9e:a4:fc:1a:6f:08:2f:2f:a5:a8:9c:1c: 7a:28:88:45:60:30:0f:17:47:17:42:ba:3f:40:9c:94:9e:98: 9d:56:d0:5d:71:df:ea:ae:24:b5:fc:99:dc:08:4d:1e:f9:26: 07:6f:06:48:c2:bc:49:28:95:51:ff:26:9c:11:f7:69:54:60: 13:33:0a:ac:14:05:a8:18:0c:99:bf:02:83:8f:04:bf:5e:29: d6:9c:69:fd:5d:a6:79:d4:2a:49:a7:86:d4:6a:0a:40:05:b9: 20:52:50:a4:3d:ae:76:49:59:3d:0e:26:d0:4b:88:be:d1:ab: d9:9d:67:e7:e5:ad:d6:16:bb:90:1d:86:89:11:ca:05:75:2b: 6a:68:07:f7:7c:d6:05:b7:9f:6f:bf:13:7b:73:ac:b9:fb:cf: e3:ef:13:71:ec:82:09:0c:82:2b:f4:6c:89:62:15:ce:16:23: 99:c8:ec:76 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUMMcNpoinaNlKCgGxZpgSRcGPm4MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzVCNTJFRjIwQTU3MzBBNjI2MUQ2RDE5MTZDNkI3NDdG RjNDMjg1MjAeFw0yNTA4MjMxNjEzMzFaFw0yNTA4MjQxNjUwMzFaMDMxMTAvBgNV BAMTKEVGQzYyM0JBRTM4QjBFQTgxQzU1QzdFQ0I3MjA1REMxMzI5M0QwMkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUMYoPAJnt1+33V8rPXmr25aJQ hhbqDT+EKNWNFYS1qqxEVW6i5/dl+VG0SpoYFyoPb6DtXdTRxxUgik6tHoDXYlEv sWuNSF3Anpu1fihK1bty1a4bzYytsMOYOgiEcKDCiYe+7MjnN/cu9K9Jeo39zesV 3JFx5ZjbT0vFkrgq0yzmlJX0PI1buYRulOEx9X+V5sq5yAQWXHS2UUouVbWTHeYj BPPyvfR5u0GzdBaNGP5WASjmxos7bcE81Hp09u831W8gU3RSBic8cmWwjOyztfQd w9w+ZgnkveVDbHvs5s4kBxx6Ez8XnwVe4A2xFxlmKSgRse/KIRRyGne3ZUsBAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQU78YjuuOLDqgcVcfstyBdwTKT0CswHwYDVR0j BBgwFoAUNbUu8gpXMKYmHW0ZFsa3R/88KFIwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZmFkZWJiOWQtMzNjYy00MjliLWFhMzUtMTA2MzRhOGIx ZGQ0LzAvMzVCNTJFRjIwQTU3MzBBNjI2MUQ2RDE5MTZDNkI3NDdGRjNDMjg1Mi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC8zNUI1MkVGMjBBNTczMEE2MjYxRDZEMTkx NkM2Qjc0N0ZGM0MyODUyLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2ZhZGViYjlkLTMzY2MtNDI5Yi1hYTM1LTEwNjM0YThiMWRkNC8wLzM1QjUyRUYy MEE1NzMwQTYyNjFENkQxOTE2QzZCNzQ3RkYzQzI4NTIubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAWUZRQ SKRYUkg2SfKKwTGpbeGrJ7siTe1QOCNHK6ep6VRanVv0hwWNWdJnCLUzOWYIOGUc a1axhXfEme2EDnoxZ6UJwJQWCwMaTELsHLmepPwabwgvL6WonBx6KIhFYDAPF0cX Qro/QJyUnpidVtBdcd/qriS1/JncCE0e+SYHbwZIwrxJKJVR/yacEfdpVGATMwqs FAWoGAyZvwKDjwS/XinWnGn9XaZ51CpJp4bUagpABbkgUlCkPa52SVk9DibQS4i+ 0avZnWfn5a3WFruQHYaJEcoFdStqaAf3fNYFt59vvxN7c6y5+8/j7xNx7IIJDIIr 9GyJYhXOFiOZyOx2 -----END CERTIFICATE-----Generated at Sat Aug 23 21:57:56 2025 by rpki-client