$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fadebb9d-33cc-429b-aa35-10634a8b1dd4/0/35B52EF20A5730A6261D6D1916C6B747FF3C2852.mft File: 35B52EF20A5730A6261D6D1916C6B747FF3C2852.mft (raw, json) Hash identifier: sRALoaQ9jwvm6uP/Vdd8A0Xw+3H49cRDRLxz54LX/2g= Subject key identifier: 48:C9:49:A5:0F:E4:A1:F7:77:69:CF:E7:73:AC:19:44:F3:42:04:A4 Authority key identifier: 35:B5:2E:F2:0A:57:30:A6:26:1D:6D:19:16:C6:B7:47:FF:3C:28:52 Certificate issuer: /CN=35B52EF20A5730A6261D6D1916C6B747FF3C2852 Certificate serial: 7F18EC3F8343674CF777D695FF61258B5362E4EE Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/35B52EF20A5730A6261D6D1916C6B747FF3C2852.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fadebb9d-33cc-429b-aa35-10634a8b1dd4/0/35B52EF20A5730A6261D6D1916C6B747FF3C2852.mft Manifest number: 02B5 Signing time: Thu 23 Jul 2026 21:05:03 +0000 Manifest this update: Thu 23 Jul 2026 21:00:02 +0000 Manifest next update: Sat 25 Jul 2026 00:47:02 +0000 Files and hashes: 1: 326131343a373538313a323530303a3a2f34302d3430203d3e203134343437.roa (hash: RGywHnxAYLuO6cDdu+OqsmlkwS7ZjWl9Xx30KtT8IYc=) 2: 35B52EF20A5730A6261D6D1916C6B747FF3C2852.crl (hash: zwBaZQDkBPoTc8tcXA49aXqsvbx+b/xU3YcPOQswdns=) 3: 326131343a373538313a323930303a3a2f34302d3438203d3e20323039313039.roa (hash: fNdgpZfzM+lTdkTHtAnx5kJSH3iOKuMJEshssLvwnVk=) 4: 326131343a373538313a323230303a3a2f34302d3430203d3e20343031333836.roa (hash: WHkf4m6DzfoyrufCoOAxeFwtqFzFGCors6ZbsGaGLa8=) 5: 326131343a373538313a323030303a3a2f34302d3438203d3e20323136333234.roa (hash: 94LHGHEmr5Ow8y0LgQ8OziBDUOK8WBX/6zymxyfianM=) 6: 326131343a373538313a326630303a3a2f34382d3438203d3e20343031333836.roa (hash: hhnXez1MtyG/OWqeDWj8Yk7vwpb6xK8SsXbhq+WvHw8=) 7: 326131343a373538313a323030303a3a2f34302d3438203d3e20323039313039.roa (hash: tf4CnuzuqcNJkCPREEFPykMzx34y8Ud9hQ2hyeqIDkc=) 8: 326131343a373538313a323730303a3a2f34302d3438203d3e20323039313039.roa (hash: r2FAoLHwIu8mKalLeNKMfevbe6TYD4tj8Lmhtg3K0Jc=) 9: 326131343a373538313a323030303a3a2f34302d3438203d3e20333936303530.roa (hash: sHH5EXfl8KcOz9d8oEb74NyMVuJWDbdSziQULSKFDd4=) 10: 326131343a373538313a323130303a3a2f34302d3430203d3e20343031333836.roa (hash: DLjQUjmP+DsaW9+BMh56ieI2Ec94mZJVyHTBFU7NtcI=) 11: 326131343a373538313a323830303a3a2f34302d3438203d3e20323039313039.roa (hash: BgI8MCbrdQrLXGBmcxKTWUA61uXQRIT/7G+jUcNg+Cg=) 12: 326131343a373538313a323030303a3a2f34302d3438203d3e20323135333634.roa (hash: Qbpxn6m6N57BLQ/qLjGEPLIZz8aoJQbWLiHDKsDlsdk=) 13: 326131343a373538313a326630313a3a2f34382d3438203d3e20343031333836.roa (hash: qMwS539lNZFoubA7sJWCkka1wt0G8zXYNPGQsBc3Exo=) 14: 326131343a373538313a323630303a3a2f34302d3438203d3e20323039313039.roa (hash: vUmqEtEfYQI1zWEs+VA6phQsPoAXeEbQEq0Kg2kwRRk=) 15: 326131343a373538313a323330303a3a2f34302d3430203d3e20343031333836.roa (hash: GU9+rKAYRqNo9YIwP+TkUZlOwC3QOJ/ceUAdYXuG73A=) 16: 326131343a373538313a323030303a3a2f34302d3438203d3e20343031333836.roa (hash: UDRqDR0JMowXqg92cpDjRfR7VLQyzzQdpbzczBoUKPE=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fadebb9d-33cc-429b-aa35-10634a8b1dd4/0/35B52EF20A5730A6261D6D1916C6B747FF3C2852.crl rsync://rsync.paas.rpki.ripe.net/repository/fadebb9d-33cc-429b-aa35-10634a8b1dd4/0/35B52EF20A5730A6261D6D1916C6B747FF3C2852.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/35B52EF20A5730A6261D6D1916C6B747FF3C2852.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 25 Jul 2026 00:47:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:18:ec:3f:83:43:67:4c:f7:77:d6:95:ff:61:25:8b:53:62:e4:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35B52EF20A5730A6261D6D1916C6B747FF3C2852 Validity Not Before: Jul 23 21:00:02 2026 GMT Not After : Jul 25 00:47:02 2026 GMT Subject: CN=48C949A50FE4A1F77769CFE773AC1944F34204A4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:05:ff:ae:c7:7e:c4:96:c8:1d:5d:56:8c:da: 1f:d9:e6:80:5c:3f:bd:d4:2f:ab:89:22:b7:93:4a: 0e:f0:4a:d1:95:06:7f:03:c1:5c:23:37:f4:ed:82: 5a:9c:1d:c3:10:d2:d3:0d:34:1d:24:14:97:16:52: a1:b4:52:0a:be:6d:41:55:da:a3:6b:ab:11:82:85: 60:01:3d:0c:f5:1e:32:bd:ac:e6:ed:da:60:b6:40: 8a:6c:c2:5a:db:9d:43:4b:fa:8e:dd:96:73:34:44: 14:af:f8:e4:d4:00:0b:ee:ef:d6:ac:3b:96:af:2e: 03:18:bc:59:5a:3c:ca:28:28:67:35:84:64:c3:10: 6b:41:b5:ed:52:cf:4c:2b:ad:5d:1b:fd:4a:5c:69: 49:7b:fb:4e:10:02:da:0b:e4:90:41:53:f1:d5:96: 78:e5:61:6d:d7:43:a1:26:6c:87:68:c4:6e:5c:0b: f4:a3:53:27:de:ad:5e:d2:59:a4:d2:97:09:d4:9e: f2:f0:4a:31:ab:99:c4:29:eb:83:f8:79:2a:19:e0: ee:7a:8e:cd:d3:ac:fe:c5:41:38:08:70:b8:78:b0: c6:8c:a8:5e:fa:fb:80:4a:6c:a1:e1:07:de:d0:05: 9d:28:0c:de:6b:46:ae:f8:86:50:72:fb:c8:d9:5f: 1e:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:C9:49:A5:0F:E4:A1:F7:77:69:CF:E7:73:AC:19:44:F3:42:04:A4 X509v3 Authority Key Identifier: keyid:35:B5:2E:F2:0A:57:30:A6:26:1D:6D:19:16:C6:B7:47:FF:3C:28:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fadebb9d-33cc-429b-aa35-10634a8b1dd4/0/35B52EF20A5730A6261D6D1916C6B747FF3C2852.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/35B52EF20A5730A6261D6D1916C6B747FF3C2852.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fadebb9d-33cc-429b-aa35-10634a8b1dd4/0/35B52EF20A5730A6261D6D1916C6B747FF3C2852.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:c4:97:8e:58:1a:3b:6e:5a:43:f7:9c:61:4c:08:32:cb:6c: 12:20:e8:22:32:ee:a3:07:78:4a:31:0f:da:44:cc:7f:68:4f: 28:97:9c:d1:fc:b8:9b:84:45:a3:9e:48:be:e0:6b:e5:ee:67: b7:20:4a:18:31:4c:65:6f:64:d9:08:4f:b1:a0:73:8b:cd:6f: 8c:6e:d6:75:44:09:81:05:86:db:bb:0a:69:f4:df:97:77:dc: 43:15:df:41:7b:4a:0b:7b:42:4b:b9:f4:b2:56:29:4c:6f:c5: d4:12:0d:8f:ce:18:70:6b:1c:95:01:98:4e:70:b1:f7:b5:b2: 0c:2f:b4:ee:e7:5f:a9:c5:47:e0:4f:19:01:96:0d:d8:eb:55: 48:30:5e:f8:94:ae:98:14:79:12:cf:7e:48:1d:29:dc:17:a8: eb:02:a6:04:c3:0f:28:a3:28:e7:9d:35:2d:04:37:7c:4c:97: 50:49:53:95:21:e9:aa:92:1a:7c:76:83:2b:d9:2a:ab:20:c1: ea:4f:9a:0a:20:0d:8e:c3:46:db:4c:bd:9d:67:75:b3:37:08: 93:31:a3:c3:44:0c:aa:4c:2f:21:0e:60:f8:81:d8:f1:29:fc: 1c:34:f5:15:11:dc:74:e5:ae:e0:48:74:61:0d:f8:23:a9:3b: f8:78:4a:13 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUfxjsP4NDZ0z3d9aV/2Eli1Ni5O4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzVCNTJFRjIwQTU3MzBBNjI2MUQ2RDE5MTZDNkI3NDdG RjNDMjg1MjAeFw0yNjA3MjMyMTAwMDJaFw0yNjA3MjUwMDQ3MDJaMDMxMTAvBgNV BAMTKDQ4Qzk0OUE1MEZFNEExRjc3NzY5Q0ZFNzczQUMxOTQ0RjM0MjA0QTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDBf+ux37ElsgdXVaM2h/Z5oBc P73UL6uJIreTSg7wStGVBn8DwVwjN/TtglqcHcMQ0tMNNB0kFJcWUqG0Ugq+bUFV 2qNrqxGChWABPQz1HjK9rObt2mC2QIpswlrbnUNL+o7dlnM0RBSv+OTUAAvu79as O5avLgMYvFlaPMooKGc1hGTDEGtBte1Sz0wrrV0b/UpcaUl7+04QAtoL5JBBU/HV lnjlYW3XQ6EmbIdoxG5cC/SjUyferV7SWaTSlwnUnvLwSjGrmcQp64P4eSoZ4O56 js3TrP7FQTgIcLh4sMaMqF76+4BKbKHhB97QBZ0oDN5rRq74hlBy+8jZXx4DAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUSMlJpQ/kofd3ac/nc6wZRPNCBKQwHwYDVR0j BBgwFoAUNbUu8gpXMKYmHW0ZFsa3R/88KFIwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZmFkZWJiOWQtMzNjYy00MjliLWFhMzUtMTA2MzRhOGIx ZGQ0LzAvMzVCNTJFRjIwQTU3MzBBNjI2MUQ2RDE5MTZDNkI3NDdGRjNDMjg1Mi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC8zNUI1MkVGMjBBNTczMEE2MjYxRDZEMTkx NkM2Qjc0N0ZGM0MyODUyLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2ZhZGViYjlkLTMzY2MtNDI5Yi1hYTM1LTEwNjM0YThiMWRkNC8wLzM1QjUyRUYy MEE1NzMwQTYyNjFENkQxOTE2QzZCNzQ3RkYzQzI4NTIubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQA8xJeO WBo7blpD95xhTAgyy2wSIOgiMu6jB3hKMQ/aRMx/aE8ol5zR/LibhEWjnki+4Gvl 7me3IEoYMUxlb2TZCE+xoHOLzW+MbtZ1RAmBBYbbuwpp9N+Xd9xDFd9Be0oLe0JL ufSyVilMb8XUEg2PzhhwaxyVAZhOcLH3tbIML7Tu51+pxUfgTxkBlg3Y61VIMF74 lK6YFHkSz35IHSncF6jrAqYEww8ooyjnnTUtBDd8TJdQSVOVIemqkhp8doMr2Sqr IMHqT5oKIA2Ow0bbTL2dZ3WzNwiTMaPDRAyqTC8hDmD4gdjxKfwcNPUVEdx05a7g SHRhDfgjqTv4eEoT -----END CERTIFICATE-----Generated at Fri Jul 24 11:28:48 2026 by rpki-client