$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fadebb9d-33cc-429b-aa35-10634a8b1dd4/0/35B52EF20A5730A6261D6D1916C6B747FF3C2852.mft File: 35B52EF20A5730A6261D6D1916C6B747FF3C2852.mft (raw, json) Hash identifier: xdQa+y68wPTHg9nAHcBaNZJ1QBZLIY3KzaviyR18s5c= Subject key identifier: 96:2A:13:BD:82:D1:00:E9:35:9D:FB:2F:60:85:B7:49:3D:66:D3:20 Authority key identifier: 35:B5:2E:F2:0A:57:30:A6:26:1D:6D:19:16:C6:B7:47:FF:3C:28:52 Certificate issuer: /CN=35B52EF20A5730A6261D6D1916C6B747FF3C2852 Certificate serial: 4ACA94BF40D857BFA173E517B4468DDE2381D760 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/35B52EF20A5730A6261D6D1916C6B747FF3C2852.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fadebb9d-33cc-429b-aa35-10634a8b1dd4/0/35B52EF20A5730A6261D6D1916C6B747FF3C2852.mft Manifest number: A8 Signing time: Sun 29 Jun 2025 08:32:50 +0000 Manifest this update: Sun 29 Jun 2025 08:27:48 +0000 Manifest next update: Mon 30 Jun 2025 09:30:48 +0000 Files and hashes: 1: 326131343a373538313a323030303a3a2f34302d3438203d3e20333936303530.roa (hash: yUvus43IfO0AT/ck5bMQHbMTgP3EN2v06hq4szCBm40=) 2: 326131343a373538313a323030303a3a2f34302d3438203d3e20323136333234.roa (hash: bje5aLLUqgAL8DyPjKPS1MwDhANSqShDo64yB6sarZo=) 3: 326131343a373538313a323030303a3a2f34302d3438203d3e20323039313039.roa (hash: lRerEWAZYVnj4WeC0lksu5JXgu5ks2mpqCgBEDRR0Q0=) 4: 326131343a373538313a323230303a3a2f34302d3430203d3e20343031333836.roa (hash: xASXurrkB21YmULJQ68AjQqXl8iRC/GmjrwM45TRghc=) 5: 326131343a373538313a326630303a3a2f34382d3438203d3e20343031333836.roa (hash: PQEJzzZkaWaRihPz0qFSxn/fBL9FvQBY7Es5NvynDQM=) 6: 326131343a373538313a326630313a3a2f34382d3438203d3e20343031333836.roa (hash: SLj141CGncsBb5vfud/Xh4MbUscTfgukNtFTpVVNYzk=) 7: 326131343a373538313a323030303a3a2f34302d3438203d3e20323135333634.roa (hash: iPZr810Wf3G2BF1Yx0TXVCnIMBYWmzqlqsIx/XIB/Cc=) 8: 326131343a373538313a323130303a3a2f34302d3430203d3e20343031333836.roa (hash: T25tbrYVZpBemZDjqgpA9HPrUcZHUwwg3LOVGpsmSZ8=) 9: 35B52EF20A5730A6261D6D1916C6B747FF3C2852.crl (hash: Us6P58ypSAVHu9o6Ro54Jmg7S24OcHTy+lmz+1+zfXE=) 10: 326131343a373538313a323330303a3a2f34302d3430203d3e20343031333836.roa (hash: 0cCFPlcOjS3xWnb1dJLZXDYv3McRJuNCq2FLbccHCeQ=) 11: 326131343a373538313a323030303a3a2f34302d3438203d3e20343031333836.roa (hash: pi4F6jgMqqwUP1FTiOnfocpEw1DljOaDr1vx1pIBms8=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fadebb9d-33cc-429b-aa35-10634a8b1dd4/0/35B52EF20A5730A6261D6D1916C6B747FF3C2852.crl rsync://rsync.paas.rpki.ripe.net/repository/fadebb9d-33cc-429b-aa35-10634a8b1dd4/0/35B52EF20A5730A6261D6D1916C6B747FF3C2852.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/35B52EF20A5730A6261D6D1916C6B747FF3C2852.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 30 Jun 2025 09:30:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:ca:94:bf:40:d8:57:bf:a1:73:e5:17:b4:46:8d:de:23:81:d7:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35B52EF20A5730A6261D6D1916C6B747FF3C2852 Validity Not Before: Jun 29 08:27:48 2025 GMT Not After : Jun 30 09:30:48 2025 GMT Subject: CN=962A13BD82D100E9359DFB2F6085B7493D66D320 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:5e:bd:b9:ad:ed:ef:ae:17:1b:f0:3a:18:5f: 7d:a4:bf:77:26:f5:30:41:31:d6:5b:f5:9f:d0:30: 03:73:a1:6d:6e:27:83:d5:ca:3f:21:f2:3a:76:ad: f3:10:e9:92:f4:7b:c0:2b:5a:51:a4:64:38:a5:11: a9:52:9a:7c:32:ba:5c:e3:19:91:a9:5e:c1:41:76: 60:ec:86:4e:34:ea:9c:4a:37:90:64:d7:59:1e:32: 95:3c:94:68:1b:6e:27:ac:cf:c4:97:a4:62:90:74: 07:75:ab:bd:a2:2a:3d:82:ed:e2:7a:c3:96:6a:9a: 98:89:b7:1a:d4:f2:39:54:6e:34:72:e8:ed:93:43: f2:ee:33:98:7a:4c:37:19:b2:40:cc:34:ae:3d:b4: 84:9c:9a:03:66:55:38:38:9d:b7:67:a1:ca:33:28: bf:04:fe:9f:b4:1c:6a:c1:3d:0e:a2:49:5a:5f:ea: 49:f6:85:94:74:56:2f:62:9d:c7:82:01:51:ff:0e: 3d:8a:71:4e:28:0c:50:55:f9:44:00:9c:64:4c:c9: 8f:89:e5:75:38:ef:45:f7:f5:01:fe:1d:70:13:7b: 5c:6f:a8:31:61:ba:8d:84:d1:c9:46:d4:26:f4:87: 0c:e2:e5:6f:3d:44:70:34:07:63:16:2e:54:d2:96: 85:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:2A:13:BD:82:D1:00:E9:35:9D:FB:2F:60:85:B7:49:3D:66:D3:20 X509v3 Authority Key Identifier: keyid:35:B5:2E:F2:0A:57:30:A6:26:1D:6D:19:16:C6:B7:47:FF:3C:28:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fadebb9d-33cc-429b-aa35-10634a8b1dd4/0/35B52EF20A5730A6261D6D1916C6B747FF3C2852.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/35B52EF20A5730A6261D6D1916C6B747FF3C2852.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fadebb9d-33cc-429b-aa35-10634a8b1dd4/0/35B52EF20A5730A6261D6D1916C6B747FF3C2852.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:c4:1a:8a:3c:98:64:b1:14:d2:db:e0:98:8c:1f:64:69:32: 58:81:79:28:77:12:7a:bc:56:17:cb:95:51:48:b9:1a:dc:5f: ef:06:6c:09:a7:47:74:ad:80:b6:82:dd:bb:08:82:a6:be:eb: e2:fd:aa:fa:d5:0c:82:21:cb:90:f0:c0:40:cd:cb:32:75:dd: a2:7a:0f:cb:2c:fa:dd:1d:fb:2c:58:63:65:42:51:ed:cf:da: 4a:f2:1d:43:88:05:e2:36:2a:17:0b:04:47:ed:44:92:c9:f2: e1:ed:ac:15:0b:7e:56:ba:d2:b3:0e:6c:b8:96:23:9f:cc:4d: 43:1f:b1:36:f4:7f:2f:ec:04:76:c3:25:08:bb:a7:25:93:03: 02:1b:96:4e:e7:ef:37:fc:81:41:09:a8:7a:b3:bc:ca:b8:6c: 2b:81:bf:ee:c4:8c:57:3c:59:2d:72:b7:1b:03:5c:db:6e:34: b5:e8:96:c9:36:7d:2d:78:ac:da:62:6b:30:6e:76:0e:64:7b: 70:72:15:65:91:50:e1:e4:13:14:56:e4:64:12:10:f3:1c:23: 55:46:5a:c1:dc:b9:f8:75:ea:24:52:9d:4f:27:d1:35:ed:a3: 63:ad:d3:54:10:e7:ae:3d:7b:21:e5:13:60:60:b7:15:5c:9b: 9f:8b:85:eb -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUSsqUv0DYV7+hc+UXtEaN3iOB12AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzVCNTJFRjIwQTU3MzBBNjI2MUQ2RDE5MTZDNkI3NDdG RjNDMjg1MjAeFw0yNTA2MjkwODI3NDhaFw0yNTA2MzAwOTMwNDhaMDMxMTAvBgNV BAMTKDk2MkExM0JEODJEMTAwRTkzNTlERkIyRjYwODVCNzQ5M0Q2NkQzMjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoXr25re3vrhcb8DoYX32kv3cm 9TBBMdZb9Z/QMANzoW1uJ4PVyj8h8jp2rfMQ6ZL0e8ArWlGkZDilEalSmnwyulzj GZGpXsFBdmDshk406pxKN5Bk11keMpU8lGgbbiesz8SXpGKQdAd1q72iKj2C7eJ6 w5ZqmpiJtxrU8jlUbjRy6O2TQ/LuM5h6TDcZskDMNK49tIScmgNmVTg4nbdnocoz KL8E/p+0HGrBPQ6iSVpf6kn2hZR0Vi9inceCAVH/Dj2KcU4oDFBV+UQAnGRMyY+J 5XU470X39QH+HXATe1xvqDFhuo2E0clG1Cb0hwzi5W89RHA0B2MWLlTSloVZAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUlioTvYLRAOk1nfsvYIW3ST1m0yAwHwYDVR0j BBgwFoAUNbUu8gpXMKYmHW0ZFsa3R/88KFIwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZmFkZWJiOWQtMzNjYy00MjliLWFhMzUtMTA2MzRhOGIx ZGQ0LzAvMzVCNTJFRjIwQTU3MzBBNjI2MUQ2RDE5MTZDNkI3NDdGRjNDMjg1Mi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC8zNUI1MkVGMjBBNTczMEE2MjYxRDZEMTkx NkM2Qjc0N0ZGM0MyODUyLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2ZhZGViYjlkLTMzY2MtNDI5Yi1hYTM1LTEwNjM0YThiMWRkNC8wLzM1QjUyRUYy MEE1NzMwQTYyNjFENkQxOTE2QzZCNzQ3RkYzQzI4NTIubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAzxBqK PJhksRTS2+CYjB9kaTJYgXkodxJ6vFYXy5VRSLka3F/vBmwJp0d0rYC2gt27CIKm vuvi/ar61QyCIcuQ8MBAzcsydd2ieg/LLPrdHfssWGNlQlHtz9pK8h1DiAXiNioX CwRH7USSyfLh7awVC35WutKzDmy4liOfzE1DH7E29H8v7AR2wyUIu6clkwMCG5ZO 5+83/IFBCah6s7zKuGwrgb/uxIxXPFktcrcbA1zbbjS16JbJNn0teKzaYmswbnYO ZHtwchVlkVDh5BMUVuRkEhDzHCNVRlrB3Ln4deokUp1PJ9E17aNjrdNUEOeuPXsh 5RNgYLcVXJufi4Xr -----END CERTIFICATE-----Generated at Sun Jun 29 19:50:12 2025 by rpki-client