$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3eafc32b-ec03-4319-b1c6-3c1c4727e06f/0/27851163005F59C06E35A8FD365F96356EB34971.mft File: 27851163005F59C06E35A8FD365F96356EB34971.mft (raw, json) Hash identifier: sUHzmpiurnmP+TSRnFHiu6E0YJ+6bReYsHT3pTSSPwY= Subject key identifier: A9:43:A5:93:00:D7:4D:98:B1:F5:E7:42:35:3E:E1:4E:17:05:7D:F8 Authority key identifier: 27:85:11:63:00:5F:59:C0:6E:35:A8:FD:36:5F:96:35:6E:B3:49:71 Certificate issuer: /CN=27851163005f59c06e35a8fd365f96356eb34971 Certificate serial: 7B901CE692F372DE42CC77A489C21644E6543D37 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J4URYwBfWcBuNaj9Nl-WNW6zSXE.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/3eafc32b-ec03-4319-b1c6-3c1c4727e06f/0/27851163005F59C06E35A8FD365F96356EB34971.mft Manifest number: 017C Signing time: Tue 04 Nov 2025 03:35:20 +0000 Manifest this update: Tue 04 Nov 2025 03:30:20 +0000 Manifest next update: Wed 05 Nov 2025 04:31:20 +0000 Files and hashes: 1: 27851163005F59C06E35A8FD365F96356EB34971.crl (hash: mLO2rrRnIWLKIe0ujzrxydy2lrBqqH+fpAHX4x0h+fY=) 2: 323030313a3637633a6638633a3a2f34382d3438203d3e20323132383535.roa (hash: prfcq9YIMAg2ry1iZCXqsMkFnalbT+MPZdyoUmwmw6g=) 3: 39332e3135372e3134302e302f32342d3234203d3e20323132383535.roa (hash: hdp9Cx8dMbvUUOjRrqy1XfSIVtsUnXM8OZnay1usHT4=) 4: AS212855.asa (hash: T3YdrgEJ1P9IU1IPBHUKuz7lJiYzWWWbNO7fDdrADAU=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/3eafc32b-ec03-4319-b1c6-3c1c4727e06f/0/27851163005F59C06E35A8FD365F96356EB34971.crl rsync://rsync.paas.rpki.ripe.net/repository/3eafc32b-ec03-4319-b1c6-3c1c4727e06f/0/27851163005F59C06E35A8FD365F96356EB34971.mft rsync://rpki.ripe.net/repository/DEFAULT/J4URYwBfWcBuNaj9Nl-WNW6zSXE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 05 Nov 2025 04:31:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:90:1c:e6:92:f3:72:de:42:cc:77:a4:89:c2:16:44:e6:54:3d:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=27851163005f59c06e35a8fd365f96356eb34971 Validity Not Before: Nov 4 03:30:20 2025 GMT Not After : Nov 5 04:31:20 2025 GMT Subject: CN=A943A59300D74D98B1F5E742353EE14E17057DF8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:5e:c1:30:f1:c9:2c:08:09:cb:c7:39:45:4c: c7:e2:28:77:8a:ac:b5:10:0e:e3:a2:de:50:cc:d7: e3:51:98:3e:2c:91:e2:37:0c:cd:9e:99:d9:ea:dc: 6d:fb:0e:03:68:0a:bc:7d:a5:ca:59:e7:f5:92:9a: c8:12:95:b9:00:45:e0:d5:42:c0:84:1a:be:a5:ef: cc:2c:06:49:6c:28:71:20:b0:19:5f:e1:e7:40:06: 3a:22:e3:d2:97:83:3a:28:77:54:4f:fa:67:31:01: 3c:2a:26:62:68:23:43:be:db:19:f3:ce:07:ff:f9: b6:8b:17:c7:cd:39:58:e9:6c:5c:ee:f5:11:e2:97: e1:2f:95:65:d2:5e:97:be:47:08:27:79:76:22:86: e5:06:bc:f9:28:81:25:1e:30:ad:bc:c5:2a:e8:cc: 8b:1c:f3:12:5f:47:44:53:93:2b:a5:bf:0a:f7:03: 6f:88:c8:65:59:f5:87:8e:e5:4e:8b:c7:c9:7c:5f: cd:79:95:e9:82:3f:37:e7:ae:86:c0:4e:46:46:fa: 51:db:02:d4:52:b8:41:36:21:b1:80:c2:3b:10:c5: 04:46:85:dd:e8:a2:ac:50:e5:43:85:e2:17:97:77: 23:ab:fe:6a:19:1d:1d:16:8a:f3:21:bb:3a:6d:55: 4c:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:43:A5:93:00:D7:4D:98:B1:F5:E7:42:35:3E:E1:4E:17:05:7D:F8 X509v3 Authority Key Identifier: keyid:27:85:11:63:00:5F:59:C0:6E:35:A8:FD:36:5F:96:35:6E:B3:49:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/3eafc32b-ec03-4319-b1c6-3c1c4727e06f/0/27851163005F59C06E35A8FD365F96356EB34971.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J4URYwBfWcBuNaj9Nl-WNW6zSXE.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3eafc32b-ec03-4319-b1c6-3c1c4727e06f/0/27851163005F59C06E35A8FD365F96356EB34971.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3d:88:84:aa:3c:7e:e4:33:52:08:1a:6d:55:64:1d:6c:29:fd: 16:81:f0:e7:38:0d:6c:38:5d:c9:53:2d:59:8a:2d:20:5f:b9: 4c:b9:35:9d:4b:3a:bb:15:0a:86:e4:6c:8e:a1:fd:f7:ad:dc: 03:51:0e:3b:b8:d2:b5:e4:ea:e4:be:a9:80:cb:d3:29:ea:da: a0:55:7e:c5:3d:94:d2:16:9c:f2:d3:10:f6:0d:5e:77:40:7f: 1f:72:4e:c3:6c:30:81:87:e3:46:ec:ed:b5:86:ff:1f:5d:61: 16:e4:76:7a:c8:6a:ec:f6:35:ba:4c:14:bf:91:d4:19:e2:36: d7:5e:4b:41:fc:1c:d8:4f:02:51:ab:59:0f:26:c4:01:9d:06: 32:b8:b6:c6:c6:5f:2b:2b:25:2a:0d:41:9e:46:ac:23:10:46: 46:c9:ed:e4:30:26:3f:12:4e:d4:6e:99:8f:b8:65:2f:ce:0a: 08:ab:3e:48:0d:f3:9b:07:2f:22:7e:74:35:c3:09:92:b6:c3: 02:16:7e:ab:bf:b2:c2:fa:60:ba:c2:f2:14:01:d9:e4:68:55: de:4b:f9:ff:2d:44:1b:b1:95:a0:e0:d3:71:28:2b:98:71:bb: 7e:1c:c5:14:1e:a7:51:eb:e6:e8:8e:bb:91:c7:db:28:72:f6: d4:fe:6b:5d -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUe5Ac5pLzct5CzHekicIWROZUPTcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjc4NTExNjMwMDVmNTljMDZlMzVhOGZkMzY1Zjk2MzU2 ZWIzNDk3MTAeFw0yNTExMDQwMzMwMjBaFw0yNTExMDUwNDMxMjBaMDMxMTAvBgNV BAMTKEE5NDNBNTkzMDBENzREOThCMUY1RTc0MjM1M0VFMTRFMTcwNTdERjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSXsEw8cksCAnLxzlFTMfiKHeK rLUQDuOi3lDM1+NRmD4skeI3DM2emdnq3G37DgNoCrx9pcpZ5/WSmsgSlbkAReDV QsCEGr6l78wsBklsKHEgsBlf4edABjoi49KXgzood1RP+mcxATwqJmJoI0O+2xnz zgf/+baLF8fNOVjpbFzu9RHil+EvlWXSXpe+RwgneXYihuUGvPkogSUeMK28xSro zIsc8xJfR0RTkyulvwr3A2+IyGVZ9YeO5U6Lx8l8X815lemCPzfnrobATkZG+lHb AtRSuEE2IbGAwjsQxQRGhd3ooqxQ5UOF4heXdyOr/moZHR0WivMhuzptVUzTAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUqUOlkwDXTZix9edCNT7hThcFffgwHwYDVR0j BBgwFoAUJ4URYwBfWcBuNaj9Nl+WNW6zSXEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvM2VhZmMzMmItZWMwMy00MzE5LWIxYzYtM2MxYzQ3Mjdl MDZmLzAvMjc4NTExNjMwMDVGNTlDMDZFMzVBOEZEMzY1Rjk2MzU2RUIzNDk3MS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0o0VVJZd0JmV2NCdU5hajlObC1XTlc2 elNYRS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8zZWFmYzMyYi1l YzAzLTQzMTktYjFjNi0zYzFjNDcyN2UwNmYvMC8yNzg1MTE2MzAwNUY1OUMwNkUz NUE4RkQzNjVGOTYzNTZFQjM0OTcxLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPYiEqjx+5DNSCBptVWQd bCn9FoHw5zgNbDhdyVMtWYotIF+5TLk1nUs6uxUKhuRsjqH9963cA1EOO7jSteTq 5L6pgMvTKeraoFV+xT2U0hac8tMQ9g1ed0B/H3JOw2wwgYfjRuzttYb/H11hFuR2 eshq7PY1ukwUv5HUGeI2115LQfwc2E8CUatZDybEAZ0GMri2xsZfKyslKg1Bnkas IxBGRsnt5DAmPxJO1G6Zj7hlL84KCKs+SA3zmwcvIn50NcMJkrbDAhZ+q7+ywvpg usLyFAHZ5GhV3kv5/y1EG7GVoODTcSgrmHG7fhzFFB6nUevm6I67kcfbKHL21P5r XQ== -----END CERTIFICATE-----Generated at Tue Nov 4 20:39:18 2025 by rpki-client