$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/69bbfdcf-35cd-4524-8ffa-3005b0b69a29/0/25827D84056B8444CC2A7842759035354B8416BC.mft File: 25827D84056B8444CC2A7842759035354B8416BC.mft (raw, json) Hash identifier: 20qdIiDxeSqFHX3B5S9UzmnUkGbzq2Y8nlhCQlLOG3s= Subject key identifier: 4C:55:AF:7E:CB:94:DD:EE:84:28:17:C9:10:AD:FD:A0:90:1F:C8:E3 Authority key identifier: 25:82:7D:84:05:6B:84:44:CC:2A:78:42:75:90:35:35:4B:84:16:BC Certificate issuer: /CN=25827d84056b8444cc2a7842759035354b8416bc Certificate serial: 5B89653F28A33591058A0456116898308E202F28 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JYJ9hAVrhETMKnhCdZA1NUuEFrw.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/69bbfdcf-35cd-4524-8ffa-3005b0b69a29/0/25827D84056B8444CC2A7842759035354B8416BC.mft Manifest number: 02B0 Signing time: Tue 04 Nov 2025 11:27:27 +0000 Manifest this update: Tue 04 Nov 2025 11:22:27 +0000 Manifest next update: Wed 05 Nov 2025 12:10:27 +0000 Files and hashes: 1: 326131343a313463303a313a3a2f34382d3438203d3e20323037343837.roa (hash: nCuZ5ADJB2e8lGpTQQDYT3/JtyMvU82Myd2okt8I23s=) 2: AS207487.asa (hash: Ha+forEe+xS82UGSV4B7j+UWBj+/I05XFS+Ojajx3y4=) 3: 3138352e3133342e3139312e302f32342d3234203d3e20323037343837.roa (hash: wMCy3m1h75GfC2ATV5bYCJD7S6jjiI8Si5ikYie+OUI=) 4: 326131343a313463313a3230303a3a2f34302d3438203d3e203138363037.roa (hash: Pf0WXVKsadiaiJtusSEXuFj/o/oP56mVyLEI27IiyE8=) 5: AS18607.asa (hash: UmRU72jnrIjcrDo/h9XDTnV/XRM8dz+BcjyGexjXWqI=) 6: 326131343a313463303a323a3a2f34382d3438203d3e20323037343837.roa (hash: lVUTv9ePxFs76NYMpRch/wm8DFit0p7cLkwe+1lgWxI=) 7: 326131343a313463303a3a2f34382d3438203d3e20323037343837.roa (hash: MAksePoJ+rnc08XyHZPcbQHx/BhF1iv7lCiKD0GFWxw=) 8: 58E92F2C3859C2D0EF322A871688CB22928E2F3E.cer (hash: gYiT3SS0bbmQQSp3p/LPeJzfbx3ujd90DskZO9GZ0PQ=) 9: 25827D84056B8444CC2A7842759035354B8416BC.crl (hash: XTRc8guC87Kl32+f+nhfXviV0gQzEQRXK/frdGim0Ic=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/69bbfdcf-35cd-4524-8ffa-3005b0b69a29/0/25827D84056B8444CC2A7842759035354B8416BC.crl rsync://rsync.paas.rpki.ripe.net/repository/69bbfdcf-35cd-4524-8ffa-3005b0b69a29/0/25827D84056B8444CC2A7842759035354B8416BC.mft rsync://rpki.ripe.net/repository/DEFAULT/JYJ9hAVrhETMKnhCdZA1NUuEFrw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 05 Nov 2025 12:10:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:89:65:3f:28:a3:35:91:05:8a:04:56:11:68:98:30:8e:20:2f:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=25827d84056b8444cc2a7842759035354b8416bc Validity Not Before: Nov 4 11:22:27 2025 GMT Not After : Nov 5 12:10:27 2025 GMT Subject: CN=4C55AF7ECB94DDEE842817C910ADFDA0901FC8E3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:3f:bb:e3:9a:a0:da:3e:49:a1:ec:ed:d8:f6: f8:cd:94:14:97:18:9b:52:e1:24:f4:1f:40:0c:2f: ac:5a:13:ec:c4:9b:74:e3:4a:6a:03:24:7c:6b:3e: b5:38:f1:bd:06:b7:5a:51:a7:ab:4d:d8:85:f6:2b: e3:8f:b4:8f:60:74:ec:49:01:03:84:ee:e2:96:86: 93:d5:56:c0:45:1a:02:39:92:9c:c9:4d:cf:e4:dd: 43:71:c4:1c:df:95:56:2f:78:a7:62:cb:ce:59:f3: af:6c:4e:dd:1e:13:35:87:54:65:d8:b8:40:b1:64: 56:fd:53:f3:7e:09:97:41:db:5c:21:6b:cf:26:6e: 26:57:07:42:6b:89:1e:f6:48:4f:22:9f:67:45:96: 6c:bc:f2:83:4b:77:dc:81:8e:f5:36:e4:51:44:95: c3:ea:fc:6c:85:93:0b:fa:f4:c3:d7:52:20:40:47: c2:dc:e6:76:df:6b:5f:af:e4:e2:c1:1d:40:de:2f: 86:ac:bd:94:e6:46:52:0b:48:ce:dc:f6:18:e9:89: 8a:99:c8:bb:a4:80:73:dc:e1:01:45:57:57:7b:3d: 2d:c3:06:03:11:30:fd:74:b1:e5:52:dc:57:8e:bc: a7:dd:0f:66:96:07:39:83:26:41:f7:a9:b0:ca:5b: 17:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:55:AF:7E:CB:94:DD:EE:84:28:17:C9:10:AD:FD:A0:90:1F:C8:E3 X509v3 Authority Key Identifier: keyid:25:82:7D:84:05:6B:84:44:CC:2A:78:42:75:90:35:35:4B:84:16:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/69bbfdcf-35cd-4524-8ffa-3005b0b69a29/0/25827D84056B8444CC2A7842759035354B8416BC.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JYJ9hAVrhETMKnhCdZA1NUuEFrw.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/69bbfdcf-35cd-4524-8ffa-3005b0b69a29/0/25827D84056B8444CC2A7842759035354B8416BC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:d9:7c:6c:4b:e0:e4:1d:77:b5:27:45:f7:4e:31:6e:44:4f: f2:8a:fd:cc:60:fa:e3:02:66:21:f8:3e:dc:02:3f:1c:1c:f6: 3b:43:62:87:dd:0a:7f:34:37:78:cf:3f:61:da:54:bb:e9:fa: f7:41:d2:53:0c:9a:94:a2:05:2f:36:94:ab:29:c0:6f:7c:4d: 0e:9a:69:ac:25:d9:05:e8:12:02:3e:8e:0b:10:51:20:04:bd: ce:97:31:c2:9a:0e:fc:51:89:10:18:ab:ce:32:b7:1d:09:69: c0:60:90:11:e4:25:b0:00:6c:5a:55:20:8c:74:c0:00:fb:19: af:ad:b0:c8:de:5c:e1:39:4c:84:b3:43:64:fa:6c:ab:a2:67: 6f:c5:73:33:d1:b7:a4:6a:40:d2:b9:a5:11:82:5a:e0:52:fc: 55:05:46:a6:8a:c9:7f:e0:db:d5:c4:7a:0a:14:bd:57:7b:a9: 68:10:fa:17:4a:79:d1:2f:c4:7e:68:30:b1:b0:bc:98:f1:f9: 2c:71:cd:3d:28:ce:d8:c6:e5:40:d5:e7:0a:08:11:9e:ff:a5: 15:d8:a6:32:b3:fd:1c:fe:ae:14:c1:a0:bf:03:96:6f:00:35: c5:44:05:c6:cd:39:e1:32:41:88:28:59:57:40:89:fe:ec:08: b0:fc:84:a1 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUW4llPyijNZEFigRWEWiYMI4gLygwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjU4MjdkODQwNTZiODQ0NGNjMmE3ODQyNzU5MDM1MzU0 Yjg0MTZiYzAeFw0yNTExMDQxMTIyMjdaFw0yNTExMDUxMjEwMjdaMDMxMTAvBgNV BAMTKDRDNTVBRjdFQ0I5NERERUU4NDI4MTdDOTEwQURGREEwOTAxRkM4RTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3P7vjmqDaPkmh7O3Y9vjNlBSX GJtS4ST0H0AML6xaE+zEm3TjSmoDJHxrPrU48b0Gt1pRp6tN2IX2K+OPtI9gdOxJ AQOE7uKWhpPVVsBFGgI5kpzJTc/k3UNxxBzflVYveKdiy85Z869sTt0eEzWHVGXY uECxZFb9U/N+CZdB21wha88mbiZXB0JriR72SE8in2dFlmy88oNLd9yBjvU25FFE lcPq/GyFkwv69MPXUiBAR8Lc5nbfa1+v5OLBHUDeL4asvZTmRlILSM7c9hjpiYqZ yLukgHPc4QFFV1d7PS3DBgMRMP10seVS3FeOvKfdD2aWBzmDJkH3qbDKWxftAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUTFWvfsuU3e6EKBfJEK39oJAfyOMwHwYDVR0j BBgwFoAUJYJ9hAVrhETMKnhCdZA1NUuEFrwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNjliYmZkY2YtMzVjZC00NTI0LThmZmEtMzAwNWIwYjY5 YTI5LzAvMjU4MjdEODQwNTZCODQ0NENDMkE3ODQyNzU5MDM1MzU0Qjg0MTZCQy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0pZSjloQVZyaEVUTUtuaENkWkExTlV1 RUZydy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS82OWJiZmRjZi0z NWNkLTQ1MjQtOGZmYS0zMDA1YjBiNjlhMjkvMC8yNTgyN0Q4NDA1NkI4NDQ0Q0My QTc4NDI3NTkwMzUzNTRCODQxNkJDLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJdl8bEvg5B13tSdF904x bkRP8or9zGD64wJmIfg+3AI/HBz2O0Nih90KfzQ3eM8/YdpUu+n690HSUwyalKIF LzaUqynAb3xNDppprCXZBegSAj6OCxBRIAS9zpcxwpoO/FGJEBirzjK3HQlpwGCQ EeQlsABsWlUgjHTAAPsZr62wyN5c4TlMhLNDZPpsq6Jnb8VzM9G3pGpA0rmlEYJa 4FL8VQVGporJf+Db1cR6ChS9V3upaBD6F0p50S/EfmgwsbC8mPH5LHHNPSjO2Mbl QNXnCggRnv+lFdimMrP9HP6uFMGgvwOWbwA1xUQFxs054TJBiChZV0CJ/uwIsPyE oQ== -----END CERTIFICATE-----Generated at Tue Nov 4 20:22:56 2025 by rpki-client