$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/69bbfdcf-35cd-4524-8ffa-3005b0b69a29/0/25827D84056B8444CC2A7842759035354B8416BC.mft File: 25827D84056B8444CC2A7842759035354B8416BC.mft (raw, json) Hash identifier: G6S7RNFkIhuTfV0H+TTES4oNzdx9o2io8bCASSreInU= Subject key identifier: BF:9F:73:74:B5:F5:91:CD:2A:B9:F7:43:36:4D:5D:F4:62:49:BC:44 Authority key identifier: 25:82:7D:84:05:6B:84:44:CC:2A:78:42:75:90:35:35:4B:84:16:BC Certificate issuer: /CN=25827d84056b8444cc2a7842759035354b8416bc Certificate serial: 4C2A33E57D3792CA7F0D251802264E72AFFCC615 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JYJ9hAVrhETMKnhCdZA1NUuEFrw.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/69bbfdcf-35cd-4524-8ffa-3005b0b69a29/0/25827D84056B8444CC2A7842759035354B8416BC.mft Manifest number: 01F5 Signing time: Tue 17 Jun 2025 03:58:53 +0000 Manifest this update: Tue 17 Jun 2025 03:53:53 +0000 Manifest next update: Wed 18 Jun 2025 06:41:53 +0000 Files and hashes: 1: AS18607.asa (hash: UmRU72jnrIjcrDo/h9XDTnV/XRM8dz+BcjyGexjXWqI=) 2: 326131343a313463313a3230303a3a2f34302d3438203d3e203138363037.roa (hash: Pf0WXVKsadiaiJtusSEXuFj/o/oP56mVyLEI27IiyE8=) 3: 326131343a313463303a313a3a2f34382d3438203d3e20323037343837.roa (hash: nCuZ5ADJB2e8lGpTQQDYT3/JtyMvU82Myd2okt8I23s=) 4: 25827D84056B8444CC2A7842759035354B8416BC.crl (hash: fHybyKHiJCnw1yw8JOSn4wwN2yfhBaxJ/znn36C80tY=) 5: 326131343a313463303a3a2f34382d3438203d3e20323037343837.roa (hash: MAksePoJ+rnc08XyHZPcbQHx/BhF1iv7lCiKD0GFWxw=) 6: 58E92F2C3859C2D0EF322A871688CB22928E2F3E.cer (hash: gYiT3SS0bbmQQSp3p/LPeJzfbx3ujd90DskZO9GZ0PQ=) 7: 326131343a313463303a323a3a2f34382d3438203d3e20323037343837.roa (hash: lVUTv9ePxFs76NYMpRch/wm8DFit0p7cLkwe+1lgWxI=) 8: AS207487.asa (hash: Ha+forEe+xS82UGSV4B7j+UWBj+/I05XFS+Ojajx3y4=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/69bbfdcf-35cd-4524-8ffa-3005b0b69a29/0/25827D84056B8444CC2A7842759035354B8416BC.crl rsync://rsync.paas.rpki.ripe.net/repository/69bbfdcf-35cd-4524-8ffa-3005b0b69a29/0/25827D84056B8444CC2A7842759035354B8416BC.mft rsync://rpki.ripe.net/repository/DEFAULT/JYJ9hAVrhETMKnhCdZA1NUuEFrw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 18 Jun 2025 06:41:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:2a:33:e5:7d:37:92:ca:7f:0d:25:18:02:26:4e:72:af:fc:c6:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=25827d84056b8444cc2a7842759035354b8416bc Validity Not Before: Jun 17 03:53:53 2025 GMT Not After : Jun 18 06:41:53 2025 GMT Subject: CN=BF9F7374B5F591CD2AB9F743364D5DF46249BC44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:b3:e0:6f:88:f3:23:33:65:7f:4e:b1:fe:cc: d6:17:ef:84:0d:ef:98:c7:f0:45:d1:96:71:4d:2a: 1d:87:64:fa:05:93:be:37:fe:2d:36:16:8d:3a:2e: dd:1a:83:75:93:1f:36:62:58:a6:ad:e6:99:30:13: 0f:fa:a1:f1:63:f1:dd:ca:4d:2a:af:70:df:82:02: e8:a6:17:68:64:34:d2:8b:b2:41:55:c2:57:c5:56: c5:2e:f2:d6:26:70:00:a9:bf:34:6f:eb:59:43:de: cc:d0:3b:f8:fd:17:78:84:85:61:03:06:fe:42:96: e0:b6:38:e7:87:c9:b3:04:1b:6d:d7:c0:6f:38:8b: 9b:5c:1f:94:3d:42:93:23:36:a6:a2:71:42:0a:a8: aa:8a:b8:c9:1b:3a:91:e8:d1:33:20:77:a6:d8:49: 38:72:74:d9:78:5d:d0:b3:79:00:48:73:bf:6e:85: af:fa:63:1b:06:5d:0e:bb:82:d4:aa:4a:46:63:d6: 4a:27:b8:e3:ff:6d:5d:4d:c7:42:16:2c:8d:d2:9c: f5:d1:32:0a:3e:17:75:30:b7:f1:f9:10:1c:34:ce: 7b:c1:f7:b6:a4:ff:5b:3c:99:4b:bb:ca:da:e0:b9: 24:62:1d:be:b8:34:e2:54:a5:5e:21:d2:6b:1a:12: a5:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:9F:73:74:B5:F5:91:CD:2A:B9:F7:43:36:4D:5D:F4:62:49:BC:44 X509v3 Authority Key Identifier: keyid:25:82:7D:84:05:6B:84:44:CC:2A:78:42:75:90:35:35:4B:84:16:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/69bbfdcf-35cd-4524-8ffa-3005b0b69a29/0/25827D84056B8444CC2A7842759035354B8416BC.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JYJ9hAVrhETMKnhCdZA1NUuEFrw.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/69bbfdcf-35cd-4524-8ffa-3005b0b69a29/0/25827D84056B8444CC2A7842759035354B8416BC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:30:db:dc:76:86:b7:00:de:9f:55:a3:2b:f0:e0:97:4a:68: 62:8b:d7:fd:7d:b5:fb:ce:7d:c6:5d:30:1e:93:b9:64:c8:22: f2:a8:73:5b:d0:bf:a0:87:54:46:95:91:02:93:34:46:dd:37: ef:99:dd:43:f5:b2:fb:8a:46:39:32:1a:d0:b2:65:28:37:7b: 53:e5:25:c0:2a:2f:2b:79:aa:0c:56:46:82:ad:7c:79:f3:dd: c0:07:f7:35:72:2c:66:92:f0:a0:85:bd:92:ae:b1:ac:ab:5f: 99:a6:2b:b7:40:2a:d6:54:5f:72:94:11:f3:d6:1a:48:eb:04: f2:ef:b6:a8:f6:16:cb:5b:cc:e4:57:6d:b2:f6:12:71:f5:b3: 9f:e6:b4:9c:9b:f3:ff:fe:89:0c:3c:3e:e8:84:b2:0a:67:bf: 9f:ab:85:ce:81:2d:69:2c:a8:d5:43:44:dd:a7:4d:71:1c:b3: 45:03:48:38:bd:76:36:fa:9c:ee:8b:1c:c6:46:22:95:f6:aa: 79:b9:b0:38:11:8b:17:e9:e4:5d:13:7e:06:2e:46:ce:d8:bb: ba:dc:de:df:1b:58:13:7f:9d:eb:b4:ee:99:58:2e:eb:cd:15: 2b:76:bf:f8:be:fc:3d:1b:92:6f:8e:b6:67:dd:5a:a9:4b:6b: 43:d2:51:ec -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUTCoz5X03ksp/DSUYAiZOcq/8xhUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjU4MjdkODQwNTZiODQ0NGNjMmE3ODQyNzU5MDM1MzU0 Yjg0MTZiYzAeFw0yNTA2MTcwMzUzNTNaFw0yNTA2MTgwNjQxNTNaMDMxMTAvBgNV BAMTKEJGOUY3Mzc0QjVGNTkxQ0QyQUI5Rjc0MzM2NEQ1REY0NjI0OUJDNDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDls+BviPMjM2V/TrH+zNYX74QN 75jH8EXRlnFNKh2HZPoFk743/i02Fo06Lt0ag3WTHzZiWKat5pkwEw/6ofFj8d3K TSqvcN+CAuimF2hkNNKLskFVwlfFVsUu8tYmcACpvzRv61lD3szQO/j9F3iEhWED Bv5CluC2OOeHybMEG23XwG84i5tcH5Q9QpMjNqaicUIKqKqKuMkbOpHo0TMgd6bY SThydNl4XdCzeQBIc79uha/6YxsGXQ67gtSqSkZj1konuOP/bV1Nx0IWLI3SnPXR Mgo+F3Uwt/H5EBw0znvB97ak/1s8mUu7ytrguSRiHb64NOJUpV4h0msaEqWJAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUv59zdLX1kc0qufdDNk1d9GJJvEQwHwYDVR0j BBgwFoAUJYJ9hAVrhETMKnhCdZA1NUuEFrwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNjliYmZkY2YtMzVjZC00NTI0LThmZmEtMzAwNWIwYjY5 YTI5LzAvMjU4MjdEODQwNTZCODQ0NENDMkE3ODQyNzU5MDM1MzU0Qjg0MTZCQy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0pZSjloQVZyaEVUTUtuaENkWkExTlV1 RUZydy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS82OWJiZmRjZi0z NWNkLTQ1MjQtOGZmYS0zMDA1YjBiNjlhMjkvMC8yNTgyN0Q4NDA1NkI4NDQ0Q0My QTc4NDI3NTkwMzUzNTRCODQxNkJDLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjTDb3HaGtwDen1WjK/Dg l0poYovX/X21+859xl0wHpO5ZMgi8qhzW9C/oIdURpWRApM0Rt0375ndQ/Wy+4pG OTIa0LJlKDd7U+UlwCovK3mqDFZGgq18efPdwAf3NXIsZpLwoIW9kq6xrKtfmaYr t0Aq1lRfcpQR89YaSOsE8u+2qPYWy1vM5FdtsvYScfWzn+a0nJvz//6JDDw+6ISy Cme/n6uFzoEtaSyo1UNE3adNcRyzRQNIOL12Nvqc7oscxkYilfaqebmwOBGLF+nk XRN+Bi5Gzti7utze3xtYE3+d67TumVgu680VK3a/+L78PRuSb462Z91aqUtrQ9JR 7A== -----END CERTIFICATE-----Generated at Tue Jun 17 11:52:50 2025 by rpki-client