$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/69bbfdcf-35cd-4524-8ffa-3005b0b69a29/0/25827D84056B8444CC2A7842759035354B8416BC.mft File: 25827D84056B8444CC2A7842759035354B8416BC.mft (raw, json) Hash identifier: xtGnYVyzk6YU+DuhNwLPIOd4nEVR07IKJPrTC6NLFrY= Subject key identifier: 79:60:51:6D:B3:4C:5C:AD:C0:88:D0:10:EE:AC:37:86:2D:42:7D:4B Authority key identifier: 25:82:7D:84:05:6B:84:44:CC:2A:78:42:75:90:35:35:4B:84:16:BC Certificate issuer: /CN=25827d84056b8444cc2a7842759035354b8416bc Certificate serial: 78400565470013449EAAF076E33C6FAFD824F6E5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JYJ9hAVrhETMKnhCdZA1NUuEFrw.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/69bbfdcf-35cd-4524-8ffa-3005b0b69a29/0/25827D84056B8444CC2A7842759035354B8416BC.mft Manifest number: 01B2 Signing time: Tue 29 Apr 2025 18:33:40 +0000 Manifest this update: Tue 29 Apr 2025 18:28:40 +0000 Manifest next update: Wed 30 Apr 2025 22:08:40 +0000 Files and hashes: 1: 326131343a313463303a3a2f34382d3438203d3e20323037343837.roa (hash: MAksePoJ+rnc08XyHZPcbQHx/BhF1iv7lCiKD0GFWxw=) 2: 25827D84056B8444CC2A7842759035354B8416BC.crl (hash: xCBD4N2RFrzuUCPgR0w6Nxn2RHcs0s/5WY1wY7f15x4=) 3: 58E92F2C3859C2D0EF322A871688CB22928E2F3E.cer (hash: gYiT3SS0bbmQQSp3p/LPeJzfbx3ujd90DskZO9GZ0PQ=) 4: 326131343a313463313a3230303a3a2f34302d3438203d3e203138363037.roa (hash: Pf0WXVKsadiaiJtusSEXuFj/o/oP56mVyLEI27IiyE8=) 5: AS207487.asa (hash: sa+x9Ovn0VFP3PZWY4L934Znux06H1Z/gFrTHays+wc=) 6: AS18607.asa (hash: UmRU72jnrIjcrDo/h9XDTnV/XRM8dz+BcjyGexjXWqI=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/69bbfdcf-35cd-4524-8ffa-3005b0b69a29/0/25827D84056B8444CC2A7842759035354B8416BC.crl rsync://rsync.paas.rpki.ripe.net/repository/69bbfdcf-35cd-4524-8ffa-3005b0b69a29/0/25827D84056B8444CC2A7842759035354B8416BC.mft rsync://rpki.ripe.net/repository/DEFAULT/JYJ9hAVrhETMKnhCdZA1NUuEFrw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 30 Apr 2025 22:08:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:40:05:65:47:00:13:44:9e:aa:f0:76:e3:3c:6f:af:d8:24:f6:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=25827d84056b8444cc2a7842759035354b8416bc Validity Not Before: Apr 29 18:28:40 2025 GMT Not After : Apr 30 22:08:40 2025 GMT Subject: CN=7960516DB34C5CADC088D010EEAC37862D427D4B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:4a:ff:59:1f:c1:90:1e:f3:01:c0:b5:45:42: e0:a8:4a:02:46:7f:a6:0d:fc:7d:57:87:6f:26:a8: d9:09:01:71:6b:47:a6:b9:f5:f3:87:17:ea:06:5b: 09:a1:e4:70:75:ba:72:1d:bd:b3:f1:5d:07:a9:23: a8:4f:f8:e7:70:92:46:7a:13:40:cb:b2:92:d5:91: dd:5a:5e:e9:db:97:18:1a:14:28:ad:2e:c5:ca:10: 5f:32:91:4a:90:a5:61:66:61:e0:e7:59:9f:b7:6d: 19:dd:5c:a4:c2:dd:10:60:60:5a:8d:6d:ee:3f:23: e2:6b:f9:33:5f:b9:c2:97:b4:19:26:40:f0:65:19: 8b:bb:1a:7f:fa:0c:ae:52:37:53:c7:a7:39:57:19: 1c:01:7a:a4:9d:d5:5b:ee:2b:1d:5d:e2:65:48:92: 28:b6:0c:de:42:f2:5e:85:f9:0a:bb:64:cd:bf:ab: d2:aa:15:b6:2f:a5:0c:9f:23:a2:a5:fa:62:3a:bb: ba:d7:cb:6e:fa:7a:f0:a7:35:5e:c6:9f:77:6f:58: 08:a2:9a:c0:0e:e5:2f:ba:2d:5b:bc:8e:a5:9f:74: d1:e4:82:bb:1e:95:01:7f:0e:c4:d9:4d:e0:c2:98: 98:75:64:b4:03:35:91:19:00:b6:e0:7f:94:d9:d1: fc:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:60:51:6D:B3:4C:5C:AD:C0:88:D0:10:EE:AC:37:86:2D:42:7D:4B X509v3 Authority Key Identifier: keyid:25:82:7D:84:05:6B:84:44:CC:2A:78:42:75:90:35:35:4B:84:16:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/69bbfdcf-35cd-4524-8ffa-3005b0b69a29/0/25827D84056B8444CC2A7842759035354B8416BC.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JYJ9hAVrhETMKnhCdZA1NUuEFrw.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/69bbfdcf-35cd-4524-8ffa-3005b0b69a29/0/25827D84056B8444CC2A7842759035354B8416BC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:fd:37:28:2a:61:48:2b:a8:e2:13:15:ac:08:9e:dc:51:a1: 55:de:28:6b:f0:a5:46:50:b0:2d:7b:6b:67:50:f7:e9:e6:87: 53:90:f1:5f:f5:19:2b:52:63:4e:00:7c:e9:08:df:80:59:bc: c1:fd:36:7b:72:24:37:e8:6a:70:c4:27:5d:85:57:45:e2:3f: 59:4b:5b:6b:06:bc:da:39:99:4d:24:d7:4d:c1:19:91:75:3d: 6e:53:b5:f2:fa:fc:88:57:dc:52:89:49:50:8f:c3:bc:95:41: d0:1f:04:7e:9b:ee:6e:2d:06:ab:ce:92:74:d4:c1:dc:30:a1: 5a:cc:aa:33:d1:aa:e6:67:a3:38:24:e9:fd:69:8b:6d:04:8f: e5:92:6c:d6:d7:c4:65:44:d5:b5:6d:a5:68:3a:36:1d:e6:ba: 50:6c:75:74:1c:c4:79:7d:c5:3a:e9:e1:fd:1e:66:c3:11:ca: c0:74:51:33:7d:cc:5a:b9:70:5a:06:40:56:d1:de:8a:dc:81: de:1c:be:e0:6d:00:b5:9b:75:2f:27:ac:af:c8:50:81:63:38: 90:a7:57:5d:e0:85:d8:ad:50:0f:49:ae:fd:f5:21:81:96:cf: 24:61:65:e5:c4:05:0e:fe:b1:5b:1a:7d:26:1c:ff:58:8e:7d: 63:7c:34:64 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUeEAFZUcAE0SeqvB24zxvr9gk9uUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjU4MjdkODQwNTZiODQ0NGNjMmE3ODQyNzU5MDM1MzU0 Yjg0MTZiYzAeFw0yNTA0MjkxODI4NDBaFw0yNTA0MzAyMjA4NDBaMDMxMTAvBgNV BAMTKDc5NjA1MTZEQjM0QzVDQURDMDg4RDAxMEVFQUMzNzg2MkQ0MjdENEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCRSv9ZH8GQHvMBwLVFQuCoSgJG f6YN/H1Xh28mqNkJAXFrR6a59fOHF+oGWwmh5HB1unIdvbPxXQepI6hP+OdwkkZ6 E0DLspLVkd1aXunblxgaFCitLsXKEF8ykUqQpWFmYeDnWZ+3bRndXKTC3RBgYFqN be4/I+Jr+TNfucKXtBkmQPBlGYu7Gn/6DK5SN1PHpzlXGRwBeqSd1VvuKx1d4mVI kii2DN5C8l6F+Qq7ZM2/q9KqFbYvpQyfI6Kl+mI6u7rXy276evCnNV7Gn3dvWAii msAO5S+6LVu8jqWfdNHkgrselQF/DsTZTeDCmJh1ZLQDNZEZALbgf5TZ0fwhAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUeWBRbbNMXK3AiNAQ7qw3hi1CfUswHwYDVR0j BBgwFoAUJYJ9hAVrhETMKnhCdZA1NUuEFrwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNjliYmZkY2YtMzVjZC00NTI0LThmZmEtMzAwNWIwYjY5 YTI5LzAvMjU4MjdEODQwNTZCODQ0NENDMkE3ODQyNzU5MDM1MzU0Qjg0MTZCQy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0pZSjloQVZyaEVUTUtuaENkWkExTlV1 RUZydy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS82OWJiZmRjZi0z NWNkLTQ1MjQtOGZmYS0zMDA1YjBiNjlhMjkvMC8yNTgyN0Q4NDA1NkI4NDQ0Q0My QTc4NDI3NTkwMzUzNTRCODQxNkJDLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGf03KCphSCuo4hMVrAie 3FGhVd4oa/ClRlCwLXtrZ1D36eaHU5DxX/UZK1JjTgB86QjfgFm8wf02e3IkN+hq cMQnXYVXReI/WUtbawa82jmZTSTXTcEZkXU9blO18vr8iFfcUolJUI/DvJVB0B8E fpvubi0Gq86SdNTB3DChWsyqM9Gq5mejOCTp/WmLbQSP5ZJs1tfEZUTVtW2laDo2 Hea6UGx1dBzEeX3FOunh/R5mwxHKwHRRM33MWrlwWgZAVtHeityB3hy+4G0AtZt1 Lyesr8hQgWM4kKdXXeCF2K1QD0mu/fUhgZbPJGFl5cQFDv6xWxp9Jhz/WI59Y3w0 ZA== -----END CERTIFICATE-----Generated at Wed Apr 30 14:19:24 2025 by rpki-client