$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/69bbfdcf-35cd-4524-8ffa-3005b0b69a29/0/25827D84056B8444CC2A7842759035354B8416BC.mft File: 25827D84056B8444CC2A7842759035354B8416BC.mft (raw, json) Hash identifier: ZWvnXKF3dyIEOIvvEfNRkdRg2GfKXsQwBhwkN6tggmg= Subject key identifier: 83:EF:9E:D2:EB:79:CF:73:D6:40:19:65:83:6D:71:99:83:DB:8C:A7 Authority key identifier: 25:82:7D:84:05:6B:84:44:CC:2A:78:42:75:90:35:35:4B:84:16:BC Certificate issuer: /CN=25827d84056b8444cc2a7842759035354b8416bc Certificate serial: 725A0C11F3F3CCA092536310E729554548C1424B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JYJ9hAVrhETMKnhCdZA1NUuEFrw.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/69bbfdcf-35cd-4524-8ffa-3005b0b69a29/0/25827D84056B8444CC2A7842759035354B8416BC.mft Manifest number: 038C Signing time: Fri 17 Apr 2026 05:06:09 +0000 Manifest this update: Fri 17 Apr 2026 05:01:09 +0000 Manifest next update: Sat 18 Apr 2026 05:41:09 +0000 Files and hashes: 1: 326131343a313463303a323a3a2f34382d3438203d3e20323037343837.roa (hash: dHA6HLPOR3IQCPs+KBxka5EoTXTVzS3+Rk/fPIxN15o=) 2: 326131343a313463303a313a3a2f34382d3438203d3e20323037343837.roa (hash: NlN3fbd4xPs8oXDjI1+pTaPhc7vLifacDO0nMI7gkYc=) 3: 25827D84056B8444CC2A7842759035354B8416BC.crl (hash: C84nNmd5Br8zV2LzdGK+GNmqzSZOqIoh5LWhgKaGCJE=) 4: AS18607.asa (hash: ol8lct09PZ1pqBOGDq6LTNV0i5NYMmiHGhSWuOi+FwQ=) 5: 326131343a313463313a3230303a3a2f34302d3438203d3e203138363037.roa (hash: eBGi76bk+i5KfnHGqq9jtzpn0gh813x0+GlA90AUkZI=) 6: AS207487.asa (hash: Ha+forEe+xS82UGSV4B7j+UWBj+/I05XFS+Ojajx3y4=) 7: 58E92F2C3859C2D0EF322A871688CB22928E2F3E.cer (hash: gYiT3SS0bbmQQSp3p/LPeJzfbx3ujd90DskZO9GZ0PQ=) 8: 326131343a313463303a3a2f34382d3438203d3e20323037343837.roa (hash: AULHfw30fC5JPuaDQ09QijzFEojRfFb5/T1vtTj7hIM=) 9: 3138352e3133342e3139312e302f32342d3234203d3e20323037343837.roa (hash: wMCy3m1h75GfC2ATV5bYCJD7S6jjiI8Si5ikYie+OUI=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/69bbfdcf-35cd-4524-8ffa-3005b0b69a29/0/25827D84056B8444CC2A7842759035354B8416BC.crl rsync://rsync.paas.rpki.ripe.net/repository/69bbfdcf-35cd-4524-8ffa-3005b0b69a29/0/25827D84056B8444CC2A7842759035354B8416BC.mft rsync://rpki.ripe.net/repository/DEFAULT/JYJ9hAVrhETMKnhCdZA1NUuEFrw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 18 Apr 2026 05:41:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:5a:0c:11:f3:f3:cc:a0:92:53:63:10:e7:29:55:45:48:c1:42:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=25827d84056b8444cc2a7842759035354b8416bc Validity Not Before: Apr 17 05:01:09 2026 GMT Not After : Apr 18 05:41:09 2026 GMT Subject: CN=83EF9ED2EB79CF73D6401965836D719983DB8CA7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:95:66:b2:a3:90:53:d7:d5:33:44:b7:73:dd: 7c:04:15:1a:28:4d:18:0e:1a:00:75:9c:cb:07:64: df:b1:27:41:1c:c0:b6:12:11:95:a4:de:ad:d3:cc: 57:9c:5d:28:1b:34:38:d5:fe:f9:3f:fe:b5:06:53: 37:c6:dd:08:a1:75:a7:e9:8f:8b:96:96:8f:c9:1f: 2c:03:28:b4:d1:e3:48:d5:c9:6b:d8:78:da:56:56: b1:b0:0e:f2:c9:a2:41:ba:2f:cf:93:6e:32:98:7d: 3b:8b:67:b1:95:d8:89:ed:29:0e:3e:fc:1e:5b:66: da:2f:c9:08:21:29:40:67:91:3f:c8:3d:3a:4c:68: 63:4b:d0:e7:d4:a8:9e:04:c1:07:6a:13:07:e0:b3: 84:d3:79:55:59:49:d8:b9:de:31:2b:00:30:3e:04: 51:02:69:4a:b9:be:8d:d6:f2:38:95:46:bb:92:ed: ba:ab:30:9a:d7:83:5c:5d:13:d9:ec:fe:ec:1b:18: c9:85:64:8f:1d:cf:8a:82:18:5f:36:04:63:df:ad: 69:88:00:a2:c3:90:26:3a:1c:59:2f:c3:16:f4:de: a8:b8:5b:39:26:90:f1:f8:61:2c:a7:43:70:db:c3: e1:cb:29:61:cd:c6:31:9d:42:f7:ae:4f:f0:19:92: 22:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:EF:9E:D2:EB:79:CF:73:D6:40:19:65:83:6D:71:99:83:DB:8C:A7 X509v3 Authority Key Identifier: keyid:25:82:7D:84:05:6B:84:44:CC:2A:78:42:75:90:35:35:4B:84:16:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/69bbfdcf-35cd-4524-8ffa-3005b0b69a29/0/25827D84056B8444CC2A7842759035354B8416BC.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JYJ9hAVrhETMKnhCdZA1NUuEFrw.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/69bbfdcf-35cd-4524-8ffa-3005b0b69a29/0/25827D84056B8444CC2A7842759035354B8416BC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:0a:6c:eb:c7:a9:ba:94:04:3e:d4:fa:78:2b:69:2f:0d:f2: 2f:4c:eb:11:2e:b6:02:0e:f0:51:37:30:4e:54:2e:85:fb:16: 01:47:bd:bb:10:95:51:1a:47:7b:dd:1e:c3:87:96:cb:57:ab: a0:b7:3a:6f:01:4a:97:a9:43:2c:d7:4e:48:53:7f:dd:b7:86: 64:ee:92:19:89:3d:28:75:99:56:65:5d:55:c4:c1:f8:4d:8d: 3a:46:18:cf:80:82:36:df:d3:ad:34:6e:42:88:49:b7:97:5f: 32:12:8b:25:19:cb:72:86:e7:02:4c:93:98:49:e2:e3:e1:95: 14:31:69:96:8d:54:25:b9:f5:82:44:2e:17:9b:30:a5:26:00: 8e:e6:3c:d4:8a:66:57:b9:b2:22:14:40:7e:bc:73:52:e3:b1: 30:b1:67:97:17:19:d3:eb:d5:3e:e3:b1:35:ab:38:46:27:6c: 3b:80:cc:45:ce:00:b4:af:8c:06:12:2a:30:d0:cb:9b:f3:27: 56:ed:64:76:d8:88:a4:3e:83:3c:48:4a:11:ff:df:dd:54:d6: f3:4c:0c:66:8a:e5:81:60:8c:08:32:ad:4f:fb:62:1b:97:fc: 73:6c:1d:1e:0a:91:32:17:18:22:86:91:09:75:a8:78:fb:8c: b5:2c:5e:52 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUcloMEfPzzKCSU2MQ5ylVRUjBQkswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjU4MjdkODQwNTZiODQ0NGNjMmE3ODQyNzU5MDM1MzU0 Yjg0MTZiYzAeFw0yNjA0MTcwNTAxMDlaFw0yNjA0MTgwNTQxMDlaMDMxMTAvBgNV BAMTKDgzRUY5RUQyRUI3OUNGNzNENjQwMTk2NTgzNkQ3MTk5ODNEQjhDQTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4lWayo5BT19UzRLdz3XwEFRoo TRgOGgB1nMsHZN+xJ0EcwLYSEZWk3q3TzFecXSgbNDjV/vk//rUGUzfG3Qihdafp j4uWlo/JHywDKLTR40jVyWvYeNpWVrGwDvLJokG6L8+TbjKYfTuLZ7GV2IntKQ4+ /B5bZtovyQghKUBnkT/IPTpMaGNL0OfUqJ4EwQdqEwfgs4TTeVVZSdi53jErADA+ BFECaUq5vo3W8jiVRruS7bqrMJrXg1xdE9ns/uwbGMmFZI8dz4qCGF82BGPfrWmI AKLDkCY6HFkvwxb03qi4WzkmkPH4YSynQ3Dbw+HLKWHNxjGdQveuT/AZkiIRAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUg++e0ut5z3PWQBllg21xmYPbjKcwHwYDVR0j BBgwFoAUJYJ9hAVrhETMKnhCdZA1NUuEFrwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNjliYmZkY2YtMzVjZC00NTI0LThmZmEtMzAwNWIwYjY5 YTI5LzAvMjU4MjdEODQwNTZCODQ0NENDMkE3ODQyNzU5MDM1MzU0Qjg0MTZCQy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0pZSjloQVZyaEVUTUtuaENkWkExTlV1 RUZydy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS82OWJiZmRjZi0z NWNkLTQ1MjQtOGZmYS0zMDA1YjBiNjlhMjkvMC8yNTgyN0Q4NDA1NkI4NDQ0Q0My QTc4NDI3NTkwMzUzNTRCODQxNkJDLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfwps68epupQEPtT6eCtp Lw3yL0zrES62Ag7wUTcwTlQuhfsWAUe9uxCVURpHe90ew4eWy1eroLc6bwFKl6lD LNdOSFN/3beGZO6SGYk9KHWZVmVdVcTB+E2NOkYYz4CCNt/TrTRuQohJt5dfMhKL JRnLcobnAkyTmEni4+GVFDFplo1UJbn1gkQuF5swpSYAjuY81IpmV7myIhRAfrxz UuOxMLFnlxcZ0+vVPuOxNas4RidsO4DMRc4AtK+MBhIqMNDLm/MnVu1kdtiIpD6D PEhKEf/f3VTW80wMZorlgWCMCDKtT/tiG5f8c2wdHgqRMhcYIoaRCXWoePuMtSxe Ug== -----END CERTIFICATE-----Generated at Fri Apr 17 13:17:33 2026 by rpki-client