$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/69bbfdcf-35cd-4524-8ffa-3005b0b69a29/0/25827D84056B8444CC2A7842759035354B8416BC.mft File: 25827D84056B8444CC2A7842759035354B8416BC.mft (raw, json) Hash identifier: FN83+7BCb6eHixspsdpbINVLyPFDzvQ8yStrMylDaw4= Subject key identifier: 90:8C:66:20:01:C6:61:3A:29:A6:C9:B2:0B:36:E4:0E:2C:C9:AF:19 Authority key identifier: 25:82:7D:84:05:6B:84:44:CC:2A:78:42:75:90:35:35:4B:84:16:BC Certificate issuer: /CN=25827d84056b8444cc2a7842759035354b8416bc Certificate serial: 20C555C8970F7E84615C5079AF2F60B9E9F1F5E7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JYJ9hAVrhETMKnhCdZA1NUuEFrw.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/69bbfdcf-35cd-4524-8ffa-3005b0b69a29/0/25827D84056B8444CC2A7842759035354B8416BC.mft Manifest number: 0413 Signing time: Tue 28 Jul 2026 03:18:22 +0000 Manifest this update: Tue 28 Jul 2026 03:13:22 +0000 Manifest next update: Wed 29 Jul 2026 06:55:22 +0000 Files and hashes: 1: 326131343a313463303a3a2f34382d3438203d3e20323037343837.roa (hash: AULHfw30fC5JPuaDQ09QijzFEojRfFb5/T1vtTj7hIM=) 2: 58E92F2C3859C2D0EF322A871688CB22928E2F3E.cer (hash: gYiT3SS0bbmQQSp3p/LPeJzfbx3ujd90DskZO9GZ0PQ=) 3: 326131343a313463303a323a3a2f34382d3438203d3e20323037343837.roa (hash: dHA6HLPOR3IQCPs+KBxka5EoTXTVzS3+Rk/fPIxN15o=) 4: AS18607.asa (hash: ol8lct09PZ1pqBOGDq6LTNV0i5NYMmiHGhSWuOi+FwQ=) 5: 326131343a313463313a3230303a3a2f34302d3438203d3e203138363037.roa (hash: eBGi76bk+i5KfnHGqq9jtzpn0gh813x0+GlA90AUkZI=) 6: 326131343a313463303a313a3a2f34382d3438203d3e20323037343837.roa (hash: NlN3fbd4xPs8oXDjI1+pTaPhc7vLifacDO0nMI7gkYc=) 7: 25827D84056B8444CC2A7842759035354B8416BC.crl (hash: 9c7pYuimUf5K+oZk2zYgyM+5y36ApW6BP62gnxxWSwA=) 8: 3138352e3133342e3139312e302f32342d3234203d3e20323037343837.roa (hash: b2vN+3qPM1Kt77HuQ8RzenF0xuc+QJpvrF7GjBac7y0=) 9: AS207487.asa (hash: s3p6b4UEGWgtzDLFmXDHf89hF7XtnQxEviO1lAFHwO4=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/69bbfdcf-35cd-4524-8ffa-3005b0b69a29/0/25827D84056B8444CC2A7842759035354B8416BC.crl rsync://rsync.paas.rpki.ripe.net/repository/69bbfdcf-35cd-4524-8ffa-3005b0b69a29/0/25827D84056B8444CC2A7842759035354B8416BC.mft rsync://rpki.ripe.net/repository/DEFAULT/JYJ9hAVrhETMKnhCdZA1NUuEFrw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 29 Jul 2026 06:55:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:c5:55:c8:97:0f:7e:84:61:5c:50:79:af:2f:60:b9:e9:f1:f5:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=25827d84056b8444cc2a7842759035354b8416bc Validity Not Before: Jul 28 03:13:22 2026 GMT Not After : Jul 29 06:55:22 2026 GMT Subject: CN=908C662001C6613A29A6C9B20B36E40E2CC9AF19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:cd:60:7c:34:23:d0:fb:93:3c:c5:9e:ec:a4: ab:5e:8f:b2:35:cb:56:45:a1:5f:2a:be:8a:07:40: 61:38:a9:b8:0e:54:30:bf:ed:d4:bd:57:e7:73:3a: a1:e8:dd:f9:2b:bb:f3:13:55:0b:8c:1e:13:6c:22: b0:c6:ef:c1:b7:27:17:02:71:37:aa:cf:3f:8c:d5: fb:8b:e5:07:65:51:33:62:bb:e6:52:fc:5a:99:e8: ee:23:72:18:08:0f:c1:c8:1b:6e:e4:6b:14:22:b5: 40:3c:92:af:11:1f:18:b2:a5:c1:0a:51:7c:49:0c: 1f:6f:5e:66:76:c2:b7:e8:f3:cd:4e:15:90:54:cf: 9f:ae:13:ac:88:d1:2e:6e:12:0f:b0:97:cf:9c:65: 74:d7:04:57:06:9a:58:86:3b:82:bc:7c:d0:06:bf: 8b:b1:fd:63:1f:83:90:eb:d1:89:08:d8:30:cf:a4: 4a:b4:85:ab:50:d5:71:49:21:3a:bf:c7:77:13:67: 0e:77:78:94:61:a7:49:7e:8c:16:a9:0b:aa:4d:84: d8:b1:4b:f1:cf:b7:2e:d5:43:2b:8f:45:d1:21:8b: a6:83:db:10:78:ab:98:62:be:f9:97:38:3b:89:65: 40:31:0e:ef:16:ff:72:9b:24:72:be:39:37:1a:a4: 3e:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:8C:66:20:01:C6:61:3A:29:A6:C9:B2:0B:36:E4:0E:2C:C9:AF:19 X509v3 Authority Key Identifier: keyid:25:82:7D:84:05:6B:84:44:CC:2A:78:42:75:90:35:35:4B:84:16:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/69bbfdcf-35cd-4524-8ffa-3005b0b69a29/0/25827D84056B8444CC2A7842759035354B8416BC.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JYJ9hAVrhETMKnhCdZA1NUuEFrw.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/69bbfdcf-35cd-4524-8ffa-3005b0b69a29/0/25827D84056B8444CC2A7842759035354B8416BC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:8f:6a:f7:cc:e9:4b:79:9e:57:c8:75:e0:00:ec:69:28:58: f8:a1:cf:4b:19:e1:d3:ed:c4:be:2a:e4:80:a3:b4:31:3d:f6: de:58:3b:b7:f5:b3:b5:01:cf:85:19:ed:ba:4b:b2:a4:84:db: 0d:da:7a:95:e6:df:68:2e:40:ad:35:e0:df:45:ff:ae:b4:e1: de:c5:00:c8:6a:80:0c:5c:0a:b6:a3:fe:55:cb:6b:ae:aa:cd: 48:1a:82:e7:04:2c:59:99:a0:e5:7b:2a:93:37:ed:86:1b:bd: da:a2:d4:00:98:48:53:c9:d4:bb:02:78:98:4a:f5:95:ae:86: 1e:a3:c8:ae:5f:75:08:13:b1:d4:24:4f:a9:cb:fb:e5:93:22: f4:12:b3:99:fa:5b:b8:af:47:c3:e6:96:d1:cb:c3:67:3a:10: 87:49:b6:cd:3e:55:ca:0c:58:c3:11:90:bb:7a:09:4c:6d:fe: 52:cc:90:46:d6:c4:51:c0:b0:32:0e:bb:cc:e7:0b:c8:03:ea: 1f:95:66:14:f6:e0:3b:ac:14:ce:12:b0:6c:ff:aa:84:29:20: 81:3e:da:f3:4e:3d:14:a1:05:83:43:0f:75:04:ac:39:5a:23: ca:fd:19:fd:a6:b4:39:65:15:7d:49:0b:16:d1:1f:d3:d9:3d: fb:26:43:d8 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUIMVVyJcPfoRhXFB5ry9guenx9ecwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjU4MjdkODQwNTZiODQ0NGNjMmE3ODQyNzU5MDM1MzU0 Yjg0MTZiYzAeFw0yNjA3MjgwMzEzMjJaFw0yNjA3MjkwNjU1MjJaMDMxMTAvBgNV BAMTKDkwOEM2NjIwMDFDNjYxM0EyOUE2QzlCMjBCMzZFNDBFMkNDOUFGMTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCMzWB8NCPQ+5M8xZ7spKtej7I1 y1ZFoV8qvooHQGE4qbgOVDC/7dS9V+dzOqHo3fkru/MTVQuMHhNsIrDG78G3JxcC cTeqzz+M1fuL5QdlUTNiu+ZS/FqZ6O4jchgID8HIG27kaxQitUA8kq8RHxiypcEK UXxJDB9vXmZ2wrfo881OFZBUz5+uE6yI0S5uEg+wl8+cZXTXBFcGmliGO4K8fNAG v4ux/WMfg5Dr0YkI2DDPpEq0hatQ1XFJITq/x3cTZw53eJRhp0l+jBapC6pNhNix S/HPty7VQyuPRdEhi6aD2xB4q5hivvmXODuJZUAxDu8W/3KbJHK+OTcapD5HAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUkIxmIAHGYToppsmyCzbkDizJrxkwHwYDVR0j BBgwFoAUJYJ9hAVrhETMKnhCdZA1NUuEFrwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNjliYmZkY2YtMzVjZC00NTI0LThmZmEtMzAwNWIwYjY5 YTI5LzAvMjU4MjdEODQwNTZCODQ0NENDMkE3ODQyNzU5MDM1MzU0Qjg0MTZCQy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0pZSjloQVZyaEVUTUtuaENkWkExTlV1 RUZydy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS82OWJiZmRjZi0z NWNkLTQ1MjQtOGZmYS0zMDA1YjBiNjlhMjkvMC8yNTgyN0Q4NDA1NkI4NDQ0Q0My QTc4NDI3NTkwMzUzNTRCODQxNkJDLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANo9q98zpS3meV8h14ADs aShY+KHPSxnh0+3EvirkgKO0MT323lg7t/WztQHPhRntukuypITbDdp6lebfaC5A rTXg30X/rrTh3sUAyGqADFwKtqP+VctrrqrNSBqC5wQsWZmg5Xsqkzfthhu92qLU AJhIU8nUuwJ4mEr1la6GHqPIrl91CBOx1CRPqcv75ZMi9BKzmfpbuK9Hw+aW0cvD ZzoQh0m2zT5VygxYwxGQu3oJTG3+UsyQRtbEUcCwMg67zOcLyAPqH5VmFPbgO6wU zhKwbP+qhCkggT7a8049FKEFg0MPdQSsOVojyv0Z/aa0OWUVfUkLFtEf09k9+yZD 2A== -----END CERTIFICATE-----Generated at Tue Jul 28 18:39:51 2026 by rpki-client