$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/69bbfdcf-35cd-4524-8ffa-3005b0b69a29/0/25827D84056B8444CC2A7842759035354B8416BC.mft File: 25827D84056B8444CC2A7842759035354B8416BC.mft (raw, json) Hash identifier: gJ45Eq8bO8WsAvEd1opq8x72gUHYWKNaguHrnIIdyUs= Subject key identifier: 5B:C9:3C:B3:4E:D8:CF:E1:D5:49:8C:CF:E4:A2:82:F1:DF:3A:EE:A5 Authority key identifier: 25:82:7D:84:05:6B:84:44:CC:2A:78:42:75:90:35:35:4B:84:16:BC Certificate issuer: /CN=25827d84056b8444cc2a7842759035354b8416bc Certificate serial: 537CD89D58001A6EA7561804A99EA3D3D6BE4BDE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JYJ9hAVrhETMKnhCdZA1NUuEFrw.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/69bbfdcf-35cd-4524-8ffa-3005b0b69a29/0/25827D84056B8444CC2A7842759035354B8416BC.mft Manifest number: 034D Signing time: Sat 28 Feb 2026 20:27:38 +0000 Manifest this update: Sat 28 Feb 2026 20:22:38 +0000 Manifest next update: Sun 01 Mar 2026 23:14:38 +0000 Files and hashes: 1: 3138352e3133342e3139312e302f32342d3234203d3e20323037343837.roa (hash: wMCy3m1h75GfC2ATV5bYCJD7S6jjiI8Si5ikYie+OUI=) 2: 326131343a313463303a3a2f34382d3438203d3e20323037343837.roa (hash: MAksePoJ+rnc08XyHZPcbQHx/BhF1iv7lCiKD0GFWxw=) 3: AS207487.asa (hash: Ha+forEe+xS82UGSV4B7j+UWBj+/I05XFS+Ojajx3y4=) 4: 326131343a313463313a3230303a3a2f34302d3438203d3e203138363037.roa (hash: eBGi76bk+i5KfnHGqq9jtzpn0gh813x0+GlA90AUkZI=) 5: AS18607.asa (hash: ol8lct09PZ1pqBOGDq6LTNV0i5NYMmiHGhSWuOi+FwQ=) 6: 58E92F2C3859C2D0EF322A871688CB22928E2F3E.cer (hash: gYiT3SS0bbmQQSp3p/LPeJzfbx3ujd90DskZO9GZ0PQ=) 7: 25827D84056B8444CC2A7842759035354B8416BC.crl (hash: YFflleecX+6Hdj7Q2fwJFUa8rZY8H/4VSl7Ze9/Kt7o=) 8: 326131343a313463303a323a3a2f34382d3438203d3e20323037343837.roa (hash: lVUTv9ePxFs76NYMpRch/wm8DFit0p7cLkwe+1lgWxI=) 9: 326131343a313463303a313a3a2f34382d3438203d3e20323037343837.roa (hash: nCuZ5ADJB2e8lGpTQQDYT3/JtyMvU82Myd2okt8I23s=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/69bbfdcf-35cd-4524-8ffa-3005b0b69a29/0/25827D84056B8444CC2A7842759035354B8416BC.crl rsync://rsync.paas.rpki.ripe.net/repository/69bbfdcf-35cd-4524-8ffa-3005b0b69a29/0/25827D84056B8444CC2A7842759035354B8416BC.mft rsync://rpki.ripe.net/repository/DEFAULT/JYJ9hAVrhETMKnhCdZA1NUuEFrw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 01 Mar 2026 23:14:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:7c:d8:9d:58:00:1a:6e:a7:56:18:04:a9:9e:a3:d3:d6:be:4b:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=25827d84056b8444cc2a7842759035354b8416bc Validity Not Before: Feb 28 20:22:38 2026 GMT Not After : Mar 1 23:14:38 2026 GMT Subject: CN=5BC93CB34ED8CFE1D5498CCFE4A282F1DF3AEEA5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:67:bb:f2:dc:4e:32:5b:de:80:af:3c:69:06: 89:eb:41:12:52:29:96:98:97:2e:4b:42:d6:c4:72: 30:3f:ee:16:a2:1c:81:98:93:46:ee:ae:61:c8:7c: de:7f:0d:08:a6:cd:a4:b1:d7:fc:44:99:42:1c:ca: de:75:bc:27:0a:b1:39:ad:dd:0d:0b:7d:40:d9:b0: 71:f8:40:eb:57:d9:f7:33:e8:0e:fe:9f:72:f4:72: 4c:3e:31:b5:83:44:e8:a4:78:fd:85:6a:50:5b:9d: fe:b4:0e:78:9c:4f:8c:29:f5:c1:6a:e7:08:f2:34: 9c:c8:a0:ab:cb:7f:6d:72:17:d3:9d:12:b4:a6:4b: 1d:cc:e7:d2:fe:2a:05:83:20:42:37:20:e6:27:b8: a1:b6:6b:49:c8:9f:d2:20:25:c0:01:ed:75:66:f5: 72:5b:5c:c1:5d:79:4e:a7:8b:77:1a:7f:c2:2f:eb: c2:6f:d6:56:7a:73:f3:0b:ae:23:dc:5e:e2:69:71: e6:af:54:0f:7a:95:ac:1b:c5:eb:a6:82:e3:43:fc: 00:a2:95:9b:da:89:fd:74:0a:1f:b3:5b:2a:c6:29: aa:de:bf:91:75:f4:06:4f:42:7d:18:d9:61:58:e3: 8e:51:e5:c9:04:e1:e7:68:77:88:5c:30:5f:69:ec: 6e:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:C9:3C:B3:4E:D8:CF:E1:D5:49:8C:CF:E4:A2:82:F1:DF:3A:EE:A5 X509v3 Authority Key Identifier: keyid:25:82:7D:84:05:6B:84:44:CC:2A:78:42:75:90:35:35:4B:84:16:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/69bbfdcf-35cd-4524-8ffa-3005b0b69a29/0/25827D84056B8444CC2A7842759035354B8416BC.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JYJ9hAVrhETMKnhCdZA1NUuEFrw.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/69bbfdcf-35cd-4524-8ffa-3005b0b69a29/0/25827D84056B8444CC2A7842759035354B8416BC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:bf:98:0b:5d:51:66:af:7d:af:1c:8a:ef:54:02:5c:ca:81: 0f:5b:fe:a4:ae:9f:41:3a:79:3b:a5:09:25:16:75:35:5b:88: e7:24:f4:75:07:e9:db:40:2c:52:02:09:cc:68:bf:47:d3:bc: e6:a8:bf:81:78:92:eb:ed:fd:82:3f:51:87:3c:34:2f:d4:4e: 6d:1e:cc:0e:a3:cd:ce:a4:66:ca:59:b8:2c:82:eb:c3:2e:d3: 9a:13:a3:52:4e:a0:d0:7a:a8:da:a6:c1:66:37:83:b7:65:a2: d2:f8:b5:79:9f:8c:b3:16:fc:ad:dd:e7:91:ed:d0:48:f2:64: ae:15:bc:88:f5:ff:1b:23:45:fc:60:ec:a9:4c:03:ed:53:ab: a0:97:1c:68:e1:a0:7a:1a:c7:24:e2:a0:96:dd:06:98:1d:0f: ee:3d:6e:0b:c0:02:d1:36:f8:e0:f1:5c:c7:b8:39:fb:95:5c: 9a:a2:7f:f5:d1:0b:75:27:a1:7e:e9:08:c6:2a:28:44:fb:b9: 41:8a:ca:e4:01:11:4e:c5:af:9e:a8:85:ac:84:dd:ef:f0:a6: 58:b5:81:ff:12:4f:f5:72:56:42:3d:b6:c2:7d:7f:b1:d0:9f: 0b:98:d4:0e:3f:2f:8e:62:8e:35:49:91:ba:6a:96:05:f7:d1: 5a:26:66:6c -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUU3zYnVgAGm6nVhgEqZ6j09a+S94wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjU4MjdkODQwNTZiODQ0NGNjMmE3ODQyNzU5MDM1MzU0 Yjg0MTZiYzAeFw0yNjAyMjgyMDIyMzhaFw0yNjAzMDEyMzE0MzhaMDMxMTAvBgNV BAMTKDVCQzkzQ0IzNEVEOENGRTFENTQ5OENDRkU0QTI4MkYxREYzQUVFQTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwZ7vy3E4yW96ArzxpBonrQRJS KZaYly5LQtbEcjA/7haiHIGYk0burmHIfN5/DQimzaSx1/xEmUIcyt51vCcKsTmt 3Q0LfUDZsHH4QOtX2fcz6A7+n3L0ckw+MbWDROikeP2FalBbnf60DnicT4wp9cFq 5wjyNJzIoKvLf21yF9OdErSmSx3M59L+KgWDIEI3IOYnuKG2a0nIn9IgJcAB7XVm 9XJbXMFdeU6ni3caf8Iv68Jv1lZ6c/MLriPcXuJpceavVA96lawbxeumguND/ACi lZvaif10Ch+zWyrGKarev5F19AZPQn0Y2WFY445R5ckE4edod4hcMF9p7G5DAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUW8k8s07Yz+HVSYzP5KKC8d867qUwHwYDVR0j BBgwFoAUJYJ9hAVrhETMKnhCdZA1NUuEFrwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNjliYmZkY2YtMzVjZC00NTI0LThmZmEtMzAwNWIwYjY5 YTI5LzAvMjU4MjdEODQwNTZCODQ0NENDMkE3ODQyNzU5MDM1MzU0Qjg0MTZCQy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0pZSjloQVZyaEVUTUtuaENkWkExTlV1 RUZydy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS82OWJiZmRjZi0z NWNkLTQ1MjQtOGZmYS0zMDA1YjBiNjlhMjkvMC8yNTgyN0Q4NDA1NkI4NDQ0Q0My QTc4NDI3NTkwMzUzNTRCODQxNkJDLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWL+YC11RZq99rxyK71QC XMqBD1v+pK6fQTp5O6UJJRZ1NVuI5yT0dQfp20AsUgIJzGi/R9O85qi/gXiS6+39 gj9Rhzw0L9RObR7MDqPNzqRmylm4LILrwy7TmhOjUk6g0Hqo2qbBZjeDt2Wi0vi1 eZ+Msxb8rd3nke3QSPJkrhW8iPX/GyNF/GDsqUwD7VOroJccaOGgehrHJOKglt0G mB0P7j1uC8AC0Tb44PFcx7g5+5VcmqJ/9dELdSehfukIxiooRPu5QYrK5AERTsWv nqiFrITd7/CmWLWB/xJP9XJWQj22wn1/sdCfC5jUDj8vjmKONUmRumqWBffRWiZm bA== -----END CERTIFICATE-----Generated at Sun Mar 1 16:30:24 2026 by rpki-client