$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/69bbfdcf-35cd-4524-8ffa-3005b0b69a29/0/25827D84056B8444CC2A7842759035354B8416BC.mft File: 25827D84056B8444CC2A7842759035354B8416BC.mft (raw, json) Hash identifier: HOG0MoopFFUyn1LCD0EQNGrIYBMhv4w6YVmlT14WGAY= Subject key identifier: 31:79:6D:5C:D1:18:C3:32:53:CA:91:00:2E:AD:2D:A2:01:5B:F2:2E Authority key identifier: 25:82:7D:84:05:6B:84:44:CC:2A:78:42:75:90:35:35:4B:84:16:BC Certificate issuer: /CN=25827d84056b8444cc2a7842759035354b8416bc Certificate serial: 1A8B8E4B496E561ADB9768927771883B990BBDB2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JYJ9hAVrhETMKnhCdZA1NUuEFrw.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/69bbfdcf-35cd-4524-8ffa-3005b0b69a29/0/25827D84056B8444CC2A7842759035354B8416BC.mft Manifest number: 023A Signing time: Fri 08 Aug 2025 00:31:47 +0000 Manifest this update: Fri 08 Aug 2025 00:26:47 +0000 Manifest next update: Sat 09 Aug 2025 03:42:47 +0000 Files and hashes: 1: 326131343a313463313a3230303a3a2f34302d3438203d3e203138363037.roa (hash: Pf0WXVKsadiaiJtusSEXuFj/o/oP56mVyLEI27IiyE8=) 2: 58E92F2C3859C2D0EF322A871688CB22928E2F3E.cer (hash: gYiT3SS0bbmQQSp3p/LPeJzfbx3ujd90DskZO9GZ0PQ=) 3: AS18607.asa (hash: UmRU72jnrIjcrDo/h9XDTnV/XRM8dz+BcjyGexjXWqI=) 4: 326131343a313463303a313a3a2f34382d3438203d3e20323037343837.roa (hash: nCuZ5ADJB2e8lGpTQQDYT3/JtyMvU82Myd2okt8I23s=) 5: AS207487.asa (hash: Ha+forEe+xS82UGSV4B7j+UWBj+/I05XFS+Ojajx3y4=) 6: 326131343a313463303a323a3a2f34382d3438203d3e20323037343837.roa (hash: lVUTv9ePxFs76NYMpRch/wm8DFit0p7cLkwe+1lgWxI=) 7: 326131343a313463303a3a2f34382d3438203d3e20323037343837.roa (hash: MAksePoJ+rnc08XyHZPcbQHx/BhF1iv7lCiKD0GFWxw=) 8: 25827D84056B8444CC2A7842759035354B8416BC.crl (hash: 0l+knDpFpajN4wQe9gWLPMRc5YpLalfPvU1oY40w/Hw=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/69bbfdcf-35cd-4524-8ffa-3005b0b69a29/0/25827D84056B8444CC2A7842759035354B8416BC.crl rsync://rsync.paas.rpki.ripe.net/repository/69bbfdcf-35cd-4524-8ffa-3005b0b69a29/0/25827D84056B8444CC2A7842759035354B8416BC.mft rsync://rpki.ripe.net/repository/DEFAULT/JYJ9hAVrhETMKnhCdZA1NUuEFrw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 09 Aug 2025 03:42:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:8b:8e:4b:49:6e:56:1a:db:97:68:92:77:71:88:3b:99:0b:bd:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=25827d84056b8444cc2a7842759035354b8416bc Validity Not Before: Aug 8 00:26:47 2025 GMT Not After : Aug 9 03:42:47 2025 GMT Subject: CN=31796D5CD118C33253CA91002EAD2DA2015BF22E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:8e:23:b5:36:c9:37:18:1c:c2:e0:a2:4a:6f: f7:7e:0a:42:a8:0d:d6:87:a4:b4:5d:ef:cd:b8:2e: 91:cd:28:78:61:95:5a:c8:e1:c2:6e:88:c3:19:c3: 9c:be:d5:09:b8:51:58:85:dc:8c:a5:57:af:4a:ed: c4:d8:16:34:7d:8a:9e:94:37:14:18:66:56:ed:7a: 0a:cb:ac:15:bd:20:eb:02:92:b6:36:47:53:fd:70: f5:2a:b4:35:36:b6:c9:7a:67:4e:62:42:f4:b1:35: e7:1f:74:cd:67:3c:ad:6f:8c:e1:c2:aa:7b:0d:47: ee:5e:25:2d:93:e7:46:4e:c9:0e:3d:21:81:8e:6f: ae:4d:ec:f2:75:39:e0:93:21:59:28:b5:4d:84:a1: 5e:24:76:3a:5a:0f:60:3f:8d:87:75:e1:b7:07:72: ac:88:5d:5f:e6:03:a5:51:a9:4f:37:f5:91:35:39: 5f:bd:3e:d4:8d:1d:21:71:60:2a:97:26:81:b9:14: cd:58:cd:56:5d:a9:54:2a:26:77:9c:2d:36:7b:bb: 83:87:99:98:ad:e3:db:08:c0:77:65:4d:25:05:7c: 83:56:ee:55:cd:67:cf:11:b4:f3:1b:8d:fd:3a:99: 48:b5:36:e8:00:24:0d:08:58:3b:f7:92:55:25:34: 72:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:79:6D:5C:D1:18:C3:32:53:CA:91:00:2E:AD:2D:A2:01:5B:F2:2E X509v3 Authority Key Identifier: keyid:25:82:7D:84:05:6B:84:44:CC:2A:78:42:75:90:35:35:4B:84:16:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/69bbfdcf-35cd-4524-8ffa-3005b0b69a29/0/25827D84056B8444CC2A7842759035354B8416BC.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JYJ9hAVrhETMKnhCdZA1NUuEFrw.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/69bbfdcf-35cd-4524-8ffa-3005b0b69a29/0/25827D84056B8444CC2A7842759035354B8416BC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:b6:5e:cd:2b:d9:da:78:94:7b:60:48:84:7f:af:5a:79:f9: ce:68:4e:01:f7:8b:d1:f8:56:13:1b:5e:06:51:6f:a4:76:ac: 34:9f:1d:e2:c8:ce:a1:fc:2d:8c:a8:c1:92:34:21:73:93:d7: bf:f1:d3:90:4a:1f:38:44:b9:07:7a:0a:8b:9f:eb:85:8c:af: 96:fc:89:1e:56:37:b3:a5:50:9f:da:c5:63:59:fa:fc:06:b4: b7:c1:29:fc:1a:a1:dd:5c:8e:2b:5f:99:96:cc:81:50:67:fd: c9:1a:66:96:11:c6:03:1c:1f:69:87:25:8e:f3:f0:00:73:32: 73:71:99:bd:67:b3:27:53:c3:b6:51:b4:84:27:1f:0d:dd:4d: 8a:d4:1a:88:c6:73:9d:6c:f7:26:9f:54:35:23:fa:2f:ec:bf: df:ed:83:b9:e2:6a:18:8c:c6:2b:60:2d:81:4e:9a:a6:5d:6d: f1:7f:20:a3:4e:9e:31:32:24:d7:48:d6:9b:3f:54:a4:91:11: ad:07:47:97:58:45:f1:31:6a:30:b8:6a:3d:7b:29:2d:c7:07: cf:2e:ea:a9:d3:5c:58:29:48:f9:28:10:18:fb:cc:a2:c3:cf: 3a:c4:ce:eb:70:bd:3c:4d:a1:4c:cb:58:60:cd:3c:e9:a0:75: 88:e8:b1:02 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUGouOS0luVhrbl2iSd3GIO5kLvbIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjU4MjdkODQwNTZiODQ0NGNjMmE3ODQyNzU5MDM1MzU0 Yjg0MTZiYzAeFw0yNTA4MDgwMDI2NDdaFw0yNTA4MDkwMzQyNDdaMDMxMTAvBgNV BAMTKDMxNzk2RDVDRDExOEMzMzI1M0NBOTEwMDJFQUQyREEyMDE1QkYyMkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWjiO1Nsk3GBzC4KJKb/d+CkKo DdaHpLRd7824LpHNKHhhlVrI4cJuiMMZw5y+1Qm4UViF3IylV69K7cTYFjR9ip6U NxQYZlbtegrLrBW9IOsCkrY2R1P9cPUqtDU2tsl6Z05iQvSxNecfdM1nPK1vjOHC qnsNR+5eJS2T50ZOyQ49IYGOb65N7PJ1OeCTIVkotU2EoV4kdjpaD2A/jYd14bcH cqyIXV/mA6VRqU839ZE1OV+9PtSNHSFxYCqXJoG5FM1YzVZdqVQqJnecLTZ7u4OH mZit49sIwHdlTSUFfINW7lXNZ88RtPMbjf06mUi1NugAJA0IWDv3klUlNHJlAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUMXltXNEYwzJTypEALq0togFb8i4wHwYDVR0j BBgwFoAUJYJ9hAVrhETMKnhCdZA1NUuEFrwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNjliYmZkY2YtMzVjZC00NTI0LThmZmEtMzAwNWIwYjY5 YTI5LzAvMjU4MjdEODQwNTZCODQ0NENDMkE3ODQyNzU5MDM1MzU0Qjg0MTZCQy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0pZSjloQVZyaEVUTUtuaENkWkExTlV1 RUZydy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS82OWJiZmRjZi0z NWNkLTQ1MjQtOGZmYS0zMDA1YjBiNjlhMjkvMC8yNTgyN0Q4NDA1NkI4NDQ0Q0My QTc4NDI3NTkwMzUzNTRCODQxNkJDLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS7ZezSvZ2niUe2BIhH+v Wnn5zmhOAfeL0fhWExteBlFvpHasNJ8d4sjOofwtjKjBkjQhc5PXv/HTkEofOES5 B3oKi5/rhYyvlvyJHlY3s6VQn9rFY1n6/Aa0t8Ep/Bqh3VyOK1+ZlsyBUGf9yRpm lhHGAxwfaYcljvPwAHMyc3GZvWezJ1PDtlG0hCcfDd1NitQaiMZznWz3Jp9UNSP6 L+y/3+2DueJqGIzGK2AtgU6apl1t8X8go06eMTIk10jWmz9UpJERrQdHl1hF8TFq MLhqPXspLccHzy7qqdNcWClI+SgQGPvMosPPOsTO63C9PE2hTMtYYM086aB1iOix Ag== -----END CERTIFICATE-----Generated at Fri Aug 8 20:39:59 2025 by rpki-client