$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3eafc32b-ec03-4319-b1c6-3c1c4727e06f/0/27851163005F59C06E35A8FD365F96356EB34971.mft File: 27851163005F59C06E35A8FD365F96356EB34971.mft (raw, json) Hash identifier: e7Fd1MJy1+TRDMRv7xG3Bxmonbdaa5soe9naQLjTHio= Subject key identifier: F9:CD:37:22:9B:11:13:65:F8:4B:BF:48:57:31:6F:8A:4E:23:49:04 Authority key identifier: 27:85:11:63:00:5F:59:C0:6E:35:A8:FD:36:5F:96:35:6E:B3:49:71 Certificate issuer: /CN=27851163005f59c06e35a8fd365f96356eb34971 Certificate serial: 64824D3FE53B60618D748AAD788E18F62E49B687 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J4URYwBfWcBuNaj9Nl-WNW6zSXE.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/3eafc32b-ec03-4319-b1c6-3c1c4727e06f/0/27851163005F59C06E35A8FD365F96356EB34971.mft Manifest number: 011A Signing time: Sat 23 Aug 2025 07:33:14 +0000 Manifest this update: Sat 23 Aug 2025 07:28:14 +0000 Manifest next update: Sun 24 Aug 2025 08:03:14 +0000 Files and hashes: 1: AS212855.asa (hash: T3YdrgEJ1P9IU1IPBHUKuz7lJiYzWWWbNO7fDdrADAU=) 2: 27851163005F59C06E35A8FD365F96356EB34971.crl (hash: kyzERrWRYHRJNVG6uIO/yCzbtzhOVOfTe//iUdqTwks=) 3: 39332e3135372e3134302e302f32342d3234203d3e20323132383535.roa (hash: hdp9Cx8dMbvUUOjRrqy1XfSIVtsUnXM8OZnay1usHT4=) 4: 323030313a3637633a6638633a3a2f34382d3438203d3e20323132383535.roa (hash: prfcq9YIMAg2ry1iZCXqsMkFnalbT+MPZdyoUmwmw6g=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/3eafc32b-ec03-4319-b1c6-3c1c4727e06f/0/27851163005F59C06E35A8FD365F96356EB34971.crl rsync://rsync.paas.rpki.ripe.net/repository/3eafc32b-ec03-4319-b1c6-3c1c4727e06f/0/27851163005F59C06E35A8FD365F96356EB34971.mft rsync://rpki.ripe.net/repository/DEFAULT/J4URYwBfWcBuNaj9Nl-WNW6zSXE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 24 Aug 2025 05:01:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:82:4d:3f:e5:3b:60:61:8d:74:8a:ad:78:8e:18:f6:2e:49:b6:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=27851163005f59c06e35a8fd365f96356eb34971 Validity Not Before: Aug 23 07:28:14 2025 GMT Not After : Aug 24 08:03:14 2025 GMT Subject: CN=F9CD37229B111365F84BBF4857316F8A4E234904 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:fc:f6:b4:36:d5:39:22:f3:6f:3e:26:6d:c0: 47:eb:e2:53:29:b3:03:e5:0a:97:08:dd:90:c2:95: 55:08:52:78:81:3b:d5:01:7b:e0:3a:88:77:e3:7a: 09:11:16:3a:52:bf:33:25:de:39:44:ce:d9:ed:dc: e5:90:8a:07:d3:62:a1:27:1e:87:c0:51:d5:44:24: 61:88:64:c2:0f:08:e4:1e:93:91:80:75:3b:7e:72: 7a:a4:e3:de:ad:48:da:a3:a8:6b:86:70:df:d0:ed: 9e:a7:62:3b:6a:7e:42:6f:11:55:a3:c3:30:6c:5c: ed:3d:bd:26:d7:91:bf:a4:db:18:ea:9a:19:a8:4a: d6:7f:85:e0:6b:d3:10:1c:8e:e7:2e:eb:44:fc:3e: c0:ec:49:fc:34:10:2c:12:18:ff:e9:ae:c9:c9:30: 6d:16:8a:77:71:76:3f:3a:3b:cb:2e:07:a6:39:29: 83:4b:61:67:7b:42:a3:f9:c7:5b:5f:26:06:00:59: fe:65:9d:aa:b4:81:ca:d0:5d:78:50:8e:f2:88:81: 99:8e:01:d3:ae:4f:90:d4:4b:f5:23:8c:5c:c1:75: 5f:7d:68:99:1f:40:f6:11:2a:d7:ce:16:a8:85:e5: 26:d1:f4:85:20:32:2f:c1:f9:21:17:74:31:bc:d4: ae:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:CD:37:22:9B:11:13:65:F8:4B:BF:48:57:31:6F:8A:4E:23:49:04 X509v3 Authority Key Identifier: keyid:27:85:11:63:00:5F:59:C0:6E:35:A8:FD:36:5F:96:35:6E:B3:49:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/3eafc32b-ec03-4319-b1c6-3c1c4727e06f/0/27851163005F59C06E35A8FD365F96356EB34971.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J4URYwBfWcBuNaj9Nl-WNW6zSXE.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3eafc32b-ec03-4319-b1c6-3c1c4727e06f/0/27851163005F59C06E35A8FD365F96356EB34971.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:54:57:9d:15:5d:6d:da:d4:a5:7d:6f:d5:5d:3c:9f:a3:a0: a4:a0:81:cc:db:03:70:e4:4d:38:4d:9f:36:ab:c5:c4:16:3f: 6c:f0:8b:62:ca:09:5a:50:a8:2d:c7:e2:75:45:dd:5c:f1:06: 33:0c:b8:0c:2b:9d:56:4a:15:29:2d:05:eb:91:b5:c9:36:ae: a1:87:77:54:b8:45:56:c9:59:b1:88:b4:11:de:1d:dd:f4:f7: bf:1f:1d:02:58:59:eb:10:d2:2a:49:5d:33:20:10:88:95:9f: 1a:fd:e3:2b:c3:bc:5c:5b:1f:f7:ab:2a:08:25:07:5d:03:f3: 0a:ac:20:e6:95:5f:b6:bf:04:d6:c0:e6:82:23:1d:ff:91:c0: 18:6a:bc:a3:36:6d:5c:3d:a8:0a:f1:ab:6f:fd:ed:b8:2c:b5: d2:02:53:72:64:78:68:29:0b:fd:5d:ee:e5:63:8c:4b:28:70: 0a:56:aa:33:d5:39:fc:97:4b:c5:19:42:12:77:c0:f0:48:61: cf:a2:39:87:42:05:ba:60:e3:0d:0d:7d:76:f7:06:5c:11:51: ba:c9:f0:35:c0:ac:c6:21:81:89:73:76:03:3c:cf:a5:22:f5: ef:4b:90:2c:f7:dc:81:c5:8a:1f:29:1b:5c:f3:11:6f:5e:fe: e4:48:27:96 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUZIJNP+U7YGGNdIqteI4Y9i5JtocwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjc4NTExNjMwMDVmNTljMDZlMzVhOGZkMzY1Zjk2MzU2 ZWIzNDk3MTAeFw0yNTA4MjMwNzI4MTRaFw0yNTA4MjQwODAzMTRaMDMxMTAvBgNV BAMTKEY5Q0QzNzIyOUIxMTEzNjVGODRCQkY0ODU3MzE2RjhBNEUyMzQ5MDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCq/Pa0NtU5IvNvPiZtwEfr4lMp swPlCpcI3ZDClVUIUniBO9UBe+A6iHfjegkRFjpSvzMl3jlEztnt3OWQigfTYqEn HofAUdVEJGGIZMIPCOQek5GAdTt+cnqk496tSNqjqGuGcN/Q7Z6nYjtqfkJvEVWj wzBsXO09vSbXkb+k2xjqmhmoStZ/heBr0xAcjucu60T8PsDsSfw0ECwSGP/prsnJ MG0Windxdj86O8suB6Y5KYNLYWd7QqP5x1tfJgYAWf5lnaq0gcrQXXhQjvKIgZmO AdOuT5DUS/UjjFzBdV99aJkfQPYRKtfOFqiF5SbR9IUgMi/B+SEXdDG81K7BAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQU+c03IpsRE2X4S79IVzFvik4jSQQwHwYDVR0j BBgwFoAUJ4URYwBfWcBuNaj9Nl+WNW6zSXEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvM2VhZmMzMmItZWMwMy00MzE5LWIxYzYtM2MxYzQ3Mjdl MDZmLzAvMjc4NTExNjMwMDVGNTlDMDZFMzVBOEZEMzY1Rjk2MzU2RUIzNDk3MS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0o0VVJZd0JmV2NCdU5hajlObC1XTlc2 elNYRS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8zZWFmYzMyYi1l YzAzLTQzMTktYjFjNi0zYzFjNDcyN2UwNmYvMC8yNzg1MTE2MzAwNUY1OUMwNkUz NUE4RkQzNjVGOTYzNTZFQjM0OTcxLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAClRXnRVdbdrUpX1v1V08 n6OgpKCBzNsDcORNOE2fNqvFxBY/bPCLYsoJWlCoLcfidUXdXPEGMwy4DCudVkoV KS0F65G1yTauoYd3VLhFVslZsYi0Ed4d3fT3vx8dAlhZ6xDSKkldMyAQiJWfGv3j K8O8XFsf96sqCCUHXQPzCqwg5pVftr8E1sDmgiMd/5HAGGq8ozZtXD2oCvGrb/3t uCy10gJTcmR4aCkL/V3u5WOMSyhwClaqM9U5/JdLxRlCEnfA8Ehhz6I5h0IFumDj DQ19dvcGXBFRusnwNcCsxiGBiXN2AzzPpSL170uQLPfcgcWKHykbXPMRb17+5Egn lg== -----END CERTIFICATE-----Generated at Sat Aug 23 11:58:44 2025 by rpki-client