$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3eafc32b-ec03-4319-b1c6-3c1c4727e06f/0/27851163005F59C06E35A8FD365F96356EB34971.mft File: 27851163005F59C06E35A8FD365F96356EB34971.mft (raw, json) Hash identifier: 5p0o+FlQlrUWj6dJGL2oDaVigSF8atfsaO+mB1cFbVk= Subject key identifier: 1F:44:0E:9B:C7:9F:37:13:AA:A0:19:D9:A6:86:6C:A0:C6:F0:26:64 Authority key identifier: 27:85:11:63:00:5F:59:C0:6E:35:A8:FD:36:5F:96:35:6E:B3:49:71 Certificate issuer: /CN=27851163005f59c06e35a8fd365f96356eb34971 Certificate serial: CABDF548D4AD0F6A665F0B588E547BC81939A1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J4URYwBfWcBuNaj9Nl-WNW6zSXE.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/3eafc32b-ec03-4319-b1c6-3c1c4727e06f/0/27851163005F59C06E35A8FD365F96356EB34971.mft Manifest number: D0 Signing time: Sat 28 Jun 2025 10:09:38 +0000 Manifest this update: Sat 28 Jun 2025 10:04:38 +0000 Manifest next update: Sun 29 Jun 2025 11:16:38 +0000 Files and hashes: 1: 27851163005F59C06E35A8FD365F96356EB34971.crl (hash: MnIUU0axbKPvmKODYssNuFiJrfdeNjxNFwLj53XGOoU=) 2: 323030313a3637633a6638633a3a2f34382d3438203d3e20323132383535.roa (hash: prfcq9YIMAg2ry1iZCXqsMkFnalbT+MPZdyoUmwmw6g=) 3: 39332e3135372e3134302e302f32342d3234203d3e20323132383535.roa (hash: hdp9Cx8dMbvUUOjRrqy1XfSIVtsUnXM8OZnay1usHT4=) 4: AS212855.asa (hash: T3YdrgEJ1P9IU1IPBHUKuz7lJiYzWWWbNO7fDdrADAU=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/3eafc32b-ec03-4319-b1c6-3c1c4727e06f/0/27851163005F59C06E35A8FD365F96356EB34971.crl rsync://rsync.paas.rpki.ripe.net/repository/3eafc32b-ec03-4319-b1c6-3c1c4727e06f/0/27851163005F59C06E35A8FD365F96356EB34971.mft rsync://rpki.ripe.net/repository/DEFAULT/J4URYwBfWcBuNaj9Nl-WNW6zSXE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 29 Jun 2025 11:16:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: ca:bd:f5:48:d4:ad:0f:6a:66:5f:0b:58:8e:54:7b:c8:19:39:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=27851163005f59c06e35a8fd365f96356eb34971 Validity Not Before: Jun 28 10:04:38 2025 GMT Not After : Jun 29 11:16:38 2025 GMT Subject: CN=1F440E9BC79F3713AAA019D9A6866CA0C6F02664 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:44:d8:ef:88:25:d8:54:76:df:8a:1e:06:70: d4:8d:a0:20:a7:0c:75:d0:3d:0d:98:0f:4b:93:0d: d2:a0:2d:cb:49:7c:83:7b:2b:11:79:4e:08:0d:c9: a2:3d:99:60:fe:24:ac:88:01:44:f8:67:13:ee:8f: 13:8d:15:8e:b6:23:79:f3:c5:8a:a1:e4:c6:5c:e6: cf:5c:38:9c:f5:fa:52:fd:2f:85:a0:17:cd:8e:43: 25:c2:fe:7c:1a:b0:50:b6:72:d9:f0:cf:63:48:ad: 6c:3f:42:f8:96:bc:6a:82:e3:c4:70:63:62:db:53: 48:ce:89:50:25:d9:83:e0:0b:8d:df:64:eb:af:ca: ed:5d:b1:6e:f7:5a:e5:65:1b:d2:f6:7f:d0:9c:91: c5:1f:93:00:16:f2:26:b9:4a:22:1a:b4:1d:36:79: d5:77:8f:94:3e:af:37:c5:a9:b4:81:f6:3c:a1:ae: 91:13:27:f7:af:1e:3b:26:cd:38:e8:d1:48:57:d4: 6b:8b:66:85:ea:38:05:80:47:e2:11:dd:21:76:d8: f2:58:fe:d4:d3:96:a2:b3:b0:fe:b0:74:0a:d4:8e: 9d:01:f3:6f:74:ab:53:c4:23:72:a8:94:04:30:1d: ea:b8:55:5c:71:8a:18:04:d8:72:67:d6:7e:57:8c: 1d:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:44:0E:9B:C7:9F:37:13:AA:A0:19:D9:A6:86:6C:A0:C6:F0:26:64 X509v3 Authority Key Identifier: keyid:27:85:11:63:00:5F:59:C0:6E:35:A8:FD:36:5F:96:35:6E:B3:49:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/3eafc32b-ec03-4319-b1c6-3c1c4727e06f/0/27851163005F59C06E35A8FD365F96356EB34971.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J4URYwBfWcBuNaj9Nl-WNW6zSXE.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3eafc32b-ec03-4319-b1c6-3c1c4727e06f/0/27851163005F59C06E35A8FD365F96356EB34971.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ba:16:f3:74:b3:d2:f6:34:53:63:82:63:64:37:c9:1b:94:d3: 5a:c8:17:b8:4c:40:dc:fa:a4:2b:c5:3e:f0:ab:6e:ed:d4:1e: 18:70:86:54:93:4e:2c:e7:73:87:8a:cc:17:00:28:b0:61:d3: 02:b7:cc:b3:0f:d3:72:8f:a5:60:54:a6:0e:4b:e1:c7:ba:28: a3:2e:a4:1b:de:9d:5d:9a:81:0b:c5:64:32:89:ae:74:93:7a: 1a:f5:e2:4c:c7:2c:72:f1:aa:ea:93:18:36:41:98:72:8d:fa: a9:71:e0:3a:8b:4f:b5:8a:ee:39:9e:5a:5d:45:cc:99:2a:88: 6a:c5:0c:8f:aa:bb:5c:1c:4e:95:c5:5d:dd:7b:44:2b:6b:99: 91:86:73:d5:4b:1e:d2:4c:5f:b5:d8:61:bc:b2:67:62:72:94: c1:10:88:f2:fe:b9:33:4a:e3:8c:50:0a:85:90:62:25:33:51: 31:90:b1:78:52:bc:39:3d:98:fc:a0:6b:26:7d:d6:39:63:3a: bd:0f:0e:ce:2c:bc:7e:18:f3:e0:89:4d:2e:11:81:7e:8e:d4: ac:70:70:ad:26:45:63:28:57:51:6d:e9:3e:87:55:e4:07:9e: f3:75:51:5a:11:dc:ba:43:4f:4e:5a:88:7c:4e:4c:b6:13:2f: d8:0f:66:75 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUAMq99UjUrQ9qZl8LWI5Ue8gZOaEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjc4NTExNjMwMDVmNTljMDZlMzVhOGZkMzY1Zjk2MzU2 ZWIzNDk3MTAeFw0yNTA2MjgxMDA0MzhaFw0yNTA2MjkxMTE2MzhaMDMxMTAvBgNV BAMTKDFGNDQwRTlCQzc5RjM3MTNBQUEwMTlEOUE2ODY2Q0EwQzZGMDI2NjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpRNjviCXYVHbfih4GcNSNoCCn DHXQPQ2YD0uTDdKgLctJfIN7KxF5TggNyaI9mWD+JKyIAUT4ZxPujxONFY62I3nz xYqh5MZc5s9cOJz1+lL9L4WgF82OQyXC/nwasFC2ctnwz2NIrWw/QviWvGqC48Rw Y2LbU0jOiVAl2YPgC43fZOuvyu1dsW73WuVlG9L2f9CckcUfkwAW8ia5SiIatB02 edV3j5Q+rzfFqbSB9jyhrpETJ/evHjsmzTjo0UhX1GuLZoXqOAWAR+IR3SF22PJY /tTTlqKzsP6wdArUjp0B8290q1PEI3KolAQwHeq4VVxxihgE2HJn1n5XjB39AgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUH0QOm8efNxOqoBnZpoZsoMbwJmQwHwYDVR0j BBgwFoAUJ4URYwBfWcBuNaj9Nl+WNW6zSXEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvM2VhZmMzMmItZWMwMy00MzE5LWIxYzYtM2MxYzQ3Mjdl MDZmLzAvMjc4NTExNjMwMDVGNTlDMDZFMzVBOEZEMzY1Rjk2MzU2RUIzNDk3MS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0o0VVJZd0JmV2NCdU5hajlObC1XTlc2 elNYRS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8zZWFmYzMyYi1l YzAzLTQzMTktYjFjNi0zYzFjNDcyN2UwNmYvMC8yNzg1MTE2MzAwNUY1OUMwNkUz NUE4RkQzNjVGOTYzNTZFQjM0OTcxLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuhbzdLPS9jRTY4JjZDfJ G5TTWsgXuExA3PqkK8U+8Ktu7dQeGHCGVJNOLOdzh4rMFwAosGHTArfMsw/Tco+l YFSmDkvhx7oooy6kG96dXZqBC8VkMomudJN6GvXiTMcscvGq6pMYNkGYco36qXHg OotPtYruOZ5aXUXMmSqIasUMj6q7XBxOlcVd3XtEK2uZkYZz1Use0kxftdhhvLJn YnKUwRCI8v65M0rjjFAKhZBiJTNRMZCxeFK8OT2Y/KBrJn3WOWM6vQ8Oziy8fhjz 4IlNLhGBfo7UrHBwrSZFYyhXUW3pPodV5Aee83VRWhHcukNPTlqIfE5MthMv2A9m dQ== -----END CERTIFICATE-----Generated at Sat Jun 28 21:21:16 2025 by rpki-client