$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3eafc32b-ec03-4319-b1c6-3c1c4727e06f/0/27851163005F59C06E35A8FD365F96356EB34971.mft File: 27851163005F59C06E35A8FD365F96356EB34971.mft (raw, json) Hash identifier: LJgtpaBWNLnq4JB7aqOgbaxj6o3UmIBVBBaUv5S20UU= Subject key identifier: F3:CE:51:EA:06:22:97:9E:F1:BE:78:7A:BB:17:83:9B:36:FF:E3:C2 Authority key identifier: 27:85:11:63:00:5F:59:C0:6E:35:A8:FD:36:5F:96:35:6E:B3:49:71 Certificate issuer: /CN=27851163005f59c06e35a8fd365f96356eb34971 Certificate serial: 3102028E30470FC28E64AE23F2152AE56C2B6861 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J4URYwBfWcBuNaj9Nl-WNW6zSXE.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/3eafc32b-ec03-4319-b1c6-3c1c4727e06f/0/27851163005F59C06E35A8FD365F96356EB34971.mft Manifest number: 0168 Signing time: Mon 20 Oct 2025 05:35:09 +0000 Manifest this update: Mon 20 Oct 2025 05:30:09 +0000 Manifest next update: Tue 21 Oct 2025 06:49:09 +0000 Files and hashes: 1: AS212855.asa (hash: T3YdrgEJ1P9IU1IPBHUKuz7lJiYzWWWbNO7fDdrADAU=) 2: 323030313a3637633a6638633a3a2f34382d3438203d3e20323132383535.roa (hash: prfcq9YIMAg2ry1iZCXqsMkFnalbT+MPZdyoUmwmw6g=) 3: 39332e3135372e3134302e302f32342d3234203d3e20323132383535.roa (hash: hdp9Cx8dMbvUUOjRrqy1XfSIVtsUnXM8OZnay1usHT4=) 4: 27851163005F59C06E35A8FD365F96356EB34971.crl (hash: tQG35p8Xn9NKa8HI3WaL9QrN0YG93ZT2mx/fXKgD/EM=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/3eafc32b-ec03-4319-b1c6-3c1c4727e06f/0/27851163005F59C06E35A8FD365F96356EB34971.crl rsync://rsync.paas.rpki.ripe.net/repository/3eafc32b-ec03-4319-b1c6-3c1c4727e06f/0/27851163005F59C06E35A8FD365F96356EB34971.mft rsync://rpki.ripe.net/repository/DEFAULT/J4URYwBfWcBuNaj9Nl-WNW6zSXE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 21 Oct 2025 06:49:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:02:02:8e:30:47:0f:c2:8e:64:ae:23:f2:15:2a:e5:6c:2b:68:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=27851163005f59c06e35a8fd365f96356eb34971 Validity Not Before: Oct 20 05:30:09 2025 GMT Not After : Oct 21 06:49:09 2025 GMT Subject: CN=F3CE51EA0622979EF1BE787ABB17839B36FFE3C2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:02:12:84:3f:29:1e:66:4d:f4:39:4a:f5:e2: 41:c8:01:6b:ba:c7:4d:f4:bb:9d:92:99:bf:0c:89: 0a:0f:94:c0:74:ee:0e:12:a5:55:1b:66:21:6e:6e: ee:75:8e:e5:2d:83:5a:10:fe:12:c2:7d:73:b7:c9: 3b:d2:74:a6:9e:3c:49:ae:f7:c8:e9:ee:88:d7:b5: 75:e9:a7:fc:71:9a:b0:78:ca:f0:35:10:6e:c9:66: 59:8b:fd:f9:ed:32:96:72:9b:4e:35:f9:99:1b:2b: 88:fa:d5:ff:89:96:63:a0:af:c9:d6:0f:3e:ee:52: 90:c3:b5:ad:43:ca:45:48:d2:8d:ca:e6:1e:3a:bf: 94:ca:0c:37:58:e0:ef:e7:8e:64:36:d4:79:67:9a: b9:53:bc:5b:e9:4e:5c:26:f3:98:e0:80:ec:e3:e6: a6:c2:b6:9c:f8:5a:c8:64:fe:63:11:80:27:44:c3: a9:0f:f8:c1:47:e3:37:9c:24:dc:6f:ec:ea:59:86: bd:40:8e:83:74:96:70:c5:fd:64:df:a4:87:b6:f1: 25:fb:21:cd:c4:22:13:a4:00:82:27:02:a4:49:a7: 42:bb:40:5e:ec:4c:e7:c4:ef:bb:ce:96:bd:71:bf: a3:bd:33:84:38:15:c7:6a:24:36:a7:10:f6:21:1e: 11:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:CE:51:EA:06:22:97:9E:F1:BE:78:7A:BB:17:83:9B:36:FF:E3:C2 X509v3 Authority Key Identifier: keyid:27:85:11:63:00:5F:59:C0:6E:35:A8:FD:36:5F:96:35:6E:B3:49:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/3eafc32b-ec03-4319-b1c6-3c1c4727e06f/0/27851163005F59C06E35A8FD365F96356EB34971.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J4URYwBfWcBuNaj9Nl-WNW6zSXE.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3eafc32b-ec03-4319-b1c6-3c1c4727e06f/0/27851163005F59C06E35A8FD365F96356EB34971.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:32:50:4d:c4:81:09:76:3e:c0:d2:3e:51:70:28:63:33:63: ef:db:cd:c4:c4:88:b4:a9:c2:a9:8b:ce:93:2e:68:5b:67:64: ab:64:d5:c6:c6:98:99:b9:d2:87:3e:26:17:7e:7c:26:13:36: 04:c3:96:c6:16:e6:4d:37:02:83:a5:5d:78:56:50:a7:74:2f: 3b:6e:b8:73:44:5d:54:cf:fc:28:46:8d:19:a7:c0:54:41:e6: 98:ce:9e:96:a6:39:8a:a3:50:42:ef:eb:21:11:1b:64:e4:0b: 9d:3a:ce:c9:d8:0e:df:a5:34:e4:a0:e9:9d:09:46:87:28:3d: e8:40:a5:91:35:e3:8e:c8:7e:3e:6e:84:e5:d8:08:64:b2:79: 84:fa:25:e7:ff:5a:3d:04:f5:c2:33:1c:e3:9f:55:a1:e0:15: c0:82:bd:f1:c3:3d:d0:66:a2:30:09:9a:ca:23:21:8d:d7:c4: 8a:7e:61:06:6c:5b:77:62:d8:81:99:c7:37:af:61:a4:11:04: 0d:83:3a:11:7f:6b:53:04:b2:da:9c:12:fc:53:54:34:63:06: 8c:ff:08:75:d5:b3:9a:9c:97:3c:3c:7b:9b:8a:15:de:58:68: 54:f9:00:be:07:01:09:fe:f0:9d:d1:c0:28:eb:c1:5c:b4:cd: 9e:9f:07:eb -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUMQICjjBHD8KOZK4j8hUq5WwraGEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjc4NTExNjMwMDVmNTljMDZlMzVhOGZkMzY1Zjk2MzU2 ZWIzNDk3MTAeFw0yNTEwMjAwNTMwMDlaFw0yNTEwMjEwNjQ5MDlaMDMxMTAvBgNV BAMTKEYzQ0U1MUVBMDYyMjk3OUVGMUJFNzg3QUJCMTc4MzlCMzZGRkUzQzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6AhKEPykeZk30OUr14kHIAWu6 x030u52Smb8MiQoPlMB07g4SpVUbZiFubu51juUtg1oQ/hLCfXO3yTvSdKaePEmu 98jp7ojXtXXpp/xxmrB4yvA1EG7JZlmL/fntMpZym041+ZkbK4j61f+JlmOgr8nW Dz7uUpDDta1DykVI0o3K5h46v5TKDDdY4O/njmQ21HlnmrlTvFvpTlwm85jggOzj 5qbCtpz4Wshk/mMRgCdEw6kP+MFH4zecJNxv7OpZhr1AjoN0lnDF/WTfpIe28SX7 Ic3EIhOkAIInAqRJp0K7QF7sTOfE77vOlr1xv6O9M4Q4FcdqJDanEPYhHhEBAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQU885R6gYil57xvnh6uxeDmzb/48IwHwYDVR0j BBgwFoAUJ4URYwBfWcBuNaj9Nl+WNW6zSXEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvM2VhZmMzMmItZWMwMy00MzE5LWIxYzYtM2MxYzQ3Mjdl MDZmLzAvMjc4NTExNjMwMDVGNTlDMDZFMzVBOEZEMzY1Rjk2MzU2RUIzNDk3MS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0o0VVJZd0JmV2NCdU5hajlObC1XTlc2 elNYRS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8zZWFmYzMyYi1l YzAzLTQzMTktYjFjNi0zYzFjNDcyN2UwNmYvMC8yNzg1MTE2MzAwNUY1OUMwNkUz NUE4RkQzNjVGOTYzNTZFQjM0OTcxLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOTJQTcSBCXY+wNI+UXAo YzNj79vNxMSItKnCqYvOky5oW2dkq2TVxsaYmbnShz4mF358JhM2BMOWxhbmTTcC g6VdeFZQp3QvO264c0RdVM/8KEaNGafAVEHmmM6elqY5iqNQQu/rIREbZOQLnTrO ydgO36U05KDpnQlGhyg96EClkTXjjsh+Pm6E5dgIZLJ5hPol5/9aPQT1wjMc459V oeAVwIK98cM90GaiMAmayiMhjdfEin5hBmxbd2LYgZnHN69hpBEEDYM6EX9rUwSy 2pwS/FNUNGMGjP8IddWzmpyXPDx7m4oV3lhoVPkAvgcBCf7wndHAKOvBXLTNnp8H 6w== -----END CERTIFICATE-----Generated at Mon Oct 20 12:27:11 2025 by rpki-client