$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/69bbfdcf-35cd-4524-8ffa-3005b0b69a29/0/25827D84056B8444CC2A7842759035354B8416BC.mft File: 25827D84056B8444CC2A7842759035354B8416BC.mft (raw, json) Hash identifier: M3d4RwAFuAOGnxS3nytxQug6UyzE8okIVn5CPnBvrtQ= Subject key identifier: 15:2D:45:B9:22:0F:BC:9E:79:CC:FD:0B:B5:6D:53:C2:99:1D:42:A5 Authority key identifier: 25:82:7D:84:05:6B:84:44:CC:2A:78:42:75:90:35:35:4B:84:16:BC Certificate issuer: /CN=25827d84056b8444cc2a7842759035354b8416bc Certificate serial: 65A7A764F12F823DAC15001EA76F256648D5FE90 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JYJ9hAVrhETMKnhCdZA1NUuEFrw.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/69bbfdcf-35cd-4524-8ffa-3005b0b69a29/0/25827D84056B8444CC2A7842759035354B8416BC.mft Manifest number: 036E Signing time: Wed 25 Mar 2026 17:44:36 +0000 Manifest this update: Wed 25 Mar 2026 17:39:36 +0000 Manifest next update: Thu 26 Mar 2026 19:33:36 +0000 Files and hashes: 1: 58E92F2C3859C2D0EF322A871688CB22928E2F3E.cer (hash: gYiT3SS0bbmQQSp3p/LPeJzfbx3ujd90DskZO9GZ0PQ=) 2: 326131343a313463303a323a3a2f34382d3438203d3e20323037343837.roa (hash: lVUTv9ePxFs76NYMpRch/wm8DFit0p7cLkwe+1lgWxI=) 3: AS207487.asa (hash: Ha+forEe+xS82UGSV4B7j+UWBj+/I05XFS+Ojajx3y4=) 4: 3138352e3133342e3139312e302f32342d3234203d3e20323037343837.roa (hash: wMCy3m1h75GfC2ATV5bYCJD7S6jjiI8Si5ikYie+OUI=) 5: 25827D84056B8444CC2A7842759035354B8416BC.crl (hash: lWYXGV1QXf8Hs3S0vk0quy2pkgOcILSSPJ5ZBlfP6II=) 6: 326131343a313463303a3a2f34382d3438203d3e20323037343837.roa (hash: AULHfw30fC5JPuaDQ09QijzFEojRfFb5/T1vtTj7hIM=) 7: AS18607.asa (hash: ol8lct09PZ1pqBOGDq6LTNV0i5NYMmiHGhSWuOi+FwQ=) 8: 326131343a313463303a313a3a2f34382d3438203d3e20323037343837.roa (hash: nCuZ5ADJB2e8lGpTQQDYT3/JtyMvU82Myd2okt8I23s=) 9: 326131343a313463313a3230303a3a2f34302d3438203d3e203138363037.roa (hash: eBGi76bk+i5KfnHGqq9jtzpn0gh813x0+GlA90AUkZI=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/69bbfdcf-35cd-4524-8ffa-3005b0b69a29/0/25827D84056B8444CC2A7842759035354B8416BC.crl rsync://rsync.paas.rpki.ripe.net/repository/69bbfdcf-35cd-4524-8ffa-3005b0b69a29/0/25827D84056B8444CC2A7842759035354B8416BC.mft rsync://rpki.ripe.net/repository/DEFAULT/JYJ9hAVrhETMKnhCdZA1NUuEFrw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 26 Mar 2026 15:17:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:a7:a7:64:f1:2f:82:3d:ac:15:00:1e:a7:6f:25:66:48:d5:fe:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=25827d84056b8444cc2a7842759035354b8416bc Validity Not Before: Mar 25 17:39:36 2026 GMT Not After : Mar 26 19:33:36 2026 GMT Subject: CN=152D45B9220FBC9E79CCFD0BB56D53C2991D42A5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:05:64:6f:d6:4d:3c:1a:b4:2c:7c:50:e7:72: 06:bc:44:a4:61:b7:a3:23:3d:c5:d2:08:5b:09:9e: e5:1a:cb:8b:12:d1:f9:74:01:7d:2d:7f:bc:8c:99: b6:fe:10:47:32:c8:08:5d:a8:e7:00:f8:0b:e6:74: e0:61:6b:5d:da:a8:db:49:b7:09:cc:87:fc:22:28: 9a:e7:6d:a6:77:0d:20:af:b1:98:e7:1f:3a:de:63: 11:a6:73:6f:4c:95:63:9f:48:ca:96:90:45:c3:2b: 9d:48:d6:4b:25:10:e1:c7:c8:23:4c:5d:1c:9e:2f: 3c:34:13:04:49:53:b0:f3:8c:aa:33:b9:22:6f:71: f2:15:57:69:31:0d:de:b5:c1:4a:93:8a:7f:82:fa: 12:5e:b4:f7:f5:1b:c7:92:dc:d6:10:9c:35:3d:a0: a3:62:d2:85:75:c3:af:1c:80:87:af:45:07:33:c2: 8f:95:79:7e:3f:e5:ce:a1:35:27:92:59:12:f4:c4: e6:8f:21:c9:a3:cd:4d:53:82:6d:57:6f:b9:f2:b6: fb:5f:60:4c:c0:30:b7:a8:79:b2:26:2d:df:ca:85: 08:fd:84:10:fc:fc:65:27:87:1e:c6:73:32:40:2c: 99:93:35:4c:69:af:1f:45:d5:35:91:0f:08:b9:b1: 2d:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:2D:45:B9:22:0F:BC:9E:79:CC:FD:0B:B5:6D:53:C2:99:1D:42:A5 X509v3 Authority Key Identifier: keyid:25:82:7D:84:05:6B:84:44:CC:2A:78:42:75:90:35:35:4B:84:16:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/69bbfdcf-35cd-4524-8ffa-3005b0b69a29/0/25827D84056B8444CC2A7842759035354B8416BC.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JYJ9hAVrhETMKnhCdZA1NUuEFrw.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/69bbfdcf-35cd-4524-8ffa-3005b0b69a29/0/25827D84056B8444CC2A7842759035354B8416BC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:4e:89:1c:01:58:7f:84:53:4c:88:e7:2d:e5:e6:ad:ec:e1: f1:1d:8f:80:00:f1:76:a5:05:f6:58:f0:68:e0:80:e8:4f:9e: 65:11:42:5b:1e:d4:f8:cf:e4:cb:7d:01:ee:1b:6e:05:1f:1b: eb:ef:a2:2f:04:f4:3e:44:9e:c3:55:93:54:3b:fc:70:28:78: 2b:8a:7d:8a:c2:3e:ca:a5:85:c3:73:e0:20:d1:f8:dd:3d:06: 08:2a:53:aa:9a:d1:3b:a7:32:0d:2c:e7:ee:fb:8e:c6:30:b2: 73:b1:ab:4f:75:97:2e:5a:70:ab:2a:97:ad:89:04:7e:aa:70: 98:07:d0:5a:28:6f:14:72:37:f2:8b:15:73:b8:17:89:1f:84: 1c:2d:61:19:05:e4:6b:fa:25:0d:eb:6c:f9:90:bf:96:e8:06: 18:5b:73:6a:04:7b:a6:d6:3e:0b:a6:0c:20:3e:1b:64:d0:02: cb:e9:6a:fc:86:ed:8f:22:e1:f5:40:06:67:13:26:da:5b:7d: 15:94:84:72:52:07:d6:13:c2:1b:67:7f:29:0a:40:41:b8:91: 60:7e:30:4b:a0:9f:8b:37:5d:41:ea:73:28:21:00:99:98:b7: 36:8e:2c:6b:3f:7f:50:4c:3f:30:6a:12:c5:50:19:af:ca:11: ab:65:ce:06 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUZaenZPEvgj2sFQAep28lZkjV/pAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjU4MjdkODQwNTZiODQ0NGNjMmE3ODQyNzU5MDM1MzU0 Yjg0MTZiYzAeFw0yNjAzMjUxNzM5MzZaFw0yNjAzMjYxOTMzMzZaMDMxMTAvBgNV BAMTKDE1MkQ0NUI5MjIwRkJDOUU3OUNDRkQwQkI1NkQ1M0MyOTkxRDQyQTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCHBWRv1k08GrQsfFDncga8RKRh t6MjPcXSCFsJnuUay4sS0fl0AX0tf7yMmbb+EEcyyAhdqOcA+AvmdOBha13aqNtJ twnMh/wiKJrnbaZ3DSCvsZjnHzreYxGmc29MlWOfSMqWkEXDK51I1kslEOHHyCNM XRyeLzw0EwRJU7DzjKozuSJvcfIVV2kxDd61wUqTin+C+hJetPf1G8eS3NYQnDU9 oKNi0oV1w68cgIevRQczwo+VeX4/5c6hNSeSWRL0xOaPIcmjzU1Tgm1Xb7nytvtf YEzAMLeoebImLd/KhQj9hBD8/GUnhx7GczJALJmTNUxprx9F1TWRDwi5sS2hAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUFS1FuSIPvJ55zP0LtW1TwpkdQqUwHwYDVR0j BBgwFoAUJYJ9hAVrhETMKnhCdZA1NUuEFrwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNjliYmZkY2YtMzVjZC00NTI0LThmZmEtMzAwNWIwYjY5 YTI5LzAvMjU4MjdEODQwNTZCODQ0NENDMkE3ODQyNzU5MDM1MzU0Qjg0MTZCQy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0pZSjloQVZyaEVUTUtuaENkWkExTlV1 RUZydy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS82OWJiZmRjZi0z NWNkLTQ1MjQtOGZmYS0zMDA1YjBiNjlhMjkvMC8yNTgyN0Q4NDA1NkI4NDQ0Q0My QTc4NDI3NTkwMzUzNTRCODQxNkJDLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFU6JHAFYf4RTTIjnLeXm rezh8R2PgADxdqUF9ljwaOCA6E+eZRFCWx7U+M/ky30B7htuBR8b6++iLwT0PkSe w1WTVDv8cCh4K4p9isI+yqWFw3PgINH43T0GCCpTqprRO6cyDSzn7vuOxjCyc7Gr T3WXLlpwqyqXrYkEfqpwmAfQWihvFHI38osVc7gXiR+EHC1hGQXka/olDets+ZC/ lugGGFtzagR7ptY+C6YMID4bZNACy+lq/IbtjyLh9UAGZxMm2lt9FZSEclIH1hPC G2d/KQpAQbiRYH4wS6CfizddQepzKCEAmZi3No4saz9/UEw/MGoSxVAZr8oRq2XO Bg== -----END CERTIFICATE-----Generated at Thu Mar 26 00:55:06 2026 by rpki-client