$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/69bbfdcf-35cd-4524-8ffa-3005b0b69a29/0/25827D84056B8444CC2A7842759035354B8416BC.mft File: 25827D84056B8444CC2A7842759035354B8416BC.mft (raw, json) Hash identifier: wGLSgbROzLkJrlFfLy8TMQx1Qu8mOIHVnOFFNcxSQuI= Subject key identifier: 75:4A:70:6E:3B:A4:D9:EF:9D:2E:C0:18:ED:61:AA:26:FE:76:FA:E5 Authority key identifier: 25:82:7D:84:05:6B:84:44:CC:2A:78:42:75:90:35:35:4B:84:16:BC Certificate issuer: /CN=25827d84056b8444cc2a7842759035354b8416bc Certificate serial: 25DF4945CF190706CAC95630FBE238698E222212 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JYJ9hAVrhETMKnhCdZA1NUuEFrw.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/69bbfdcf-35cd-4524-8ffa-3005b0b69a29/0/25827D84056B8444CC2A7842759035354B8416BC.mft Manifest number: 01C3 Signing time: Sun 11 May 2025 11:08:41 +0000 Manifest this update: Sun 11 May 2025 11:03:41 +0000 Manifest next update: Mon 12 May 2025 13:28:41 +0000 Files and hashes: 1: 58E92F2C3859C2D0EF322A871688CB22928E2F3E.cer (hash: gYiT3SS0bbmQQSp3p/LPeJzfbx3ujd90DskZO9GZ0PQ=) 2: 326131343a313463303a3a2f34382d3438203d3e20323037343837.roa (hash: MAksePoJ+rnc08XyHZPcbQHx/BhF1iv7lCiKD0GFWxw=) 3: AS207487.asa (hash: sa+x9Ovn0VFP3PZWY4L934Znux06H1Z/gFrTHays+wc=) 4: AS18607.asa (hash: UmRU72jnrIjcrDo/h9XDTnV/XRM8dz+BcjyGexjXWqI=) 5: 25827D84056B8444CC2A7842759035354B8416BC.crl (hash: wE6GctxVXTDBeId88SxwAb8w2YcFpKjkscQQWKi/tBM=) 6: 326131343a313463303a313a3a2f34382d3438203d3e20323037343837.roa (hash: nCuZ5ADJB2e8lGpTQQDYT3/JtyMvU82Myd2okt8I23s=) 7: 326131343a313463303a323a3a2f34382d3438203d3e20323037343837.roa (hash: lVUTv9ePxFs76NYMpRch/wm8DFit0p7cLkwe+1lgWxI=) 8: 326131343a313463313a3230303a3a2f34302d3438203d3e203138363037.roa (hash: Pf0WXVKsadiaiJtusSEXuFj/o/oP56mVyLEI27IiyE8=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/69bbfdcf-35cd-4524-8ffa-3005b0b69a29/0/25827D84056B8444CC2A7842759035354B8416BC.crl rsync://rsync.paas.rpki.ripe.net/repository/69bbfdcf-35cd-4524-8ffa-3005b0b69a29/0/25827D84056B8444CC2A7842759035354B8416BC.mft rsync://rpki.ripe.net/repository/DEFAULT/JYJ9hAVrhETMKnhCdZA1NUuEFrw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 May 2025 07:00:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:df:49:45:cf:19:07:06:ca:c9:56:30:fb:e2:38:69:8e:22:22:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=25827d84056b8444cc2a7842759035354b8416bc Validity Not Before: May 11 11:03:41 2025 GMT Not After : May 12 13:28:41 2025 GMT Subject: CN=754A706E3BA4D9EF9D2EC018ED61AA26FE76FAE5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:04:a9:ee:5a:27:5c:d8:ed:f7:f8:69:0b:e2: 5e:78:f2:c5:7e:a4:60:ed:5f:81:bb:38:d1:22:e4: f2:67:17:82:7a:1a:95:e9:82:54:55:c1:9c:36:72: a3:a1:a3:ce:65:7c:93:0b:71:c1:98:d5:a6:d7:5d: bd:f6:68:77:b5:98:b7:d2:a8:3a:1a:50:06:fc:37: bf:5c:02:56:8d:bb:ba:f5:3f:47:8c:db:68:24:3c: d4:74:b1:31:25:9d:10:68:52:e0:91:66:71:84:ca: fc:3e:0d:e8:ff:77:56:03:46:80:93:d6:37:bb:0b: 6a:b1:a1:10:9b:df:d7:37:05:5e:39:68:45:ef:6d: a8:20:19:c4:6c:5a:6e:5f:05:d0:3e:d5:d9:fa:12: a8:a8:da:de:a4:3e:01:83:64:73:7c:29:14:2b:45: bf:1b:e4:fd:9a:b3:9b:f2:dc:59:18:6c:cf:dc:e4: ce:34:8b:01:d7:ef:d1:fc:cf:c5:24:7d:e1:15:3b: 78:c8:58:62:0c:03:70:b1:4b:2f:2d:a5:02:be:03: 9b:7c:28:38:f3:c1:fa:9a:99:88:5e:38:91:31:01: 0b:d5:5e:6a:ef:56:61:88:e5:2b:fd:6b:92:b9:b1: a0:41:a6:b4:0d:e5:e8:bb:5d:f2:49:3f:9e:c6:55: d7:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:4A:70:6E:3B:A4:D9:EF:9D:2E:C0:18:ED:61:AA:26:FE:76:FA:E5 X509v3 Authority Key Identifier: keyid:25:82:7D:84:05:6B:84:44:CC:2A:78:42:75:90:35:35:4B:84:16:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/69bbfdcf-35cd-4524-8ffa-3005b0b69a29/0/25827D84056B8444CC2A7842759035354B8416BC.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JYJ9hAVrhETMKnhCdZA1NUuEFrw.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/69bbfdcf-35cd-4524-8ffa-3005b0b69a29/0/25827D84056B8444CC2A7842759035354B8416BC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:90:0f:24:eb:ca:19:22:13:3e:e6:65:6e:7e:7f:17:6c:60: 6a:7c:8f:fd:67:7f:a1:38:80:32:ae:40:b7:a6:b5:7e:df:8c: 7d:54:37:ab:9e:3d:78:be:36:95:b9:5e:3c:8a:e7:ff:95:c2: c4:6c:b4:14:e3:fc:10:1c:d3:d1:65:12:80:b7:ed:a0:b5:f5: 42:de:c2:91:31:e1:19:cf:f9:7a:f6:64:37:4e:83:db:c0:dd: 65:10:34:37:56:52:30:08:81:3d:8d:1c:0d:10:7c:be:36:f7: c8:6b:58:d3:4a:1f:c9:36:e7:d6:52:08:30:d0:75:6b:63:d3: 77:73:4d:25:bc:b7:ea:2c:b6:65:2e:51:7b:ef:d2:ed:8d:7c: 84:b3:f2:70:54:71:96:b0:2d:64:09:67:ea:a9:f9:80:fd:99: 90:9f:b2:1a:74:c8:dc:67:c1:04:e0:65:00:03:8f:08:4f:b5: 4e:5f:7b:26:71:91:73:26:15:d0:37:64:5a:cc:57:4a:29:dc: a4:fb:96:2f:ed:79:89:da:bd:f2:d3:60:f6:b8:86:4f:0b:91: de:c5:71:60:41:f2:0b:9e:9c:93:70:51:3b:c8:6b:d7:62:04: bd:16:dc:2c:03:2d:ae:26:70:9f:bf:a4:83:49:0a:20:ae:03: 77:d1:95:01 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUJd9JRc8ZBwbKyVYw++I4aY4iIhIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjU4MjdkODQwNTZiODQ0NGNjMmE3ODQyNzU5MDM1MzU0 Yjg0MTZiYzAeFw0yNTA1MTExMTAzNDFaFw0yNTA1MTIxMzI4NDFaMDMxMTAvBgNV BAMTKDc1NEE3MDZFM0JBNEQ5RUY5RDJFQzAxOEVENjFBQTI2RkU3NkZBRTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChBKnuWidc2O33+GkL4l548sV+ pGDtX4G7ONEi5PJnF4J6GpXpglRVwZw2cqOho85lfJMLccGY1abXXb32aHe1mLfS qDoaUAb8N79cAlaNu7r1P0eM22gkPNR0sTElnRBoUuCRZnGEyvw+Dej/d1YDRoCT 1je7C2qxoRCb39c3BV45aEXvbaggGcRsWm5fBdA+1dn6Eqio2t6kPgGDZHN8KRQr Rb8b5P2as5vy3FkYbM/c5M40iwHX79H8z8UkfeEVO3jIWGIMA3CxSy8tpQK+A5t8 KDjzwfqamYheOJExAQvVXmrvVmGI5Sv9a5K5saBBprQN5ei7XfJJP57GVdfvAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUdUpwbjuk2e+dLsAY7WGqJv52+uUwHwYDVR0j BBgwFoAUJYJ9hAVrhETMKnhCdZA1NUuEFrwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNjliYmZkY2YtMzVjZC00NTI0LThmZmEtMzAwNWIwYjY5 YTI5LzAvMjU4MjdEODQwNTZCODQ0NENDMkE3ODQyNzU5MDM1MzU0Qjg0MTZCQy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0pZSjloQVZyaEVUTUtuaENkWkExTlV1 RUZydy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS82OWJiZmRjZi0z NWNkLTQ1MjQtOGZmYS0zMDA1YjBiNjlhMjkvMC8yNTgyN0Q4NDA1NkI4NDQ0Q0My QTc4NDI3NTkwMzUzNTRCODQxNkJDLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXZAPJOvKGSITPuZlbn5/ F2xganyP/Wd/oTiAMq5At6a1ft+MfVQ3q549eL42lblePIrn/5XCxGy0FOP8EBzT 0WUSgLftoLX1Qt7CkTHhGc/5evZkN06D28DdZRA0N1ZSMAiBPY0cDRB8vjb3yGtY 00ofyTbn1lIIMNB1a2PTd3NNJby36iy2ZS5Re+/S7Y18hLPycFRxlrAtZAln6qn5 gP2ZkJ+yGnTI3GfBBOBlAAOPCE+1Tl97JnGRcyYV0DdkWsxXSincpPuWL+15idq9 8tNg9riGTwuR3sVxYEHyC56ck3BRO8hr12IEvRbcLAMtriZwn7+kg0kKIK4Dd9GV AQ== -----END CERTIFICATE-----Generated at Sun May 11 17:10:55 2025 by rpki-client