$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/69bbfdcf-35cd-4524-8ffa-3005b0b69a29/0/25827D84056B8444CC2A7842759035354B8416BC.mft File: 25827D84056B8444CC2A7842759035354B8416BC.mft (raw, json) Hash identifier: AIXn1O65OOltLCEbk9hYm5x15Wd5Qb7guoviDk76pXs= Subject key identifier: 28:60:89:58:63:43:2D:36:C6:60:4B:BA:65:B1:86:E1:B1:EF:2A:5C Authority key identifier: 25:82:7D:84:05:6B:84:44:CC:2A:78:42:75:90:35:35:4B:84:16:BC Certificate issuer: /CN=25827d84056b8444cc2a7842759035354b8416bc Certificate serial: 438916BAEA4CA3463216F52047B80E4317BFDBC3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JYJ9hAVrhETMKnhCdZA1NUuEFrw.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/69bbfdcf-35cd-4524-8ffa-3005b0b69a29/0/25827D84056B8444CC2A7842759035354B8416BC.mft Manifest number: 0204 Signing time: Sat 28 Jun 2025 11:23:54 +0000 Manifest this update: Sat 28 Jun 2025 11:18:54 +0000 Manifest next update: Sun 29 Jun 2025 14:30:54 +0000 Files and hashes: 1: 326131343a313463303a313a3a2f34382d3438203d3e20323037343837.roa (hash: nCuZ5ADJB2e8lGpTQQDYT3/JtyMvU82Myd2okt8I23s=) 2: 326131343a313463313a3230303a3a2f34302d3438203d3e203138363037.roa (hash: Pf0WXVKsadiaiJtusSEXuFj/o/oP56mVyLEI27IiyE8=) 3: AS18607.asa (hash: UmRU72jnrIjcrDo/h9XDTnV/XRM8dz+BcjyGexjXWqI=) 4: 326131343a313463303a3a2f34382d3438203d3e20323037343837.roa (hash: MAksePoJ+rnc08XyHZPcbQHx/BhF1iv7lCiKD0GFWxw=) 5: 326131343a313463303a323a3a2f34382d3438203d3e20323037343837.roa (hash: lVUTv9ePxFs76NYMpRch/wm8DFit0p7cLkwe+1lgWxI=) 6: AS207487.asa (hash: Ha+forEe+xS82UGSV4B7j+UWBj+/I05XFS+Ojajx3y4=) 7: 25827D84056B8444CC2A7842759035354B8416BC.crl (hash: ZpipmD0OihIdeWnOldaLi2LYIQlnADiXDfRjf9wQWzY=) 8: 58E92F2C3859C2D0EF322A871688CB22928E2F3E.cer (hash: gYiT3SS0bbmQQSp3p/LPeJzfbx3ujd90DskZO9GZ0PQ=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/69bbfdcf-35cd-4524-8ffa-3005b0b69a29/0/25827D84056B8444CC2A7842759035354B8416BC.crl rsync://rsync.paas.rpki.ripe.net/repository/69bbfdcf-35cd-4524-8ffa-3005b0b69a29/0/25827D84056B8444CC2A7842759035354B8416BC.mft rsync://rpki.ripe.net/repository/DEFAULT/JYJ9hAVrhETMKnhCdZA1NUuEFrw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 29 Jun 2025 14:30:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:89:16:ba:ea:4c:a3:46:32:16:f5:20:47:b8:0e:43:17:bf:db:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=25827d84056b8444cc2a7842759035354b8416bc Validity Not Before: Jun 28 11:18:54 2025 GMT Not After : Jun 29 14:30:54 2025 GMT Subject: CN=2860895863432D36C6604BBA65B186E1B1EF2A5C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:c6:b8:a2:64:19:e4:b8:87:e3:e7:4b:d5:a2: 0b:b6:42:9a:7e:ab:cc:26:46:4a:04:6c:64:3e:e0: d1:fa:cb:7c:49:60:75:73:ed:ee:37:fb:7d:71:82: 64:f5:25:5c:43:81:14:17:c9:40:cd:6d:8e:fb:1e: 45:e0:46:d3:47:9e:af:4e:2c:b1:78:be:bb:42:64: 20:9a:01:55:e6:80:5a:eb:88:82:a8:ec:2b:a7:9a: 99:81:8f:2f:12:99:ad:1c:9e:da:69:7a:d6:d8:ca: 82:5c:9b:36:fe:eb:37:db:ea:0c:5a:e7:ce:80:a6: f4:d7:9f:41:2b:53:56:82:51:fc:17:cd:3e:51:cc: 75:0d:4c:95:9f:20:ca:ad:4a:8c:ed:2f:1a:5d:03: a9:11:19:d6:93:e0:46:c4:17:86:17:de:ce:0b:57: cc:d7:49:2b:b8:3f:31:76:28:45:ce:83:9c:e0:74: 18:57:2c:3f:8a:a8:88:fd:ab:6d:c3:b4:fd:61:26: 59:88:c7:18:15:65:40:2a:b3:b9:8d:7b:f0:02:84: 35:10:95:aa:f8:49:a2:05:45:77:12:80:88:c0:55: f2:00:77:8b:f7:3f:9d:82:55:a3:e2:61:dd:5a:93: 13:f8:11:34:9c:dd:c6:20:ba:71:ee:1c:d8:29:0f: d8:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:60:89:58:63:43:2D:36:C6:60:4B:BA:65:B1:86:E1:B1:EF:2A:5C X509v3 Authority Key Identifier: keyid:25:82:7D:84:05:6B:84:44:CC:2A:78:42:75:90:35:35:4B:84:16:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/69bbfdcf-35cd-4524-8ffa-3005b0b69a29/0/25827D84056B8444CC2A7842759035354B8416BC.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JYJ9hAVrhETMKnhCdZA1NUuEFrw.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/69bbfdcf-35cd-4524-8ffa-3005b0b69a29/0/25827D84056B8444CC2A7842759035354B8416BC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:4d:1e:41:2d:f8:1c:1d:b9:c0:03:76:55:92:1c:55:85:e8: f8:22:35:ad:c4:96:43:f4:08:71:bc:02:21:7b:ef:00:97:b0: 17:39:dd:cc:4d:00:8b:3e:51:ef:18:dc:b4:72:2f:15:a3:eb: cd:b3:40:90:df:e3:9f:8d:10:dc:07:c2:ca:61:6a:36:31:2c: 48:2a:21:fa:d0:00:77:80:30:42:5e:fc:90:56:f5:d3:91:f8: 66:98:c2:8f:8a:c5:a5:a7:50:5b:3a:d9:36:6a:f8:2b:9a:ea: 65:6f:ee:2a:cd:a3:f2:a3:83:23:31:ce:9a:44:13:9b:84:3b: 26:bc:c4:16:3f:fc:e2:47:88:32:31:ac:0d:d1:60:f1:fd:33: 7c:fe:53:94:ab:82:ae:95:3a:95:1a:1e:f2:1c:f7:8c:bf:29: 78:b6:d8:c7:09:c4:0b:ea:b2:2b:a1:c3:51:e7:94:b4:6c:29: fe:eb:cb:c6:06:98:73:cb:9d:05:53:a7:7c:b9:c4:c2:8a:94: dd:01:76:72:36:28:c7:ad:0b:7e:eb:41:c4:ea:f2:73:ef:b6: 5a:80:77:8a:14:ca:e4:10:6f:3d:b8:dc:32:fa:c4:9a:a9:b7: a9:bf:19:3a:46:0f:73:8d:1c:68:e7:5e:0f:12:ef:a0:39:6a: 39:f3:8a:26 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUQ4kWuupMo0YyFvUgR7gOQxe/28MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjU4MjdkODQwNTZiODQ0NGNjMmE3ODQyNzU5MDM1MzU0 Yjg0MTZiYzAeFw0yNTA2MjgxMTE4NTRaFw0yNTA2MjkxNDMwNTRaMDMxMTAvBgNV BAMTKDI4NjA4OTU4NjM0MzJEMzZDNjYwNEJCQTY1QjE4NkUxQjFFRjJBNUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDxriiZBnkuIfj50vVogu2Qpp+ q8wmRkoEbGQ+4NH6y3xJYHVz7e43+31xgmT1JVxDgRQXyUDNbY77HkXgRtNHnq9O LLF4vrtCZCCaAVXmgFrriIKo7CunmpmBjy8Sma0cntppetbYyoJcmzb+6zfb6gxa 586ApvTXn0ErU1aCUfwXzT5RzHUNTJWfIMqtSoztLxpdA6kRGdaT4EbEF4YX3s4L V8zXSSu4PzF2KEXOg5zgdBhXLD+KqIj9q23DtP1hJlmIxxgVZUAqs7mNe/AChDUQ lar4SaIFRXcSgIjAVfIAd4v3P52CVaPiYd1akxP4ETSc3cYgunHuHNgpD9hJAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUKGCJWGNDLTbGYEu6ZbGG4bHvKlwwHwYDVR0j BBgwFoAUJYJ9hAVrhETMKnhCdZA1NUuEFrwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNjliYmZkY2YtMzVjZC00NTI0LThmZmEtMzAwNWIwYjY5 YTI5LzAvMjU4MjdEODQwNTZCODQ0NENDMkE3ODQyNzU5MDM1MzU0Qjg0MTZCQy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0pZSjloQVZyaEVUTUtuaENkWkExTlV1 RUZydy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS82OWJiZmRjZi0z NWNkLTQ1MjQtOGZmYS0zMDA1YjBiNjlhMjkvMC8yNTgyN0Q4NDA1NkI4NDQ0Q0My QTc4NDI3NTkwMzUzNTRCODQxNkJDLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAg00eQS34HB25wAN2VZIc VYXo+CI1rcSWQ/QIcbwCIXvvAJewFzndzE0Aiz5R7xjctHIvFaPrzbNAkN/jn40Q 3AfCymFqNjEsSCoh+tAAd4AwQl78kFb105H4ZpjCj4rFpadQWzrZNmr4K5rqZW/u Ks2j8qODIzHOmkQTm4Q7JrzEFj/84keIMjGsDdFg8f0zfP5TlKuCrpU6lRoe8hz3 jL8peLbYxwnEC+qyK6HDUeeUtGwp/uvLxgaYc8udBVOnfLnEwoqU3QF2cjYox60L futBxOryc++2WoB3ihTK5BBvPbjcMvrEmqm3qb8ZOkYPc40caOdeDxLvoDlqOfOK Jg== -----END CERTIFICATE-----Generated at Sat Jun 28 23:25:33 2025 by rpki-client