$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/69bbfdcf-35cd-4524-8ffa-3005b0b69a29/0/25827D84056B8444CC2A7842759035354B8416BC.mft File: 25827D84056B8444CC2A7842759035354B8416BC.mft (raw, json) Hash identifier: cIVOfSfkKAOczGJS/Kj85aBHc54OONtQ+YWeBcOtwws= Subject key identifier: 20:92:61:A7:36:63:38:02:7D:E9:1A:EA:F0:F7:7C:4C:2A:F4:8C:87 Authority key identifier: 25:82:7D:84:05:6B:84:44:CC:2A:78:42:75:90:35:35:4B:84:16:BC Certificate issuer: /CN=25827d84056b8444cc2a7842759035354b8416bc Certificate serial: 1B8AB8FED3622B2136636098EFB0F19154CFF693 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JYJ9hAVrhETMKnhCdZA1NUuEFrw.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/69bbfdcf-35cd-4524-8ffa-3005b0b69a29/0/25827D84056B8444CC2A7842759035354B8416BC.mft Manifest number: 040D Signing time: Thu 23 Jul 2026 13:03:22 +0000 Manifest this update: Thu 23 Jul 2026 12:58:22 +0000 Manifest next update: Fri 24 Jul 2026 13:11:22 +0000 Files and hashes: 1: 326131343a313463303a313a3a2f34382d3438203d3e20323037343837.roa (hash: NlN3fbd4xPs8oXDjI1+pTaPhc7vLifacDO0nMI7gkYc=) 2: AS207487.asa (hash: s3p6b4UEGWgtzDLFmXDHf89hF7XtnQxEviO1lAFHwO4=) 3: AS18607.asa (hash: ol8lct09PZ1pqBOGDq6LTNV0i5NYMmiHGhSWuOi+FwQ=) 4: 58E92F2C3859C2D0EF322A871688CB22928E2F3E.cer (hash: gYiT3SS0bbmQQSp3p/LPeJzfbx3ujd90DskZO9GZ0PQ=) 5: 3138352e3133342e3139312e302f32342d3234203d3e20323037343837.roa (hash: b2vN+3qPM1Kt77HuQ8RzenF0xuc+QJpvrF7GjBac7y0=) 6: 326131343a313463313a3230303a3a2f34302d3438203d3e203138363037.roa (hash: eBGi76bk+i5KfnHGqq9jtzpn0gh813x0+GlA90AUkZI=) 7: 326131343a313463303a323a3a2f34382d3438203d3e20323037343837.roa (hash: dHA6HLPOR3IQCPs+KBxka5EoTXTVzS3+Rk/fPIxN15o=) 8: 326131343a313463303a3a2f34382d3438203d3e20323037343837.roa (hash: AULHfw30fC5JPuaDQ09QijzFEojRfFb5/T1vtTj7hIM=) 9: 25827D84056B8444CC2A7842759035354B8416BC.crl (hash: RurT5QXlfV7dkMb8iFs8/gJzEirB8Dh7xtegqNqmnL8=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/69bbfdcf-35cd-4524-8ffa-3005b0b69a29/0/25827D84056B8444CC2A7842759035354B8416BC.crl rsync://rsync.paas.rpki.ripe.net/repository/69bbfdcf-35cd-4524-8ffa-3005b0b69a29/0/25827D84056B8444CC2A7842759035354B8416BC.mft rsync://rpki.ripe.net/repository/DEFAULT/JYJ9hAVrhETMKnhCdZA1NUuEFrw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 24 Jul 2026 13:11:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:8a:b8:fe:d3:62:2b:21:36:63:60:98:ef:b0:f1:91:54:cf:f6:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=25827d84056b8444cc2a7842759035354b8416bc Validity Not Before: Jul 23 12:58:22 2026 GMT Not After : Jul 24 13:11:22 2026 GMT Subject: CN=209261A7366338027DE91AEAF0F77C4C2AF48C87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:0b:5c:5a:23:19:a0:0f:4f:b3:42:0b:b5:37: a7:2f:45:5d:87:0b:29:f5:73:df:d4:9e:35:ea:fc: 8b:1c:17:be:af:67:6b:7b:7d:91:eb:6a:3c:b0:5a: 32:b9:90:64:94:09:a1:15:11:0c:30:75:4a:31:b9: 79:21:df:80:52:58:e3:a4:ed:8c:b2:e9:fa:d8:3b: c4:4e:9f:c8:5b:34:fa:04:70:e2:76:ba:21:02:04: 79:e0:3e:98:3f:e9:6c:fa:fb:22:be:37:f5:8f:e9: 54:80:69:bc:4d:ee:21:48:c3:19:b7:87:06:5d:50: 95:8d:e1:53:21:0a:c5:53:f7:77:69:08:f1:fb:12: dd:20:ae:fd:10:01:30:f8:8e:4d:32:54:d3:c8:53: 44:0d:6d:dd:ec:38:67:d0:20:db:d4:f9:18:6f:3d: cf:22:82:e3:55:53:49:a5:cf:8a:cb:0b:e3:a2:4f: 3f:78:11:82:1a:0e:5d:23:1d:bc:d5:a1:80:88:6c: d8:a1:1c:8c:94:e9:05:3e:fb:c3:7f:15:b0:41:ab: 6e:f0:39:f8:65:53:b4:a8:c5:de:03:34:9f:fa:c5: 1a:3a:0a:c4:59:28:7d:dc:6d:ea:0a:75:6e:ca:c7: 2c:bc:36:bd:7b:3d:f2:c9:8d:86:b6:af:a3:88:d8: 94:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:92:61:A7:36:63:38:02:7D:E9:1A:EA:F0:F7:7C:4C:2A:F4:8C:87 X509v3 Authority Key Identifier: keyid:25:82:7D:84:05:6B:84:44:CC:2A:78:42:75:90:35:35:4B:84:16:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/69bbfdcf-35cd-4524-8ffa-3005b0b69a29/0/25827D84056B8444CC2A7842759035354B8416BC.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JYJ9hAVrhETMKnhCdZA1NUuEFrw.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/69bbfdcf-35cd-4524-8ffa-3005b0b69a29/0/25827D84056B8444CC2A7842759035354B8416BC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:49:f8:38:43:ee:1d:b6:10:d0:c1:ef:d0:dd:f3:0e:65:94: c6:35:ba:7a:01:52:eb:d9:41:a9:7f:f7:63:c9:e0:29:6d:d6: 5f:f7:2c:ac:4f:97:5c:a2:3b:95:5e:36:63:99:04:c7:9f:e2: dc:cd:37:4f:cf:91:db:f1:97:92:52:46:ec:33:26:ea:1a:0f: 85:5f:f2:d9:f2:34:03:b2:b4:84:7d:e5:17:e0:74:5f:1a:b6: f7:aa:02:ed:bb:4d:4c:9a:7c:f4:44:99:40:b0:6b:bb:59:4a: 1f:f1:7c:9c:c0:12:41:a6:9b:f5:ec:fe:32:aa:64:13:89:fa: b5:fe:e6:c1:43:64:f7:48:3b:b4:32:ae:b6:05:98:2f:85:a7: 68:21:8d:87:07:51:8c:62:a1:56:5d:4d:b3:9b:d9:9a:15:36: 2d:89:2a:cb:c2:88:d5:32:43:ff:8e:f5:98:58:70:03:ac:f4: c4:f1:c0:95:aa:ae:f8:48:ae:fe:62:5e:6d:82:7e:fe:c3:a5: 6a:26:8f:f8:7e:ca:93:dc:9a:5f:d2:8e:6c:9a:bf:e1:46:22: 7a:d3:6b:26:72:a2:72:d4:02:c3:75:0f:f6:7e:f7:63:43:73: e0:b0:77:2c:ab:3c:b9:39:96:0e:5a:ee:62:6d:cb:d7:24:d7: 34:fd:3d:d7 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUG4q4/tNiKyE2Y2CY77DxkVTP9pMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjU4MjdkODQwNTZiODQ0NGNjMmE3ODQyNzU5MDM1MzU0 Yjg0MTZiYzAeFw0yNjA3MjMxMjU4MjJaFw0yNjA3MjQxMzExMjJaMDMxMTAvBgNV BAMTKDIwOTI2MUE3MzY2MzM4MDI3REU5MUFFQUYwRjc3QzRDMkFGNDhDODcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvC1xaIxmgD0+zQgu1N6cvRV2H Cyn1c9/UnjXq/IscF76vZ2t7fZHrajywWjK5kGSUCaEVEQwwdUoxuXkh34BSWOOk 7Yyy6frYO8ROn8hbNPoEcOJ2uiECBHngPpg/6Wz6+yK+N/WP6VSAabxN7iFIwxm3 hwZdUJWN4VMhCsVT93dpCPH7Et0grv0QATD4jk0yVNPIU0QNbd3sOGfQINvU+Rhv Pc8iguNVU0mlz4rLC+OiTz94EYIaDl0jHbzVoYCIbNihHIyU6QU++8N/FbBBq27w OfhlU7Soxd4DNJ/6xRo6CsRZKH3cbeoKdW7Kxyy8Nr17PfLJjYa2r6OI2JSbAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUIJJhpzZjOAJ96Rrq8Pd8TCr0jIcwHwYDVR0j BBgwFoAUJYJ9hAVrhETMKnhCdZA1NUuEFrwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNjliYmZkY2YtMzVjZC00NTI0LThmZmEtMzAwNWIwYjY5 YTI5LzAvMjU4MjdEODQwNTZCODQ0NENDMkE3ODQyNzU5MDM1MzU0Qjg0MTZCQy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0pZSjloQVZyaEVUTUtuaENkWkExTlV1 RUZydy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS82OWJiZmRjZi0z NWNkLTQ1MjQtOGZmYS0zMDA1YjBiNjlhMjkvMC8yNTgyN0Q4NDA1NkI4NDQ0Q0My QTc4NDI3NTkwMzUzNTRCODQxNkJDLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAl0n4OEPuHbYQ0MHv0N3z DmWUxjW6egFS69lBqX/3Y8ngKW3WX/csrE+XXKI7lV42Y5kEx5/i3M03T8+R2/GX klJG7DMm6hoPhV/y2fI0A7K0hH3lF+B0Xxq296oC7btNTJp89ESZQLBru1lKH/F8 nMASQaab9ez+MqpkE4n6tf7mwUNk90g7tDKutgWYL4WnaCGNhwdRjGKhVl1Ns5vZ mhU2LYkqy8KI1TJD/471mFhwA6z0xPHAlaqu+Eiu/mJebYJ+/sOlaiaP+H7Kk9ya X9KObJq/4UYietNrJnKictQCw3UP9n73Y0Nz4LB3LKs8uTmWDlruYm3L1yTXNP09 1w== -----END CERTIFICATE-----Generated at Thu Jul 23 19:10:48 2026 by rpki-client