$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3eafc32b-ec03-4319-b1c6-3c1c4727e06f/0/27851163005F59C06E35A8FD365F96356EB34971.mft File: 27851163005F59C06E35A8FD365F96356EB34971.mft (raw, json) Hash identifier: t7BIZCPZMVMXp+aysK4PZIy7NyaPJHyuIduEpD2hzUw= Subject key identifier: 4B:D3:BD:81:C2:4D:2C:DB:FF:F0:32:4F:20:D1:4E:0D:E7:AC:43:1C Authority key identifier: 27:85:11:63:00:5F:59:C0:6E:35:A8:FD:36:5F:96:35:6E:B3:49:71 Certificate issuer: /CN=27851163005f59c06e35a8fd365f96356eb34971 Certificate serial: 3B003FD952BB034BDFBC7D958B2D221B865B2672 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J4URYwBfWcBuNaj9Nl-WNW6zSXE.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/3eafc32b-ec03-4319-b1c6-3c1c4727e06f/0/27851163005F59C06E35A8FD365F96356EB34971.mft Manifest number: F4 Signing time: Fri 25 Jul 2025 09:48:20 +0000 Manifest this update: Fri 25 Jul 2025 09:43:20 +0000 Manifest next update: Sat 26 Jul 2025 10:41:20 +0000 Files and hashes: 1: 39332e3135372e3134302e302f32342d3234203d3e20323132383535.roa (hash: hdp9Cx8dMbvUUOjRrqy1XfSIVtsUnXM8OZnay1usHT4=) 2: 27851163005F59C06E35A8FD365F96356EB34971.crl (hash: M05uHwokT0keIrUbEnIctRVU2WmS+5Uo2V0ulnu7U18=) 3: AS212855.asa (hash: T3YdrgEJ1P9IU1IPBHUKuz7lJiYzWWWbNO7fDdrADAU=) 4: 323030313a3637633a6638633a3a2f34382d3438203d3e20323132383535.roa (hash: prfcq9YIMAg2ry1iZCXqsMkFnalbT+MPZdyoUmwmw6g=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/3eafc32b-ec03-4319-b1c6-3c1c4727e06f/0/27851163005F59C06E35A8FD365F96356EB34971.crl rsync://rsync.paas.rpki.ripe.net/repository/3eafc32b-ec03-4319-b1c6-3c1c4727e06f/0/27851163005F59C06E35A8FD365F96356EB34971.mft rsync://rpki.ripe.net/repository/DEFAULT/J4URYwBfWcBuNaj9Nl-WNW6zSXE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 26 Jul 2025 10:41:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:00:3f:d9:52:bb:03:4b:df:bc:7d:95:8b:2d:22:1b:86:5b:26:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=27851163005f59c06e35a8fd365f96356eb34971 Validity Not Before: Jul 25 09:43:20 2025 GMT Not After : Jul 26 10:41:20 2025 GMT Subject: CN=4BD3BD81C24D2CDBFFF0324F20D14E0DE7AC431C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:42:dd:ae:bb:dd:04:58:69:c5:1d:0e:f5:43: 3f:75:b6:8d:2a:2c:9c:f1:73:11:85:56:14:70:6a: e5:ac:22:51:71:5a:1a:35:94:a5:47:3f:54:e6:78: 55:0c:b4:c9:4b:88:f3:45:40:ea:26:92:71:e0:46: 93:d5:ea:8b:18:22:e7:68:df:d8:8b:fa:6b:eb:75: 45:96:1e:83:b5:44:c5:db:43:fe:6a:ba:d0:e5:75: 14:e1:d6:8d:eb:96:2d:2f:e5:9c:81:ee:54:0f:c5: 7a:30:d3:10:1b:58:49:db:36:5e:0c:0c:57:ec:5e: 7e:08:d0:16:1e:95:0b:5f:0a:cc:d8:38:65:e7:8c: 1e:4a:fa:e8:ae:83:54:70:3f:fa:56:4c:de:f3:a6: 10:e4:b3:67:02:b3:89:e1:bf:0b:ff:59:a6:30:7e: 6a:83:42:c0:20:ce:84:01:c0:f3:10:0b:93:bf:ef: 2b:9b:0e:ca:42:2f:b4:80:ab:03:a2:eb:45:35:ba: 06:86:a7:d6:7c:fa:87:70:ef:50:d9:37:54:90:25: cc:99:7f:96:03:15:fd:c1:ed:ff:72:d6:e5:ed:ec: e9:92:f0:01:23:62:22:47:50:6d:7c:b7:a0:0f:f3: 4c:55:5b:8f:0c:9a:16:6d:37:85:76:68:6c:08:d5: 37:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:D3:BD:81:C2:4D:2C:DB:FF:F0:32:4F:20:D1:4E:0D:E7:AC:43:1C X509v3 Authority Key Identifier: keyid:27:85:11:63:00:5F:59:C0:6E:35:A8:FD:36:5F:96:35:6E:B3:49:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/3eafc32b-ec03-4319-b1c6-3c1c4727e06f/0/27851163005F59C06E35A8FD365F96356EB34971.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J4URYwBfWcBuNaj9Nl-WNW6zSXE.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3eafc32b-ec03-4319-b1c6-3c1c4727e06f/0/27851163005F59C06E35A8FD365F96356EB34971.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 98:33:77:89:23:59:36:aa:97:89:80:0f:14:f8:1f:d6:17:e2: 98:9c:ab:1c:5f:9a:13:01:8f:ff:ff:a8:a9:d1:45:b7:9a:2c: 01:ca:13:9a:79:da:6b:33:22:52:8b:8c:03:ad:f7:34:96:fc: 87:49:d0:70:38:10:bf:ad:52:64:19:83:98:8e:47:45:cf:7c: 69:fb:d4:e2:ff:a8:dd:7f:fa:a4:27:2f:88:1c:1f:23:d1:8b: 28:94:44:5a:55:74:c0:92:8c:23:90:98:8e:14:5e:d8:02:83: 35:b2:b2:6d:11:8d:26:49:55:ec:d1:a2:aa:ec:7e:c0:93:a9: 46:3c:ae:cd:78:c9:b1:f1:ef:e1:f6:af:2e:42:31:94:8e:7f: f1:5f:a6:5d:36:76:b1:dd:9f:34:df:4a:ab:98:59:29:12:45: 90:ea:2e:c3:cb:d4:27:58:93:ba:82:ad:91:32:fb:f3:37:16: 63:bb:2b:2b:ca:2e:bf:20:5c:9e:90:ba:34:f4:90:80:51:29: a2:28:9a:52:98:96:c2:13:6a:ff:e6:64:e2:b0:d1:f3:62:b4: 8f:86:5d:dd:41:58:ef:40:44:fc:dc:c7:46:55:19:68:f8:cc: 7e:98:67:cf:7f:40:43:85:4e:52:5a:5d:b0:8f:67:d3:b0:5d: 40:37:6e:c2 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUOwA/2VK7A0vfvH2Viy0iG4ZbJnIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjc4NTExNjMwMDVmNTljMDZlMzVhOGZkMzY1Zjk2MzU2 ZWIzNDk3MTAeFw0yNTA3MjUwOTQzMjBaFw0yNTA3MjYxMDQxMjBaMDMxMTAvBgNV BAMTKDRCRDNCRDgxQzI0RDJDREJGRkYwMzI0RjIwRDE0RTBERTdBQzQzMUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDQt2uu90EWGnFHQ71Qz91to0q LJzxcxGFVhRwauWsIlFxWho1lKVHP1TmeFUMtMlLiPNFQOomknHgRpPV6osYIudo 39iL+mvrdUWWHoO1RMXbQ/5qutDldRTh1o3rli0v5ZyB7lQPxXow0xAbWEnbNl4M DFfsXn4I0BYelQtfCszYOGXnjB5K+uiug1RwP/pWTN7zphDks2cCs4nhvwv/WaYw fmqDQsAgzoQBwPMQC5O/7yubDspCL7SAqwOi60U1ugaGp9Z8+odw71DZN1SQJcyZ f5YDFf3B7f9y1uXt7OmS8AEjYiJHUG18t6AP80xVW48MmhZtN4V2aGwI1TftAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUS9O9gcJNLNv/8DJPINFODeesQxwwHwYDVR0j BBgwFoAUJ4URYwBfWcBuNaj9Nl+WNW6zSXEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvM2VhZmMzMmItZWMwMy00MzE5LWIxYzYtM2MxYzQ3Mjdl MDZmLzAvMjc4NTExNjMwMDVGNTlDMDZFMzVBOEZEMzY1Rjk2MzU2RUIzNDk3MS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0o0VVJZd0JmV2NCdU5hajlObC1XTlc2 elNYRS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8zZWFmYzMyYi1l YzAzLTQzMTktYjFjNi0zYzFjNDcyN2UwNmYvMC8yNzg1MTE2MzAwNUY1OUMwNkUz NUE4RkQzNjVGOTYzNTZFQjM0OTcxLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmDN3iSNZNqqXiYAPFPgf 1hfimJyrHF+aEwGP//+oqdFFt5osAcoTmnnaazMiUouMA633NJb8h0nQcDgQv61S ZBmDmI5HRc98afvU4v+o3X/6pCcviBwfI9GLKJREWlV0wJKMI5CYjhRe2AKDNbKy bRGNJklV7NGiqux+wJOpRjyuzXjJsfHv4favLkIxlI5/8V+mXTZ2sd2fNN9Kq5hZ KRJFkOouw8vUJ1iTuoKtkTL78zcWY7srK8ouvyBcnpC6NPSQgFEpoiiaUpiWwhNq /+Zk4rDR82K0j4Zd3UFY70BE/NzHRlUZaPjMfphnz39AQ4VOUlpdsI9n07BdQDdu wg== -----END CERTIFICATE-----Generated at Sat Jul 26 01:49:15 2025 by rpki-client