$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3eafc32b-ec03-4319-b1c6-3c1c4727e06f/0/27851163005F59C06E35A8FD365F96356EB34971.mft File: 27851163005F59C06E35A8FD365F96356EB34971.mft (raw, json) Hash identifier: 5yNfhlK63fCaKJmpLfs9VZi3vGvpMZ1YnznTu/k7wtM= Subject key identifier: 77:70:8B:A8:9A:E6:B4:AD:41:1B:0E:77:85:C0:A7:58:BE:64:A7:2A Authority key identifier: 27:85:11:63:00:5F:59:C0:6E:35:A8:FD:36:5F:96:35:6E:B3:49:71 Certificate issuer: /CN=27851163005f59c06e35a8fd365f96356eb34971 Certificate serial: 5A9163AEC438DB9A6B159D9B2A011EB2FF7ABFA4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J4URYwBfWcBuNaj9Nl-WNW6zSXE.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/3eafc32b-ec03-4319-b1c6-3c1c4727e06f/0/27851163005F59C06E35A8FD365F96356EB34971.mft Manifest number: 0139 Signing time: Mon 15 Sep 2025 05:58:17 +0000 Manifest this update: Mon 15 Sep 2025 05:53:17 +0000 Manifest next update: Tue 16 Sep 2025 08:05:17 +0000 Files and hashes: 1: 323030313a3637633a6638633a3a2f34382d3438203d3e20323132383535.roa (hash: prfcq9YIMAg2ry1iZCXqsMkFnalbT+MPZdyoUmwmw6g=) 2: 39332e3135372e3134302e302f32342d3234203d3e20323132383535.roa (hash: hdp9Cx8dMbvUUOjRrqy1XfSIVtsUnXM8OZnay1usHT4=) 3: AS212855.asa (hash: T3YdrgEJ1P9IU1IPBHUKuz7lJiYzWWWbNO7fDdrADAU=) 4: 27851163005F59C06E35A8FD365F96356EB34971.crl (hash: 4aPsTYneEYFUgYEoC+ArccEFlx801PLWoKv4Ng72WwM=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/3eafc32b-ec03-4319-b1c6-3c1c4727e06f/0/27851163005F59C06E35A8FD365F96356EB34971.crl rsync://rsync.paas.rpki.ripe.net/repository/3eafc32b-ec03-4319-b1c6-3c1c4727e06f/0/27851163005F59C06E35A8FD365F96356EB34971.mft rsync://rpki.ripe.net/repository/DEFAULT/J4URYwBfWcBuNaj9Nl-WNW6zSXE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Sep 2025 08:05:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:91:63:ae:c4:38:db:9a:6b:15:9d:9b:2a:01:1e:b2:ff:7a:bf:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=27851163005f59c06e35a8fd365f96356eb34971 Validity Not Before: Sep 15 05:53:17 2025 GMT Not After : Sep 16 08:05:17 2025 GMT Subject: CN=77708BA89AE6B4AD411B0E7785C0A758BE64A72A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:36:ce:d1:c5:39:44:b8:39:b9:61:2f:77:98: 69:5f:e8:2c:2f:a1:ce:2c:71:5b:f8:0f:a6:29:4e: a5:c2:ca:dc:e4:11:1c:2e:9d:f3:2d:1f:77:ae:45: 1b:83:51:31:81:80:41:6c:ca:59:7a:87:71:6c:70: 9e:3a:47:7b:fb:ff:1a:82:7f:fa:f7:b7:97:b3:52: c1:60:02:78:ea:2e:5f:f2:cb:69:1e:04:c1:58:54: 20:86:c0:63:92:c5:05:de:b0:db:85:52:28:ad:62: 80:33:41:54:c2:fd:42:b0:ac:cc:c9:d1:df:86:b0: 29:e5:0d:13:7e:6d:a8:86:53:89:88:9a:c6:8c:09: e3:e0:58:f4:f9:67:b6:ba:3d:61:54:fd:9a:bf:bc: fe:d5:1a:b5:47:cf:10:b3:cf:7a:f8:d6:f8:57:96: 98:5d:ad:ce:7c:b2:32:27:cf:5e:8b:f0:73:bc:36: de:2b:97:a3:d4:e3:dc:23:24:4a:68:8d:c8:5c:3a: 3d:38:1b:f5:e1:89:0c:39:e6:12:da:31:ec:90:49: fe:b7:ce:b5:2a:f4:1f:4e:56:2c:66:59:ae:4c:03: 08:4a:d8:db:26:0a:d3:3d:80:88:fb:06:d4:9d:33: 5e:c9:54:d0:6f:42:19:f2:c8:05:f5:49:d0:ec:29: e1:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:70:8B:A8:9A:E6:B4:AD:41:1B:0E:77:85:C0:A7:58:BE:64:A7:2A X509v3 Authority Key Identifier: keyid:27:85:11:63:00:5F:59:C0:6E:35:A8:FD:36:5F:96:35:6E:B3:49:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/3eafc32b-ec03-4319-b1c6-3c1c4727e06f/0/27851163005F59C06E35A8FD365F96356EB34971.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J4URYwBfWcBuNaj9Nl-WNW6zSXE.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3eafc32b-ec03-4319-b1c6-3c1c4727e06f/0/27851163005F59C06E35A8FD365F96356EB34971.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:5c:76:ac:ca:5c:62:f1:4f:c3:4a:04:dc:ec:ee:fa:eb:4e: 40:06:46:27:4c:89:49:a6:7c:35:72:7b:11:d6:0a:7e:dd:41: 51:9f:12:59:e9:8c:cd:a0:2e:fb:51:f8:7f:0e:3b:8e:1f:0d: c3:f6:74:ea:e2:8d:4a:4e:d2:14:d0:82:98:e7:b0:cf:69:49: 59:96:df:54:11:11:0e:36:c2:24:a7:f2:40:f5:c0:3d:2d:0a: e3:55:d5:57:05:a0:1d:9e:17:84:02:d6:e3:0e:c6:80:e5:6b: ac:a0:e8:75:cf:3a:80:c4:38:4a:7c:79:12:ec:8e:2a:16:9e: 6d:a5:72:6f:f2:ee:ad:ba:6c:a9:e9:86:c8:c3:b8:52:43:3e: 82:d3:bb:f9:b2:fa:c9:41:52:18:71:51:48:e9:72:89:8c:6f: 58:2d:f1:0e:34:75:85:07:2a:60:9c:36:ad:c9:4a:c3:c0:d8: e0:c3:dd:66:e6:b0:ef:20:bb:39:d9:0f:c6:c4:f9:ba:4d:64: 94:71:4e:69:f2:55:52:bc:4c:6b:29:01:06:48:6b:93:f8:0e: 05:f9:1d:fd:7c:82:f3:89:f1:aa:53:20:8c:19:c6:50:ef:21: 8f:47:a7:87:06:f3:76:01:f2:6c:a5:16:5c:1b:e2:da:9c:58: 83:23:2c:b2 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUWpFjrsQ425prFZ2bKgEesv96v6QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjc4NTExNjMwMDVmNTljMDZlMzVhOGZkMzY1Zjk2MzU2 ZWIzNDk3MTAeFw0yNTA5MTUwNTUzMTdaFw0yNTA5MTYwODA1MTdaMDMxMTAvBgNV BAMTKDc3NzA4QkE4OUFFNkI0QUQ0MTFCMEU3Nzg1QzBBNzU4QkU2NEE3MkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDsNs7RxTlEuDm5YS93mGlf6Cwv oc4scVv4D6YpTqXCytzkERwunfMtH3euRRuDUTGBgEFsyll6h3FscJ46R3v7/xqC f/r3t5ezUsFgAnjqLl/yy2keBMFYVCCGwGOSxQXesNuFUiitYoAzQVTC/UKwrMzJ 0d+GsCnlDRN+baiGU4mImsaMCePgWPT5Z7a6PWFU/Zq/vP7VGrVHzxCzz3r41vhX lphdrc58sjInz16L8HO8Nt4rl6PU49wjJEpojchcOj04G/XhiQw55hLaMeyQSf63 zrUq9B9OVixmWa5MAwhK2NsmCtM9gIj7BtSdM17JVNBvQhnyyAX1SdDsKeEhAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUd3CLqJrmtK1BGw53hcCnWL5kpyowHwYDVR0j BBgwFoAUJ4URYwBfWcBuNaj9Nl+WNW6zSXEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvM2VhZmMzMmItZWMwMy00MzE5LWIxYzYtM2MxYzQ3Mjdl MDZmLzAvMjc4NTExNjMwMDVGNTlDMDZFMzVBOEZEMzY1Rjk2MzU2RUIzNDk3MS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0o0VVJZd0JmV2NCdU5hajlObC1XTlc2 elNYRS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8zZWFmYzMyYi1l YzAzLTQzMTktYjFjNi0zYzFjNDcyN2UwNmYvMC8yNzg1MTE2MzAwNUY1OUMwNkUz NUE4RkQzNjVGOTYzNTZFQjM0OTcxLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc1x2rMpcYvFPw0oE3Ozu +utOQAZGJ0yJSaZ8NXJ7EdYKft1BUZ8SWemMzaAu+1H4fw47jh8Nw/Z06uKNSk7S FNCCmOewz2lJWZbfVBERDjbCJKfyQPXAPS0K41XVVwWgHZ4XhALW4w7GgOVrrKDo dc86gMQ4Snx5EuyOKhaebaVyb/LurbpsqemGyMO4UkM+gtO7+bL6yUFSGHFRSOly iYxvWC3xDjR1hQcqYJw2rclKw8DY4MPdZuaw7yC7OdkPxsT5uk1klHFOafJVUrxM aykBBkhrk/gOBfkd/XyC84nxqlMgjBnGUO8hj0enhwbzdgHybKUWXBvi2pxYgyMs sg== -----END CERTIFICATE-----Generated at Mon Sep 15 22:44:16 2025 by rpki-client