$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3eafc32b-ec03-4319-b1c6-3c1c4727e06f/0/27851163005F59C06E35A8FD365F96356EB34971.mft File: 27851163005F59C06E35A8FD365F96356EB34971.mft (raw, json) Hash identifier: gdV57snUzRZ+rqjMlEP/tBS72Y9XAKAdLKoI4/y17Wk= Subject key identifier: 62:E0:26:5C:9F:A4:05:D5:83:2F:6D:36:B3:8B:E5:31:5E:56:E3:24 Authority key identifier: 27:85:11:63:00:5F:59:C0:6E:35:A8:FD:36:5F:96:35:6E:B3:49:71 Certificate issuer: /CN=27851163005f59c06e35a8fd365f96356eb34971 Certificate serial: 3A42C907BF5D1DE28626ABBF468DD82214FC3307 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J4URYwBfWcBuNaj9Nl-WNW6zSXE.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/3eafc32b-ec03-4319-b1c6-3c1c4727e06f/0/27851163005F59C06E35A8FD365F96356EB34971.mft Manifest number: 0186 Signing time: Tue 11 Nov 2025 13:55:23 +0000 Manifest this update: Tue 11 Nov 2025 13:50:23 +0000 Manifest next update: Wed 12 Nov 2025 15:33:23 +0000 Files and hashes: 1: 39332e3135372e3134302e302f32342d3234203d3e20323132383535.roa (hash: hdp9Cx8dMbvUUOjRrqy1XfSIVtsUnXM8OZnay1usHT4=) 2: AS212855.asa (hash: T3YdrgEJ1P9IU1IPBHUKuz7lJiYzWWWbNO7fDdrADAU=) 3: 27851163005F59C06E35A8FD365F96356EB34971.crl (hash: 2pnireRsHrHYOrHHeEwPxFw3SniDue7cHiXqsZG7lTs=) 4: 323030313a3637633a6638633a3a2f34382d3438203d3e20323132383535.roa (hash: prfcq9YIMAg2ry1iZCXqsMkFnalbT+MPZdyoUmwmw6g=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/3eafc32b-ec03-4319-b1c6-3c1c4727e06f/0/27851163005F59C06E35A8FD365F96356EB34971.crl rsync://rsync.paas.rpki.ripe.net/repository/3eafc32b-ec03-4319-b1c6-3c1c4727e06f/0/27851163005F59C06E35A8FD365F96356EB34971.mft rsync://rpki.ripe.net/repository/DEFAULT/J4URYwBfWcBuNaj9Nl-WNW6zSXE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 12 Nov 2025 09:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:42:c9:07:bf:5d:1d:e2:86:26:ab:bf:46:8d:d8:22:14:fc:33:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=27851163005f59c06e35a8fd365f96356eb34971 Validity Not Before: Nov 11 13:50:23 2025 GMT Not After : Nov 12 15:33:23 2025 GMT Subject: CN=62E0265C9FA405D5832F6D36B38BE5315E56E324 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:b0:62:81:a3:f5:df:25:5e:15:b5:47:b3:13: 3f:26:3a:c4:e6:2d:59:14:e4:88:59:2f:44:3b:71: 69:e1:cf:69:2c:9e:d0:b2:ff:9e:bd:4d:5b:c9:9e: b1:48:15:16:e4:7a:ee:f2:56:84:2e:d6:3c:6d:42: e7:14:d6:7f:9c:d6:87:64:60:cd:b5:df:ff:cc:74: ec:87:5d:9b:04:10:d0:a2:3d:f5:49:ac:4b:f1:5c: 10:58:37:a3:5a:e5:34:e1:3f:02:25:0c:8f:b6:34: 76:95:09:27:7d:6d:df:f0:21:3b:7a:42:6c:45:c9: 29:49:46:14:ed:bc:37:ce:c3:4b:bc:9d:f4:c0:85: b7:dd:ea:14:62:5b:50:7b:3c:01:09:e8:b3:11:b5: 7e:1c:f7:34:e4:72:53:44:e4:2f:91:b9:66:c6:ab: 86:06:6c:9d:43:d7:6f:36:ce:ff:f3:6f:b4:78:dc: f3:db:f8:9f:ac:7b:c6:22:5c:71:d3:0b:71:80:a8: 01:f7:40:98:37:ca:8f:f0:e8:52:5e:29:59:20:42: a4:59:13:70:61:b8:06:be:27:51:1b:01:4a:36:82: 60:7a:72:1a:b9:2b:07:58:76:41:91:68:04:65:86: 14:57:0d:d5:53:4f:dd:69:63:d3:6b:de:60:66:49: fc:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:E0:26:5C:9F:A4:05:D5:83:2F:6D:36:B3:8B:E5:31:5E:56:E3:24 X509v3 Authority Key Identifier: keyid:27:85:11:63:00:5F:59:C0:6E:35:A8:FD:36:5F:96:35:6E:B3:49:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/3eafc32b-ec03-4319-b1c6-3c1c4727e06f/0/27851163005F59C06E35A8FD365F96356EB34971.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J4URYwBfWcBuNaj9Nl-WNW6zSXE.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3eafc32b-ec03-4319-b1c6-3c1c4727e06f/0/27851163005F59C06E35A8FD365F96356EB34971.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:8c:a4:a0:73:50:d5:59:76:dc:99:88:c0:8d:7a:a3:8a:a7: b5:aa:06:72:f7:6e:65:a5:fb:b4:cb:2f:cf:b4:9b:2f:18:93: f6:bf:60:41:00:15:11:46:d9:2c:89:00:aa:97:a4:dc:19:dc: 0d:e0:51:88:b4:f2:9b:50:9e:b0:f4:ef:b6:24:35:82:da:f0: 2d:c4:c9:10:45:66:bd:d2:64:ab:36:08:ea:87:82:ef:0c:b9: 88:45:86:57:77:d6:6d:0c:49:0d:e4:87:b6:21:26:ac:a8:f6: 1d:f2:1c:0c:cf:70:2b:cf:b6:ec:6f:5e:53:09:66:9a:1d:9e: 5a:cb:3e:e5:e8:a3:80:e2:d4:54:22:44:ea:58:04:02:18:0c: d6:23:c7:68:da:22:d3:a1:46:65:e3:0f:1f:aa:be:46:8c:2c: e1:d2:e4:a5:08:7b:90:4f:4f:5e:5b:f0:e7:2e:0b:d8:1d:21: 8e:ce:a3:61:b0:08:a9:f9:69:ba:eb:e9:7a:61:66:b2:bb:df: 13:cc:14:23:85:85:a6:d7:9e:c4:ee:e2:ba:5b:c7:ea:17:43: 79:92:a3:6d:83:e1:db:4d:4b:73:15:4e:8a:5a:3d:35:dc:94: bc:a8:08:86:16:f8:98:ee:56:32:8f:a3:5c:d5:80:31:00:bd: de:34:12:42 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUOkLJB79dHeKGJqu/Ro3YIhT8MwcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjc4NTExNjMwMDVmNTljMDZlMzVhOGZkMzY1Zjk2MzU2 ZWIzNDk3MTAeFw0yNTExMTExMzUwMjNaFw0yNTExMTIxNTMzMjNaMDMxMTAvBgNV BAMTKDYyRTAyNjVDOUZBNDA1RDU4MzJGNkQzNkIzOEJFNTMxNUU1NkUzMjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrsGKBo/XfJV4VtUezEz8mOsTm LVkU5IhZL0Q7cWnhz2ksntCy/569TVvJnrFIFRbkeu7yVoQu1jxtQucU1n+c1odk YM213//MdOyHXZsEENCiPfVJrEvxXBBYN6Na5TThPwIlDI+2NHaVCSd9bd/wITt6 QmxFySlJRhTtvDfOw0u8nfTAhbfd6hRiW1B7PAEJ6LMRtX4c9zTkclNE5C+RuWbG q4YGbJ1D1282zv/zb7R43PPb+J+se8YiXHHTC3GAqAH3QJg3yo/w6FJeKVkgQqRZ E3BhuAa+J1EbAUo2gmB6chq5KwdYdkGRaARlhhRXDdVTT91pY9Nr3mBmSfxDAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUYuAmXJ+kBdWDL202s4vlMV5W4yQwHwYDVR0j BBgwFoAUJ4URYwBfWcBuNaj9Nl+WNW6zSXEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvM2VhZmMzMmItZWMwMy00MzE5LWIxYzYtM2MxYzQ3Mjdl MDZmLzAvMjc4NTExNjMwMDVGNTlDMDZFMzVBOEZEMzY1Rjk2MzU2RUIzNDk3MS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0o0VVJZd0JmV2NCdU5hajlObC1XTlc2 elNYRS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8zZWFmYzMyYi1l YzAzLTQzMTktYjFjNi0zYzFjNDcyN2UwNmYvMC8yNzg1MTE2MzAwNUY1OUMwNkUz NUE4RkQzNjVGOTYzNTZFQjM0OTcxLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiIykoHNQ1Vl23JmIwI16 o4qntaoGcvduZaX7tMsvz7SbLxiT9r9gQQAVEUbZLIkAqpek3BncDeBRiLTym1Ce sPTvtiQ1gtrwLcTJEEVmvdJkqzYI6oeC7wy5iEWGV3fWbQxJDeSHtiEmrKj2HfIc DM9wK8+27G9eUwlmmh2eWss+5eijgOLUVCJE6lgEAhgM1iPHaNoi06FGZeMPH6q+ Rows4dLkpQh7kE9PXlvw5y4L2B0hjs6jYbAIqflpuuvpemFmsrvfE8wUI4WFptee xO7iulvH6hdDeZKjbYPh201LcxVOilo9NdyUvKgIhhb4mO5WMo+jXNWAMQC93jQS Qg== -----END CERTIFICATE-----Generated at Tue Nov 11 15:16:52 2025 by rpki-client