$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/69bbfdcf-35cd-4524-8ffa-3005b0b69a29/0/25827D84056B8444CC2A7842759035354B8416BC.mft File: 25827D84056B8444CC2A7842759035354B8416BC.mft (raw, json) Hash identifier: at+0NOq451Ia/PzUjU1xzlaMhD2rkKJ+TDUYtbYjeXc= Subject key identifier: 05:40:15:4F:72:24:3F:9C:B1:5F:8F:91:5A:42:F5:4B:3D:9C:E5:2B Authority key identifier: 25:82:7D:84:05:6B:84:44:CC:2A:78:42:75:90:35:35:4B:84:16:BC Certificate issuer: /CN=25827d84056b8444cc2a7842759035354b8416bc Certificate serial: 269DC51DB3306EA6C4A410E05EAA7890342AF7D8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JYJ9hAVrhETMKnhCdZA1NUuEFrw.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/69bbfdcf-35cd-4524-8ffa-3005b0b69a29/0/25827D84056B8444CC2A7842759035354B8416BC.mft Manifest number: 0477 Signing time: Sun 11 Oct 2026 16:06:05 +0000 Manifest this update: Sun 11 Oct 2026 16:01:05 +0000 Manifest next update: Mon 12 Oct 2026 16:34:05 +0000 Files and hashes: 1: 25827D84056B8444CC2A7842759035354B8416BC.crl (hash: hb4m206fsnv1edVi3r80CW+6aE3yrA+r4UpMKUl0IX0=) 2: AS18607.asa (hash: ol8lct09PZ1pqBOGDq6LTNV0i5NYMmiHGhSWuOi+FwQ=) 3: 326131343a313463303a323a3a2f34382d3438203d3e20323037343837.roa (hash: dHA6HLPOR3IQCPs+KBxka5EoTXTVzS3+Rk/fPIxN15o=) 4: AS207487.asa (hash: s3p6b4UEGWgtzDLFmXDHf89hF7XtnQxEviO1lAFHwO4=) 5: 326131343a313463303a313a3a2f34382d3438203d3e20323037343837.roa (hash: NlN3fbd4xPs8oXDjI1+pTaPhc7vLifacDO0nMI7gkYc=) 6: 326131343a313463313a3230303a3a2f34302d3438203d3e203138363037.roa (hash: eBGi76bk+i5KfnHGqq9jtzpn0gh813x0+GlA90AUkZI=) 7: 326131343a313463303a3a2f34382d3438203d3e20323037343837.roa (hash: AULHfw30fC5JPuaDQ09QijzFEojRfFb5/T1vtTj7hIM=) 8: 3138352e3133342e3139312e302f32342d3234203d3e20323037343837.roa (hash: b2vN+3qPM1Kt77HuQ8RzenF0xuc+QJpvrF7GjBac7y0=) 9: 58E92F2C3859C2D0EF322A871688CB22928E2F3E.cer (hash: gYiT3SS0bbmQQSp3p/LPeJzfbx3ujd90DskZO9GZ0PQ=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/69bbfdcf-35cd-4524-8ffa-3005b0b69a29/0/25827D84056B8444CC2A7842759035354B8416BC.crl rsync://rsync.paas.rpki.ripe.net/repository/69bbfdcf-35cd-4524-8ffa-3005b0b69a29/0/25827D84056B8444CC2A7842759035354B8416BC.mft rsync://rpki.ripe.net/repository/DEFAULT/JYJ9hAVrhETMKnhCdZA1NUuEFrw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Oct 2026 14:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:9d:c5:1d:b3:30:6e:a6:c4:a4:10:e0:5e:aa:78:90:34:2a:f7:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=25827d84056b8444cc2a7842759035354b8416bc Validity Not Before: Oct 11 16:01:05 2026 GMT Not After : Oct 12 16:34:05 2026 GMT Subject: CN=0540154F72243F9CB15F8F915A42F54B3D9CE52B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:53:b2:68:cf:79:c0:7b:ef:c5:33:70:20:64: 86:86:de:d3:b8:e8:61:6f:99:c1:c3:23:f1:79:91: 93:0c:0f:0c:db:87:b9:40:41:df:ac:0b:51:0d:8a: bc:dc:fa:f3:5f:ee:00:62:d4:6d:d0:11:8d:50:58: 75:c1:c9:63:28:e5:32:d0:a3:28:24:ab:ee:e6:39: 5a:61:64:46:b7:09:1b:68:ff:dc:bc:d9:42:39:47: 77:71:9c:25:49:9b:ca:97:e3:52:24:af:0a:a7:cc: 02:e4:a2:3e:ef:ca:04:3a:eb:9d:d9:6c:c5:be:98: 15:73:2c:3c:8b:df:e1:02:73:cf:fe:e5:ca:ea:f1: f0:13:9a:4d:e9:29:4c:0e:fe:a6:7c:79:3e:ec:81: 99:7f:26:f2:4a:13:cd:d0:6f:49:42:95:06:c1:82: 24:c0:ab:a8:eb:9f:25:ac:c9:42:d8:b4:18:68:1b: 4c:64:5a:89:dd:b3:02:1b:d5:80:92:81:2f:77:b4: 3a:90:5e:f6:f2:d9:69:16:4a:6b:e2:54:3f:ba:5c: 2c:8a:af:c7:40:86:35:84:fb:46:bf:81:d9:47:16: 09:ce:e8:1d:eb:e7:01:85:11:d2:14:4e:c8:da:22: 81:08:eb:c0:07:a8:97:d1:ab:6a:f1:9c:ef:b3:1a: 66:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:40:15:4F:72:24:3F:9C:B1:5F:8F:91:5A:42:F5:4B:3D:9C:E5:2B X509v3 Authority Key Identifier: keyid:25:82:7D:84:05:6B:84:44:CC:2A:78:42:75:90:35:35:4B:84:16:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/69bbfdcf-35cd-4524-8ffa-3005b0b69a29/0/25827D84056B8444CC2A7842759035354B8416BC.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JYJ9hAVrhETMKnhCdZA1NUuEFrw.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/69bbfdcf-35cd-4524-8ffa-3005b0b69a29/0/25827D84056B8444CC2A7842759035354B8416BC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:f6:6a:71:19:72:9a:68:ae:74:cd:27:8c:92:39:22:b4:41: bf:7c:93:78:c8:28:12:59:30:49:8c:79:02:10:d9:69:d7:bf: de:0a:ee:5a:83:9b:43:c7:62:03:46:9d:22:6b:e1:d9:6c:02: aa:df:5c:f5:ff:c9:f0:43:2a:2f:dc:77:1f:1a:62:dd:a4:f2: 6b:e9:c4:3b:98:d3:f6:59:cd:4f:1d:e0:63:81:2e:97:16:56: b6:e1:05:bb:06:ba:2a:59:f0:81:98:36:a1:a9:ad:6b:bf:f3: 37:87:4c:f3:bb:98:f8:5d:ae:31:54:f0:6a:11:d9:c2:05:e1: 64:90:bb:aa:9d:d2:31:92:e3:2a:9b:2a:8e:9b:2a:f0:7f:1f: 38:25:eb:19:f2:35:9f:04:cd:02:f8:bb:eb:39:9b:d3:d2:62: f3:fc:47:56:5f:ac:3e:bb:31:22:cf:f1:d4:11:09:3a:88:44: f7:b9:20:8a:0c:67:94:d9:5b:34:0b:9f:4d:0c:61:cd:81:d1: 7b:d2:bb:d5:f3:04:42:66:99:43:82:46:81:8f:fc:47:1a:91: 8b:67:5a:39:9c:09:52:87:82:14:6a:af:43:ca:d1:79:15:d5: d8:fa:b0:53:76:3f:88:12:87:4f:75:a6:36:71:55:d2:cc:33: 5e:8b:d8:5f -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUJp3FHbMwbqbEpBDgXqp4kDQq99gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjU4MjdkODQwNTZiODQ0NGNjMmE3ODQyNzU5MDM1MzU0 Yjg0MTZiYzAeFw0yNjEwMTExNjAxMDVaFw0yNjEwMTIxNjM0MDVaMDMxMTAvBgNV BAMTKDA1NDAxNTRGNzIyNDNGOUNCMTVGOEY5MTVBNDJGNTRCM0Q5Q0U1MkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCLU7Joz3nAe+/FM3AgZIaG3tO4 6GFvmcHDI/F5kZMMDwzbh7lAQd+sC1ENirzc+vNf7gBi1G3QEY1QWHXByWMo5TLQ oygkq+7mOVphZEa3CRto/9y82UI5R3dxnCVJm8qX41IkrwqnzALkoj7vygQ6653Z bMW+mBVzLDyL3+ECc8/+5crq8fATmk3pKUwO/qZ8eT7sgZl/JvJKE83Qb0lClQbB giTAq6jrnyWsyULYtBhoG0xkWondswIb1YCSgS93tDqQXvby2WkWSmviVD+6XCyK r8dAhjWE+0a/gdlHFgnO6B3r5wGFEdIUTsjaIoEI68AHqJfRq2rxnO+zGmZVAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUBUAVT3IkP5yxX4+RWkL1Sz2c5SswHwYDVR0j BBgwFoAUJYJ9hAVrhETMKnhCdZA1NUuEFrwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNjliYmZkY2YtMzVjZC00NTI0LThmZmEtMzAwNWIwYjY5 YTI5LzAvMjU4MjdEODQwNTZCODQ0NENDMkE3ODQyNzU5MDM1MzU0Qjg0MTZCQy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0pZSjloQVZyaEVUTUtuaENkWkExTlV1 RUZydy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS82OWJiZmRjZi0z NWNkLTQ1MjQtOGZmYS0zMDA1YjBiNjlhMjkvMC8yNTgyN0Q4NDA1NkI4NDQ0Q0My QTc4NDI3NTkwMzUzNTRCODQxNkJDLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAX/ZqcRlymmiudM0njJI5 IrRBv3yTeMgoElkwSYx5AhDZade/3gruWoObQ8diA0adImvh2WwCqt9c9f/J8EMq L9x3Hxpi3aTya+nEO5jT9lnNTx3gY4EulxZWtuEFuwa6KlnwgZg2oamta7/zN4dM 87uY+F2uMVTwahHZwgXhZJC7qp3SMZLjKpsqjpsq8H8fOCXrGfI1nwTNAvi76zmb 09Ji8/xHVl+sPrsxIs/x1BEJOohE97kgigxnlNlbNAufTQxhzYHRe9K71fMEQmaZ Q4JGgY/8RxqRi2daOZwJUoeCFGqvQ8rReRXV2PqwU3Y/iBKHT3WmNnFV0swzXovY Xw== -----END CERTIFICATE-----Generated at Sun Oct 11 22:27:05 2026 by rpki-client