$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/69bbfdcf-35cd-4524-8ffa-3005b0b69a29/0/25827D84056B8444CC2A7842759035354B8416BC.mft File: 25827D84056B8444CC2A7842759035354B8416BC.mft (raw, json) Hash identifier: PeDmWXny6DUD3TWYMacm1mmLLtecoEWV+/doM4zJSaU= Subject key identifier: 47:C4:2E:37:0B:C0:9B:8C:5B:12:BA:2F:98:A3:AC:F5:E6:2D:5B:67 Authority key identifier: 25:82:7D:84:05:6B:84:44:CC:2A:78:42:75:90:35:35:4B:84:16:BC Certificate issuer: /CN=25827d84056b8444cc2a7842759035354b8416bc Certificate serial: 1B5F8B7399EFA28D9110BB17E2D846A8FD0ABE27 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JYJ9hAVrhETMKnhCdZA1NUuEFrw.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/69bbfdcf-35cd-4524-8ffa-3005b0b69a29/0/25827D84056B8444CC2A7842759035354B8416BC.mft Manifest number: 0433 Signing time: Fri 21 Aug 2026 07:28:53 +0000 Manifest this update: Fri 21 Aug 2026 07:23:53 +0000 Manifest next update: Sat 22 Aug 2026 08:47:53 +0000 Files and hashes: 1: 326131343a313463303a313a3a2f34382d3438203d3e20323037343837.roa (hash: NlN3fbd4xPs8oXDjI1+pTaPhc7vLifacDO0nMI7gkYc=) 2: 3138352e3133342e3139312e302f32342d3234203d3e20323037343837.roa (hash: b2vN+3qPM1Kt77HuQ8RzenF0xuc+QJpvrF7GjBac7y0=) 3: AS18607.asa (hash: ol8lct09PZ1pqBOGDq6LTNV0i5NYMmiHGhSWuOi+FwQ=) 4: 326131343a313463303a323a3a2f34382d3438203d3e20323037343837.roa (hash: dHA6HLPOR3IQCPs+KBxka5EoTXTVzS3+Rk/fPIxN15o=) 5: 58E92F2C3859C2D0EF322A871688CB22928E2F3E.cer (hash: gYiT3SS0bbmQQSp3p/LPeJzfbx3ujd90DskZO9GZ0PQ=) 6: 326131343a313463303a3a2f34382d3438203d3e20323037343837.roa (hash: AULHfw30fC5JPuaDQ09QijzFEojRfFb5/T1vtTj7hIM=) 7: AS207487.asa (hash: s3p6b4UEGWgtzDLFmXDHf89hF7XtnQxEviO1lAFHwO4=) 8: 326131343a313463313a3230303a3a2f34302d3438203d3e203138363037.roa (hash: eBGi76bk+i5KfnHGqq9jtzpn0gh813x0+GlA90AUkZI=) 9: 25827D84056B8444CC2A7842759035354B8416BC.crl (hash: lSxvulhIECl1jxMQ0GloitBc8L2AzrwT8JDMUs0dZ1E=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/69bbfdcf-35cd-4524-8ffa-3005b0b69a29/0/25827D84056B8444CC2A7842759035354B8416BC.crl rsync://rsync.paas.rpki.ripe.net/repository/69bbfdcf-35cd-4524-8ffa-3005b0b69a29/0/25827D84056B8444CC2A7842759035354B8416BC.mft rsync://rpki.ripe.net/repository/DEFAULT/JYJ9hAVrhETMKnhCdZA1NUuEFrw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 22 Aug 2026 08:47:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:5f:8b:73:99:ef:a2:8d:91:10:bb:17:e2:d8:46:a8:fd:0a:be:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=25827d84056b8444cc2a7842759035354b8416bc Validity Not Before: Aug 21 07:23:53 2026 GMT Not After : Aug 22 08:47:53 2026 GMT Subject: CN=47C42E370BC09B8C5B12BA2F98A3ACF5E62D5B67 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:ea:06:56:37:3a:c6:17:b7:20:78:59:9c:c5: 1a:a2:97:ee:3e:2e:79:dc:d5:ff:99:f2:8d:d0:35: a1:20:8d:05:84:0c:c9:90:87:40:ea:71:ec:35:b4: a9:04:3e:9d:8b:35:e6:e0:ec:42:14:d7:da:c6:52: 14:55:4b:ff:d9:3a:d0:96:fb:4e:3d:8c:0d:fe:d5: f4:c2:78:0e:01:da:21:cd:29:6f:a1:44:ea:b2:da: af:76:17:5c:22:15:7c:c7:1d:dc:0e:2d:b1:5c:b8: 6b:35:b0:47:2e:1e:b8:91:49:ce:20:d1:80:62:69: f6:09:dd:3b:09:ad:ef:24:71:a2:a2:15:46:9e:41: c0:1a:6f:c1:af:e1:9b:c5:8c:b5:8b:ca:e2:fc:69: 48:5c:16:d3:ec:e5:93:0b:cd:4c:ca:95:87:73:9d: cf:20:1c:a1:e8:49:a2:70:37:53:85:68:a5:e4:50: 79:91:94:25:25:5d:27:96:4c:b5:5f:d2:12:fb:b7: f7:10:8c:68:ff:87:9e:bf:5d:e6:ce:b3:f2:eb:ec: b3:f2:5f:2a:32:97:15:40:a1:b9:7f:25:93:3d:84: b7:58:37:d0:2d:68:10:c3:c1:b0:65:51:1f:53:bd: 0b:e0:a3:01:c1:30:26:65:2f:a9:9f:1c:bd:27:b5: 2a:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:C4:2E:37:0B:C0:9B:8C:5B:12:BA:2F:98:A3:AC:F5:E6:2D:5B:67 X509v3 Authority Key Identifier: keyid:25:82:7D:84:05:6B:84:44:CC:2A:78:42:75:90:35:35:4B:84:16:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/69bbfdcf-35cd-4524-8ffa-3005b0b69a29/0/25827D84056B8444CC2A7842759035354B8416BC.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JYJ9hAVrhETMKnhCdZA1NUuEFrw.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/69bbfdcf-35cd-4524-8ffa-3005b0b69a29/0/25827D84056B8444CC2A7842759035354B8416BC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 50:cf:54:2b:f9:0d:6c:63:56:48:2a:58:a2:6e:32:5e:72:11: 2b:06:53:da:67:59:a2:17:41:43:c4:d6:d6:cb:81:9f:57:2a: dd:70:13:18:80:90:b6:c8:72:7d:8b:fd:a4:27:43:bb:5b:3c: 05:51:64:43:a3:f6:ca:44:9d:09:cb:74:80:1a:30:be:62:75: 8c:75:41:98:ff:4a:51:d9:f5:43:70:a1:7e:6b:5e:80:11:9d: 48:cc:f8:db:e5:a2:00:5b:1d:c1:fc:73:83:83:db:e2:12:1f: e5:29:4e:9c:a1:e9:ac:c0:9b:d5:1f:20:6d:06:f6:93:7e:6c: 13:53:fb:1e:49:a0:b7:d7:e4:ae:98:4f:23:ca:36:4c:f9:13: 0b:94:af:96:83:b7:0f:84:68:13:04:36:bf:80:51:3a:10:d6: 6a:8e:68:b9:4e:05:f6:ec:06:5d:3d:34:a7:e9:37:c7:f9:18: de:49:5b:44:ce:49:1c:90:54:46:8c:50:4b:d6:c8:fc:c4:93: 54:fb:78:bd:91:bb:5b:c3:74:ca:58:6f:c4:80:ec:e1:a4:b5: 13:c1:cf:e3:55:62:d0:4b:fc:e2:b3:9d:ae:b3:52:2f:b1:7d: 1f:9a:08:b1:55:50:94:d2:ed:10:9e:72:5e:d2:98:de:b2:0f: fe:a1:f6:c7 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUG1+Lc5nvoo2RELsX4thGqP0KvicwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjU4MjdkODQwNTZiODQ0NGNjMmE3ODQyNzU5MDM1MzU0 Yjg0MTZiYzAeFw0yNjA4MjEwNzIzNTNaFw0yNjA4MjIwODQ3NTNaMDMxMTAvBgNV BAMTKDQ3QzQyRTM3MEJDMDlCOEM1QjEyQkEyRjk4QTNBQ0Y1RTYyRDVCNjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDN6gZWNzrGF7cgeFmcxRqil+4+ Lnnc1f+Z8o3QNaEgjQWEDMmQh0Dqcew1tKkEPp2LNebg7EIU19rGUhRVS//ZOtCW +049jA3+1fTCeA4B2iHNKW+hROqy2q92F1wiFXzHHdwOLbFcuGs1sEcuHriRSc4g 0YBiafYJ3TsJre8kcaKiFUaeQcAab8Gv4ZvFjLWLyuL8aUhcFtPs5ZMLzUzKlYdz nc8gHKHoSaJwN1OFaKXkUHmRlCUlXSeWTLVf0hL7t/cQjGj/h56/XebOs/Lr7LPy XyoylxVAobl/JZM9hLdYN9AtaBDDwbBlUR9TvQvgowHBMCZlL6mfHL0ntSonAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUR8QuNwvAm4xbErovmKOs9eYtW2cwHwYDVR0j BBgwFoAUJYJ9hAVrhETMKnhCdZA1NUuEFrwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNjliYmZkY2YtMzVjZC00NTI0LThmZmEtMzAwNWIwYjY5 YTI5LzAvMjU4MjdEODQwNTZCODQ0NENDMkE3ODQyNzU5MDM1MzU0Qjg0MTZCQy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0pZSjloQVZyaEVUTUtuaENkWkExTlV1 RUZydy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS82OWJiZmRjZi0z NWNkLTQ1MjQtOGZmYS0zMDA1YjBiNjlhMjkvMC8yNTgyN0Q4NDA1NkI4NDQ0Q0My QTc4NDI3NTkwMzUzNTRCODQxNkJDLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUM9UK/kNbGNWSCpYom4y XnIRKwZT2mdZohdBQ8TW1suBn1cq3XATGICQtshyfYv9pCdDu1s8BVFkQ6P2ykSd Cct0gBowvmJ1jHVBmP9KUdn1Q3ChfmtegBGdSMz42+WiAFsdwfxzg4Pb4hIf5SlO nKHprMCb1R8gbQb2k35sE1P7Hkmgt9fkrphPI8o2TPkTC5SvloO3D4RoEwQ2v4BR OhDWao5ouU4F9uwGXT00p+k3x/kY3klbRM5JHJBURoxQS9bI/MSTVPt4vZG7W8N0 ylhvxIDs4aS1E8HP41Vi0Ev84rOdrrNSL7F9H5oIsVVQlNLtEJ5yXtKY3rIP/qH2 xw== -----END CERTIFICATE-----Generated at Fri Aug 21 21:18:35 2026 by rpki-client