$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/69bbfdcf-35cd-4524-8ffa-3005b0b69a29/0/25827D84056B8444CC2A7842759035354B8416BC.mft File: 25827D84056B8444CC2A7842759035354B8416BC.mft (raw, json) Hash identifier: t79Cn+r3q4QrFdO9nXTpIuQG9ciW3G7ZMBKD8Bz3D+E= Subject key identifier: 42:42:3C:B5:87:3E:FE:DF:03:E3:D9:F5:21:51:CE:CF:5D:56:FC:7D Authority key identifier: 25:82:7D:84:05:6B:84:44:CC:2A:78:42:75:90:35:35:4B:84:16:BC Certificate issuer: /CN=25827d84056b8444cc2a7842759035354b8416bc Certificate serial: 7D2BA058C70112739F4A5693595F4222AD61FBC4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JYJ9hAVrhETMKnhCdZA1NUuEFrw.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/69bbfdcf-35cd-4524-8ffa-3005b0b69a29/0/25827D84056B8444CC2A7842759035354B8416BC.mft Manifest number: 03EC Signing time: Sun 28 Jun 2026 19:03:18 +0000 Manifest this update: Sun 28 Jun 2026 18:58:18 +0000 Manifest next update: Mon 29 Jun 2026 21:34:18 +0000 Files and hashes: 1: 326131343a313463313a3230303a3a2f34302d3438203d3e203138363037.roa (hash: eBGi76bk+i5KfnHGqq9jtzpn0gh813x0+GlA90AUkZI=) 2: 25827D84056B8444CC2A7842759035354B8416BC.crl (hash: chbIV1vE2kWr92x425z8pYMTOLQqUpp0aoDTlztx/nk=) 3: 58E92F2C3859C2D0EF322A871688CB22928E2F3E.cer (hash: gYiT3SS0bbmQQSp3p/LPeJzfbx3ujd90DskZO9GZ0PQ=) 4: AS207487.asa (hash: s3p6b4UEGWgtzDLFmXDHf89hF7XtnQxEviO1lAFHwO4=) 5: 326131343a313463303a3a2f34382d3438203d3e20323037343837.roa (hash: AULHfw30fC5JPuaDQ09QijzFEojRfFb5/T1vtTj7hIM=) 6: 326131343a313463303a313a3a2f34382d3438203d3e20323037343837.roa (hash: NlN3fbd4xPs8oXDjI1+pTaPhc7vLifacDO0nMI7gkYc=) 7: AS18607.asa (hash: ol8lct09PZ1pqBOGDq6LTNV0i5NYMmiHGhSWuOi+FwQ=) 8: 3138352e3133342e3139312e302f32342d3234203d3e20323037343837.roa (hash: wMCy3m1h75GfC2ATV5bYCJD7S6jjiI8Si5ikYie+OUI=) 9: 326131343a313463303a323a3a2f34382d3438203d3e20323037343837.roa (hash: dHA6HLPOR3IQCPs+KBxka5EoTXTVzS3+Rk/fPIxN15o=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/69bbfdcf-35cd-4524-8ffa-3005b0b69a29/0/25827D84056B8444CC2A7842759035354B8416BC.crl rsync://rsync.paas.rpki.ripe.net/repository/69bbfdcf-35cd-4524-8ffa-3005b0b69a29/0/25827D84056B8444CC2A7842759035354B8416BC.mft rsync://rpki.ripe.net/repository/DEFAULT/JYJ9hAVrhETMKnhCdZA1NUuEFrw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 29 Jun 2026 21:34:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:2b:a0:58:c7:01:12:73:9f:4a:56:93:59:5f:42:22:ad:61:fb:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=25827d84056b8444cc2a7842759035354b8416bc Validity Not Before: Jun 28 18:58:18 2026 GMT Not After : Jun 29 21:34:18 2026 GMT Subject: CN=42423CB5873EFEDF03E3D9F52151CECF5D56FC7D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:3d:67:9d:4e:39:ad:11:40:80:3f:3f:fe:8d: d2:4f:07:bf:88:1e:4a:e4:be:61:9f:a2:c4:0a:2a: f3:1d:91:5a:ff:93:a2:0f:c8:4a:0b:b6:01:85:14: 81:83:9d:d0:1b:53:11:fe:16:8f:37:bb:ce:3d:95: f9:ad:65:28:d9:8b:03:61:c4:be:8f:1c:37:ec:98: 19:cd:c2:22:bf:0b:b4:7d:44:78:c5:2e:ae:62:77: 8f:f9:83:cc:10:85:e8:15:06:da:54:da:37:4f:d2: 19:7f:40:b7:b1:e9:e8:61:2a:8d:da:18:0c:e3:41: f3:35:09:77:e6:fe:5a:4c:c7:52:f8:1b:8b:ac:90: 04:d0:cf:cf:8f:f0:01:be:b7:34:e8:27:7b:d2:98: 7d:e1:07:06:68:f8:d4:4f:c8:21:70:4e:da:85:82: 88:c7:4a:62:6f:64:85:e6:eb:d1:e5:a4:9d:a1:a7: ff:48:c1:af:46:84:49:47:70:f1:b7:75:87:76:73: 9e:5c:86:28:04:51:0e:bf:cc:05:c9:1f:08:c7:b1: a0:04:b5:a4:1a:8f:31:ac:96:c3:c8:94:21:05:8e: 52:45:10:16:2c:32:50:b3:1a:2a:93:36:de:99:59: 45:fc:b0:69:af:f4:d0:fb:ff:65:17:1b:16:3c:36: 52:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:42:3C:B5:87:3E:FE:DF:03:E3:D9:F5:21:51:CE:CF:5D:56:FC:7D X509v3 Authority Key Identifier: keyid:25:82:7D:84:05:6B:84:44:CC:2A:78:42:75:90:35:35:4B:84:16:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/69bbfdcf-35cd-4524-8ffa-3005b0b69a29/0/25827D84056B8444CC2A7842759035354B8416BC.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JYJ9hAVrhETMKnhCdZA1NUuEFrw.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/69bbfdcf-35cd-4524-8ffa-3005b0b69a29/0/25827D84056B8444CC2A7842759035354B8416BC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:cc:7e:a5:90:a4:0c:01:35:8f:9c:7b:1a:94:c9:a3:ea:cb: 6f:75:12:39:2e:34:b4:a5:a4:ec:c5:c2:2b:e9:ef:68:19:59: 60:58:e3:66:1f:ea:e4:cc:a0:e6:d1:cb:74:85:be:1e:fe:6f: d8:76:78:51:74:23:6d:2d:03:8f:5b:b2:a8:96:45:8e:04:5e: 17:bf:f1:ea:e5:c1:67:1d:df:b0:a3:97:d0:0b:36:f7:e6:36: be:a7:95:5f:03:e6:b2:52:7b:81:2e:dc:ea:57:ef:d7:8a:41: 7f:a7:5e:1b:8f:53:85:64:2e:b8:7f:db:de:70:da:a7:de:7b: 38:81:80:3c:6c:51:c6:ad:f9:18:98:77:23:75:3b:60:4a:39: 08:ea:c0:ed:02:f5:fb:37:af:89:4b:94:0a:ca:96:0c:6b:bb: f1:2e:9c:e0:88:38:eb:71:9b:3c:dd:77:22:6f:ac:3c:70:c3: d4:df:51:2a:a7:47:d9:71:16:59:09:2c:9b:f6:6b:35:e0:22: 7d:73:29:7a:63:03:4d:8d:2c:57:38:ec:e1:9c:92:b1:17:27: 9a:c9:7c:7e:f2:fe:55:e6:34:d4:f5:42:3f:74:81:aa:a0:17: 3f:c7:a7:8f:a7:fc:b2:95:c9:b8:5b:23:34:a9:d0:f6:fc:53: db:f2:d4:9f -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUfSugWMcBEnOfSlaTWV9CIq1h+8QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjU4MjdkODQwNTZiODQ0NGNjMmE3ODQyNzU5MDM1MzU0 Yjg0MTZiYzAeFw0yNjA2MjgxODU4MThaFw0yNjA2MjkyMTM0MThaMDMxMTAvBgNV BAMTKDQyNDIzQ0I1ODczRUZFREYwM0UzRDlGNTIxNTFDRUNGNUQ1NkZDN0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCOPWedTjmtEUCAPz/+jdJPB7+I HkrkvmGfosQKKvMdkVr/k6IPyEoLtgGFFIGDndAbUxH+Fo83u849lfmtZSjZiwNh xL6PHDfsmBnNwiK/C7R9RHjFLq5id4/5g8wQhegVBtpU2jdP0hl/QLex6ehhKo3a GAzjQfM1CXfm/lpMx1L4G4uskATQz8+P8AG+tzToJ3vSmH3hBwZo+NRPyCFwTtqF gojHSmJvZIXm69HlpJ2hp/9Iwa9GhElHcPG3dYd2c55chigEUQ6/zAXJHwjHsaAE taQajzGslsPIlCEFjlJFEBYsMlCzGiqTNt6ZWUX8sGmv9ND7/2UXGxY8NlIhAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUQkI8tYc+/t8D49n1IVHOz11W/H0wHwYDVR0j BBgwFoAUJYJ9hAVrhETMKnhCdZA1NUuEFrwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNjliYmZkY2YtMzVjZC00NTI0LThmZmEtMzAwNWIwYjY5 YTI5LzAvMjU4MjdEODQwNTZCODQ0NENDMkE3ODQyNzU5MDM1MzU0Qjg0MTZCQy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0pZSjloQVZyaEVUTUtuaENkWkExTlV1 RUZydy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS82OWJiZmRjZi0z NWNkLTQ1MjQtOGZmYS0zMDA1YjBiNjlhMjkvMC8yNTgyN0Q4NDA1NkI4NDQ0Q0My QTc4NDI3NTkwMzUzNTRCODQxNkJDLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUcx+pZCkDAE1j5x7GpTJ o+rLb3USOS40tKWk7MXCK+nvaBlZYFjjZh/q5Myg5tHLdIW+Hv5v2HZ4UXQjbS0D j1uyqJZFjgReF7/x6uXBZx3fsKOX0As29+Y2vqeVXwPmslJ7gS7c6lfv14pBf6de G49ThWQuuH/b3nDap957OIGAPGxRxq35GJh3I3U7YEo5COrA7QL1+zeviUuUCsqW DGu78S6c4Ig463GbPN13Im+sPHDD1N9RKqdH2XEWWQksm/ZrNeAifXMpemMDTY0s Vzjs4ZySsRcnmsl8fvL+VeY01PVCP3SBqqAXP8enj6f8spXJuFsjNKnQ9vxT2/LU nw== -----END CERTIFICATE-----Generated at Mon Jun 29 10:41:49 2026 by rpki-client