$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/69bbfdcf-35cd-4524-8ffa-3005b0b69a29/0/25827D84056B8444CC2A7842759035354B8416BC.mft File: 25827D84056B8444CC2A7842759035354B8416BC.mft (raw, json) Hash identifier: yCAwSJbJ4BSTbLyTFkdPHviOEPVioPy/uqR4xkogJSk= Subject key identifier: FC:93:EC:59:32:4F:00:57:EC:50:3C:AA:01:A0:54:60:92:8D:1F:A3 Authority key identifier: 25:82:7D:84:05:6B:84:44:CC:2A:78:42:75:90:35:35:4B:84:16:BC Certificate issuer: /CN=25827d84056b8444cc2a7842759035354b8416bc Certificate serial: 2DD6671CB62B9B7750B8DAF878EE796FC29691BD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JYJ9hAVrhETMKnhCdZA1NUuEFrw.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/69bbfdcf-35cd-4524-8ffa-3005b0b69a29/0/25827D84056B8444CC2A7842759035354B8416BC.mft Manifest number: 02B6 Signing time: Sat 08 Nov 2025 23:52:27 +0000 Manifest this update: Sat 08 Nov 2025 23:47:27 +0000 Manifest next update: Mon 10 Nov 2025 02:29:27 +0000 Files and hashes: 1: 326131343a313463303a3a2f34382d3438203d3e20323037343837.roa (hash: MAksePoJ+rnc08XyHZPcbQHx/BhF1iv7lCiKD0GFWxw=) 2: 25827D84056B8444CC2A7842759035354B8416BC.crl (hash: u/LaZYvC50j+SE4Z9RXfyrwCqcvsXWLsqDm0NvP4+aQ=) 3: 326131343a313463303a313a3a2f34382d3438203d3e20323037343837.roa (hash: nCuZ5ADJB2e8lGpTQQDYT3/JtyMvU82Myd2okt8I23s=) 4: 326131343a313463313a3230303a3a2f34302d3438203d3e203138363037.roa (hash: Pf0WXVKsadiaiJtusSEXuFj/o/oP56mVyLEI27IiyE8=) 5: 3138352e3133342e3139312e302f32342d3234203d3e20323037343837.roa (hash: wMCy3m1h75GfC2ATV5bYCJD7S6jjiI8Si5ikYie+OUI=) 6: AS18607.asa (hash: UmRU72jnrIjcrDo/h9XDTnV/XRM8dz+BcjyGexjXWqI=) 7: 326131343a313463303a323a3a2f34382d3438203d3e20323037343837.roa (hash: lVUTv9ePxFs76NYMpRch/wm8DFit0p7cLkwe+1lgWxI=) 8: AS207487.asa (hash: Ha+forEe+xS82UGSV4B7j+UWBj+/I05XFS+Ojajx3y4=) 9: 58E92F2C3859C2D0EF322A871688CB22928E2F3E.cer (hash: gYiT3SS0bbmQQSp3p/LPeJzfbx3ujd90DskZO9GZ0PQ=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/69bbfdcf-35cd-4524-8ffa-3005b0b69a29/0/25827D84056B8444CC2A7842759035354B8416BC.crl rsync://rsync.paas.rpki.ripe.net/repository/69bbfdcf-35cd-4524-8ffa-3005b0b69a29/0/25827D84056B8444CC2A7842759035354B8416BC.mft rsync://rpki.ripe.net/repository/DEFAULT/JYJ9hAVrhETMKnhCdZA1NUuEFrw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 10 Nov 2025 02:29:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:d6:67:1c:b6:2b:9b:77:50:b8:da:f8:78:ee:79:6f:c2:96:91:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=25827d84056b8444cc2a7842759035354b8416bc Validity Not Before: Nov 8 23:47:27 2025 GMT Not After : Nov 10 02:29:27 2025 GMT Subject: CN=FC93EC59324F0057EC503CAA01A05460928D1FA3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:a0:a9:b1:06:01:14:eb:28:57:74:a7:65:b7: fa:04:61:07:9a:df:a7:9a:54:c6:bf:e1:80:5e:fd: 11:08:0c:99:23:a3:03:3f:ea:34:cd:e9:7b:10:ca: 23:de:15:f3:e5:c5:ba:ab:ab:3c:5d:96:0a:b3:e9: ab:65:fb:5f:71:15:d4:9a:f7:0b:61:24:0c:95:36: 7f:29:3c:d3:ec:c7:d1:fe:d5:39:eb:da:0b:a1:5b: c7:32:b8:8d:ea:48:1b:75:9e:2a:60:b5:b7:35:6d: b8:9f:91:d4:3b:49:71:92:a4:c3:68:49:42:3b:60: 4e:0a:50:52:c2:3d:02:5e:86:57:0a:1e:9f:74:fb: 98:03:5f:58:b4:b4:46:e5:9c:83:07:de:43:51:09: fb:6f:01:26:f2:c0:1c:ef:60:1a:fd:f9:45:35:bf: 3b:03:33:30:a4:34:dc:74:3b:1a:5f:ef:f4:40:33: e8:ec:b9:8a:a7:f4:4c:77:1c:64:d1:47:a2:48:90: 6d:db:02:ba:42:c7:da:85:e2:cd:a2:c0:33:d8:66: 53:03:12:d3:2d:43:d1:c4:97:ac:36:84:6a:ed:1c: e1:d1:b9:40:1c:9e:79:7b:17:3d:00:7f:d1:5e:98: 13:11:76:92:2b:59:06:cc:31:aa:b1:b5:76:9a:89: b4:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:93:EC:59:32:4F:00:57:EC:50:3C:AA:01:A0:54:60:92:8D:1F:A3 X509v3 Authority Key Identifier: keyid:25:82:7D:84:05:6B:84:44:CC:2A:78:42:75:90:35:35:4B:84:16:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/69bbfdcf-35cd-4524-8ffa-3005b0b69a29/0/25827D84056B8444CC2A7842759035354B8416BC.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JYJ9hAVrhETMKnhCdZA1NUuEFrw.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/69bbfdcf-35cd-4524-8ffa-3005b0b69a29/0/25827D84056B8444CC2A7842759035354B8416BC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:48:ac:06:fb:2f:a5:27:94:b9:97:71:aa:cd:7c:18:f9:0a: e3:38:35:1a:b5:4d:85:16:94:61:a0:0b:8e:e6:1d:44:ed:2f: 30:90:b5:e0:84:1b:86:c9:03:bb:b8:ea:8d:15:52:0f:fe:0e: 20:8a:1b:77:4c:ce:06:41:d6:a8:5d:cb:2a:55:14:fd:91:cd: f9:0f:0d:80:af:18:3f:73:53:5a:36:0f:5c:34:92:ca:06:80: 0d:2d:93:71:22:0c:58:79:2d:2d:10:34:4c:a4:77:b9:75:b3: 40:3a:d8:1a:75:0c:f3:00:75:08:0d:05:6b:37:ec:13:e4:ea: a9:c0:ef:e4:74:63:6c:0f:f6:24:c5:09:01:11:1f:87:96:58: 65:50:27:4c:99:90:1e:37:f0:39:48:2c:b8:74:a9:d7:4a:32: 37:f4:df:d9:e7:ab:19:e6:78:c2:80:d9:1a:7d:18:7b:c7:a8: a5:44:66:0d:01:1d:07:e6:59:3b:0b:11:05:14:ba:33:4a:a0: df:bb:65:63:0c:6f:67:af:df:2e:27:4b:bf:01:95:b4:0f:6c: 40:ba:67:a5:01:9e:08:07:19:de:7a:06:c7:7c:d4:1d:56:7a: ed:c2:0d:53:dd:6a:13:7a:5a:f6:26:10:5a:b1:9a:98:b6:22: c7:22:d9:2b -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIULdZnHLYrm3dQuNr4eO55b8KWkb0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjU4MjdkODQwNTZiODQ0NGNjMmE3ODQyNzU5MDM1MzU0 Yjg0MTZiYzAeFw0yNTExMDgyMzQ3MjdaFw0yNTExMTAwMjI5MjdaMDMxMTAvBgNV BAMTKEZDOTNFQzU5MzI0RjAwNTdFQzUwM0NBQTAxQTA1NDYwOTI4RDFGQTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8oKmxBgEU6yhXdKdlt/oEYQea 36eaVMa/4YBe/REIDJkjowM/6jTN6XsQyiPeFfPlxbqrqzxdlgqz6atl+19xFdSa 9wthJAyVNn8pPNPsx9H+1Tnr2guhW8cyuI3qSBt1nipgtbc1bbifkdQ7SXGSpMNo SUI7YE4KUFLCPQJehlcKHp90+5gDX1i0tEblnIMH3kNRCftvASbywBzvYBr9+UU1 vzsDMzCkNNx0Oxpf7/RAM+jsuYqn9Ex3HGTRR6JIkG3bArpCx9qF4s2iwDPYZlMD EtMtQ9HEl6w2hGrtHOHRuUAcnnl7Fz0Af9FemBMRdpIrWQbMMaqxtXaaibSnAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQU/JPsWTJPAFfsUDyqAaBUYJKNH6MwHwYDVR0j BBgwFoAUJYJ9hAVrhETMKnhCdZA1NUuEFrwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNjliYmZkY2YtMzVjZC00NTI0LThmZmEtMzAwNWIwYjY5 YTI5LzAvMjU4MjdEODQwNTZCODQ0NENDMkE3ODQyNzU5MDM1MzU0Qjg0MTZCQy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0pZSjloQVZyaEVUTUtuaENkWkExTlV1 RUZydy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS82OWJiZmRjZi0z NWNkLTQ1MjQtOGZmYS0zMDA1YjBiNjlhMjkvMC8yNTgyN0Q4NDA1NkI4NDQ0Q0My QTc4NDI3NTkwMzUzNTRCODQxNkJDLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHkisBvsvpSeUuZdxqs18 GPkK4zg1GrVNhRaUYaALjuYdRO0vMJC14IQbhskDu7jqjRVSD/4OIIobd0zOBkHW qF3LKlUU/ZHN+Q8NgK8YP3NTWjYPXDSSygaADS2TcSIMWHktLRA0TKR3uXWzQDrY GnUM8wB1CA0FazfsE+TqqcDv5HRjbA/2JMUJAREfh5ZYZVAnTJmQHjfwOUgsuHSp 10oyN/Tf2eerGeZ4woDZGn0Ye8eopURmDQEdB+ZZOwsRBRS6M0qg37tlYwxvZ6/f LidLvwGVtA9sQLpnpQGeCAcZ3noGx3zUHVZ67cINU91qE3pa9iYQWrGamLYixyLZ Kw== -----END CERTIFICATE-----Generated at Sun Nov 9 09:10:14 2025 by rpki-client