$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8070615f-d26d-42e3-a145-5c7b67b2b64e/0/2C12F0A080F021F2BA25BC0C6EA7E06B67AAD05E.mft File: 2C12F0A080F021F2BA25BC0C6EA7E06B67AAD05E.mft (raw, json) Hash identifier: 9BxZCUjjYtgo+jOAP3oIpqJy/9bFZztsAKNHVT/gU/Q= Subject key identifier: 96:5B:88:6A:C6:09:D5:F5:74:9F:FE:B3:1A:6D:A2:5B:56:43:A3:5D Authority key identifier: 2C:12:F0:A0:80:F0:21:F2:BA:25:BC:0C:6E:A7:E0:6B:67:AA:D0:5E Certificate issuer: /CN=2c12f0a080f021f2ba25bc0c6ea7e06b67aad05e Certificate serial: 02170965E569CB8F7121471E0D4222F94457626D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LBLwoIDwIfK6JbwMbqfga2eq0F4.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8070615f-d26d-42e3-a145-5c7b67b2b64e/0/2C12F0A080F021F2BA25BC0C6EA7E06B67AAD05E.mft Manifest number: 82 Signing time: Fri 09 May 2025 12:22:02 +0000 Manifest this update: Fri 09 May 2025 12:17:02 +0000 Manifest next update: Sat 10 May 2025 12:24:02 +0000 Files and hashes: 1: 323030313a3637383a6434343a3a2f34382d3438203d3e20323133323739.roa (hash: a2d6hAclWrhx6h6+ACHw0iSYteM3AlSblaeDKRH8jzc=) 2: 326131343a623430303a3a2f33322d3332203d3e20323133323739.roa (hash: 5hhgwEfLD9bumu2w7kC2KzlKzBKITTTKNPZHvvEg0u8=) 3: 2C12F0A080F021F2BA25BC0C6EA7E06B67AAD05E.crl (hash: TqW32oSaMkHVrJXiRTt0RSUKYVNozoNiNvFE8X7IZaA=) 4: AS213279.asa (hash: nJRzaMfqdZ5AI+sMn9wPdQBE/Wcrkghpk4PHewl3Wz8=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8070615f-d26d-42e3-a145-5c7b67b2b64e/0/2C12F0A080F021F2BA25BC0C6EA7E06B67AAD05E.crl rsync://rsync.paas.rpki.ripe.net/repository/8070615f-d26d-42e3-a145-5c7b67b2b64e/0/2C12F0A080F021F2BA25BC0C6EA7E06B67AAD05E.mft rsync://rpki.ripe.net/repository/DEFAULT/LBLwoIDwIfK6JbwMbqfga2eq0F4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 May 2025 12:24:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:17:09:65:e5:69:cb:8f:71:21:47:1e:0d:42:22:f9:44:57:62:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2c12f0a080f021f2ba25bc0c6ea7e06b67aad05e Validity Not Before: May 9 12:17:02 2025 GMT Not After : May 10 12:24:02 2025 GMT Subject: CN=965B886AC609D5F5749FFEB31A6DA25B5643A35D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:15:ea:fe:96:ef:b9:c4:30:aa:48:4a:9e:5f: 05:0f:c4:74:f3:8f:99:c8:eb:86:96:fe:d0:ba:2e: 99:c1:df:a0:4a:c2:f6:35:e2:06:1c:62:30:29:bf: 84:ba:b1:59:4f:d4:bc:00:79:47:bc:e4:6b:f0:38: e2:21:d3:ba:0f:fc:98:5c:85:45:d4:2e:a1:2a:01: 83:68:30:9a:2c:a7:ab:45:f8:62:c4:92:22:f0:35: cc:26:88:1d:e0:ba:05:e4:38:44:6b:91:8e:9c:8b: e4:01:78:76:df:58:30:db:2b:8a:df:bb:60:25:90: 04:ef:38:cc:cd:a6:40:bb:81:12:29:c1:a6:5f:01: 68:47:8f:b4:01:b4:96:fe:ee:2c:ca:f5:58:bc:1d: 6d:29:b1:a2:61:46:67:f9:5d:fc:3a:f9:0f:ac:1d: 4a:ef:43:4f:81:38:f2:e2:92:23:d2:5b:85:43:3b: 25:90:0c:47:70:c7:60:16:57:24:78:65:b3:e4:46: 31:e6:9e:8b:0e:4a:b4:f1:c8:c2:53:71:aa:63:bd: 17:bc:de:9f:33:f0:a6:52:cb:69:c9:98:af:55:82: ab:5c:2f:3a:e8:b7:ae:59:e3:1e:b0:b7:22:53:c9: 6c:67:fd:0c:c8:b1:1f:ba:42:87:41:96:ba:c5:d2: fc:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:5B:88:6A:C6:09:D5:F5:74:9F:FE:B3:1A:6D:A2:5B:56:43:A3:5D X509v3 Authority Key Identifier: keyid:2C:12:F0:A0:80:F0:21:F2:BA:25:BC:0C:6E:A7:E0:6B:67:AA:D0:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/8070615f-d26d-42e3-a145-5c7b67b2b64e/0/2C12F0A080F021F2BA25BC0C6EA7E06B67AAD05E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LBLwoIDwIfK6JbwMbqfga2eq0F4.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8070615f-d26d-42e3-a145-5c7b67b2b64e/0/2C12F0A080F021F2BA25BC0C6EA7E06B67AAD05E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:5c:11:10:e2:20:4c:e4:2f:cb:fb:bb:b1:56:df:30:bf:6f: 68:1e:00:a7:3c:72:0e:f3:0a:35:9d:71:6e:23:6a:f5:6a:78: dd:ee:a0:e0:fc:8b:26:47:a5:01:fd:c7:48:b9:5b:20:80:61: 4c:1c:26:02:a6:27:a8:f1:ff:5f:89:54:96:fc:cc:35:0f:40: 2c:fe:47:24:10:e9:1f:f7:d1:46:5d:b8:7e:0e:6e:b6:b7:b8: 10:64:a3:dc:39:9a:79:03:ad:94:46:f0:4b:b3:f6:a5:bb:46: a2:cc:5a:12:87:6b:14:82:9d:e9:58:20:6f:5f:17:54:cd:8d: 13:16:27:64:a7:73:6e:7a:77:a5:18:41:9a:e3:30:d2:a2:38: 55:0a:5a:50:e6:c2:98:ca:d8:98:60:74:c2:13:86:da:ef:ff: 05:59:51:12:5a:21:f3:b9:fe:d1:c6:d8:03:26:14:63:b9:98: 5b:b1:90:0d:94:34:51:13:c8:d2:e7:5e:5f:43:dc:2a:8d:d3: cc:03:48:90:5a:fe:33:e0:e8:8d:38:45:0c:db:63:99:3d:d2: 7e:7f:90:bb:71:70:e3:24:23:9e:4b:6d:27:e6:f7:81:1d:ad: ec:0e:0b:9c:b1:db:b9:8b:9f:98:f6:a8:9c:7f:8d:eb:8b:57: 9d:71:dd:9d -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUAhcJZeVpy49xIUceDUIi+URXYm0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMmMxMmYwYTA4MGYwMjFmMmJhMjViYzBjNmVhN2UwNmI2 N2FhZDA1ZTAeFw0yNTA1MDkxMjE3MDJaFw0yNTA1MTAxMjI0MDJaMDMxMTAvBgNV BAMTKDk2NUI4ODZBQzYwOUQ1RjU3NDlGRkVCMzFBNkRBMjVCNTY0M0EzNUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSFer+lu+5xDCqSEqeXwUPxHTz j5nI64aW/tC6LpnB36BKwvY14gYcYjApv4S6sVlP1LwAeUe85GvwOOIh07oP/Jhc hUXULqEqAYNoMJosp6tF+GLEkiLwNcwmiB3gugXkOERrkY6ci+QBeHbfWDDbK4rf u2AlkATvOMzNpkC7gRIpwaZfAWhHj7QBtJb+7izK9Vi8HW0psaJhRmf5Xfw6+Q+s HUrvQ0+BOPLikiPSW4VDOyWQDEdwx2AWVyR4ZbPkRjHmnosOSrTxyMJTcapjvRe8 3p8z8KZSy2nJmK9VgqtcLzrot65Z4x6wtyJTyWxn/QzIsR+6QodBlrrF0vzJAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUlluIasYJ1fV0n/6zGm2iW1ZDo10wHwYDVR0j BBgwFoAULBLwoIDwIfK6JbwMbqfga2eq0F4wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvODA3MDYxNWYtZDI2ZC00MmUzLWExNDUtNWM3YjY3YjJi NjRlLzAvMkMxMkYwQTA4MEYwMjFGMkJBMjVCQzBDNkVBN0UwNkI2N0FBRDA1RS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0xCTHdvSUR3SWZLNkpid01icWZnYTJl cTBGNC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84MDcwNjE1Zi1k MjZkLTQyZTMtYTE0NS01YzdiNjdiMmI2NGUvMC8yQzEyRjBBMDgwRjAyMUYyQkEy NUJDMEM2RUE3RTA2QjY3QUFEMDVFLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAFwREOIgTOQvy/u7sVbf ML9vaB4ApzxyDvMKNZ1xbiNq9Wp43e6g4PyLJkelAf3HSLlbIIBhTBwmAqYnqPH/ X4lUlvzMNQ9ALP5HJBDpH/fRRl24fg5utre4EGSj3DmaeQOtlEbwS7P2pbtGosxa EodrFIKd6Vggb18XVM2NExYnZKdzbnp3pRhBmuMw0qI4VQpaUObCmMrYmGB0whOG 2u//BVlREloh87n+0cbYAyYUY7mYW7GQDZQ0URPI0udeX0PcKo3TzANIkFr+M+Do jThFDNtjmT3Sfn+Qu3Fw4yQjnkttJ+b3gR2t7A4LnLHbuYufmPaonH+N64tXnXHd nQ== -----END CERTIFICATE-----Generated at Sat May 10 03:35:44 2025 by rpki-client