$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8070615f-d26d-42e3-a145-5c7b67b2b64e/0/2C12F0A080F021F2BA25BC0C6EA7E06B67AAD05E.mft File: 2C12F0A080F021F2BA25BC0C6EA7E06B67AAD05E.mft (raw, json) Hash identifier: LePyt5nL3B/fZtNoAd7+CdvevVaMQMy8Y1avTR90sLw= Subject key identifier: 43:8D:E9:F3:3C:A2:7F:24:6C:9C:E0:0A:FD:9F:17:D7:62:B8:C6:C7 Authority key identifier: 2C:12:F0:A0:80:F0:21:F2:BA:25:BC:0C:6E:A7:E0:6B:67:AA:D0:5E Certificate issuer: /CN=2c12f0a080f021f2ba25bc0c6ea7e06b67aad05e Certificate serial: 78B04C0521385F8774DBDBE96B660C8F00B6C6E6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LBLwoIDwIfK6JbwMbqfga2eq0F4.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8070615f-d26d-42e3-a145-5c7b67b2b64e/0/2C12F0A080F021F2BA25BC0C6EA7E06B67AAD05E.mft Manifest number: 010C Signing time: Fri 22 Aug 2025 21:19:33 +0000 Manifest this update: Fri 22 Aug 2025 21:14:32 +0000 Manifest next update: Sun 24 Aug 2025 00:20:32 +0000 Files and hashes: 1: 323030313a3637383a6434343a3a2f34382d3438203d3e20323133323739.roa (hash: a2d6hAclWrhx6h6+ACHw0iSYteM3AlSblaeDKRH8jzc=) 2: 326131343a623430303a3a2f32392d3438203d3e2030.roa (hash: NhcbptlixcA3mbsPTqMiibAOrNSU1BYwO66fMNiKSfA=) 3: 326131343a623430303a3a2f33322d3332203d3e20323133323739.roa (hash: 5hhgwEfLD9bumu2w7kC2KzlKzBKITTTKNPZHvvEg0u8=) 4: 2C12F0A080F021F2BA25BC0C6EA7E06B67AAD05E.crl (hash: EUB9ELU4uyD6a5Oqkiu3X6yoIGzc4Ye4BkeQCvAR+c8=) 5: AS213279.asa (hash: nJRzaMfqdZ5AI+sMn9wPdQBE/Wcrkghpk4PHewl3Wz8=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8070615f-d26d-42e3-a145-5c7b67b2b64e/0/2C12F0A080F021F2BA25BC0C6EA7E06B67AAD05E.crl rsync://rsync.paas.rpki.ripe.net/repository/8070615f-d26d-42e3-a145-5c7b67b2b64e/0/2C12F0A080F021F2BA25BC0C6EA7E06B67AAD05E.mft rsync://rpki.ripe.net/repository/DEFAULT/LBLwoIDwIfK6JbwMbqfga2eq0F4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 24 Aug 2025 00:20:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:b0:4c:05:21:38:5f:87:74:db:db:e9:6b:66:0c:8f:00:b6:c6:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2c12f0a080f021f2ba25bc0c6ea7e06b67aad05e Validity Not Before: Aug 22 21:14:32 2025 GMT Not After : Aug 24 00:20:32 2025 GMT Subject: CN=438DE9F33CA27F246C9CE00AFD9F17D762B8C6C7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:43:86:65:7c:9d:20:a3:80:6e:52:92:02:00: 59:2f:29:f3:ea:da:1f:24:85:de:4c:cc:59:68:56: 90:e5:ec:85:4d:f0:09:20:8e:01:c0:c7:5a:05:94: 0b:51:a2:d6:9a:c1:53:c3:24:49:a8:43:96:c2:03: bc:2c:cd:e0:d5:cc:6a:8e:91:13:1e:2f:09:37:bd: 40:46:75:61:3e:73:4a:0f:b8:ff:da:7e:73:a8:e5: b3:03:ee:34:42:ad:a9:d4:9c:ae:5f:33:44:72:da: 7e:f9:1f:de:6f:cb:8f:75:bb:21:0c:5b:85:ab:88: 3a:c8:30:07:f8:64:1b:32:9c:b2:f5:42:69:0c:7e: 62:b0:ef:f3:0e:9c:3b:b0:62:45:29:84:54:fc:89: 22:40:ff:31:f7:5f:fd:3b:cc:d5:10:b6:0b:fe:10: 0f:75:cc:f7:72:75:20:7f:bd:bc:5b:70:5e:1b:ca: c3:00:06:5b:ee:a2:bb:c6:58:33:22:01:22:7c:5c: 00:da:22:81:86:e3:be:47:43:57:af:c5:e6:b3:6b: 55:7f:a6:56:0e:1e:c8:44:c9:24:ac:8d:50:6d:33: 57:ad:75:35:4f:b6:2f:8f:43:9a:d0:43:06:8c:b7: 85:d8:01:2e:7d:2f:21:a4:ff:62:cb:ba:fe:2c:78: b8:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:8D:E9:F3:3C:A2:7F:24:6C:9C:E0:0A:FD:9F:17:D7:62:B8:C6:C7 X509v3 Authority Key Identifier: keyid:2C:12:F0:A0:80:F0:21:F2:BA:25:BC:0C:6E:A7:E0:6B:67:AA:D0:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/8070615f-d26d-42e3-a145-5c7b67b2b64e/0/2C12F0A080F021F2BA25BC0C6EA7E06B67AAD05E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LBLwoIDwIfK6JbwMbqfga2eq0F4.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8070615f-d26d-42e3-a145-5c7b67b2b64e/0/2C12F0A080F021F2BA25BC0C6EA7E06B67AAD05E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:30:41:c5:89:91:4b:9f:74:00:f6:00:76:c7:e5:91:80:2d: b8:2c:4d:ca:b7:50:05:b4:2c:ea:4c:9f:d2:86:c3:95:85:5a: f8:ab:de:96:f6:d6:0f:2b:6a:25:84:cf:35:07:9f:83:bf:54: 52:dd:0c:e7:0b:a7:52:d5:65:25:77:67:89:5a:c5:e0:7a:46: f7:ad:88:e1:94:2a:2e:14:1e:a4:10:74:91:29:14:15:16:1e: d9:de:ae:e3:92:65:c0:ff:40:dc:1f:da:1f:08:47:99:52:c9: 15:dd:6f:c1:bf:67:1e:90:b0:3b:0d:19:a1:80:d3:14:73:23: 7c:48:eb:41:21:88:82:15:23:5b:3f:ae:18:7c:0f:86:21:f3: e2:f6:aa:da:9a:f7:d4:78:6a:c2:f0:a2:c1:ed:01:98:4d:15: c5:33:82:d4:45:cd:dc:c0:26:8a:d0:70:f6:27:14:52:be:55: 12:5d:a0:55:70:83:48:a9:36:59:92:be:45:68:e7:8d:4e:d3: 1e:24:b9:fc:7e:0a:db:a0:4e:7b:56:5c:59:f6:8f:1c:99:39: 36:10:d5:be:99:50:c2:eb:0d:82:ad:78:f9:97:01:58:e5:d0: 8d:0e:b9:07:d5:6e:09:05:99:10:2e:e7:82:00:82:05:0f:21: 2b:5e:e9:ed -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUeLBMBSE4X4d029vpa2YMjwC2xuYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMmMxMmYwYTA4MGYwMjFmMmJhMjViYzBjNmVhN2UwNmI2 N2FhZDA1ZTAeFw0yNTA4MjIyMTE0MzJaFw0yNTA4MjQwMDIwMzJaMDMxMTAvBgNV BAMTKDQzOERFOUYzM0NBMjdGMjQ2QzlDRTAwQUZEOUYxN0Q3NjJCOEM2QzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCaQ4ZlfJ0go4BuUpICAFkvKfPq 2h8khd5MzFloVpDl7IVN8AkgjgHAx1oFlAtRotaawVPDJEmoQ5bCA7wszeDVzGqO kRMeLwk3vUBGdWE+c0oPuP/afnOo5bMD7jRCranUnK5fM0Ry2n75H95vy491uyEM W4WriDrIMAf4ZBsynLL1QmkMfmKw7/MOnDuwYkUphFT8iSJA/zH3X/07zNUQtgv+ EA91zPdydSB/vbxbcF4bysMABlvuorvGWDMiASJ8XADaIoGG475HQ1evxeaza1V/ plYOHshEySSsjVBtM1etdTVPti+PQ5rQQwaMt4XYAS59LyGk/2LLuv4seLhLAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUQ43p8zyifyRsnOAK/Z8X12K4xscwHwYDVR0j BBgwFoAULBLwoIDwIfK6JbwMbqfga2eq0F4wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvODA3MDYxNWYtZDI2ZC00MmUzLWExNDUtNWM3YjY3YjJi NjRlLzAvMkMxMkYwQTA4MEYwMjFGMkJBMjVCQzBDNkVBN0UwNkI2N0FBRDA1RS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0xCTHdvSUR3SWZLNkpid01icWZnYTJl cTBGNC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84MDcwNjE1Zi1k MjZkLTQyZTMtYTE0NS01YzdiNjdiMmI2NGUvMC8yQzEyRjBBMDgwRjAyMUYyQkEy NUJDMEM2RUE3RTA2QjY3QUFEMDVFLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJjBBxYmRS590APYAdsfl kYAtuCxNyrdQBbQs6kyf0obDlYVa+KvelvbWDytqJYTPNQefg79UUt0M5wunUtVl JXdniVrF4HpG962I4ZQqLhQepBB0kSkUFRYe2d6u45JlwP9A3B/aHwhHmVLJFd1v wb9nHpCwOw0ZoYDTFHMjfEjrQSGIghUjWz+uGHwPhiHz4vaq2pr31HhqwvCiwe0B mE0VxTOC1EXN3MAmitBw9icUUr5VEl2gVXCDSKk2WZK+RWjnjU7THiS5/H4K26BO e1ZcWfaPHJk5NhDVvplQwusNgq14+ZcBWOXQjQ65B9VuCQWZEC7nggCCBQ8hK17p 7Q== -----END CERTIFICATE-----Generated at Sat Aug 23 15:03:42 2025 by rpki-client