$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8bfd6882-d6b3-4aa8-bc0a-711d68bd198b/0/8C12B4273832B4156FE0092F6AE7E5B3CE23AD8B.mft File: 8C12B4273832B4156FE0092F6AE7E5B3CE23AD8B.mft (raw, json) Hash identifier: +gGy229sjZHqfxEbQibnnLP506vQYEq9wuxfaL5zA/U= Subject key identifier: C5:AF:37:51:C5:B2:16:56:AD:BD:E4:3C:BB:E6:E6:37:12:9C:BE:00 Authority key identifier: 8C:12:B4:27:38:32:B4:15:6F:E0:09:2F:6A:E7:E5:B3:CE:23:AD:8B Certificate issuer: /CN=8c12b4273832b4156fe0092f6ae7e5b3ce23ad8b Certificate serial: 35CE673033233F9F2A77C7668C838EAB263E27FB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jBK0JzgytBVv4Akvaufls84jrYs.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8bfd6882-d6b3-4aa8-bc0a-711d68bd198b/0/8C12B4273832B4156FE0092F6AE7E5B3CE23AD8B.mft Manifest number: 0232 Signing time: Sat 28 Jun 2025 15:19:10 +0000 Manifest this update: Sat 28 Jun 2025 15:14:10 +0000 Manifest next update: Sun 29 Jun 2025 16:16:10 +0000 Files and hashes: 1: 3138352e3234302e3130342e302f32342d3234203d3e20323130353338.roa (hash: T9Q1VqRTWLWUsHiQ8nGpX/B35ktvbCl8rYqsuD5dV38=) 2: 3138352e3234302e3130372e302f32342d3234203d3e203336353330.roa (hash: +aP4/yrjDfXMUvY2aoslM1y69SiDmKFLNj/CHXaFL2o=) 3: 39312e3139302e3135372e302f32342d3234203d3e20323130383330.roa (hash: uxCs+vRLf89Iqe2Vg3VmQVaqgZcbd6t3ZZRDH3hDvaY=) 4: 3231322e3130332e34342e302f32342d3234203d3e20323131343834.roa (hash: JBx8ym7JHWLmUGZKmy6bIQw3WR5rhPzAi99IbVvWGag=) 5: 8C12B4273832B4156FE0092F6AE7E5B3CE23AD8B.crl (hash: 34OJQcz1tgCwgalFq3w0ea1mOGPL90NswGoYYJDeJg4=) 6: 3231322e3130332e34352e302f32342d3234203d3e2038303735.roa (hash: fHVIMx8xlYqpN0AXQfWLm0vqOUAEGFXc3sBROHoQyYA=) 7: 3139332e32342e3233352e302f32342d3234203d3e203630373831.roa (hash: 3IIPnO8jnB/C9bfC+8H124jFOjjxVU8ltj/gUK5jsA4=) 8: 34352e39352e38302e302f32342d3234203d3e203136323736.roa (hash: 3x0cRO+g1bZbRHut+QAG7pwDzd80m15dxHMNduCBIhg=) 9: 3138352e3234302e3130362e302f32342d3234203d3e20323134343538.roa (hash: A4xSoaJgKGvgYyxTiRaQc7hyiiMELV+dvyPZYNnypk4=) 10: 3231322e3130332e34372e302f32342d3234203d3e203630313137.roa (hash: YdIRouunEJ7v7O6adrWSPqBia6eTO11BexNozDCWbfw=) 11: 3231322e3130332e34342e302f32342d3234203d3e20323133393138.roa (hash: qGJQiTgIvP4Ve1lRuA50bfURyANdu4X5JKcPosVvvQA=) 12: 3139332e32342e3233342e302f32342d3234203d3e20383334.roa (hash: wDn4WvWEnl0ktIwomfuSX0xxTMgnjS6eS37UfP6tuk8=) 13: 3138352e3234302e3130372e302f32342d3234203d3e20323135333034.roa (hash: Kgf8wBPJNXdSfK4BtuP3v6qDzrmpjRHzp1OmZMiqMVk=) 14: 3138352e3234302e3130352e302f32342d3234203d3e20323135323837.roa (hash: +0THkzX29inBKKwe48Y2pKEbomX7avoCZF5U6SDswlY=) 15: 34352e39352e38322e302f32332d3234203d3e20313734.roa (hash: j5uBx1ZwzePSy8f9EGQJPGu8wElQLvhVLCemoigNpZM=) 16: 34352e39352e38312e302f32342d3234203d3e203239383032.roa (hash: RSLVUL+AislPXW7KHmpbzgP/rzQAkGuHFrgP4qIPD94=) 17: 3231322e3130332e34362e302f32342d3234203d3e203531303832.roa (hash: 2F+hMcxUeRbuMZ154QcBZjgDbx0tCTkT+4d5LpArwfo=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8bfd6882-d6b3-4aa8-bc0a-711d68bd198b/0/8C12B4273832B4156FE0092F6AE7E5B3CE23AD8B.crl rsync://rsync.paas.rpki.ripe.net/repository/8bfd6882-d6b3-4aa8-bc0a-711d68bd198b/0/8C12B4273832B4156FE0092F6AE7E5B3CE23AD8B.mft rsync://rpki.ripe.net/repository/DEFAULT/jBK0JzgytBVv4Akvaufls84jrYs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 29 Jun 2025 16:16:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:ce:67:30:33:23:3f:9f:2a:77:c7:66:8c:83:8e:ab:26:3e:27:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8c12b4273832b4156fe0092f6ae7e5b3ce23ad8b Validity Not Before: Jun 28 15:14:10 2025 GMT Not After : Jun 29 16:16:10 2025 GMT Subject: CN=C5AF3751C5B21656ADBDE43CBBE6E637129CBE00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:79:51:66:ef:f0:0e:56:69:e4:01:06:13:1b: ed:ad:94:66:bf:9a:2a:d8:07:7a:37:4d:87:ab:1f: bd:4b:0e:b6:ef:54:f5:75:1f:fc:c7:e6:80:b2:6e: fe:2d:81:d9:f3:f8:96:aa:42:45:13:be:1b:bb:09: 75:8c:22:90:82:34:2e:8a:26:03:30:26:a5:60:52: e4:6f:a2:ee:da:34:31:eb:e0:19:11:9b:39:2f:5a: bd:e8:5c:13:07:6c:7d:58:36:d8:a9:2d:db:29:22: d7:48:b5:28:9d:01:f8:6c:d8:b3:11:24:c7:e9:c4: 95:a1:48:2b:40:73:92:ec:6c:7b:ed:3d:d9:63:c0: d3:bf:e4:c0:15:f9:1f:e1:51:4e:96:23:17:ee:94: e8:7a:86:7c:3a:c6:d0:d6:3e:36:30:67:f9:22:ac: 71:a4:29:8c:93:12:0a:14:31:14:e6:ce:30:c5:9b: 28:7e:1e:e3:34:85:7e:98:e0:f5:cb:14:ae:2d:c6: 0d:92:46:81:db:cb:bc:4f:9d:f5:f2:b1:90:eb:c3: b7:e7:34:89:51:1b:7f:26:d3:52:1d:a8:d1:23:a5: ff:75:a2:87:71:42:2b:f2:54:35:b8:9c:99:9e:f9: 48:3a:24:f0:69:b9:4f:e0:58:09:c0:e2:29:fb:df: 10:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:AF:37:51:C5:B2:16:56:AD:BD:E4:3C:BB:E6:E6:37:12:9C:BE:00 X509v3 Authority Key Identifier: keyid:8C:12:B4:27:38:32:B4:15:6F:E0:09:2F:6A:E7:E5:B3:CE:23:AD:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/8bfd6882-d6b3-4aa8-bc0a-711d68bd198b/0/8C12B4273832B4156FE0092F6AE7E5B3CE23AD8B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jBK0JzgytBVv4Akvaufls84jrYs.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8bfd6882-d6b3-4aa8-bc0a-711d68bd198b/0/8C12B4273832B4156FE0092F6AE7E5B3CE23AD8B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:b9:43:c8:67:af:d4:b1:de:56:ab:04:18:54:1f:52:2e:96: 1c:7d:58:23:0f:c5:dc:d2:c6:d7:d8:23:45:13:ba:be:f4:f6: 4f:e6:d2:b6:6f:ad:64:0c:42:dc:ee:30:df:49:38:9f:62:e3: da:9e:4c:7e:c4:3f:d7:d9:a5:1b:37:13:c6:f7:c7:c5:12:a9: 94:be:05:45:2a:1e:83:3f:19:17:47:d4:93:db:0b:57:bd:be: 6f:ef:56:68:ed:3c:7a:6e:14:88:3a:eb:b2:6b:d5:be:b1:2d: 44:84:e2:26:6b:fb:a4:70:fc:82:f5:20:ac:85:f9:0d:f3:0f: 67:df:db:eb:35:ae:bf:f4:eb:24:01:de:4d:c1:b7:66:4f:02: ae:e9:4d:c5:c2:44:00:7c:68:2b:9d:00:fa:3b:f4:1a:b1:2e: 3e:0b:e8:ef:86:e2:9c:12:88:80:f4:7d:b6:e5:f7:b4:02:15: 85:9a:15:ed:64:34:c1:20:16:8e:ee:be:64:42:13:d9:07:76: 0a:69:03:85:fe:91:c0:34:23:59:e1:d5:9d:3a:d1:ee:13:88: 30:75:51:b1:27:55:52:db:71:4c:73:13:bf:74:18:71:9e:74: aa:12:8e:07:47:88:e9:88:20:ba:32:7a:e0:d2:4a:80:7d:be: a9:4c:76:1e -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUNc5nMDMjP58qd8dmjIOOqyY+J/swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOGMxMmI0MjczODMyYjQxNTZmZTAwOTJmNmFlN2U1YjNj ZTIzYWQ4YjAeFw0yNTA2MjgxNTE0MTBaFw0yNTA2MjkxNjE2MTBaMDMxMTAvBgNV BAMTKEM1QUYzNzUxQzVCMjE2NTZBREJERTQzQ0JCRTZFNjM3MTI5Q0JFMDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/eVFm7/AOVmnkAQYTG+2tlGa/ mirYB3o3TYerH71LDrbvVPV1H/zH5oCybv4tgdnz+JaqQkUTvhu7CXWMIpCCNC6K JgMwJqVgUuRvou7aNDHr4BkRmzkvWr3oXBMHbH1YNtipLdspItdItSidAfhs2LMR JMfpxJWhSCtAc5LsbHvtPdljwNO/5MAV+R/hUU6WIxfulOh6hnw6xtDWPjYwZ/ki rHGkKYyTEgoUMRTmzjDFmyh+HuM0hX6Y4PXLFK4txg2SRoHby7xPnfXysZDrw7fn NIlRG38m01IdqNEjpf91oodxQivyVDW4nJme+Ug6JPBpuU/gWAnA4in73xBPAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUxa83UcWyFlatveQ8u+bmNxKcvgAwHwYDVR0j BBgwFoAUjBK0JzgytBVv4Akvaufls84jrYswDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOGJmZDY4ODItZDZiMy00YWE4LWJjMGEtNzExZDY4YmQx OThiLzAvOEMxMkI0MjczODMyQjQxNTZGRTAwOTJGNkFFN0U1QjNDRTIzQUQ4Qi5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2pCSzBKemd5dEJWdjRBa3ZhdWZsczg0 anJZcy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84YmZkNjg4Mi1k NmIzLTRhYTgtYmMwYS03MTFkNjhiZDE5OGIvMC84QzEyQjQyNzM4MzJCNDE1NkZF MDA5MkY2QUU3RTVCM0NFMjNBRDhCLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATrlDyGev1LHeVqsEGFQf Ui6WHH1YIw/F3NLG19gjRRO6vvT2T+bStm+tZAxC3O4w30k4n2Lj2p5MfsQ/19ml GzcTxvfHxRKplL4FRSoegz8ZF0fUk9sLV72+b+9WaO08em4UiDrrsmvVvrEtRITi Jmv7pHD8gvUgrIX5DfMPZ9/b6zWuv/TrJAHeTcG3Zk8CrulNxcJEAHxoK50A+jv0 GrEuPgvo74binBKIgPR9tuX3tAIVhZoV7WQ0wSAWju6+ZEIT2Qd2CmkDhf6RwDQj WeHVnTrR7hOIMHVRsSdVUttxTHMTv3QYcZ50qhKOB0eI6YggujJ64NJKgH2+qUx2 Hg== -----END CERTIFICATE-----Generated at Sun Jun 29 06:01:52 2025 by rpki-client