$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8bfd6882-d6b3-4aa8-bc0a-711d68bd198b/0/8C12B4273832B4156FE0092F6AE7E5B3CE23AD8B.mft File: 8C12B4273832B4156FE0092F6AE7E5B3CE23AD8B.mft (raw, json) Hash identifier: YI9FD/eWBa02lc6paBEi3A+1Nonf5LRuNHCBrkVAmiU= Subject key identifier: 64:D7:AD:30:49:78:53:31:97:20:4C:AE:65:7E:28:C0:ED:5C:FE:F7 Authority key identifier: 8C:12:B4:27:38:32:B4:15:6F:E0:09:2F:6A:E7:E5:B3:CE:23:AD:8B Certificate issuer: /CN=8c12b4273832b4156fe0092f6ae7e5b3ce23ad8b Certificate serial: 3D8617DFA28B454F3205783E31B15B1A253F527F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jBK0JzgytBVv4Akvaufls84jrYs.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8bfd6882-d6b3-4aa8-bc0a-711d68bd198b/0/8C12B4273832B4156FE0092F6AE7E5B3CE23AD8B.mft Manifest number: 02D7 Signing time: Sun 19 Oct 2025 01:16:33 +0000 Manifest this update: Sun 19 Oct 2025 01:11:33 +0000 Manifest next update: Mon 20 Oct 2025 01:38:33 +0000 Files and hashes: 1: 3231322e3130332e34342e302f32342d3234203d3e20323133393138.roa (hash: qGJQiTgIvP4Ve1lRuA50bfURyANdu4X5JKcPosVvvQA=) 2: 39312e3139302e3135372e302f32342d3234203d3e20323130383330.roa (hash: uxCs+vRLf89Iqe2Vg3VmQVaqgZcbd6t3ZZRDH3hDvaY=) 3: 3138352e3234302e3130342e302f32342d3234203d3e20323130353338.roa (hash: T9Q1VqRTWLWUsHiQ8nGpX/B35ktvbCl8rYqsuD5dV38=) 4: 3139332e32342e3233342e302f32332d3234203d3e20383334.roa (hash: 3tE9vwLlFDIuslyefoYRrNlvD1gbmu6ntzeczb8Bts0=) 5: 8C12B4273832B4156FE0092F6AE7E5B3CE23AD8B.crl (hash: XKUtad9PTkcFx1hdK60xEm0+E27r2OUJ5sCDb15atyM=) 6: 3138352e3234302e3130362e302f32342d3234203d3e20323134343538.roa (hash: 1BInd1OedKcqXcFEvGswCnCL2u3VREZrv7xXz/oRjOg=) 7: 3231322e3130332e34352e302f32342d3234203d3e2038303735.roa (hash: fHVIMx8xlYqpN0AXQfWLm0vqOUAEGFXc3sBROHoQyYA=) 8: 3231322e3130332e34342e302f32342d3234203d3e20323131343834.roa (hash: JBx8ym7JHWLmUGZKmy6bIQw3WR5rhPzAi99IbVvWGag=) 9: 34352e39352e38312e302f32342d3234203d3e20383334.roa (hash: CfCdj5k+Lj5zHQCoFXqC9dWCvLUmgOEX9Bq56Zw8pDc=) 10: 3138352e3234302e3130372e302f32342d3234203d3e203230343733.roa (hash: JMPMOpLF1bcIvbG82aj+pie4xIbRE8z3aJEr+Ha5GDQ=) 11: 3231322e3130332e34372e302f32342d3234203d3e20383334.roa (hash: 7EFeqqtN+B2ApgmMDDuqP2FR80lZRbeYex9btxUFGEc=) 12: 3138352e3234302e3130352e302f32342d3234203d3e203431353634.roa (hash: TlWGN33+lROz/SyNNq5fptfqzBonbreTLNbM3qDOA4Q=) 13: 3231322e3130332e34362e302f32342d3234203d3e2039333034.roa (hash: ZiA8Cde6s2TKghms5u18G3ZVs8EUkbF+SgM6k/613IM=) 14: 34352e39352e38302e302f32342d3234203d3e203136323736.roa (hash: 3x0cRO+g1bZbRHut+QAG7pwDzd80m15dxHMNduCBIhg=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8bfd6882-d6b3-4aa8-bc0a-711d68bd198b/0/8C12B4273832B4156FE0092F6AE7E5B3CE23AD8B.crl rsync://rsync.paas.rpki.ripe.net/repository/8bfd6882-d6b3-4aa8-bc0a-711d68bd198b/0/8C12B4273832B4156FE0092F6AE7E5B3CE23AD8B.mft rsync://rpki.ripe.net/repository/DEFAULT/jBK0JzgytBVv4Akvaufls84jrYs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 20 Oct 2025 01:38:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:86:17:df:a2:8b:45:4f:32:05:78:3e:31:b1:5b:1a:25:3f:52:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8c12b4273832b4156fe0092f6ae7e5b3ce23ad8b Validity Not Before: Oct 19 01:11:33 2025 GMT Not After : Oct 20 01:38:33 2025 GMT Subject: CN=64D7AD304978533197204CAE657E28C0ED5CFEF7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:74:61:76:03:66:75:95:5b:16:ca:02:d4:c4: dc:10:5c:9f:75:5d:7b:ca:b5:e2:df:2d:71:22:93: ef:fb:ef:68:4b:e8:7e:c8:6c:21:7a:82:7a:bb:f6: b4:15:15:71:f9:83:57:ac:b0:90:ac:3a:62:60:4d: b6:b1:d6:e0:d7:f5:a6:4c:c9:23:c9:e6:8c:0b:82: 59:fa:f7:77:b9:c5:ff:cf:56:44:16:3f:5e:81:78: 16:42:09:28:4f:a6:f3:a6:ab:3a:de:38:e2:a1:c3: e6:3b:6a:ba:9b:be:a2:6f:2c:58:70:42:67:1b:51: a6:79:d4:37:be:d6:04:67:62:15:31:1d:cd:43:04: b7:7c:43:54:16:21:03:2d:b2:86:03:d8:8e:7b:35: 94:17:02:b0:e3:04:2a:c7:a6:2d:62:02:64:ca:84: 5a:1f:ba:b9:89:bb:e4:c3:95:0d:ff:32:87:e2:6d: 78:a7:57:24:a7:3d:35:5e:34:3a:ab:2e:67:b9:96: 43:e7:ae:f9:d6:7f:ba:77:3d:68:e4:1a:b2:ce:45: 5c:df:1f:62:cb:14:6f:3b:e1:02:e7:b7:ab:fe:01: d4:58:51:71:63:43:2e:90:32:d2:6f:d6:17:48:c9: 44:12:92:5a:48:6c:09:55:35:14:da:6a:80:2f:e7: a8:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:D7:AD:30:49:78:53:31:97:20:4C:AE:65:7E:28:C0:ED:5C:FE:F7 X509v3 Authority Key Identifier: keyid:8C:12:B4:27:38:32:B4:15:6F:E0:09:2F:6A:E7:E5:B3:CE:23:AD:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/8bfd6882-d6b3-4aa8-bc0a-711d68bd198b/0/8C12B4273832B4156FE0092F6AE7E5B3CE23AD8B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jBK0JzgytBVv4Akvaufls84jrYs.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8bfd6882-d6b3-4aa8-bc0a-711d68bd198b/0/8C12B4273832B4156FE0092F6AE7E5B3CE23AD8B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:76:82:13:e3:f7:3f:d9:83:81:8d:9e:8d:ee:1f:6e:43:1b: a0:8f:0b:36:0e:c3:fe:df:4c:4f:00:02:22:07:f7:c4:c1:81: 73:c4:49:69:19:88:d6:bc:a6:ef:81:cc:18:78:97:b8:54:04: c6:f9:fd:12:20:c5:f1:50:90:92:0d:c0:48:3f:dd:42:5a:34: ec:b3:c4:53:7c:d8:6f:95:5a:19:63:3e:c0:59:6c:ab:17:f7: 76:e6:f1:19:a4:1b:09:65:dc:ea:14:94:c2:63:f7:bd:a9:82: ed:f6:76:65:68:80:46:6e:7c:da:ae:48:e0:a5:aa:9e:ee:11: 48:6d:ee:90:d7:01:26:c7:33:35:80:30:60:6e:7b:c6:31:d7: 4c:56:30:6c:99:15:2b:87:71:1a:41:aa:21:dd:54:87:66:3c: 41:d8:4e:25:75:97:0d:ff:59:d5:ab:22:03:cc:8d:be:5b:40: 44:51:24:92:a1:44:4b:5d:12:97:8c:7c:ca:48:29:d5:03:7d: 35:45:3c:22:89:5e:db:b0:b6:2b:29:b3:cb:8c:6a:72:a9:5c: 66:42:2d:29:57:13:69:79:c8:89:8c:20:22:6c:f3:5e:03:2d: 54:12:93:16:96:19:73:72:04:0b:a7:6a:ef:0c:ff:59:bb:dd: b6:ce:06:19 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUPYYX36KLRU8yBXg+MbFbGiU/Un8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOGMxMmI0MjczODMyYjQxNTZmZTAwOTJmNmFlN2U1YjNj ZTIzYWQ4YjAeFw0yNTEwMTkwMTExMzNaFw0yNTEwMjAwMTM4MzNaMDMxMTAvBgNV BAMTKDY0RDdBRDMwNDk3ODUzMzE5NzIwNENBRTY1N0UyOEMwRUQ1Q0ZFRjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKdGF2A2Z1lVsWygLUxNwQXJ91 XXvKteLfLXEik+/772hL6H7IbCF6gnq79rQVFXH5g1essJCsOmJgTbax1uDX9aZM ySPJ5owLgln693e5xf/PVkQWP16BeBZCCShPpvOmqzreOOKhw+Y7arqbvqJvLFhw QmcbUaZ51De+1gRnYhUxHc1DBLd8Q1QWIQMtsoYD2I57NZQXArDjBCrHpi1iAmTK hFofurmJu+TDlQ3/MofibXinVySnPTVeNDqrLme5lkPnrvnWf7p3PWjkGrLORVzf H2LLFG874QLnt6v+AdRYUXFjQy6QMtJv1hdIyUQSklpIbAlVNRTaaoAv56jhAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUZNetMEl4UzGXIEyuZX4owO1c/vcwHwYDVR0j BBgwFoAUjBK0JzgytBVv4Akvaufls84jrYswDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOGJmZDY4ODItZDZiMy00YWE4LWJjMGEtNzExZDY4YmQx OThiLzAvOEMxMkI0MjczODMyQjQxNTZGRTAwOTJGNkFFN0U1QjNDRTIzQUQ4Qi5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2pCSzBKemd5dEJWdjRBa3ZhdWZsczg0 anJZcy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84YmZkNjg4Mi1k NmIzLTRhYTgtYmMwYS03MTFkNjhiZDE5OGIvMC84QzEyQjQyNzM4MzJCNDE1NkZF MDA5MkY2QUU3RTVCM0NFMjNBRDhCLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHHaCE+P3P9mDgY2eje4f bkMboI8LNg7D/t9MTwACIgf3xMGBc8RJaRmI1rym74HMGHiXuFQExvn9EiDF8VCQ kg3ASD/dQlo07LPEU3zYb5VaGWM+wFlsqxf3dubxGaQbCWXc6hSUwmP3vamC7fZ2 ZWiARm582q5I4KWqnu4RSG3ukNcBJsczNYAwYG57xjHXTFYwbJkVK4dxGkGqId1U h2Y8QdhOJXWXDf9Z1asiA8yNvltARFEkkqFES10Sl4x8ykgp1QN9NUU8Iole27C2 Kymzy4xqcqlcZkItKVcTaXnIiYwgImzzXgMtVBKTFpYZc3IEC6dq7wz/Wbvdts4G GQ== -----END CERTIFICATE-----Generated at Sun Oct 19 17:33:26 2025 by rpki-client