$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8bfd6882-d6b3-4aa8-bc0a-711d68bd198b/0/8C12B4273832B4156FE0092F6AE7E5B3CE23AD8B.mft File: 8C12B4273832B4156FE0092F6AE7E5B3CE23AD8B.mft (raw, json) Hash identifier: SNxV37qxu1iujnTWNUz1aAZNe3Xdpnazw5LlIfuYlyQ= Subject key identifier: 36:1D:0E:0F:7D:38:8A:87:FB:35:26:D5:85:48:1C:AB:6D:45:D5:E2 Authority key identifier: 8C:12:B4:27:38:32:B4:15:6F:E0:09:2F:6A:E7:E5:B3:CE:23:AD:8B Certificate issuer: /CN=8c12b4273832b4156fe0092f6ae7e5b3ce23ad8b Certificate serial: 2307E7E4D43CFC1013BC8F78BEFAE151EC02AB5F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jBK0JzgytBVv4Akvaufls84jrYs.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8bfd6882-d6b3-4aa8-bc0a-711d68bd198b/0/8C12B4273832B4156FE0092F6AE7E5B3CE23AD8B.mft Manifest number: 02D8 Signing time: Sun 19 Oct 2025 17:41:39 +0000 Manifest this update: Sun 19 Oct 2025 17:36:39 +0000 Manifest next update: Mon 20 Oct 2025 19:04:39 +0000 Files and hashes: 1: 34352e39352e38312e302f32342d3234203d3e20383334.roa (hash: CfCdj5k+Lj5zHQCoFXqC9dWCvLUmgOEX9Bq56Zw8pDc=) 2: 3231322e3130332e34342e302f32342d3234203d3e20323131343834.roa (hash: JBx8ym7JHWLmUGZKmy6bIQw3WR5rhPzAi99IbVvWGag=) 3: 3231322e3130332e34342e302f32342d3234203d3e20323133393138.roa (hash: qGJQiTgIvP4Ve1lRuA50bfURyANdu4X5JKcPosVvvQA=) 4: 3138352e3234302e3130372e302f32342d3234203d3e203230343733.roa (hash: JMPMOpLF1bcIvbG82aj+pie4xIbRE8z3aJEr+Ha5GDQ=) 5: 8C12B4273832B4156FE0092F6AE7E5B3CE23AD8B.crl (hash: Lk3OO0zvVGSKrTPC5P0TvA31bzQrc35FkefEmbLkUEI=) 6: 3231322e3130332e34362e302f32342d3234203d3e2039333034.roa (hash: ZiA8Cde6s2TKghms5u18G3ZVs8EUkbF+SgM6k/613IM=) 7: 3231322e3130332e34372e302f32342d3234203d3e20383334.roa (hash: 7EFeqqtN+B2ApgmMDDuqP2FR80lZRbeYex9btxUFGEc=) 8: 3139332e32342e3233342e302f32332d3234203d3e20383334.roa (hash: 3tE9vwLlFDIuslyefoYRrNlvD1gbmu6ntzeczb8Bts0=) 9: 34352e39352e38302e302f32342d3234203d3e203136323736.roa (hash: 3x0cRO+g1bZbRHut+QAG7pwDzd80m15dxHMNduCBIhg=) 10: 3138352e3234302e3130342e302f32342d3234203d3e20323130353338.roa (hash: T9Q1VqRTWLWUsHiQ8nGpX/B35ktvbCl8rYqsuD5dV38=) 11: 3231322e3130332e34352e302f32342d3234203d3e2038303735.roa (hash: fHVIMx8xlYqpN0AXQfWLm0vqOUAEGFXc3sBROHoQyYA=) 12: 3138352e3234302e3130362e302f32342d3234203d3e20323134343538.roa (hash: 1BInd1OedKcqXcFEvGswCnCL2u3VREZrv7xXz/oRjOg=) 13: 39312e3139302e3135372e302f32342d3234203d3e20323130383330.roa (hash: uxCs+vRLf89Iqe2Vg3VmQVaqgZcbd6t3ZZRDH3hDvaY=) 14: 3138352e3234302e3130352e302f32342d3234203d3e203431353634.roa (hash: TlWGN33+lROz/SyNNq5fptfqzBonbreTLNbM3qDOA4Q=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8bfd6882-d6b3-4aa8-bc0a-711d68bd198b/0/8C12B4273832B4156FE0092F6AE7E5B3CE23AD8B.crl rsync://rsync.paas.rpki.ripe.net/repository/8bfd6882-d6b3-4aa8-bc0a-711d68bd198b/0/8C12B4273832B4156FE0092F6AE7E5B3CE23AD8B.mft rsync://rpki.ripe.net/repository/DEFAULT/jBK0JzgytBVv4Akvaufls84jrYs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 20 Oct 2025 11:18:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:07:e7:e4:d4:3c:fc:10:13:bc:8f:78:be:fa:e1:51:ec:02:ab:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8c12b4273832b4156fe0092f6ae7e5b3ce23ad8b Validity Not Before: Oct 19 17:36:39 2025 GMT Not After : Oct 20 19:04:39 2025 GMT Subject: CN=361D0E0F7D388A87FB3526D585481CAB6D45D5E2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:77:ce:bd:49:b2:44:65:b7:b5:8c:a9:f6:48: 63:d5:25:87:a9:73:a7:fd:89:07:e2:88:c0:1a:7a: 57:b6:1f:1e:3c:c4:d6:f6:58:c8:60:b4:ba:00:ae: b9:0c:9e:41:72:a4:e2:e0:50:bb:47:3b:1f:64:1f: fa:33:62:eb:ed:52:0f:70:6c:42:a5:ad:4a:ab:bc: be:6e:48:79:ba:96:f7:bc:49:5d:63:b5:f7:72:0e: 8a:c8:79:4a:98:03:3b:a1:c6:ea:63:c8:c5:15:84: 20:93:7b:d7:db:e7:da:c9:73:05:30:e2:95:d0:1c: 42:1f:4d:dd:7c:6f:ba:89:db:25:2a:70:22:9d:ab: 39:5a:43:6e:07:42:90:dd:a2:f4:25:08:44:03:16: 66:f8:e8:a5:1f:ab:a0:da:aa:22:8a:bd:ed:7e:0b: b8:c3:71:5f:d9:ae:5c:dc:79:e1:ee:09:c7:1e:ab: 71:cc:af:50:db:91:3c:4e:56:32:ea:54:a1:50:4e: 75:0d:bb:7b:e1:35:72:5f:af:3f:41:76:e8:d6:dd: 0f:ed:2f:79:c7:48:6a:a0:c7:84:bf:7c:3e:73:ae: 01:11:7b:06:9f:18:c0:18:45:e1:aa:4e:83:61:15: 35:90:9d:ef:ed:a2:c5:66:f0:85:64:49:9e:04:bd: d2:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:1D:0E:0F:7D:38:8A:87:FB:35:26:D5:85:48:1C:AB:6D:45:D5:E2 X509v3 Authority Key Identifier: keyid:8C:12:B4:27:38:32:B4:15:6F:E0:09:2F:6A:E7:E5:B3:CE:23:AD:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/8bfd6882-d6b3-4aa8-bc0a-711d68bd198b/0/8C12B4273832B4156FE0092F6AE7E5B3CE23AD8B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jBK0JzgytBVv4Akvaufls84jrYs.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8bfd6882-d6b3-4aa8-bc0a-711d68bd198b/0/8C12B4273832B4156FE0092F6AE7E5B3CE23AD8B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9e:fb:fa:4c:e7:fc:1a:34:23:6c:1d:3f:be:eb:da:11:13:3a: 96:8a:c9:bf:d7:ca:5f:4b:6e:19:b8:5d:6f:9e:d5:a6:de:24: e4:b9:5f:32:e7:1d:39:fb:f7:71:52:6a:0c:fe:13:b5:bf:43: 61:fe:7c:4f:cf:06:00:3a:85:26:32:17:2a:87:1b:9e:6c:dd: 94:36:ae:a7:90:54:22:44:80:52:a6:e7:c4:30:cc:9b:05:2d: 0d:7d:30:41:0a:d0:6a:3b:5c:cf:47:4d:03:37:24:d9:48:05: 89:af:a2:97:2f:6a:7e:db:8e:6e:8e:97:c5:52:84:82:34:17: ad:4d:45:b4:a7:a2:26:b9:1f:e8:ed:87:69:4a:be:d2:cd:95: da:31:1b:af:35:11:5f:8a:a8:4b:9f:aa:37:04:ed:1e:40:6a: 89:af:2a:5c:a6:e5:f9:06:d0:cc:31:2c:e9:5c:49:b8:8d:0b: 0e:0c:44:f8:f7:80:2c:85:f0:a8:03:09:f2:76:5e:6c:bb:d4: ef:f6:fb:b9:90:9a:a6:0a:0f:32:23:0a:d8:4b:2b:fb:8f:91: b5:1e:9e:d9:fe:7f:d7:25:2c:23:a3:b5:6f:39:53:6f:86:0b: 99:b4:95:b2:c9:25:d4:d7:eb:0f:97:f0:e3:1a:66:dc:20:4c: 63:74:48:9b -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUIwfn5NQ8/BATvI94vvrhUewCq18wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOGMxMmI0MjczODMyYjQxNTZmZTAwOTJmNmFlN2U1YjNj ZTIzYWQ4YjAeFw0yNTEwMTkxNzM2MzlaFw0yNTEwMjAxOTA0MzlaMDMxMTAvBgNV BAMTKDM2MUQwRTBGN0QzODhBODdGQjM1MjZENTg1NDgxQ0FCNkQ0NUQ1RTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBd869SbJEZbe1jKn2SGPVJYep c6f9iQfiiMAaele2Hx48xNb2WMhgtLoArrkMnkFypOLgULtHOx9kH/ozYuvtUg9w bEKlrUqrvL5uSHm6lve8SV1jtfdyDorIeUqYAzuhxupjyMUVhCCTe9fb59rJcwUw 4pXQHEIfTd18b7qJ2yUqcCKdqzlaQ24HQpDdovQlCEQDFmb46KUfq6DaqiKKve1+ C7jDcV/ZrlzceeHuCcceq3HMr1DbkTxOVjLqVKFQTnUNu3vhNXJfrz9BdujW3Q/t L3nHSGqgx4S/fD5zrgERewafGMAYReGqToNhFTWQne/tosVm8IVkSZ4EvdIfAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUNh0OD304iof7NSbVhUgcq21F1eIwHwYDVR0j BBgwFoAUjBK0JzgytBVv4Akvaufls84jrYswDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOGJmZDY4ODItZDZiMy00YWE4LWJjMGEtNzExZDY4YmQx OThiLzAvOEMxMkI0MjczODMyQjQxNTZGRTAwOTJGNkFFN0U1QjNDRTIzQUQ4Qi5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2pCSzBKemd5dEJWdjRBa3ZhdWZsczg0 anJZcy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84YmZkNjg4Mi1k NmIzLTRhYTgtYmMwYS03MTFkNjhiZDE5OGIvMC84QzEyQjQyNzM4MzJCNDE1NkZF MDA5MkY2QUU3RTVCM0NFMjNBRDhCLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnvv6TOf8GjQjbB0/vuva ERM6lorJv9fKX0tuGbhdb57Vpt4k5LlfMucdOfv3cVJqDP4Ttb9DYf58T88GADqF JjIXKocbnmzdlDaup5BUIkSAUqbnxDDMmwUtDX0wQQrQajtcz0dNAzck2UgFia+i ly9qftuObo6XxVKEgjQXrU1FtKeiJrkf6O2HaUq+0s2V2jEbrzURX4qoS5+qNwTt HkBqia8qXKbl+QbQzDEs6VxJuI0LDgxE+PeALIXwqAMJ8nZebLvU7/b7uZCapgoP MiMK2Esr+4+RtR6e2f5/1yUsI6O1bzlTb4YLmbSVsskl1NfrD5fw4xpm3CBMY3RI mw== -----END CERTIFICATE-----Generated at Sun Oct 19 20:07:11 2025 by rpki-client