$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8bfd6882-d6b3-4aa8-bc0a-711d68bd198b/0/8C12B4273832B4156FE0092F6AE7E5B3CE23AD8B.mft File: 8C12B4273832B4156FE0092F6AE7E5B3CE23AD8B.mft (raw, json) Hash identifier: Jm6ilylCDJ4ecfBCW424s+Xokb9vKB7dEd0rWGgkUTk= Subject key identifier: 7F:A0:56:92:C8:F0:F7:B5:4D:32:EE:7D:13:DA:B3:73:7E:68:39:E3 Authority key identifier: 8C:12:B4:27:38:32:B4:15:6F:E0:09:2F:6A:E7:E5:B3:CE:23:AD:8B Certificate issuer: /CN=8c12b4273832b4156fe0092f6ae7e5b3ce23ad8b Certificate serial: 12F81554537A4D918BFD5BD6B571FA101F2B379A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jBK0JzgytBVv4Akvaufls84jrYs.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8bfd6882-d6b3-4aa8-bc0a-711d68bd198b/0/8C12B4273832B4156FE0092F6AE7E5B3CE23AD8B.mft Manifest number: 0284 Signing time: Fri 22 Aug 2025 22:12:33 +0000 Manifest this update: Fri 22 Aug 2025 22:07:33 +0000 Manifest next update: Sun 24 Aug 2025 01:37:33 +0000 Files and hashes: 1: 34352e39352e38302e302f32342d3234203d3e203136323736.roa (hash: 3x0cRO+g1bZbRHut+QAG7pwDzd80m15dxHMNduCBIhg=) 2: 34352e39352e38322e302f32332d3234203d3e20313734.roa (hash: j5uBx1ZwzePSy8f9EGQJPGu8wElQLvhVLCemoigNpZM=) 3: 3231322e3130332e34342e302f32342d3234203d3e20323133393138.roa (hash: qGJQiTgIvP4Ve1lRuA50bfURyANdu4X5JKcPosVvvQA=) 4: 3231322e3130332e34342e302f32342d3234203d3e20323131343834.roa (hash: JBx8ym7JHWLmUGZKmy6bIQw3WR5rhPzAi99IbVvWGag=) 5: 8C12B4273832B4156FE0092F6AE7E5B3CE23AD8B.crl (hash: t6XL8/mK/EBJ64yRQuQ6RaYHztVrMPL4O4CRNjOqbeA=) 6: 3231322e3130332e34372e302f32342d3234203d3e20383334.roa (hash: tBJtqCjr0cq/MMgRAK92Aj3/alZJx7yj+Im6DlRSUtc=) 7: 3139332e32342e3233342e302f32342d3234203d3e20383334.roa (hash: wDn4WvWEnl0ktIwomfuSX0xxTMgnjS6eS37UfP6tuk8=) 8: 3138352e3234302e3130342e302f32342d3234203d3e20323130353338.roa (hash: T9Q1VqRTWLWUsHiQ8nGpX/B35ktvbCl8rYqsuD5dV38=) 9: 3138352e3234302e3130372e302f32342d3234203d3e203230343733.roa (hash: JMPMOpLF1bcIvbG82aj+pie4xIbRE8z3aJEr+Ha5GDQ=) 10: 3231322e3130332e34362e302f32342d3234203d3e203531303832.roa (hash: 2F+hMcxUeRbuMZ154QcBZjgDbx0tCTkT+4d5LpArwfo=) 11: 3231322e3130332e34352e302f32342d3234203d3e2038303735.roa (hash: fHVIMx8xlYqpN0AXQfWLm0vqOUAEGFXc3sBROHoQyYA=) 12: 3139332e32342e3233352e302f32342d3234203d3e203630373831.roa (hash: 3IIPnO8jnB/C9bfC+8H124jFOjjxVU8ltj/gUK5jsA4=) 13: 3138352e3234302e3130362e302f32342d3234203d3e20323134343538.roa (hash: 1BInd1OedKcqXcFEvGswCnCL2u3VREZrv7xXz/oRjOg=) 14: 34352e39352e38312e302f32342d3234203d3e20383334.roa (hash: CfCdj5k+Lj5zHQCoFXqC9dWCvLUmgOEX9Bq56Zw8pDc=) 15: 3138352e3234302e3130352e302f32342d3234203d3e203431353634.roa (hash: TlWGN33+lROz/SyNNq5fptfqzBonbreTLNbM3qDOA4Q=) 16: 39312e3139302e3135372e302f32342d3234203d3e20323130383330.roa (hash: uxCs+vRLf89Iqe2Vg3VmQVaqgZcbd6t3ZZRDH3hDvaY=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8bfd6882-d6b3-4aa8-bc0a-711d68bd198b/0/8C12B4273832B4156FE0092F6AE7E5B3CE23AD8B.crl rsync://rsync.paas.rpki.ripe.net/repository/8bfd6882-d6b3-4aa8-bc0a-711d68bd198b/0/8C12B4273832B4156FE0092F6AE7E5B3CE23AD8B.mft rsync://rpki.ripe.net/repository/DEFAULT/jBK0JzgytBVv4Akvaufls84jrYs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 24 Aug 2025 00:37:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:f8:15:54:53:7a:4d:91:8b:fd:5b:d6:b5:71:fa:10:1f:2b:37:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8c12b4273832b4156fe0092f6ae7e5b3ce23ad8b Validity Not Before: Aug 22 22:07:33 2025 GMT Not After : Aug 24 01:37:33 2025 GMT Subject: CN=7FA05692C8F0F7B54D32EE7D13DAB3737E6839E3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:8f:91:6a:98:c5:ba:72:2a:5b:be:b9:52:41: 0d:dc:4a:19:26:41:83:f5:cf:04:09:4f:4e:a9:49: 22:10:ef:e0:0e:e9:b3:ea:c0:91:e6:87:91:72:ec: 0e:58:77:42:8d:30:a7:b3:f9:2c:98:ad:7f:72:8d: 3c:8b:24:b1:86:35:d0:e4:ed:19:d9:d2:fe:16:aa: 06:38:26:c6:22:e2:3d:60:ba:eb:01:f0:7f:f9:6a: 89:56:4a:07:b5:ed:fa:14:2c:9f:b0:58:22:bd:62: 54:6a:4b:e0:ac:bd:b3:1f:07:a7:d4:47:88:7f:17: f2:76:b0:4b:50:e3:1f:f4:90:62:a9:27:09:bc:48: 7d:0f:b8:47:0c:45:d8:19:4d:20:aa:7b:68:3b:2c: c6:bc:6d:49:3f:9a:78:dc:ea:17:7e:a4:4b:b0:f9: cb:43:6b:9a:96:a8:d3:75:5d:de:bd:08:37:d9:f2: ef:3e:d0:4b:bc:8c:83:82:d8:be:da:bb:58:12:bd: 69:36:3a:21:c9:a7:3d:fc:04:72:c2:ae:b5:1f:4d: 60:90:e9:32:b1:c2:8d:06:b1:76:6b:dc:16:1e:f4: 56:af:43:f4:ce:a4:85:3c:4f:9e:6d:b1:9b:7b:92: b6:65:6d:22:8f:87:2a:8e:18:bf:55:a8:32:83:5a: f0:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:A0:56:92:C8:F0:F7:B5:4D:32:EE:7D:13:DA:B3:73:7E:68:39:E3 X509v3 Authority Key Identifier: keyid:8C:12:B4:27:38:32:B4:15:6F:E0:09:2F:6A:E7:E5:B3:CE:23:AD:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/8bfd6882-d6b3-4aa8-bc0a-711d68bd198b/0/8C12B4273832B4156FE0092F6AE7E5B3CE23AD8B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jBK0JzgytBVv4Akvaufls84jrYs.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8bfd6882-d6b3-4aa8-bc0a-711d68bd198b/0/8C12B4273832B4156FE0092F6AE7E5B3CE23AD8B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:f7:19:6e:37:a6:2f:c6:ac:e0:1b:8a:db:b1:b4:ef:2e:9e: 6b:3e:78:2e:b2:18:d1:16:29:d8:e9:07:8b:12:a1:59:b2:84: 2c:91:76:ba:7a:ee:ca:dd:88:f6:24:73:67:37:44:03:d4:5d: 68:b0:f1:21:76:82:32:a2:2c:4b:f9:6d:44:dc:15:b8:1e:11: 23:98:45:4a:2b:5c:71:47:45:3e:76:43:6f:0f:91:ed:92:ed: 15:02:80:1c:a6:c8:b2:06:04:25:c8:fe:32:c6:c3:15:40:70: 2a:30:44:df:2e:5a:5b:84:5b:85:c1:6d:d3:ca:e1:04:e6:f2: 4a:ca:54:ef:21:09:77:ec:ab:70:8d:f6:14:be:ac:53:7f:c4: 3c:c5:52:1a:a1:7a:b5:c9:2c:8c:73:13:bb:47:a9:ea:7c:4e: ca:49:ee:c0:4f:d0:75:9a:e6:bb:fc:f5:d0:67:25:8d:9a:0d: 51:f7:1e:2b:20:67:76:96:ce:bd:11:1d:73:09:29:0c:c5:65: 75:6a:c1:a7:98:24:51:63:74:fe:4a:fd:5a:c1:f1:06:e7:34: a3:f3:86:fd:10:f8:78:c8:fe:66:11:21:3d:b4:8b:33:dc:6b: 6a:bb:ed:89:1d:d0:88:54:a5:ce:c6:ba:56:f8:df:57:c0:4c: 10:47:13:f8 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUEvgVVFN6TZGL/VvWtXH6EB8rN5owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOGMxMmI0MjczODMyYjQxNTZmZTAwOTJmNmFlN2U1YjNj ZTIzYWQ4YjAeFw0yNTA4MjIyMjA3MzNaFw0yNTA4MjQwMTM3MzNaMDMxMTAvBgNV BAMTKDdGQTA1NjkyQzhGMEY3QjU0RDMyRUU3RDEzREFCMzczN0U2ODM5RTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD3j5FqmMW6cipbvrlSQQ3cShkm QYP1zwQJT06pSSIQ7+AO6bPqwJHmh5Fy7A5Yd0KNMKez+SyYrX9yjTyLJLGGNdDk 7RnZ0v4WqgY4JsYi4j1guusB8H/5aolWSge17foULJ+wWCK9YlRqS+CsvbMfB6fU R4h/F/J2sEtQ4x/0kGKpJwm8SH0PuEcMRdgZTSCqe2g7LMa8bUk/mnjc6hd+pEuw +ctDa5qWqNN1Xd69CDfZ8u8+0Eu8jIOC2L7au1gSvWk2OiHJpz38BHLCrrUfTWCQ 6TKxwo0GsXZr3BYe9FavQ/TOpIU8T55tsZt7krZlbSKPhyqOGL9VqDKDWvAlAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUf6BWksjw97VNMu59E9qzc35oOeMwHwYDVR0j BBgwFoAUjBK0JzgytBVv4Akvaufls84jrYswDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOGJmZDY4ODItZDZiMy00YWE4LWJjMGEtNzExZDY4YmQx OThiLzAvOEMxMkI0MjczODMyQjQxNTZGRTAwOTJGNkFFN0U1QjNDRTIzQUQ4Qi5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2pCSzBKemd5dEJWdjRBa3ZhdWZsczg0 anJZcy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84YmZkNjg4Mi1k NmIzLTRhYTgtYmMwYS03MTFkNjhiZDE5OGIvMC84QzEyQjQyNzM4MzJCNDE1NkZF MDA5MkY2QUU3RTVCM0NFMjNBRDhCLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhfcZbjemL8as4BuK27G0 7y6eaz54LrIY0RYp2OkHixKhWbKELJF2unruyt2I9iRzZzdEA9RdaLDxIXaCMqIs S/ltRNwVuB4RI5hFSitccUdFPnZDbw+R7ZLtFQKAHKbIsgYEJcj+MsbDFUBwKjBE 3y5aW4RbhcFt08rhBObySspU7yEJd+yrcI32FL6sU3/EPMVSGqF6tcksjHMTu0ep 6nxOyknuwE/QdZrmu/z10GcljZoNUfceKyBndpbOvREdcwkpDMVldWrBp5gkUWN0 /kr9WsHxBuc0o/OG/RD4eMj+ZhEhPbSLM9xrarvtiR3QiFSlzsa6VvjfV8BMEEcT +A== -----END CERTIFICATE-----Generated at Sat Aug 23 09:46:56 2025 by rpki-client