$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8bfd6882-d6b3-4aa8-bc0a-711d68bd198b/0/8C12B4273832B4156FE0092F6AE7E5B3CE23AD8B.mft File: 8C12B4273832B4156FE0092F6AE7E5B3CE23AD8B.mft (raw, json) Hash identifier: 31AD7NF5TBkSE5T7urxyMUN57DSmxEISM/PsEiULebg= Subject key identifier: 4F:E5:75:38:13:F5:53:9B:76:C4:D4:3A:60:9F:47:44:64:6B:04:CE Authority key identifier: 8C:12:B4:27:38:32:B4:15:6F:E0:09:2F:6A:E7:E5:B3:CE:23:AD:8B Certificate issuer: /CN=8c12b4273832b4156fe0092f6ae7e5b3ce23ad8b Certificate serial: 30384EBB69CDF4D3AA35716B71FB3FE990EA5661 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jBK0JzgytBVv4Akvaufls84jrYs.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8bfd6882-d6b3-4aa8-bc0a-711d68bd198b/0/8C12B4273832B4156FE0092F6AE7E5B3CE23AD8B.mft Manifest number: 0259 Signing time: Thu 24 Jul 2025 19:32:06 +0000 Manifest this update: Thu 24 Jul 2025 19:27:06 +0000 Manifest next update: Fri 25 Jul 2025 20:26:06 +0000 Files and hashes: 1: 34352e39352e38322e302f32332d3234203d3e20313734.roa (hash: j5uBx1ZwzePSy8f9EGQJPGu8wElQLvhVLCemoigNpZM=) 2: 3138352e3234302e3130362e302f32342d3234203d3e20323134343538.roa (hash: 1BInd1OedKcqXcFEvGswCnCL2u3VREZrv7xXz/oRjOg=) 3: 34352e39352e38302e302f32342d3234203d3e203136323736.roa (hash: 3x0cRO+g1bZbRHut+QAG7pwDzd80m15dxHMNduCBIhg=) 4: 8C12B4273832B4156FE0092F6AE7E5B3CE23AD8B.crl (hash: 7EZhl/jPjZND1rWUcrVepK78SbLBX5jwP4GSEcrERXE=) 5: 3138352e3234302e3130342e302f32342d3234203d3e20323130353338.roa (hash: T9Q1VqRTWLWUsHiQ8nGpX/B35ktvbCl8rYqsuD5dV38=) 6: 3138352e3234302e3130352e302f32342d3234203d3e203431353634.roa (hash: TlWGN33+lROz/SyNNq5fptfqzBonbreTLNbM3qDOA4Q=) 7: 3231322e3130332e34342e302f32342d3234203d3e20323133393138.roa (hash: qGJQiTgIvP4Ve1lRuA50bfURyANdu4X5JKcPosVvvQA=) 8: 3139332e32342e3233352e302f32342d3234203d3e203630373831.roa (hash: 3IIPnO8jnB/C9bfC+8H124jFOjjxVU8ltj/gUK5jsA4=) 9: 3231322e3130332e34342e302f32342d3234203d3e20323131343834.roa (hash: JBx8ym7JHWLmUGZKmy6bIQw3WR5rhPzAi99IbVvWGag=) 10: 3139332e32342e3233342e302f32342d3234203d3e20383334.roa (hash: wDn4WvWEnl0ktIwomfuSX0xxTMgnjS6eS37UfP6tuk8=) 11: 3138352e3234302e3130372e302f32342d3234203d3e20383334.roa (hash: leKcza5Qs/RyDeK2ErrnhwnHbLnSq2LOSorSLAW6m5c=) 12: 3231322e3130332e34352e302f32342d3234203d3e2038303735.roa (hash: fHVIMx8xlYqpN0AXQfWLm0vqOUAEGFXc3sBROHoQyYA=) 13: 3231322e3130332e34362e302f32342d3234203d3e203531303832.roa (hash: 2F+hMcxUeRbuMZ154QcBZjgDbx0tCTkT+4d5LpArwfo=) 14: 34352e39352e38312e302f32342d3234203d3e203239383032.roa (hash: RSLVUL+AislPXW7KHmpbzgP/rzQAkGuHFrgP4qIPD94=) 15: 3231322e3130332e34372e302f32342d3234203d3e203630313137.roa (hash: YdIRouunEJ7v7O6adrWSPqBia6eTO11BexNozDCWbfw=) 16: 39312e3139302e3135372e302f32342d3234203d3e20323130383330.roa (hash: uxCs+vRLf89Iqe2Vg3VmQVaqgZcbd6t3ZZRDH3hDvaY=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8bfd6882-d6b3-4aa8-bc0a-711d68bd198b/0/8C12B4273832B4156FE0092F6AE7E5B3CE23AD8B.crl rsync://rsync.paas.rpki.ripe.net/repository/8bfd6882-d6b3-4aa8-bc0a-711d68bd198b/0/8C12B4273832B4156FE0092F6AE7E5B3CE23AD8B.mft rsync://rpki.ripe.net/repository/DEFAULT/jBK0JzgytBVv4Akvaufls84jrYs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 25 Jul 2025 20:26:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:38:4e:bb:69:cd:f4:d3:aa:35:71:6b:71:fb:3f:e9:90:ea:56:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8c12b4273832b4156fe0092f6ae7e5b3ce23ad8b Validity Not Before: Jul 24 19:27:06 2025 GMT Not After : Jul 25 20:26:06 2025 GMT Subject: CN=4FE5753813F5539B76C4D43A609F4744646B04CE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:12:94:7c:5c:2e:0f:24:7f:de:40:74:85:91: fe:cb:c0:3d:bd:b5:08:67:2d:2d:89:c3:58:78:85: 36:50:d4:81:86:27:e4:cd:6e:bb:fb:c5:23:4e:59: 2a:c4:87:86:cd:7c:f8:98:c9:d3:94:bb:63:d1:49: b3:db:55:d9:6c:87:c8:93:aa:4c:39:80:a0:4f:19: d2:a0:f7:b5:79:4a:81:83:da:c5:85:65:a4:17:6f: a6:41:7a:d7:c9:a6:36:74:e2:90:18:f3:eb:8a:b7: 3a:30:2f:5f:29:7e:75:49:60:0d:71:5b:34:bd:dd: 4e:b8:1a:b0:cd:44:6f:71:89:b1:45:25:28:50:c3: b0:d0:75:87:bd:d8:f2:12:d0:4a:2e:d8:77:15:f4: ca:64:d4:0f:92:c2:28:4d:b5:e1:db:cb:3a:56:24: 5a:75:d7:2c:cb:fa:6c:e0:21:41:50:e2:80:32:f8: 8f:49:8d:f9:18:3c:3c:ff:3a:49:5a:41:4f:3f:3f: 1b:9a:ed:d3:6a:b4:32:c8:50:c3:2e:f8:7a:f1:f6: 69:fa:10:ad:62:ae:0f:f2:15:b3:36:c8:c2:d9:c1: 8f:c2:85:d3:11:70:f8:40:d6:cc:dd:a9:30:dd:0a: 10:fd:83:11:fd:3f:d3:2e:17:b0:72:35:ed:45:b6: dc:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:E5:75:38:13:F5:53:9B:76:C4:D4:3A:60:9F:47:44:64:6B:04:CE X509v3 Authority Key Identifier: keyid:8C:12:B4:27:38:32:B4:15:6F:E0:09:2F:6A:E7:E5:B3:CE:23:AD:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/8bfd6882-d6b3-4aa8-bc0a-711d68bd198b/0/8C12B4273832B4156FE0092F6AE7E5B3CE23AD8B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jBK0JzgytBVv4Akvaufls84jrYs.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8bfd6882-d6b3-4aa8-bc0a-711d68bd198b/0/8C12B4273832B4156FE0092F6AE7E5B3CE23AD8B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:2f:c8:86:73:af:d1:c7:60:68:49:a9:d8:38:40:0c:95:be: 8d:ad:d3:0b:f8:4e:3b:fa:7b:1f:1e:6e:6f:e9:ea:ea:e1:e3: 5d:14:3b:44:44:b1:61:db:24:0d:f9:3a:d4:6c:4b:9b:ba:2a: 62:bf:96:ac:a6:f7:15:7a:47:cd:c3:0c:5f:54:d3:8b:b1:e7: a0:7b:41:66:a6:4d:0c:a4:c7:4f:24:96:23:4c:46:9e:5c:44: 23:69:41:16:31:88:b2:10:a8:b9:2b:b8:8b:5c:e5:2e:e3:b3: 14:da:5c:4e:aa:4a:de:72:83:bf:7a:11:d1:aa:1a:61:39:34: 25:3f:cd:50:8d:2d:d0:fa:b3:8f:3f:4b:a2:62:7c:46:11:ec: fb:66:d0:15:09:9d:7a:ba:73:91:8b:fa:58:cb:d2:87:ce:72: 5b:db:fd:e9:89:2f:20:d3:ec:24:bc:b3:2b:da:d3:5f:39:14: 9f:fa:64:42:39:5a:ca:fd:ce:33:2b:46:26:f5:e9:10:2d:75: f1:1c:0a:05:db:9d:ec:da:74:91:5b:13:3d:7f:be:3f:f4:b8: 1c:4d:6d:1b:0d:28:ed:dc:69:18:4e:2d:99:22:61:55:77:e8: 4f:f2:37:15:48:40:e0:b2:1a:81:da:16:de:23:81:d2:7a:08: fd:3b:4f:e2 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUMDhOu2nN9NOqNXFrcfs/6ZDqVmEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOGMxMmI0MjczODMyYjQxNTZmZTAwOTJmNmFlN2U1YjNj ZTIzYWQ4YjAeFw0yNTA3MjQxOTI3MDZaFw0yNTA3MjUyMDI2MDZaMDMxMTAvBgNV BAMTKDRGRTU3NTM4MTNGNTUzOUI3NkM0RDQzQTYwOUY0NzQ0NjQ2QjA0Q0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzEpR8XC4PJH/eQHSFkf7LwD29 tQhnLS2Jw1h4hTZQ1IGGJ+TNbrv7xSNOWSrEh4bNfPiYydOUu2PRSbPbVdlsh8iT qkw5gKBPGdKg97V5SoGD2sWFZaQXb6ZBetfJpjZ04pAY8+uKtzowL18pfnVJYA1x WzS93U64GrDNRG9xibFFJShQw7DQdYe92PIS0Eou2HcV9Mpk1A+SwihNteHbyzpW JFp11yzL+mzgIUFQ4oAy+I9JjfkYPDz/OklaQU8/Pxua7dNqtDLIUMMu+Hrx9mn6 EK1irg/yFbM2yMLZwY/ChdMRcPhA1szdqTDdChD9gxH9P9MuF7ByNe1FttybAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUT+V1OBP1U5t2xNQ6YJ9HRGRrBM4wHwYDVR0j BBgwFoAUjBK0JzgytBVv4Akvaufls84jrYswDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOGJmZDY4ODItZDZiMy00YWE4LWJjMGEtNzExZDY4YmQx OThiLzAvOEMxMkI0MjczODMyQjQxNTZGRTAwOTJGNkFFN0U1QjNDRTIzQUQ4Qi5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2pCSzBKemd5dEJWdjRBa3ZhdWZsczg0 anJZcy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84YmZkNjg4Mi1k NmIzLTRhYTgtYmMwYS03MTFkNjhiZDE5OGIvMC84QzEyQjQyNzM4MzJCNDE1NkZF MDA5MkY2QUU3RTVCM0NFMjNBRDhCLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADC/IhnOv0cdgaEmp2DhA DJW+ja3TC/hOO/p7Hx5ub+nq6uHjXRQ7RESxYdskDfk61GxLm7oqYr+WrKb3FXpH zcMMX1TTi7HnoHtBZqZNDKTHTySWI0xGnlxEI2lBFjGIshCouSu4i1zlLuOzFNpc TqpK3nKDv3oR0aoaYTk0JT/NUI0t0Pqzjz9LomJ8RhHs+2bQFQmderpzkYv6WMvS h85yW9v96YkvINPsJLyzK9rTXzkUn/pkQjlayv3OMytGJvXpEC118RwKBdud7Np0 kVsTPX++P/S4HE1tGw0o7dxpGE4tmSJhVXfoT/I3FUhA4LIagdoW3iOB0noI/TtP 4g== -----END CERTIFICATE-----Generated at Fri Jul 25 04:31:09 2025 by rpki-client