$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8bfd6882-d6b3-4aa8-bc0a-711d68bd198b/0/8C12B4273832B4156FE0092F6AE7E5B3CE23AD8B.mft File: 8C12B4273832B4156FE0092F6AE7E5B3CE23AD8B.mft (raw, json) Hash identifier: qvAVSldQFQ+3MV+Rqcg40vXim5zh00kGqiQlAGFW79Y= Subject key identifier: 19:15:C2:19:32:E8:54:41:8C:CE:09:20:65:75:76:F5:78:14:8D:99 Authority key identifier: 8C:12:B4:27:38:32:B4:15:6F:E0:09:2F:6A:E7:E5:B3:CE:23:AD:8B Certificate issuer: /CN=8c12b4273832b4156fe0092f6ae7e5b3ce23ad8b Certificate serial: 25601B419552E13B752445D4F0D5F194B396FF1B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jBK0JzgytBVv4Akvaufls84jrYs.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8bfd6882-d6b3-4aa8-bc0a-711d68bd198b/0/8C12B4273832B4156FE0092F6AE7E5B3CE23AD8B.mft Manifest number: 025A Signing time: Fri 25 Jul 2025 12:27:06 +0000 Manifest this update: Fri 25 Jul 2025 12:22:06 +0000 Manifest next update: Sat 26 Jul 2025 15:36:06 +0000 Files and hashes: 1: 34352e39352e38322e302f32332d3234203d3e20313734.roa (hash: j5uBx1ZwzePSy8f9EGQJPGu8wElQLvhVLCemoigNpZM=) 2: 3231322e3130332e34372e302f32342d3234203d3e203630313137.roa (hash: YdIRouunEJ7v7O6adrWSPqBia6eTO11BexNozDCWbfw=) 3: 3231322e3130332e34342e302f32342d3234203d3e20323133393138.roa (hash: qGJQiTgIvP4Ve1lRuA50bfURyANdu4X5JKcPosVvvQA=) 4: 34352e39352e38312e302f32342d3234203d3e203239383032.roa (hash: RSLVUL+AislPXW7KHmpbzgP/rzQAkGuHFrgP4qIPD94=) 5: 39312e3139302e3135372e302f32342d3234203d3e20323130383330.roa (hash: uxCs+vRLf89Iqe2Vg3VmQVaqgZcbd6t3ZZRDH3hDvaY=) 6: 3231322e3130332e34352e302f32342d3234203d3e2038303735.roa (hash: fHVIMx8xlYqpN0AXQfWLm0vqOUAEGFXc3sBROHoQyYA=) 7: 3139332e32342e3233352e302f32342d3234203d3e203630373831.roa (hash: 3IIPnO8jnB/C9bfC+8H124jFOjjxVU8ltj/gUK5jsA4=) 8: 8C12B4273832B4156FE0092F6AE7E5B3CE23AD8B.crl (hash: wmK6Tx/LJ4phni+DJ++LS5Hby8YJhDMks3f7LGD87rg=) 9: 3231322e3130332e34342e302f32342d3234203d3e20323131343834.roa (hash: JBx8ym7JHWLmUGZKmy6bIQw3WR5rhPzAi99IbVvWGag=) 10: 34352e39352e38302e302f32342d3234203d3e203136323736.roa (hash: 3x0cRO+g1bZbRHut+QAG7pwDzd80m15dxHMNduCBIhg=) 11: 3138352e3234302e3130352e302f32342d3234203d3e203431353634.roa (hash: TlWGN33+lROz/SyNNq5fptfqzBonbreTLNbM3qDOA4Q=) 12: 3139332e32342e3233342e302f32342d3234203d3e20383334.roa (hash: wDn4WvWEnl0ktIwomfuSX0xxTMgnjS6eS37UfP6tuk8=) 13: 3138352e3234302e3130372e302f32342d3234203d3e20383334.roa (hash: leKcza5Qs/RyDeK2ErrnhwnHbLnSq2LOSorSLAW6m5c=) 14: 3138352e3234302e3130342e302f32342d3234203d3e20323130353338.roa (hash: T9Q1VqRTWLWUsHiQ8nGpX/B35ktvbCl8rYqsuD5dV38=) 15: 3231322e3130332e34362e302f32342d3234203d3e203531303832.roa (hash: 2F+hMcxUeRbuMZ154QcBZjgDbx0tCTkT+4d5LpArwfo=) 16: 3138352e3234302e3130362e302f32342d3234203d3e20323134343538.roa (hash: 1BInd1OedKcqXcFEvGswCnCL2u3VREZrv7xXz/oRjOg=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8bfd6882-d6b3-4aa8-bc0a-711d68bd198b/0/8C12B4273832B4156FE0092F6AE7E5B3CE23AD8B.crl rsync://rsync.paas.rpki.ripe.net/repository/8bfd6882-d6b3-4aa8-bc0a-711d68bd198b/0/8C12B4273832B4156FE0092F6AE7E5B3CE23AD8B.mft rsync://rpki.ripe.net/repository/DEFAULT/jBK0JzgytBVv4Akvaufls84jrYs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 26 Jul 2025 15:36:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:60:1b:41:95:52:e1:3b:75:24:45:d4:f0:d5:f1:94:b3:96:ff:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8c12b4273832b4156fe0092f6ae7e5b3ce23ad8b Validity Not Before: Jul 25 12:22:06 2025 GMT Not After : Jul 26 15:36:06 2025 GMT Subject: CN=1915C21932E854418CCE0920657576F578148D99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:96:27:2d:b8:99:66:c9:8f:e0:98:e9:df:b1: a6:d7:a0:4f:a4:19:88:b5:8f:7f:cc:d8:d0:dc:38: b4:b0:f2:d6:56:9c:e8:2a:e5:5a:60:59:69:17:a6: 62:cb:d6:6d:08:12:25:41:e0:b8:90:56:10:21:36: 6d:8b:20:27:65:c6:0f:17:03:6b:d4:7c:ee:87:02: 2c:b9:3f:4e:7f:20:47:98:a8:c2:f9:b8:bd:04:7b: 36:11:42:5b:51:82:d4:20:4d:90:4e:db:26:13:2b: db:4d:f0:b4:2a:a7:e1:ce:07:42:53:78:30:56:55: 29:cc:53:e8:e6:c0:a0:ef:19:9b:ec:7c:7b:ad:69: 60:95:2e:62:87:dd:f5:16:66:50:2f:6c:93:85:15: dc:13:6c:13:4f:00:01:ef:c8:fc:5e:df:12:df:a7: e1:a3:2d:3f:06:fb:f0:23:86:a0:25:f6:45:44:86: 92:cb:73:99:37:12:f6:c8:a3:eb:7f:04:70:5b:f6: c7:05:ac:1b:4a:2f:9d:ce:e2:f3:b9:24:be:87:56: 34:fe:9d:cb:b0:56:ab:97:a2:a2:ae:d7:33:b5:a3: b4:eb:0e:49:b8:c6:6f:fe:7a:f5:28:36:e3:14:84: fc:70:0a:47:a0:94:72:5c:cc:57:f3:4e:fa:20:9e: 0d:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:15:C2:19:32:E8:54:41:8C:CE:09:20:65:75:76:F5:78:14:8D:99 X509v3 Authority Key Identifier: keyid:8C:12:B4:27:38:32:B4:15:6F:E0:09:2F:6A:E7:E5:B3:CE:23:AD:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/8bfd6882-d6b3-4aa8-bc0a-711d68bd198b/0/8C12B4273832B4156FE0092F6AE7E5B3CE23AD8B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jBK0JzgytBVv4Akvaufls84jrYs.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8bfd6882-d6b3-4aa8-bc0a-711d68bd198b/0/8C12B4273832B4156FE0092F6AE7E5B3CE23AD8B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:b4:27:30:21:71:56:f6:61:ba:a0:8b:f5:af:27:87:56:fe: 96:e2:cf:56:3c:f4:ab:ec:48:06:58:89:1b:ac:61:8c:b0:7f: 7c:5c:c5:0d:93:2b:25:4b:4c:20:a0:68:42:35:fb:7c:2a:c5: 38:c6:c4:5d:9e:6d:0b:e2:9c:27:77:86:6e:c2:68:df:12:54: c8:bf:bb:20:a1:29:63:60:22:0e:92:f6:5d:45:82:b9:f7:a0: e7:92:c1:eb:0a:a2:74:93:81:75:ba:b8:42:f6:b2:21:5e:23: 45:1e:20:0b:65:13:d3:84:33:bd:f9:c4:4a:d3:3c:7c:cf:07: e5:d0:f5:b2:79:ad:65:a1:f2:59:80:f4:e5:db:14:ad:fa:c8: 8c:8a:b9:e6:b5:95:51:a2:fa:93:53:86:33:b3:5a:c7:dd:f4: 7d:12:b0:a2:76:af:b0:a2:bf:0b:a0:a2:66:0b:3c:dc:0e:a2: bd:67:b1:bd:c3:2a:c1:06:1b:35:7a:6a:a8:05:bc:0b:2c:cb: 61:b8:41:95:ea:1c:26:be:f8:24:33:b5:ac:18:7a:f6:85:08: 45:e9:07:78:ce:64:f3:28:08:f2:a8:f3:de:43:76:ca:7f:53: 77:f5:31:d5:8e:00:14:d2:9b:22:49:fc:90:b2:ee:6f:a3:f4: 50:76:ae:65 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUJWAbQZVS4Tt1JEXU8NXxlLOW/xswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOGMxMmI0MjczODMyYjQxNTZmZTAwOTJmNmFlN2U1YjNj ZTIzYWQ4YjAeFw0yNTA3MjUxMjIyMDZaFw0yNTA3MjYxNTM2MDZaMDMxMTAvBgNV BAMTKDE5MTVDMjE5MzJFODU0NDE4Q0NFMDkyMDY1NzU3NkY1NzgxNDhEOTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8lictuJlmyY/gmOnfsabXoE+k GYi1j3/M2NDcOLSw8tZWnOgq5VpgWWkXpmLL1m0IEiVB4LiQVhAhNm2LICdlxg8X A2vUfO6HAiy5P05/IEeYqML5uL0EezYRQltRgtQgTZBO2yYTK9tN8LQqp+HOB0JT eDBWVSnMU+jmwKDvGZvsfHutaWCVLmKH3fUWZlAvbJOFFdwTbBNPAAHvyPxe3xLf p+GjLT8G+/AjhqAl9kVEhpLLc5k3EvbIo+t/BHBb9scFrBtKL53O4vO5JL6HVjT+ ncuwVquXoqKu1zO1o7TrDkm4xm/+evUoNuMUhPxwCkeglHJczFfzTvogng2HAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUGRXCGTLoVEGMzgkgZXV29XgUjZkwHwYDVR0j BBgwFoAUjBK0JzgytBVv4Akvaufls84jrYswDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOGJmZDY4ODItZDZiMy00YWE4LWJjMGEtNzExZDY4YmQx OThiLzAvOEMxMkI0MjczODMyQjQxNTZGRTAwOTJGNkFFN0U1QjNDRTIzQUQ4Qi5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2pCSzBKemd5dEJWdjRBa3ZhdWZsczg0 anJZcy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84YmZkNjg4Mi1k NmIzLTRhYTgtYmMwYS03MTFkNjhiZDE5OGIvMC84QzEyQjQyNzM4MzJCNDE1NkZF MDA5MkY2QUU3RTVCM0NFMjNBRDhCLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ7QnMCFxVvZhuqCL9a8n h1b+luLPVjz0q+xIBliJG6xhjLB/fFzFDZMrJUtMIKBoQjX7fCrFOMbEXZ5tC+Kc J3eGbsJo3xJUyL+7IKEpY2AiDpL2XUWCufeg55LB6wqidJOBdbq4QvayIV4jRR4g C2UT04QzvfnEStM8fM8H5dD1snmtZaHyWYD05dsUrfrIjIq55rWVUaL6k1OGM7Na x930fRKwonavsKK/C6CiZgs83A6ivWexvcMqwQYbNXpqqAW8CyzLYbhBleocJr74 JDO1rBh69oUIRekHeM5k8ygI8qjz3kN2yn9Td/Ux1Y4AFNKbIkn8kLLub6P0UHau ZQ== -----END CERTIFICATE-----Generated at Sat Jul 26 01:50:44 2025 by rpki-client