$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8070615f-d26d-42e3-a145-5c7b67b2b64e/0/2C12F0A080F021F2BA25BC0C6EA7E06B67AAD05E.mft File: 2C12F0A080F021F2BA25BC0C6EA7E06B67AAD05E.mft (raw, json) Hash identifier: Q6QkglfcCZKlOVISH4ERiZpZ+4wkr6T9SubhmVw08WA= Subject key identifier: 04:65:54:C9:62:65:12:BA:D7:D9:0E:99:2C:FC:E9:72:B2:B4:A2:F2 Authority key identifier: 2C:12:F0:A0:80:F0:21:F2:BA:25:BC:0C:6E:A7:E0:6B:67:AA:D0:5E Certificate issuer: /CN=2c12f0a080f021f2ba25bc0c6ea7e06b67aad05e Certificate serial: 099AF725B9D08404DD3CF4A4DFB49B4548FE1350 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LBLwoIDwIfK6JbwMbqfga2eq0F4.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8070615f-d26d-42e3-a145-5c7b67b2b64e/0/2C12F0A080F021F2BA25BC0C6EA7E06B67AAD05E.mft Manifest number: 85 Signing time: Sun 11 May 2025 19:28:53 +0000 Manifest this update: Sun 11 May 2025 19:23:53 +0000 Manifest next update: Mon 12 May 2025 23:23:53 +0000 Files and hashes: 1: 323030313a3637383a6434343a3a2f34382d3438203d3e20323133323739.roa (hash: a2d6hAclWrhx6h6+ACHw0iSYteM3AlSblaeDKRH8jzc=) 2: 326131343a623430303a3a2f33322d3332203d3e20323133323739.roa (hash: 5hhgwEfLD9bumu2w7kC2KzlKzBKITTTKNPZHvvEg0u8=) 3: 2C12F0A080F021F2BA25BC0C6EA7E06B67AAD05E.crl (hash: bAKrofiCdhkV+Jl+AwSv5I+bgDUAEbCsZ8LnKrJrg9I=) 4: AS213279.asa (hash: nJRzaMfqdZ5AI+sMn9wPdQBE/Wcrkghpk4PHewl3Wz8=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8070615f-d26d-42e3-a145-5c7b67b2b64e/0/2C12F0A080F021F2BA25BC0C6EA7E06B67AAD05E.crl rsync://rsync.paas.rpki.ripe.net/repository/8070615f-d26d-42e3-a145-5c7b67b2b64e/0/2C12F0A080F021F2BA25BC0C6EA7E06B67AAD05E.mft rsync://rpki.ripe.net/repository/DEFAULT/LBLwoIDwIfK6JbwMbqfga2eq0F4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 May 2025 16:00:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:9a:f7:25:b9:d0:84:04:dd:3c:f4:a4:df:b4:9b:45:48:fe:13:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2c12f0a080f021f2ba25bc0c6ea7e06b67aad05e Validity Not Before: May 11 19:23:53 2025 GMT Not After : May 12 23:23:53 2025 GMT Subject: CN=046554C9626512BAD7D90E992CFCE972B2B4A2F2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:66:40:20:8e:ef:48:f8:66:eb:9f:43:50:9e: 7b:40:23:8a:db:d4:f5:30:a0:0b:bb:43:64:58:20: 6d:6b:d0:9c:5b:7f:11:f7:5a:aa:85:82:d4:b8:ed: e7:30:8f:1d:0e:5c:62:70:4b:3c:72:5f:25:eb:8a: a7:38:1b:78:bd:2d:e6:47:99:43:b2:65:df:37:38: 28:4a:f1:30:5e:8a:ae:97:cf:d9:06:35:ab:9f:97: 26:f5:3e:0c:aa:7e:8f:16:52:41:80:48:12:e0:7f: 0a:99:d4:d2:1d:58:19:5c:b2:af:3a:a3:8b:50:b6: 45:0f:30:28:54:34:18:1e:e9:82:9d:ed:4b:eb:a8: 0b:ba:2d:d0:80:61:59:c5:98:1c:99:eb:2e:93:7d: 28:c2:6d:03:68:d2:ce:6e:f0:db:a2:38:b2:e2:d7: 25:60:42:97:35:2f:cd:93:ca:38:b0:f3:c8:ef:56: 98:1c:43:51:77:e1:17:15:f4:93:04:9b:7e:e8:b9: 97:ba:f5:9d:f9:1f:fa:76:c3:b4:58:67:0a:18:0a: 5a:7d:c8:e6:b7:97:df:af:ea:94:e2:c9:0b:85:a1: 11:ea:b1:6c:40:10:8d:ec:db:2a:22:7a:03:ff:a2: 70:e5:c4:4b:c9:79:dc:dd:b9:81:0b:ea:96:dd:7a: 96:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:65:54:C9:62:65:12:BA:D7:D9:0E:99:2C:FC:E9:72:B2:B4:A2:F2 X509v3 Authority Key Identifier: keyid:2C:12:F0:A0:80:F0:21:F2:BA:25:BC:0C:6E:A7:E0:6B:67:AA:D0:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/8070615f-d26d-42e3-a145-5c7b67b2b64e/0/2C12F0A080F021F2BA25BC0C6EA7E06B67AAD05E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LBLwoIDwIfK6JbwMbqfga2eq0F4.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8070615f-d26d-42e3-a145-5c7b67b2b64e/0/2C12F0A080F021F2BA25BC0C6EA7E06B67AAD05E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:83:13:87:52:1a:76:ed:10:9e:81:fd:ef:44:f3:d1:ee:1f: 2b:f8:dd:e6:ec:98:14:9e:b6:e0:84:c6:d0:96:32:7e:2e:22: 70:13:be:5a:29:1c:17:ad:64:d9:bc:43:59:b5:c5:03:e2:76: 64:50:ed:f5:36:b5:53:f3:7a:59:78:58:77:d3:8e:40:62:b0: 0c:5b:1d:13:e6:0d:a4:4e:96:7a:75:ce:72:fb:3d:95:a2:38: e6:47:bd:93:cd:f2:dd:43:2f:bd:78:5b:79:b2:e2:25:64:79: 82:94:57:46:96:8d:67:2a:db:71:d4:d5:df:89:10:1f:19:b7: 3b:5d:83:73:07:4e:40:36:96:71:5d:91:b8:85:74:9b:95:be: 04:b0:5d:fe:fd:d8:f8:9f:51:85:64:5c:65:d7:bd:fc:46:3b: ec:47:2e:ea:e9:0d:6b:18:fa:b5:31:57:4e:98:09:79:16:e4: 23:59:92:0f:20:b6:68:10:0b:a0:c0:86:ea:46:f5:17:46:9d: b3:d5:18:80:f3:1e:ca:f4:e4:7f:b7:87:af:0a:a6:b1:b5:76: 23:d8:38:9b:d2:f9:bb:c3:6f:12:e4:1e:51:4e:a7:39:c1:f4: 70:37:cd:44:24:ac:77:c6:6c:ec:59:23:11:4a:eb:8b:b7:89: 69:77:f3:b1 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUCZr3JbnQhATdPPSk37SbRUj+E1AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMmMxMmYwYTA4MGYwMjFmMmJhMjViYzBjNmVhN2UwNmI2 N2FhZDA1ZTAeFw0yNTA1MTExOTIzNTNaFw0yNTA1MTIyMzIzNTNaMDMxMTAvBgNV BAMTKDA0NjU1NEM5NjI2NTEyQkFEN0Q5MEU5OTJDRkNFOTcyQjJCNEEyRjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfZkAgju9I+Gbrn0NQnntAI4rb 1PUwoAu7Q2RYIG1r0JxbfxH3WqqFgtS47ecwjx0OXGJwSzxyXyXriqc4G3i9LeZH mUOyZd83OChK8TBeiq6Xz9kGNauflyb1Pgyqfo8WUkGASBLgfwqZ1NIdWBlcsq86 o4tQtkUPMChUNBge6YKd7UvrqAu6LdCAYVnFmByZ6y6TfSjCbQNo0s5u8NuiOLLi 1yVgQpc1L82Tyjiw88jvVpgcQ1F34RcV9JMEm37ouZe69Z35H/p2w7RYZwoYClp9 yOa3l9+v6pTiyQuFoRHqsWxAEI3s2yoiegP/onDlxEvJedzduYEL6pbdepYxAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUBGVUyWJlErrX2Q6ZLPzpcrK0ovIwHwYDVR0j BBgwFoAULBLwoIDwIfK6JbwMbqfga2eq0F4wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvODA3MDYxNWYtZDI2ZC00MmUzLWExNDUtNWM3YjY3YjJi NjRlLzAvMkMxMkYwQTA4MEYwMjFGMkJBMjVCQzBDNkVBN0UwNkI2N0FBRDA1RS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0xCTHdvSUR3SWZLNkpid01icWZnYTJl cTBGNC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84MDcwNjE1Zi1k MjZkLTQyZTMtYTE0NS01YzdiNjdiMmI2NGUvMC8yQzEyRjBBMDgwRjAyMUYyQkEy NUJDMEM2RUE3RTA2QjY3QUFEMDVFLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOIMTh1Iadu0QnoH970Tz 0e4fK/jd5uyYFJ624ITG0JYyfi4icBO+WikcF61k2bxDWbXFA+J2ZFDt9Ta1U/N6 WXhYd9OOQGKwDFsdE+YNpE6WenXOcvs9laI45ke9k83y3UMvvXhbebLiJWR5gpRX RpaNZyrbcdTV34kQHxm3O12DcwdOQDaWcV2RuIV0m5W+BLBd/v3Y+J9RhWRcZde9 /EY77Ecu6ukNaxj6tTFXTpgJeRbkI1mSDyC2aBALoMCG6kb1F0ads9UYgPMeyvTk f7eHrwqmsbV2I9g4m9L5u8NvEuQeUU6nOcH0cDfNRCSsd8Zs7FkjEUrri7eJaXfz sQ== -----END CERTIFICATE-----Generated at Sun May 11 23:15:38 2025 by rpki-client