$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8070615f-d26d-42e3-a145-5c7b67b2b64e/0/2C12F0A080F021F2BA25BC0C6EA7E06B67AAD05E.mft File: 2C12F0A080F021F2BA25BC0C6EA7E06B67AAD05E.mft (raw, json) Hash identifier: wc4YfFwZ9iDw4yADhL3M2fBFrEWPUBlELv17ITVx5as= Subject key identifier: 8F:F2:42:FC:DB:14:65:DC:C3:8F:FF:47:AB:A5:FC:77:04:C3:CA:6C Authority key identifier: 2C:12:F0:A0:80:F0:21:F2:BA:25:BC:0C:6E:A7:E0:6B:67:AA:D0:5E Certificate issuer: /CN=2c12f0a080f021f2ba25bc0c6ea7e06b67aad05e Certificate serial: 58ECF0A61D691341A84205F7211367FF95E6DB66 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LBLwoIDwIfK6JbwMbqfga2eq0F4.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8070615f-d26d-42e3-a145-5c7b67b2b64e/0/2C12F0A080F021F2BA25BC0C6EA7E06B67AAD05E.mft Manifest number: 0174 Signing time: Fri 07 Nov 2025 18:00:15 +0000 Manifest this update: Fri 07 Nov 2025 17:55:15 +0000 Manifest next update: Sat 08 Nov 2025 19:28:15 +0000 Files and hashes: 1: 323030313a3637383a6434343a3a2f34382d3438203d3e20323133323739.roa (hash: a2d6hAclWrhx6h6+ACHw0iSYteM3AlSblaeDKRH8jzc=) 2: AS213279.asa (hash: nJRzaMfqdZ5AI+sMn9wPdQBE/Wcrkghpk4PHewl3Wz8=) 3: 326131343a623430303a3a2f32392d3438203d3e2030.roa (hash: NhcbptlixcA3mbsPTqMiibAOrNSU1BYwO66fMNiKSfA=) 4: 326131343a623430303a3a2f33322d3332203d3e20323133323739.roa (hash: 5hhgwEfLD9bumu2w7kC2KzlKzBKITTTKNPZHvvEg0u8=) 5: 2C12F0A080F021F2BA25BC0C6EA7E06B67AAD05E.crl (hash: enIaKg0uiwJSq+bEQcihic4qDydyhCd4gXO+BFu9UHk=) 6: 326131343a623430303a3a2f32382d3238203d3e20323133323739.roa (hash: OgOX3y2Cb0y0bCTi9m7CKowwwQmHnA0JKK3Fh61rXL0=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8070615f-d26d-42e3-a145-5c7b67b2b64e/0/2C12F0A080F021F2BA25BC0C6EA7E06B67AAD05E.crl rsync://rsync.paas.rpki.ripe.net/repository/8070615f-d26d-42e3-a145-5c7b67b2b64e/0/2C12F0A080F021F2BA25BC0C6EA7E06B67AAD05E.mft rsync://rpki.ripe.net/repository/DEFAULT/LBLwoIDwIfK6JbwMbqfga2eq0F4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 08 Nov 2025 19:28:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:ec:f0:a6:1d:69:13:41:a8:42:05:f7:21:13:67:ff:95:e6:db:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2c12f0a080f021f2ba25bc0c6ea7e06b67aad05e Validity Not Before: Nov 7 17:55:15 2025 GMT Not After : Nov 8 19:28:15 2025 GMT Subject: CN=8FF242FCDB1465DCC38FFF47ABA5FC7704C3CA6C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:0f:fd:c7:7d:1f:d7:2f:8f:63:a8:50:79:dc: cd:c9:e2:3d:8a:78:17:32:4e:51:83:97:ad:c4:c9: 66:c6:fe:04:ea:5a:99:f5:1b:1b:94:cd:a2:18:98: 82:2c:af:f8:0e:3c:0a:34:70:1d:4c:3c:45:b7:ec: b0:bc:52:b0:e2:8c:b4:ae:d2:f5:a4:9a:bb:b7:70: ec:5a:58:d1:8f:06:13:cb:1e:7f:2b:a5:ac:6f:6f: 2b:f2:01:0f:0c:63:ec:f6:a1:59:4a:01:39:27:7a: dc:15:d4:35:cd:cb:99:ef:1d:36:df:7e:07:ad:9f: d7:33:bf:c1:4d:63:3a:df:4f:08:bf:a5:a4:7f:79: 7a:7f:94:b2:7a:f0:85:28:06:aa:78:a0:86:9e:f7: 81:52:a5:33:84:d5:2a:ef:3a:7f:22:ba:75:97:75: cc:23:d8:ac:32:36:e5:81:90:24:ac:db:3c:a7:22: d1:b3:d5:46:79:88:e8:48:a2:41:ff:ec:f7:22:a0: 6e:ee:c1:ef:cb:7f:e1:1d:33:7d:ac:7d:06:ca:0c: a2:8e:cc:50:67:f4:da:97:41:f2:d6:e1:cc:2d:f0: ac:24:f1:ea:0b:f7:2c:3a:57:47:86:c0:84:47:7c: 64:f2:53:b2:a3:c4:65:e6:b2:4d:ad:35:a0:8c:0d: 2b:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:F2:42:FC:DB:14:65:DC:C3:8F:FF:47:AB:A5:FC:77:04:C3:CA:6C X509v3 Authority Key Identifier: keyid:2C:12:F0:A0:80:F0:21:F2:BA:25:BC:0C:6E:A7:E0:6B:67:AA:D0:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/8070615f-d26d-42e3-a145-5c7b67b2b64e/0/2C12F0A080F021F2BA25BC0C6EA7E06B67AAD05E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LBLwoIDwIfK6JbwMbqfga2eq0F4.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8070615f-d26d-42e3-a145-5c7b67b2b64e/0/2C12F0A080F021F2BA25BC0C6EA7E06B67AAD05E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:b3:b7:8d:66:45:97:26:f3:15:e9:0b:c6:dc:05:49:85:46: 10:88:27:e9:84:2a:07:c1:12:ca:4c:aa:e3:32:13:fa:e4:0a: df:a5:fe:65:16:b6:a0:25:1d:ab:fc:cb:f4:8e:4f:73:9d:ab: d8:25:01:10:d6:a9:55:29:65:c4:75:22:cc:f8:3a:46:86:74: 58:ee:d4:0b:47:92:56:70:ce:e8:30:8e:09:be:7b:b3:1e:5b: 17:03:8d:ac:56:31:e8:40:c2:27:a6:a6:f9:12:82:e9:94:e6: 24:a6:e2:ab:13:e2:ba:eb:2c:43:5b:f0:c9:48:91:6f:80:12: 1e:e5:49:73:42:84:18:2b:b5:1e:0d:2a:a7:90:45:ea:45:b0: 9f:86:a0:d9:73:88:f1:63:c9:a0:24:2f:cc:ed:4b:73:48:5c: f3:49:69:66:a9:98:bf:cd:b3:2f:69:69:07:32:10:c8:e8:17: 65:b9:99:6c:cd:56:4a:40:8e:5e:f6:4d:20:2d:fd:80:b4:3c: 85:49:51:2b:e9:57:b3:c1:c2:a5:46:9a:2c:ff:20:af:d9:ee: bb:68:d6:8d:98:df:26:34:92:bb:c3:8f:9a:e1:46:1c:6a:6b: 6b:44:63:e1:28:d8:8f:73:94:17:e7:bd:51:0e:db:4f:fe:27: 7e:a2:cb:99 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUWOzwph1pE0GoQgX3IRNn/5Xm22YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMmMxMmYwYTA4MGYwMjFmMmJhMjViYzBjNmVhN2UwNmI2 N2FhZDA1ZTAeFw0yNTExMDcxNzU1MTVaFw0yNTExMDgxOTI4MTVaMDMxMTAvBgNV BAMTKDhGRjI0MkZDREIxNDY1RENDMzhGRkY0N0FCQTVGQzc3MDRDM0NBNkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrD/3HfR/XL49jqFB53M3J4j2K eBcyTlGDl63EyWbG/gTqWpn1GxuUzaIYmIIsr/gOPAo0cB1MPEW37LC8UrDijLSu 0vWkmru3cOxaWNGPBhPLHn8rpaxvbyvyAQ8MY+z2oVlKATknetwV1DXNy5nvHTbf fgetn9czv8FNYzrfTwi/paR/eXp/lLJ68IUoBqp4oIae94FSpTOE1SrvOn8iunWX dcwj2KwyNuWBkCSs2zynItGz1UZ5iOhIokH/7PcioG7uwe/Lf+EdM32sfQbKDKKO zFBn9NqXQfLW4cwt8Kwk8eoL9yw6V0eGwIRHfGTyU7KjxGXmsk2tNaCMDSvzAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUj/JC/NsUZdzDj/9Hq6X8dwTDymwwHwYDVR0j BBgwFoAULBLwoIDwIfK6JbwMbqfga2eq0F4wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvODA3MDYxNWYtZDI2ZC00MmUzLWExNDUtNWM3YjY3YjJi NjRlLzAvMkMxMkYwQTA4MEYwMjFGMkJBMjVCQzBDNkVBN0UwNkI2N0FBRDA1RS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0xCTHdvSUR3SWZLNkpid01icWZnYTJl cTBGNC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84MDcwNjE1Zi1k MjZkLTQyZTMtYTE0NS01YzdiNjdiMmI2NGUvMC8yQzEyRjBBMDgwRjAyMUYyQkEy NUJDMEM2RUE3RTA2QjY3QUFEMDVFLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHLO3jWZFlybzFekLxtwF SYVGEIgn6YQqB8ESykyq4zIT+uQK36X+ZRa2oCUdq/zL9I5Pc52r2CUBENapVSll xHUizPg6RoZ0WO7UC0eSVnDO6DCOCb57sx5bFwONrFYx6EDCJ6am+RKC6ZTmJKbi qxPiuussQ1vwyUiRb4ASHuVJc0KEGCu1Hg0qp5BF6kWwn4ag2XOI8WPJoCQvzO1L c0hc80lpZqmYv82zL2lpBzIQyOgXZbmZbM1WSkCOXvZNIC39gLQ8hUlRK+lXs8HC pUaaLP8gr9nuu2jWjZjfJjSSu8OPmuFGHGpra0Rj4SjYj3OUF+e9UQ7bT/4nfqLL mQ== -----END CERTIFICATE-----Generated at Sat Nov 8 05:34:31 2025 by rpki-client