$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8070615f-d26d-42e3-a145-5c7b67b2b64e/0/2C12F0A080F021F2BA25BC0C6EA7E06B67AAD05E.mft File: 2C12F0A080F021F2BA25BC0C6EA7E06B67AAD05E.mft (raw, json) Hash identifier: B1Z+fFIfvCQbZAwvFkcqLp6pdwDJrHew3f++ZOJEyC4= Subject key identifier: C2:A0:35:DD:4F:35:3A:05:98:27:EA:D7:70:FD:61:B8:EE:B8:E3:85 Authority key identifier: 2C:12:F0:A0:80:F0:21:F2:BA:25:BC:0C:6E:A7:E0:6B:67:AA:D0:5E Certificate issuer: /CN=2c12f0a080f021f2ba25bc0c6ea7e06b67aad05e Certificate serial: 7EA665EA5B2F5D1517C2BE6D168A9C98918E1B2B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LBLwoIDwIfK6JbwMbqfga2eq0F4.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8070615f-d26d-42e3-a145-5c7b67b2b64e/0/2C12F0A080F021F2BA25BC0C6EA7E06B67AAD05E.mft Manifest number: 011A Signing time: Tue 02 Sep 2025 18:18:58 +0000 Manifest this update: Tue 02 Sep 2025 18:13:58 +0000 Manifest next update: Wed 03 Sep 2025 20:45:58 +0000 Files and hashes: 1: 326131343a623430303a3a2f33322d3332203d3e20323133323739.roa (hash: 5hhgwEfLD9bumu2w7kC2KzlKzBKITTTKNPZHvvEg0u8=) 2: 323030313a3637383a6434343a3a2f34382d3438203d3e20323133323739.roa (hash: a2d6hAclWrhx6h6+ACHw0iSYteM3AlSblaeDKRH8jzc=) 3: 326131343a623430303a3a2f32392d3438203d3e2030.roa (hash: NhcbptlixcA3mbsPTqMiibAOrNSU1BYwO66fMNiKSfA=) 4: 2C12F0A080F021F2BA25BC0C6EA7E06B67AAD05E.crl (hash: gkoxbxLafJzPTf5W5JEgRBxQiWv/jBKmrEaysouUxDo=) 5: AS213279.asa (hash: nJRzaMfqdZ5AI+sMn9wPdQBE/Wcrkghpk4PHewl3Wz8=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8070615f-d26d-42e3-a145-5c7b67b2b64e/0/2C12F0A080F021F2BA25BC0C6EA7E06B67AAD05E.crl rsync://rsync.paas.rpki.ripe.net/repository/8070615f-d26d-42e3-a145-5c7b67b2b64e/0/2C12F0A080F021F2BA25BC0C6EA7E06B67AAD05E.mft rsync://rpki.ripe.net/repository/DEFAULT/LBLwoIDwIfK6JbwMbqfga2eq0F4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 03 Sep 2025 20:45:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:a6:65:ea:5b:2f:5d:15:17:c2:be:6d:16:8a:9c:98:91:8e:1b:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2c12f0a080f021f2ba25bc0c6ea7e06b67aad05e Validity Not Before: Sep 2 18:13:58 2025 GMT Not After : Sep 3 20:45:58 2025 GMT Subject: CN=C2A035DD4F353A059827EAD770FD61B8EEB8E385 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:8e:d2:cd:db:1a:04:b6:43:3a:fe:74:41:84: c2:4e:ac:d2:aa:16:47:60:a9:c0:48:82:db:6c:86: 08:e3:c8:d6:93:e6:40:c8:fa:f5:19:19:75:b6:b5: 64:ba:9a:7c:45:c4:05:4a:05:71:bd:88:b4:9a:97: c8:6a:eb:00:4d:89:9c:47:c1:6e:a7:d8:37:47:13: 8d:2e:5e:86:98:21:9e:e1:ab:af:ac:38:1b:49:86: 37:b5:b8:52:4d:c2:22:5c:9d:13:b4:f6:0f:4f:4d: c1:d3:22:00:0d:5d:67:8a:6f:d5:06:4d:7e:b5:73: 4d:e7:4e:a9:d7:0b:42:71:c1:5d:ee:b8:23:7c:5a: 18:61:36:71:c9:55:f2:1d:4d:96:3b:3a:54:d3:23: cb:6b:72:fa:67:40:59:ab:3d:67:ef:61:79:3a:0e: b8:0d:e3:e0:ec:a1:16:06:d5:0e:d3:f5:09:19:fa: ce:5a:33:b0:85:62:94:e7:bb:b9:8c:1e:8e:a3:93: 7c:0d:b9:1d:ac:7d:4a:78:f9:d5:14:f1:87:46:c4: b0:09:b3:fd:9f:30:89:9a:55:c8:5a:e7:00:82:1c: ea:0b:1a:a8:9b:9e:e1:08:13:85:29:9f:d0:f7:32: 64:0e:60:eb:48:05:3e:06:55:b7:99:9b:8b:d7:dc: f8:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:A0:35:DD:4F:35:3A:05:98:27:EA:D7:70:FD:61:B8:EE:B8:E3:85 X509v3 Authority Key Identifier: keyid:2C:12:F0:A0:80:F0:21:F2:BA:25:BC:0C:6E:A7:E0:6B:67:AA:D0:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/8070615f-d26d-42e3-a145-5c7b67b2b64e/0/2C12F0A080F021F2BA25BC0C6EA7E06B67AAD05E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LBLwoIDwIfK6JbwMbqfga2eq0F4.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8070615f-d26d-42e3-a145-5c7b67b2b64e/0/2C12F0A080F021F2BA25BC0C6EA7E06B67AAD05E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:77:6f:09:26:5b:4b:dc:8f:17:c6:82:c5:47:70:35:5c:34: da:c9:0f:54:28:e9:4c:c6:d3:95:2a:a4:a4:26:74:71:15:45: c4:0e:f7:53:39:05:69:e5:99:af:c2:0c:a6:56:be:8a:ce:7c: b8:fa:64:be:c3:f8:1e:02:7b:fc:7b:19:7c:20:19:52:8e:0d: b7:03:6f:7f:7f:4d:e4:cd:e3:89:63:0d:58:11:9c:36:5e:a5: 4f:ec:cc:ed:26:e5:49:0a:0e:66:91:42:5a:78:3b:96:84:7c: bd:db:3c:82:db:f2:11:3b:e1:32:dc:c2:d6:57:b5:79:a3:1d: b6:de:3b:2d:36:28:d2:52:b5:6f:fc:67:0d:61:9e:cb:42:6a: 15:c5:9c:1d:78:9d:b2:f1:e3:36:fa:aa:6e:81:71:8d:57:df: 75:8b:90:e7:1d:fd:d1:1d:9f:88:28:8e:70:d1:f0:31:8e:84: aa:ad:9f:98:6d:41:76:92:0b:8c:f1:26:6f:4c:a5:b8:8d:0a: 43:b0:55:67:9e:01:e5:ca:ae:f5:17:ca:48:d3:88:a4:1f:59: 3b:ee:31:cf:79:ca:97:69:3b:18:d8:4a:77:45:fc:78:56:58: eb:88:9e:05:bd:da:05:4f:2d:de:f8:0a:18:e2:33:a6:d2:27: f2:3f:0e:d6 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUfqZl6lsvXRUXwr5tFoqcmJGOGyswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMmMxMmYwYTA4MGYwMjFmMmJhMjViYzBjNmVhN2UwNmI2 N2FhZDA1ZTAeFw0yNTA5MDIxODEzNThaFw0yNTA5MDMyMDQ1NThaMDMxMTAvBgNV BAMTKEMyQTAzNURENEYzNTNBMDU5ODI3RUFENzcwRkQ2MUI4RUVCOEUzODUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvjtLN2xoEtkM6/nRBhMJOrNKq FkdgqcBIgttshgjjyNaT5kDI+vUZGXW2tWS6mnxFxAVKBXG9iLSal8hq6wBNiZxH wW6n2DdHE40uXoaYIZ7hq6+sOBtJhje1uFJNwiJcnRO09g9PTcHTIgANXWeKb9UG TX61c03nTqnXC0JxwV3uuCN8WhhhNnHJVfIdTZY7OlTTI8trcvpnQFmrPWfvYXk6 DrgN4+DsoRYG1Q7T9QkZ+s5aM7CFYpTnu7mMHo6jk3wNuR2sfUp4+dUU8YdGxLAJ s/2fMImaVcha5wCCHOoLGqibnuEIE4Upn9D3MmQOYOtIBT4GVbeZm4vX3PgDAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUwqA13U81OgWYJ+rXcP1huO6444UwHwYDVR0j BBgwFoAULBLwoIDwIfK6JbwMbqfga2eq0F4wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvODA3MDYxNWYtZDI2ZC00MmUzLWExNDUtNWM3YjY3YjJi NjRlLzAvMkMxMkYwQTA4MEYwMjFGMkJBMjVCQzBDNkVBN0UwNkI2N0FBRDA1RS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0xCTHdvSUR3SWZLNkpid01icWZnYTJl cTBGNC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84MDcwNjE1Zi1k MjZkLTQyZTMtYTE0NS01YzdiNjdiMmI2NGUvMC8yQzEyRjBBMDgwRjAyMUYyQkEy NUJDMEM2RUE3RTA2QjY3QUFEMDVFLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlHdvCSZbS9yPF8aCxUdw NVw02skPVCjpTMbTlSqkpCZ0cRVFxA73UzkFaeWZr8IMpla+is58uPpkvsP4HgJ7 /HsZfCAZUo4NtwNvf39N5M3jiWMNWBGcNl6lT+zM7SblSQoOZpFCWng7loR8vds8 gtvyETvhMtzC1le1eaMdtt47LTYo0lK1b/xnDWGey0JqFcWcHXidsvHjNvqqboFx jVffdYuQ5x390R2fiCiOcNHwMY6Eqq2fmG1BdpILjPEmb0yluI0KQ7BVZ54B5cqu 9RfKSNOIpB9ZO+4xz3nKl2k7GNhKd0X8eFZY64ieBb3aBU8t3vgKGOIzptIn8j8O 1g== -----END CERTIFICATE-----Generated at Wed Sep 3 06:00:11 2025 by rpki-client