$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8bfd6882-d6b3-4aa8-bc0a-711d68bd198b/0/8C12B4273832B4156FE0092F6AE7E5B3CE23AD8B.mft File: 8C12B4273832B4156FE0092F6AE7E5B3CE23AD8B.mft (raw, json) Hash identifier: W/uOlUzjFUF0ILCysQkd9YvxkcH6pkSbv4YaC3K2cTY= Subject key identifier: C7:47:A2:4D:6D:9D:4B:5E:93:B9:CD:B7:9F:00:64:20:F0:B9:A1:4C Authority key identifier: 8C:12:B4:27:38:32:B4:15:6F:E0:09:2F:6A:E7:E5:B3:CE:23:AD:8B Certificate issuer: /CN=8c12b4273832b4156fe0092f6ae7e5b3ce23ad8b Certificate serial: 3E9E8441D2041AA2815BCE15495AC2F6276916DF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jBK0JzgytBVv4Akvaufls84jrYs.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8bfd6882-d6b3-4aa8-bc0a-711d68bd198b/0/8C12B4273832B4156FE0092F6AE7E5B3CE23AD8B.mft Manifest number: 029E Signing time: Mon 08 Sep 2025 16:24:08 +0000 Manifest this update: Mon 08 Sep 2025 16:19:08 +0000 Manifest next update: Tue 09 Sep 2025 18:07:08 +0000 Files and hashes: 1: 8C12B4273832B4156FE0092F6AE7E5B3CE23AD8B.crl (hash: X2rtcfBtDvoiQ36SKH2eEv2j6NSUH2Rkx3jA4+0rHTQ=) 2: 3231322e3130332e34372e302f32342d3234203d3e203231383539.roa (hash: Rj4/oBS0DP1E+FMfqikPGam+MlgwzJFLHgcXPhIwWoo=) 3: 3139332e32342e3233352e302f32342d3234203d3e203630373831.roa (hash: 3IIPnO8jnB/C9bfC+8H124jFOjjxVU8ltj/gUK5jsA4=) 4: 34352e39352e38322e302f32332d3234203d3e20313734.roa (hash: j5uBx1ZwzePSy8f9EGQJPGu8wElQLvhVLCemoigNpZM=) 5: 3138352e3234302e3130352e302f32342d3234203d3e203431353634.roa (hash: TlWGN33+lROz/SyNNq5fptfqzBonbreTLNbM3qDOA4Q=) 6: 3138352e3234302e3130372e302f32342d3234203d3e203230343733.roa (hash: JMPMOpLF1bcIvbG82aj+pie4xIbRE8z3aJEr+Ha5GDQ=) 7: 39312e3139302e3135372e302f32342d3234203d3e20323130383330.roa (hash: uxCs+vRLf89Iqe2Vg3VmQVaqgZcbd6t3ZZRDH3hDvaY=) 8: 3231322e3130332e34362e302f32342d3234203d3e2039333034.roa (hash: ZiA8Cde6s2TKghms5u18G3ZVs8EUkbF+SgM6k/613IM=) 9: 3139332e32342e3233342e302f32342d3234203d3e20383334.roa (hash: wDn4WvWEnl0ktIwomfuSX0xxTMgnjS6eS37UfP6tuk8=) 10: 3138352e3234302e3130342e302f32342d3234203d3e20323130353338.roa (hash: T9Q1VqRTWLWUsHiQ8nGpX/B35ktvbCl8rYqsuD5dV38=) 11: 3231322e3130332e34342e302f32342d3234203d3e20323131343834.roa (hash: JBx8ym7JHWLmUGZKmy6bIQw3WR5rhPzAi99IbVvWGag=) 12: 3231322e3130332e34352e302f32342d3234203d3e2038303735.roa (hash: fHVIMx8xlYqpN0AXQfWLm0vqOUAEGFXc3sBROHoQyYA=) 13: 3231322e3130332e34342e302f32342d3234203d3e20323133393138.roa (hash: qGJQiTgIvP4Ve1lRuA50bfURyANdu4X5JKcPosVvvQA=) 14: 34352e39352e38302e302f32342d3234203d3e203136323736.roa (hash: 3x0cRO+g1bZbRHut+QAG7pwDzd80m15dxHMNduCBIhg=) 15: 34352e39352e38312e302f32342d3234203d3e20383334.roa (hash: CfCdj5k+Lj5zHQCoFXqC9dWCvLUmgOEX9Bq56Zw8pDc=) 16: 3138352e3234302e3130362e302f32342d3234203d3e20323134343538.roa (hash: 1BInd1OedKcqXcFEvGswCnCL2u3VREZrv7xXz/oRjOg=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8bfd6882-d6b3-4aa8-bc0a-711d68bd198b/0/8C12B4273832B4156FE0092F6AE7E5B3CE23AD8B.crl rsync://rsync.paas.rpki.ripe.net/repository/8bfd6882-d6b3-4aa8-bc0a-711d68bd198b/0/8C12B4273832B4156FE0092F6AE7E5B3CE23AD8B.mft rsync://rpki.ripe.net/repository/DEFAULT/jBK0JzgytBVv4Akvaufls84jrYs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 09 Sep 2025 18:07:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:9e:84:41:d2:04:1a:a2:81:5b:ce:15:49:5a:c2:f6:27:69:16:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8c12b4273832b4156fe0092f6ae7e5b3ce23ad8b Validity Not Before: Sep 8 16:19:08 2025 GMT Not After : Sep 9 18:07:08 2025 GMT Subject: CN=C747A24D6D9D4B5E93B9CDB79F006420F0B9A14C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:08:79:fd:39:35:e6:df:8f:60:2f:f3:14:7c: 55:22:12:67:1c:b0:04:91:42:9f:cc:b4:69:88:90: 2a:69:57:94:05:b1:31:cd:35:ac:9b:98:c2:b5:b4: f7:9a:30:43:9e:7d:12:80:ed:b1:cc:0f:91:7e:0f: bd:86:a7:e8:a1:0b:e5:a4:28:57:6a:ed:3d:b0:48: cd:9b:69:f3:cc:98:96:b5:90:02:a3:96:f6:f7:07: c7:e9:e2:aa:42:33:70:d7:ed:77:4d:0f:80:39:ab: c7:d4:66:d4:4a:70:c2:0e:6c:88:88:cf:a5:89:01: bf:cc:c6:03:89:1f:08:3c:c5:cc:a2:3a:66:e4:76: b6:a8:f2:2c:a6:f4:41:d4:53:2c:cc:c3:93:ec:5b: 5a:c2:87:65:f1:57:68:b6:98:54:e7:17:38:65:33: f7:e2:da:61:7b:70:df:0b:0b:83:95:15:0c:6f:e1: 33:46:19:40:f6:56:9a:13:82:d1:de:97:a6:85:7d: 00:f1:9c:1e:9d:41:35:98:f2:c9:f3:88:5a:f5:23: ea:2c:07:a3:65:91:c9:ce:ba:4c:67:b7:e1:1a:cf: a1:d2:60:f4:9f:42:af:48:44:41:0a:e6:60:e3:17: d3:d0:30:0d:4d:f2:91:d5:d3:89:60:5d:14:b0:4c: 44:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:47:A2:4D:6D:9D:4B:5E:93:B9:CD:B7:9F:00:64:20:F0:B9:A1:4C X509v3 Authority Key Identifier: keyid:8C:12:B4:27:38:32:B4:15:6F:E0:09:2F:6A:E7:E5:B3:CE:23:AD:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/8bfd6882-d6b3-4aa8-bc0a-711d68bd198b/0/8C12B4273832B4156FE0092F6AE7E5B3CE23AD8B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jBK0JzgytBVv4Akvaufls84jrYs.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8bfd6882-d6b3-4aa8-bc0a-711d68bd198b/0/8C12B4273832B4156FE0092F6AE7E5B3CE23AD8B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:2f:28:05:74:68:86:e7:ea:18:1d:a0:9d:9d:a1:c8:be:84: 82:1f:53:f3:01:49:0a:5d:4e:44:b2:73:5a:31:0a:ba:f6:8d: 91:03:1c:5c:53:f5:b0:f2:94:70:f2:d4:8f:c4:b9:13:36:62: b9:82:29:15:e2:e4:02:53:d1:c3:be:3e:dd:da:a7:30:05:13: c0:d7:d7:82:bc:84:0d:56:ef:8c:21:c2:da:9f:4c:b7:ae:d3: 9e:9d:e5:66:fc:ef:2d:94:28:25:27:65:a7:33:1b:20:94:41: a4:4a:19:24:99:9a:4e:f6:16:91:ab:f7:6f:be:e7:1f:1a:c0: 69:98:7c:10:c9:00:40:b5:aa:ea:63:59:22:37:19:df:23:c3: 98:b6:a9:d5:44:6a:49:1f:db:40:c1:99:c0:d7:e5:e3:ae:93: 8e:d1:7c:93:ba:62:13:10:6c:82:94:82:87:05:37:ee:50:5c: b2:e7:18:25:ad:e1:c9:85:e4:3b:3b:b4:b6:ec:f0:07:45:1d: ed:2d:c0:eb:a5:62:b1:30:fc:c9:62:3c:13:fc:83:7d:04:2f: 15:f6:05:9d:77:20:79:c0:13:cb:64:b4:de:cc:8c:48:e6:62: 8e:2d:79:03:f6:8b:43:e3:de:fc:af:22:8a:a6:cf:2b:b0:4e: b1:ac:88:99 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUPp6EQdIEGqKBW84VSVrC9idpFt8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOGMxMmI0MjczODMyYjQxNTZmZTAwOTJmNmFlN2U1YjNj ZTIzYWQ4YjAeFw0yNTA5MDgxNjE5MDhaFw0yNTA5MDkxODA3MDhaMDMxMTAvBgNV BAMTKEM3NDdBMjRENkQ5RDRCNUU5M0I5Q0RCNzlGMDA2NDIwRjBCOUExNEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCWCHn9OTXm349gL/MUfFUiEmcc sASRQp/MtGmIkCppV5QFsTHNNaybmMK1tPeaMEOefRKA7bHMD5F+D72Gp+ihC+Wk KFdq7T2wSM2bafPMmJa1kAKjlvb3B8fp4qpCM3DX7XdND4A5q8fUZtRKcMIObIiI z6WJAb/MxgOJHwg8xcyiOmbkdrao8iym9EHUUyzMw5PsW1rCh2XxV2i2mFTnFzhl M/fi2mF7cN8LC4OVFQxv4TNGGUD2VpoTgtHel6aFfQDxnB6dQTWY8snziFr1I+os B6NlkcnOukxnt+Eaz6HSYPSfQq9IREEK5mDjF9PQMA1N8pHV04lgXRSwTEQdAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUx0eiTW2dS16Tuc23nwBkIPC5oUwwHwYDVR0j BBgwFoAUjBK0JzgytBVv4Akvaufls84jrYswDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOGJmZDY4ODItZDZiMy00YWE4LWJjMGEtNzExZDY4YmQx OThiLzAvOEMxMkI0MjczODMyQjQxNTZGRTAwOTJGNkFFN0U1QjNDRTIzQUQ4Qi5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2pCSzBKemd5dEJWdjRBa3ZhdWZsczg0 anJZcy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84YmZkNjg4Mi1k NmIzLTRhYTgtYmMwYS03MTFkNjhiZDE5OGIvMC84QzEyQjQyNzM4MzJCNDE1NkZF MDA5MkY2QUU3RTVCM0NFMjNBRDhCLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOS8oBXRohufqGB2gnZ2h yL6Egh9T8wFJCl1ORLJzWjEKuvaNkQMcXFP1sPKUcPLUj8S5EzZiuYIpFeLkAlPR w74+3dqnMAUTwNfXgryEDVbvjCHC2p9Mt67Tnp3lZvzvLZQoJSdlpzMbIJRBpEoZ JJmaTvYWkav3b77nHxrAaZh8EMkAQLWq6mNZIjcZ3yPDmLap1URqSR/bQMGZwNfl 466TjtF8k7piExBsgpSChwU37lBcsucYJa3hyYXkOzu0tuzwB0Ud7S3A66VisTD8 yWI8E/yDfQQvFfYFnXcgecATy2S03syMSOZiji15A/aLQ+Pe/K8iiqbPK7BOsayI mQ== -----END CERTIFICATE-----Generated at Tue Sep 9 07:26:19 2025 by rpki-client