$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8bfd6882-d6b3-4aa8-bc0a-711d68bd198b/0/8C12B4273832B4156FE0092F6AE7E5B3CE23AD8B.mft File: 8C12B4273832B4156FE0092F6AE7E5B3CE23AD8B.mft (raw, json) Hash identifier: 1ilnTC5CB34iD1edYVMIDIFiWE7hpDuaG1g7X5an52I= Subject key identifier: 2F:D9:9B:8B:9A:09:00:7A:45:FB:31:72:40:B4:AA:A9:7E:F3:BD:E5 Authority key identifier: 8C:12:B4:27:38:32:B4:15:6F:E0:09:2F:6A:E7:E5:B3:CE:23:AD:8B Certificate issuer: /CN=8c12b4273832b4156fe0092f6ae7e5b3ce23ad8b Certificate serial: 1A473D47B99B44E5879EF49C9C7812044656BF91 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jBK0JzgytBVv4Akvaufls84jrYs.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8bfd6882-d6b3-4aa8-bc0a-711d68bd198b/0/8C12B4273832B4156FE0092F6AE7E5B3CE23AD8B.mft Manifest number: 0213 Signing time: Fri 06 Jun 2025 19:12:32 +0000 Manifest this update: Fri 06 Jun 2025 19:07:32 +0000 Manifest next update: Sat 07 Jun 2025 21:53:32 +0000 Files and hashes: 1: 34352e39352e38312e302f32342d3234203d3e203239383032.roa (hash: RSLVUL+AislPXW7KHmpbzgP/rzQAkGuHFrgP4qIPD94=) 2: 3138352e3234302e3130342e302f32342d3234203d3e20323130353338.roa (hash: e7DAYp4SHfxn2VHLApclYeubQioRqGakPF4YwyLlJQg=) 3: 3138352e3234302e3130352e302f32342d3234203d3e20323135323837.roa (hash: +0THkzX29inBKKwe48Y2pKEbomX7avoCZF5U6SDswlY=) 4: 3231322e3130332e34372e302f32342d3234203d3e203630313137.roa (hash: YdIRouunEJ7v7O6adrWSPqBia6eTO11BexNozDCWbfw=) 5: 8C12B4273832B4156FE0092F6AE7E5B3CE23AD8B.crl (hash: RccR5EX9o6jD6G1hFTiFZNHQXiJ3BfPVFzxZ4U1hgZs=) 6: 34352e39352e38302e302f32342d3234203d3e203136323736.roa (hash: 3x0cRO+g1bZbRHut+QAG7pwDzd80m15dxHMNduCBIhg=) 7: 34352e39352e38322e302f32332d3234203d3e20313734.roa (hash: j5uBx1ZwzePSy8f9EGQJPGu8wElQLvhVLCemoigNpZM=) 8: 3231322e3130332e34352e302f32342d3234203d3e2038303735.roa (hash: fHVIMx8xlYqpN0AXQfWLm0vqOUAEGFXc3sBROHoQyYA=) 9: 3139332e32342e3233352e302f32342d3234203d3e203630373831.roa (hash: 3IIPnO8jnB/C9bfC+8H124jFOjjxVU8ltj/gUK5jsA4=) 10: 3138352e3234302e3130372e302f32342d3234203d3e20323135333034.roa (hash: Kgf8wBPJNXdSfK4BtuP3v6qDzrmpjRHzp1OmZMiqMVk=) 11: 3138352e3234302e3130372e302f32342d3234203d3e203336353330.roa (hash: +aP4/yrjDfXMUvY2aoslM1y69SiDmKFLNj/CHXaFL2o=) 12: 3231322e3130332e34342e302f32342d3234203d3e20323133393138.roa (hash: qGJQiTgIvP4Ve1lRuA50bfURyANdu4X5JKcPosVvvQA=) 13: 3138352e3234302e3130362e302f32342d3234203d3e20323134343538.roa (hash: A4xSoaJgKGvgYyxTiRaQc7hyiiMELV+dvyPZYNnypk4=) 14: 3139332e32342e3233342e302f32342d3234203d3e20383334.roa (hash: wDn4WvWEnl0ktIwomfuSX0xxTMgnjS6eS37UfP6tuk8=) 15: 3231322e3130332e34362e302f32342d3234203d3e203531303832.roa (hash: 2F+hMcxUeRbuMZ154QcBZjgDbx0tCTkT+4d5LpArwfo=) 16: 39312e3139302e3135372e302f32342d3234203d3e20323130383330.roa (hash: LHHDMQAiPEKdKz+17Sj/aubO3T0fJoOtFfvF63ozlF8=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8bfd6882-d6b3-4aa8-bc0a-711d68bd198b/0/8C12B4273832B4156FE0092F6AE7E5B3CE23AD8B.crl rsync://rsync.paas.rpki.ripe.net/repository/8bfd6882-d6b3-4aa8-bc0a-711d68bd198b/0/8C12B4273832B4156FE0092F6AE7E5B3CE23AD8B.mft rsync://rpki.ripe.net/repository/DEFAULT/jBK0JzgytBVv4Akvaufls84jrYs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 07 Jun 2025 15:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:47:3d:47:b9:9b:44:e5:87:9e:f4:9c:9c:78:12:04:46:56:bf:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8c12b4273832b4156fe0092f6ae7e5b3ce23ad8b Validity Not Before: Jun 6 19:07:32 2025 GMT Not After : Jun 7 21:53:32 2025 GMT Subject: CN=2FD99B8B9A09007A45FB317240B4AAA97EF3BDE5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:e2:b0:62:13:00:dc:36:62:e6:94:1f:63:c0: 67:32:7a:36:e3:af:fc:3f:67:68:e4:62:bd:88:c8: c4:f3:f4:53:80:71:ab:d1:90:d3:24:b7:18:82:0d: df:3c:ad:02:04:cf:e8:f7:4a:dc:30:5d:e9:f7:4f: 54:4d:5f:15:35:9a:6c:61:65:c7:58:7d:e8:20:32: 46:11:73:2b:a8:65:1c:7f:81:a3:1c:5f:73:87:b1: 60:f6:99:10:52:f9:89:44:5f:3a:32:a1:e0:bf:fb: e1:ea:3f:5d:61:08:b3:87:13:59:3f:60:fa:02:cf: d6:2e:d9:39:a6:d8:67:6d:da:15:92:e4:d6:8a:86: 18:ee:fa:0b:84:b4:40:8a:c9:6e:82:d6:96:1c:a8: 2d:5d:c7:eb:86:0e:95:e7:81:05:1c:35:1b:e9:03: e3:a1:dd:c4:2b:dc:1f:27:f4:52:37:f9:e2:e9:18: 76:a1:ec:42:40:fd:69:20:f7:21:0d:ba:76:2e:8d: bd:c2:a7:d1:e6:ca:41:b8:08:98:35:ce:7c:7d:7e: 97:0b:bd:c1:a7:74:24:30:8d:c9:9b:4d:d5:07:53: 41:84:09:b2:f7:76:ac:8e:c5:b6:92:2f:a5:c7:eb: 19:7b:73:12:5b:3e:03:a7:9a:15:6b:36:e4:98:49: 50:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:D9:9B:8B:9A:09:00:7A:45:FB:31:72:40:B4:AA:A9:7E:F3:BD:E5 X509v3 Authority Key Identifier: keyid:8C:12:B4:27:38:32:B4:15:6F:E0:09:2F:6A:E7:E5:B3:CE:23:AD:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/8bfd6882-d6b3-4aa8-bc0a-711d68bd198b/0/8C12B4273832B4156FE0092F6AE7E5B3CE23AD8B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jBK0JzgytBVv4Akvaufls84jrYs.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8bfd6882-d6b3-4aa8-bc0a-711d68bd198b/0/8C12B4273832B4156FE0092F6AE7E5B3CE23AD8B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:91:6c:45:48:b1:7e:48:71:7d:79:8d:31:b5:bc:d4:8e:31: 4a:e8:01:8b:3f:26:8c:56:18:dc:76:89:b1:9d:80:c5:c4:05: 05:6e:b3:53:58:82:4c:f5:f1:61:83:a6:15:8c:22:07:c4:a3: 0c:80:2d:67:14:ee:43:47:c8:df:92:c8:95:01:ae:25:89:b4: 38:23:a4:08:64:1d:b0:f8:cd:7f:d8:48:d1:3a:56:2d:cd:c7: 90:8a:fd:ae:49:05:12:a0:17:39:61:82:b2:fa:ca:62:50:62: a9:91:c0:17:de:5e:4d:de:6a:9c:80:48:f6:a9:40:ca:32:63: 3e:93:57:00:23:18:ae:93:1f:f8:68:3e:4a:2b:ee:1c:07:a3: f0:3c:10:44:99:4e:8f:69:a2:39:a5:c3:8c:b0:65:eb:c0:7b: e3:65:9d:bc:11:3b:d1:d6:ec:3c:66:25:83:c0:89:50:6d:cc: 82:a0:67:56:51:d7:41:73:ee:1f:86:62:e5:35:f2:fc:6d:36: 0c:aa:97:ce:0d:84:04:5f:f3:5d:3c:1c:94:ab:b4:f3:15:25: a0:be:37:e0:70:86:8d:50:d7:b1:cf:1d:3e:b0:8f:59:aa:83: d9:4c:b8:ae:e6:94:1b:16:28:43:9c:c0:fc:c3:62:8e:71:b6: 33:9c:8a:83 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUGkc9R7mbROWHnvScnHgSBEZWv5EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOGMxMmI0MjczODMyYjQxNTZmZTAwOTJmNmFlN2U1YjNj ZTIzYWQ4YjAeFw0yNTA2MDYxOTA3MzJaFw0yNTA2MDcyMTUzMzJaMDMxMTAvBgNV BAMTKDJGRDk5QjhCOUEwOTAwN0E0NUZCMzE3MjQwQjRBQUE5N0VGM0JERTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/4rBiEwDcNmLmlB9jwGcyejbj r/w/Z2jkYr2IyMTz9FOAcavRkNMktxiCDd88rQIEz+j3StwwXen3T1RNXxU1mmxh ZcdYfeggMkYRcyuoZRx/gaMcX3OHsWD2mRBS+YlEXzoyoeC/++HqP11hCLOHE1k/ YPoCz9Yu2Tmm2Gdt2hWS5NaKhhju+guEtECKyW6C1pYcqC1dx+uGDpXngQUcNRvp A+Oh3cQr3B8n9FI3+eLpGHah7EJA/Wkg9yENunYujb3Cp9HmykG4CJg1znx9fpcL vcGndCQwjcmbTdUHU0GECbL3dqyOxbaSL6XH6xl7cxJbPgOnmhVrNuSYSVATAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUL9mbi5oJAHpF+zFyQLSqqX7zveUwHwYDVR0j BBgwFoAUjBK0JzgytBVv4Akvaufls84jrYswDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOGJmZDY4ODItZDZiMy00YWE4LWJjMGEtNzExZDY4YmQx OThiLzAvOEMxMkI0MjczODMyQjQxNTZGRTAwOTJGNkFFN0U1QjNDRTIzQUQ4Qi5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2pCSzBKemd5dEJWdjRBa3ZhdWZsczg0 anJZcy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84YmZkNjg4Mi1k NmIzLTRhYTgtYmMwYS03MTFkNjhiZDE5OGIvMC84QzEyQjQyNzM4MzJCNDE1NkZF MDA5MkY2QUU3RTVCM0NFMjNBRDhCLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASJFsRUixfkhxfXmNMbW8 1I4xSugBiz8mjFYY3HaJsZ2AxcQFBW6zU1iCTPXxYYOmFYwiB8SjDIAtZxTuQ0fI 35LIlQGuJYm0OCOkCGQdsPjNf9hI0TpWLc3HkIr9rkkFEqAXOWGCsvrKYlBiqZHA F95eTd5qnIBI9qlAyjJjPpNXACMYrpMf+Gg+SivuHAej8DwQRJlOj2miOaXDjLBl 68B742WdvBE70dbsPGYlg8CJUG3MgqBnVlHXQXPuH4Zi5TXy/G02DKqXzg2EBF/z XTwclKu08xUloL434HCGjVDXsc8dPrCPWaqD2Uy4ruaUGxYoQ5zA/MNijnG2M5yK gw== -----END CERTIFICATE-----Generated at Fri Jun 6 23:32:01 2025 by rpki-client