$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8bfd6882-d6b3-4aa8-bc0a-711d68bd198b/0/8C12B4273832B4156FE0092F6AE7E5B3CE23AD8B.mft File: 8C12B4273832B4156FE0092F6AE7E5B3CE23AD8B.mft (raw, json) Hash identifier: A/fx/VvmIsMMznZs916Mk2VhsPXWYz80fzA/YIkuzKM= Subject key identifier: EE:E5:A6:02:B7:4F:D9:AC:A2:50:60:59:6E:58:D5:45:80:00:CD:73 Authority key identifier: 8C:12:B4:27:38:32:B4:15:6F:E0:09:2F:6A:E7:E5:B3:CE:23:AD:8B Certificate issuer: /CN=8c12b4273832b4156fe0092f6ae7e5b3ce23ad8b Certificate serial: 7AB9D1636C10A5E610C2048521632A2085EA2D3A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jBK0JzgytBVv4Akvaufls84jrYs.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8bfd6882-d6b3-4aa8-bc0a-711d68bd198b/0/8C12B4273832B4156FE0092F6AE7E5B3CE23AD8B.mft Manifest number: 02E1 Signing time: Sun 26 Oct 2025 09:54:10 +0000 Manifest this update: Sun 26 Oct 2025 09:49:10 +0000 Manifest next update: Mon 27 Oct 2025 11:55:10 +0000 Files and hashes: 1: 3231322e3130332e34362e302f32342d3234203d3e2039333034.roa (hash: ZiA8Cde6s2TKghms5u18G3ZVs8EUkbF+SgM6k/613IM=) 2: 34352e39352e38312e302f32342d3234203d3e20383334.roa (hash: CfCdj5k+Lj5zHQCoFXqC9dWCvLUmgOEX9Bq56Zw8pDc=) 3: 3138352e3234302e3130362e302f32342d3234203d3e20323134343538.roa (hash: 1BInd1OedKcqXcFEvGswCnCL2u3VREZrv7xXz/oRjOg=) 4: 3231322e3130332e34342e302f32342d3234203d3e20323133393138.roa (hash: qGJQiTgIvP4Ve1lRuA50bfURyANdu4X5JKcPosVvvQA=) 5: 3138352e3234302e3130372e302f32342d3234203d3e203230343733.roa (hash: JMPMOpLF1bcIvbG82aj+pie4xIbRE8z3aJEr+Ha5GDQ=) 6: 3139332e32342e3233342e302f32332d3234203d3e20383334.roa (hash: 3tE9vwLlFDIuslyefoYRrNlvD1gbmu6ntzeczb8Bts0=) 7: 8C12B4273832B4156FE0092F6AE7E5B3CE23AD8B.crl (hash: DL5WA1Cqf+wHlfgZdqPluwEPgSq6hT4At+Fy9C8N6M8=) 8: 3138352e3234302e3130352e302f32342d3234203d3e203431353634.roa (hash: TlWGN33+lROz/SyNNq5fptfqzBonbreTLNbM3qDOA4Q=) 9: 3231322e3130332e34372e302f32342d3234203d3e20383334.roa (hash: 7EFeqqtN+B2ApgmMDDuqP2FR80lZRbeYex9btxUFGEc=) 10: 3231322e3130332e34342e302f32342d3234203d3e20323131343834.roa (hash: JBx8ym7JHWLmUGZKmy6bIQw3WR5rhPzAi99IbVvWGag=) 11: 3231322e3130332e34352e302f32342d3234203d3e2038303735.roa (hash: fHVIMx8xlYqpN0AXQfWLm0vqOUAEGFXc3sBROHoQyYA=) 12: 34352e39352e38302e302f32342d3234203d3e203136323736.roa (hash: 3x0cRO+g1bZbRHut+QAG7pwDzd80m15dxHMNduCBIhg=) 13: 39312e3139302e3135372e302f32342d3234203d3e20323130383330.roa (hash: uxCs+vRLf89Iqe2Vg3VmQVaqgZcbd6t3ZZRDH3hDvaY=) 14: 3138352e3234302e3130342e302f32342d3234203d3e20323130353338.roa (hash: T9Q1VqRTWLWUsHiQ8nGpX/B35ktvbCl8rYqsuD5dV38=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8bfd6882-d6b3-4aa8-bc0a-711d68bd198b/0/8C12B4273832B4156FE0092F6AE7E5B3CE23AD8B.crl rsync://rsync.paas.rpki.ripe.net/repository/8bfd6882-d6b3-4aa8-bc0a-711d68bd198b/0/8C12B4273832B4156FE0092F6AE7E5B3CE23AD8B.mft rsync://rpki.ripe.net/repository/DEFAULT/jBK0JzgytBVv4Akvaufls84jrYs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 27 Oct 2025 11:55:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:b9:d1:63:6c:10:a5:e6:10:c2:04:85:21:63:2a:20:85:ea:2d:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8c12b4273832b4156fe0092f6ae7e5b3ce23ad8b Validity Not Before: Oct 26 09:49:10 2025 GMT Not After : Oct 27 11:55:10 2025 GMT Subject: CN=EEE5A602B74FD9ACA25060596E58D5458000CD73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:ef:2e:6f:ce:2e:36:0d:36:a2:89:27:d9:5e: db:f1:55:bf:3c:e2:4d:5e:98:31:ac:fa:72:ae:57: ba:6b:9d:88:b7:e2:02:bc:f4:43:04:93:39:f2:37: 60:a2:0a:34:ad:6b:c7:56:82:b8:32:a3:ec:8a:40: 7a:49:c3:5f:b5:e6:5a:ec:7f:b6:70:9b:d1:85:e2: 05:aa:c5:9b:72:4b:b9:58:a7:51:28:96:16:1f:4b: d3:bd:0b:71:53:93:45:8b:c8:8d:e2:dd:c8:08:4a: ff:c7:04:e4:4f:1f:3b:25:1d:95:a4:a8:e1:a9:df: 6f:12:7e:8c:4a:b4:81:a5:ce:db:e7:ca:be:89:7e: b2:41:fb:7d:49:80:5c:95:6b:e9:0f:b3:8d:34:f3: 0e:fc:f7:51:5c:51:0e:39:a5:11:f1:e9:47:87:08: d4:2c:91:a5:e5:33:92:c1:5f:8d:be:26:b8:fe:e2: a9:40:eb:fd:ac:4c:6b:65:23:cc:a8:d8:8a:5f:69: 03:72:8f:28:b7:8e:fe:db:aa:c3:39:e3:3a:f5:fd: 5a:52:e0:b2:fc:5e:39:8c:50:19:99:19:80:66:cf: a3:f4:66:33:0a:07:2c:64:24:51:60:68:25:7d:bc: 72:fe:30:ad:56:58:21:18:fb:62:2d:8d:7d:55:97: 52:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:E5:A6:02:B7:4F:D9:AC:A2:50:60:59:6E:58:D5:45:80:00:CD:73 X509v3 Authority Key Identifier: keyid:8C:12:B4:27:38:32:B4:15:6F:E0:09:2F:6A:E7:E5:B3:CE:23:AD:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/8bfd6882-d6b3-4aa8-bc0a-711d68bd198b/0/8C12B4273832B4156FE0092F6AE7E5B3CE23AD8B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jBK0JzgytBVv4Akvaufls84jrYs.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8bfd6882-d6b3-4aa8-bc0a-711d68bd198b/0/8C12B4273832B4156FE0092F6AE7E5B3CE23AD8B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:b1:6b:26:2c:69:2d:3d:8e:94:33:7d:38:05:ea:ac:e3:8d: 96:cf:79:3f:ca:74:25:d4:4c:c6:e9:6a:3a:01:18:9c:a9:ae: ca:34:c4:7b:4d:0b:6b:76:f3:f4:4b:74:e9:9f:d7:aa:be:ef: db:d6:4d:15:45:fe:9d:7e:fd:13:83:c5:05:ea:37:63:26:44: 8e:25:7b:db:9e:7a:61:f0:25:d9:62:5e:e3:1c:9d:69:0c:75: 40:76:2a:28:08:ee:78:f9:23:c3:63:26:47:a1:d5:99:da:f5: ac:78:3f:0d:26:db:a4:c3:78:0f:35:96:f6:d4:1e:d2:14:b3: 06:4a:5a:e0:1d:10:bf:3d:2a:1f:2f:be:cb:f7:31:ea:cc:28: e5:c8:c2:59:84:b3:1c:32:3e:ac:08:5b:1b:10:ca:1b:a5:48: 46:da:50:c4:c8:94:de:98:e7:b3:6f:95:4b:54:bf:c3:13:56: be:aa:d5:61:be:69:3a:37:ca:8e:30:30:c4:7a:b5:6b:f5:95: 5a:ed:be:ee:92:e5:36:e9:6b:36:45:c7:cf:91:60:ef:4c:b1: 4c:f3:9a:eb:db:fd:f8:07:84:29:c0:91:c5:5c:93:16:82:1f: 7f:63:8b:bd:f1:c9:e4:7e:be:4f:f0:db:b6:81:72:bf:83:ae: 54:3b:cd:e9 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUernRY2wQpeYQwgSFIWMqIIXqLTowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOGMxMmI0MjczODMyYjQxNTZmZTAwOTJmNmFlN2U1YjNj ZTIzYWQ4YjAeFw0yNTEwMjYwOTQ5MTBaFw0yNTEwMjcxMTU1MTBaMDMxMTAvBgNV BAMTKEVFRTVBNjAyQjc0RkQ5QUNBMjUwNjA1OTZFNThENTQ1ODAwMENENzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCd7y5vzi42DTaiiSfZXtvxVb88 4k1emDGs+nKuV7prnYi34gK89EMEkznyN2CiCjSta8dWgrgyo+yKQHpJw1+15lrs f7Zwm9GF4gWqxZtyS7lYp1EolhYfS9O9C3FTk0WLyI3i3cgISv/HBORPHzslHZWk qOGp328SfoxKtIGlztvnyr6JfrJB+31JgFyVa+kPs4008w7891FcUQ45pRHx6UeH CNQskaXlM5LBX42+Jrj+4qlA6/2sTGtlI8yo2IpfaQNyjyi3jv7bqsM54zr1/VpS 4LL8XjmMUBmZGYBmz6P0ZjMKByxkJFFgaCV9vHL+MK1WWCEY+2ItjX1Vl1LjAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQU7uWmArdP2ayiUGBZbljVRYAAzXMwHwYDVR0j BBgwFoAUjBK0JzgytBVv4Akvaufls84jrYswDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOGJmZDY4ODItZDZiMy00YWE4LWJjMGEtNzExZDY4YmQx OThiLzAvOEMxMkI0MjczODMyQjQxNTZGRTAwOTJGNkFFN0U1QjNDRTIzQUQ4Qi5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2pCSzBKemd5dEJWdjRBa3ZhdWZsczg0 anJZcy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84YmZkNjg4Mi1k NmIzLTRhYTgtYmMwYS03MTFkNjhiZDE5OGIvMC84QzEyQjQyNzM4MzJCNDE1NkZF MDA5MkY2QUU3RTVCM0NFMjNBRDhCLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFrFrJixpLT2OlDN9OAXq rOONls95P8p0JdRMxulqOgEYnKmuyjTEe00La3bz9Et06Z/Xqr7v29ZNFUX+nX79 E4PFBeo3YyZEjiV72556YfAl2WJe4xydaQx1QHYqKAjuePkjw2MmR6HVmdr1rHg/ DSbbpMN4DzWW9tQe0hSzBkpa4B0Qvz0qHy++y/cx6swo5cjCWYSzHDI+rAhbGxDK G6VIRtpQxMiU3pjns2+VS1S/wxNWvqrVYb5pOjfKjjAwxHq1a/WVWu2+7pLlNulr NkXHz5Fg70yxTPOa69v9+AeEKcCRxVyTFoIff2OLvfHJ5H6+T/DbtoFyv4OuVDvN 6Q== -----END CERTIFICATE-----Generated at Mon Oct 27 04:34:49 2025 by rpki-client