$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8070615f-d26d-42e3-a145-5c7b67b2b64e/0/2C12F0A080F021F2BA25BC0C6EA7E06B67AAD05E.mft File: 2C12F0A080F021F2BA25BC0C6EA7E06B67AAD05E.mft (raw, json) Hash identifier: Ck2GZw4uy17wcqqtI4lmb4k2iGm5mR2IK0CF63VfLas= Subject key identifier: 46:9B:F4:0A:27:87:FD:FA:6D:78:A4:CC:14:64:97:A9:80:58:1E:13 Authority key identifier: 2C:12:F0:A0:80:F0:21:F2:BA:25:BC:0C:6E:A7:E0:6B:67:AA:D0:5E Certificate issuer: /CN=2c12f0a080f021f2ba25bc0c6ea7e06b67aad05e Certificate serial: 1399FFCEB89E9C881318B2554EA5533AF831DBF9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LBLwoIDwIfK6JbwMbqfga2eq0F4.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8070615f-d26d-42e3-a145-5c7b67b2b64e/0/2C12F0A080F021F2BA25BC0C6EA7E06B67AAD05E.mft Manifest number: 74 Signing time: Tue 29 Apr 2025 04:02:29 +0000 Manifest this update: Tue 29 Apr 2025 03:57:29 +0000 Manifest next update: Wed 30 Apr 2025 05:08:29 +0000 Files and hashes: 1: 323030313a3637383a6434343a3a2f34382d3438203d3e20323133323739.roa (hash: a2d6hAclWrhx6h6+ACHw0iSYteM3AlSblaeDKRH8jzc=) 2: AS213279.asa (hash: nJRzaMfqdZ5AI+sMn9wPdQBE/Wcrkghpk4PHewl3Wz8=) 3: 2C12F0A080F021F2BA25BC0C6EA7E06B67AAD05E.crl (hash: uDEPfS7jbL9HaC5r/szH0LFgpVdhM0vc+h8/C6zJEhc=) 4: 326131343a623430303a3a2f33322d3332203d3e20323133323739.roa (hash: 5hhgwEfLD9bumu2w7kC2KzlKzBKITTTKNPZHvvEg0u8=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8070615f-d26d-42e3-a145-5c7b67b2b64e/0/2C12F0A080F021F2BA25BC0C6EA7E06B67AAD05E.crl rsync://rsync.paas.rpki.ripe.net/repository/8070615f-d26d-42e3-a145-5c7b67b2b64e/0/2C12F0A080F021F2BA25BC0C6EA7E06B67AAD05E.mft rsync://rpki.ripe.net/repository/DEFAULT/LBLwoIDwIfK6JbwMbqfga2eq0F4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 30 Apr 2025 05:08:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:99:ff:ce:b8:9e:9c:88:13:18:b2:55:4e:a5:53:3a:f8:31:db:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2c12f0a080f021f2ba25bc0c6ea7e06b67aad05e Validity Not Before: Apr 29 03:57:29 2025 GMT Not After : Apr 30 05:08:29 2025 GMT Subject: CN=469BF40A2787FDFA6D78A4CC146497A980581E13 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:da:67:cc:ec:a3:68:f1:a3:75:66:cf:de:6c: 1d:d2:f7:67:3f:05:42:3f:2d:87:8a:c9:98:96:89: d7:fa:70:c1:cf:24:0f:d7:06:dd:28:11:37:3c:c0: 32:3f:7d:06:98:3c:ac:78:e7:1a:74:57:6f:67:6b: 60:cb:2d:41:3b:ea:e6:4a:05:02:ee:7f:ec:28:70: 0f:6c:ff:fd:0d:6f:6c:2e:b0:37:93:95:38:d6:5d: d8:a5:64:c0:28:e0:53:9a:5b:d7:71:6f:2e:07:b5: 8b:2a:2a:48:bc:7a:94:9b:a0:97:1e:a4:81:09:0c: 0c:1a:3e:87:9e:82:2e:c7:60:56:5f:35:3a:a5:ca: 2c:f0:95:02:ca:19:e9:d4:1c:98:bc:0d:01:25:26: ae:8d:86:3f:5c:49:9a:ed:58:23:57:0b:11:50:ce: 81:02:53:00:41:89:d4:b4:e8:85:16:39:02:5d:eb: 43:c0:27:cc:42:d9:73:e3:07:c4:45:64:8d:53:10: ac:0d:d1:65:b3:ac:4f:5b:02:e2:4f:2f:04:2a:99: 0c:18:ca:53:ee:14:eb:c4:0b:18:db:8f:6a:15:cc: 65:93:3c:f6:e5:58:5e:5c:cd:d8:11:02:ae:72:16: 36:3e:c8:d8:e7:7b:78:32:e7:fe:0b:a9:4a:13:83: a2:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:9B:F4:0A:27:87:FD:FA:6D:78:A4:CC:14:64:97:A9:80:58:1E:13 X509v3 Authority Key Identifier: keyid:2C:12:F0:A0:80:F0:21:F2:BA:25:BC:0C:6E:A7:E0:6B:67:AA:D0:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/8070615f-d26d-42e3-a145-5c7b67b2b64e/0/2C12F0A080F021F2BA25BC0C6EA7E06B67AAD05E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LBLwoIDwIfK6JbwMbqfga2eq0F4.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8070615f-d26d-42e3-a145-5c7b67b2b64e/0/2C12F0A080F021F2BA25BC0C6EA7E06B67AAD05E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:86:e0:1b:85:b9:dc:23:6a:63:cd:de:20:a0:f6:54:f7:e0: 54:f5:da:aa:1d:85:b2:43:49:38:2d:08:d3:af:30:a9:d3:0d: bf:ea:41:35:b8:b4:e0:a5:a2:07:ac:a0:62:35:96:73:98:9e: c1:f3:a8:0c:44:3e:30:65:ba:ea:7a:17:78:18:eb:c6:7c:2f: 17:d7:fd:49:2b:dc:7c:57:b3:8f:2e:6a:10:fc:96:3c:4d:4f: d8:61:ca:95:f7:54:9d:57:87:22:0f:54:3a:b7:78:0b:e2:18: 7d:6a:b0:c6:bc:09:5f:5e:2d:9c:59:05:fa:06:b6:ee:d9:f3: f0:9a:d9:23:b6:98:4e:ba:a1:d5:5f:0a:79:84:60:4d:38:ef: ae:4b:36:0a:16:02:19:31:7e:19:1b:dd:d2:fa:ad:78:28:30: 05:43:d1:25:31:7f:63:6a:57:93:c9:8d:5e:53:2a:00:ff:86: 7c:1c:1e:14:42:f7:15:e5:91:01:28:ad:f1:22:e2:b4:8a:1d: c9:c9:a4:81:d8:2d:69:00:ba:44:5c:f5:d7:82:79:b0:a1:ee: 97:8d:9b:fc:c1:15:a2:c9:a5:ed:b7:82:80:26:40:99:fb:42: 2d:2b:82:e4:65:6f:bf:fd:a7:d4:6f:5f:c1:f0:06:40:21:90: 4c:05:05:09 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUE5n/zrienIgTGLJVTqVTOvgx2/kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMmMxMmYwYTA4MGYwMjFmMmJhMjViYzBjNmVhN2UwNmI2 N2FhZDA1ZTAeFw0yNTA0MjkwMzU3MjlaFw0yNTA0MzAwNTA4MjlaMDMxMTAvBgNV BAMTKDQ2OUJGNDBBMjc4N0ZERkE2RDc4QTRDQzE0NjQ5N0E5ODA1ODFFMTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCH2mfM7KNo8aN1Zs/ebB3S92c/ BUI/LYeKyZiWidf6cMHPJA/XBt0oETc8wDI/fQaYPKx45xp0V29na2DLLUE76uZK BQLuf+wocA9s//0Nb2wusDeTlTjWXdilZMAo4FOaW9dxby4HtYsqKki8epSboJce pIEJDAwaPoeegi7HYFZfNTqlyizwlQLKGenUHJi8DQElJq6Nhj9cSZrtWCNXCxFQ zoECUwBBidS06IUWOQJd60PAJ8xC2XPjB8RFZI1TEKwN0WWzrE9bAuJPLwQqmQwY ylPuFOvECxjbj2oVzGWTPPblWF5czdgRAq5yFjY+yNjne3gy5/4LqUoTg6KDAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQURpv0CieH/fpteKTMFGSXqYBYHhMwHwYDVR0j BBgwFoAULBLwoIDwIfK6JbwMbqfga2eq0F4wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvODA3MDYxNWYtZDI2ZC00MmUzLWExNDUtNWM3YjY3YjJi NjRlLzAvMkMxMkYwQTA4MEYwMjFGMkJBMjVCQzBDNkVBN0UwNkI2N0FBRDA1RS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0xCTHdvSUR3SWZLNkpid01icWZnYTJl cTBGNC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84MDcwNjE1Zi1k MjZkLTQyZTMtYTE0NS01YzdiNjdiMmI2NGUvMC8yQzEyRjBBMDgwRjAyMUYyQkEy NUJDMEM2RUE3RTA2QjY3QUFEMDVFLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXobgG4W53CNqY83eIKD2 VPfgVPXaqh2FskNJOC0I068wqdMNv+pBNbi04KWiB6ygYjWWc5iewfOoDEQ+MGW6 6noXeBjrxnwvF9f9SSvcfFezjy5qEPyWPE1P2GHKlfdUnVeHIg9UOrd4C+IYfWqw xrwJX14tnFkF+ga27tnz8JrZI7aYTrqh1V8KeYRgTTjvrks2ChYCGTF+GRvd0vqt eCgwBUPRJTF/Y2pXk8mNXlMqAP+GfBweFEL3FeWRASit8SLitIodycmkgdgtaQC6 RFz114J5sKHul42b/MEVosml7beCgCZAmftCLSuC5GVvv/2n1G9fwfAGQCGQTAUF CQ== -----END CERTIFICATE-----Generated at Tue Apr 29 14:33:46 2025 by rpki-client