$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8070615f-d26d-42e3-a145-5c7b67b2b64e/0/2C12F0A080F021F2BA25BC0C6EA7E06B67AAD05E.mft File: 2C12F0A080F021F2BA25BC0C6EA7E06B67AAD05E.mft (raw, json) Hash identifier: rX4UFGBPMo9mnrmiqVYeURjNyT7wmHgUW+fXvT3yBfc= Subject key identifier: 6A:AD:57:7B:A2:4D:E9:A5:AB:15:BB:0D:59:CA:06:2D:6F:66:A1:13 Authority key identifier: 2C:12:F0:A0:80:F0:21:F2:BA:25:BC:0C:6E:A7:E0:6B:67:AA:D0:5E Certificate issuer: /CN=2c12f0a080f021f2ba25bc0c6ea7e06b67aad05e Certificate serial: 080AE653C8DD23D7F222728A4371496F9B8F3DAE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LBLwoIDwIfK6JbwMbqfga2eq0F4.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8070615f-d26d-42e3-a145-5c7b67b2b64e/0/2C12F0A080F021F2BA25BC0C6EA7E06B67AAD05E.mft Manifest number: 0170 Signing time: Tue 04 Nov 2025 15:12:16 +0000 Manifest this update: Tue 04 Nov 2025 15:07:16 +0000 Manifest next update: Wed 05 Nov 2025 18:28:16 +0000 Files and hashes: 1: AS213279.asa (hash: nJRzaMfqdZ5AI+sMn9wPdQBE/Wcrkghpk4PHewl3Wz8=) 2: 326131343a623430303a3a2f32392d3438203d3e2030.roa (hash: NhcbptlixcA3mbsPTqMiibAOrNSU1BYwO66fMNiKSfA=) 3: 2C12F0A080F021F2BA25BC0C6EA7E06B67AAD05E.crl (hash: fuOFkkHaWwqDL/J2cHgexEqkA51VKEPWLdolpLQyOec=) 4: 323030313a3637383a6434343a3a2f34382d3438203d3e20323133323739.roa (hash: a2d6hAclWrhx6h6+ACHw0iSYteM3AlSblaeDKRH8jzc=) 5: 326131343a623430303a3a2f32382d3238203d3e20323133323739.roa (hash: OgOX3y2Cb0y0bCTi9m7CKowwwQmHnA0JKK3Fh61rXL0=) 6: 326131343a623430303a3a2f33322d3332203d3e20323133323739.roa (hash: 5hhgwEfLD9bumu2w7kC2KzlKzBKITTTKNPZHvvEg0u8=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8070615f-d26d-42e3-a145-5c7b67b2b64e/0/2C12F0A080F021F2BA25BC0C6EA7E06B67AAD05E.crl rsync://rsync.paas.rpki.ripe.net/repository/8070615f-d26d-42e3-a145-5c7b67b2b64e/0/2C12F0A080F021F2BA25BC0C6EA7E06B67AAD05E.mft rsync://rpki.ripe.net/repository/DEFAULT/LBLwoIDwIfK6JbwMbqfga2eq0F4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 05 Nov 2025 18:28:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:0a:e6:53:c8:dd:23:d7:f2:22:72:8a:43:71:49:6f:9b:8f:3d:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2c12f0a080f021f2ba25bc0c6ea7e06b67aad05e Validity Not Before: Nov 4 15:07:16 2025 GMT Not After : Nov 5 18:28:16 2025 GMT Subject: CN=6AAD577BA24DE9A5AB15BB0D59CA062D6F66A113 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:02:ee:7f:99:31:d2:8c:d3:39:37:40:89:73: 1a:b9:07:e2:a9:74:ca:5d:3a:87:60:d7:45:75:f0: 38:63:71:89:5c:72:e6:0a:4f:3b:70:43:56:da:ae: fd:c2:49:6d:95:3b:7f:e2:66:7c:2d:a9:b2:2b:8b: 65:b3:f5:ea:68:8e:94:d3:3b:89:5e:76:27:de:32: 5c:c3:c8:c6:d7:0b:10:33:07:a1:16:3f:28:0d:fb: 8c:41:05:df:9f:92:f7:00:61:33:a1:9d:7a:e5:e8: 39:03:a7:39:ea:7a:71:7d:92:f1:ea:16:eb:8d:e4: 78:a7:50:99:5d:72:3f:d7:e2:93:4a:40:6e:77:78: 90:d3:f3:95:2a:b9:78:2e:3a:3d:41:51:4d:4f:a7: 41:f7:03:ca:b7:44:9f:f1:ad:8c:22:b2:90:bd:28: 14:21:fc:cc:ee:d1:38:6a:d1:32:5c:6f:68:14:25: c0:f9:13:f8:9f:ed:be:9e:e7:fb:34:b4:40:77:a6: 5f:f5:21:d7:46:a5:57:85:c3:72:e7:d2:ed:92:d8: e4:9b:01:e8:27:18:1a:00:f2:b7:46:af:c3:c4:2a: e4:0b:4f:d1:fb:9d:be:26:5d:e6:9c:8e:61:eb:1d: 25:f2:b6:2c:64:63:96:c5:38:f3:f2:9f:10:cb:e1: 5e:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:AD:57:7B:A2:4D:E9:A5:AB:15:BB:0D:59:CA:06:2D:6F:66:A1:13 X509v3 Authority Key Identifier: keyid:2C:12:F0:A0:80:F0:21:F2:BA:25:BC:0C:6E:A7:E0:6B:67:AA:D0:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/8070615f-d26d-42e3-a145-5c7b67b2b64e/0/2C12F0A080F021F2BA25BC0C6EA7E06B67AAD05E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LBLwoIDwIfK6JbwMbqfga2eq0F4.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8070615f-d26d-42e3-a145-5c7b67b2b64e/0/2C12F0A080F021F2BA25BC0C6EA7E06B67AAD05E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:3c:85:06:7a:dd:65:a8:ab:44:51:dc:8b:fd:2b:20:50:4e: ae:4a:33:d1:bb:9e:53:e7:27:52:54:7e:08:fc:83:77:f6:95: b0:55:1f:ff:3a:03:12:be:5c:19:73:a5:d1:bb:d4:fc:8b:42: e5:d5:e7:1a:6e:61:42:d9:a0:21:98:41:89:9f:a7:59:f3:65: 98:35:5d:5e:4f:38:31:94:92:2c:a9:62:67:96:cc:fd:94:19: a5:78:46:82:53:64:4f:f5:c4:7b:83:c2:b0:ef:8a:46:6a:3e: ff:bd:05:b7:f2:79:1b:8b:0d:a3:9d:9c:8d:13:63:be:94:e7: e7:32:d2:b6:a7:ce:5a:81:d2:b9:e0:be:da:ad:03:b3:ea:3d: 28:b7:03:29:d4:bb:0d:03:72:19:72:33:5f:c4:39:ca:34:60: a0:e4:f7:c4:55:d3:1e:ca:b4:fe:c7:81:7e:47:71:43:b4:44: 29:3c:19:c5:0d:7d:cb:f7:c8:cc:34:2c:0e:26:1f:d6:d4:87: 62:15:65:21:2e:5e:f3:e7:c8:7b:37:15:a4:97:b3:f4:1b:70: 41:3e:6d:d5:a9:62:f3:23:2f:b2:1d:1d:99:71:46:55:c8:cb: 37:04:9b:21:73:42:7a:95:d3:63:dd:9a:9e:12:46:b5:24:96: f4:61:fc:b6 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUCArmU8jdI9fyInKKQ3FJb5uPPa4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMmMxMmYwYTA4MGYwMjFmMmJhMjViYzBjNmVhN2UwNmI2 N2FhZDA1ZTAeFw0yNTExMDQxNTA3MTZaFw0yNTExMDUxODI4MTZaMDMxMTAvBgNV BAMTKDZBQUQ1NzdCQTI0REU5QTVBQjE1QkIwRDU5Q0EwNjJENkY2NkExMTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgAu5/mTHSjNM5N0CJcxq5B+Kp dMpdOodg10V18DhjcYlccuYKTztwQ1barv3CSW2VO3/iZnwtqbIri2Wz9epojpTT O4ledifeMlzDyMbXCxAzB6EWPygN+4xBBd+fkvcAYTOhnXrl6DkDpznqenF9kvHq FuuN5HinUJldcj/X4pNKQG53eJDT85UquXguOj1BUU1Pp0H3A8q3RJ/xrYwispC9 KBQh/Mzu0Thq0TJcb2gUJcD5E/if7b6e5/s0tEB3pl/1IddGpVeFw3Ln0u2S2OSb AegnGBoA8rdGr8PEKuQLT9H7nb4mXeacjmHrHSXytixkY5bFOPPynxDL4V6jAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUaq1Xe6JN6aWrFbsNWcoGLW9moRMwHwYDVR0j BBgwFoAULBLwoIDwIfK6JbwMbqfga2eq0F4wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvODA3MDYxNWYtZDI2ZC00MmUzLWExNDUtNWM3YjY3YjJi NjRlLzAvMkMxMkYwQTA4MEYwMjFGMkJBMjVCQzBDNkVBN0UwNkI2N0FBRDA1RS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0xCTHdvSUR3SWZLNkpid01icWZnYTJl cTBGNC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84MDcwNjE1Zi1k MjZkLTQyZTMtYTE0NS01YzdiNjdiMmI2NGUvMC8yQzEyRjBBMDgwRjAyMUYyQkEy NUJDMEM2RUE3RTA2QjY3QUFEMDVFLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAejyFBnrdZairRFHci/0r IFBOrkoz0bueU+cnUlR+CPyDd/aVsFUf/zoDEr5cGXOl0bvU/ItC5dXnGm5hQtmg IZhBiZ+nWfNlmDVdXk84MZSSLKliZ5bM/ZQZpXhGglNkT/XEe4PCsO+KRmo+/70F t/J5G4sNo52cjRNjvpTn5zLStqfOWoHSueC+2q0Ds+o9KLcDKdS7DQNyGXIzX8Q5 yjRgoOT3xFXTHsq0/seBfkdxQ7REKTwZxQ19y/fIzDQsDiYf1tSHYhVlIS5e8+fI ezcVpJez9BtwQT5t1ali8yMvsh0dmXFGVcjLNwSbIXNCepXTY92anhJGtSSW9GH8 tg== -----END CERTIFICATE-----Generated at Wed Nov 5 06:54:19 2025 by rpki-client