$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8070615f-d26d-42e3-a145-5c7b67b2b64e/0/2C12F0A080F021F2BA25BC0C6EA7E06B67AAD05E.mft File: 2C12F0A080F021F2BA25BC0C6EA7E06B67AAD05E.mft (raw, json) Hash identifier: rcn9VI+bCprl6NNcB+IqSMIIpDoSZavsEKAD6m5pJ/M= Subject key identifier: CF:5A:18:2D:57:F6:1D:03:94:D3:C5:DD:68:9F:84:74:79:B6:0F:1C Authority key identifier: 2C:12:F0:A0:80:F0:21:F2:BA:25:BC:0C:6E:A7:E0:6B:67:AA:D0:5E Certificate issuer: /CN=2c12f0a080f021f2ba25bc0c6ea7e06b67aad05e Certificate serial: 6B7C1B0CFF67464ECBE69A8B496CDCDFE4E6188B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LBLwoIDwIfK6JbwMbqfga2eq0F4.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8070615f-d26d-42e3-a145-5c7b67b2b64e/0/2C12F0A080F021F2BA25BC0C6EA7E06B67AAD05E.mft Manifest number: F6 Signing time: Tue 05 Aug 2025 08:17:51 +0000 Manifest this update: Tue 05 Aug 2025 08:12:51 +0000 Manifest next update: Wed 06 Aug 2025 09:04:51 +0000 Files and hashes: 1: 2C12F0A080F021F2BA25BC0C6EA7E06B67AAD05E.crl (hash: 0dTaXvXfxeecEC8X33rg6AQKPxXkDY82HkaI+T30pjI=) 2: 326131343a623430303a3a2f33322d3332203d3e20323133323739.roa (hash: 5hhgwEfLD9bumu2w7kC2KzlKzBKITTTKNPZHvvEg0u8=) 3: 323030313a3637383a6434343a3a2f34382d3438203d3e20323133323739.roa (hash: a2d6hAclWrhx6h6+ACHw0iSYteM3AlSblaeDKRH8jzc=) 4: AS213279.asa (hash: nJRzaMfqdZ5AI+sMn9wPdQBE/Wcrkghpk4PHewl3Wz8=) 5: 326131343a623430303a3a2f32392d3438203d3e2030.roa (hash: NhcbptlixcA3mbsPTqMiibAOrNSU1BYwO66fMNiKSfA=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8070615f-d26d-42e3-a145-5c7b67b2b64e/0/2C12F0A080F021F2BA25BC0C6EA7E06B67AAD05E.crl rsync://rsync.paas.rpki.ripe.net/repository/8070615f-d26d-42e3-a145-5c7b67b2b64e/0/2C12F0A080F021F2BA25BC0C6EA7E06B67AAD05E.mft rsync://rpki.ripe.net/repository/DEFAULT/LBLwoIDwIfK6JbwMbqfga2eq0F4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 06 Aug 2025 09:04:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:7c:1b:0c:ff:67:46:4e:cb:e6:9a:8b:49:6c:dc:df:e4:e6:18:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2c12f0a080f021f2ba25bc0c6ea7e06b67aad05e Validity Not Before: Aug 5 08:12:51 2025 GMT Not After : Aug 6 09:04:51 2025 GMT Subject: CN=CF5A182D57F61D0394D3C5DD689F847479B60F1C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:b0:da:f8:00:af:e7:64:f0:9b:29:83:25:3b: 72:35:3b:b1:57:47:78:e5:da:cd:6d:f6:e5:42:f1: c6:41:f3:d2:f3:2b:de:93:44:aa:5d:66:89:c0:ff: ee:59:ef:d4:ed:d7:38:9a:72:9c:89:74:dc:c3:9c: c3:a9:a9:7b:0d:d1:31:02:de:85:1b:0a:7c:2f:2e: ca:8f:61:1c:40:2d:bf:e2:19:3e:46:20:16:8c:f1: b3:95:19:f7:c3:99:42:6f:d6:73:a2:b9:73:df:29: ea:8c:4b:ba:91:4e:21:93:e6:29:3c:30:05:e1:45: 6e:b8:71:26:2c:97:5c:36:b8:1f:e6:af:e4:1f:21: a6:53:99:e1:79:a6:bf:17:de:ab:ca:46:3c:64:18: fc:0c:eb:63:e7:34:73:32:4c:e1:71:c7:c8:45:43: 87:f0:0a:b1:03:9e:01:8f:47:b8:bb:41:fe:3b:be: 5c:21:a5:e8:f6:e7:6d:a3:25:c5:8c:02:a0:fd:bc: 25:f7:64:07:bc:2a:51:60:ef:ea:7c:14:e7:d9:48: 82:7d:54:3a:c6:45:e7:04:5e:f7:b0:e2:9a:33:b8: 26:6b:d7:ad:7b:7b:50:cc:91:7b:64:9d:d9:c1:1b: eb:c4:6b:69:bc:d2:41:4b:63:a1:1d:f5:26:9c:7e: a7:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:5A:18:2D:57:F6:1D:03:94:D3:C5:DD:68:9F:84:74:79:B6:0F:1C X509v3 Authority Key Identifier: keyid:2C:12:F0:A0:80:F0:21:F2:BA:25:BC:0C:6E:A7:E0:6B:67:AA:D0:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/8070615f-d26d-42e3-a145-5c7b67b2b64e/0/2C12F0A080F021F2BA25BC0C6EA7E06B67AAD05E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LBLwoIDwIfK6JbwMbqfga2eq0F4.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8070615f-d26d-42e3-a145-5c7b67b2b64e/0/2C12F0A080F021F2BA25BC0C6EA7E06B67AAD05E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 50:a2:00:2c:4f:9b:48:b2:ef:17:1f:25:64:df:ad:2b:f1:d7: 6b:a1:55:ac:33:8d:f5:67:c0:79:a3:67:9d:fe:74:69:d7:86: c6:ab:7b:0a:50:99:e4:89:2f:99:52:58:7d:49:b0:11:1a:7e: 6c:a0:b3:93:2c:4e:08:f8:b2:f0:8c:40:a2:dc:df:9c:fd:6d: 86:7c:c5:fd:87:04:dd:dd:05:82:c1:6e:d3:6a:40:f8:3c:7d: 6f:64:e7:56:ff:2c:b7:63:16:0d:f0:e2:df:2f:8b:32:6c:f6: 02:8d:e0:17:a0:05:ee:7f:21:b7:fa:ac:1c:2a:ab:36:4b:55: 47:b3:04:71:09:1b:d9:19:63:c9:67:9d:f4:c3:5c:96:f9:3d: ea:67:d5:c1:0c:68:35:78:45:45:a7:bb:c9:4a:c0:b8:09:3c: 73:5a:fb:4d:74:c1:ab:06:24:bd:96:dd:9a:52:6b:b5:3c:38: 72:67:5e:f5:4e:a9:6f:da:ea:9f:85:08:67:ad:6a:a2:c2:b3: 95:56:c4:7b:f5:90:8e:cf:4a:58:d0:63:98:ae:b3:04:fc:64: b3:bc:a9:73:3b:0b:fd:8c:98:d6:10:57:c7:b4:91:c9:59:7f: a6:8b:40:93:f4:43:d4:e5:bf:ad:e8:d4:6b:b5:84:8d:d4:1d: 49:53:a0:1a -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUa3wbDP9nRk7L5pqLSWzc3+TmGIswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMmMxMmYwYTA4MGYwMjFmMmJhMjViYzBjNmVhN2UwNmI2 N2FhZDA1ZTAeFw0yNTA4MDUwODEyNTFaFw0yNTA4MDYwOTA0NTFaMDMxMTAvBgNV BAMTKENGNUExODJENTdGNjFEMDM5NEQzQzVERDY4OUY4NDc0NzlCNjBGMUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmsNr4AK/nZPCbKYMlO3I1O7FX R3jl2s1t9uVC8cZB89LzK96TRKpdZonA/+5Z79Tt1ziacpyJdNzDnMOpqXsN0TEC 3oUbCnwvLsqPYRxALb/iGT5GIBaM8bOVGffDmUJv1nOiuXPfKeqMS7qRTiGT5ik8 MAXhRW64cSYsl1w2uB/mr+QfIaZTmeF5pr8X3qvKRjxkGPwM62PnNHMyTOFxx8hF Q4fwCrEDngGPR7i7Qf47vlwhpej2522jJcWMAqD9vCX3ZAe8KlFg7+p8FOfZSIJ9 VDrGRecEXvew4pozuCZr1617e1DMkXtkndnBG+vEa2m80kFLY6Ed9SacfqcXAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUz1oYLVf2HQOU08XdaJ+EdHm2DxwwHwYDVR0j BBgwFoAULBLwoIDwIfK6JbwMbqfga2eq0F4wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvODA3MDYxNWYtZDI2ZC00MmUzLWExNDUtNWM3YjY3YjJi NjRlLzAvMkMxMkYwQTA4MEYwMjFGMkJBMjVCQzBDNkVBN0UwNkI2N0FBRDA1RS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0xCTHdvSUR3SWZLNkpid01icWZnYTJl cTBGNC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84MDcwNjE1Zi1k MjZkLTQyZTMtYTE0NS01YzdiNjdiMmI2NGUvMC8yQzEyRjBBMDgwRjAyMUYyQkEy NUJDMEM2RUE3RTA2QjY3QUFEMDVFLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUKIALE+bSLLvFx8lZN+t K/HXa6FVrDON9WfAeaNnnf50adeGxqt7ClCZ5IkvmVJYfUmwERp+bKCzkyxOCPiy 8IxAotzfnP1thnzF/YcE3d0FgsFu02pA+Dx9b2TnVv8st2MWDfDi3y+LMmz2Ao3g F6AF7n8ht/qsHCqrNktVR7MEcQkb2RljyWed9MNclvk96mfVwQxoNXhFRae7yUrA uAk8c1r7TXTBqwYkvZbdmlJrtTw4cmde9U6pb9rqn4UIZ61qosKzlVbEe/WQjs9K WNBjmK6zBPxks7ypczsL/YyY1hBXx7SRyVl/potAk/RD1OW/rejUa7WEjdQdSVOg Gg== -----END CERTIFICATE-----Generated at Tue Aug 5 17:09:32 2025 by rpki-client