$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8070615f-d26d-42e3-a145-5c7b67b2b64e/0/2C12F0A080F021F2BA25BC0C6EA7E06B67AAD05E.mft File: 2C12F0A080F021F2BA25BC0C6EA7E06B67AAD05E.mft (raw, json) Hash identifier: n4D4PMDk62/5es9cEvVKq1ji7JSt3ktobK36g7U7XSA= Subject key identifier: F7:97:FE:81:C3:9D:52:EF:7F:17:F5:1F:C0:6B:D5:D7:EB:CB:19:EA Authority key identifier: 2C:12:F0:A0:80:F0:21:F2:BA:25:BC:0C:6E:A7:E0:6B:67:AA:D0:5E Certificate issuer: /CN=2c12f0a080f021f2ba25bc0c6ea7e06b67aad05e Certificate serial: 497C0903A093F1BA6EB8EF06011E286070337BFD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LBLwoIDwIfK6JbwMbqfga2eq0F4.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8070615f-d26d-42e3-a145-5c7b67b2b64e/0/2C12F0A080F021F2BA25BC0C6EA7E06B67AAD05E.mft Manifest number: B1 Signing time: Fri 13 Jun 2025 13:20:15 +0000 Manifest this update: Fri 13 Jun 2025 13:15:15 +0000 Manifest next update: Sat 14 Jun 2025 16:35:15 +0000 Files and hashes: 1: 323030313a3637383a6434343a3a2f34382d3438203d3e20323133323739.roa (hash: a2d6hAclWrhx6h6+ACHw0iSYteM3AlSblaeDKRH8jzc=) 2: 326131343a623430303a3a2f32392d3438203d3e2030.roa (hash: NhcbptlixcA3mbsPTqMiibAOrNSU1BYwO66fMNiKSfA=) 3: 326131343a623430303a3a2f33322d3332203d3e20323133323739.roa (hash: 5hhgwEfLD9bumu2w7kC2KzlKzBKITTTKNPZHvvEg0u8=) 4: 2C12F0A080F021F2BA25BC0C6EA7E06B67AAD05E.crl (hash: bfj0ZlbEaoYZ3XBmQJSW/+oNXswVL58VaCyI+QFbuWg=) 5: AS213279.asa (hash: nJRzaMfqdZ5AI+sMn9wPdQBE/Wcrkghpk4PHewl3Wz8=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8070615f-d26d-42e3-a145-5c7b67b2b64e/0/2C12F0A080F021F2BA25BC0C6EA7E06B67AAD05E.crl rsync://rsync.paas.rpki.ripe.net/repository/8070615f-d26d-42e3-a145-5c7b67b2b64e/0/2C12F0A080F021F2BA25BC0C6EA7E06B67AAD05E.mft rsync://rpki.ripe.net/repository/DEFAULT/LBLwoIDwIfK6JbwMbqfga2eq0F4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 14 Jun 2025 13:55:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:7c:09:03:a0:93:f1:ba:6e:b8:ef:06:01:1e:28:60:70:33:7b:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2c12f0a080f021f2ba25bc0c6ea7e06b67aad05e Validity Not Before: Jun 13 13:15:15 2025 GMT Not After : Jun 14 16:35:15 2025 GMT Subject: CN=F797FE81C39D52EF7F17F51FC06BD5D7EBCB19EA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:28:2a:5b:5e:63:26:bb:a8:fd:bd:c9:a0:df: 08:c4:7c:22:90:83:79:32:48:dc:0e:92:46:23:b2: 25:53:da:39:1b:f3:b4:2a:2c:59:2d:3d:70:64:5f: 7f:2b:8d:bf:18:48:fe:98:e8:20:d2:c3:c0:03:96: b7:62:a8:bb:b1:a2:b7:83:0b:8e:d0:7b:37:a6:5d: 2d:a0:2e:04:2c:f9:fd:f3:b1:c5:00:91:da:ff:b2: aa:f0:e5:3a:9f:35:40:78:97:cf:d6:a5:41:b2:84: d0:d2:36:a7:62:77:c5:fa:bb:4b:9a:e6:61:95:2c: 2e:12:15:8a:76:6a:4c:bd:9f:a1:e8:2b:5a:c6:21: c2:83:77:37:3a:bd:3a:6b:dd:08:67:85:26:c5:be: 93:f6:b5:71:99:3e:35:9a:b1:d6:c6:f2:ee:3f:40: 0a:1c:e1:df:ec:39:35:a5:12:fc:44:25:e8:45:89: fa:a9:90:28:82:5e:a1:6d:a9:fe:01:ec:0c:7e:d3: 44:e2:7e:e9:d4:71:65:93:fb:6f:04:5a:7e:ae:36: 66:53:b8:f5:19:df:e9:8f:dc:c5:55:3c:bf:44:76: 79:ad:a1:be:08:b2:dd:91:30:fe:86:e4:89:ca:c1: bd:35:74:2e:49:eb:a9:34:e7:e3:ac:64:8a:d2:06: 59:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:97:FE:81:C3:9D:52:EF:7F:17:F5:1F:C0:6B:D5:D7:EB:CB:19:EA X509v3 Authority Key Identifier: keyid:2C:12:F0:A0:80:F0:21:F2:BA:25:BC:0C:6E:A7:E0:6B:67:AA:D0:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/8070615f-d26d-42e3-a145-5c7b67b2b64e/0/2C12F0A080F021F2BA25BC0C6EA7E06B67AAD05E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LBLwoIDwIfK6JbwMbqfga2eq0F4.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8070615f-d26d-42e3-a145-5c7b67b2b64e/0/2C12F0A080F021F2BA25BC0C6EA7E06B67AAD05E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:bc:d4:a4:cd:0a:ef:25:19:7d:c2:8f:e0:37:39:19:8a:eb: c5:52:80:df:c7:6c:05:6c:27:7d:f7:d5:33:53:a2:17:c0:91: 4e:34:68:6f:0c:50:4e:5a:9a:6f:92:1d:e2:3e:e7:0d:7c:c1: ff:bb:cd:72:06:f0:1c:12:cb:c7:7e:6e:f8:30:4d:dc:70:9f: ba:6c:5a:b3:1d:14:c8:73:af:71:fd:20:0f:3a:1a:a1:eb:6b: 87:68:34:36:74:48:17:d2:ea:8e:f3:fe:ce:22:9a:49:64:c4: 17:d4:a4:77:a4:8e:69:ce:5a:9b:5b:b4:05:37:60:46:6b:80: 5d:57:b6:5a:cc:ac:b9:0e:1b:a2:51:ed:a3:44:fe:00:bd:cb: 68:cf:c7:6a:45:65:e8:33:33:5e:d6:76:c1:0d:dd:a3:bd:8d: 56:ec:46:c0:79:a5:fd:98:e2:e0:84:3b:e0:cc:ed:e5:47:fa: 6c:f7:92:4a:08:ac:31:f2:ad:c1:57:9b:35:24:18:ad:7e:96: 35:65:3a:0a:30:dc:27:ab:72:d2:28:63:58:ad:87:01:24:ef: d5:ba:73:4b:41:1b:b3:57:f5:99:e6:d9:c7:9b:cf:34:7d:93: 96:b4:95:a9:88:19:7a:67:90:f8:95:1d:b5:ca:55:ab:e8:a1: 3b:c4:39:08 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUSXwJA6CT8bpuuO8GAR4oYHAze/0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMmMxMmYwYTA4MGYwMjFmMmJhMjViYzBjNmVhN2UwNmI2 N2FhZDA1ZTAeFw0yNTA2MTMxMzE1MTVaFw0yNTA2MTQxNjM1MTVaMDMxMTAvBgNV BAMTKEY3OTdGRTgxQzM5RDUyRUY3RjE3RjUxRkMwNkJENUQ3RUJDQjE5RUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0KCpbXmMmu6j9vcmg3wjEfCKQ g3kySNwOkkYjsiVT2jkb87QqLFktPXBkX38rjb8YSP6Y6CDSw8ADlrdiqLuxoreD C47QezemXS2gLgQs+f3zscUAkdr/sqrw5TqfNUB4l8/WpUGyhNDSNqdid8X6u0ua 5mGVLC4SFYp2aky9n6HoK1rGIcKDdzc6vTpr3QhnhSbFvpP2tXGZPjWasdbG8u4/ QAoc4d/sOTWlEvxEJehFifqpkCiCXqFtqf4B7Ax+00TifunUcWWT+28EWn6uNmZT uPUZ3+mP3MVVPL9Ednmtob4Ist2RMP6G5InKwb01dC5J66k05+OsZIrSBlmZAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQU95f+gcOdUu9/F/UfwGvV1+vLGeowHwYDVR0j BBgwFoAULBLwoIDwIfK6JbwMbqfga2eq0F4wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvODA3MDYxNWYtZDI2ZC00MmUzLWExNDUtNWM3YjY3YjJi NjRlLzAvMkMxMkYwQTA4MEYwMjFGMkJBMjVCQzBDNkVBN0UwNkI2N0FBRDA1RS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0xCTHdvSUR3SWZLNkpid01icWZnYTJl cTBGNC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84MDcwNjE1Zi1k MjZkLTQyZTMtYTE0NS01YzdiNjdiMmI2NGUvMC8yQzEyRjBBMDgwRjAyMUYyQkEy NUJDMEM2RUE3RTA2QjY3QUFEMDVFLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANLzUpM0K7yUZfcKP4Dc5 GYrrxVKA38dsBWwnfffVM1OiF8CRTjRobwxQTlqab5Id4j7nDXzB/7vNcgbwHBLL x35u+DBN3HCfumxasx0UyHOvcf0gDzoaoetrh2g0NnRIF9LqjvP+ziKaSWTEF9Sk d6SOac5am1u0BTdgRmuAXVe2WsysuQ4bolHto0T+AL3LaM/HakVl6DMzXtZ2wQ3d o72NVuxGwHml/Zji4IQ74Mzt5Uf6bPeSSgisMfKtwVebNSQYrX6WNWU6CjDcJ6ty 0ihjWK2HASTv1bpzS0Ebs1f1mebZx5vPNH2TlrSVqYgZemeQ+JUdtcpVq+ihO8Q5 CA== -----END CERTIFICATE-----Generated at Fri Jun 13 19:20:47 2025 by rpki-client