$ rpki-client -vvf krill.rg.net/repo/rpki-beacons-ca/0/656E4422ABF129649200EB019A815F2B12236E92.mft File: 656E4422ABF129649200EB019A815F2B12236E92.mft (raw, json) Hash identifier: A+xFWFri2Y4Ucq2ZhB0BomwSjjqXvT2zdD3WoOKXjtI= Subject key identifier: 96:09:5F:7C:1B:89:3E:65:11:51:F3:0C:EE:33:EC:8B:46:15:50:C2 Authority key identifier: 65:6E:44:22:AB:F1:29:64:92:00:EB:01:9A:81:5F:2B:12:23:6E:92 Certificate issuer: /CN=656E4422ABF129649200EB019A815F2B12236E92 Certificate serial: 453F688A8D141AAB557D480BFABAFAB47208F800 Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/ZW5EIqvxKWSSAOsBmoFfKxIjbpI.cer Subject info access: rsync://krill.rg.net/repo/rpki-beacons-ca/0/656E4422ABF129649200EB019A815F2B12236E92.mft Manifest number: 0144 Signing time: Wed 23 Jul 2025 12:48:49 +0000 Manifest this update: Wed 23 Jul 2025 12:43:49 +0000 Manifest next update: Thu 24 Jul 2025 13:05:49 +0000 Files and hashes: 1: 34352e3133322e3139302e302f32342d3234203d3e2030.roa (hash: 9ieyP3BjwnrGT7jHWN0miv3BwxPneURkOZZD4j2C8Tw=) 2: 3134372e32382e31302e302f32332d3234203d3e2039343334.roa (hash: VtH6E5X9bla/lP/1oDgzLC/IGBeO4Y+MgLQlG/MHRAA=) 3: 3134372e32382e31302e302f32332d3234203d3e203437303635.roa (hash: InllrUkC+i/L8Vq1qSaFZSxY2gcH0Pb1ZOihADOfZw0=) 4: 656E4422ABF129649200EB019A815F2B12236E92.crl (hash: 7QrSKfZE9hXUYQDAHchpXZ/ACwQ0hAWJrOa+uiyfMxg=) 5: 34352e3133322e3139312e302f32342d3234203d3e2033393730.roa (hash: piR0xY2W/Fg7dFVRqqqeApVksNlAZNhoOxCqAZQ09I0=) Validation: OK Signature path: rsync://krill.rg.net/repo/rpki-beacons-ca/0/656E4422ABF129649200EB019A815F2B12236E92.crl rsync://krill.rg.net/repo/rpki-beacons-ca/0/656E4422ABF129649200EB019A815F2B12236E92.mft rsync://ca.rg.net/rpki/RGnet-OU/ZW5EIqvxKWSSAOsBmoFfKxIjbpI.cer rsync://ca.rg.net/rpki/RGnet-OU/bW-_qXU9uNhGQz21NR2ansB8lr0.crl rsync://ca.rg.net/rpki/RGnet-OU/bW-_qXU9uNhGQz21NR2ansB8lr0.mft rsync://rpki.ripe.net/repository/DEFAULT/bW-_qXU9uNhGQz21NR2ansB8lr0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 24 Jul 2025 04:01:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:3f:68:8a:8d:14:1a:ab:55:7d:48:0b:fa:ba:fa:b4:72:08:f8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=656E4422ABF129649200EB019A815F2B12236E92 Validity Not Before: Jul 23 12:43:49 2025 GMT Not After : Jul 24 13:05:49 2025 GMT Subject: CN=96095F7C1B893E651151F30CEE33EC8B461550C2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:b7:a7:e2:aa:9a:55:c8:48:38:8a:21:6e:e2: 91:34:d0:9f:a9:17:ff:73:7f:11:5d:1b:af:25:47: 90:0e:7a:46:f5:6d:7f:d9:c7:52:31:cc:3d:31:04: 7d:8c:17:ed:b4:3b:58:e5:54:f5:38:49:0c:38:54: e8:b3:74:8e:c3:94:bf:6f:64:2a:70:d2:e1:e9:9b: 43:c0:2d:87:5f:fa:a5:75:5b:8c:36:93:14:50:99: 07:2d:7b:75:6b:f4:b2:42:98:4a:07:85:06:e4:8b: d9:64:6f:1c:78:37:84:07:5e:92:78:52:af:99:38: 7d:f8:59:b2:51:b7:1b:42:27:65:dc:fd:73:a1:3e: a0:77:ad:a9:76:93:b8:8b:36:53:8a:03:29:d6:37: 6e:d9:bf:b1:84:77:02:cf:03:98:5c:a6:79:df:97: a0:0e:77:71:52:27:0d:aa:8a:4c:a6:a2:c9:88:d0: ea:93:c3:11:08:97:14:24:55:ad:af:24:cd:b5:87: 83:f0:7f:bc:3a:35:3c:62:bd:22:62:bc:f4:dd:8e: 70:17:96:0b:2c:13:f6:f3:47:52:2b:34:e5:da:81: 7a:ad:f9:3d:cc:e9:fa:79:b4:e3:0f:72:bb:5e:db: ce:1b:b9:6e:03:ea:17:29:9b:17:75:b4:7a:88:f3: ed:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:09:5F:7C:1B:89:3E:65:11:51:F3:0C:EE:33:EC:8B:46:15:50:C2 X509v3 Authority Key Identifier: keyid:65:6E:44:22:AB:F1:29:64:92:00:EB:01:9A:81:5F:2B:12:23:6E:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://krill.rg.net/repo/rpki-beacons-ca/0/656E4422ABF129649200EB019A815F2B12236E92.crl Authority Information Access: CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/ZW5EIqvxKWSSAOsBmoFfKxIjbpI.cer Subject Information Access: Signed Object - URI:rsync://krill.rg.net/repo/rpki-beacons-ca/0/656E4422ABF129649200EB019A815F2B12236E92.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:8e:96:7f:67:71:a2:23:5e:65:a4:35:88:35:cb:3a:d4:bd: 49:4b:a5:c2:26:6b:a9:87:dd:a2:dd:db:1d:ae:fb:58:89:13: 71:19:99:e7:1e:61:99:00:f3:86:5f:1b:ae:90:e0:b6:3c:d6: a2:a2:27:23:37:ee:4a:e4:1a:ef:6c:08:4c:a3:80:45:2b:f2: 0f:28:05:4a:3e:3e:30:4d:81:52:36:73:5d:e7:8d:e9:60:73: d7:bf:ed:eb:77:0c:8e:41:bd:39:94:e5:7a:57:05:7d:36:86: 68:60:0a:15:bf:06:8c:14:d5:aa:02:ef:c9:98:94:84:1b:5c: b6:37:0f:19:98:16:4c:70:32:40:37:02:2a:57:49:d1:6a:91: 33:4a:0b:22:0c:5a:ab:3c:11:35:48:8e:86:f2:e7:f3:d2:46: 0a:d5:99:b2:19:57:65:8e:06:fa:33:a0:b2:53:27:12:ad:5f: 7a:51:e8:69:9e:d1:7b:cb:80:b9:8f:bb:75:2e:78:05:db:e1: fe:cc:2e:f2:9b:af:a2:af:69:bb:4c:7d:ad:b4:1c:c7:5e:19: 47:bc:bb:70:ca:62:2f:34:6e:c7:9b:db:77:25:1d:e8:af:01: f6:9b:62:95:99:2f:ce:94:17:1a:0a:4d:5d:86:86:74:2e:ee: 20:c7:6c:5b -----BEGIN CERTIFICATE----- MIIE3DCCA8SgAwIBAgIURT9oio0UGqtVfUgL+rr6tHII+AAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjU2RTQ0MjJBQkYxMjk2NDkyMDBFQjAxOUE4MTVGMkIx MjIzNkU5MjAeFw0yNTA3MjMxMjQzNDlaFw0yNTA3MjQxMzA1NDlaMDMxMTAvBgNV BAMTKDk2MDk1RjdDMUI4OTNFNjUxMTUxRjMwQ0VFMzNFQzhCNDYxNTUwQzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDut6fiqppVyEg4iiFu4pE00J+p F/9zfxFdG68lR5AOekb1bX/Zx1IxzD0xBH2MF+20O1jlVPU4SQw4VOizdI7DlL9v ZCpw0uHpm0PALYdf+qV1W4w2kxRQmQcte3Vr9LJCmEoHhQbki9lkbxx4N4QHXpJ4 Uq+ZOH34WbJRtxtCJ2Xc/XOhPqB3ral2k7iLNlOKAynWN27Zv7GEdwLPA5hcpnnf l6AOd3FSJw2qikymosmI0OqTwxEIlxQkVa2vJM21h4Pwf7w6NTxivSJivPTdjnAX lgssE/bzR1IrNOXagXqt+T3M6fp5tOMPcrte284buW4D6hcpmxd1tHqI8+3hAgMB AAGjggHmMIIB4jAdBgNVHQ4EFgQUlglffBuJPmURUfMM7jPsi0YVUMIwHwYDVR0j BBgwFoAUZW5EIqvxKWSSAOsBmoFfKxIjbpIwDgYDVR0PAQH/BAQDAgeAMGkGA1Ud HwRiMGAwXqBcoFqGWHJzeW5jOi8va3JpbGwucmcubmV0L3JlcG8vcnBraS1iZWFj b25zLWNhLzAvNjU2RTQ0MjJBQkYxMjk2NDkyMDBFQjAxOUE4MTVGMkIxMjIzNkU5 Mi5jcmwwWwYIKwYBBQUHAQEETzBNMEsGCCsGAQUFBzAChj9yc3luYzovL2NhLnJn Lm5ldC9ycGtpL1JHbmV0LU9VL1pXNUVJcXZ4S1dTU0FPc0Jtb0ZmS3hJamJwSS5j ZXIwdAYIKwYBBQUHAQsEaDBmMGQGCCsGAQUFBzALhlhyc3luYzovL2tyaWxsLnJn Lm5ldC9yZXBvL3Jwa2ktYmVhY29ucy1jYS8wLzY1NkU0NDIyQUJGMTI5NjQ5MjAw RUIwMTlBODE1RjJCMTIyMzZFOTIubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUH DgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcB CAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBLjpZ/Z3GiI15lpDWINcs6 1L1JS6XCJmuph92i3dsdrvtYiRNxGZnnHmGZAPOGXxuukOC2PNaioicjN+5K5Brv bAhMo4BFK/IPKAVKPj4wTYFSNnNd543pYHPXv+3rdwyOQb05lOV6VwV9NoZoYAoV vwaMFNWqAu/JmJSEG1y2Nw8ZmBZMcDJANwIqV0nRapEzSgsiDFqrPBE1SI6G8ufz 0kYK1ZmyGVdljgb6M6CyUycSrV96UehpntF7y4C5j7t1LngF2+H+zC7ym6+ir2m7 TH2ttBzHXhlHvLtwymIvNG7Hm9t3JR3orwH2m2KVmS/OlBcaCk1dhoZ0Lu4gx2xb -----END CERTIFICATE-----Generated at Wed Jul 23 23:30:40 2025 by rpki-client