$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/2/B3F0D773DCBE523A3FB1F5D26D00334874BC9FB2.mft File: B3F0D773DCBE523A3FB1F5D26D00334874BC9FB2.mft (raw, json) Hash identifier: SZqpeTrcwIh++sFCvzKyZtRz1MRBJbaRClJAuC5qd8E= Subject key identifier: 24:80:8A:E4:27:17:14:3C:53:7E:EB:AE:37:5E:2A:38:4D:7C:3B:0E Authority key identifier: B3:F0:D7:73:DC:BE:52:3A:3F:B1:F5:D2:6D:00:33:48:74:BC:9F:B2 Certificate issuer: /CN=B3F0D773DCBE523A3FB1F5D26D00334874BC9FB2 Certificate serial: 5F6A2AFABE47557CE866E7E5997CDBA335C36BFB Authority info access: rsync://krill.47272.net/repo/HYEHOST/5/B3F0D773DCBE523A3FB1F5D26D00334874BC9FB2.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/2/B3F0D773DCBE523A3FB1F5D26D00334874BC9FB2.mft Manifest number: 07 Signing time: Fri 25 Jul 2025 21:57:39 +0000 Manifest this update: Fri 25 Jul 2025 21:52:39 +0000 Manifest next update: Sun 27 Jul 2025 01:50:39 +0000 Files and hashes: 1: 326130613a363034343a623363303a3a2f34342d3434203d3e203434373333.roa (hash: rJLCwnl4uhsE/sIS8YisrOAIem98x56OxfgeBDZO+zk=) 2: B3F0D773DCBE523A3FB1F5D26D00334874BC9FB2.crl (hash: cvPvbMrO7+X/FCcnPw/3m+Q9YVC8U8i0JVhiD24kVs4=) 3: 326130613a363034343a623334333a3a2f34382d3438203d3e20323039373335.roa (hash: gl3XcUXLDzu/fH6TlbsYQk5DZAQEnfCBBv+yPT42ay4=) 4: 326130613a363034343a623330303a3a2f34322d3432203d3e20323134383039.roa (hash: rL0HqOB+MnXMFAFPM77NjHuvY8wsbwqcrhR4UPqYqsc=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/2/B3F0D773DCBE523A3FB1F5D26D00334874BC9FB2.crl rsync://rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/2/B3F0D773DCBE523A3FB1F5D26D00334874BC9FB2.mft rsync://krill.47272.net/repo/HYEHOST/5/B3F0D773DCBE523A3FB1F5D26D00334874BC9FB2.cer rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 27 Jul 2025 01:50:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:6a:2a:fa:be:47:55:7c:e8:66:e7:e5:99:7c:db:a3:35:c3:6b:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B3F0D773DCBE523A3FB1F5D26D00334874BC9FB2 Validity Not Before: Jul 25 21:52:39 2025 GMT Not After : Jul 27 01:50:39 2025 GMT Subject: CN=24808AE42717143C537EEBAE375E2A384D7C3B0E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:fd:13:27:ca:38:0f:d3:14:da:45:0a:09:8d: 5c:d1:4e:60:ac:7e:b5:d3:6c:c8:37:e6:5c:91:a8: 8a:15:f5:74:f2:50:fd:d5:28:5a:d4:93:37:f8:3d: 44:df:08:15:fb:7c:1e:2b:a7:d9:3e:f9:d2:a0:22: 72:58:e6:50:9e:93:86:21:9a:4e:77:85:41:f2:d9: ab:08:34:18:b2:b4:b3:76:83:df:9b:cc:68:07:66: 76:92:77:a1:7e:37:e4:b7:58:ce:3f:75:36:82:0e: f1:60:7e:b9:7d:22:54:1c:00:06:b9:30:7f:c8:79: f7:29:7d:1a:5c:ed:41:ab:6a:d6:9e:bf:27:9f:8d: 45:50:8a:fc:f0:d1:0e:dc:bf:81:e9:bd:67:47:3c: 8e:df:c4:cc:84:98:aa:65:3d:e6:25:89:c1:67:40: ee:14:9c:06:b7:e7:0f:de:cd:4b:51:d2:c0:68:6b: 9f:2a:36:1a:dc:30:5a:3f:c4:9b:95:89:a8:45:96: 4c:7e:60:66:35:b6:83:c7:9a:f4:81:29:c6:cd:be: f6:91:df:df:9c:9f:1c:62:96:c4:ee:1e:92:f0:c2: 67:70:68:9a:1b:c3:1e:b9:88:d6:dd:d6:33:03:d8: ba:41:0f:11:79:86:ec:c8:39:11:65:8e:9c:72:cf: e8:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:80:8A:E4:27:17:14:3C:53:7E:EB:AE:37:5E:2A:38:4D:7C:3B:0E X509v3 Authority Key Identifier: keyid:B3:F0:D7:73:DC:BE:52:3A:3F:B1:F5:D2:6D:00:33:48:74:BC:9F:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/2/B3F0D773DCBE523A3FB1F5D26D00334874BC9FB2.crl Authority Information Access: CA Issuers - URI:rsync://krill.47272.net/repo/HYEHOST/5/B3F0D773DCBE523A3FB1F5D26D00334874BC9FB2.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/2/B3F0D773DCBE523A3FB1F5D26D00334874BC9FB2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:b8:fa:6a:30:52:87:0e:6b:12:87:e6:52:93:b9:be:d8:67: 3d:e6:c2:bd:b4:4c:cb:0a:3f:07:9d:ee:e0:50:46:b3:73:69: 27:40:f9:53:6e:e2:3e:b6:a1:21:7a:fa:91:22:3c:df:b5:3d: 88:9b:97:3f:2d:8c:2c:b9:bf:90:19:19:a0:86:78:ff:9a:6b: ad:32:b2:56:54:fc:26:21:5d:f5:f7:44:f3:7d:9c:03:f9:01: 74:1a:a1:2f:5f:83:d7:89:7b:d8:1c:ae:fc:00:f7:79:b9:b8: 9c:4e:39:a5:18:c4:05:56:5e:2b:bd:14:65:eb:10:2f:3f:f7: 74:d6:82:f3:8c:5f:cb:88:09:62:81:62:0c:e7:59:c4:a7:ba: b6:ab:f1:93:3d:92:20:fe:fc:f0:3d:39:14:b7:fc:f2:9a:29: 16:32:09:f2:d1:85:9f:40:18:b1:a2:dd:22:97:4a:a0:4b:df: bf:44:0a:f7:ab:0f:31:30:12:d9:bf:ab:b4:25:3d:d2:89:50: f8:05:55:84:de:15:d4:64:f4:04:4b:90:c9:62:06:7a:4c:d0: a4:b4:8f:7d:2a:29:a8:88:b5:b5:71:24:52:d7:a4:85:6d:fe: dd:4d:36:b7:aa:46:ab:6b:cb:99:4f:2a:ec:c1:71:eb:91:49: 55:91:3a:76 -----BEGIN CERTIFICATE----- MIIFSDCCBDCgAwIBAgIUX2oq+r5HVXzoZuflmXzbozXDa/swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjNGMEQ3NzNEQ0JFNTIzQTNGQjFGNUQyNkQwMDMzNDg3 NEJDOUZCMjAeFw0yNTA3MjUyMTUyMzlaFw0yNTA3MjcwMTUwMzlaMDMxMTAvBgNV BAMTKDI0ODA4QUU0MjcxNzE0M0M1MzdFRUJBRTM3NUUyQTM4NEQ3QzNCMEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0/RMnyjgP0xTaRQoJjVzRTmCs frXTbMg35lyRqIoV9XTyUP3VKFrUkzf4PUTfCBX7fB4rp9k++dKgInJY5lCek4Yh mk53hUHy2asINBiytLN2g9+bzGgHZnaSd6F+N+S3WM4/dTaCDvFgfrl9IlQcAAa5 MH/IefcpfRpc7UGrataevyefjUVQivzw0Q7cv4HpvWdHPI7fxMyEmKplPeYlicFn QO4UnAa35w/ezUtR0sBoa58qNhrcMFo/xJuViahFlkx+YGY1toPHmvSBKcbNvvaR 39+cnxxilsTuHpLwwmdwaJobwx65iNbd1jMD2LpBDxF5huzIORFljpxyz+glAgMB AAGjggJSMIICTjAdBgNVHQ4EFgQUJICK5CcXFDxTfuuuN14qOE18Ow4wHwYDVR0j BBgwFoAUs/DXc9y+Ujo/sfXSbQAzSHS8n7IwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNzEwOThjMjMtYTk3Ny00ZjlhLTk3YzktY2Q0ZTc1OWRl YTA5LzIvQjNGMEQ3NzNEQ0JFNTIzQTNGQjFGNUQyNkQwMDMzNDg3NEJDOUZCMi5j cmwwbwYIKwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL2tyaWxsLjQ3 MjcyLm5ldC9yZXBvL0hZRUhPU1QvNS9CM0YwRDc3M0RDQkU1MjNBM0ZCMUY1RDI2 RDAwMzM0ODc0QkM5RkIyLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzcxMDk4YzIzLWE5NzctNGY5YS05N2M5LWNkNGU3NTlkZWEwOS8yL0IzRjBENzcz RENCRTUyM0EzRkIxRjVEMjZEMDAzMzQ4NzRCQzlGQjIubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQB/uPpq MFKHDmsSh+ZSk7m+2Gc95sK9tEzLCj8Hne7gUEazc2knQPlTbuI+tqEhevqRIjzf tT2Im5c/LYwsub+QGRmghnj/mmutMrJWVPwmIV3190TzfZwD+QF0GqEvX4PXiXvY HK78APd5ubicTjmlGMQFVl4rvRRl6xAvP/d01oLzjF/LiAligWIM51nEp7q2q/GT PZIg/vzwPTkUt/zymikWMgny0YWfQBixot0il0qgS9+/RAr3qw8xMBLZv6u0JT3S iVD4BVWE3hXUZPQES5DJYgZ6TNCktI99KimoiLW1cSRS16SFbf7dTTa3qkara8uZ TyrswXHrkUlVkTp2 -----END CERTIFICATE-----Generated at Sat Jul 26 14:53:12 2025 by rpki-client