$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/4/432EED236E0D5996FA1AE9B1A7A9FEC3446BA2D5.mft File: 432EED236E0D5996FA1AE9B1A7A9FEC3446BA2D5.mft (raw, json) Hash identifier: aZ5g8YL9spBZQAhqYR5FFUkgVkBEu3kCLZ1bFuL79gA= Subject key identifier: 89:B7:6F:17:6B:C4:51:9C:83:8A:19:03:B9:A7:E4:48:2F:5E:77:72 Authority key identifier: 43:2E:ED:23:6E:0D:59:96:FA:1A:E9:B1:A7:A9:FE:C3:44:6B:A2:D5 Certificate issuer: /CN=432EED236E0D5996FA1AE9B1A7A9FEC3446BA2D5 Certificate serial: 7412B776CC14B764003F9B5E0ABB6BD948E7FC03 Authority info access: rsync://krill.47272.net/repo/HYEHOST/5/432EED236E0D5996FA1AE9B1A7A9FEC3446BA2D5.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/4/432EED236E0D5996FA1AE9B1A7A9FEC3446BA2D5.mft Manifest number: 19 Signing time: Mon 21 Jul 2025 22:00:44 +0000 Manifest this update: Mon 21 Jul 2025 21:55:43 +0000 Manifest next update: Wed 23 Jul 2025 01:14:43 +0000 Files and hashes: 1: 326130613a363034343a626230303a3a2f34302d3430203d3e20323135393536.roa (hash: BMQm/qBTXOX+KWZAB8Yko8pr4iwiYzYk6iEMUC1D/KU=) 2: 432EED236E0D5996FA1AE9B1A7A9FEC3446BA2D5.crl (hash: 9B817zSfzIvanz4wHwgv2d4pT6UvxFDqgKqqeY8eUuE=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/4/432EED236E0D5996FA1AE9B1A7A9FEC3446BA2D5.crl rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/4/432EED236E0D5996FA1AE9B1A7A9FEC3446BA2D5.mft rsync://krill.47272.net/repo/HYEHOST/5/432EED236E0D5996FA1AE9B1A7A9FEC3446BA2D5.cer rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 22 Jul 2025 14:17:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:12:b7:76:cc:14:b7:64:00:3f:9b:5e:0a:bb:6b:d9:48:e7:fc:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=432EED236E0D5996FA1AE9B1A7A9FEC3446BA2D5 Validity Not Before: Jul 21 21:55:43 2025 GMT Not After : Jul 23 01:14:43 2025 GMT Subject: CN=89B76F176BC4519C838A1903B9A7E4482F5E7772 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:28:df:ef:c7:c0:12:a0:35:bc:cc:76:9d:e4: d9:f6:c2:0d:ac:c8:cf:e0:aa:36:6d:f1:ea:a1:ed: c7:a2:84:0c:61:e9:b1:21:3e:e4:d9:16:70:21:69: de:5d:e3:81:c7:9f:f1:1d:2c:06:94:b7:4b:39:37: 37:96:1d:10:70:66:50:25:6f:ce:90:2c:ab:fe:8c: a7:5d:87:46:dc:6a:09:fb:aa:18:7e:7d:8c:18:a5: c8:b3:db:93:17:bc:5d:c6:60:a6:0a:f7:ca:1a:bd: 83:5d:c8:a3:af:9b:3c:f8:09:75:c7:5e:67:f5:ce: bd:e6:58:15:ba:08:39:1f:37:72:28:6a:e6:cd:f1: ff:12:5a:11:78:02:6b:6d:c6:33:7a:2d:ee:a5:fa: c5:ba:c7:14:5f:24:d1:be:a8:b6:36:aa:33:59:60: ef:20:fd:6d:b8:ba:42:ff:a5:39:c4:eb:ed:d4:62: cd:fc:20:e9:55:4d:0b:bd:02:8d:a8:5a:83:53:69: 36:ff:a3:cc:45:ee:f9:f0:75:f6:f7:da:32:1d:27: 9f:c9:89:0c:2b:87:eb:73:7e:1d:6c:43:b4:20:8a: 69:cc:78:49:1b:54:6c:e4:c2:75:52:42:ce:cd:36: 77:1d:da:ec:24:54:2f:7f:7d:5a:c2:4f:72:16:72: 48:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:B7:6F:17:6B:C4:51:9C:83:8A:19:03:B9:A7:E4:48:2F:5E:77:72 X509v3 Authority Key Identifier: keyid:43:2E:ED:23:6E:0D:59:96:FA:1A:E9:B1:A7:A9:FE:C3:44:6B:A2:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/4/432EED236E0D5996FA1AE9B1A7A9FEC3446BA2D5.crl Authority Information Access: CA Issuers - URI:rsync://krill.47272.net/repo/HYEHOST/5/432EED236E0D5996FA1AE9B1A7A9FEC3446BA2D5.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/4/432EED236E0D5996FA1AE9B1A7A9FEC3446BA2D5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:88:f5:23:01:fa:2a:79:83:8f:60:a1:d7:c9:e3:ac:d1:40: 0c:c9:43:b3:e0:36:b1:5c:c6:7c:90:87:ab:b0:e9:6c:02:a9: 9a:6c:56:1a:47:c4:bc:6a:9e:53:b5:11:48:41:ae:c4:ee:af: 08:37:02:14:d8:8e:a6:69:0b:fa:e3:e1:b3:43:28:05:24:74: a0:01:87:07:66:46:4c:d7:1b:b2:43:a5:c0:58:34:64:fc:df: b1:1c:66:1a:d9:4f:71:63:39:5c:3e:d3:84:b1:37:ca:50:66: da:9b:61:4a:c9:0a:4b:94:ea:ac:97:11:2e:7b:5d:2c:8d:b6: 3e:ee:60:97:0e:aa:45:af:a4:a4:70:6e:8b:6c:3c:18:9e:ec: 4e:4f:9b:d8:f8:58:f3:2f:1c:55:79:aa:97:d0:19:92:6c:48: 7b:2d:e4:8f:34:de:bd:13:7e:64:fe:ca:94:e2:89:40:8c:47: d9:5d:82:0e:4e:b6:1d:20:6a:3c:38:17:3a:29:3b:86:a6:bc: bf:6e:dc:e1:16:27:b7:8d:10:c6:a5:15:9e:0f:07:15:b4:ee: e4:14:15:1e:b3:2b:24:6f:55:06:a2:3d:da:b8:90:55:8e:8f: 73:ee:76:36:e3:d9:d7:5e:2f:cc:89:6e:e4:d6:3c:5e:5e:88: ab:2a:da:d1 -----BEGIN CERTIFICATE----- MIIFSDCCBDCgAwIBAgIUdBK3dswUt2QAP5teCrtr2Ujn/AMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDMyRUVEMjM2RTBENTk5NkZBMUFFOUIxQTdBOUZFQzM0 NDZCQTJENTAeFw0yNTA3MjEyMTU1NDNaFw0yNTA3MjMwMTE0NDNaMDMxMTAvBgNV BAMTKDg5Qjc2RjE3NkJDNDUxOUM4MzhBMTkwM0I5QTdFNDQ4MkY1RTc3NzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxKN/vx8ASoDW8zHad5Nn2wg2s yM/gqjZt8eqh7ceihAxh6bEhPuTZFnAhad5d44HHn/EdLAaUt0s5NzeWHRBwZlAl b86QLKv+jKddh0bcagn7qhh+fYwYpciz25MXvF3GYKYK98oavYNdyKOvmzz4CXXH Xmf1zr3mWBW6CDkfN3IoaubN8f8SWhF4AmttxjN6Le6l+sW6xxRfJNG+qLY2qjNZ YO8g/W24ukL/pTnE6+3UYs38IOlVTQu9Ao2oWoNTaTb/o8xF7vnwdfb32jIdJ5/J iQwrh+tzfh1sQ7QgimnMeEkbVGzkwnVSQs7NNncd2uwkVC9/fVrCT3IWckitAgMB AAGjggJSMIICTjAdBgNVHQ4EFgQUibdvF2vEUZyDihkDuafkSC9ed3IwHwYDVR0j BBgwFoAUQy7tI24NWZb6Gumxp6n+w0RrotUwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZWJmMDRjN2MtZjgyZC00NzFkLTg1YWQtOThjNjVkZTFj OTEyLzQvNDMyRUVEMjM2RTBENTk5NkZBMUFFOUIxQTdBOUZFQzM0NDZCQTJENS5j cmwwbwYIKwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL2tyaWxsLjQ3 MjcyLm5ldC9yZXBvL0hZRUhPU1QvNS80MzJFRUQyMzZFMEQ1OTk2RkExQUU5QjFB N0E5RkVDMzQ0NkJBMkQ1LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2ViZjA0YzdjLWY4MmQtNDcxZC04NWFkLTk4YzY1ZGUxYzkxMi80LzQzMkVFRDIz NkUwRDU5OTZGQTFBRTlCMUE3QTlGRUMzNDQ2QkEyRDUubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBniPUj AfoqeYOPYKHXyeOs0UAMyUOz4DaxXMZ8kIersOlsAqmabFYaR8S8ap5TtRFIQa7E 7q8INwIU2I6maQv64+GzQygFJHSgAYcHZkZM1xuyQ6XAWDRk/N+xHGYa2U9xYzlc PtOEsTfKUGbam2FKyQpLlOqslxEue10sjbY+7mCXDqpFr6SkcG6LbDwYnuxOT5vY +FjzLxxVeaqX0BmSbEh7LeSPNN69E35k/sqU4olAjEfZXYIOTrYdIGo8OBc6KTuG pry/btzhFie3jRDGpRWeDwcVtO7kFBUesyskb1UGoj3auJBVjo9z7nY249nXXi/M iW7k1jxeXoirKtrR -----END CERTIFICATE-----Generated at Mon Jul 21 23:58:28 2025 by rpki-client