$ rpki-client -vvf krill.rg.net/repo/rpki-beacons-ca/0/656E4422ABF129649200EB019A815F2B12236E92.mft File: 656E4422ABF129649200EB019A815F2B12236E92.mft (raw, json) Hash identifier: zG6+wSzOP9bxGtCO8g+OFpEyRtNGHUetQo06Xc4cNdc= Subject key identifier: 32:BD:54:1E:F8:D6:14:0F:36:C0:6B:D2:B2:94:68:1A:15:4F:8A:4B Authority key identifier: 65:6E:44:22:AB:F1:29:64:92:00:EB:01:9A:81:5F:2B:12:23:6E:92 Certificate issuer: /CN=656E4422ABF129649200EB019A815F2B12236E92 Certificate serial: 7E1BF3F9E55A427C321517A0818977731AAEC72B Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/ZW5EIqvxKWSSAOsBmoFfKxIjbpI.cer Subject info access: rsync://krill.rg.net/repo/rpki-beacons-ca/0/656E4422ABF129649200EB019A815F2B12236E92.mft Manifest number: 02BB Signing time: Mon 29 Jun 2026 00:14:55 +0000 Manifest this update: Mon 29 Jun 2026 00:09:55 +0000 Manifest next update: Tue 30 Jun 2026 01:35:55 +0000 Files and hashes: 1: 3134372e32382e31302e302f32332d3234203d3e203437303635.roa (hash: +6IGfj4KE5Fon357Mz4hY46Lj0lkrQVIhXV3Upqg2+Y=) 2: 3134372e32382e31302e302f32332d3234203d3e2039343334.roa (hash: JX8MZMidVpDvMl1kvP+85ppT/iMcv1vVMBW6voLjwXs=) 3: 34352e3133322e3139302e302f32342d3234203d3e2030.roa (hash: BZJT8EbwRaDxjL7KKjabnaQJK3brt6+TkqqK548Wl2g=) 4: 656E4422ABF129649200EB019A815F2B12236E92.crl (hash: SFjWkM0eJJLXx52Vp7PIUoGTbB+F7A+3Woh/8CGEab4=) 5: 34352e3133322e3139312e302f32342d3234203d3e2033393730.roa (hash: Oy1mSyisXYrn3vcoOGy6axMtnSIX1xCofVEIpBbtceA=) Validation: OK Signature path: rsync://krill.rg.net/repo/rpki-beacons-ca/0/656E4422ABF129649200EB019A815F2B12236E92.crl rsync://krill.rg.net/repo/rpki-beacons-ca/0/656E4422ABF129649200EB019A815F2B12236E92.mft rsync://ca.rg.net/rpki/RGnet-OU/ZW5EIqvxKWSSAOsBmoFfKxIjbpI.cer rsync://ca.rg.net/rpki/RGnet-OU/bW-_qXU9uNhGQz21NR2ansB8lr0.crl rsync://ca.rg.net/rpki/RGnet-OU/bW-_qXU9uNhGQz21NR2ansB8lr0.mft rsync://rpki.ripe.net/repository/DEFAULT/bW-_qXU9uNhGQz21NR2ansB8lr0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 29 Jun 2026 06:10:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:1b:f3:f9:e5:5a:42:7c:32:15:17:a0:81:89:77:73:1a:ae:c7:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=656E4422ABF129649200EB019A815F2B12236E92 Validity Not Before: Jun 29 00:09:55 2026 GMT Not After : Jun 30 01:35:55 2026 GMT Subject: CN=32BD541EF8D6140F36C06BD2B294681A154F8A4B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:b2:3b:a3:69:24:0a:17:ea:8c:6c:12:4a:d3: 3c:1f:d0:d8:83:9b:9a:c5:34:83:52:e2:71:be:82: a9:dd:6d:9f:0f:0c:e5:1e:e6:44:6c:8e:28:a0:3e: 63:a3:84:7e:bf:c9:9a:f6:dd:19:51:57:b7:8b:e7: 4a:19:c9:83:d0:ab:c1:e7:2a:bc:50:a1:83:56:38: 44:29:97:7c:17:dc:9b:b2:2a:e1:45:08:15:0c:6b: c6:a1:21:fd:9a:7f:7b:1b:a0:f7:9a:dc:01:de:03: b5:92:65:a3:11:9b:02:fa:37:ce:73:39:7c:f6:4b: 0b:9a:91:1f:9e:1a:f9:24:eb:0e:a1:5d:ca:5a:6d: d8:cb:e7:3e:34:f4:e9:10:66:80:b8:c0:69:4e:b2: 37:c0:fe:f4:36:a7:a4:5d:4c:f8:cc:fa:33:aa:11: e0:41:c8:57:95:e9:61:ca:c6:4c:32:6d:7c:9c:35: a6:70:94:0d:34:87:69:6d:d4:f9:24:8d:02:e6:3a: bb:05:a3:63:4d:aa:8f:41:15:89:e4:14:0c:69:a2: c8:54:e2:fb:04:00:a7:7b:4a:e6:1a:b0:94:48:0b: 13:56:46:52:84:dd:04:2e:b3:c8:61:09:36:5f:d3: e4:5e:80:30:39:50:d1:d0:ed:1e:26:e4:55:b5:e4: 17:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:BD:54:1E:F8:D6:14:0F:36:C0:6B:D2:B2:94:68:1A:15:4F:8A:4B X509v3 Authority Key Identifier: keyid:65:6E:44:22:AB:F1:29:64:92:00:EB:01:9A:81:5F:2B:12:23:6E:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://krill.rg.net/repo/rpki-beacons-ca/0/656E4422ABF129649200EB019A815F2B12236E92.crl Authority Information Access: CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/ZW5EIqvxKWSSAOsBmoFfKxIjbpI.cer Subject Information Access: Signed Object - URI:rsync://krill.rg.net/repo/rpki-beacons-ca/0/656E4422ABF129649200EB019A815F2B12236E92.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:a1:9e:3a:5c:33:af:4a:a3:64:91:ab:e9:cf:50:44:94:35: e9:21:4c:fc:dc:a0:2d:0a:c0:db:05:74:46:5b:6c:03:61:1b: 0d:05:db:b2:a4:ea:76:77:e3:19:50:91:72:b2:01:f1:7b:a8: 73:11:2b:8f:69:14:ee:02:fc:57:4c:52:57:f1:b3:90:13:bf: c0:b0:0f:1f:0b:80:60:ea:dc:99:54:50:3d:17:f2:19:81:56: 70:ff:ad:d5:86:b1:e4:dc:22:df:fd:57:ba:ba:17:12:86:31: 79:9c:49:02:55:d5:2f:21:95:40:ac:67:44:61:45:65:e4:95: 08:cc:a8:5d:0e:ef:da:ce:33:95:51:68:5a:48:99:36:d2:6b: bc:24:8e:88:e9:cd:a0:dc:ab:0a:94:48:e9:d6:5e:82:af:d7: 26:80:8f:8b:31:60:a6:a8:09:01:4a:62:a6:80:7a:4e:a5:2f: dd:95:c1:d1:09:19:8a:2e:19:73:d3:59:7d:04:01:ff:1d:e1: fd:a8:ca:72:f0:9f:f9:63:06:c5:85:8e:76:53:36:30:59:f7: 38:63:8d:bc:ec:b7:0e:a5:6b:d6:a9:f8:bb:f8:8a:8f:83:f8: b4:ef:01:7c:49:62:7b:57:34:7d:a9:3c:12:be:ab:4a:34:38: e2:27:92:60 -----BEGIN CERTIFICATE----- MIIE3DCCA8SgAwIBAgIUfhvz+eVaQnwyFReggYl3cxquxyswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjU2RTQ0MjJBQkYxMjk2NDkyMDBFQjAxOUE4MTVGMkIx MjIzNkU5MjAeFw0yNjA2MjkwMDA5NTVaFw0yNjA2MzAwMTM1NTVaMDMxMTAvBgNV BAMTKDMyQkQ1NDFFRjhENjE0MEYzNkMwNkJEMkIyOTQ2ODFBMTU0RjhBNEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXsjujaSQKF+qMbBJK0zwf0NiD m5rFNINS4nG+gqndbZ8PDOUe5kRsjiigPmOjhH6/yZr23RlRV7eL50oZyYPQq8Hn KrxQoYNWOEQpl3wX3JuyKuFFCBUMa8ahIf2af3sboPea3AHeA7WSZaMRmwL6N85z OXz2SwuakR+eGvkk6w6hXcpabdjL5z409OkQZoC4wGlOsjfA/vQ2p6RdTPjM+jOq EeBByFeV6WHKxkwybXycNaZwlA00h2lt1PkkjQLmOrsFo2NNqo9BFYnkFAxposhU 4vsEAKd7SuYasJRICxNWRlKE3QQus8hhCTZf0+RegDA5UNHQ7R4m5FW15BdBAgMB AAGjggHmMIIB4jAdBgNVHQ4EFgQUMr1UHvjWFA82wGvSspRoGhVPikswHwYDVR0j BBgwFoAUZW5EIqvxKWSSAOsBmoFfKxIjbpIwDgYDVR0PAQH/BAQDAgeAMGkGA1Ud HwRiMGAwXqBcoFqGWHJzeW5jOi8va3JpbGwucmcubmV0L3JlcG8vcnBraS1iZWFj b25zLWNhLzAvNjU2RTQ0MjJBQkYxMjk2NDkyMDBFQjAxOUE4MTVGMkIxMjIzNkU5 Mi5jcmwwWwYIKwYBBQUHAQEETzBNMEsGCCsGAQUFBzAChj9yc3luYzovL2NhLnJn Lm5ldC9ycGtpL1JHbmV0LU9VL1pXNUVJcXZ4S1dTU0FPc0Jtb0ZmS3hJamJwSS5j ZXIwdAYIKwYBBQUHAQsEaDBmMGQGCCsGAQUFBzALhlhyc3luYzovL2tyaWxsLnJn Lm5ldC9yZXBvL3Jwa2ktYmVhY29ucy1jYS8wLzY1NkU0NDIyQUJGMTI5NjQ5MjAw RUIwMTlBODE1RjJCMTIyMzZFOTIubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUH DgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcB CAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAJoZ46XDOvSqNkkavpz1BE lDXpIUz83KAtCsDbBXRGW2wDYRsNBduypOp2d+MZUJFysgHxe6hzESuPaRTuAvxX TFJX8bOQE7/AsA8fC4Bg6tyZVFA9F/IZgVZw/63VhrHk3CLf/Ve6uhcShjF5nEkC VdUvIZVArGdEYUVl5JUIzKhdDu/azjOVUWhaSJk20mu8JI6I6c2g3KsKlEjp1l6C r9cmgI+LMWCmqAkBSmKmgHpOpS/dlcHRCRmKLhlz01l9BAH/HeH9qMpy8J/5YwbF hY52UzYwWfc4Y4287LcOpWvWqfi7+IqPg/i07wF8SWJ7VzR9qTwSvqtKNDjiJ5Jg -----END CERTIFICATE-----Generated at Mon Jun 29 02:28:12 2026 by rpki-client