$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/491a43bc-76ec-4abe-ba7d-e73e90d662cb/5/7C4E2571D39535EB83B4BDD4E4668A2D2C177631.mft File: 7C4E2571D39535EB83B4BDD4E4668A2D2C177631.mft (raw, json) Hash identifier: ttvLftWW6l6kbKTOs1YdKMHKvi6hPJTLIlyw4HWfbGA= Subject key identifier: F1:83:2F:BE:40:38:C9:3C:90:48:01:0F:25:0D:6C:39:70:B1:E0:BB Authority key identifier: 7C:4E:25:71:D3:95:35:EB:83:B4:BD:D4:E4:66:8A:2D:2C:17:76:31 Certificate issuer: /CN=7C4E2571D39535EB83B4BDD4E4668A2D2C177631 Certificate serial: 5BD0C3790EF1EF9216B06B6F45CA207C6D11ED34 Authority info access: rsync://krill.47272.net/repo/HYEHOST/5/7C4E2571D39535EB83B4BDD4E4668A2D2C177631.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/491a43bc-76ec-4abe-ba7d-e73e90d662cb/5/7C4E2571D39535EB83B4BDD4E4668A2D2C177631.mft Manifest number: 02 Signing time: Fri 04 Jul 2025 10:19:20 +0000 Manifest this update: Fri 04 Jul 2025 10:14:20 +0000 Manifest next update: Sat 05 Jul 2025 13:56:20 +0000 Files and hashes: 1: 326130613a363034343a386666303a3a2f34342d3438203d3e20323134333933.roa (hash: uF8QCN8jX1S8vPb+j6CiYDy604ujJKGOHIcdENgsozA=) 2: 326130613a363034343a383030303a3a2f33362d3438203d3e20323135363035.roa (hash: xoDReEFetLSQGYBm0baNBaTLSOi9Q5x2Cfso2AOKl0A=) 3: 326130613a363034343a386666633a3a2f34382d3438203d3e203331383938.roa (hash: CTStzL4XbpBzdiPo/k9GT6LN/2SBVWE37f9B3UyCq40=) 4: 326130613a363034343a386666653a3a2f34382d3438203d3e2038303735.roa (hash: K8xXw24z/h7osAEvKUs5Zvv+EC9Fem2xi6ka3dAsTS8=) 5: 7C4E2571D39535EB83B4BDD4E4668A2D2C177631.crl (hash: wr2/E67k9gNzENUOQgBjQtuUQWh29COXJE+Lb1Yg34M=) 6: 326130613a363034343a386666663a3a2f34382d3438203d3e2038303735.roa (hash: RZ3mYxtXjyfnSAX6OB7Fb/NzyUR2Iaz1eYb6yM0niNc=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/491a43bc-76ec-4abe-ba7d-e73e90d662cb/5/7C4E2571D39535EB83B4BDD4E4668A2D2C177631.crl rsync://rsync.paas.rpki.ripe.net/repository/491a43bc-76ec-4abe-ba7d-e73e90d662cb/5/7C4E2571D39535EB83B4BDD4E4668A2D2C177631.mft rsync://krill.47272.net/repo/HYEHOST/5/7C4E2571D39535EB83B4BDD4E4668A2D2C177631.cer rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 05 Jul 2025 13:56:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:d0:c3:79:0e:f1:ef:92:16:b0:6b:6f:45:ca:20:7c:6d:11:ed:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7C4E2571D39535EB83B4BDD4E4668A2D2C177631 Validity Not Before: Jul 4 10:14:20 2025 GMT Not After : Jul 5 13:56:20 2025 GMT Subject: CN=F1832FBE4038C93C9048010F250D6C3970B1E0BB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:ee:b3:10:16:e3:11:05:18:a2:5b:ff:8c:04: 35:70:94:35:0e:54:a7:05:2b:dd:01:91:0b:26:87: 45:b2:44:04:88:4f:d2:b1:5e:33:5c:14:88:08:f2: c6:4f:88:29:50:2d:f0:32:01:3e:dc:41:d2:b8:01: 31:11:35:35:9a:2e:75:21:e7:0f:be:84:cb:3f:83: 8e:f0:a0:08:81:ba:b1:7d:2d:59:9d:e6:d2:d7:d2: c3:47:d4:86:c9:97:37:90:66:dc:a9:c9:04:43:98: 8d:e2:90:27:35:13:58:b7:98:c5:29:30:d7:0e:fe: 7e:03:0f:c2:64:33:c4:89:fb:fe:18:74:e7:b6:3e: b8:f1:59:e0:44:4f:83:fb:10:ad:eb:90:83:d6:0d: 2d:39:0d:04:43:8d:31:33:35:3f:b8:0c:50:b1:cb: 5c:7d:96:64:1c:8c:df:d6:70:de:92:7f:c7:b7:5e: b0:21:8b:8c:86:9b:76:07:d5:db:0d:02:a1:ad:19: 48:3e:b1:8d:e9:fc:84:72:ad:23:33:cb:ca:e6:74: e2:0a:5d:e8:e3:05:b3:20:ab:4a:36:07:9b:41:75: 71:8b:6e:82:55:54:47:1a:a8:41:89:9e:db:cb:db: 07:21:f6:47:2e:cb:4a:aa:64:b4:58:ae:14:78:a8: 47:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:83:2F:BE:40:38:C9:3C:90:48:01:0F:25:0D:6C:39:70:B1:E0:BB X509v3 Authority Key Identifier: keyid:7C:4E:25:71:D3:95:35:EB:83:B4:BD:D4:E4:66:8A:2D:2C:17:76:31 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/491a43bc-76ec-4abe-ba7d-e73e90d662cb/5/7C4E2571D39535EB83B4BDD4E4668A2D2C177631.crl Authority Information Access: CA Issuers - URI:rsync://krill.47272.net/repo/HYEHOST/5/7C4E2571D39535EB83B4BDD4E4668A2D2C177631.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/491a43bc-76ec-4abe-ba7d-e73e90d662cb/5/7C4E2571D39535EB83B4BDD4E4668A2D2C177631.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption be:20:35:85:9c:2a:c0:f4:bf:69:0d:30:76:48:ab:12:23:5a: 88:e8:09:68:f8:ea:8d:53:bf:b1:22:7f:31:65:5d:11:41:cc: c2:e5:f1:ee:1f:f8:a2:aa:d3:6e:4e:10:13:1d:b3:4a:b0:47: db:36:68:ea:01:68:12:28:2d:3f:d9:f9:04:09:1b:0f:b2:6d: 29:9f:67:30:1d:3c:0a:68:47:ae:0e:80:9d:ce:11:74:6d:ec: 9b:a7:42:b3:9a:ea:02:2e:b4:fa:5b:71:bd:24:9e:2a:af:b4: 30:f8:97:c2:ff:5a:34:4d:99:5b:c0:c0:1c:ae:8e:a7:f9:4e: d4:fc:00:4b:f7:a0:58:d3:93:c9:d0:84:c5:b6:02:f7:2d:57: 32:76:53:75:17:9d:28:48:7b:c8:fd:ad:16:1c:8e:99:bc:6d: 9d:86:bb:14:1e:cf:59:db:8d:a7:3d:d2:c3:cb:cc:b0:c4:b6: 96:52:c3:24:7c:e7:0e:47:5e:5f:2b:d9:c1:00:e4:4b:1a:30: 7d:42:03:94:ff:4a:e5:c6:4f:74:d1:cc:bc:3d:7c:23:2d:19: 8f:b6:52:aa:16:ba:0b:9c:3d:43:f8:f5:76:00:69:fa:0d:3c: 47:ba:31:8b:3e:70:d0:70:c1:c5:7b:28:8e:80:78:95:24:2a: 48:6b:bd:f6 -----BEGIN CERTIFICATE----- MIIFSDCCBDCgAwIBAgIUW9DDeQ7x75IWsGtvRcogfG0R7TQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0M0RTI1NzFEMzk1MzVFQjgzQjRCREQ0RTQ2NjhBMkQy QzE3NzYzMTAeFw0yNTA3MDQxMDE0MjBaFw0yNTA3MDUxMzU2MjBaMDMxMTAvBgNV BAMTKEYxODMyRkJFNDAzOEM5M0M5MDQ4MDEwRjI1MEQ2QzM5NzBCMUUwQkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCL7rMQFuMRBRiiW/+MBDVwlDUO VKcFK90BkQsmh0WyRASIT9KxXjNcFIgI8sZPiClQLfAyAT7cQdK4ATERNTWaLnUh 5w++hMs/g47woAiBurF9LVmd5tLX0sNH1IbJlzeQZtypyQRDmI3ikCc1E1i3mMUp MNcO/n4DD8JkM8SJ+/4YdOe2PrjxWeBET4P7EK3rkIPWDS05DQRDjTEzNT+4DFCx y1x9lmQcjN/WcN6Sf8e3XrAhi4yGm3YH1dsNAqGtGUg+sY3p/IRyrSMzy8rmdOIK XejjBbMgq0o2B5tBdXGLboJVVEcaqEGJntvL2wch9kcuy0qqZLRYrhR4qEdRAgMB AAGjggJSMIICTjAdBgNVHQ4EFgQU8YMvvkA4yTyQSAEPJQ1sOXCx4LswHwYDVR0j BBgwFoAUfE4lcdOVNeuDtL3U5GaKLSwXdjEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNDkxYTQzYmMtNzZlYy00YWJlLWJhN2QtZTczZTkwZDY2 MmNiLzUvN0M0RTI1NzFEMzk1MzVFQjgzQjRCREQ0RTQ2NjhBMkQyQzE3NzYzMS5j cmwwbwYIKwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL2tyaWxsLjQ3 MjcyLm5ldC9yZXBvL0hZRUhPU1QvNS83QzRFMjU3MUQzOTUzNUVCODNCNEJERDRF NDY2OEEyRDJDMTc3NjMxLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzQ5MWE0M2JjLTc2ZWMtNGFiZS1iYTdkLWU3M2U5MGQ2NjJjYi81LzdDNEUyNTcx RDM5NTM1RUI4M0I0QkRENEU0NjY4QTJEMkMxNzc2MzEubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQC+IDWF nCrA9L9pDTB2SKsSI1qI6Alo+OqNU7+xIn8xZV0RQczC5fHuH/iiqtNuThATHbNK sEfbNmjqAWgSKC0/2fkECRsPsm0pn2cwHTwKaEeuDoCdzhF0beybp0KzmuoCLrT6 W3G9JJ4qr7Qw+JfC/1o0TZlbwMAcro6n+U7U/ABL96BY05PJ0ITFtgL3LVcydlN1 F50oSHvI/a0WHI6ZvG2dhrsUHs9Z242nPdLDy8ywxLaWUsMkfOcOR15fK9nBAORL GjB9QgOU/0rlxk900cy8PXwjLRmPtlKqFroLnD1D+PV2AGn6DTxHujGLPnDQcMHF eyiOgHiVJCpIa732 -----END CERTIFICATE-----Generated at Sat Jul 5 07:02:20 2025 by rpki-client