$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/491a43bc-76ec-4abe-ba7d-e73e90d662cb/5/7C4E2571D39535EB83B4BDD4E4668A2D2C177631.mft File: 7C4E2571D39535EB83B4BDD4E4668A2D2C177631.mft (raw, json) Hash identifier: QnzGYJxlDEIO778z4IOHFxJMkrVadA6Uc5T+d40xiDM= Subject key identifier: D8:5B:06:51:6E:4F:6D:A4:51:18:F5:2A:AE:DB:C2:2D:42:09:C7:29 Authority key identifier: 7C:4E:25:71:D3:95:35:EB:83:B4:BD:D4:E4:66:8A:2D:2C:17:76:31 Certificate issuer: /CN=7C4E2571D39535EB83B4BDD4E4668A2D2C177631 Certificate serial: 3DCB5848A3C069CADAECE1CDDF0DEA06FA276891 Authority info access: rsync://krill.47272.net/repo/HYEHOST/5/7C4E2571D39535EB83B4BDD4E4668A2D2C177631.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/491a43bc-76ec-4abe-ba7d-e73e90d662cb/5/7C4E2571D39535EB83B4BDD4E4668A2D2C177631.mft Manifest number: 28 Signing time: Wed 20 Aug 2025 06:34:55 +0000 Manifest this update: Wed 20 Aug 2025 06:29:55 +0000 Manifest next update: Thu 21 Aug 2025 07:57:55 +0000 Files and hashes: 1: 326130613a363034343a386666303a3a2f34342d3438203d3e20323134333933.roa (hash: uF8QCN8jX1S8vPb+j6CiYDy604ujJKGOHIcdENgsozA=) 2: 326130613a363034343a386666633a3a2f34382d3438203d3e203331383938.roa (hash: CTStzL4XbpBzdiPo/k9GT6LN/2SBVWE37f9B3UyCq40=) 3: 326130613a363034343a386666663a3a2f34382d3438203d3e2038303735.roa (hash: RZ3mYxtXjyfnSAX6OB7Fb/NzyUR2Iaz1eYb6yM0niNc=) 4: 326130613a363034343a383030303a3a2f33362d3438203d3e20323135363035.roa (hash: xoDReEFetLSQGYBm0baNBaTLSOi9Q5x2Cfso2AOKl0A=) 5: 7C4E2571D39535EB83B4BDD4E4668A2D2C177631.crl (hash: eh2Buqw6HHk+EQm/piIarKDXoA190pwE92gTVQXuAMg=) 6: 326130613a363034343a386666653a3a2f34382d3438203d3e2038303735.roa (hash: K8xXw24z/h7osAEvKUs5Zvv+EC9Fem2xi6ka3dAsTS8=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/491a43bc-76ec-4abe-ba7d-e73e90d662cb/5/7C4E2571D39535EB83B4BDD4E4668A2D2C177631.crl rsync://rsync.paas.rpki.ripe.net/repository/491a43bc-76ec-4abe-ba7d-e73e90d662cb/5/7C4E2571D39535EB83B4BDD4E4668A2D2C177631.mft rsync://krill.47272.net/repo/HYEHOST/5/7C4E2571D39535EB83B4BDD4E4668A2D2C177631.cer rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 20 Aug 2025 21:47:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:cb:58:48:a3:c0:69:ca:da:ec:e1:cd:df:0d:ea:06:fa:27:68:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7C4E2571D39535EB83B4BDD4E4668A2D2C177631 Validity Not Before: Aug 20 06:29:55 2025 GMT Not After : Aug 21 07:57:55 2025 GMT Subject: CN=D85B06516E4F6DA45118F52AAEDBC22D4209C729 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:5e:d1:57:de:a3:2d:a0:85:58:34:51:4e:de: 95:e4:3f:27:58:82:c8:84:57:b7:e3:3d:67:ed:74: 66:fc:b4:d2:d6:65:fb:25:49:41:22:55:29:12:08: 17:d6:00:b0:9f:70:8c:60:5c:c2:07:f6:9b:c6:7a: 37:35:9c:6c:86:dc:33:ff:df:ff:62:c6:4e:82:2d: af:c6:99:ae:d8:80:8e:6a:96:02:24:b2:38:d5:14: 8d:90:01:13:8d:b0:f9:45:60:f7:46:b8:66:97:88: 50:7e:bb:14:06:12:a6:9c:36:3b:df:2d:2c:5f:fd: 12:af:15:37:07:c6:20:9c:a2:3e:62:64:18:7b:a0: 8a:ed:60:d7:43:2e:f1:44:65:40:f9:b6:5c:3b:1d: 5c:3c:ac:b7:19:d6:da:f7:4e:29:e6:6a:c5:33:57: 83:20:f1:cc:02:d3:5f:45:5f:33:62:f2:25:fc:fe: 4d:71:62:a2:7b:08:83:b1:69:1b:b3:74:16:55:bf: 5f:13:a2:17:fa:24:69:d2:a4:e9:49:fa:3a:66:55: ad:d4:91:e2:16:19:c3:31:87:ca:a7:c9:20:d8:5f: fc:84:78:b8:2c:f9:60:ac:de:71:ef:b8:a5:49:71: 80:bc:3e:bd:57:16:04:85:45:2b:4c:b6:a4:19:9d: 98:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:5B:06:51:6E:4F:6D:A4:51:18:F5:2A:AE:DB:C2:2D:42:09:C7:29 X509v3 Authority Key Identifier: keyid:7C:4E:25:71:D3:95:35:EB:83:B4:BD:D4:E4:66:8A:2D:2C:17:76:31 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/491a43bc-76ec-4abe-ba7d-e73e90d662cb/5/7C4E2571D39535EB83B4BDD4E4668A2D2C177631.crl Authority Information Access: CA Issuers - URI:rsync://krill.47272.net/repo/HYEHOST/5/7C4E2571D39535EB83B4BDD4E4668A2D2C177631.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/491a43bc-76ec-4abe-ba7d-e73e90d662cb/5/7C4E2571D39535EB83B4BDD4E4668A2D2C177631.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:8d:77:0f:da:2f:69:27:04:f2:0a:0b:81:36:ac:1b:68:28: 42:98:f8:2a:c0:4b:f2:64:70:21:88:c9:77:af:a4:e1:00:a2: 36:06:2d:6f:60:f4:6f:08:c6:3f:0b:6d:1d:e1:f0:62:cd:86: 66:f7:d6:38:e8:65:b4:fb:8b:c2:59:68:e1:10:95:7b:cf:41: 97:f9:cc:d5:69:94:1b:e1:eb:e8:22:15:c0:0d:a2:10:60:05: 7d:58:ea:58:73:68:a2:d5:ea:ae:25:4a:f7:a8:e4:64:30:84: ef:4c:ac:8a:1f:d7:a0:f5:b4:e5:30:bd:a7:31:b9:d9:70:7a: 66:9d:b1:99:e3:c8:ec:fd:23:bd:b5:c5:e7:24:0d:0e:6c:aa: 6f:99:52:a2:51:b5:b8:7e:6d:4e:36:6d:71:67:0a:aa:10:cb: 55:dc:9d:d5:54:7d:6a:61:5f:cb:4f:4d:87:75:64:a9:cd:64: f9:c5:96:de:67:33:6e:27:6d:48:4a:e0:5c:35:7d:e0:c5:37: 42:92:45:0e:b2:8d:e3:9a:39:09:8f:fe:79:1a:41:60:fe:d2: 0b:a8:7e:12:5c:4b:5b:48:fa:12:4f:4d:d1:d3:c4:53:df:31: b4:5f:44:b4:33:57:1d:58:c3:4c:89:00:88:9b:96:32:81:0d: 04:62:28:e6 -----BEGIN CERTIFICATE----- MIIFSDCCBDCgAwIBAgIUPctYSKPAacra7OHN3w3qBvonaJEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0M0RTI1NzFEMzk1MzVFQjgzQjRCREQ0RTQ2NjhBMkQy QzE3NzYzMTAeFw0yNTA4MjAwNjI5NTVaFw0yNTA4MjEwNzU3NTVaMDMxMTAvBgNV BAMTKEQ4NUIwNjUxNkU0RjZEQTQ1MTE4RjUyQUFFREJDMjJENDIwOUM3MjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFXtFX3qMtoIVYNFFO3pXkPydY gsiEV7fjPWftdGb8tNLWZfslSUEiVSkSCBfWALCfcIxgXMIH9pvGejc1nGyG3DP/ 3/9ixk6CLa/Gma7YgI5qlgIksjjVFI2QARONsPlFYPdGuGaXiFB+uxQGEqacNjvf LSxf/RKvFTcHxiCcoj5iZBh7oIrtYNdDLvFEZUD5tlw7HVw8rLcZ1tr3TinmasUz V4Mg8cwC019FXzNi8iX8/k1xYqJ7CIOxaRuzdBZVv18Tohf6JGnSpOlJ+jpmVa3U keIWGcMxh8qnySDYX/yEeLgs+WCs3nHvuKVJcYC8Pr1XFgSFRStMtqQZnZjNAgMB AAGjggJSMIICTjAdBgNVHQ4EFgQU2FsGUW5PbaRRGPUqrtvCLUIJxykwHwYDVR0j BBgwFoAUfE4lcdOVNeuDtL3U5GaKLSwXdjEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNDkxYTQzYmMtNzZlYy00YWJlLWJhN2QtZTczZTkwZDY2 MmNiLzUvN0M0RTI1NzFEMzk1MzVFQjgzQjRCREQ0RTQ2NjhBMkQyQzE3NzYzMS5j cmwwbwYIKwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL2tyaWxsLjQ3 MjcyLm5ldC9yZXBvL0hZRUhPU1QvNS83QzRFMjU3MUQzOTUzNUVCODNCNEJERDRF NDY2OEEyRDJDMTc3NjMxLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzQ5MWE0M2JjLTc2ZWMtNGFiZS1iYTdkLWU3M2U5MGQ2NjJjYi81LzdDNEUyNTcx RDM5NTM1RUI4M0I0QkRENEU0NjY4QTJEMkMxNzc2MzEubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBVjXcP 2i9pJwTyCguBNqwbaChCmPgqwEvyZHAhiMl3r6ThAKI2Bi1vYPRvCMY/C20d4fBi zYZm99Y46GW0+4vCWWjhEJV7z0GX+czVaZQb4evoIhXADaIQYAV9WOpYc2ii1equ JUr3qORkMITvTKyKH9eg9bTlML2nMbnZcHpmnbGZ48js/SO9tcXnJA0ObKpvmVKi UbW4fm1ONm1xZwqqEMtV3J3VVH1qYV/LT02HdWSpzWT5xZbeZzNuJ21ISuBcNX3g xTdCkkUOso3jmjkJj/55GkFg/tILqH4SXEtbSPoST03R08RT3zG0X0S0M1cdWMNM iQCIm5YygQ0EYijm -----END CERTIFICATE-----Generated at Wed Aug 20 09:54:52 2025 by rpki-client