$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/491a43bc-76ec-4abe-ba7d-e73e90d662cb/5/7C4E2571D39535EB83B4BDD4E4668A2D2C177631.mft File: 7C4E2571D39535EB83B4BDD4E4668A2D2C177631.mft (raw, json) Hash identifier: Tv/AwOkDuTt1GJtQJJ5l1Bn9V66bmC3bFtlMMMthc9U= Subject key identifier: 1F:B6:02:9A:91:BD:CD:3D:E4:74:D0:40:19:BD:DC:C8:E5:7D:2C:41 Authority key identifier: 7C:4E:25:71:D3:95:35:EB:83:B4:BD:D4:E4:66:8A:2D:2C:17:76:31 Certificate issuer: /CN=7C4E2571D39535EB83B4BDD4E4668A2D2C177631 Certificate serial: 101DF6262DA390C8D4386391DCDA629163E05C66 Authority info access: rsync://krill.47272.net/repo/HYEHOST/5/7C4E2571D39535EB83B4BDD4E4668A2D2C177631.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/491a43bc-76ec-4abe-ba7d-e73e90d662cb/5/7C4E2571D39535EB83B4BDD4E4668A2D2C177631.mft Manifest number: 41 Signing time: Wed 08 Oct 2025 12:41:58 +0000 Manifest this update: Wed 08 Oct 2025 12:36:58 +0000 Manifest next update: Thu 09 Oct 2025 14:58:58 +0000 Files and hashes: 1: 326130613a363034343a386666663a3a2f34382d3438203d3e2038303735.roa (hash: RZ3mYxtXjyfnSAX6OB7Fb/NzyUR2Iaz1eYb6yM0niNc=) 2: 326130613a363034343a383030303a3a2f33362d3438203d3e20323135363035.roa (hash: xoDReEFetLSQGYBm0baNBaTLSOi9Q5x2Cfso2AOKl0A=) 3: 326130613a363034343a386666653a3a2f34382d3438203d3e2038303735.roa (hash: K8xXw24z/h7osAEvKUs5Zvv+EC9Fem2xi6ka3dAsTS8=) 4: 7C4E2571D39535EB83B4BDD4E4668A2D2C177631.crl (hash: CHVYMChGMS5YptHBaiFY9g4KBZeSHXdCki/grs3x1/Y=) 5: 326130613a363034343a386666303a3a2f34342d3438203d3e20323134333933.roa (hash: uF8QCN8jX1S8vPb+j6CiYDy604ujJKGOHIcdENgsozA=) 6: 326130613a363034343a386666633a3a2f34382d3438203d3e203331383938.roa (hash: CTStzL4XbpBzdiPo/k9GT6LN/2SBVWE37f9B3UyCq40=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/491a43bc-76ec-4abe-ba7d-e73e90d662cb/5/7C4E2571D39535EB83B4BDD4E4668A2D2C177631.crl rsync://rsync.paas.rpki.ripe.net/repository/491a43bc-76ec-4abe-ba7d-e73e90d662cb/5/7C4E2571D39535EB83B4BDD4E4668A2D2C177631.mft rsync://krill.47272.net/repo/HYEHOST/5/7C4E2571D39535EB83B4BDD4E4668A2D2C177631.cer rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 09 Oct 2025 13:21:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:1d:f6:26:2d:a3:90:c8:d4:38:63:91:dc:da:62:91:63:e0:5c:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7C4E2571D39535EB83B4BDD4E4668A2D2C177631 Validity Not Before: Oct 8 12:36:58 2025 GMT Not After : Oct 9 14:58:58 2025 GMT Subject: CN=1FB6029A91BDCD3DE474D04019BDDCC8E57D2C41 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:0b:21:be:d4:39:02:fe:00:de:6f:bc:ae:56: 1e:2e:3a:8d:b3:22:e6:79:fc:a3:94:f9:83:8a:9d: fa:19:cb:0a:2e:57:4f:2f:8a:d3:a5:42:af:61:e9: f7:64:ce:93:7d:38:5a:43:a3:ad:1c:bf:56:b2:54: 80:96:c0:45:db:70:38:96:b1:f6:aa:21:ff:b7:d4: c3:fc:c5:ba:51:35:7c:93:ad:91:5f:a4:7b:ba:2b: f0:15:88:44:a1:6b:58:d1:62:fa:49:46:b5:45:04: 6b:6d:5e:98:d6:b9:29:28:de:d7:64:7e:83:a7:8c: 87:f8:70:7b:16:71:63:7e:d0:99:5e:18:b7:e4:9d: ac:b9:04:56:cf:44:72:ef:55:87:6a:a3:cb:7d:9b: d1:37:82:7b:32:6a:42:14:5f:ef:44:b5:03:bd:31: b0:2c:70:30:8a:8f:e5:1f:2a:e0:aa:51:c2:af:c2: 38:e5:27:a4:5b:c7:a1:30:42:11:fe:25:05:ea:6c: 98:3d:0b:d1:6c:02:71:bd:e6:30:10:36:5d:bd:a5: 69:77:4b:ba:c3:8a:d2:b7:7a:d4:3b:d6:29:0c:af: 36:3b:14:76:b1:1e:ea:3c:38:02:ec:7d:8c:62:b8: 30:4d:2d:44:a1:d4:32:6c:f3:a6:a2:27:62:51:3f: 6c:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:B6:02:9A:91:BD:CD:3D:E4:74:D0:40:19:BD:DC:C8:E5:7D:2C:41 X509v3 Authority Key Identifier: keyid:7C:4E:25:71:D3:95:35:EB:83:B4:BD:D4:E4:66:8A:2D:2C:17:76:31 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/491a43bc-76ec-4abe-ba7d-e73e90d662cb/5/7C4E2571D39535EB83B4BDD4E4668A2D2C177631.crl Authority Information Access: CA Issuers - URI:rsync://krill.47272.net/repo/HYEHOST/5/7C4E2571D39535EB83B4BDD4E4668A2D2C177631.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/491a43bc-76ec-4abe-ba7d-e73e90d662cb/5/7C4E2571D39535EB83B4BDD4E4668A2D2C177631.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:8c:cf:77:9b:37:cf:d7:1a:d5:18:84:ea:16:5c:1d:59:ac: 24:b6:ab:99:77:5c:4e:5a:f5:00:8a:f7:33:27:ff:2d:2c:c1: 61:e4:87:9a:c6:a9:81:14:7b:9b:e0:a2:f2:ff:b4:1b:eb:6c: 7d:54:e8:8e:5a:89:8f:c3:46:83:09:d3:b2:c1:c4:98:33:c5: bf:c4:68:27:2c:64:6f:91:b6:28:e2:b8:12:11:06:87:0e:4b: 22:a7:94:8c:aa:d5:32:df:e8:4b:17:74:a7:d2:c1:1d:65:e9: 79:5c:b2:03:e3:39:e9:14:37:ac:ce:45:8b:79:5c:e2:88:01: ca:e2:31:03:e9:2e:48:a0:a1:43:c1:51:13:98:5a:d9:ae:2a: a8:ae:7a:0b:0d:e4:d0:c1:dd:a0:be:a6:63:56:5a:9f:14:17: 2b:50:b6:2c:c5:13:bd:e5:81:a2:b5:e9:90:dc:3d:7f:e3:19: 57:ba:1d:b9:05:31:d1:44:e9:1f:c1:6a:4b:4f:72:71:e7:46: 75:3e:5c:11:3e:79:69:d7:f1:e2:9c:c4:e9:ba:1b:49:46:d8: 3e:15:87:c8:7d:41:3a:4e:4f:2d:c3:e4:25:57:d2:26:27:de: 95:a8:a2:ca:6a:1c:5d:f9:70:67:33:1a:4a:69:ad:ea:cd:1a: 95:12:a7:95 -----BEGIN CERTIFICATE----- MIIFSDCCBDCgAwIBAgIUEB32Ji2jkMjUOGOR3NpikWPgXGYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0M0RTI1NzFEMzk1MzVFQjgzQjRCREQ0RTQ2NjhBMkQy QzE3NzYzMTAeFw0yNTEwMDgxMjM2NThaFw0yNTEwMDkxNDU4NThaMDMxMTAvBgNV BAMTKDFGQjYwMjlBOTFCRENEM0RFNDc0RDA0MDE5QkREQ0M4RTU3RDJDNDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWCyG+1DkC/gDeb7yuVh4uOo2z IuZ5/KOU+YOKnfoZywouV08vitOlQq9h6fdkzpN9OFpDo60cv1ayVICWwEXbcDiW sfaqIf+31MP8xbpRNXyTrZFfpHu6K/AViESha1jRYvpJRrVFBGttXpjWuSko3tdk foOnjIf4cHsWcWN+0JleGLfknay5BFbPRHLvVYdqo8t9m9E3gnsyakIUX+9EtQO9 MbAscDCKj+UfKuCqUcKvwjjlJ6Rbx6EwQhH+JQXqbJg9C9FsAnG95jAQNl29pWl3 S7rDitK3etQ71ikMrzY7FHaxHuo8OALsfYxiuDBNLUSh1DJs86aiJ2JRP2xlAgMB AAGjggJSMIICTjAdBgNVHQ4EFgQUH7YCmpG9zT3kdNBAGb3cyOV9LEEwHwYDVR0j BBgwFoAUfE4lcdOVNeuDtL3U5GaKLSwXdjEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNDkxYTQzYmMtNzZlYy00YWJlLWJhN2QtZTczZTkwZDY2 MmNiLzUvN0M0RTI1NzFEMzk1MzVFQjgzQjRCREQ0RTQ2NjhBMkQyQzE3NzYzMS5j cmwwbwYIKwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL2tyaWxsLjQ3 MjcyLm5ldC9yZXBvL0hZRUhPU1QvNS83QzRFMjU3MUQzOTUzNUVCODNCNEJERDRF NDY2OEEyRDJDMTc3NjMxLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzQ5MWE0M2JjLTc2ZWMtNGFiZS1iYTdkLWU3M2U5MGQ2NjJjYi81LzdDNEUyNTcx RDM5NTM1RUI4M0I0QkRENEU0NjY4QTJEMkMxNzc2MzEubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQB0jM93 mzfP1xrVGITqFlwdWawktquZd1xOWvUAivczJ/8tLMFh5IeaxqmBFHub4KLy/7Qb 62x9VOiOWomPw0aDCdOywcSYM8W/xGgnLGRvkbYo4rgSEQaHDksip5SMqtUy3+hL F3Sn0sEdZel5XLID4znpFDeszkWLeVziiAHK4jED6S5IoKFDwVETmFrZriqornoL DeTQwd2gvqZjVlqfFBcrULYsxRO95YGitemQ3D1/4xlXuh25BTHRROkfwWpLT3Jx 50Z1PlwRPnlp1/HinMTpuhtJRtg+FYfIfUE6Tk8tw+QlV9ImJ96VqKLKahxd+XBn MxpKaa3qzRqVEqeV -----END CERTIFICATE-----Generated at Wed Oct 8 19:53:51 2025 by rpki-client