$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/2/B3F0D773DCBE523A3FB1F5D26D00334874BC9FB2.mft File: B3F0D773DCBE523A3FB1F5D26D00334874BC9FB2.mft (raw, json) Hash identifier: Hj4NHGBX3SvxbJUKiB+mawdTuJbKWNdR/gAkwLN7HVM= Subject key identifier: 83:16:03:98:DB:B2:4A:FF:09:CB:43:2E:AB:A3:48:02:61:2E:FB:72 Authority key identifier: B3:F0:D7:73:DC:BE:52:3A:3F:B1:F5:D2:6D:00:33:48:74:BC:9F:B2 Certificate issuer: /CN=B3F0D773DCBE523A3FB1F5D26D00334874BC9FB2 Certificate serial: 0B443B3AE3B17CCAAF92B6043DFE7B9E6B152079 Authority info access: rsync://krill.47272.net/repo/HYEHOST/5/B3F0D773DCBE523A3FB1F5D26D00334874BC9FB2.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/2/B3F0D773DCBE523A3FB1F5D26D00334874BC9FB2.mft Manifest number: 50 Signing time: Thu 18 Sep 2025 12:23:21 +0000 Manifest this update: Thu 18 Sep 2025 12:18:21 +0000 Manifest next update: Fri 19 Sep 2025 13:33:21 +0000 Files and hashes: 1: B3F0D773DCBE523A3FB1F5D26D00334874BC9FB2.crl (hash: zpFiETT4cG57QaDRjg1JVZUGFboq6BaGipz3cV25Ga8=) 2: 326130613a363034343a623363303a3a2f34342d3434203d3e203434373333.roa (hash: rJLCwnl4uhsE/sIS8YisrOAIem98x56OxfgeBDZO+zk=) 3: 326130613a363034343a623334333a3a2f34382d3438203d3e20323039373335.roa (hash: gl3XcUXLDzu/fH6TlbsYQk5DZAQEnfCBBv+yPT42ay4=) 4: 326130613a363034343a623330303a3a2f34322d3432203d3e20323134383039.roa (hash: rL0HqOB+MnXMFAFPM77NjHuvY8wsbwqcrhR4UPqYqsc=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/2/B3F0D773DCBE523A3FB1F5D26D00334874BC9FB2.crl rsync://rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/2/B3F0D773DCBE523A3FB1F5D26D00334874BC9FB2.mft rsync://krill.47272.net/repo/HYEHOST/5/B3F0D773DCBE523A3FB1F5D26D00334874BC9FB2.cer rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Sep 2025 13:33:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:44:3b:3a:e3:b1:7c:ca:af:92:b6:04:3d:fe:7b:9e:6b:15:20:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B3F0D773DCBE523A3FB1F5D26D00334874BC9FB2 Validity Not Before: Sep 18 12:18:21 2025 GMT Not After : Sep 19 13:33:21 2025 GMT Subject: CN=83160398DBB24AFF09CB432EABA34802612EFB72 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:08:93:4f:0e:2c:8d:74:ad:38:b7:30:38:59: c4:7d:a2:ef:fe:39:2b:29:07:4f:ed:1c:9e:1c:95: 09:70:97:eb:62:e7:ea:a1:96:cf:86:ba:17:e5:93: 61:a8:83:d4:4d:4e:52:d5:94:05:68:41:42:dd:b8: b0:32:d8:22:d4:cc:0a:4a:09:01:ea:4a:d2:5e:7d: 16:e8:a2:0c:ed:6f:ab:ad:c9:bc:0a:9a:d1:32:1d: 42:bb:bc:20:ff:3e:ac:42:5e:9c:63:e4:e7:af:1c: bc:33:b7:5c:7d:4b:af:c0:f4:43:39:5e:a1:73:fa: a8:6f:e2:e4:94:87:d8:f0:07:54:f1:68:96:f2:45: d2:b7:10:01:90:49:75:f6:24:88:89:b1:09:09:94: 89:fd:07:c9:15:cb:27:2f:e0:47:75:73:50:da:47: 12:b2:3a:1d:1d:2a:a4:24:f6:13:0f:64:c5:b6:13: 36:23:2f:20:f1:a4:a6:09:c0:be:7b:81:0c:6f:28: 50:73:6e:e4:ee:95:66:9c:14:07:cd:90:15:46:60: 81:74:9a:3b:39:86:06:1d:9c:fc:87:ef:85:75:6e: 04:6b:81:6e:1d:fc:43:78:98:ec:f9:f7:e8:51:ec: a7:70:8f:5d:4a:a8:d0:32:69:e8:60:46:d5:07:31: 7d:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:16:03:98:DB:B2:4A:FF:09:CB:43:2E:AB:A3:48:02:61:2E:FB:72 X509v3 Authority Key Identifier: keyid:B3:F0:D7:73:DC:BE:52:3A:3F:B1:F5:D2:6D:00:33:48:74:BC:9F:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/2/B3F0D773DCBE523A3FB1F5D26D00334874BC9FB2.crl Authority Information Access: CA Issuers - URI:rsync://krill.47272.net/repo/HYEHOST/5/B3F0D773DCBE523A3FB1F5D26D00334874BC9FB2.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/2/B3F0D773DCBE523A3FB1F5D26D00334874BC9FB2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:ad:07:c4:a8:f6:01:a6:a8:91:cc:2e:cb:7b:0c:59:ef:61: 60:f2:ff:7c:f8:ff:fe:43:c1:18:fb:df:87:87:40:65:d5:a3: d5:20:58:64:dd:b4:43:da:fa:6a:f5:a9:88:e1:df:b6:1a:87: f9:d9:7d:93:f4:40:25:cf:48:fb:1f:b0:1d:20:08:a0:5b:52: fc:01:91:c1:ce:28:d7:99:cc:df:22:ea:66:cb:5b:63:53:e5: 5b:f5:88:8f:e6:05:30:53:a1:4c:0e:ca:37:f0:92:e2:e6:db: b7:5f:39:f7:a7:82:88:16:33:e5:87:c3:bf:49:38:0a:2f:6a: bd:cf:92:8f:a8:f6:4f:6a:53:43:80:26:93:94:10:07:dc:92: 55:8b:70:fe:5e:c0:cc:43:83:1c:ba:db:cc:bb:22:7f:d9:bf: 2e:5f:41:20:8d:29:6b:75:4f:dc:e6:a7:9d:b4:bd:1e:5e:62: e7:bc:97:10:40:05:28:86:25:c5:f2:75:43:ef:20:f5:60:cd: 37:48:52:d0:2b:68:14:b4:85:30:ee:c2:54:c3:b6:22:a9:06: 85:39:ae:c7:ea:2e:b6:3b:a9:16:18:76:ae:63:3f:87:24:91: 31:bf:a3:4d:6f:a2:9d:d0:a4:21:ce:45:87:46:79:9e:3f:75: 3a:74:d4:14 -----BEGIN CERTIFICATE----- MIIFSDCCBDCgAwIBAgIUC0Q7OuOxfMqvkrYEPf57nmsVIHkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjNGMEQ3NzNEQ0JFNTIzQTNGQjFGNUQyNkQwMDMzNDg3 NEJDOUZCMjAeFw0yNTA5MTgxMjE4MjFaFw0yNTA5MTkxMzMzMjFaMDMxMTAvBgNV BAMTKDgzMTYwMzk4REJCMjRBRkYwOUNCNDMyRUFCQTM0ODAyNjEyRUZCNzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyCJNPDiyNdK04tzA4WcR9ou/+ OSspB0/tHJ4clQlwl+ti5+qhls+Guhflk2Gog9RNTlLVlAVoQULduLAy2CLUzApK CQHqStJefRboogztb6utybwKmtEyHUK7vCD/PqxCXpxj5OevHLwzt1x9S6/A9EM5 XqFz+qhv4uSUh9jwB1TxaJbyRdK3EAGQSXX2JIiJsQkJlIn9B8kVyycv4Ed1c1Da RxKyOh0dKqQk9hMPZMW2EzYjLyDxpKYJwL57gQxvKFBzbuTulWacFAfNkBVGYIF0 mjs5hgYdnPyH74V1bgRrgW4d/EN4mOz59+hR7Kdwj11KqNAyaehgRtUHMX3nAgMB AAGjggJSMIICTjAdBgNVHQ4EFgQUgxYDmNuySv8Jy0Muq6NIAmEu+3IwHwYDVR0j BBgwFoAUs/DXc9y+Ujo/sfXSbQAzSHS8n7IwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNzEwOThjMjMtYTk3Ny00ZjlhLTk3YzktY2Q0ZTc1OWRl YTA5LzIvQjNGMEQ3NzNEQ0JFNTIzQTNGQjFGNUQyNkQwMDMzNDg3NEJDOUZCMi5j cmwwbwYIKwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL2tyaWxsLjQ3 MjcyLm5ldC9yZXBvL0hZRUhPU1QvNS9CM0YwRDc3M0RDQkU1MjNBM0ZCMUY1RDI2 RDAwMzM0ODc0QkM5RkIyLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzcxMDk4YzIzLWE5NzctNGY5YS05N2M5LWNkNGU3NTlkZWEwOS8yL0IzRjBENzcz RENCRTUyM0EzRkIxRjVEMjZEMDAzMzQ4NzRCQzlGQjIubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCIrQfE qPYBpqiRzC7LewxZ72Fg8v98+P/+Q8EY+9+Hh0Bl1aPVIFhk3bRD2vpq9amI4d+2 Gof52X2T9EAlz0j7H7AdIAigW1L8AZHBzijXmczfIupmy1tjU+Vb9YiP5gUwU6FM Dso38JLi5tu3Xzn3p4KIFjPlh8O/STgKL2q9z5KPqPZPalNDgCaTlBAH3JJVi3D+ XsDMQ4McutvMuyJ/2b8uX0EgjSlrdU/c5qedtL0eXmLnvJcQQAUohiXF8nVD7yD1 YM03SFLQK2gUtIUw7sJUw7YiqQaFOa7H6i62O6kWGHauYz+HJJExv6NNb6Kd0KQh zkWHRnmeP3U6dNQU -----END CERTIFICATE-----Generated at Fri Sep 19 06:11:20 2025 by rpki-client