$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/cf81e235-8158-407e-bcff-f096348357a2/2/B46FBF1DD35487568FC708767F085FAD2881F56D.mft File: B46FBF1DD35487568FC708767F085FAD2881F56D.mft (raw, json) Hash identifier: ViPNca1zlvk19B5irqdSl/VJbs8weaO+VRiOqo0VMos= Subject key identifier: 0F:B2:7E:A1:6E:5B:7F:50:30:D5:00:44:4C:01:43:BC:6B:35:CE:CB Authority key identifier: B4:6F:BF:1D:D3:54:87:56:8F:C7:08:76:7F:08:5F:AD:28:81:F5:6D Certificate issuer: /CN=B46FBF1DD35487568FC708767F085FAD2881F56D Certificate serial: 79CE0BBEB4B9D8380378E70FFAA85B28C1C4FE46 Authority info access: rsync://krill.47272.net/repo/HYEHOST/5/B46FBF1DD35487568FC708767F085FAD2881F56D.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/cf81e235-8158-407e-bcff-f096348357a2/2/B46FBF1DD35487568FC708767F085FAD2881F56D.mft Manifest number: 40 Signing time: Tue 19 Aug 2025 22:56:59 +0000 Manifest this update: Tue 19 Aug 2025 22:51:59 +0000 Manifest next update: Thu 21 Aug 2025 01:33:59 +0000 Files and hashes: 1: 326130353a646663333a666434303a3a2f34342d3438203d3e20323134323939.roa (hash: FrXtmk7pAG6qQfvQv6ZeMBaIdLdax1zCCasuBlvhYoQ=) 2: 326130393a353463373a313030313a3a2f34382d3438203d3e20323134323939.roa (hash: ZcdksXusZvsGLtEnzA79bXu4R9tRtoB6C1m74jW5A3Q=) 3: 326130393a353463373a313030303a3a2f34382d3438203d3e20323134323939.roa (hash: FciUVAzI9S+mi5njON8p5QSvWZZPmoftRYdBUiJGcwc=) 4: 326130393a353463373a316562653a3a2f34382d3438203d3e20323134323939.roa (hash: EzVCbaMm1BT+4VuCpmm/8/DdQRnkJJongvTgVxll+Yw=) 5: 326130393a353463373a316562653a3a2f34382d3438203d3e20323039383636.roa (hash: VGq9MXxV3q0KHWq1w3L98ANgxY0Rn68lBES1HVsVMxg=) 6: B46FBF1DD35487568FC708767F085FAD2881F56D.crl (hash: /5CGLE0WHpEKnJrYdXcdqXCrImThFSwW6mPM85gqDZw=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/cf81e235-8158-407e-bcff-f096348357a2/2/B46FBF1DD35487568FC708767F085FAD2881F56D.crl rsync://rsync.paas.rpki.ripe.net/repository/cf81e235-8158-407e-bcff-f096348357a2/2/B46FBF1DD35487568FC708767F085FAD2881F56D.mft rsync://krill.47272.net/repo/HYEHOST/5/B46FBF1DD35487568FC708767F085FAD2881F56D.cer rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 21 Aug 2025 01:33:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:ce:0b:be:b4:b9:d8:38:03:78:e7:0f:fa:a8:5b:28:c1:c4:fe:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B46FBF1DD35487568FC708767F085FAD2881F56D Validity Not Before: Aug 19 22:51:59 2025 GMT Not After : Aug 21 01:33:59 2025 GMT Subject: CN=0FB27EA16E5B7F5030D500444C0143BC6B35CECB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:22:ea:0d:c8:72:04:65:28:c7:67:f3:e2:7d: 2c:bf:05:5e:f8:95:1d:96:27:23:48:54:34:7b:cf: 81:53:5d:36:75:54:7f:b3:05:c7:d9:32:3f:1e:7a: f0:b2:97:14:46:94:05:25:46:e8:e0:46:9b:dc:e7: f9:ed:6b:7d:66:a2:9a:75:a6:d6:ba:28:c8:f2:7e: f5:3a:7d:49:b9:26:6d:5a:ec:e6:73:27:8b:d0:fd: ca:49:82:91:7e:49:ef:90:3a:65:3c:37:6e:04:9e: 3f:fc:32:56:62:32:6c:5a:66:75:33:2d:7c:05:e2: bc:77:ad:e7:77:8e:e7:41:f3:d4:c0:ba:eb:60:46: 43:f6:fa:4c:24:6d:7e:aa:3b:3f:2a:0c:69:09:ec: 9f:b9:41:0d:b0:36:2d:50:5b:a3:0d:2d:81:fa:c6: dc:0f:fc:21:e5:4b:14:b8:27:3d:34:b0:df:e9:e7: cf:bd:1c:dd:e4:35:59:ce:80:01:16:b8:9c:49:fb: 4c:42:06:f5:eb:d9:e7:ee:73:b3:37:46:a1:64:6d: df:e7:bd:75:0b:62:02:47:a5:f5:64:32:47:59:b2: 80:a2:8e:75:3c:69:81:28:26:8c:7b:aa:e3:3d:01: 5b:3a:1f:bb:5b:ca:68:e8:58:6b:29:66:90:15:c8: ce:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:B2:7E:A1:6E:5B:7F:50:30:D5:00:44:4C:01:43:BC:6B:35:CE:CB X509v3 Authority Key Identifier: keyid:B4:6F:BF:1D:D3:54:87:56:8F:C7:08:76:7F:08:5F:AD:28:81:F5:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/cf81e235-8158-407e-bcff-f096348357a2/2/B46FBF1DD35487568FC708767F085FAD2881F56D.crl Authority Information Access: CA Issuers - URI:rsync://krill.47272.net/repo/HYEHOST/5/B46FBF1DD35487568FC708767F085FAD2881F56D.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/cf81e235-8158-407e-bcff-f096348357a2/2/B46FBF1DD35487568FC708767F085FAD2881F56D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:c9:74:45:c0:f2:8c:ee:14:bb:84:94:16:c0:9a:00:fc:53: 15:c1:f9:0c:9b:7b:c4:d1:34:6d:9e:62:d1:52:ea:e1:70:78: 03:2f:94:e5:45:9e:a3:fc:d0:68:f8:84:6a:d1:7e:e2:c5:a4: 95:78:17:80:06:5a:91:3c:e7:4d:ed:e1:fb:8e:e0:b4:a6:b3: 45:dc:31:6e:b6:b4:c5:40:8e:92:4d:d2:17:de:af:7c:68:3f: 5b:4c:85:5c:5b:26:06:ae:fc:73:a1:cc:9c:bf:8a:a0:76:d6: 0a:d4:3e:bb:09:97:e8:56:5a:a0:79:9a:ed:f5:5f:a0:67:a0: 72:6d:ea:bc:64:bd:94:3f:f0:78:53:11:8e:b8:23:19:95:40: 73:a7:e2:5b:b8:e5:21:ea:ed:b7:3b:6b:17:c5:fa:65:01:4b: 28:d9:5d:e2:d5:ad:81:87:91:e5:25:51:b1:3e:45:43:15:75: ea:25:47:e7:38:50:b2:22:05:58:bc:d0:14:2f:da:8f:93:85: b5:ff:1c:63:78:f8:13:76:3f:c6:f4:13:c4:c2:8b:cd:ba:36: 4c:0a:9c:f6:d7:3c:8f:24:2d:d4:25:a6:ad:47:10:f7:ef:92: d7:78:bc:5b:27:4f:a0:2d:9a:e5:87:ba:01:f8:5d:87:17:d1: 49:c8:dc:8d -----BEGIN CERTIFICATE----- MIIFSDCCBDCgAwIBAgIUec4LvrS52DgDeOcP+qhbKMHE/kYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjQ2RkJGMUREMzU0ODc1NjhGQzcwODc2N0YwODVGQUQy ODgxRjU2RDAeFw0yNTA4MTkyMjUxNTlaFw0yNTA4MjEwMTMzNTlaMDMxMTAvBgNV BAMTKDBGQjI3RUExNkU1QjdGNTAzMEQ1MDA0NDRDMDE0M0JDNkIzNUNFQ0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChIuoNyHIEZSjHZ/PifSy/BV74 lR2WJyNIVDR7z4FTXTZ1VH+zBcfZMj8eevCylxRGlAUlRujgRpvc5/nta31mopp1 pta6KMjyfvU6fUm5Jm1a7OZzJ4vQ/cpJgpF+Se+QOmU8N24Enj/8MlZiMmxaZnUz LXwF4rx3red3judB89TAuutgRkP2+kwkbX6qOz8qDGkJ7J+5QQ2wNi1QW6MNLYH6 xtwP/CHlSxS4Jz00sN/p58+9HN3kNVnOgAEWuJxJ+0xCBvXr2efuc7M3RqFkbd/n vXULYgJHpfVkMkdZsoCijnU8aYEoJox7quM9AVs6H7tbymjoWGspZpAVyM6HAgMB AAGjggJSMIICTjAdBgNVHQ4EFgQUD7J+oW5bf1Aw1QBETAFDvGs1zsswHwYDVR0j BBgwFoAUtG+/HdNUh1aPxwh2fwhfrSiB9W0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvY2Y4MWUyMzUtODE1OC00MDdlLWJjZmYtZjA5NjM0ODM1 N2EyLzIvQjQ2RkJGMUREMzU0ODc1NjhGQzcwODc2N0YwODVGQUQyODgxRjU2RC5j cmwwbwYIKwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL2tyaWxsLjQ3 MjcyLm5ldC9yZXBvL0hZRUhPU1QvNS9CNDZGQkYxREQzNTQ4NzU2OEZDNzA4NzY3 RjA4NUZBRDI4ODFGNTZELmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2NmODFlMjM1LTgxNTgtNDA3ZS1iY2ZmLWYwOTYzNDgzNTdhMi8yL0I0NkZCRjFE RDM1NDg3NTY4RkM3MDg3NjdGMDg1RkFEMjg4MUY1NkQubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAmyXRF wPKM7hS7hJQWwJoA/FMVwfkMm3vE0TRtnmLRUurhcHgDL5TlRZ6j/NBo+IRq0X7i xaSVeBeABlqRPOdN7eH7juC0prNF3DFutrTFQI6STdIX3q98aD9bTIVcWyYGrvxz ocycv4qgdtYK1D67CZfoVlqgeZrt9V+gZ6Bybeq8ZL2UP/B4UxGOuCMZlUBzp+Jb uOUh6u23O2sXxfplAUso2V3i1a2Bh5HlJVGxPkVDFXXqJUfnOFCyIgVYvNAUL9qP k4W1/xxjePgTdj/G9BPEwovNujZMCpz21zyPJC3UJaatRxD375LXeLxbJ0+gLZrl h7oB+F2HF9FJyNyN -----END CERTIFICATE-----Generated at Wed Aug 20 16:07:38 2025 by rpki-client