$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/cf81e235-8158-407e-bcff-f096348357a2/2/B46FBF1DD35487568FC708767F085FAD2881F56D.mft File: B46FBF1DD35487568FC708767F085FAD2881F56D.mft (raw, json) Hash identifier: ofQQi+PJFtpTLKIQ+vAlDd/Bt/5OE3drWpA3S0CEyos= Subject key identifier: 9C:55:4D:FB:A7:12:05:A7:8B:42:72:6E:91:F9:3E:B3:11:59:8C:96 Authority key identifier: B4:6F:BF:1D:D3:54:87:56:8F:C7:08:76:7F:08:5F:AD:28:81:F5:6D Certificate issuer: /CN=B46FBF1DD35487568FC708767F085FAD2881F56D Certificate serial: 41BADA133DCCC9C480CB247764B7DDF2209CF039 Authority info access: rsync://krill.47272.net/repo/HYEHOST/5/B46FBF1DD35487568FC708767F085FAD2881F56D.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/cf81e235-8158-407e-bcff-f096348357a2/2/B46FBF1DD35487568FC708767F085FAD2881F56D.mft Manifest number: 83 Signing time: Thu 09 Oct 2025 00:32:06 +0000 Manifest this update: Thu 09 Oct 2025 00:27:06 +0000 Manifest next update: Fri 10 Oct 2025 04:26:06 +0000 Files and hashes: 1: 326130393a353463373a313030303a3a2f34382d3438203d3e20323134323939.roa (hash: cVUnxtHKHvSuPoMrFujGuYJeptorC3XFD7GVRffPXsw=) 2: 326130393a353463373a316562653a3a2f34382d3438203d3e20323134323939.roa (hash: okHzxG/SsTH4RSZQhh7L6C+p8SSVWtUyztCsQOe4d24=) 3: 326130353a646663333a666434303a3a2f34342d3438203d3e20323134323939.roa (hash: FrXtmk7pAG6qQfvQv6ZeMBaIdLdax1zCCasuBlvhYoQ=) 4: B46FBF1DD35487568FC708767F085FAD2881F56D.crl (hash: sfFLLeskmAmDSO6snUBCsxnt2z9P6XnFPCu8W8sD6JI=) 5: 326130393a353463373a316562653a3a2f34382d3438203d3e20323039383636.roa (hash: sZm9brK2ynQAL4Qv0qveAPtvaYc2UhrTe5WcBL05BkY=) 6: 326130393a353463373a313030313a3a2f34382d3438203d3e20323134323939.roa (hash: uBOfZzLyikTvegmkIxWMQt/2ZVji1t85l3talCttNxU=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/cf81e235-8158-407e-bcff-f096348357a2/2/B46FBF1DD35487568FC708767F085FAD2881F56D.crl rsync://rsync.paas.rpki.ripe.net/repository/cf81e235-8158-407e-bcff-f096348357a2/2/B46FBF1DD35487568FC708767F085FAD2881F56D.mft rsync://krill.47272.net/repo/HYEHOST/5/B46FBF1DD35487568FC708767F085FAD2881F56D.cer rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 09 Oct 2025 20:40:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:ba:da:13:3d:cc:c9:c4:80:cb:24:77:64:b7:dd:f2:20:9c:f0:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B46FBF1DD35487568FC708767F085FAD2881F56D Validity Not Before: Oct 9 00:27:06 2025 GMT Not After : Oct 10 04:26:06 2025 GMT Subject: CN=9C554DFBA71205A78B42726E91F93EB311598C96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:03:c5:50:eb:4a:0d:5c:15:3a:9c:b2:f0:58: 8a:52:a3:6f:0e:dd:a9:1e:d9:c4:e9:62:d3:b1:64: ef:68:c6:ce:bd:dc:53:0b:e8:73:23:2e:fc:b4:93: 21:88:38:c3:4e:41:3a:fc:8c:1f:7a:02:20:07:e4: 1e:e6:4f:03:47:d6:c7:bf:3a:c4:3b:b9:ce:97:69: f6:40:75:79:dc:d8:ca:06:ae:89:70:1b:a5:38:05: 28:22:73:dc:8b:60:e5:0c:1b:b5:84:d0:aa:57:e0: 8a:77:46:b1:7d:47:af:ff:da:8a:6a:fa:07:c3:73: 98:d1:c2:9c:28:44:5c:ef:de:4d:03:e6:a9:f9:fe: c1:36:d5:f2:38:ed:ed:32:04:20:c6:96:88:69:7c: 22:de:43:d1:a8:2a:ad:c9:97:7d:bc:bc:d3:69:81: e0:12:5d:01:68:13:19:34:3d:d2:46:39:1e:45:4c: 14:ef:74:b9:5e:89:dc:ab:07:d1:1c:b3:76:4c:84: 7f:7a:23:6b:62:73:25:58:00:f4:d7:0b:5f:93:34: 69:75:9d:fd:39:92:77:88:d9:b3:0b:5b:27:f8:25: ed:e3:b3:79:e7:c6:4b:b3:29:0e:65:59:e6:ad:8a: 32:b1:23:81:dc:ab:78:4e:ad:0f:01:6a:18:2c:3a: fe:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:55:4D:FB:A7:12:05:A7:8B:42:72:6E:91:F9:3E:B3:11:59:8C:96 X509v3 Authority Key Identifier: keyid:B4:6F:BF:1D:D3:54:87:56:8F:C7:08:76:7F:08:5F:AD:28:81:F5:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/cf81e235-8158-407e-bcff-f096348357a2/2/B46FBF1DD35487568FC708767F085FAD2881F56D.crl Authority Information Access: CA Issuers - URI:rsync://krill.47272.net/repo/HYEHOST/5/B46FBF1DD35487568FC708767F085FAD2881F56D.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/cf81e235-8158-407e-bcff-f096348357a2/2/B46FBF1DD35487568FC708767F085FAD2881F56D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c7:f9:ae:aa:a8:fe:5f:4c:4d:d2:95:29:47:af:79:d8:42:a0: 0d:09:a5:0e:34:41:a9:22:c9:91:b0:de:10:c4:91:54:9f:3d: 79:27:69:f1:40:73:51:db:42:a5:4e:b5:eb:46:1d:f6:53:60: 07:21:3f:44:23:99:8b:7d:23:7c:d5:6c:69:69:51:0b:f1:bd: fb:8e:d1:e8:f5:40:b3:8a:33:cc:d2:e5:52:03:f8:a8:c1:d0: 40:6c:b1:bb:0e:ca:f9:32:d1:75:ed:b6:4b:e3:74:98:e1:03: fc:cf:8a:92:31:74:0d:13:b7:90:58:28:c7:37:2b:22:86:6c: cf:7f:bb:87:bb:ad:8f:12:9b:84:38:d1:24:bd:08:34:7a:46: b1:24:c7:5f:da:ee:32:ad:2e:71:e4:56:93:eb:0b:6e:42:10: 9b:4a:4d:6b:33:84:fa:0b:1c:f1:9d:0b:8d:2a:6e:9e:36:e7: f3:97:0d:25:59:d8:fa:9d:ea:59:14:b9:82:30:4f:83:cf:32: 2e:72:59:b6:db:64:54:cd:81:f8:d8:f7:95:0a:b4:0b:39:98: e8:a9:54:ec:85:02:65:16:b8:f7:1e:6a:48:6c:5f:90:73:fd: cb:3a:58:41:26:57:15:a7:bc:dd:82:1c:ef:df:23:84:07:c6: 84:f8:86:ed -----BEGIN CERTIFICATE----- MIIFSDCCBDCgAwIBAgIUQbraEz3MycSAyyR3ZLfd8iCc8DkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjQ2RkJGMUREMzU0ODc1NjhGQzcwODc2N0YwODVGQUQy ODgxRjU2RDAeFw0yNTEwMDkwMDI3MDZaFw0yNTEwMTAwNDI2MDZaMDMxMTAvBgNV BAMTKDlDNTU0REZCQTcxMjA1QTc4QjQyNzI2RTkxRjkzRUIzMTE1OThDOTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJA8VQ60oNXBU6nLLwWIpSo28O 3ake2cTpYtOxZO9oxs693FML6HMjLvy0kyGIOMNOQTr8jB96AiAH5B7mTwNH1se/ OsQ7uc6XafZAdXnc2MoGrolwG6U4BSgic9yLYOUMG7WE0KpX4Ip3RrF9R6//2opq +gfDc5jRwpwoRFzv3k0D5qn5/sE21fI47e0yBCDGlohpfCLeQ9GoKq3Jl328vNNp geASXQFoExk0PdJGOR5FTBTvdLleidyrB9Ecs3ZMhH96I2ticyVYAPTXC1+TNGl1 nf05kneI2bMLWyf4Je3js3nnxkuzKQ5lWeatijKxI4Hcq3hOrQ8BahgsOv5ZAgMB AAGjggJSMIICTjAdBgNVHQ4EFgQUnFVN+6cSBaeLQnJukfk+sxFZjJYwHwYDVR0j BBgwFoAUtG+/HdNUh1aPxwh2fwhfrSiB9W0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvY2Y4MWUyMzUtODE1OC00MDdlLWJjZmYtZjA5NjM0ODM1 N2EyLzIvQjQ2RkJGMUREMzU0ODc1NjhGQzcwODc2N0YwODVGQUQyODgxRjU2RC5j cmwwbwYIKwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL2tyaWxsLjQ3 MjcyLm5ldC9yZXBvL0hZRUhPU1QvNS9CNDZGQkYxREQzNTQ4NzU2OEZDNzA4NzY3 RjA4NUZBRDI4ODFGNTZELmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2NmODFlMjM1LTgxNTgtNDA3ZS1iY2ZmLWYwOTYzNDgzNTdhMi8yL0I0NkZCRjFE RDM1NDg3NTY4RkM3MDg3NjdGMDg1RkFEMjg4MUY1NkQubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQDH+a6q qP5fTE3SlSlHr3nYQqANCaUONEGpIsmRsN4QxJFUnz15J2nxQHNR20KlTrXrRh32 U2AHIT9EI5mLfSN81WxpaVEL8b37jtHo9UCzijPM0uVSA/iowdBAbLG7Dsr5MtF1 7bZL43SY4QP8z4qSMXQNE7eQWCjHNysihmzPf7uHu62PEpuEONEkvQg0ekaxJMdf 2u4yrS5x5FaT6wtuQhCbSk1rM4T6CxzxnQuNKm6eNufzlw0lWdj6nepZFLmCME+D zzIuclm222RUzYH42PeVCrQLOZjoqVTshQJlFrj3HmpIbF+Qc/3LOlhBJlcVp7zd ghzv3yOEB8aE+Ibt -----END CERTIFICATE-----Generated at Thu Oct 9 05:38:36 2025 by rpki-client