$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/cf81e235-8158-407e-bcff-f096348357a2/2/B46FBF1DD35487568FC708767F085FAD2881F56D.mft File: B46FBF1DD35487568FC708767F085FAD2881F56D.mft (raw, json) Hash identifier: 3X/KzaO2xOchBhrCcSlmBIoRAj0GKmOSfoukmSzBGcc= Subject key identifier: 2E:EC:20:B4:51:06:59:81:0B:65:57:FD:F0:F8:98:22:4B:1F:D6:2F Authority key identifier: B4:6F:BF:1D:D3:54:87:56:8F:C7:08:76:7F:08:5F:AD:28:81:F5:6D Certificate issuer: /CN=B46FBF1DD35487568FC708767F085FAD2881F56D Certificate serial: 442AB1E0B72DB2C3BCA7DAE0CA53C70F4CB78FD5 Authority info access: rsync://krill.47272.net/repo/HYEHOST/5/B46FBF1DD35487568FC708767F085FAD2881F56D.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/cf81e235-8158-407e-bcff-f096348357a2/2/B46FBF1DD35487568FC708767F085FAD2881F56D.mft Manifest number: 04 Signing time: Sat 05 Jul 2025 09:31:54 +0000 Manifest this update: Sat 05 Jul 2025 09:26:54 +0000 Manifest next update: Sun 06 Jul 2025 10:50:54 +0000 Files and hashes: 1: B46FBF1DD35487568FC708767F085FAD2881F56D.crl (hash: wCeYconH3pZJ0509yYE63zEQdf/nuSzzdbDUOPY5g3c=) 2: 326130393a353463373a313030313a3a2f34382d3438203d3e20323134323939.roa (hash: ZcdksXusZvsGLtEnzA79bXu4R9tRtoB6C1m74jW5A3Q=) 3: 326130393a353463373a316562653a3a2f34382d3438203d3e20323039383636.roa (hash: VGq9MXxV3q0KHWq1w3L98ANgxY0Rn68lBES1HVsVMxg=) 4: 326130353a646663333a666434303a3a2f34342d3438203d3e20323134323939.roa (hash: FrXtmk7pAG6qQfvQv6ZeMBaIdLdax1zCCasuBlvhYoQ=) 5: 326130393a353463373a313030303a3a2f34382d3438203d3e20323134323939.roa (hash: FciUVAzI9S+mi5njON8p5QSvWZZPmoftRYdBUiJGcwc=) 6: 326130393a353463373a316562653a3a2f34382d3438203d3e20323134323939.roa (hash: EzVCbaMm1BT+4VuCpmm/8/DdQRnkJJongvTgVxll+Yw=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/cf81e235-8158-407e-bcff-f096348357a2/2/B46FBF1DD35487568FC708767F085FAD2881F56D.crl rsync://rsync.paas.rpki.ripe.net/repository/cf81e235-8158-407e-bcff-f096348357a2/2/B46FBF1DD35487568FC708767F085FAD2881F56D.mft rsync://krill.47272.net/repo/HYEHOST/5/B46FBF1DD35487568FC708767F085FAD2881F56D.cer rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 06 Jul 2025 10:50:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:2a:b1:e0:b7:2d:b2:c3:bc:a7:da:e0:ca:53:c7:0f:4c:b7:8f:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B46FBF1DD35487568FC708767F085FAD2881F56D Validity Not Before: Jul 5 09:26:54 2025 GMT Not After : Jul 6 10:50:54 2025 GMT Subject: CN=2EEC20B4510659810B6557FDF0F898224B1FD62F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:98:64:40:54:24:0f:56:66:1b:87:75:ab:ac: d6:dc:50:88:ca:05:29:c8:60:3a:f6:d5:b8:7b:61: 8d:de:bd:d0:dc:28:52:b9:46:56:a6:56:38:20:a0: a5:9b:b3:02:a9:04:c2:91:70:3f:5b:30:bc:db:e0: 41:22:7f:7f:7b:8f:02:d0:cf:f8:08:72:61:19:97: 55:ef:2c:77:2c:da:8f:c3:6b:9e:56:2e:d3:00:c8: 5f:15:58:5a:b3:dc:68:0d:57:fb:bb:6b:26:53:76: 52:36:d3:d9:c6:2a:31:ff:5d:67:72:d7:d7:f0:f7: 71:84:87:70:d0:46:92:9c:17:0c:94:ce:5a:30:64: 94:65:57:09:7d:43:24:c0:af:e5:e1:ce:71:85:2d: 1f:26:dc:b5:30:cd:f9:11:36:3c:9e:2f:da:1c:76: 11:dc:79:61:29:e5:b1:08:e6:96:51:97:0a:cf:e4: 34:da:8e:bd:55:9b:af:53:ca:15:bc:fb:b2:79:2d: 72:21:67:ca:f5:79:17:a2:09:47:1b:9e:65:f3:8b: c0:f6:71:51:0a:bc:61:7f:ac:8e:98:2b:a9:a0:43: 16:f4:84:d4:51:40:99:58:c6:0d:87:1e:4a:1e:7d: 96:b7:72:d9:50:81:76:b8:78:0b:60:f4:8c:48:ed: 7f:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:EC:20:B4:51:06:59:81:0B:65:57:FD:F0:F8:98:22:4B:1F:D6:2F X509v3 Authority Key Identifier: keyid:B4:6F:BF:1D:D3:54:87:56:8F:C7:08:76:7F:08:5F:AD:28:81:F5:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/cf81e235-8158-407e-bcff-f096348357a2/2/B46FBF1DD35487568FC708767F085FAD2881F56D.crl Authority Information Access: CA Issuers - URI:rsync://krill.47272.net/repo/HYEHOST/5/B46FBF1DD35487568FC708767F085FAD2881F56D.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/cf81e235-8158-407e-bcff-f096348357a2/2/B46FBF1DD35487568FC708767F085FAD2881F56D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b0:07:6f:6e:78:58:3d:19:db:1d:0d:9a:83:d0:e1:a5:06:1b: 4d:08:ae:c5:78:40:0d:f8:2f:92:cb:d1:2c:dc:bb:62:88:74: d4:b5:2c:49:db:03:e5:5c:32:f2:43:2e:71:c9:85:81:40:e2: 64:83:66:b7:bd:2b:06:ca:c2:2e:d4:f7:33:75:6b:17:6a:ef: 88:25:85:50:37:d5:0f:1c:7f:1c:e1:77:51:6a:44:74:08:97: af:15:f3:3c:7b:11:99:64:8d:14:b8:e0:94:c1:83:f9:a3:b7: 6d:0d:91:40:c8:c9:c6:dd:1a:25:e7:3a:91:85:00:cc:fb:5c: a3:f8:de:b2:c7:66:53:40:7c:36:be:34:8d:2a:49:8f:b3:db: 0e:a5:74:b9:9b:a4:a5:4e:6a:4c:3f:45:f9:3d:53:2a:94:07: fb:7b:b9:9d:12:b0:f6:76:6a:01:b0:94:d5:46:e6:bb:9a:7b: be:6a:0d:94:5a:b9:c1:81:77:22:33:8c:6b:b2:9b:83:db:17: a2:c6:dd:99:46:44:a0:08:7c:d9:4a:c5:f6:bf:75:2c:4f:e4: 85:30:6f:5f:e4:6d:27:a1:64:a7:23:84:32:1d:ee:23:8e:b7: 3e:17:f9:86:ed:6c:0b:ae:20:b9:d0:75:4a:94:3e:4a:a6:d3: bf:1e:e6:6b -----BEGIN CERTIFICATE----- MIIFSDCCBDCgAwIBAgIURCqx4LctssO8p9rgylPHD0y3j9UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjQ2RkJGMUREMzU0ODc1NjhGQzcwODc2N0YwODVGQUQy ODgxRjU2RDAeFw0yNTA3MDUwOTI2NTRaFw0yNTA3MDYxMDUwNTRaMDMxMTAvBgNV BAMTKDJFRUMyMEI0NTEwNjU5ODEwQjY1NTdGREYwRjg5ODIyNEIxRkQ2MkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDvmGRAVCQPVmYbh3WrrNbcUIjK BSnIYDr21bh7YY3evdDcKFK5RlamVjggoKWbswKpBMKRcD9bMLzb4EEif397jwLQ z/gIcmEZl1XvLHcs2o/Da55WLtMAyF8VWFqz3GgNV/u7ayZTdlI209nGKjH/XWdy 19fw93GEh3DQRpKcFwyUzlowZJRlVwl9QyTAr+XhznGFLR8m3LUwzfkRNjyeL9oc dhHceWEp5bEI5pZRlwrP5DTajr1Vm69TyhW8+7J5LXIhZ8r1eReiCUcbnmXzi8D2 cVEKvGF/rI6YK6mgQxb0hNRRQJlYxg2HHkoefZa3ctlQgXa4eAtg9IxI7X/XAgMB AAGjggJSMIICTjAdBgNVHQ4EFgQULuwgtFEGWYELZVf98PiYIksf1i8wHwYDVR0j BBgwFoAUtG+/HdNUh1aPxwh2fwhfrSiB9W0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvY2Y4MWUyMzUtODE1OC00MDdlLWJjZmYtZjA5NjM0ODM1 N2EyLzIvQjQ2RkJGMUREMzU0ODc1NjhGQzcwODc2N0YwODVGQUQyODgxRjU2RC5j cmwwbwYIKwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL2tyaWxsLjQ3 MjcyLm5ldC9yZXBvL0hZRUhPU1QvNS9CNDZGQkYxREQzNTQ4NzU2OEZDNzA4NzY3 RjA4NUZBRDI4ODFGNTZELmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2NmODFlMjM1LTgxNTgtNDA3ZS1iY2ZmLWYwOTYzNDgzNTdhMi8yL0I0NkZCRjFE RDM1NDg3NTY4RkM3MDg3NjdGMDg1RkFEMjg4MUY1NkQubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCwB29u eFg9GdsdDZqD0OGlBhtNCK7FeEAN+C+Sy9Es3LtiiHTUtSxJ2wPlXDLyQy5xyYWB QOJkg2a3vSsGysIu1PczdWsXau+IJYVQN9UPHH8c4XdRakR0CJevFfM8exGZZI0U uOCUwYP5o7dtDZFAyMnG3Rol5zqRhQDM+1yj+N6yx2ZTQHw2vjSNKkmPs9sOpXS5 m6SlTmpMP0X5PVMqlAf7e7mdErD2dmoBsJTVRua7mnu+ag2UWrnBgXciM4xrspuD 2xeixt2ZRkSgCHzZSsX2v3UsT+SFMG9f5G0noWSnI4QyHe4jjrc+F/mG7WwLriC5 0HVKlD5KptO/HuZr -----END CERTIFICATE-----Generated at Sat Jul 5 23:04:22 2025 by rpki-client