Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/9/2F2C3124012C07F6775A6241DFC63BE0414C98AD.mft
File:                     2F2C3124012C07F6775A6241DFC63BE0414C98AD.mft (raw, json)
Hash identifier:          lCGHNrERC1Dtt7s9Q6C/PfrcaPaJ2w8yZ06ytl2tKVs=
Subject key identifier:   16:BF:63:4C:8B:9A:F6:54:61:6C:89:77:BF:ED:B3:0B:21:0D:BE:8B
Authority key identifier: 2F:2C:31:24:01:2C:07:F6:77:5A:62:41:DF:C6:3B:E0:41:4C:98:AD
Certificate issuer:       /CN=2F2C3124012C07F6775A6241DFC63BE0414C98AD
Certificate serial:       240C86C033A42073DF4B19D1853845D49D0C67DE
Authority info access:    rsync://krill.47272.net/repo/HYEHOST/5/2F2C3124012C07F6775A6241DFC63BE0414C98AD.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/9/2F2C3124012C07F6775A6241DFC63BE0414C98AD.mft
Manifest number:          01FC
Signing time:             Fri 10 Jul 2026 14:43:19 +0000
Manifest this update:     Fri 10 Jul 2026 14:38:19 +0000
Manifest next update:     Sat 11 Jul 2026 17:03:19 +0000
Files and hashes:         1: 2F2C3124012C07F6775A6241DFC63BE0414C98AD.crl (hash: W4lIKQ/vAWeBQQdojN8VgA+MmT0fmKlD2SbjQATuCbM=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/9/2F2C3124012C07F6775A6241DFC63BE0414C98AD.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/9/2F2C3124012C07F6775A6241DFC63BE0414C98AD.mft
                          rsync://krill.47272.net/repo/HYEHOST/5/2F2C3124012C07F6775A6241DFC63BE0414C98AD.cer
                          rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl
                          rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 11 Jul 2026 08:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:0c:86:c0:33:a4:20:73:df:4b:19:d1:85:38:45:d4:9d:0c:67:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2F2C3124012C07F6775A6241DFC63BE0414C98AD
        Validity
            Not Before: Jul 10 14:38:19 2026 GMT
            Not After : Jul 11 17:03:19 2026 GMT
        Subject: CN=16BF634C8B9AF654616C8977BFEDB30B210DBE8B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:96:66:0c:b9:21:87:bd:69:9c:6c:ca:c7:b1:
                    b4:09:59:c4:10:9b:b2:93:57:68:0f:7c:cf:90:56:
                    c2:a5:b3:f5:7b:0e:36:53:6d:7d:e3:81:40:ea:32:
                    57:12:df:92:eb:8a:29:19:33:d5:66:4b:5e:15:e1:
                    b7:db:00:9c:44:54:59:2d:53:2f:9c:22:a6:ec:4e:
                    32:64:8d:02:49:a4:8a:23:e1:da:42:a2:35:1b:45:
                    87:c6:1c:99:e5:b2:f8:0f:ea:c9:c4:6a:a0:e8:d7:
                    65:23:8d:1e:63:ee:e5:3d:43:60:98:83:c7:99:9f:
                    4c:c0:31:a9:ea:15:fc:bc:cf:f7:3a:6a:7c:6b:a8:
                    3b:96:cf:fe:a9:b4:c6:1d:26:e2:dc:02:ae:cf:8e:
                    38:eb:dc:e2:4f:e2:bd:17:44:1f:dd:78:4a:48:ff:
                    04:32:24:1d:45:3b:fc:6d:27:5f:11:4e:60:fc:44:
                    7e:a9:ed:2f:4d:12:38:2e:75:db:f2:2c:5b:2a:8f:
                    4b:2a:f8:1a:80:96:2e:e2:49:52:6e:41:d1:8b:25:
                    79:33:42:a2:55:69:cd:78:55:4e:ca:73:16:2b:a0:
                    2f:cd:0e:0b:d0:4c:0c:01:98:66:db:dd:0e:9b:2d:
                    2d:4f:32:a8:cf:0c:f2:40:83:57:8e:55:eb:cb:de:
                    8a:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:BF:63:4C:8B:9A:F6:54:61:6C:89:77:BF:ED:B3:0B:21:0D:BE:8B
            X509v3 Authority Key Identifier:
                keyid:2F:2C:31:24:01:2C:07:F6:77:5A:62:41:DF:C6:3B:E0:41:4C:98:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/9/2F2C3124012C07F6775A6241DFC63BE0414C98AD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://krill.47272.net/repo/HYEHOST/5/2F2C3124012C07F6775A6241DFC63BE0414C98AD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/9/2F2C3124012C07F6775A6241DFC63BE0414C98AD.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:fe:1b:4d:48:20:c8:ad:7b:7a:2f:7d:21:e2:3c:a7:32:ff:
         d7:1c:93:0d:01:9e:f7:cb:94:5e:36:c0:21:67:37:9f:af:9f:
         89:88:86:fe:53:9a:e9:4c:37:99:85:09:6e:05:2a:4d:3e:be:
         97:ba:4d:b1:b0:21:60:ec:b7:d5:20:d9:c6:24:d1:33:6f:94:
         d9:56:2c:7e:29:2f:1e:d8:13:92:b6:a4:99:25:7d:23:ed:4c:
         55:b6:9f:b8:b4:e1:fd:37:96:fb:8e:68:51:9d:5d:37:a0:89:
         d1:2c:83:45:46:0d:bd:88:00:20:9c:87:0d:1b:e0:77:17:0a:
         c1:a1:98:cc:b1:25:57:14:a6:0f:7e:db:cd:a9:69:73:c4:00:
         83:c0:2e:98:70:a8:c5:0d:77:ab:bd:86:ac:35:c7:1a:39:bb:
         d3:d5:6f:aa:ae:31:d0:34:32:0d:cc:c0:dd:20:ab:7f:e9:8a:
         8c:87:8b:26:de:a2:e6:48:14:a0:ad:38:91:38:cb:83:75:73:
         9b:f7:71:0a:62:3d:44:46:a2:81:be:66:f6:72:cf:40:4f:fe:
         02:2f:78:da:f6:34:50:8b:6c:10:0c:d8:e9:f9:3a:c2:60:c9:
         c7:9f:f4:52:9b:0b:00:da:19:1a:9f:70:c4:39:e0:8b:14:3c:
         4d:c6:a1:42
-----BEGIN CERTIFICATE-----
MIIFSDCCBDCgAwIBAgIUJAyGwDOkIHPfSxnRhThF1J0MZ94wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkYyQzMxMjQwMTJDMDdGNjc3NUE2MjQxREZDNjNCRTA0
MTRDOThBRDAeFw0yNjA3MTAxNDM4MTlaFw0yNjA3MTExNzAzMTlaMDMxMTAvBgNV
BAMTKDE2QkY2MzRDOEI5QUY2NTQ2MTZDODk3N0JGRURCMzBCMjEwREJFOEIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxlmYMuSGHvWmcbMrHsbQJWcQQ
m7KTV2gPfM+QVsKls/V7DjZTbX3jgUDqMlcS35LriikZM9VmS14V4bfbAJxEVFkt
Uy+cIqbsTjJkjQJJpIoj4dpCojUbRYfGHJnlsvgP6snEaqDo12UjjR5j7uU9Q2CY
g8eZn0zAManqFfy8z/c6anxrqDuWz/6ptMYdJuLcAq7Pjjjr3OJP4r0XRB/deEpI
/wQyJB1FO/xtJ18RTmD8RH6p7S9NEjguddvyLFsqj0sq+BqAli7iSVJuQdGLJXkz
QqJVac14VU7KcxYroC/NDgvQTAwBmGbb3Q6bLS1PMqjPDPJAg1eOVevL3oq1AgMB
AAGjggJSMIICTjAdBgNVHQ4EFgQUFr9jTIua9lRhbIl3v+2zCyENvoswHwYDVR0j
BBgwFoAULywxJAEsB/Z3WmJB38Y74EFMmK0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZGU3ZDU1ZjctZWU2MC00MDA1LWJhZDctYjQyODE4Y2Y1
MGU4LzkvMkYyQzMxMjQwMTJDMDdGNjc3NUE2MjQxREZDNjNCRTA0MTRDOThBRC5j
cmwwbwYIKwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL2tyaWxsLjQ3
MjcyLm5ldC9yZXBvL0hZRUhPU1QvNS8yRjJDMzEyNDAxMkMwN0Y2Nzc1QTYyNDFE
RkM2M0JFMDQxNEM5OEFELmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF
BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L2RlN2Q1NWY3LWVlNjAtNDAwNS1iYWQ3LWI0MjgxOGNmNTBlOC85LzJGMkMzMTI0
MDEyQzA3RjY3NzVBNjI0MURGQzYzQkUwNDE0Qzk4QUQubWZ0MBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF
ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBA/htN
SCDIrXt6L30h4jynMv/XHJMNAZ73y5ReNsAhZzefr5+JiIb+U5rpTDeZhQluBSpN
Pr6Xuk2xsCFg7LfVINnGJNEzb5TZVix+KS8e2BOStqSZJX0j7UxVtp+4tOH9N5b7
jmhRnV03oInRLINFRg29iAAgnIcNG+B3FwrBoZjMsSVXFKYPftvNqWlzxACDwC6Y
cKjFDXervYasNccaObvT1W+qrjHQNDINzMDdIKt/6YqMh4sm3qLmSBSgrTiROMuD
dXOb93EKYj1ERqKBvmb2cs9AT/4CL3ja9jRQi2wQDNjp+TrCYMnHn/RSmwsA2hka
n3DEOeCLFDxNxqFC
-----END CERTIFICATE-----
Generated at Fri Jul 10 17:04:13 2026 by rpki-client