$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/9/2F2C3124012C07F6775A6241DFC63BE0414C98AD.mft File: 2F2C3124012C07F6775A6241DFC63BE0414C98AD.mft (raw, json) Hash identifier: CmLnXYrKChIXcCENR+ZYX1FbGcknVYf5FAeECi0pSNo= Subject key identifier: CC:C2:BB:2E:B2:1A:20:73:A6:9B:B2:41:05:5A:B4:1E:3E:DA:6F:13 Authority key identifier: 2F:2C:31:24:01:2C:07:F6:77:5A:62:41:DF:C6:3B:E0:41:4C:98:AD Certificate issuer: /CN=2F2C3124012C07F6775A6241DFC63BE0414C98AD Certificate serial: 4C0662DE3DEB2646DC78F0EBDAFFDA7F6B0F7C5B Authority info access: rsync://krill.47272.net/repo/HYEHOST/5/2F2C3124012C07F6775A6241DFC63BE0414C98AD.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/9/2F2C3124012C07F6775A6241DFC63BE0414C98AD.mft Manifest number: 42 Signing time: Wed 20 Aug 2025 08:32:00 +0000 Manifest this update: Wed 20 Aug 2025 08:27:00 +0000 Manifest next update: Thu 21 Aug 2025 09:49:00 +0000 Files and hashes: 1: 2F2C3124012C07F6775A6241DFC63BE0414C98AD.crl (hash: TvsOO6dRrMUg3797vvjtE6RU4hsagcbkf/dAkqXIsMY=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/9/2F2C3124012C07F6775A6241DFC63BE0414C98AD.crl rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/9/2F2C3124012C07F6775A6241DFC63BE0414C98AD.mft rsync://krill.47272.net/repo/HYEHOST/5/2F2C3124012C07F6775A6241DFC63BE0414C98AD.cer rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 21 Aug 2025 04:58:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:06:62:de:3d:eb:26:46:dc:78:f0:eb:da:ff:da:7f:6b:0f:7c:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2F2C3124012C07F6775A6241DFC63BE0414C98AD Validity Not Before: Aug 20 08:27:00 2025 GMT Not After : Aug 21 09:49:00 2025 GMT Subject: CN=CCC2BB2EB21A2073A69BB241055AB41E3EDA6F13 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:15:19:07:77:de:c9:ca:95:8f:f3:89:96:c9: 6e:55:ab:59:c7:ca:b4:9e:8d:e0:1a:65:24:75:1d: 11:2f:46:af:7e:49:ae:7a:15:58:92:6c:c6:1c:5d: b4:4f:76:33:d5:ea:04:20:e9:27:ab:15:d6:02:85: a7:05:ad:d7:df:36:fa:a9:7e:49:9d:ee:b1:5a:f0: 86:4f:c8:26:9c:00:e5:57:9b:e7:df:d6:d5:70:69: 0e:c1:d8:79:8b:c3:b6:5f:60:c3:d5:dc:ba:a6:55: eb:c8:c4:2a:25:ed:d6:24:1d:f8:87:46:af:a0:be: 93:58:1c:b2:a1:5e:ed:3e:12:fa:d6:f8:93:ce:31: c8:e5:77:f7:66:31:f9:b3:cb:25:3d:60:50:df:87: 15:51:f5:2f:cd:6d:0c:54:22:9e:fb:40:97:f2:4e: 8a:e1:f2:42:10:bc:d0:c5:de:90:70:45:1f:2d:53: ca:d2:19:32:5b:5f:6b:e7:d3:18:0f:d9:de:c9:6c: 5e:8f:1a:3e:91:d7:f6:22:f8:1f:ea:63:e2:73:02: 78:e2:a9:50:ca:c5:28:45:35:48:cd:b9:37:18:da: be:fb:c6:e0:59:2a:fa:2e:1a:fc:c9:72:cf:fb:c9: ab:03:58:38:27:83:40:78:41:9c:6f:94:c2:6f:27: b6:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:C2:BB:2E:B2:1A:20:73:A6:9B:B2:41:05:5A:B4:1E:3E:DA:6F:13 X509v3 Authority Key Identifier: keyid:2F:2C:31:24:01:2C:07:F6:77:5A:62:41:DF:C6:3B:E0:41:4C:98:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/9/2F2C3124012C07F6775A6241DFC63BE0414C98AD.crl Authority Information Access: CA Issuers - URI:rsync://krill.47272.net/repo/HYEHOST/5/2F2C3124012C07F6775A6241DFC63BE0414C98AD.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/9/2F2C3124012C07F6775A6241DFC63BE0414C98AD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:7f:e9:91:e0:93:7c:57:04:e3:72:cf:29:a0:18:5f:ea:35: 3e:bc:0f:a7:45:c2:c7:c7:4f:72:e8:37:58:5e:b4:62:32:0c: 24:6b:f7:0b:e4:c0:f1:56:8b:20:2a:a9:94:d3:ae:93:2e:6c: ad:ca:3a:38:e6:d7:1f:1d:8c:68:e6:e9:c5:39:e1:a5:31:31: e7:81:81:42:5b:30:7c:d9:c0:ec:7e:ec:d2:48:c8:0e:3a:fe: 26:fb:17:95:fd:8e:37:71:80:43:51:10:f5:34:0d:3d:7b:08: ce:ec:2b:d0:22:2a:34:45:9d:91:9c:a9:d8:1b:a1:5f:47:2f: 5f:38:66:1f:83:61:07:64:a7:12:86:0b:79:8e:2d:72:24:f3: cb:12:6a:72:56:70:41:0b:d1:cd:e0:9b:1f:ee:93:1d:f3:94: 9b:dc:3f:7e:73:47:d2:b4:b9:d3:12:a6:33:d8:27:55:0c:09: cb:e2:11:d1:03:db:92:2c:b4:46:0a:c6:27:5a:9b:38:29:39: 8b:e1:2a:54:8b:fa:62:3d:60:fa:21:e2:de:bd:84:e5:85:4b: be:ff:38:60:54:10:9c:7b:65:d5:35:5f:ff:7f:de:1c:cc:a0: 84:7b:dd:7b:24:0e:81:75:d2:09:0c:81:b3:12:a2:5e:b8:71: 25:f1:81:c2 -----BEGIN CERTIFICATE----- MIIFSDCCBDCgAwIBAgIUTAZi3j3rJkbcePDr2v/af2sPfFswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkYyQzMxMjQwMTJDMDdGNjc3NUE2MjQxREZDNjNCRTA0 MTRDOThBRDAeFw0yNTA4MjAwODI3MDBaFw0yNTA4MjEwOTQ5MDBaMDMxMTAvBgNV BAMTKENDQzJCQjJFQjIxQTIwNzNBNjlCQjI0MTA1NUFCNDFFM0VEQTZGMTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCcFRkHd97JypWP84mWyW5Vq1nH yrSejeAaZSR1HREvRq9+Sa56FViSbMYcXbRPdjPV6gQg6SerFdYChacFrdffNvqp fkmd7rFa8IZPyCacAOVXm+ff1tVwaQ7B2HmLw7ZfYMPV3LqmVevIxCol7dYkHfiH Rq+gvpNYHLKhXu0+EvrW+JPOMcjld/dmMfmzyyU9YFDfhxVR9S/NbQxUIp77QJfy Torh8kIQvNDF3pBwRR8tU8rSGTJbX2vn0xgP2d7JbF6PGj6R1/Yi+B/qY+JzAnji qVDKxShFNUjNuTcY2r77xuBZKvouGvzJcs/7yasDWDgng0B4QZxvlMJvJ7aXAgMB AAGjggJSMIICTjAdBgNVHQ4EFgQUzMK7LrIaIHOmm7JBBVq0Hj7abxMwHwYDVR0j BBgwFoAULywxJAEsB/Z3WmJB38Y74EFMmK0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZGU3ZDU1ZjctZWU2MC00MDA1LWJhZDctYjQyODE4Y2Y1 MGU4LzkvMkYyQzMxMjQwMTJDMDdGNjc3NUE2MjQxREZDNjNCRTA0MTRDOThBRC5j cmwwbwYIKwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL2tyaWxsLjQ3 MjcyLm5ldC9yZXBvL0hZRUhPU1QvNS8yRjJDMzEyNDAxMkMwN0Y2Nzc1QTYyNDFE RkM2M0JFMDQxNEM5OEFELmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2RlN2Q1NWY3LWVlNjAtNDAwNS1iYWQ3LWI0MjgxOGNmNTBlOC85LzJGMkMzMTI0 MDEyQzA3RjY3NzVBNjI0MURGQzYzQkUwNDE0Qzk4QUQubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCVf+mR 4JN8VwTjcs8poBhf6jU+vA+nRcLHx09y6DdYXrRiMgwka/cL5MDxVosgKqmU066T Lmytyjo45tcfHYxo5unFOeGlMTHngYFCWzB82cDsfuzSSMgOOv4m+xeV/Y43cYBD URD1NA09ewjO7CvQIio0RZ2RnKnYG6FfRy9fOGYfg2EHZKcShgt5ji1yJPPLEmpy VnBBC9HN4Jsf7pMd85Sb3D9+c0fStLnTEqYz2CdVDAnL4hHRA9uSLLRGCsYnWps4 KTmL4SpUi/piPWD6IeLevYTlhUu+/zhgVBCce2XVNV//f94czKCEe917JA6BddIJ DIGzEqJeuHEl8YHC -----END CERTIFICATE-----Generated at Wed Aug 20 16:19:28 2025 by rpki-client