$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/9/2F2C3124012C07F6775A6241DFC63BE0414C98AD.mft File: 2F2C3124012C07F6775A6241DFC63BE0414C98AD.mft (raw, json) Hash identifier: 4NZU2ZfKfV9cMhsWHzAOFJ+FAtiL7WFRjapVFH1CMDc= Subject key identifier: CA:A3:66:A6:64:41:F3:9F:17:15:C0:6B:74:2A:08:A0:73:D2:D9:D7 Authority key identifier: 2F:2C:31:24:01:2C:07:F6:77:5A:62:41:DF:C6:3B:E0:41:4C:98:AD Certificate issuer: /CN=2F2C3124012C07F6775A6241DFC63BE0414C98AD Certificate serial: 613FA12041B9ABBD16159D477F66B4ECC8B8A749 Authority info access: rsync://krill.47272.net/repo/HYEHOST/5/2F2C3124012C07F6775A6241DFC63BE0414C98AD.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/9/2F2C3124012C07F6775A6241DFC63BE0414C98AD.mft Manifest number: 0150 Signing time: Wed 04 Mar 2026 19:01:09 +0000 Manifest this update: Wed 04 Mar 2026 18:56:09 +0000 Manifest next update: Thu 05 Mar 2026 20:23:09 +0000 Files and hashes: 1: 2F2C3124012C07F6775A6241DFC63BE0414C98AD.crl (hash: x2qhWTj1+aoJaixmnPHQ2Y0j8X3m3UpL/IhgzVTsNdg=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/9/2F2C3124012C07F6775A6241DFC63BE0414C98AD.crl rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/9/2F2C3124012C07F6775A6241DFC63BE0414C98AD.mft rsync://krill.47272.net/repo/HYEHOST/5/2F2C3124012C07F6775A6241DFC63BE0414C98AD.cer rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 05 Mar 2026 20:23:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:3f:a1:20:41:b9:ab:bd:16:15:9d:47:7f:66:b4:ec:c8:b8:a7:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2F2C3124012C07F6775A6241DFC63BE0414C98AD Validity Not Before: Mar 4 18:56:09 2026 GMT Not After : Mar 5 20:23:09 2026 GMT Subject: CN=CAA366A66441F39F1715C06B742A08A073D2D9D7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:2d:8a:7d:d1:98:28:bd:50:56:aa:c4:2b:2d: ce:b0:a9:f8:6f:77:4d:f0:00:8f:ca:66:18:53:92: 17:93:bc:2f:f0:53:13:17:83:a2:0e:37:83:48:c0: 65:04:f3:88:91:b5:92:fd:f9:ad:10:b9:29:13:92: bd:54:20:cf:08:6e:7f:c7:b5:9f:91:64:42:7a:3f: 7a:8f:3a:a9:6e:ef:c1:d3:17:68:16:fc:bf:91:fc: 1a:9b:82:3a:d2:b8:14:01:27:3f:42:67:b8:08:89: 8e:07:a4:2f:ed:6d:9f:79:3c:6c:b2:27:bd:14:c1: d7:4b:67:16:8d:78:2e:0a:be:a8:6c:78:db:05:fd: 96:9c:9c:f1:24:f4:7d:4f:52:e3:f4:33:6d:d7:bc: c9:94:30:71:4d:db:72:cc:a4:90:47:4c:f1:3a:4a: cf:32:58:4f:d3:00:fb:74:d6:8a:f0:0f:a5:d8:f9: 3d:89:d0:aa:8f:f6:e4:b3:29:21:4d:2b:88:25:06: d0:3b:cb:6e:f2:74:1d:70:b1:fb:2c:0e:5a:33:1e: 66:b4:8a:57:d9:94:35:52:16:a6:2d:98:7b:56:9f: bb:22:55:a2:07:f1:03:54:45:66:f3:91:d0:d2:cc: ce:98:a9:fc:ec:c5:7d:73:12:ba:c3:84:28:70:7c: 3d:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:A3:66:A6:64:41:F3:9F:17:15:C0:6B:74:2A:08:A0:73:D2:D9:D7 X509v3 Authority Key Identifier: keyid:2F:2C:31:24:01:2C:07:F6:77:5A:62:41:DF:C6:3B:E0:41:4C:98:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/9/2F2C3124012C07F6775A6241DFC63BE0414C98AD.crl Authority Information Access: CA Issuers - URI:rsync://krill.47272.net/repo/HYEHOST/5/2F2C3124012C07F6775A6241DFC63BE0414C98AD.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/9/2F2C3124012C07F6775A6241DFC63BE0414C98AD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:3c:54:89:e1:8f:74:bb:f3:1a:5f:7d:bd:71:25:2d:12:dc: a8:e1:e1:95:8e:ef:49:24:71:c0:02:28:26:5d:a6:a1:3a:cc: 2b:34:7d:2d:2e:09:a9:1a:8a:bc:11:52:2f:69:79:f5:ef:dd: fc:0c:e7:62:10:26:35:7c:fd:2f:69:35:5d:c4:64:12:45:bb: 3b:4a:da:ce:bf:10:11:25:c1:91:38:10:d1:7f:9a:2e:26:f4: b2:8a:d7:69:92:34:96:3f:05:89:8c:67:8c:45:70:6f:2d:2e: 13:d7:9e:d0:4e:be:e0:21:6d:b6:69:7e:0b:6c:b9:4f:4c:d1: 52:be:01:49:85:72:47:95:25:ae:fe:83:22:3b:24:3c:d7:ae: 63:ca:86:64:1e:8d:0d:49:c8:0b:2f:01:ad:b2:eb:96:a1:7a: 73:a9:b1:a4:64:ff:1c:c3:e9:08:f7:ad:7a:fc:76:4a:74:61: 13:c8:14:ed:be:19:82:b2:c5:64:84:18:a6:ef:59:96:f7:d9: bf:7f:c3:a3:15:7b:30:34:cb:c1:f0:d9:83:59:e2:e8:f6:f1: fe:01:eb:89:bd:dc:f7:d1:e3:65:8f:9f:59:90:d5:09:d6:cb: 46:a9:ef:01:54:06:a3:bb:7a:43:d0:58:f7:72:2e:c3:44:c3: 21:91:c5:53 -----BEGIN CERTIFICATE----- MIIFSDCCBDCgAwIBAgIUYT+hIEG5q70WFZ1Hf2a07Mi4p0kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkYyQzMxMjQwMTJDMDdGNjc3NUE2MjQxREZDNjNCRTA0 MTRDOThBRDAeFw0yNjAzMDQxODU2MDlaFw0yNjAzMDUyMDIzMDlaMDMxMTAvBgNV BAMTKENBQTM2NkE2NjQ0MUYzOUYxNzE1QzA2Qjc0MkEwOEEwNzNEMkQ5RDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDuLYp90ZgovVBWqsQrLc6wqfhv d03wAI/KZhhTkheTvC/wUxMXg6ION4NIwGUE84iRtZL9+a0QuSkTkr1UIM8Ibn/H tZ+RZEJ6P3qPOqlu78HTF2gW/L+R/BqbgjrSuBQBJz9CZ7gIiY4HpC/tbZ95PGyy J70UwddLZxaNeC4KvqhseNsF/ZacnPEk9H1PUuP0M23XvMmUMHFN23LMpJBHTPE6 Ss8yWE/TAPt01orwD6XY+T2J0KqP9uSzKSFNK4glBtA7y27ydB1wsfssDlozHma0 ilfZlDVSFqYtmHtWn7siVaIH8QNURWbzkdDSzM6YqfzsxX1zErrDhChwfD3PAgMB AAGjggJSMIICTjAdBgNVHQ4EFgQUyqNmpmRB858XFcBrdCoIoHPS2dcwHwYDVR0j BBgwFoAULywxJAEsB/Z3WmJB38Y74EFMmK0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZGU3ZDU1ZjctZWU2MC00MDA1LWJhZDctYjQyODE4Y2Y1 MGU4LzkvMkYyQzMxMjQwMTJDMDdGNjc3NUE2MjQxREZDNjNCRTA0MTRDOThBRC5j cmwwbwYIKwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL2tyaWxsLjQ3 MjcyLm5ldC9yZXBvL0hZRUhPU1QvNS8yRjJDMzEyNDAxMkMwN0Y2Nzc1QTYyNDFE RkM2M0JFMDQxNEM5OEFELmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2RlN2Q1NWY3LWVlNjAtNDAwNS1iYWQ3LWI0MjgxOGNmNTBlOC85LzJGMkMzMTI0 MDEyQzA3RjY3NzVBNjI0MURGQzYzQkUwNDE0Qzk4QUQubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQA4PFSJ 4Y90u/MaX329cSUtEtyo4eGVju9JJHHAAigmXaahOswrNH0tLgmpGoq8EVIvaXn1 7938DOdiECY1fP0vaTVdxGQSRbs7StrOvxARJcGROBDRf5ouJvSyitdpkjSWPwWJ jGeMRXBvLS4T157QTr7gIW22aX4LbLlPTNFSvgFJhXJHlSWu/oMiOyQ8165jyoZk Ho0NScgLLwGtsuuWoXpzqbGkZP8cw+kI9616/HZKdGETyBTtvhmCssVkhBim71mW 99m/f8OjFXswNMvB8NmDWeLo9vH+AeuJvdz30eNlj59ZkNUJ1stGqe8BVAaju3pD 0Fj3ci7DRMMhkcVT -----END CERTIFICATE-----Generated at Thu Mar 5 13:48:08 2026 by rpki-client