$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/9/2F2C3124012C07F6775A6241DFC63BE0414C98AD.mft File: 2F2C3124012C07F6775A6241DFC63BE0414C98AD.mft (raw, json) Hash identifier: CPAqMnohKwy2e/EpH56gI1wcjox2TlbuBrRvDMo4niY= Subject key identifier: 9C:D3:A4:2C:AA:16:15:E0:10:CA:2A:B1:53:D5:DA:14:E2:41:AC:4D Authority key identifier: 2F:2C:31:24:01:2C:07:F6:77:5A:62:41:DF:C6:3B:E0:41:4C:98:AD Certificate issuer: /CN=2F2C3124012C07F6775A6241DFC63BE0414C98AD Certificate serial: 7349D1AD1C50A0A2B81A7EFE2E018F41B3918D6A Authority info access: rsync://krill.47272.net/repo/HYEHOST/5/2F2C3124012C07F6775A6241DFC63BE0414C98AD.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/9/2F2C3124012C07F6775A6241DFC63BE0414C98AD.mft Manifest number: 0241 Signing time: Wed 26 Aug 2026 09:51:39 +0000 Manifest this update: Wed 26 Aug 2026 09:46:39 +0000 Manifest next update: Thu 27 Aug 2026 10:49:39 +0000 Files and hashes: 1: 2F2C3124012C07F6775A6241DFC63BE0414C98AD.crl (hash: lOt6jBMvbcKqyP1NWI3w5cXpYmOYtF09CXYC0m5Jts8=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/9/2F2C3124012C07F6775A6241DFC63BE0414C98AD.crl rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/9/2F2C3124012C07F6775A6241DFC63BE0414C98AD.mft rsync://krill.47272.net/repo/HYEHOST/5/2F2C3124012C07F6775A6241DFC63BE0414C98AD.cer rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 27 Aug 2026 10:49:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:49:d1:ad:1c:50:a0:a2:b8:1a:7e:fe:2e:01:8f:41:b3:91:8d:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2F2C3124012C07F6775A6241DFC63BE0414C98AD Validity Not Before: Aug 26 09:46:39 2026 GMT Not After : Aug 27 10:49:39 2026 GMT Subject: CN=9CD3A42CAA1615E010CA2AB153D5DA14E241AC4D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:32:f0:01:73:4d:6c:38:e3:db:fc:46:81:0e: e9:bf:da:59:1e:11:78:5e:c1:7c:94:99:33:11:92: 76:52:1e:6a:f6:63:7e:23:d2:94:11:aa:e0:25:7d: 51:3d:3a:03:dd:bb:c4:f4:a6:f8:ac:f0:fa:d7:ab: 57:cf:46:b8:8b:00:d0:e4:40:9d:12:ab:b8:1e:61: 92:f6:7d:af:10:52:0f:13:10:c4:79:75:a7:8d:8e: ee:4f:87:09:93:fc:65:3c:58:79:9b:0e:cc:73:b7: d4:4b:d2:7f:93:6e:7a:53:65:1e:f7:03:51:54:90: e2:48:3e:38:37:dc:7a:19:e6:22:3c:38:04:3c:08: 9b:6b:47:34:8c:64:97:b6:c3:75:b0:27:7d:38:82: 25:76:06:7f:e6:67:d5:ce:20:58:a4:e8:e9:56:ca: ed:01:c2:c7:1c:80:67:54:00:10:09:b5:11:44:56: 17:8f:7a:ab:e7:e7:7d:48:79:88:24:22:f2:fa:0e: 54:e4:59:18:4e:30:b6:24:a7:0b:9f:68:a0:52:23: 77:2f:a5:3c:ee:88:6d:c9:08:cd:17:1d:a5:89:54: 4c:94:32:a6:80:eb:68:78:7f:50:03:1f:ef:93:9c: d6:0a:53:6d:5a:d6:36:ce:43:5a:b5:8b:f3:ac:03: 81:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:D3:A4:2C:AA:16:15:E0:10:CA:2A:B1:53:D5:DA:14:E2:41:AC:4D X509v3 Authority Key Identifier: keyid:2F:2C:31:24:01:2C:07:F6:77:5A:62:41:DF:C6:3B:E0:41:4C:98:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/9/2F2C3124012C07F6775A6241DFC63BE0414C98AD.crl Authority Information Access: CA Issuers - URI:rsync://krill.47272.net/repo/HYEHOST/5/2F2C3124012C07F6775A6241DFC63BE0414C98AD.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/9/2F2C3124012C07F6775A6241DFC63BE0414C98AD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:90:86:5b:29:00:aa:a1:1e:d9:9e:88:55:29:08:a9:4b:e7: b0:f1:e1:c9:b0:63:58:c3:76:52:31:e2:db:c9:7d:11:b0:03: ec:34:86:09:ed:e7:dd:5e:cd:2d:36:ba:8a:44:ec:57:2e:07: 9c:22:cf:7b:f3:8c:77:54:82:21:a2:d1:b8:8a:ce:8a:81:8d: 2b:76:8a:ee:c5:c1:8e:3c:f4:df:e4:9d:ba:74:49:68:3d:a8: 9e:91:21:bf:02:5f:b5:16:01:12:38:8a:fb:a2:5c:8d:0e:29: cc:00:9c:31:9f:60:eb:2f:4d:33:c4:c7:e5:f3:49:9b:77:67: a2:9a:43:5b:f4:fc:ed:b1:94:41:c0:c7:44:26:3f:86:81:cc: 9f:70:b0:e0:23:5c:21:82:6c:04:dc:0e:bf:2a:4a:dc:48:7b: 0b:3d:6f:27:e0:8a:11:a4:71:4d:eb:32:c3:fb:29:d9:2e:8f: 50:90:b9:f9:7d:da:84:91:f4:3c:d7:41:aa:c6:51:6d:1d:a8: d0:4b:d9:e0:29:2f:56:55:f8:b6:4d:11:2f:b2:63:5c:98:95: 4c:3f:1f:1a:8b:de:b7:a2:fd:30:a1:24:c6:30:84:15:d8:7a: 38:e4:da:da:14:01:73:6f:bd:4f:52:20:aa:f0:24:69:a1:ae: 25:8f:d5:81 -----BEGIN CERTIFICATE----- MIIFSDCCBDCgAwIBAgIUc0nRrRxQoKK4Gn7+LgGPQbORjWowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkYyQzMxMjQwMTJDMDdGNjc3NUE2MjQxREZDNjNCRTA0 MTRDOThBRDAeFw0yNjA4MjYwOTQ2MzlaFw0yNjA4MjcxMDQ5MzlaMDMxMTAvBgNV BAMTKDlDRDNBNDJDQUExNjE1RTAxMENBMkFCMTUzRDVEQTE0RTI0MUFDNEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCPMvABc01sOOPb/EaBDum/2lke EXhewXyUmTMRknZSHmr2Y34j0pQRquAlfVE9OgPdu8T0pvis8PrXq1fPRriLANDk QJ0Sq7geYZL2fa8QUg8TEMR5daeNju5PhwmT/GU8WHmbDsxzt9RL0n+TbnpTZR73 A1FUkOJIPjg33HoZ5iI8OAQ8CJtrRzSMZJe2w3WwJ304giV2Bn/mZ9XOIFik6OlW yu0BwsccgGdUABAJtRFEVhePeqvn531IeYgkIvL6DlTkWRhOMLYkpwufaKBSI3cv pTzuiG3JCM0XHaWJVEyUMqaA62h4f1ADH++TnNYKU21a1jbOQ1q1i/OsA4GZAgMB AAGjggJSMIICTjAdBgNVHQ4EFgQUnNOkLKoWFeAQyiqxU9XaFOJBrE0wHwYDVR0j BBgwFoAULywxJAEsB/Z3WmJB38Y74EFMmK0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZGU3ZDU1ZjctZWU2MC00MDA1LWJhZDctYjQyODE4Y2Y1 MGU4LzkvMkYyQzMxMjQwMTJDMDdGNjc3NUE2MjQxREZDNjNCRTA0MTRDOThBRC5j cmwwbwYIKwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL2tyaWxsLjQ3 MjcyLm5ldC9yZXBvL0hZRUhPU1QvNS8yRjJDMzEyNDAxMkMwN0Y2Nzc1QTYyNDFE RkM2M0JFMDQxNEM5OEFELmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2RlN2Q1NWY3LWVlNjAtNDAwNS1iYWQ3LWI0MjgxOGNmNTBlOC85LzJGMkMzMTI0 MDEyQzA3RjY3NzVBNjI0MURGQzYzQkUwNDE0Qzk4QUQubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAVkIZb KQCqoR7ZnohVKQipS+ew8eHJsGNYw3ZSMeLbyX0RsAPsNIYJ7efdXs0tNrqKROxX LgecIs9784x3VIIhotG4is6KgY0rdoruxcGOPPTf5J26dEloPaiekSG/Al+1FgES OIr7olyNDinMAJwxn2DrL00zxMfl80mbd2eimkNb9PztsZRBwMdEJj+GgcyfcLDg I1whgmwE3A6/KkrcSHsLPW8n4IoRpHFN6zLD+ynZLo9QkLn5fdqEkfQ810GqxlFt HajQS9ngKS9WVfi2TREvsmNcmJVMPx8ai963ov0woSTGMIQV2Ho45NraFAFzb71P UiCq8CRpoa4lj9WB -----END CERTIFICATE-----Generated at Wed Aug 26 18:33:31 2026 by rpki-client