$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/9/2F2C3124012C07F6775A6241DFC63BE0414C98AD.mft File: 2F2C3124012C07F6775A6241DFC63BE0414C98AD.mft (raw, json) Hash identifier: +/RP5xhPMRg2zRTE/90w0Z1T5UvCln4qQBEZ54JFi1o= Subject key identifier: EA:E0:5A:37:E8:1C:37:A6:47:02:8F:2D:9A:64:C6:EE:3A:28:F3:74 Authority key identifier: 2F:2C:31:24:01:2C:07:F6:77:5A:62:41:DF:C6:3B:E0:41:4C:98:AD Certificate issuer: /CN=2F2C3124012C07F6775A6241DFC63BE0414C98AD Certificate serial: 0944EBF0151C905443F4AFA925F42E55BF5E0AF7 Authority info access: rsync://krill.47272.net/repo/HYEHOST/5/2F2C3124012C07F6775A6241DFC63BE0414C98AD.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/9/2F2C3124012C07F6775A6241DFC63BE0414C98AD.mft Manifest number: 83 Signing time: Tue 07 Oct 2025 23:46:44 +0000 Manifest this update: Tue 07 Oct 2025 23:41:44 +0000 Manifest next update: Thu 09 Oct 2025 03:37:44 +0000 Files and hashes: 1: 2F2C3124012C07F6775A6241DFC63BE0414C98AD.crl (hash: M/Eunlcb1QI5AEN4JHda7xyw63/UmwgX+SVVOo4XJ5s=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/9/2F2C3124012C07F6775A6241DFC63BE0414C98AD.crl rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/9/2F2C3124012C07F6775A6241DFC63BE0414C98AD.mft rsync://krill.47272.net/repo/HYEHOST/5/2F2C3124012C07F6775A6241DFC63BE0414C98AD.cer rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 09 Oct 2025 03:37:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:44:eb:f0:15:1c:90:54:43:f4:af:a9:25:f4:2e:55:bf:5e:0a:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2F2C3124012C07F6775A6241DFC63BE0414C98AD Validity Not Before: Oct 7 23:41:44 2025 GMT Not After : Oct 9 03:37:44 2025 GMT Subject: CN=EAE05A37E81C37A647028F2D9A64C6EE3A28F374 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:65:67:c8:14:05:b2:6e:bb:0b:cc:c1:a9:e6: a9:13:26:e8:13:1c:e3:db:61:27:9f:05:ba:11:f9: 80:2d:0f:e1:94:1d:10:4c:0a:1c:27:9c:9a:3e:b4: 0f:f4:61:2d:be:c8:2b:6b:25:b4:28:a0:16:ab:27: 44:a4:a8:b6:2e:41:36:ca:f7:a6:cb:d2:c7:00:9f: c2:70:5d:62:c4:8f:68:07:ce:63:c0:c3:11:63:6c: 80:5b:ab:eb:91:4b:42:e1:f6:71:d4:4a:7d:e6:2d: 35:1b:ab:d5:5c:9b:cd:5e:76:1e:e2:bc:fe:b9:57: b6:6e:d3:06:13:13:98:85:dc:85:17:cd:6c:64:ea: 57:0e:5c:d8:d9:5b:39:a2:1d:27:84:7a:7b:f2:3a: 00:fa:0d:89:3d:5e:73:50:86:61:d0:36:12:15:58: 86:fb:c1:b3:68:59:80:25:54:9b:35:d2:db:9c:1e: 4a:29:2c:a8:96:a9:05:a9:3b:ec:7d:22:bd:31:cb: 16:3d:68:26:43:ef:65:4a:68:15:8b:6c:e4:6f:c0: 88:47:bd:e2:b1:ce:9f:71:f8:31:be:cd:80:ee:fc: 28:19:3e:98:16:02:b2:48:8f:76:1b:85:19:52:12: 75:a4:f5:b3:4d:52:90:db:92:70:71:c0:81:c1:a2: 04:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:E0:5A:37:E8:1C:37:A6:47:02:8F:2D:9A:64:C6:EE:3A:28:F3:74 X509v3 Authority Key Identifier: keyid:2F:2C:31:24:01:2C:07:F6:77:5A:62:41:DF:C6:3B:E0:41:4C:98:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/9/2F2C3124012C07F6775A6241DFC63BE0414C98AD.crl Authority Information Access: CA Issuers - URI:rsync://krill.47272.net/repo/HYEHOST/5/2F2C3124012C07F6775A6241DFC63BE0414C98AD.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/9/2F2C3124012C07F6775A6241DFC63BE0414C98AD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:96:d5:4d:a0:4d:98:85:18:01:0e:f8:62:63:2b:c2:a9:3c: 38:9e:be:1c:14:96:02:85:ca:98:25:8e:2e:9e:aa:67:e4:11: 7b:58:1f:0a:8e:9f:cd:06:ca:84:58:8b:0b:11:3b:29:84:1b: 9f:c1:62:a9:90:4b:dc:d1:ed:42:22:d8:c8:84:60:a9:82:33: d5:14:2d:0a:00:2d:2e:20:48:e6:ff:bc:2b:aa:e3:6b:44:b2: a5:d1:5a:6c:1d:d4:e0:9a:6c:19:18:7c:8a:c2:ba:24:29:47: d3:c7:8e:bd:f4:7d:85:dc:f6:6f:68:f8:19:9b:0e:1e:c2:6d: a1:e0:49:4e:d7:db:f4:45:a4:cb:a7:46:72:8c:bc:b4:ce:90: 9b:19:89:b3:cd:3d:1f:98:9a:32:ae:c6:fd:9e:ec:79:e1:24: f1:fe:16:b0:3c:ed:d8:c2:7a:19:d8:56:79:76:e9:4b:8a:84: 55:5f:57:98:56:6d:e7:8c:6f:7b:57:3d:d2:ae:de:5a:56:de: c0:5f:3b:9c:9c:0a:ae:98:ff:b6:1c:3d:12:a1:4b:b1:09:83: 8f:55:49:fa:1d:07:e5:90:0e:c5:01:94:20:9f:45:ea:7f:da: f3:52:8c:db:40:b6:44:5f:02:2c:38:c3:95:70:d7:d3:db:ac: d8:80:8a:1f -----BEGIN CERTIFICATE----- MIIFSDCCBDCgAwIBAgIUCUTr8BUckFRD9K+pJfQuVb9eCvcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkYyQzMxMjQwMTJDMDdGNjc3NUE2MjQxREZDNjNCRTA0 MTRDOThBRDAeFw0yNTEwMDcyMzQxNDRaFw0yNTEwMDkwMzM3NDRaMDMxMTAvBgNV BAMTKEVBRTA1QTM3RTgxQzM3QTY0NzAyOEYyRDlBNjRDNkVFM0EyOEYzNzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBZWfIFAWybrsLzMGp5qkTJugT HOPbYSefBboR+YAtD+GUHRBMChwnnJo+tA/0YS2+yCtrJbQooBarJ0SkqLYuQTbK 96bL0scAn8JwXWLEj2gHzmPAwxFjbIBbq+uRS0Lh9nHUSn3mLTUbq9Vcm81edh7i vP65V7Zu0wYTE5iF3IUXzWxk6lcOXNjZWzmiHSeEenvyOgD6DYk9XnNQhmHQNhIV WIb7wbNoWYAlVJs10tucHkopLKiWqQWpO+x9Ir0xyxY9aCZD72VKaBWLbORvwIhH veKxzp9x+DG+zYDu/CgZPpgWArJIj3YbhRlSEnWk9bNNUpDbknBxwIHBogR9AgMB AAGjggJSMIICTjAdBgNVHQ4EFgQU6uBaN+gcN6ZHAo8tmmTG7joo83QwHwYDVR0j BBgwFoAULywxJAEsB/Z3WmJB38Y74EFMmK0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZGU3ZDU1ZjctZWU2MC00MDA1LWJhZDctYjQyODE4Y2Y1 MGU4LzkvMkYyQzMxMjQwMTJDMDdGNjc3NUE2MjQxREZDNjNCRTA0MTRDOThBRC5j cmwwbwYIKwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL2tyaWxsLjQ3 MjcyLm5ldC9yZXBvL0hZRUhPU1QvNS8yRjJDMzEyNDAxMkMwN0Y2Nzc1QTYyNDFE RkM2M0JFMDQxNEM5OEFELmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2RlN2Q1NWY3LWVlNjAtNDAwNS1iYWQ3LWI0MjgxOGNmNTBlOC85LzJGMkMzMTI0 MDEyQzA3RjY3NzVBNjI0MURGQzYzQkUwNDE0Qzk4QUQubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQB9ltVN oE2YhRgBDvhiYyvCqTw4nr4cFJYChcqYJY4unqpn5BF7WB8Kjp/NBsqEWIsLETsp hBufwWKpkEvc0e1CItjIhGCpgjPVFC0KAC0uIEjm/7wrquNrRLKl0VpsHdTgmmwZ GHyKwrokKUfTx4699H2F3PZvaPgZmw4ewm2h4ElO19v0RaTLp0ZyjLy0zpCbGYmz zT0fmJoyrsb9nux54STx/hawPO3YwnoZ2FZ5dulLioRVX1eYVm3njG97Vz3Srt5a Vt7AXzucnAqumP+2HD0SoUuxCYOPVUn6HQflkA7FAZQgn0Xqf9rzUozbQLZEXwIs OMOVcNfT26zYgIof -----END CERTIFICATE-----Generated at Wed Oct 8 19:52:45 2025 by rpki-client