$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fecbc404-ac43-449b-8c7e-8f1e99d9ac49/4/8CCE4EEBC2B6B0AEEB31E8910CC55607957B5400.mft File: 8CCE4EEBC2B6B0AEEB31E8910CC55607957B5400.mft (raw, json) Hash identifier: PsKKz8ELkQn3/JtIeuHY/cnpT/7JdpNtX0YMXJAB0k0= Subject key identifier: 64:A6:2E:5A:E1:08:30:2F:1F:56:87:53:EC:4B:E8:3D:33:E3:1E:F3 Authority key identifier: 8C:CE:4E:EB:C2:B6:B0:AE:EB:31:E8:91:0C:C5:56:07:95:7B:54:00 Certificate issuer: /CN=8CCE4EEBC2B6B0AEEB31E8910CC55607957B5400 Certificate serial: 7A6D85955F9081031E1B324B0D958EB20CC7A5A6 Authority info access: rsync://krill.47272.net/repo/HYEHOST/5/8CCE4EEBC2B6B0AEEB31E8910CC55607957B5400.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fecbc404-ac43-449b-8c7e-8f1e99d9ac49/4/8CCE4EEBC2B6B0AEEB31E8910CC55607957B5400.mft Manifest number: 04 Signing time: Sat 05 Jul 2025 05:36:28 +0000 Manifest this update: Sat 05 Jul 2025 05:31:28 +0000 Manifest next update: Sun 06 Jul 2025 08:16:28 +0000 Files and hashes: 1: 326130613a363034343a376530303a3a2f34302d3438203d3e20323134343836.roa (hash: yxWfxxOaYDv0otdzU3RUQ6Xc1d8/2QDjf8LAmvgn7IY=) 2: 8CCE4EEBC2B6B0AEEB31E8910CC55607957B5400.crl (hash: YXKtvJNAD+V9DlLi0iTRFS3GqzYTKpVYsccsOCNzLtk=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fecbc404-ac43-449b-8c7e-8f1e99d9ac49/4/8CCE4EEBC2B6B0AEEB31E8910CC55607957B5400.crl rsync://rsync.paas.rpki.ripe.net/repository/fecbc404-ac43-449b-8c7e-8f1e99d9ac49/4/8CCE4EEBC2B6B0AEEB31E8910CC55607957B5400.mft rsync://krill.47272.net/repo/HYEHOST/5/8CCE4EEBC2B6B0AEEB31E8910CC55607957B5400.cer rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 06 Jul 2025 08:16:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:6d:85:95:5f:90:81:03:1e:1b:32:4b:0d:95:8e:b2:0c:c7:a5:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8CCE4EEBC2B6B0AEEB31E8910CC55607957B5400 Validity Not Before: Jul 5 05:31:28 2025 GMT Not After : Jul 6 08:16:28 2025 GMT Subject: CN=64A62E5AE108302F1F568753EC4BE83D33E31EF3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:7a:96:0c:95:84:7b:46:62:f6:0c:d6:a7:cf: 3f:81:67:eb:bb:b5:25:94:92:31:03:41:4d:74:e5: 41:75:e6:ea:05:d1:65:8a:51:2b:92:6e:49:8a:e8: 6d:59:81:da:a8:bf:1b:a2:26:4a:d8:11:12:fb:e9: 51:67:f1:de:6f:92:d7:c1:6c:be:e0:46:4a:6d:e6: 07:a6:4a:05:85:12:7e:e9:30:22:eb:4e:90:4a:79: 46:be:68:13:97:d3:02:12:cd:ea:65:57:87:78:16: 7b:3d:4b:8d:35:2a:0c:b5:09:89:10:30:10:71:48: 28:51:1f:89:5b:11:9d:04:f9:3b:69:02:de:6b:39: b8:5a:26:8a:f0:4f:64:6b:2e:eb:28:30:3f:d0:c7: 20:66:9a:b3:cf:b9:63:c5:d2:ef:24:29:97:df:29: 24:ce:fd:d1:86:b3:c6:3c:f3:f1:8d:4c:cb:18:33: e8:c4:28:d5:9d:f7:21:91:af:b2:92:54:a3:d4:42: 0a:3c:61:9f:b3:d7:02:75:6e:11:26:e2:31:5d:57: e7:0a:89:1d:de:a3:e8:dd:85:a9:85:25:5d:b8:be: dc:0c:c7:bc:3c:50:93:96:33:49:32:c2:09:90:3f: 9d:ad:b6:a6:67:9e:72:a6:e7:9f:4d:77:63:29:82: 03:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:A6:2E:5A:E1:08:30:2F:1F:56:87:53:EC:4B:E8:3D:33:E3:1E:F3 X509v3 Authority Key Identifier: keyid:8C:CE:4E:EB:C2:B6:B0:AE:EB:31:E8:91:0C:C5:56:07:95:7B:54:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fecbc404-ac43-449b-8c7e-8f1e99d9ac49/4/8CCE4EEBC2B6B0AEEB31E8910CC55607957B5400.crl Authority Information Access: CA Issuers - URI:rsync://krill.47272.net/repo/HYEHOST/5/8CCE4EEBC2B6B0AEEB31E8910CC55607957B5400.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fecbc404-ac43-449b-8c7e-8f1e99d9ac49/4/8CCE4EEBC2B6B0AEEB31E8910CC55607957B5400.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9b:ad:83:f1:28:12:7e:cd:24:e5:93:3d:c5:bd:9e:25:fa:d9: a0:e8:6c:90:72:3e:d3:49:b1:7c:b4:9c:c3:d2:89:1c:40:ed: 68:ab:fb:8f:07:1d:95:95:48:99:e3:71:38:ee:7f:6b:15:63: d2:16:79:f5:58:af:b1:8f:c7:ef:52:8d:3d:a1:85:aa:64:fc: 9b:13:61:7a:7e:0e:11:48:e7:0c:ac:b3:d7:69:c7:2d:9a:33: 45:35:08:14:43:5b:ae:d5:ca:ca:d7:02:43:d4:4c:12:42:be: 49:bf:44:b4:89:17:68:07:1f:68:96:9c:b0:50:f6:0b:b9:0d: 4c:db:ec:69:63:e8:5a:cd:14:45:6f:6c:a5:48:d5:29:57:a9: b2:6e:d2:73:5f:c4:53:e8:e4:65:31:06:b9:39:8f:13:01:b3: 84:ea:84:0d:e1:57:4f:8b:24:5f:92:94:fe:e3:57:24:94:6f: 24:55:9b:44:3f:b5:a8:4b:14:b6:1b:9e:91:51:90:f3:4e:48: 44:9c:40:57:12:d8:a6:27:89:2d:f4:3c:e4:5b:15:f4:85:79: c5:51:8b:8b:0a:e6:ce:0c:a8:28:89:40:39:47:13:0f:61:3a: e8:3b:31:45:80:eb:4f:f9:bb:d1:2c:ac:9e:4c:3f:fe:48:28: 58:44:7d:36 -----BEGIN CERTIFICATE----- MIIFSDCCBDCgAwIBAgIUem2FlV+QgQMeGzJLDZWOsgzHpaYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOENDRTRFRUJDMkI2QjBBRUVCMzFFODkxMENDNTU2MDc5 NTdCNTQwMDAeFw0yNTA3MDUwNTMxMjhaFw0yNTA3MDYwODE2MjhaMDMxMTAvBgNV BAMTKDY0QTYyRTVBRTEwODMwMkYxRjU2ODc1M0VDNEJFODNEMzNFMzFFRjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfepYMlYR7RmL2DNanzz+BZ+u7 tSWUkjEDQU105UF15uoF0WWKUSuSbkmK6G1ZgdqovxuiJkrYERL76VFn8d5vktfB bL7gRkpt5gemSgWFEn7pMCLrTpBKeUa+aBOX0wISzeplV4d4Fns9S401Kgy1CYkQ MBBxSChRH4lbEZ0E+TtpAt5rObhaJorwT2RrLusoMD/QxyBmmrPPuWPF0u8kKZff KSTO/dGGs8Y88/GNTMsYM+jEKNWd9yGRr7KSVKPUQgo8YZ+z1wJ1bhEm4jFdV+cK iR3eo+jdhamFJV24vtwMx7w8UJOWM0kywgmQP52ttqZnnnKm559Nd2MpggPzAgMB AAGjggJSMIICTjAdBgNVHQ4EFgQUZKYuWuEIMC8fVodT7EvoPTPjHvMwHwYDVR0j BBgwFoAUjM5O68K2sK7rMeiRDMVWB5V7VAAwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZmVjYmM0MDQtYWM0My00NDliLThjN2UtOGYxZTk5ZDlh YzQ5LzQvOENDRTRFRUJDMkI2QjBBRUVCMzFFODkxMENDNTU2MDc5NTdCNTQwMC5j cmwwbwYIKwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL2tyaWxsLjQ3 MjcyLm5ldC9yZXBvL0hZRUhPU1QvNS84Q0NFNEVFQkMyQjZCMEFFRUIzMUU4OTEw Q0M1NTYwNzk1N0I1NDAwLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2ZlY2JjNDA0LWFjNDMtNDQ5Yi04YzdlLThmMWU5OWQ5YWM0OS80LzhDQ0U0RUVC QzJCNkIwQUVFQjMxRTg5MTBDQzU1NjA3OTU3QjU0MDAubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCbrYPx KBJ+zSTlkz3FvZ4l+tmg6GyQcj7TSbF8tJzD0okcQO1oq/uPBx2VlUiZ43E47n9r FWPSFnn1WK+xj8fvUo09oYWqZPybE2F6fg4RSOcMrLPXacctmjNFNQgUQ1uu1crK 1wJD1EwSQr5Jv0S0iRdoBx9olpywUPYLuQ1M2+xpY+hazRRFb2ylSNUpV6mybtJz X8RT6ORlMQa5OY8TAbOE6oQN4VdPiyRfkpT+41cklG8kVZtEP7WoSxS2G56RUZDz TkhEnEBXEtimJ4kt9DzkWxX0hXnFUYuLCubODKgoiUA5RxMPYTroOzFFgOtP+bvR LKyeTD/+SChYRH02 -----END CERTIFICATE-----Generated at Sat Jul 5 22:58:55 2025 by rpki-client