$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/2ed4b7eb-17a7-44e1-9ca2-098a32383c90/2/0D6B538349B436ADE8D1CAFC73E5341BBC88AD57.mft File: 0D6B538349B436ADE8D1CAFC73E5341BBC88AD57.mft (raw, json) Hash identifier: aRAJiEPbL22efFFUYjhRRwUGakCh49jiNSNrJdmu0TY= Subject key identifier: 49:18:F0:12:CE:A8:76:CE:60:20:73:17:DB:6B:19:05:D8:86:C6:2E Authority key identifier: 0D:6B:53:83:49:B4:36:AD:E8:D1:CA:FC:73:E5:34:1B:BC:88:AD:57 Certificate issuer: /CN=0D6B538349B436ADE8D1CAFC73E5341BBC88AD57 Certificate serial: 4E61B2668293336C880206109BDAFD44C55F5FEB Authority info access: rsync://krill.47272.net/repo/HYEHOST/5/0D6B538349B436ADE8D1CAFC73E5341BBC88AD57.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/2ed4b7eb-17a7-44e1-9ca2-098a32383c90/2/0D6B538349B436ADE8D1CAFC73E5341BBC88AD57.mft Manifest number: 4F Signing time: Sun 01 Mar 2026 13:49:30 +0000 Manifest this update: Sun 01 Mar 2026 13:44:30 +0000 Manifest next update: Mon 02 Mar 2026 16:31:30 +0000 Files and hashes: 1: 0D6B538349B436ADE8D1CAFC73E5341BBC88AD57.crl (hash: 5hHga32NrvocogQRXmFWijMY5o4fcWIaRJ79T4ffhS0=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/2ed4b7eb-17a7-44e1-9ca2-098a32383c90/2/0D6B538349B436ADE8D1CAFC73E5341BBC88AD57.crl rsync://rsync.paas.rpki.ripe.net/repository/2ed4b7eb-17a7-44e1-9ca2-098a32383c90/2/0D6B538349B436ADE8D1CAFC73E5341BBC88AD57.mft rsync://krill.47272.net/repo/HYEHOST/5/0D6B538349B436ADE8D1CAFC73E5341BBC88AD57.cer rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Mar 2026 16:31:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:61:b2:66:82:93:33:6c:88:02:06:10:9b:da:fd:44:c5:5f:5f:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0D6B538349B436ADE8D1CAFC73E5341BBC88AD57 Validity Not Before: Mar 1 13:44:30 2026 GMT Not After : Mar 2 16:31:30 2026 GMT Subject: CN=4918F012CEA876CE60207317DB6B1905D886C62E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:56:3c:fe:d5:69:0a:d7:a9:31:84:ff:df:19: 9b:25:1f:e8:cb:02:a7:a6:f1:bb:48:2e:9b:6f:ca: 20:49:c9:34:c1:00:2a:6c:ba:93:38:d2:d6:91:82: 3d:31:2b:88:b2:22:59:50:b7:98:d4:79:ad:5d:70: 23:81:e2:65:3e:03:18:f1:f1:39:3c:f1:0f:2f:90: fa:84:76:a0:04:18:e4:78:52:86:eb:2a:3d:17:c2: 72:3b:f6:38:40:51:11:c9:8c:4f:e5:6d:2a:6f:e3: 81:46:3c:2f:9c:e5:77:75:e5:97:71:d6:b4:a9:75: 54:f2:5f:c4:f9:15:7c:66:5a:81:7a:00:23:13:d3: 4d:70:49:fc:f5:e6:b0:eb:be:e5:26:4f:24:3d:87: a9:3a:99:69:05:42:a4:ab:ab:bf:fd:61:bb:8e:ae: 6a:8e:b5:13:50:34:d1:b0:b0:90:50:ca:8a:27:49: f9:ea:f3:2b:6a:78:05:2b:e7:d7:a5:66:51:36:6d: 36:f0:84:2e:37:1f:81:64:b5:de:30:51:f2:00:bd: 0c:b9:80:65:b4:44:78:b0:91:da:6f:b8:a6:41:d0: 83:d9:94:5c:51:b7:59:66:69:61:e5:82:f1:7e:1e: 2a:86:7f:74:59:ae:27:3b:b9:f6:3f:0f:03:ca:89: e0:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:18:F0:12:CE:A8:76:CE:60:20:73:17:DB:6B:19:05:D8:86:C6:2E X509v3 Authority Key Identifier: keyid:0D:6B:53:83:49:B4:36:AD:E8:D1:CA:FC:73:E5:34:1B:BC:88:AD:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/2ed4b7eb-17a7-44e1-9ca2-098a32383c90/2/0D6B538349B436ADE8D1CAFC73E5341BBC88AD57.crl Authority Information Access: CA Issuers - URI:rsync://krill.47272.net/repo/HYEHOST/5/0D6B538349B436ADE8D1CAFC73E5341BBC88AD57.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/2ed4b7eb-17a7-44e1-9ca2-098a32383c90/2/0D6B538349B436ADE8D1CAFC73E5341BBC88AD57.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:84:14:f6:a5:7b:26:a5:20:b8:f5:9f:d6:bb:e4:5b:a7:b4: a0:96:c1:11:98:79:0e:2a:f0:84:cb:ac:3b:07:18:41:0d:16: a6:72:84:fe:bb:4b:cd:71:69:69:94:bf:fd:97:d6:ef:79:b5: 8d:07:b6:36:ac:5b:fa:55:3e:c3:85:9e:9b:fc:19:da:3e:0c: 82:d3:5b:db:fc:0a:2b:4d:76:22:3a:02:7e:3b:ab:ec:00:81: 68:07:59:c2:3f:8c:60:d8:f2:d9:c8:da:54:49:a2:a1:f3:f7: d7:42:86:66:d6:fb:ab:53:50:b3:79:f4:94:64:3f:0e:6b:be: 72:ec:b0:6e:d1:4f:c3:c7:21:d4:c6:7f:c7:3a:61:e5:30:b1: e9:96:d3:94:1c:a3:54:9a:db:c5:be:0d:08:6c:47:48:d6:3a: b2:f2:cf:0a:fd:53:48:04:4d:e3:da:28:db:30:a2:b8:d3:fc: 03:55:d1:38:6a:a4:71:4a:12:fa:ca:6b:26:05:1e:43:f1:69: 60:0b:61:a8:45:79:7f:f6:79:76:5c:3d:c1:04:64:89:14:e3: b1:e1:5b:fe:2c:bb:01:82:4b:39:23:50:a1:5e:de:b3:a4:d6: ca:b0:4f:ad:dc:25:1d:a4:82:00:f6:7d:7c:bf:4e:53:59:03: 7b:9d:f4:48 -----BEGIN CERTIFICATE----- MIIFSDCCBDCgAwIBAgIUTmGyZoKTM2yIAgYQm9r9RMVfX+swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEQ2QjUzODM0OUI0MzZBREU4RDFDQUZDNzNFNTM0MUJC Qzg4QUQ1NzAeFw0yNjAzMDExMzQ0MzBaFw0yNjAzMDIxNjMxMzBaMDMxMTAvBgNV BAMTKDQ5MThGMDEyQ0VBODc2Q0U2MDIwNzMxN0RCNkIxOTA1RDg4NkM2MkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+Vjz+1WkK16kxhP/fGZslH+jL Aqem8btILptvyiBJyTTBACpsupM40taRgj0xK4iyIllQt5jUea1dcCOB4mU+Axjx 8Tk88Q8vkPqEdqAEGOR4UobrKj0XwnI79jhAURHJjE/lbSpv44FGPC+c5Xd15Zdx 1rSpdVTyX8T5FXxmWoF6ACMT001wSfz15rDrvuUmTyQ9h6k6mWkFQqSrq7/9YbuO rmqOtRNQNNGwsJBQyoonSfnq8ytqeAUr59elZlE2bTbwhC43H4Fktd4wUfIAvQy5 gGW0RHiwkdpvuKZB0IPZlFxRt1lmaWHlgvF+HiqGf3RZric7ufY/DwPKieB9AgMB AAGjggJSMIICTjAdBgNVHQ4EFgQUSRjwEs6ods5gIHMX22sZBdiGxi4wHwYDVR0j BBgwFoAUDWtTg0m0Nq3o0cr8c+U0G7yIrVcwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMmVkNGI3ZWItMTdhNy00NGUxLTljYTItMDk4YTMyMzgz YzkwLzIvMEQ2QjUzODM0OUI0MzZBREU4RDFDQUZDNzNFNTM0MUJCQzg4QUQ1Ny5j cmwwbwYIKwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL2tyaWxsLjQ3 MjcyLm5ldC9yZXBvL0hZRUhPU1QvNS8wRDZCNTM4MzQ5QjQzNkFERThEMUNBRkM3 M0U1MzQxQkJDODhBRDU3LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzJlZDRiN2ViLTE3YTctNDRlMS05Y2EyLTA5OGEzMjM4M2M5MC8yLzBENkI1Mzgz NDlCNDM2QURFOEQxQ0FGQzczRTUzNDFCQkM4OEFENTcubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBzhBT2 pXsmpSC49Z/Wu+Rbp7SglsERmHkOKvCEy6w7BxhBDRamcoT+u0vNcWlplL/9l9bv ebWNB7Y2rFv6VT7DhZ6b/BnaPgyC01vb/AorTXYiOgJ+O6vsAIFoB1nCP4xg2PLZ yNpUSaKh8/fXQoZm1vurU1CzefSUZD8Oa75y7LBu0U/DxyHUxn/HOmHlMLHpltOU HKNUmtvFvg0IbEdI1jqy8s8K/VNIBE3j2ijbMKK40/wDVdE4aqRxShL6ymsmBR5D 8WlgC2GoRXl/9nl2XD3BBGSJFOOx4Vv+LLsBgks5I1ChXt6zpNbKsE+t3CUdpIIA 9n18v05TWQN7nfRI -----END CERTIFICATE-----Generated at Mon Mar 2 02:57:55 2026 by rpki-client