$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/491a43bc-76ec-4abe-ba7d-e73e90d662cb/5/7C4E2571D39535EB83B4BDD4E4668A2D2C177631.mft File: 7C4E2571D39535EB83B4BDD4E4668A2D2C177631.mft (raw, json) Hash identifier: GoUozbuLzrMUGFhqi3dTUym4NI0tuOpjJXO8TGhzfKc= Subject key identifier: 53:E8:11:9B:AE:DC:12:A7:94:90:A4:2B:7C:DE:BA:62:E2:2D:BD:5D Authority key identifier: 7C:4E:25:71:D3:95:35:EB:83:B4:BD:D4:E4:66:8A:2D:2C:17:76:31 Certificate issuer: /CN=7C4E2571D39535EB83B4BDD4E4668A2D2C177631 Certificate serial: 48BFCE2B3BA44535E47E8060540DC485E8F8A8A4 Authority info access: rsync://krill.47272.net/repo/HYEHOST/5/7C4E2571D39535EB83B4BDD4E4668A2D2C177631.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/491a43bc-76ec-4abe-ba7d-e73e90d662cb/5/7C4E2571D39535EB83B4BDD4E4668A2D2C177631.mft Manifest number: 65 Signing time: Wed 05 Nov 2025 22:23:00 +0000 Manifest this update: Wed 05 Nov 2025 22:18:00 +0000 Manifest next update: Fri 07 Nov 2025 00:25:00 +0000 Files and hashes: 1: 326130613a363034343a386666663a3a2f34382d3438203d3e2038303735.roa (hash: RZ3mYxtXjyfnSAX6OB7Fb/NzyUR2Iaz1eYb6yM0niNc=) 2: 326130613a363034343a386666633a3a2f34382d3438203d3e203331383938.roa (hash: CTStzL4XbpBzdiPo/k9GT6LN/2SBVWE37f9B3UyCq40=) 3: 326130613a363034343a386666303a3a2f34342d3438203d3e20323134333933.roa (hash: uF8QCN8jX1S8vPb+j6CiYDy604ujJKGOHIcdENgsozA=) 4: 7C4E2571D39535EB83B4BDD4E4668A2D2C177631.crl (hash: t6Alo7/gHAW2oQ6PQl2WBizesC8zpf8M67r52MZH/nQ=) 5: 326130613a363034343a386666653a3a2f34382d3438203d3e2038303735.roa (hash: K8xXw24z/h7osAEvKUs5Zvv+EC9Fem2xi6ka3dAsTS8=) 6: 326130613a363034343a383030303a3a2f33362d3438203d3e20323135363035.roa (hash: xoDReEFetLSQGYBm0baNBaTLSOi9Q5x2Cfso2AOKl0A=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/491a43bc-76ec-4abe-ba7d-e73e90d662cb/5/7C4E2571D39535EB83B4BDD4E4668A2D2C177631.crl rsync://rsync.paas.rpki.ripe.net/repository/491a43bc-76ec-4abe-ba7d-e73e90d662cb/5/7C4E2571D39535EB83B4BDD4E4668A2D2C177631.mft rsync://krill.47272.net/repo/HYEHOST/5/7C4E2571D39535EB83B4BDD4E4668A2D2C177631.cer rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 06 Nov 2025 10:22:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:bf:ce:2b:3b:a4:45:35:e4:7e:80:60:54:0d:c4:85:e8:f8:a8:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7C4E2571D39535EB83B4BDD4E4668A2D2C177631 Validity Not Before: Nov 5 22:18:00 2025 GMT Not After : Nov 7 00:25:00 2025 GMT Subject: CN=53E8119BAEDC12A79490A42B7CDEBA62E22DBD5D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:fc:6e:a5:c0:71:20:e1:c3:ee:89:26:a8:83: 22:5c:40:61:df:71:1e:1e:11:79:b7:ae:f4:b7:9d: 0a:14:89:96:16:30:8a:67:35:64:ac:c6:ae:4b:ca: fc:88:31:f2:0d:aa:dd:ae:96:35:3f:94:fd:c4:8c: b2:5f:56:78:f6:14:59:b1:e4:e4:e2:22:8a:1b:8c: 5d:f0:76:0b:5b:c1:52:48:bf:e2:3c:8e:64:e2:af: 10:3c:de:a8:b0:a7:01:63:44:20:6b:0a:2d:71:cf: 74:a7:41:4c:c7:32:64:2d:c0:aa:22:21:fe:4c:33: e7:05:f1:c3:be:81:c0:27:df:e3:b4:73:6b:25:44: c8:84:60:91:63:7c:13:f7:e6:33:77:c9:d0:78:33: b1:8f:26:eb:2d:02:a0:49:ac:f5:94:36:cc:de:cd: ba:0d:c2:d6:92:5a:cc:09:fc:f1:1f:c9:b2:d4:93: b1:55:03:26:97:a0:09:3d:c2:4c:cd:17:fe:d0:fe: 80:96:b2:c5:fb:4a:19:7e:1a:32:52:12:31:34:02: 89:5c:68:cf:3f:76:d0:14:58:ed:a7:87:d5:5e:97: d8:7b:90:32:54:08:87:fc:8a:ef:37:b2:1a:81:2a: e5:59:30:03:d3:71:b3:2e:57:b5:7f:7e:6f:76:72: a3:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:E8:11:9B:AE:DC:12:A7:94:90:A4:2B:7C:DE:BA:62:E2:2D:BD:5D X509v3 Authority Key Identifier: keyid:7C:4E:25:71:D3:95:35:EB:83:B4:BD:D4:E4:66:8A:2D:2C:17:76:31 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/491a43bc-76ec-4abe-ba7d-e73e90d662cb/5/7C4E2571D39535EB83B4BDD4E4668A2D2C177631.crl Authority Information Access: CA Issuers - URI:rsync://krill.47272.net/repo/HYEHOST/5/7C4E2571D39535EB83B4BDD4E4668A2D2C177631.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/491a43bc-76ec-4abe-ba7d-e73e90d662cb/5/7C4E2571D39535EB83B4BDD4E4668A2D2C177631.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:7c:f9:93:4e:35:dd:ee:cf:fe:6c:3e:8d:f8:b3:d3:dd:28: 41:a6:a3:10:f3:89:f3:a5:14:68:6e:b0:d3:1c:6f:d4:9c:d7: f6:90:5c:51:48:dd:e2:5b:8c:fb:eb:c3:7b:0e:57:f2:e4:f2: 93:84:4c:7d:3e:33:f1:fa:ce:0a:20:43:3e:fc:c8:85:79:7e: 1d:db:cf:48:d4:c5:b6:9f:c9:88:2b:22:08:a6:8e:a8:c7:f6: a9:eb:bd:b9:3b:9d:9c:c5:07:11:8f:09:39:e3:59:fe:6c:11: f6:0a:96:6e:e6:fd:f0:b2:08:7a:bb:4a:c9:a3:ea:0c:38:35: 1c:2c:f9:14:9c:43:e0:64:50:d7:69:bd:97:ea:34:a4:a2:a7: fb:af:fa:14:07:d5:31:4a:7e:6a:13:4d:72:18:b0:b0:cb:91: 7f:a6:ad:84:92:2a:24:36:a7:3d:9c:22:ee:cf:a7:1b:41:3f: b0:42:10:9b:85:ba:6c:27:44:29:fe:3a:d5:8e:5f:79:d9:f8: f9:1f:81:5e:57:7c:dd:48:08:fb:b5:5b:19:b8:12:53:6a:9e: fb:24:fb:e8:78:4b:59:5b:94:ce:77:d3:f4:3c:6b:da:27:17: 90:71:3d:5b:06:4d:a9:53:61:6c:e0:15:3e:5a:4b:2f:0a:76: b3:2e:5f:3f -----BEGIN CERTIFICATE----- MIIFSDCCBDCgAwIBAgIUSL/OKzukRTXkfoBgVA3Ehej4qKQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0M0RTI1NzFEMzk1MzVFQjgzQjRCREQ0RTQ2NjhBMkQy QzE3NzYzMTAeFw0yNTExMDUyMjE4MDBaFw0yNTExMDcwMDI1MDBaMDMxMTAvBgNV BAMTKDUzRTgxMTlCQUVEQzEyQTc5NDkwQTQyQjdDREVCQTYyRTIyREJENUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDx/G6lwHEg4cPuiSaogyJcQGHf cR4eEXm3rvS3nQoUiZYWMIpnNWSsxq5LyvyIMfINqt2uljU/lP3EjLJfVnj2FFmx 5OTiIoobjF3wdgtbwVJIv+I8jmTirxA83qiwpwFjRCBrCi1xz3SnQUzHMmQtwKoi If5MM+cF8cO+gcAn3+O0c2slRMiEYJFjfBP35jN3ydB4M7GPJustAqBJrPWUNsze zboNwtaSWswJ/PEfybLUk7FVAyaXoAk9wkzNF/7Q/oCWssX7Shl+GjJSEjE0Aolc aM8/dtAUWO2nh9Vel9h7kDJUCIf8iu83shqBKuVZMAPTcbMuV7V/fm92cqO9AgMB AAGjggJSMIICTjAdBgNVHQ4EFgQUU+gRm67cEqeUkKQrfN66YuItvV0wHwYDVR0j BBgwFoAUfE4lcdOVNeuDtL3U5GaKLSwXdjEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNDkxYTQzYmMtNzZlYy00YWJlLWJhN2QtZTczZTkwZDY2 MmNiLzUvN0M0RTI1NzFEMzk1MzVFQjgzQjRCREQ0RTQ2NjhBMkQyQzE3NzYzMS5j cmwwbwYIKwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL2tyaWxsLjQ3 MjcyLm5ldC9yZXBvL0hZRUhPU1QvNS83QzRFMjU3MUQzOTUzNUVCODNCNEJERDRF NDY2OEEyRDJDMTc3NjMxLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzQ5MWE0M2JjLTc2ZWMtNGFiZS1iYTdkLWU3M2U5MGQ2NjJjYi81LzdDNEUyNTcx RDM5NTM1RUI4M0I0QkRENEU0NjY4QTJEMkMxNzc2MzEubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBefPmT TjXd7s/+bD6N+LPT3ShBpqMQ84nzpRRobrDTHG/UnNf2kFxRSN3iW4z768N7Dlfy 5PKThEx9PjPx+s4KIEM+/MiFeX4d289I1MW2n8mIKyIIpo6ox/ap6725O52cxQcR jwk541n+bBH2CpZu5v3wsgh6u0rJo+oMODUcLPkUnEPgZFDXab2X6jSkoqf7r/oU B9UxSn5qE01yGLCwy5F/pq2EkiokNqc9nCLuz6cbQT+wQhCbhbpsJ0Qp/jrVjl95 2fj5H4FeV3zdSAj7tVsZuBJTap77JPvoeEtZW5TOd9P0PGvaJxeQcT1bBk2pU2Fs 4BU+WksvCnazLl8/ -----END CERTIFICATE-----Generated at Thu Nov 6 01:20:17 2025 by rpki-client