$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/491a43bc-76ec-4abe-ba7d-e73e90d662cb/5/7C4E2571D39535EB83B4BDD4E4668A2D2C177631.mft File: 7C4E2571D39535EB83B4BDD4E4668A2D2C177631.mft (raw, json) Hash identifier: VLziZFBUgmJxv9r9Xm03xXs0hIBf7pA+2Gzhd8vI0NI= Subject key identifier: 2F:6B:BA:58:71:63:94:3A:77:A1:97:59:98:13:5E:78:CA:B2:25:73 Authority key identifier: 7C:4E:25:71:D3:95:35:EB:83:B4:BD:D4:E4:66:8A:2D:2C:17:76:31 Certificate issuer: /CN=7C4E2571D39535EB83B4BDD4E4668A2D2C177631 Certificate serial: 5BB1CF83CC359A6CFA99B97AC5D91102CB8A9B49 Authority info access: rsync://krill.47272.net/repo/HYEHOST/5/7C4E2571D39535EB83B4BDD4E4668A2D2C177631.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/491a43bc-76ec-4abe-ba7d-e73e90d662cb/5/7C4E2571D39535EB83B4BDD4E4668A2D2C177631.mft Manifest number: 64 Signing time: Wed 05 Nov 2025 04:00:27 +0000 Manifest this update: Wed 05 Nov 2025 03:55:27 +0000 Manifest next update: Thu 06 Nov 2025 06:18:27 +0000 Files and hashes: 1: 326130613a363034343a386666653a3a2f34382d3438203d3e2038303735.roa (hash: K8xXw24z/h7osAEvKUs5Zvv+EC9Fem2xi6ka3dAsTS8=) 2: 326130613a363034343a386666303a3a2f34342d3438203d3e20323134333933.roa (hash: uF8QCN8jX1S8vPb+j6CiYDy604ujJKGOHIcdENgsozA=) 3: 326130613a363034343a386666663a3a2f34382d3438203d3e2038303735.roa (hash: RZ3mYxtXjyfnSAX6OB7Fb/NzyUR2Iaz1eYb6yM0niNc=) 4: 326130613a363034343a383030303a3a2f33362d3438203d3e20323135363035.roa (hash: xoDReEFetLSQGYBm0baNBaTLSOi9Q5x2Cfso2AOKl0A=) 5: 7C4E2571D39535EB83B4BDD4E4668A2D2C177631.crl (hash: /BQP+Bcu8vNF7PHRDAUMpZPl1as+7nJ6d535Blz0CF8=) 6: 326130613a363034343a386666633a3a2f34382d3438203d3e203331383938.roa (hash: CTStzL4XbpBzdiPo/k9GT6LN/2SBVWE37f9B3UyCq40=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/491a43bc-76ec-4abe-ba7d-e73e90d662cb/5/7C4E2571D39535EB83B4BDD4E4668A2D2C177631.crl rsync://rsync.paas.rpki.ripe.net/repository/491a43bc-76ec-4abe-ba7d-e73e90d662cb/5/7C4E2571D39535EB83B4BDD4E4668A2D2C177631.mft rsync://krill.47272.net/repo/HYEHOST/5/7C4E2571D39535EB83B4BDD4E4668A2D2C177631.cer rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 06 Nov 2025 06:18:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:b1:cf:83:cc:35:9a:6c:fa:99:b9:7a:c5:d9:11:02:cb:8a:9b:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7C4E2571D39535EB83B4BDD4E4668A2D2C177631 Validity Not Before: Nov 5 03:55:27 2025 GMT Not After : Nov 6 06:18:27 2025 GMT Subject: CN=2F6BBA587163943A77A1975998135E78CAB22573 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:07:bf:ff:88:8c:8a:66:69:49:3f:89:7f:3d: 08:87:7d:38:6d:2d:95:61:8f:42:fd:e8:bb:ae:1a: 08:fa:97:e2:da:51:e9:9c:82:5c:8f:07:d6:30:05: 38:c7:41:ce:f2:29:97:f4:6b:27:3f:32:b2:55:3a: a2:6b:2f:2c:63:59:ab:56:66:2a:42:b1:1a:ab:b7: 83:cd:12:5d:aa:92:ea:b3:43:b7:7e:45:72:a1:4d: 4f:86:0d:67:8f:a0:ed:59:20:b6:51:d2:dd:f0:39: 08:7f:ce:62:c8:47:6e:92:e9:39:00:8e:5c:ef:c5: 9c:b2:cc:c8:d4:15:f2:82:49:41:ec:5e:1d:60:52: 0d:51:81:4a:12:1a:4f:f8:ee:4f:b0:3f:b5:7f:d0: a6:ef:f1:a7:56:14:c5:e4:52:45:ea:49:6c:1d:0a: 16:7c:7b:3e:eb:dd:0e:7f:46:51:d2:ca:c8:22:b8: e3:c9:e9:b2:44:a5:dc:0a:cf:3b:55:15:27:a1:6b: df:1d:fe:55:1f:4d:93:f0:56:b5:a1:8a:f3:de:d8: 58:9b:d1:53:02:47:dd:42:d2:db:70:39:39:3e:92: 04:6d:4f:38:28:3f:75:ba:42:93:bd:19:4a:4c:9d: 45:f4:86:a0:ee:5a:d2:0c:8c:37:aa:ba:f4:f2:2d: 61:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:6B:BA:58:71:63:94:3A:77:A1:97:59:98:13:5E:78:CA:B2:25:73 X509v3 Authority Key Identifier: keyid:7C:4E:25:71:D3:95:35:EB:83:B4:BD:D4:E4:66:8A:2D:2C:17:76:31 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/491a43bc-76ec-4abe-ba7d-e73e90d662cb/5/7C4E2571D39535EB83B4BDD4E4668A2D2C177631.crl Authority Information Access: CA Issuers - URI:rsync://krill.47272.net/repo/HYEHOST/5/7C4E2571D39535EB83B4BDD4E4668A2D2C177631.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/491a43bc-76ec-4abe-ba7d-e73e90d662cb/5/7C4E2571D39535EB83B4BDD4E4668A2D2C177631.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:5a:ce:bf:c6:1b:06:88:e7:05:7f:11:1d:94:ff:e1:82:19: 83:05:35:7c:c5:49:aa:3d:d8:57:08:13:a0:19:48:be:8f:1c: bb:2f:f7:e2:b8:43:57:23:be:7e:57:4a:0f:6c:34:ae:48:6b: 6a:00:23:93:8e:22:24:47:98:3e:f9:22:9f:4d:9e:ed:37:2f: 0c:db:ae:d0:84:1c:ed:c5:f9:4c:2a:f3:f7:ad:78:90:8a:3a: 71:05:69:16:6c:16:34:ba:63:17:89:58:c3:8e:eb:9d:a3:a4: e8:ff:32:22:17:a5:25:68:7f:74:3f:45:85:8c:90:57:63:c7: ff:91:ae:1b:27:20:73:c7:e7:cf:b9:c9:3e:17:9a:9d:ce:57: 13:59:a7:b4:bd:24:6c:b4:b8:1f:dd:5b:7f:a8:48:63:07:50: e9:51:1f:a4:39:f5:5a:e4:f4:32:e3:6a:bd:cf:47:bb:e8:2e: 8f:68:54:c3:c2:7e:18:5d:89:6b:7d:bf:6a:b8:0a:f7:9a:ed: 5a:ce:d6:8d:14:e7:ac:04:5f:56:35:e7:cb:a9:01:4d:65:cf: cf:0f:49:d6:d8:e9:1b:09:b7:62:d1:1b:74:5d:a1:23:90:74: 06:54:39:b5:57:e8:66:91:84:1f:c9:32:21:a6:8b:33:a5:35: 2e:7d:f1:90 -----BEGIN CERTIFICATE----- MIIFSDCCBDCgAwIBAgIUW7HPg8w1mmz6mbl6xdkRAsuKm0kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0M0RTI1NzFEMzk1MzVFQjgzQjRCREQ0RTQ2NjhBMkQy QzE3NzYzMTAeFw0yNTExMDUwMzU1MjdaFw0yNTExMDYwNjE4MjdaMDMxMTAvBgNV BAMTKDJGNkJCQTU4NzE2Mzk0M0E3N0ExOTc1OTk4MTM1RTc4Q0FCMjI1NzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1B7//iIyKZmlJP4l/PQiHfTht LZVhj0L96LuuGgj6l+LaUemcglyPB9YwBTjHQc7yKZf0ayc/MrJVOqJrLyxjWatW ZipCsRqrt4PNEl2qkuqzQ7d+RXKhTU+GDWePoO1ZILZR0t3wOQh/zmLIR26S6TkA jlzvxZyyzMjUFfKCSUHsXh1gUg1RgUoSGk/47k+wP7V/0Kbv8adWFMXkUkXqSWwd ChZ8ez7r3Q5/RlHSysgiuOPJ6bJEpdwKzztVFSeha98d/lUfTZPwVrWhivPe2Fib 0VMCR91C0ttwOTk+kgRtTzgoP3W6QpO9GUpMnUX0hqDuWtIMjDequvTyLWENAgMB AAGjggJSMIICTjAdBgNVHQ4EFgQUL2u6WHFjlDp3oZdZmBNeeMqyJXMwHwYDVR0j BBgwFoAUfE4lcdOVNeuDtL3U5GaKLSwXdjEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNDkxYTQzYmMtNzZlYy00YWJlLWJhN2QtZTczZTkwZDY2 MmNiLzUvN0M0RTI1NzFEMzk1MzVFQjgzQjRCREQ0RTQ2NjhBMkQyQzE3NzYzMS5j cmwwbwYIKwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL2tyaWxsLjQ3 MjcyLm5ldC9yZXBvL0hZRUhPU1QvNS83QzRFMjU3MUQzOTUzNUVCODNCNEJERDRF NDY2OEEyRDJDMTc3NjMxLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzQ5MWE0M2JjLTc2ZWMtNGFiZS1iYTdkLWU3M2U5MGQ2NjJjYi81LzdDNEUyNTcx RDM5NTM1RUI4M0I0QkRENEU0NjY4QTJEMkMxNzc2MzEubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBUWs6/ xhsGiOcFfxEdlP/hghmDBTV8xUmqPdhXCBOgGUi+jxy7L/fiuENXI75+V0oPbDSu SGtqACOTjiIkR5g++SKfTZ7tNy8M267QhBztxflMKvP3rXiQijpxBWkWbBY0umMX iVjDjuudo6To/zIiF6UlaH90P0WFjJBXY8f/ka4bJyBzx+fPuck+F5qdzlcTWae0 vSRstLgf3Vt/qEhjB1DpUR+kOfVa5PQy42q9z0e76C6PaFTDwn4YXYlrfb9quAr3 mu1aztaNFOesBF9WNefLqQFNZc/PD0nW2OkbCbdi0Rt0XaEjkHQGVDm1V+hmkYQf yTIhposzpTUuffGQ -----END CERTIFICATE-----Generated at Wed Nov 5 20:52:03 2025 by rpki-client