$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/2/B3F0D773DCBE523A3FB1F5D26D00334874BC9FB2.mft File: B3F0D773DCBE523A3FB1F5D26D00334874BC9FB2.mft (raw, json) Hash identifier: s7+Y1bLf/FAfO4gjT8p+epXUDthzm8KVH4/+y6f8FJQ= Subject key identifier: F1:98:DE:6E:6E:4F:CD:F6:95:39:A6:69:BF:76:17:99:F3:3A:40:0A Authority key identifier: B3:F0:D7:73:DC:BE:52:3A:3F:B1:F5:D2:6D:00:33:48:74:BC:9F:B2 Certificate issuer: /CN=B3F0D773DCBE523A3FB1F5D26D00334874BC9FB2 Certificate serial: 58E67A0E4F64FA4E8B164F1FB43F0966D33A57E2 Authority info access: rsync://krill.47272.net/repo/HYEHOST/5/B3F0D773DCBE523A3FB1F5D26D00334874BC9FB2.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/2/B3F0D773DCBE523A3FB1F5D26D00334874BC9FB2.mft Manifest number: 15 Signing time: Tue 05 Aug 2025 17:32:49 +0000 Manifest this update: Tue 05 Aug 2025 17:27:49 +0000 Manifest next update: Wed 06 Aug 2025 17:36:49 +0000 Files and hashes: 1: 326130613a363034343a623330303a3a2f34322d3432203d3e20323134383039.roa (hash: rL0HqOB+MnXMFAFPM77NjHuvY8wsbwqcrhR4UPqYqsc=) 2: 326130613a363034343a623334333a3a2f34382d3438203d3e20323039373335.roa (hash: gl3XcUXLDzu/fH6TlbsYQk5DZAQEnfCBBv+yPT42ay4=) 3: 326130613a363034343a623363303a3a2f34342d3434203d3e203434373333.roa (hash: rJLCwnl4uhsE/sIS8YisrOAIem98x56OxfgeBDZO+zk=) 4: B3F0D773DCBE523A3FB1F5D26D00334874BC9FB2.crl (hash: yH18Mv4ZKULgdjPS5al8NGERw2TGDgfWAfVeZ7s/iy0=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/2/B3F0D773DCBE523A3FB1F5D26D00334874BC9FB2.crl rsync://rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/2/B3F0D773DCBE523A3FB1F5D26D00334874BC9FB2.mft rsync://krill.47272.net/repo/HYEHOST/5/B3F0D773DCBE523A3FB1F5D26D00334874BC9FB2.cer rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 06 Aug 2025 14:37:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:e6:7a:0e:4f:64:fa:4e:8b:16:4f:1f:b4:3f:09:66:d3:3a:57:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B3F0D773DCBE523A3FB1F5D26D00334874BC9FB2 Validity Not Before: Aug 5 17:27:49 2025 GMT Not After : Aug 6 17:36:49 2025 GMT Subject: CN=F198DE6E6E4FCDF69539A669BF761799F33A400A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:e8:7c:4f:5c:67:5d:91:df:a4:4c:d6:b4:b4: 0b:ec:c3:98:70:74:0d:1c:32:3e:f0:c3:a8:d0:c8: f7:28:5e:1d:1f:ac:fd:90:58:5d:e0:15:22:fb:40: d7:7f:53:8e:e1:5e:e3:eb:d4:a9:3d:c4:02:63:b4: bd:a1:eb:19:60:7f:3b:64:bd:88:6c:b9:bd:e1:fb: 66:28:15:69:7a:cc:c2:64:ce:f5:37:65:92:f5:ee: ec:91:ad:14:c6:3b:f2:d6:a6:9b:4d:06:de:7b:98: f9:5a:07:52:bb:28:ba:be:ec:8a:4a:50:c4:8b:c5: 25:27:ec:a8:11:bb:9d:00:79:1e:4d:5f:45:73:6d: 89:7f:b2:9f:55:c0:e9:5b:72:37:4e:81:bf:ca:43: 95:5c:78:16:76:86:44:b3:c5:df:c6:a3:77:85:29: 66:6e:8c:a0:a0:45:16:4e:f3:43:47:1c:c2:ab:ee: 32:db:a9:3b:52:f9:e0:98:63:06:83:a7:58:ef:9a: 53:b7:70:c5:4a:38:14:e7:87:fa:e3:b7:79:f8:d6: 62:fe:f6:0f:59:be:c8:d4:98:14:63:a7:d7:3d:6d: 93:9e:e4:d9:30:91:6a:ca:28:af:b7:e5:ae:7b:09: c2:b2:9b:95:71:f5:fb:b9:7f:b5:65:1c:00:ef:04: 2d:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:98:DE:6E:6E:4F:CD:F6:95:39:A6:69:BF:76:17:99:F3:3A:40:0A X509v3 Authority Key Identifier: keyid:B3:F0:D7:73:DC:BE:52:3A:3F:B1:F5:D2:6D:00:33:48:74:BC:9F:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/2/B3F0D773DCBE523A3FB1F5D26D00334874BC9FB2.crl Authority Information Access: CA Issuers - URI:rsync://krill.47272.net/repo/HYEHOST/5/B3F0D773DCBE523A3FB1F5D26D00334874BC9FB2.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/2/B3F0D773DCBE523A3FB1F5D26D00334874BC9FB2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:de:bf:45:a2:12:5f:ab:eb:c3:a0:53:76:90:f2:5d:bf:00: 28:2d:8e:94:4d:3c:64:78:51:d2:31:f1:49:3e:9a:5e:6f:b5: 0f:69:8a:35:71:2f:04:06:27:10:b9:66:77:df:1a:b9:c3:76: 7a:88:ca:50:b0:56:81:2a:85:f9:0b:ec:4d:01:eb:c1:0c:59: 8b:2a:de:11:28:0b:64:87:59:cd:c5:d6:f0:2b:54:ed:07:3f: 07:81:38:dc:7d:ea:dc:c7:2e:d7:3f:75:b8:0d:b3:f9:09:e5: 93:2c:f7:4f:01:60:79:43:20:ba:fb:c1:04:48:b9:4a:2a:80: a1:a5:7e:6a:a2:13:73:1c:92:77:50:d1:57:98:ef:fb:f8:79: 12:a0:9a:d4:b7:bf:ab:bf:7f:7f:7f:f8:5b:e2:64:56:8f:7b: 6d:6c:fa:89:82:b8:e1:ca:3b:28:61:22:c6:88:d6:f9:87:16: 4e:8a:e7:c0:c5:22:b9:ec:da:a8:33:cd:7a:5d:96:99:6f:0b: 25:16:69:d6:d8:61:58:4f:a1:49:7e:3e:cd:5e:aa:e2:18:fe: c2:07:c2:49:cc:24:ee:51:20:0d:8f:8b:6f:90:1d:4c:3d:00: 88:55:cc:62:a0:77:5f:bf:9f:6e:41:d2:c4:c1:84:0e:09:16: 2b:68:d5:58 -----BEGIN CERTIFICATE----- MIIFSDCCBDCgAwIBAgIUWOZ6Dk9k+k6LFk8ftD8JZtM6V+IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjNGMEQ3NzNEQ0JFNTIzQTNGQjFGNUQyNkQwMDMzNDg3 NEJDOUZCMjAeFw0yNTA4MDUxNzI3NDlaFw0yNTA4MDYxNzM2NDlaMDMxMTAvBgNV BAMTKEYxOThERTZFNkU0RkNERjY5NTM5QTY2OUJGNzYxNzk5RjMzQTQwMEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCp6HxPXGddkd+kTNa0tAvsw5hw dA0cMj7ww6jQyPcoXh0frP2QWF3gFSL7QNd/U47hXuPr1Kk9xAJjtL2h6xlgfztk vYhsub3h+2YoFWl6zMJkzvU3ZZL17uyRrRTGO/LWpptNBt57mPlaB1K7KLq+7IpK UMSLxSUn7KgRu50AeR5NX0VzbYl/sp9VwOlbcjdOgb/KQ5VceBZ2hkSzxd/Go3eF KWZujKCgRRZO80NHHMKr7jLbqTtS+eCYYwaDp1jvmlO3cMVKOBTnh/rjt3n41mL+ 9g9ZvsjUmBRjp9c9bZOe5NkwkWrKKK+35a57CcKym5Vx9fu5f7VlHADvBC3rAgMB AAGjggJSMIICTjAdBgNVHQ4EFgQU8Zjebm5PzfaVOaZpv3YXmfM6QAowHwYDVR0j BBgwFoAUs/DXc9y+Ujo/sfXSbQAzSHS8n7IwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNzEwOThjMjMtYTk3Ny00ZjlhLTk3YzktY2Q0ZTc1OWRl YTA5LzIvQjNGMEQ3NzNEQ0JFNTIzQTNGQjFGNUQyNkQwMDMzNDg3NEJDOUZCMi5j cmwwbwYIKwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL2tyaWxsLjQ3 MjcyLm5ldC9yZXBvL0hZRUhPU1QvNS9CM0YwRDc3M0RDQkU1MjNBM0ZCMUY1RDI2 RDAwMzM0ODc0QkM5RkIyLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzcxMDk4YzIzLWE5NzctNGY5YS05N2M5LWNkNGU3NTlkZWEwOS8yL0IzRjBENzcz RENCRTUyM0EzRkIxRjVEMjZEMDAzMzQ4NzRCQzlGQjIubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAG3r9F ohJfq+vDoFN2kPJdvwAoLY6UTTxkeFHSMfFJPppeb7UPaYo1cS8EBicQuWZ33xq5 w3Z6iMpQsFaBKoX5C+xNAevBDFmLKt4RKAtkh1nNxdbwK1TtBz8HgTjcfercxy7X P3W4DbP5CeWTLPdPAWB5QyC6+8EESLlKKoChpX5qohNzHJJ3UNFXmO/7+HkSoJrU t7+rv39/f/hb4mRWj3ttbPqJgrjhyjsoYSLGiNb5hxZOiufAxSK57NqoM816XZaZ bwslFmnW2GFYT6FJfj7NXqriGP7CB8JJzCTuUSANj4tvkB1MPQCIVcxioHdfv59u QdLEwYQOCRYraNVY -----END CERTIFICATE-----Generated at Tue Aug 5 20:07:40 2025 by rpki-client