$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/2/B3F0D773DCBE523A3FB1F5D26D00334874BC9FB2.mft File: B3F0D773DCBE523A3FB1F5D26D00334874BC9FB2.mft (raw, json) Hash identifier: wtQmAxSfRG4TklkeUS67248SzxwaXjF0nHUziifu34Q= Subject key identifier: 0E:71:2D:4D:33:6F:70:4C:0A:17:3E:96:5D:01:6C:52:40:8D:F2:47 Authority key identifier: B3:F0:D7:73:DC:BE:52:3A:3F:B1:F5:D2:6D:00:33:48:74:BC:9F:B2 Certificate issuer: /CN=B3F0D773DCBE523A3FB1F5D26D00334874BC9FB2 Certificate serial: 0991BE8A805EB6889FBB9F07E3C3BD34C40AD83B Authority info access: rsync://krill.47272.net/repo/HYEHOST/5/B3F0D773DCBE523A3FB1F5D26D00334874BC9FB2.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/2/B3F0D773DCBE523A3FB1F5D26D00334874BC9FB2.mft Manifest number: 90 Signing time: Wed 05 Nov 2025 15:08:29 +0000 Manifest this update: Wed 05 Nov 2025 15:03:29 +0000 Manifest next update: Thu 06 Nov 2025 17:27:29 +0000 Files and hashes: 1: 326130613a363034343a623363303a3a2f34342d3434203d3e203434373333.roa (hash: rJLCwnl4uhsE/sIS8YisrOAIem98x56OxfgeBDZO+zk=) 2: B3F0D773DCBE523A3FB1F5D26D00334874BC9FB2.crl (hash: 3JX706HH57V/yT0U8t7M+gfBdndGl9NEmRoNOaBcNNQ=) 3: 326130613a363034343a623330303a3a2f34322d3432203d3e20323134383039.roa (hash: rL0HqOB+MnXMFAFPM77NjHuvY8wsbwqcrhR4UPqYqsc=) 4: 326130613a363034343a623334333a3a2f34382d3438203d3e20323039373335.roa (hash: gl3XcUXLDzu/fH6TlbsYQk5DZAQEnfCBBv+yPT42ay4=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/2/B3F0D773DCBE523A3FB1F5D26D00334874BC9FB2.crl rsync://rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/2/B3F0D773DCBE523A3FB1F5D26D00334874BC9FB2.mft rsync://krill.47272.net/repo/HYEHOST/5/B3F0D773DCBE523A3FB1F5D26D00334874BC9FB2.cer rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 06 Nov 2025 10:22:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:91:be:8a:80:5e:b6:88:9f:bb:9f:07:e3:c3:bd:34:c4:0a:d8:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B3F0D773DCBE523A3FB1F5D26D00334874BC9FB2 Validity Not Before: Nov 5 15:03:29 2025 GMT Not After : Nov 6 17:27:29 2025 GMT Subject: CN=0E712D4D336F704C0A173E965D016C52408DF247 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:4f:94:79:f4:d9:b4:05:de:80:6b:19:24:76: 24:4f:ad:c1:5b:e5:65:26:1b:a7:4a:72:36:8b:53: 8d:dd:63:cc:d6:e9:0a:7b:51:11:47:3c:b5:53:cb: 3f:f8:73:d0:28:c7:f7:33:fb:aa:66:33:04:dc:74: 6f:dd:af:e1:b9:67:55:a3:fe:59:e8:e5:35:0b:c2: 87:20:72:60:c7:63:87:b5:87:8b:a9:ef:50:4a:b4: ca:69:f7:f4:c2:59:c2:38:f5:77:82:c3:c0:36:bb: 61:95:a7:d2:b1:09:81:ad:3f:9e:ff:77:14:15:5b: 05:b1:36:87:55:ef:3b:6f:24:df:8b:d3:d1:4a:9e: d5:fc:07:da:dc:14:6e:40:6a:60:9b:77:c7:16:7e: 05:d1:30:f0:44:cc:6a:dc:6a:32:56:7b:a0:25:ab: c5:94:31:ca:69:2d:e7:78:7a:cc:02:34:25:7c:5f: a3:b0:04:e9:d2:a0:44:d2:03:eb:8b:07:fc:96:2f: ed:de:db:12:05:ff:7b:37:d6:4a:bb:93:ad:95:ad: 23:bb:c0:1b:14:b6:5d:1d:0b:38:51:c3:da:04:3e: 84:c3:12:bf:af:a5:26:81:bf:e3:90:34:6d:d3:0d: 32:a6:d5:59:bd:e4:b6:57:f0:95:72:4b:c8:48:56: 98:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:71:2D:4D:33:6F:70:4C:0A:17:3E:96:5D:01:6C:52:40:8D:F2:47 X509v3 Authority Key Identifier: keyid:B3:F0:D7:73:DC:BE:52:3A:3F:B1:F5:D2:6D:00:33:48:74:BC:9F:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/2/B3F0D773DCBE523A3FB1F5D26D00334874BC9FB2.crl Authority Information Access: CA Issuers - URI:rsync://krill.47272.net/repo/HYEHOST/5/B3F0D773DCBE523A3FB1F5D26D00334874BC9FB2.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/2/B3F0D773DCBE523A3FB1F5D26D00334874BC9FB2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:67:a4:e9:b5:21:c0:15:74:7c:1e:7d:47:86:60:90:14:5b: c7:f0:25:32:d8:51:f5:77:21:50:82:f4:0a:b6:d5:dd:8d:5c: 22:ce:4d:8a:7f:38:a5:31:57:79:d8:57:b7:7a:d0:dd:30:ac: 31:08:14:ee:f3:90:52:3b:d2:cc:a9:50:26:9e:a5:9d:96:93: 45:b6:7a:5e:a1:e8:6a:6d:54:be:ee:0f:7d:e3:18:f9:a9:61: 51:83:74:82:18:6c:1f:12:8b:38:1a:2a:f8:ea:66:a0:29:bf: 6b:32:79:cd:8d:4b:5f:da:d0:3f:a2:27:21:71:57:e8:3f:d8: 9c:b6:ba:65:52:53:4a:73:3d:a5:67:e4:de:42:7c:26:31:5d: 29:54:2f:22:6d:fe:93:8a:d5:a4:ee:62:4b:8b:e1:c7:e6:79: 4c:c8:3b:0e:4e:10:a9:96:26:9a:4c:50:3d:17:f4:1a:4e:01: 88:e8:a1:c3:38:1d:f4:98:55:08:3f:40:dd:64:87:d1:b4:a8: 66:cc:b1:80:bf:92:67:9e:de:cf:d2:88:4c:d6:0f:ee:b8:3b: 47:32:6c:f8:17:0a:76:f8:67:81:97:eb:ed:bd:55:7f:0c:0a: ab:9a:05:6a:de:8d:b8:f4:f8:63:7d:00:a1:ba:0f:35:da:bb: 75:c3:6a:20 -----BEGIN CERTIFICATE----- MIIFSDCCBDCgAwIBAgIUCZG+ioBetoifu58H48O9NMQK2DswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjNGMEQ3NzNEQ0JFNTIzQTNGQjFGNUQyNkQwMDMzNDg3 NEJDOUZCMjAeFw0yNTExMDUxNTAzMjlaFw0yNTExMDYxNzI3MjlaMDMxMTAvBgNV BAMTKDBFNzEyRDREMzM2RjcwNEMwQTE3M0U5NjVEMDE2QzUyNDA4REYyNDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDET5R59Nm0Bd6AaxkkdiRPrcFb 5WUmG6dKcjaLU43dY8zW6Qp7URFHPLVTyz/4c9Aox/cz+6pmMwTcdG/dr+G5Z1Wj /lno5TULwocgcmDHY4e1h4up71BKtMpp9/TCWcI49XeCw8A2u2GVp9KxCYGtP57/ dxQVWwWxNodV7ztvJN+L09FKntX8B9rcFG5AamCbd8cWfgXRMPBEzGrcajJWe6Al q8WUMcppLed4eswCNCV8X6OwBOnSoETSA+uLB/yWL+3e2xIF/3s31kq7k62VrSO7 wBsUtl0dCzhRw9oEPoTDEr+vpSaBv+OQNG3TDTKm1Vm95LZX8JVyS8hIVpihAgMB AAGjggJSMIICTjAdBgNVHQ4EFgQUDnEtTTNvcEwKFz6WXQFsUkCN8kcwHwYDVR0j BBgwFoAUs/DXc9y+Ujo/sfXSbQAzSHS8n7IwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNzEwOThjMjMtYTk3Ny00ZjlhLTk3YzktY2Q0ZTc1OWRl YTA5LzIvQjNGMEQ3NzNEQ0JFNTIzQTNGQjFGNUQyNkQwMDMzNDg3NEJDOUZCMi5j cmwwbwYIKwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL2tyaWxsLjQ3 MjcyLm5ldC9yZXBvL0hZRUhPU1QvNS9CM0YwRDc3M0RDQkU1MjNBM0ZCMUY1RDI2 RDAwMzM0ODc0QkM5RkIyLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzcxMDk4YzIzLWE5NzctNGY5YS05N2M5LWNkNGU3NTlkZWEwOS8yL0IzRjBENzcz RENCRTUyM0EzRkIxRjVEMjZEMDAzMzQ4NzRCQzlGQjIubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBSZ6Tp tSHAFXR8Hn1HhmCQFFvH8CUy2FH1dyFQgvQKttXdjVwizk2KfzilMVd52Fe3etDd MKwxCBTu85BSO9LMqVAmnqWdlpNFtnpeoehqbVS+7g994xj5qWFRg3SCGGwfEos4 Gir46magKb9rMnnNjUtf2tA/oichcVfoP9ictrplUlNKcz2lZ+TeQnwmMV0pVC8i bf6TitWk7mJLi+HH5nlMyDsOThCpliaaTFA9F/QaTgGI6KHDOB30mFUIP0DdZIfR tKhmzLGAv5Jnnt7P0ohM1g/uuDtHMmz4Fwp2+GeBl+vtvVV/DAqrmgVq3o249Phj fQChug812rt1w2og -----END CERTIFICATE-----Generated at Wed Nov 5 16:59:43 2025 by rpki-client