$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/cf81e235-8158-407e-bcff-f096348357a2/2/B46FBF1DD35487568FC708767F085FAD2881F56D.mft File: B46FBF1DD35487568FC708767F085FAD2881F56D.mft (raw, json) Hash identifier: WCZMTALN4/I4z9EisshB9o4xHP5wyW0miS75ZJNpv7w= Subject key identifier: FE:3C:CA:35:85:90:73:69:D2:C8:DC:5D:1C:DB:DC:75:01:4C:D5:3A Authority key identifier: B4:6F:BF:1D:D3:54:87:56:8F:C7:08:76:7F:08:5F:AD:28:81:F5:6D Certificate issuer: /CN=B46FBF1DD35487568FC708767F085FAD2881F56D Certificate serial: 41359473A7BBEF88781C7EC71A2CAACB72895464 Authority info access: rsync://krill.47272.net/repo/HYEHOST/5/B46FBF1DD35487568FC708767F085FAD2881F56D.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/cf81e235-8158-407e-bcff-f096348357a2/2/B46FBF1DD35487568FC708767F085FAD2881F56D.mft Manifest number: 30 Signing time: Thu 07 Aug 2025 14:41:59 +0000 Manifest this update: Thu 07 Aug 2025 14:36:59 +0000 Manifest next update: Fri 08 Aug 2025 18:34:59 +0000 Files and hashes: 1: 326130353a646663333a666434303a3a2f34342d3438203d3e20323134323939.roa (hash: FrXtmk7pAG6qQfvQv6ZeMBaIdLdax1zCCasuBlvhYoQ=) 2: 326130393a353463373a313030303a3a2f34382d3438203d3e20323134323939.roa (hash: FciUVAzI9S+mi5njON8p5QSvWZZPmoftRYdBUiJGcwc=) 3: B46FBF1DD35487568FC708767F085FAD2881F56D.crl (hash: LiBSwQ6Y7RZ6ajnb3A9wbYX3SOx+XZWU67+viqKE4+s=) 4: 326130393a353463373a316562653a3a2f34382d3438203d3e20323039383636.roa (hash: VGq9MXxV3q0KHWq1w3L98ANgxY0Rn68lBES1HVsVMxg=) 5: 326130393a353463373a316562653a3a2f34382d3438203d3e20323134323939.roa (hash: EzVCbaMm1BT+4VuCpmm/8/DdQRnkJJongvTgVxll+Yw=) 6: 326130393a353463373a313030313a3a2f34382d3438203d3e20323134323939.roa (hash: ZcdksXusZvsGLtEnzA79bXu4R9tRtoB6C1m74jW5A3Q=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/cf81e235-8158-407e-bcff-f096348357a2/2/B46FBF1DD35487568FC708767F085FAD2881F56D.crl rsync://rsync.paas.rpki.ripe.net/repository/cf81e235-8158-407e-bcff-f096348357a2/2/B46FBF1DD35487568FC708767F085FAD2881F56D.mft rsync://krill.47272.net/repo/HYEHOST/5/B46FBF1DD35487568FC708767F085FAD2881F56D.cer rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 08 Aug 2025 04:29:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:35:94:73:a7:bb:ef:88:78:1c:7e:c7:1a:2c:aa:cb:72:89:54:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B46FBF1DD35487568FC708767F085FAD2881F56D Validity Not Before: Aug 7 14:36:59 2025 GMT Not After : Aug 8 18:34:59 2025 GMT Subject: CN=FE3CCA3585907369D2C8DC5D1CDBDC75014CD53A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:96:8c:72:42:52:e4:ab:77:58:a6:16:0e:45: 52:33:fc:26:08:f8:72:c8:69:3c:f4:46:fb:ba:65: 41:52:6c:cd:f6:07:a2:65:9a:47:b0:9f:2c:4a:6d: 1a:91:11:9f:07:12:34:f0:d3:2c:2e:76:6e:27:d3: 93:fe:0d:cc:1b:ac:b1:2a:97:1f:37:d4:96:f6:1a: 35:e3:c2:94:b0:ef:29:a9:09:6d:56:df:6d:a0:3d: 2a:a1:e8:3c:55:54:62:5d:7f:02:70:04:4e:ad:8c: 40:78:bc:f5:94:ef:34:5b:79:f7:92:66:85:52:08: 9f:0c:c7:02:6a:46:46:0d:ff:67:cb:cd:69:93:55: 26:1e:1c:ad:2f:06:cf:f5:e6:45:d7:b8:c7:34:41: e2:01:37:78:4f:97:07:6f:18:1b:42:59:68:50:30: 79:5c:02:77:43:2f:61:e7:8b:48:88:a6:4a:10:95: 5b:c3:a6:d4:41:9e:29:86:ba:93:fa:ff:d8:25:b4: d3:8d:f2:fe:41:88:e2:9e:51:89:e6:80:ef:fe:cd: 88:5a:31:c2:44:9e:40:85:54:34:ed:50:20:95:ff: 6e:20:60:ae:56:39:dd:c5:70:e8:dd:a2:a7:43:2e: e4:78:45:99:1f:ed:bd:bc:72:73:fd:47:50:47:91: 2b:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:3C:CA:35:85:90:73:69:D2:C8:DC:5D:1C:DB:DC:75:01:4C:D5:3A X509v3 Authority Key Identifier: keyid:B4:6F:BF:1D:D3:54:87:56:8F:C7:08:76:7F:08:5F:AD:28:81:F5:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/cf81e235-8158-407e-bcff-f096348357a2/2/B46FBF1DD35487568FC708767F085FAD2881F56D.crl Authority Information Access: CA Issuers - URI:rsync://krill.47272.net/repo/HYEHOST/5/B46FBF1DD35487568FC708767F085FAD2881F56D.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/cf81e235-8158-407e-bcff-f096348357a2/2/B46FBF1DD35487568FC708767F085FAD2881F56D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:d6:05:57:f3:78:4f:e8:25:04:dc:8e:81:e5:d8:4d:d2:10: 51:41:2b:e1:c5:1f:dd:8b:07:01:2b:29:c0:8a:07:6b:b7:a0: 7a:28:9a:4d:c4:3d:6b:07:71:96:bc:fc:13:5a:01:cb:03:63: de:03:7c:3e:bc:03:d9:56:37:60:e5:01:7f:ca:d5:b4:44:e4: ab:bc:f2:0c:12:5a:2f:fc:53:9d:7b:8d:dc:ae:62:6f:0f:e2: 8e:82:f7:99:73:01:9a:47:52:2b:08:6f:56:1d:32:f4:eb:15: 8f:ea:f3:09:b1:8e:64:22:38:99:5a:1f:ca:92:db:d9:a5:12: d7:ec:ae:01:4d:81:3f:ed:c7:f4:ef:68:72:bb:12:70:52:17: b2:4d:94:99:7b:df:ba:05:5b:ad:3c:69:86:5f:13:5c:b3:82: 41:5e:32:7d:c8:de:95:75:c0:c7:3b:34:ba:33:02:36:cf:48: aa:6c:de:1d:d1:91:51:c9:f5:d5:ee:e5:eb:ba:b0:a6:80:e3: 60:2c:87:84:9d:cc:99:20:b7:29:17:09:52:c0:1a:7b:5f:a2: d3:5b:b0:1f:ac:21:5d:a3:4f:36:5b:37:c3:dc:88:18:ee:37: 43:b0:0d:df:a6:fd:23:26:8b:14:a6:3a:de:58:dd:33:ef:0f: 76:75:03:36 -----BEGIN CERTIFICATE----- MIIFSDCCBDCgAwIBAgIUQTWUc6e774h4HH7HGiyqy3KJVGQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjQ2RkJGMUREMzU0ODc1NjhGQzcwODc2N0YwODVGQUQy ODgxRjU2RDAeFw0yNTA4MDcxNDM2NTlaFw0yNTA4MDgxODM0NTlaMDMxMTAvBgNV BAMTKEZFM0NDQTM1ODU5MDczNjlEMkM4REM1RDFDREJEQzc1MDE0Q0Q1M0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9loxyQlLkq3dYphYORVIz/CYI +HLIaTz0Rvu6ZUFSbM32B6JlmkewnyxKbRqREZ8HEjTw0ywudm4n05P+DcwbrLEq lx831Jb2GjXjwpSw7ympCW1W322gPSqh6DxVVGJdfwJwBE6tjEB4vPWU7zRbefeS ZoVSCJ8MxwJqRkYN/2fLzWmTVSYeHK0vBs/15kXXuMc0QeIBN3hPlwdvGBtCWWhQ MHlcAndDL2Hni0iIpkoQlVvDptRBnimGupP6/9gltNON8v5BiOKeUYnmgO/+zYha McJEnkCFVDTtUCCV/24gYK5WOd3FcOjdoqdDLuR4RZkf7b28cnP9R1BHkSv7AgMB AAGjggJSMIICTjAdBgNVHQ4EFgQU/jzKNYWQc2nSyNxdHNvcdQFM1TowHwYDVR0j BBgwFoAUtG+/HdNUh1aPxwh2fwhfrSiB9W0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvY2Y4MWUyMzUtODE1OC00MDdlLWJjZmYtZjA5NjM0ODM1 N2EyLzIvQjQ2RkJGMUREMzU0ODc1NjhGQzcwODc2N0YwODVGQUQyODgxRjU2RC5j cmwwbwYIKwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL2tyaWxsLjQ3 MjcyLm5ldC9yZXBvL0hZRUhPU1QvNS9CNDZGQkYxREQzNTQ4NzU2OEZDNzA4NzY3 RjA4NUZBRDI4ODFGNTZELmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2NmODFlMjM1LTgxNTgtNDA3ZS1iY2ZmLWYwOTYzNDgzNTdhMi8yL0I0NkZCRjFE RDM1NDg3NTY4RkM3MDg3NjdGMDg1RkFEMjg4MUY1NkQubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBF1gVX 83hP6CUE3I6B5dhN0hBRQSvhxR/diwcBKynAigdrt6B6KJpNxD1rB3GWvPwTWgHL A2PeA3w+vAPZVjdg5QF/ytW0ROSrvPIMElov/FOde43crmJvD+KOgveZcwGaR1Ir CG9WHTL06xWP6vMJsY5kIjiZWh/KktvZpRLX7K4BTYE/7cf072hyuxJwUheyTZSZ e9+6BVutPGmGXxNcs4JBXjJ9yN6VdcDHOzS6MwI2z0iqbN4d0ZFRyfXV7uXrurCm gONgLIeEncyZILcpFwlSwBp7X6LTW7AfrCFdo082WzfD3IgY7jdDsA3fpv0jJosU pjreWN0z7w92dQM2 -----END CERTIFICATE-----Generated at Thu Aug 7 20:10:02 2025 by rpki-client