$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/9/2F2C3124012C07F6775A6241DFC63BE0414C98AD.mft File: 2F2C3124012C07F6775A6241DFC63BE0414C98AD.mft (raw, json) Hash identifier: vxuA1vdnXRyqBmBXE8O+55S/QTbXTdbFFSTUVR9CIf4= Subject key identifier: 71:B9:FC:DD:CD:63:50:72:22:E5:59:71:B6:44:91:68:D6:C4:72:0D Authority key identifier: 2F:2C:31:24:01:2C:07:F6:77:5A:62:41:DF:C6:3B:E0:41:4C:98:AD Certificate issuer: /CN=2F2C3124012C07F6775A6241DFC63BE0414C98AD Certificate serial: 6125FBBB04487EA19181EDD7502037686748A5FE Authority info access: rsync://krill.47272.net/repo/HYEHOST/5/2F2C3124012C07F6775A6241DFC63BE0414C98AD.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/9/2F2C3124012C07F6775A6241DFC63BE0414C98AD.mft Manifest number: 014C Signing time: Sun 01 Mar 2026 20:11:08 +0000 Manifest this update: Sun 01 Mar 2026 20:06:08 +0000 Manifest next update: Mon 02 Mar 2026 22:01:08 +0000 Files and hashes: 1: 2F2C3124012C07F6775A6241DFC63BE0414C98AD.crl (hash: mMJNlpmAjbK1SZnoteJH933i5w/I11w3EW0dMVbWcXY=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/9/2F2C3124012C07F6775A6241DFC63BE0414C98AD.crl rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/9/2F2C3124012C07F6775A6241DFC63BE0414C98AD.mft rsync://krill.47272.net/repo/HYEHOST/5/2F2C3124012C07F6775A6241DFC63BE0414C98AD.cer rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Mar 2026 22:01:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:25:fb:bb:04:48:7e:a1:91:81:ed:d7:50:20:37:68:67:48:a5:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2F2C3124012C07F6775A6241DFC63BE0414C98AD Validity Not Before: Mar 1 20:06:08 2026 GMT Not After : Mar 2 22:01:08 2026 GMT Subject: CN=71B9FCDDCD63507222E55971B6449168D6C4720D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:45:ac:4d:8c:12:9b:8a:55:6e:bc:fb:ad:a1: 73:5c:32:ff:3e:ea:10:42:b5:df:51:19:69:f8:a9: 7c:7e:c7:7b:f1:4b:5f:7f:01:0b:6d:c5:54:1c:f6: b4:3c:00:a9:7f:3d:67:30:8e:6d:02:f0:9c:dc:cf: cd:13:14:39:1c:e5:f4:2b:b6:cc:b7:e9:ef:5e:2c: 72:55:16:da:be:71:a3:e3:4d:d1:5f:f2:71:0d:ba: 96:ef:c3:41:b1:9c:e3:2d:e1:40:da:a8:9f:f8:e6: a6:5a:ae:b5:68:cf:05:72:90:17:bd:f7:66:2d:f7: c1:5c:ad:1e:5e:f9:20:a9:0a:72:58:f6:fe:8f:fa: de:77:7a:04:71:ae:52:31:26:d4:ba:e8:87:31:45: 9b:22:1f:4c:67:67:c3:a5:de:10:45:af:f3:1f:5e: 83:af:18:4c:09:be:15:3f:32:19:90:7c:83:29:e1: f9:37:b0:72:5b:d6:8c:e2:55:97:7b:08:72:a1:2d: 04:44:64:e9:01:86:da:09:7a:4f:bc:b5:88:ed:0f: ea:c0:92:df:42:82:71:9f:12:07:62:49:09:fd:30: 96:61:b3:98:f0:e2:2d:6a:25:84:44:be:df:4f:87: 9d:61:ef:1e:d6:fe:fb:94:1c:c7:0b:95:b2:15:79: 71:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:B9:FC:DD:CD:63:50:72:22:E5:59:71:B6:44:91:68:D6:C4:72:0D X509v3 Authority Key Identifier: keyid:2F:2C:31:24:01:2C:07:F6:77:5A:62:41:DF:C6:3B:E0:41:4C:98:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/9/2F2C3124012C07F6775A6241DFC63BE0414C98AD.crl Authority Information Access: CA Issuers - URI:rsync://krill.47272.net/repo/HYEHOST/5/2F2C3124012C07F6775A6241DFC63BE0414C98AD.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/9/2F2C3124012C07F6775A6241DFC63BE0414C98AD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:aa:65:6f:98:55:84:ba:1d:a7:fc:25:50:0b:85:a8:c8:ba: 2a:f2:3b:55:7a:af:39:11:ce:3a:b2:49:b1:b5:0e:27:94:ee: 99:ed:35:04:ab:ca:5e:e7:c2:4e:bb:a7:39:c2:6f:0e:07:11: 92:cf:c4:30:16:c8:86:1c:63:da:04:57:6a:2d:cd:6f:ea:98: 6c:f8:3e:33:5e:4e:29:e0:f7:3b:c9:e0:a7:74:d1:2f:8c:ca: f6:52:a7:f1:ce:5d:58:1f:46:3f:d8:d0:ab:d1:2f:00:56:15: d2:4d:1f:fd:96:06:06:07:95:56:0a:d1:46:4f:3c:3c:96:d1: 9f:73:0b:71:e7:2f:94:37:e8:2a:4e:ea:6d:08:e3:b0:74:c2: d0:ef:fc:f5:7e:60:6f:9b:71:01:42:51:56:f4:a1:2a:90:db: c6:a1:2b:18:2e:d0:68:25:e1:4b:a8:f3:0f:7e:1c:6f:61:61: d8:e2:e6:0b:0c:c0:8c:2a:8d:e2:b7:8e:16:f6:09:d4:29:db: a9:60:5a:76:64:1a:e5:7a:00:70:dd:76:b7:41:42:65:03:77: 0c:34:cb:ac:d5:0f:80:a8:33:ce:1e:0e:e6:11:74:10:dc:a1: e2:0d:cb:99:7e:a5:0b:cd:3c:99:ee:64:2b:dc:16:d7:f3:95: fc:dd:46:29 -----BEGIN CERTIFICATE----- MIIFSDCCBDCgAwIBAgIUYSX7uwRIfqGRge3XUCA3aGdIpf4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkYyQzMxMjQwMTJDMDdGNjc3NUE2MjQxREZDNjNCRTA0 MTRDOThBRDAeFw0yNjAzMDEyMDA2MDhaFw0yNjAzMDIyMjAxMDhaMDMxMTAvBgNV BAMTKDcxQjlGQ0REQ0Q2MzUwNzIyMkU1NTk3MUI2NDQ5MTY4RDZDNDcyMEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+RaxNjBKbilVuvPutoXNcMv8+ 6hBCtd9RGWn4qXx+x3vxS19/AQttxVQc9rQ8AKl/PWcwjm0C8Jzcz80TFDkc5fQr tsy36e9eLHJVFtq+caPjTdFf8nENupbvw0GxnOMt4UDaqJ/45qZarrVozwVykBe9 92Yt98FcrR5e+SCpCnJY9v6P+t53egRxrlIxJtS66IcxRZsiH0xnZ8Ol3hBFr/Mf XoOvGEwJvhU/MhmQfIMp4fk3sHJb1oziVZd7CHKhLQREZOkBhtoJek+8tYjtD+rA kt9CgnGfEgdiSQn9MJZhs5jw4i1qJYREvt9Ph51h7x7W/vuUHMcLlbIVeXGrAgMB AAGjggJSMIICTjAdBgNVHQ4EFgQUcbn83c1jUHIi5VlxtkSRaNbEcg0wHwYDVR0j BBgwFoAULywxJAEsB/Z3WmJB38Y74EFMmK0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZGU3ZDU1ZjctZWU2MC00MDA1LWJhZDctYjQyODE4Y2Y1 MGU4LzkvMkYyQzMxMjQwMTJDMDdGNjc3NUE2MjQxREZDNjNCRTA0MTRDOThBRC5j cmwwbwYIKwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL2tyaWxsLjQ3 MjcyLm5ldC9yZXBvL0hZRUhPU1QvNS8yRjJDMzEyNDAxMkMwN0Y2Nzc1QTYyNDFE RkM2M0JFMDQxNEM5OEFELmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2RlN2Q1NWY3LWVlNjAtNDAwNS1iYWQ3LWI0MjgxOGNmNTBlOC85LzJGMkMzMTI0 MDEyQzA3RjY3NzVBNjI0MURGQzYzQkUwNDE0Qzk4QUQubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBEqmVv mFWEuh2n/CVQC4WoyLoq8jtVeq85Ec46skmxtQ4nlO6Z7TUEq8pe58JOu6c5wm8O BxGSz8QwFsiGHGPaBFdqLc1v6phs+D4zXk4p4Pc7yeCndNEvjMr2Uqfxzl1YH0Y/ 2NCr0S8AVhXSTR/9lgYGB5VWCtFGTzw8ltGfcwtx5y+UN+gqTuptCOOwdMLQ7/z1 fmBvm3EBQlFW9KEqkNvGoSsYLtBoJeFLqPMPfhxvYWHY4uYLDMCMKo3it44W9gnU KdupYFp2ZBrlegBw3Xa3QUJlA3cMNMus1Q+AqDPOHg7mEXQQ3KHiDcuZfqULzTyZ 7mQr3BbX85X83UYp -----END CERTIFICATE-----Generated at Mon Mar 2 14:01:58 2026 by rpki-client