Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/9/2F2C3124012C07F6775A6241DFC63BE0414C98AD.mft
File:                     2F2C3124012C07F6775A6241DFC63BE0414C98AD.mft (raw, json)
Hash identifier:          +W69RzvKl1/KSW8g6v9EEumoFqyZ8uNM07a11KBFhWo=
Subject key identifier:   E1:D5:98:67:72:79:74:DD:B5:7A:1C:A5:8B:6E:62:8B:BB:62:64:BB
Authority key identifier: 2F:2C:31:24:01:2C:07:F6:77:5A:62:41:DF:C6:3B:E0:41:4C:98:AD
Certificate issuer:       /CN=2F2C3124012C07F6775A6241DFC63BE0414C98AD
Certificate serial:       5978D902C857E190C566C40CC0B4C76536309DAD
Authority info access:    rsync://krill.47272.net/repo/HYEHOST/5/2F2C3124012C07F6775A6241DFC63BE0414C98AD.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/9/2F2C3124012C07F6775A6241DFC63BE0414C98AD.mft
Manifest number:          018C
Signing time:             Sun 19 Apr 2026 02:34:21 +0000
Manifest this update:     Sun 19 Apr 2026 02:29:21 +0000
Manifest next update:     Mon 20 Apr 2026 03:15:21 +0000
Files and hashes:         1: 2F2C3124012C07F6775A6241DFC63BE0414C98AD.crl (hash: 6avMVk1kgJsAnw0AMVg3MBo2wzx6Qmbivx1BWrJ5Mnw=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/9/2F2C3124012C07F6775A6241DFC63BE0414C98AD.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/9/2F2C3124012C07F6775A6241DFC63BE0414C98AD.mft
                          rsync://krill.47272.net/repo/HYEHOST/5/2F2C3124012C07F6775A6241DFC63BE0414C98AD.cer
                          rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl
                          rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Apr 2026 02:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:78:d9:02:c8:57:e1:90:c5:66:c4:0c:c0:b4:c7:65:36:30:9d:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2F2C3124012C07F6775A6241DFC63BE0414C98AD
        Validity
            Not Before: Apr 19 02:29:21 2026 GMT
            Not After : Apr 20 03:15:21 2026 GMT
        Subject: CN=E1D59867727974DDB57A1CA58B6E628BBB6264BB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:17:b4:5d:82:ad:33:85:76:f7:8f:24:13:0c:
                    c9:cb:06:36:bf:46:e7:67:78:8b:6b:20:bd:bd:4b:
                    a4:2e:1a:b9:02:88:bf:87:b0:56:fd:c6:d8:99:d6:
                    55:1c:8a:a9:69:37:78:97:a9:7c:df:b3:89:14:db:
                    2d:c3:86:4c:43:11:e2:4d:55:88:d6:1b:3f:36:bc:
                    25:19:c2:fb:7b:36:0e:77:d6:3c:3f:e4:44:5c:23:
                    1a:4c:11:59:fb:78:35:1f:ba:90:02:07:f5:04:ea:
                    fd:2e:d9:79:46:f5:d4:7a:d0:d0:12:85:20:55:b5:
                    bb:ee:9f:f1:e9:6f:b1:3e:c1:d5:9e:ea:11:eb:53:
                    ee:0c:0e:65:7e:ab:9e:af:97:4e:3f:d0:43:bc:61:
                    b2:fe:94:c0:4f:d3:4d:a9:45:25:89:71:ba:46:3c:
                    d8:4b:93:94:9e:3d:98:d9:8a:c1:99:66:7e:6c:1f:
                    b3:11:a7:de:a9:7d:8a:4a:e6:f6:58:74:8c:62:1f:
                    e5:10:46:7f:82:76:ab:92:71:94:b9:8a:c2:44:97:
                    bf:a4:0b:73:8a:c3:04:22:3d:b9:d4:44:c3:71:b3:
                    a6:51:df:66:5b:cb:e3:97:2a:4e:60:b2:93:db:96:
                    f3:eb:11:d3:fc:2b:b0:e2:56:b4:fb:c7:0d:a2:b1:
                    7a:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:D5:98:67:72:79:74:DD:B5:7A:1C:A5:8B:6E:62:8B:BB:62:64:BB
            X509v3 Authority Key Identifier:
                keyid:2F:2C:31:24:01:2C:07:F6:77:5A:62:41:DF:C6:3B:E0:41:4C:98:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/9/2F2C3124012C07F6775A6241DFC63BE0414C98AD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://krill.47272.net/repo/HYEHOST/5/2F2C3124012C07F6775A6241DFC63BE0414C98AD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/9/2F2C3124012C07F6775A6241DFC63BE0414C98AD.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:47:79:0d:de:46:c4:b5:f2:25:64:02:57:57:de:f4:43:ef:
         34:d0:17:6c:75:bb:fe:d0:4a:4b:d4:1a:ad:ec:29:e0:e0:8a:
         ff:04:7a:95:54:20:7b:35:37:d0:bb:3a:f3:dc:c9:f5:bf:66:
         67:3a:0a:be:ac:98:dc:0f:23:dd:ef:c6:60:68:d5:08:03:8f:
         21:4c:5d:ed:09:89:39:6b:52:85:07:85:db:31:e8:48:c5:49:
         77:1b:82:3a:a6:29:a1:c0:5d:f8:5a:f1:20:f3:85:bd:c3:19:
         f5:40:09:82:e4:93:b7:b2:72:3e:9f:3a:6d:22:39:0a:ab:02:
         90:80:92:02:9f:ee:0c:56:58:c9:4b:74:b3:62:d7:49:e6:d5:
         b7:cb:27:17:fe:e1:cb:d8:a8:02:bb:f6:2f:b1:8b:52:10:93:
         66:5e:92:3b:64:e1:69:85:f8:c7:bd:e2:d3:8c:28:dc:45:c9:
         8e:1a:56:c9:7c:5d:d1:5d:8f:ac:9d:d4:0a:5c:40:2d:b5:25:
         5a:3a:23:cb:c2:b2:da:5f:0f:62:34:e4:ab:b1:c4:a6:7d:1d:
         a8:8e:3d:d6:54:0e:18:db:99:7b:68:3c:cd:53:43:04:c4:c0:
         da:b1:4d:4a:32:e9:ab:c5:11:94:bb:e1:41:0a:20:d4:ac:7c:
         b3:e4:5a:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 10:05:16 2026 by rpki-client