$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/9/2F2C3124012C07F6775A6241DFC63BE0414C98AD.mft File: 2F2C3124012C07F6775A6241DFC63BE0414C98AD.mft (raw, json) Hash identifier: y9j0uu4EVBh+VQb40FJo8zzORr99Y9tVdH5esqr7uT0= Subject key identifier: 6F:FA:57:85:5B:B8:60:8A:E3:BE:CC:78:58:24:3E:81:FD:C5:F6:F0 Authority key identifier: 2F:2C:31:24:01:2C:07:F6:77:5A:62:41:DF:C6:3B:E0:41:4C:98:AD Certificate issuer: /CN=2F2C3124012C07F6775A6241DFC63BE0414C98AD Certificate serial: 2B5D06569575BD6A4FF7B7E041178CDB196CE5FB Authority info access: rsync://krill.47272.net/repo/HYEHOST/5/2F2C3124012C07F6775A6241DFC63BE0414C98AD.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/9/2F2C3124012C07F6775A6241DFC63BE0414C98AD.mft Manifest number: 35 Signing time: Sun 10 Aug 2025 18:44:02 +0000 Manifest this update: Sun 10 Aug 2025 18:39:02 +0000 Manifest next update: Mon 11 Aug 2025 19:55:02 +0000 Files and hashes: 1: 2F2C3124012C07F6775A6241DFC63BE0414C98AD.crl (hash: ZsjiYcGQZtZz1TceBVIESkyetu9p16SEey4s3gN0lUE=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/9/2F2C3124012C07F6775A6241DFC63BE0414C98AD.crl rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/9/2F2C3124012C07F6775A6241DFC63BE0414C98AD.mft rsync://krill.47272.net/repo/HYEHOST/5/2F2C3124012C07F6775A6241DFC63BE0414C98AD.cer rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 11 Aug 2025 19:55:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:5d:06:56:95:75:bd:6a:4f:f7:b7:e0:41:17:8c:db:19:6c:e5:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2F2C3124012C07F6775A6241DFC63BE0414C98AD Validity Not Before: Aug 10 18:39:02 2025 GMT Not After : Aug 11 19:55:02 2025 GMT Subject: CN=6FFA57855BB8608AE3BECC7858243E81FDC5F6F0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:74:46:6c:aa:94:d0:c3:be:75:cc:ab:81:50: eb:e1:61:f9:66:e5:48:9d:93:c9:28:20:6a:b5:b2: 6f:c6:52:bb:fc:6a:1a:2f:b2:f7:d3:aa:f4:52:7d: 8c:69:10:85:02:8a:50:e3:90:50:26:33:25:5f:14: f8:d8:74:6d:40:ad:2d:76:cb:f7:fd:b0:9d:99:83: b0:e0:b2:ad:98:22:20:8b:98:d7:db:53:57:99:27: 4d:59:df:fd:25:1b:a0:bc:b6:95:74:51:f6:f1:ec: 56:ea:b9:72:c7:94:ed:ed:ba:20:de:c0:df:eb:f1: 6d:85:c2:6a:e4:de:8d:fd:75:3e:ec:82:3e:d2:f8: 13:7a:20:3c:4a:4c:3b:ab:2c:c0:37:45:8a:92:64: 01:24:11:82:72:c5:80:17:b8:6e:ea:ff:7f:cb:d0: 26:21:ca:80:10:0e:6f:b6:cf:5d:f0:7d:8f:8d:ea: 21:c5:88:1b:7d:5d:f9:96:1e:1d:89:dd:4a:ba:72: 07:25:8e:8b:ee:74:42:92:c7:7c:96:33:c5:8c:11: fb:73:88:b2:be:c3:c9:6e:cf:6f:58:12:54:8c:90: 9f:c6:9f:ab:04:16:6d:ea:e4:49:aa:17:dd:83:1c: 0a:7f:0c:49:09:21:d5:76:2f:5f:d9:fe:48:a1:e1: 03:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:FA:57:85:5B:B8:60:8A:E3:BE:CC:78:58:24:3E:81:FD:C5:F6:F0 X509v3 Authority Key Identifier: keyid:2F:2C:31:24:01:2C:07:F6:77:5A:62:41:DF:C6:3B:E0:41:4C:98:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/9/2F2C3124012C07F6775A6241DFC63BE0414C98AD.crl Authority Information Access: CA Issuers - URI:rsync://krill.47272.net/repo/HYEHOST/5/2F2C3124012C07F6775A6241DFC63BE0414C98AD.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/9/2F2C3124012C07F6775A6241DFC63BE0414C98AD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c5:04:28:5a:bb:cf:c2:b4:56:e5:5d:67:3e:c4:be:1b:a0:0c: ab:eb:63:df:f5:b6:3a:84:19:bd:43:86:36:ab:e4:40:7e:30: 09:06:ad:c8:6f:76:bb:85:d5:15:a0:69:68:84:a1:ae:d0:88: a8:65:d9:b6:91:54:d5:cd:f6:ba:50:7e:74:54:a8:05:5e:63: 24:39:e9:73:0f:29:28:88:6b:7b:c8:b6:87:c8:45:0f:0f:f0: 96:57:90:ce:06:2a:51:d1:99:31:a8:b0:b3:7f:71:45:b7:99: 6a:81:ab:d2:23:64:93:3b:dc:a1:11:ba:a8:77:5c:eb:6f:7f: 44:5e:46:88:fd:21:85:ca:47:a7:aa:59:7a:f4:e1:90:37:e9: 9b:ad:8e:2e:ff:ea:27:47:b2:a6:9f:93:f2:2a:8d:a4:d0:31: 65:86:e1:80:b0:88:a9:5b:57:ef:70:45:dc:24:cf:48:d5:4a: a0:48:34:9f:81:65:b4:50:4a:72:ac:cd:eb:26:a6:ed:f2:23: 17:cc:e3:e4:2d:a8:2e:13:4d:fc:f4:61:cd:81:47:f1:30:8f: af:b8:3e:1f:a4:2d:96:e3:8b:d3:a1:e2:cc:87:6f:96:6a:e0: 90:75:d8:e2:a4:ce:90:ad:e6:cf:0b:3b:16:7a:73:91:1e:56: 87:cb:2e:3a -----BEGIN CERTIFICATE----- MIIFSDCCBDCgAwIBAgIUK10GVpV1vWpP97fgQReM2xls5fswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkYyQzMxMjQwMTJDMDdGNjc3NUE2MjQxREZDNjNCRTA0 MTRDOThBRDAeFw0yNTA4MTAxODM5MDJaFw0yNTA4MTExOTU1MDJaMDMxMTAvBgNV BAMTKDZGRkE1Nzg1NUJCODYwOEFFM0JFQ0M3ODU4MjQzRTgxRkRDNUY2RjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCOdEZsqpTQw751zKuBUOvhYflm 5Uidk8koIGq1sm/GUrv8ahovsvfTqvRSfYxpEIUCilDjkFAmMyVfFPjYdG1ArS12 y/f9sJ2Zg7Dgsq2YIiCLmNfbU1eZJ01Z3/0lG6C8tpV0Ufbx7FbquXLHlO3tuiDe wN/r8W2Fwmrk3o39dT7sgj7S+BN6IDxKTDurLMA3RYqSZAEkEYJyxYAXuG7q/3/L 0CYhyoAQDm+2z13wfY+N6iHFiBt9XfmWHh2J3Uq6cgcljovudEKSx3yWM8WMEftz iLK+w8luz29YElSMkJ/Gn6sEFm3q5EmqF92DHAp/DEkJIdV2L1/Z/kih4QN9AgMB AAGjggJSMIICTjAdBgNVHQ4EFgQUb/pXhVu4YIrjvsx4WCQ+gf3F9vAwHwYDVR0j BBgwFoAULywxJAEsB/Z3WmJB38Y74EFMmK0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZGU3ZDU1ZjctZWU2MC00MDA1LWJhZDctYjQyODE4Y2Y1 MGU4LzkvMkYyQzMxMjQwMTJDMDdGNjc3NUE2MjQxREZDNjNCRTA0MTRDOThBRC5j cmwwbwYIKwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL2tyaWxsLjQ3 MjcyLm5ldC9yZXBvL0hZRUhPU1QvNS8yRjJDMzEyNDAxMkMwN0Y2Nzc1QTYyNDFE RkM2M0JFMDQxNEM5OEFELmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2RlN2Q1NWY3LWVlNjAtNDAwNS1iYWQ3LWI0MjgxOGNmNTBlOC85LzJGMkMzMTI0 MDEyQzA3RjY3NzVBNjI0MURGQzYzQkUwNDE0Qzk4QUQubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQDFBCha u8/CtFblXWc+xL4boAyr62Pf9bY6hBm9Q4Y2q+RAfjAJBq3Ib3a7hdUVoGlohKGu 0IioZdm2kVTVzfa6UH50VKgFXmMkOelzDykoiGt7yLaHyEUPD/CWV5DOBipR0Zkx qLCzf3FFt5lqgavSI2STO9yhEbqod1zrb39EXkaI/SGFykenqll69OGQN+mbrY4u /+onR7Kmn5PyKo2k0DFlhuGAsIipW1fvcEXcJM9I1UqgSDSfgWW0UEpyrM3rJqbt 8iMXzOPkLaguE0389GHNgUfxMI+vuD4fpC2W44vToeLMh2+WauCQddjipM6QrebP CzsWenORHlaHyy46 -----END CERTIFICATE-----Generated at Mon Aug 11 07:24:38 2025 by rpki-client