$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/9/2F2C3124012C07F6775A6241DFC63BE0414C98AD.mft File: 2F2C3124012C07F6775A6241DFC63BE0414C98AD.mft (raw, json) Hash identifier: kehk3AA8c82ooQSE3/oDvZbTUQi/ThxfSTtVj052Vbg= Subject key identifier: 2B:79:45:20:FF:73:3C:2C:62:2D:95:17:BC:E2:BF:F8:84:3B:16:52 Authority key identifier: 2F:2C:31:24:01:2C:07:F6:77:5A:62:41:DF:C6:3B:E0:41:4C:98:AD Certificate issuer: /CN=2F2C3124012C07F6775A6241DFC63BE0414C98AD Certificate serial: 0AF5ABBC2EBD881E2B841679D1352AE811F10ECB Authority info access: rsync://krill.47272.net/repo/HYEHOST/5/2F2C3124012C07F6775A6241DFC63BE0414C98AD.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/9/2F2C3124012C07F6775A6241DFC63BE0414C98AD.mft Manifest number: 0266 Signing time: Mon 21 Sep 2026 02:14:21 +0000 Manifest this update: Mon 21 Sep 2026 02:09:21 +0000 Manifest next update: Tue 22 Sep 2026 04:40:21 +0000 Files and hashes: 1: 2F2C3124012C07F6775A6241DFC63BE0414C98AD.crl (hash: 4SYlnIxLR4sm2bcbBegHzJiSIXBIyTnwBIX9yX9AphU=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/9/2F2C3124012C07F6775A6241DFC63BE0414C98AD.crl rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/9/2F2C3124012C07F6775A6241DFC63BE0414C98AD.mft rsync://krill.47272.net/repo/HYEHOST/5/2F2C3124012C07F6775A6241DFC63BE0414C98AD.cer rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 21 Sep 2026 16:10:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:f5:ab:bc:2e:bd:88:1e:2b:84:16:79:d1:35:2a:e8:11:f1:0e:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2F2C3124012C07F6775A6241DFC63BE0414C98AD Validity Not Before: Sep 21 02:09:21 2026 GMT Not After : Sep 22 04:40:21 2026 GMT Subject: CN=2B794520FF733C2C622D9517BCE2BFF8843B1652 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:d9:86:ac:2a:f6:ec:43:bf:1a:4b:10:65:75: 67:59:d8:7a:f2:96:c6:22:29:b7:40:d1:1e:80:06: bb:48:66:da:ac:1b:60:91:99:0b:6f:da:42:84:17: 55:45:92:99:04:4c:36:4d:87:61:71:0b:20:8e:93: 3e:0a:3a:c4:59:39:03:af:ab:ee:d5:2c:01:e0:c3: 8f:a2:6d:e6:b8:6d:ec:6c:22:76:d9:f3:e4:aa:f6: bc:28:f4:c0:f6:28:6b:e9:4c:64:78:61:6d:ad:de: 4c:55:85:84:a3:82:8a:e0:78:ee:ec:3a:e7:cc:f2: 22:56:d3:0a:a2:49:6f:82:a9:a1:94:ff:a5:27:a3: 4d:d7:05:f2:b3:47:68:e0:d3:b5:f8:f2:34:e8:e4: db:8d:d5:9b:86:82:89:a3:c3:cd:82:9b:87:8c:fc: 97:72:db:96:5b:b0:7d:7b:a1:35:a8:d5:f3:68:62: c7:62:f9:cf:64:02:05:35:d8:c9:17:08:7b:84:86: 1c:8d:29:03:af:df:13:ef:80:e5:51:2d:d9:de:9d: 67:ae:b6:7e:d7:35:25:29:80:21:73:c8:25:e2:35: 5c:de:04:af:c7:ea:0f:22:2c:c3:02:29:f3:e9:d9: 97:30:24:e0:1f:e4:09:2a:cf:5d:8f:ad:96:9d:c7: a6:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:79:45:20:FF:73:3C:2C:62:2D:95:17:BC:E2:BF:F8:84:3B:16:52 X509v3 Authority Key Identifier: keyid:2F:2C:31:24:01:2C:07:F6:77:5A:62:41:DF:C6:3B:E0:41:4C:98:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/9/2F2C3124012C07F6775A6241DFC63BE0414C98AD.crl Authority Information Access: CA Issuers - URI:rsync://krill.47272.net/repo/HYEHOST/5/2F2C3124012C07F6775A6241DFC63BE0414C98AD.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/9/2F2C3124012C07F6775A6241DFC63BE0414C98AD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:31:00:04:92:af:af:d3:b8:9c:e6:93:c2:61:95:ce:9f:4d: b7:ae:86:c5:7c:8a:10:cc:bf:db:8f:0d:f1:90:70:29:ee:48: 7a:0f:fb:41:c3:b0:df:bd:78:6d:08:84:96:1a:bc:6c:7c:ab: 8d:87:c9:82:32:e7:e5:bb:0c:ef:99:b9:dc:d4:88:37:f9:12: 1d:a8:b1:56:9e:68:f3:43:0a:7f:66:54:e3:ae:30:7a:3a:ea: 8b:da:78:31:17:b5:8f:05:af:48:57:b7:71:86:98:60:f8:34: b4:48:7d:6c:66:f2:bf:08:d7:bc:08:09:50:47:8c:06:a5:b2: e1:2e:10:3c:ea:1d:cf:7f:43:4d:56:13:bf:19:2d:64:7c:fe: ae:1f:7b:43:0e:f9:cd:da:e4:ef:30:c5:5e:cb:40:05:67:d6: 76:4d:0d:39:7d:15:73:4f:9c:28:e0:02:3b:05:df:26:c4:b9: af:78:f1:39:53:23:35:21:5f:37:8d:4d:c2:d6:dc:84:15:be: 4c:04:a1:16:55:1b:7f:be:89:f6:a8:6e:6c:b6:dc:49:90:c7: c8:bb:2f:99:c4:61:3e:2d:25:5c:ff:c1:d5:6c:4e:60:f2:fb: c8:35:64:69:7c:c7:e5:18:8c:ae:66:2f:85:d8:2c:aa:2f:ac: de:ed:e1:68 -----BEGIN CERTIFICATE----- MIIFSDCCBDCgAwIBAgIUCvWrvC69iB4rhBZ50TUq6BHxDsswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkYyQzMxMjQwMTJDMDdGNjc3NUE2MjQxREZDNjNCRTA0 MTRDOThBRDAeFw0yNjA5MjEwMjA5MjFaFw0yNjA5MjIwNDQwMjFaMDMxMTAvBgNV BAMTKDJCNzk0NTIwRkY3MzNDMkM2MjJEOTUxN0JDRTJCRkY4ODQzQjE2NTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQ2YasKvbsQ78aSxBldWdZ2Hry lsYiKbdA0R6ABrtIZtqsG2CRmQtv2kKEF1VFkpkETDZNh2FxCyCOkz4KOsRZOQOv q+7VLAHgw4+ibea4bexsInbZ8+Sq9rwo9MD2KGvpTGR4YW2t3kxVhYSjgorgeO7s OufM8iJW0wqiSW+CqaGU/6Uno03XBfKzR2jg07X48jTo5NuN1ZuGgomjw82Cm4eM /Jdy25ZbsH17oTWo1fNoYsdi+c9kAgU12MkXCHuEhhyNKQOv3xPvgOVRLdnenWeu tn7XNSUpgCFzyCXiNVzeBK/H6g8iLMMCKfPp2ZcwJOAf5Akqz12PrZadx6Z7AgMB AAGjggJSMIICTjAdBgNVHQ4EFgQUK3lFIP9zPCxiLZUXvOK/+IQ7FlIwHwYDVR0j BBgwFoAULywxJAEsB/Z3WmJB38Y74EFMmK0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZGU3ZDU1ZjctZWU2MC00MDA1LWJhZDctYjQyODE4Y2Y1 MGU4LzkvMkYyQzMxMjQwMTJDMDdGNjc3NUE2MjQxREZDNjNCRTA0MTRDOThBRC5j cmwwbwYIKwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL2tyaWxsLjQ3 MjcyLm5ldC9yZXBvL0hZRUhPU1QvNS8yRjJDMzEyNDAxMkMwN0Y2Nzc1QTYyNDFE RkM2M0JFMDQxNEM5OEFELmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2RlN2Q1NWY3LWVlNjAtNDAwNS1iYWQ3LWI0MjgxOGNmNTBlOC85LzJGMkMzMTI0 MDEyQzA3RjY3NzVBNjI0MURGQzYzQkUwNDE0Qzk4QUQubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQB7MQAE kq+v07ic5pPCYZXOn023robFfIoQzL/bjw3xkHAp7kh6D/tBw7DfvXhtCISWGrxs fKuNh8mCMufluwzvmbnc1Ig3+RIdqLFWnmjzQwp/ZlTjrjB6OuqL2ngxF7WPBa9I V7dxhphg+DS0SH1sZvK/CNe8CAlQR4wGpbLhLhA86h3Pf0NNVhO/GS1kfP6uH3tD DvnN2uTvMMVey0AFZ9Z2TQ05fRVzT5wo4AI7Bd8mxLmvePE5UyM1IV83jU3C1tyE Fb5MBKEWVRt/von2qG5sttxJkMfIuy+ZxGE+LSVc/8HVbE5g8vvINWRpfMflGIyu Zi+F2CyqL6ze7eFo -----END CERTIFICATE-----Generated at Mon Sep 21 05:42:48 2026 by rpki-client