$ rpki-client -vvf krill.rg.net/repo/rpki-beacons-ca/0/656E4422ABF129649200EB019A815F2B12236E92.mft File: 656E4422ABF129649200EB019A815F2B12236E92.mft (raw, json) Hash identifier: qcTbg7zFsHZrWNLbPkabyVHmILTuaF71ky3pvIdb/W8= Subject key identifier: 63:88:2A:1A:FB:63:4E:CB:72:D0:35:A3:E3:E9:55:D9:97:66:34:DC Authority key identifier: 65:6E:44:22:AB:F1:29:64:92:00:EB:01:9A:81:5F:2B:12:23:6E:92 Certificate issuer: /CN=656E4422ABF129649200EB019A815F2B12236E92 Certificate serial: 4F626E302179751DDBE7103C03AAD93E7343005D Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/ZW5EIqvxKWSSAOsBmoFfKxIjbpI.cer Subject info access: rsync://krill.rg.net/repo/rpki-beacons-ca/0/656E4422ABF129649200EB019A815F2B12236E92.mft Manifest number: 02DD Signing time: Fri 24 Jul 2026 07:14:09 +0000 Manifest this update: Fri 24 Jul 2026 07:09:09 +0000 Manifest next update: Sat 25 Jul 2026 07:15:09 +0000 Files and hashes: 1: 656E4422ABF129649200EB019A815F2B12236E92.crl (hash: G37mCnv8eowN9fbPYeAKWYfeN/adHVKyFUcZNrPS5KI=) 2: 3134372e32382e31302e302f32332d3234203d3e2039343334.roa (hash: JX8MZMidVpDvMl1kvP+85ppT/iMcv1vVMBW6voLjwXs=) 3: 34352e3133322e3139302e302f32342d3234203d3e2030.roa (hash: BZJT8EbwRaDxjL7KKjabnaQJK3brt6+TkqqK548Wl2g=) 4: 3134372e32382e31302e302f32332d3234203d3e203437303635.roa (hash: +6IGfj4KE5Fon357Mz4hY46Lj0lkrQVIhXV3Upqg2+Y=) 5: 34352e3133322e3139312e302f32342d3234203d3e2033393730.roa (hash: Oy1mSyisXYrn3vcoOGy6axMtnSIX1xCofVEIpBbtceA=) Validation: OK Signature path: rsync://krill.rg.net/repo/rpki-beacons-ca/0/656E4422ABF129649200EB019A815F2B12236E92.crl rsync://krill.rg.net/repo/rpki-beacons-ca/0/656E4422ABF129649200EB019A815F2B12236E92.mft rsync://ca.rg.net/rpki/RGnet-OU/ZW5EIqvxKWSSAOsBmoFfKxIjbpI.cer rsync://ca.rg.net/rpki/RGnet-OU/bW-_qXU9uNhGQz21NR2ansB8lr0.crl rsync://ca.rg.net/rpki/RGnet-OU/bW-_qXU9uNhGQz21NR2ansB8lr0.mft rsync://rpki.ripe.net/repository/DEFAULT/bW-_qXU9uNhGQz21NR2ansB8lr0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 24 Jul 2026 16:32:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:62:6e:30:21:79:75:1d:db:e7:10:3c:03:aa:d9:3e:73:43:00:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=656E4422ABF129649200EB019A815F2B12236E92 Validity Not Before: Jul 24 07:09:09 2026 GMT Not After : Jul 25 07:15:09 2026 GMT Subject: CN=63882A1AFB634ECB72D035A3E3E955D9976634DC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:3d:2c:be:8f:81:7c:1d:c7:55:7b:4e:20:fc: db:cc:b3:e9:c6:63:f0:aa:d0:6b:09:f9:05:0b:73: d6:f0:2f:54:30:9b:25:30:db:df:64:a2:05:ea:63: c6:ce:af:93:fc:dc:1c:5f:5b:41:4c:27:6c:c1:1f: 29:11:36:1b:92:9d:55:f2:ab:b5:a5:2e:7d:12:58: 64:ed:d9:e7:c6:ea:1b:23:13:a1:b4:ca:9b:2f:51: 34:82:b4:64:0d:73:24:d7:7b:10:14:dd:cd:a9:05: e0:c7:47:d7:0d:1f:7d:84:40:b7:d2:6c:a1:d8:2b: b9:c8:d6:43:6e:5b:14:c4:b1:9f:8d:34:25:b4:44: 08:e3:f2:ee:14:1c:3b:94:94:90:b8:4b:bb:fd:bd: 13:3d:dc:44:af:65:ec:6a:3e:d1:e5:fd:0d:92:85: 4a:56:91:c1:cd:80:79:62:5d:9f:03:cf:ed:30:5a: b4:a9:7f:21:c5:bb:a6:df:92:96:ff:42:45:eb:06: 44:56:97:60:74:f4:aa:31:ff:65:cf:25:34:f3:13: f1:c1:f2:59:ae:95:f0:77:2f:f2:4c:84:bf:e1:cb: 35:0c:a1:1b:f4:4a:78:18:25:78:76:f0:94:a3:86: 80:ca:2b:9e:60:15:c0:25:12:39:47:26:a6:b5:27: 7d:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:88:2A:1A:FB:63:4E:CB:72:D0:35:A3:E3:E9:55:D9:97:66:34:DC X509v3 Authority Key Identifier: keyid:65:6E:44:22:AB:F1:29:64:92:00:EB:01:9A:81:5F:2B:12:23:6E:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://krill.rg.net/repo/rpki-beacons-ca/0/656E4422ABF129649200EB019A815F2B12236E92.crl Authority Information Access: CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/ZW5EIqvxKWSSAOsBmoFfKxIjbpI.cer Subject Information Access: Signed Object - URI:rsync://krill.rg.net/repo/rpki-beacons-ca/0/656E4422ABF129649200EB019A815F2B12236E92.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 07:20:a5:c8:1d:e4:12:12:3c:9c:8e:44:90:c9:1c:ef:a0:38: c7:05:b8:9f:76:1a:6a:4a:fa:c1:cb:40:c2:1f:f3:bf:ed:78: ba:81:9d:ac:84:49:0b:45:c4:8e:52:d5:b4:a3:ac:3e:89:72: 13:bb:db:4f:dc:69:0e:76:4c:d8:bc:83:84:2b:98:80:93:7d: ff:54:1b:4b:94:2b:44:d6:0b:0b:4a:dc:07:d0:d6:25:b3:1f: eb:d4:bf:f4:3a:7f:49:96:9d:63:48:23:ad:73:1c:bf:7a:da: 8a:51:84:80:31:ce:a2:0b:7d:4b:2c:57:d2:62:f3:4d:eb:01: 5d:af:b1:83:ec:da:db:89:55:03:68:75:96:7d:30:78:f2:29: 14:c2:94:14:ef:7b:29:09:28:30:50:2d:47:b3:f9:4f:d7:a1: c4:2e:84:9f:2b:59:6f:0d:16:38:00:42:4e:d8:bb:6e:61:0c: e2:ac:10:79:3d:b2:f9:f2:bb:a6:36:02:c7:15:60:d2:a4:69: 25:30:d5:57:b6:80:67:94:2a:88:77:26:b0:26:c3:9d:78:71: 9e:0e:03:55:a6:3d:32:97:07:79:55:28:8c:89:01:6a:f9:4e: 9b:fc:48:97:d8:11:2a:dc:c5:a9:55:32:f2:7e:48:95:33:d5: de:46:c0:34 -----BEGIN CERTIFICATE----- MIIE3DCCA8SgAwIBAgIUT2JuMCF5dR3b5xA8A6rZPnNDAF0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjU2RTQ0MjJBQkYxMjk2NDkyMDBFQjAxOUE4MTVGMkIx MjIzNkU5MjAeFw0yNjA3MjQwNzA5MDlaFw0yNjA3MjUwNzE1MDlaMDMxMTAvBgNV BAMTKDYzODgyQTFBRkI2MzRFQ0I3MkQwMzVBM0UzRTk1NUQ5OTc2NjM0REMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCPSy+j4F8HcdVe04g/NvMs+nG Y/Cq0GsJ+QULc9bwL1QwmyUw299kogXqY8bOr5P83BxfW0FMJ2zBHykRNhuSnVXy q7WlLn0SWGTt2efG6hsjE6G0ypsvUTSCtGQNcyTXexAU3c2pBeDHR9cNH32EQLfS bKHYK7nI1kNuWxTEsZ+NNCW0RAjj8u4UHDuUlJC4S7v9vRM93ESvZexqPtHl/Q2S hUpWkcHNgHliXZ8Dz+0wWrSpfyHFu6bfkpb/QkXrBkRWl2B09Kox/2XPJTTzE/HB 8lmulfB3L/JMhL/hyzUMoRv0SngYJXh28JSjhoDKK55gFcAlEjlHJqa1J33lAgMB AAGjggHmMIIB4jAdBgNVHQ4EFgQUY4gqGvtjTsty0DWj4+lV2ZdmNNwwHwYDVR0j BBgwFoAUZW5EIqvxKWSSAOsBmoFfKxIjbpIwDgYDVR0PAQH/BAQDAgeAMGkGA1Ud HwRiMGAwXqBcoFqGWHJzeW5jOi8va3JpbGwucmcubmV0L3JlcG8vcnBraS1iZWFj b25zLWNhLzAvNjU2RTQ0MjJBQkYxMjk2NDkyMDBFQjAxOUE4MTVGMkIxMjIzNkU5 Mi5jcmwwWwYIKwYBBQUHAQEETzBNMEsGCCsGAQUFBzAChj9yc3luYzovL2NhLnJn Lm5ldC9ycGtpL1JHbmV0LU9VL1pXNUVJcXZ4S1dTU0FPc0Jtb0ZmS3hJamJwSS5j ZXIwdAYIKwYBBQUHAQsEaDBmMGQGCCsGAQUFBzALhlhyc3luYzovL2tyaWxsLnJn Lm5ldC9yZXBvL3Jwa2ktYmVhY29ucy1jYS8wLzY1NkU0NDIyQUJGMTI5NjQ5MjAw RUIwMTlBODE1RjJCMTIyMzZFOTIubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUH DgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcB CAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAHIKXIHeQSEjycjkSQyRzv oDjHBbifdhpqSvrBy0DCH/O/7Xi6gZ2shEkLRcSOUtW0o6w+iXITu9tP3GkOdkzY vIOEK5iAk33/VBtLlCtE1gsLStwH0NYlsx/r1L/0On9Jlp1jSCOtcxy/etqKUYSA Mc6iC31LLFfSYvNN6wFdr7GD7NrbiVUDaHWWfTB48ikUwpQU73spCSgwUC1Hs/lP 16HELoSfK1lvDRY4AEJO2LtuYQzirBB5PbL58rumNgLHFWDSpGklMNVXtoBnlCqI dyawJsOdeHGeDgNVpj0ylwd5VSiMiQFq+U6b/EiX2BEq3MWpVTLyfkiVM9XeRsA0 -----END CERTIFICATE-----Generated at Fri Jul 24 12:05:34 2026 by rpki-client