$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/491a43bc-76ec-4abe-ba7d-e73e90d662cb/5/7C4E2571D39535EB83B4BDD4E4668A2D2C177631.mft File: 7C4E2571D39535EB83B4BDD4E4668A2D2C177631.mft (raw, json) Hash identifier: 0HnBdRRXWpYHL0yYm2zJE4UXiF6rVrk72xmeJbwbN68= Subject key identifier: 84:9E:DE:CB:F5:50:D5:2A:2D:95:1C:08:28:2C:0E:FF:A7:D0:35:79 Authority key identifier: 7C:4E:25:71:D3:95:35:EB:83:B4:BD:D4:E4:66:8A:2D:2C:17:76:31 Certificate issuer: /CN=7C4E2571D39535EB83B4BDD4E4668A2D2C177631 Certificate serial: 1A685AE3481CBB7791C00C9F909BAFE39C8DF907 Authority info access: rsync://krill.47272.net/repo/HYEHOST/5/7C4E2571D39535EB83B4BDD4E4668A2D2C177631.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/491a43bc-76ec-4abe-ba7d-e73e90d662cb/5/7C4E2571D39535EB83B4BDD4E4668A2D2C177631.mft Manifest number: 4F Signing time: Sun 19 Oct 2025 09:17:11 +0000 Manifest this update: Sun 19 Oct 2025 09:12:11 +0000 Manifest next update: Mon 20 Oct 2025 11:48:11 +0000 Files and hashes: 1: 326130613a363034343a383030303a3a2f33362d3438203d3e20323135363035.roa (hash: xoDReEFetLSQGYBm0baNBaTLSOi9Q5x2Cfso2AOKl0A=) 2: 326130613a363034343a386666303a3a2f34342d3438203d3e20323134333933.roa (hash: uF8QCN8jX1S8vPb+j6CiYDy604ujJKGOHIcdENgsozA=) 3: 7C4E2571D39535EB83B4BDD4E4668A2D2C177631.crl (hash: jaK+4vqJgSc2Qa2yVbkCBPkZed8eGjQ4UI4OYM23bvA=) 4: 326130613a363034343a386666663a3a2f34382d3438203d3e2038303735.roa (hash: RZ3mYxtXjyfnSAX6OB7Fb/NzyUR2Iaz1eYb6yM0niNc=) 5: 326130613a363034343a386666633a3a2f34382d3438203d3e203331383938.roa (hash: CTStzL4XbpBzdiPo/k9GT6LN/2SBVWE37f9B3UyCq40=) 6: 326130613a363034343a386666653a3a2f34382d3438203d3e2038303735.roa (hash: K8xXw24z/h7osAEvKUs5Zvv+EC9Fem2xi6ka3dAsTS8=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/491a43bc-76ec-4abe-ba7d-e73e90d662cb/5/7C4E2571D39535EB83B4BDD4E4668A2D2C177631.crl rsync://rsync.paas.rpki.ripe.net/repository/491a43bc-76ec-4abe-ba7d-e73e90d662cb/5/7C4E2571D39535EB83B4BDD4E4668A2D2C177631.mft rsync://krill.47272.net/repo/HYEHOST/5/7C4E2571D39535EB83B4BDD4E4668A2D2C177631.cer rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 20 Oct 2025 11:48:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:68:5a:e3:48:1c:bb:77:91:c0:0c:9f:90:9b:af:e3:9c:8d:f9:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7C4E2571D39535EB83B4BDD4E4668A2D2C177631 Validity Not Before: Oct 19 09:12:11 2025 GMT Not After : Oct 20 11:48:11 2025 GMT Subject: CN=849EDECBF550D52A2D951C08282C0EFFA7D03579 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:90:56:75:17:3b:ff:da:5f:58:90:0a:7e:48: dd:69:86:ef:64:f0:29:47:9b:b6:6f:d3:56:bc:34: 98:4a:dc:17:99:98:12:44:48:12:e2:46:09:8b:74: bd:60:4d:a4:ca:4b:89:2b:70:bc:0c:d6:9d:cd:8d: 0f:20:a7:0b:da:2f:87:9b:cd:29:46:0e:2a:aa:c5: 83:43:8a:92:51:ec:a4:09:1f:74:49:33:86:91:a7: 71:8c:32:c4:e2:4d:7e:36:73:bf:08:c8:10:10:75: 8f:4e:16:67:bc:1f:db:8d:f3:3c:ce:2a:f3:22:fd: 99:0b:84:a1:cb:74:e0:c1:1a:3c:29:6c:bf:15:ef: 34:2a:d9:a7:eb:49:9b:e7:87:0f:d0:9b:e5:37:75: f4:66:72:2d:2f:89:1a:10:a3:10:3f:b2:58:02:4c: 1e:c2:43:ee:cb:90:b0:0c:75:28:e2:61:3a:ec:70: 88:d1:3f:96:b7:47:e9:a4:35:16:6e:cc:80:08:85: d6:0c:ff:b8:40:5e:0f:5d:b5:f3:59:97:4c:8b:cb: 11:bd:1a:73:c2:c4:d5:6c:ba:75:69:27:f0:21:16: e6:74:a7:3b:86:8f:84:d4:e5:5c:94:47:35:20:d8: ec:9e:5e:83:42:16:ec:c9:fa:91:6d:b5:97:4c:c5: 6f:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:9E:DE:CB:F5:50:D5:2A:2D:95:1C:08:28:2C:0E:FF:A7:D0:35:79 X509v3 Authority Key Identifier: keyid:7C:4E:25:71:D3:95:35:EB:83:B4:BD:D4:E4:66:8A:2D:2C:17:76:31 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/491a43bc-76ec-4abe-ba7d-e73e90d662cb/5/7C4E2571D39535EB83B4BDD4E4668A2D2C177631.crl Authority Information Access: CA Issuers - URI:rsync://krill.47272.net/repo/HYEHOST/5/7C4E2571D39535EB83B4BDD4E4668A2D2C177631.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/491a43bc-76ec-4abe-ba7d-e73e90d662cb/5/7C4E2571D39535EB83B4BDD4E4668A2D2C177631.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:61:8a:0e:d7:d6:83:b1:06:f0:ba:5f:7c:7c:6b:18:fe:ae: e8:2b:42:6a:42:47:d6:e7:0f:43:e4:cf:f7:d6:50:19:7d:cf: f3:46:3e:78:61:98:bf:2c:05:b8:ea:17:5f:b9:d3:5c:38:7b: 7d:39:91:50:83:fa:0c:79:f2:45:03:0f:9c:e1:4e:0a:fa:94: 63:b3:73:da:d0:ad:f9:5c:51:da:d3:3a:66:be:d9:20:89:64: 15:f3:e4:3f:c4:9d:fa:b4:de:63:fb:18:2f:7a:e9:38:e7:09: ea:b4:cb:fa:3d:4f:a7:6b:3c:ae:fc:56:80:26:83:16:09:da: 9a:82:46:6f:af:48:29:b9:9d:b9:80:f2:b0:a8:5b:a6:5c:46: 03:c2:be:9c:dd:2d:a0:88:64:f2:23:db:bc:4b:3e:39:e9:49: c3:b7:7b:5a:f6:75:95:63:93:5e:de:32:af:e2:87:89:28:2d: 0d:6e:35:83:4b:c7:8e:9f:9e:0e:75:8e:db:2a:ce:45:35:ef: 3e:bc:02:e8:cd:0f:5a:48:df:43:8a:86:74:6a:40:72:f7:61: d7:c3:89:99:f7:53:67:1e:8d:fb:d9:ab:49:fc:2c:e8:49:06: 53:74:df:64:45:e8:9b:ba:a4:90:af:f4:4c:d3:91:76:42:a6: 9b:04:f2:c7 -----BEGIN CERTIFICATE----- MIIFSDCCBDCgAwIBAgIUGmha40gcu3eRwAyfkJuv45yN+QcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0M0RTI1NzFEMzk1MzVFQjgzQjRCREQ0RTQ2NjhBMkQy QzE3NzYzMTAeFw0yNTEwMTkwOTEyMTFaFw0yNTEwMjAxMTQ4MTFaMDMxMTAvBgNV BAMTKDg0OUVERUNCRjU1MEQ1MkEyRDk1MUMwODI4MkMwRUZGQTdEMDM1NzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpkFZ1Fzv/2l9YkAp+SN1phu9k 8ClHm7Zv01a8NJhK3BeZmBJESBLiRgmLdL1gTaTKS4krcLwM1p3NjQ8gpwvaL4eb zSlGDiqqxYNDipJR7KQJH3RJM4aRp3GMMsTiTX42c78IyBAQdY9OFme8H9uN8zzO KvMi/ZkLhKHLdODBGjwpbL8V7zQq2afrSZvnhw/Qm+U3dfRmci0viRoQoxA/slgC TB7CQ+7LkLAMdSjiYTrscIjRP5a3R+mkNRZuzIAIhdYM/7hAXg9dtfNZl0yLyxG9 GnPCxNVsunVpJ/AhFuZ0pzuGj4TU5VyURzUg2OyeXoNCFuzJ+pFttZdMxW8FAgMB AAGjggJSMIICTjAdBgNVHQ4EFgQUhJ7ey/VQ1SotlRwIKCwO/6fQNXkwHwYDVR0j BBgwFoAUfE4lcdOVNeuDtL3U5GaKLSwXdjEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNDkxYTQzYmMtNzZlYy00YWJlLWJhN2QtZTczZTkwZDY2 MmNiLzUvN0M0RTI1NzFEMzk1MzVFQjgzQjRCREQ0RTQ2NjhBMkQyQzE3NzYzMS5j cmwwbwYIKwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL2tyaWxsLjQ3 MjcyLm5ldC9yZXBvL0hZRUhPU1QvNS83QzRFMjU3MUQzOTUzNUVCODNCNEJERDRF NDY2OEEyRDJDMTc3NjMxLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzQ5MWE0M2JjLTc2ZWMtNGFiZS1iYTdkLWU3M2U5MGQ2NjJjYi81LzdDNEUyNTcx RDM5NTM1RUI4M0I0QkRENEU0NjY4QTJEMkMxNzc2MzEubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQADYYoO 19aDsQbwul98fGsY/q7oK0JqQkfW5w9D5M/31lAZfc/zRj54YZi/LAW46hdfudNc OHt9OZFQg/oMefJFAw+c4U4K+pRjs3Pa0K35XFHa0zpmvtkgiWQV8+Q/xJ36tN5j +xgveuk45wnqtMv6PU+nazyu/FaAJoMWCdqagkZvr0gpuZ25gPKwqFumXEYDwr6c 3S2giGTyI9u8Sz456UnDt3ta9nWVY5Ne3jKv4oeJKC0NbjWDS8eOn54OdY7bKs5F Ne8+vALozQ9aSN9DioZ0akBy92HXw4mZ91NnHo372atJ/CzoSQZTdN9kReibuqSQ r/RM05F2QqabBPLH -----END CERTIFICATE-----Generated at Mon Oct 20 00:03:38 2025 by rpki-client