$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/6e7f747e-ff68-4fa2-b2e3-f6ede548a320/2/CE62AFC506F1860480AAF6A723393278644CFD7F.mft File: CE62AFC506F1860480AAF6A723393278644CFD7F.mft (raw, json) Hash identifier: 8MjlzOyLul+RnIUj7LI1JKB5hd1w3oNP9iuqZqTQbFA= Subject key identifier: 28:41:AE:6F:C0:88:F7:D5:AB:6B:D2:87:7D:35:8C:A8:28:89:E8:92 Authority key identifier: CE:62:AF:C5:06:F1:86:04:80:AA:F6:A7:23:39:32:78:64:4C:FD:7F Certificate issuer: /CN=CE62AFC506F1860480AAF6A723393278644CFD7F Certificate serial: 076DCDD7DFA9E7EDE77EC23DC7713A24177A6FC8 Authority info access: rsync://krill.47272.net/repo/HYEHOST/5/CE62AFC506F1860480AAF6A723393278644CFD7F.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/6e7f747e-ff68-4fa2-b2e3-f6ede548a320/2/CE62AFC506F1860480AAF6A723393278644CFD7F.mft Manifest number: 42 Signing time: Thu 26 Mar 2026 23:00:06 +0000 Manifest this update: Thu 26 Mar 2026 22:55:06 +0000 Manifest next update: Sat 28 Mar 2026 00:57:06 +0000 Files and hashes: 1: CE62AFC506F1860480AAF6A723393278644CFD7F.crl (hash: EbiFhvMi5BuCsbdEqJ1QA1ejqdV4LLJfAGsrQCXM2hQ=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/6e7f747e-ff68-4fa2-b2e3-f6ede548a320/2/CE62AFC506F1860480AAF6A723393278644CFD7F.crl rsync://rsync.paas.rpki.ripe.net/repository/6e7f747e-ff68-4fa2-b2e3-f6ede548a320/2/CE62AFC506F1860480AAF6A723393278644CFD7F.mft rsync://krill.47272.net/repo/HYEHOST/5/CE62AFC506F1860480AAF6A723393278644CFD7F.cer rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 27 Mar 2026 11:26:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:6d:cd:d7:df:a9:e7:ed:e7:7e:c2:3d:c7:71:3a:24:17:7a:6f:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CE62AFC506F1860480AAF6A723393278644CFD7F Validity Not Before: Mar 26 22:55:06 2026 GMT Not After : Mar 28 00:57:06 2026 GMT Subject: CN=2841AE6FC088F7D5AB6BD2877D358CA82889E892 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:32:8a:33:bf:99:4f:1e:de:96:54:3c:e4:d7: 36:5d:f4:f0:55:a0:d2:f2:b1:db:cd:1f:6f:87:6a: a5:65:0c:fc:e4:68:eb:ee:e2:70:00:58:97:9b:ca: 1a:ab:8e:fe:22:70:6e:b1:05:31:37:fc:d4:11:4d: c9:5b:7d:98:0d:bd:f2:bb:4f:9a:ee:ab:38:f9:e6: 18:c3:da:da:7d:c5:ba:9d:33:86:83:35:37:2f:61: 6b:56:a0:91:53:f1:2a:ef:14:e1:bd:73:ff:64:39: 7a:2e:b4:e5:13:b4:22:39:c4:5f:c9:65:59:46:f7: 2d:0c:e5:78:f0:c9:ca:e4:67:73:db:ec:32:e5:60: ba:4c:28:b4:5d:2f:2c:ab:b6:d6:e4:58:4a:1e:8b: f0:c5:be:c3:63:88:11:e0:fc:91:db:76:af:3e:32: 86:e3:ec:bf:61:ed:be:4f:a4:e7:cd:6f:fb:36:3c: 2e:b8:0f:11:75:a7:6e:26:1e:c6:26:72:f5:18:82: d9:0c:bb:5d:97:f2:7d:1b:9b:44:c2:e1:f7:b2:33: 64:87:ad:18:6b:80:47:e6:e6:ee:a0:d2:f2:e0:7c: cf:9d:ba:1e:6e:58:1b:c5:a8:57:63:05:11:45:bc: 25:ad:b4:1e:ce:ec:20:5b:17:cb:7d:87:b1:09:6e: 79:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:41:AE:6F:C0:88:F7:D5:AB:6B:D2:87:7D:35:8C:A8:28:89:E8:92 X509v3 Authority Key Identifier: keyid:CE:62:AF:C5:06:F1:86:04:80:AA:F6:A7:23:39:32:78:64:4C:FD:7F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/6e7f747e-ff68-4fa2-b2e3-f6ede548a320/2/CE62AFC506F1860480AAF6A723393278644CFD7F.crl Authority Information Access: CA Issuers - URI:rsync://krill.47272.net/repo/HYEHOST/5/CE62AFC506F1860480AAF6A723393278644CFD7F.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6e7f747e-ff68-4fa2-b2e3-f6ede548a320/2/CE62AFC506F1860480AAF6A723393278644CFD7F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:65:e5:13:3a:ba:f1:cc:0d:ca:1b:4a:c4:57:53:08:d6:e1: 6f:02:29:6a:6a:50:a5:f0:f9:e2:30:f0:be:5c:79:29:d3:c7: 26:4d:fa:a2:cb:76:30:d6:1f:e9:20:c9:c3:97:78:38:11:48: 01:60:c7:07:b0:4d:80:83:ba:f1:d1:71:05:7f:42:f0:b1:3f: a9:de:cc:a2:57:03:44:2e:24:69:9a:96:1f:af:02:b0:9e:d0: d5:07:0d:fb:4e:70:4d:ec:fa:22:eb:c6:10:7a:5e:18:4b:18: e2:b7:5f:f6:19:43:73:ff:7b:e7:cf:d3:fe:34:a0:b2:50:0f: 66:32:a5:ce:7e:0e:0a:fc:77:d2:de:88:5b:71:d3:4f:da:66: 4a:99:24:37:78:e0:57:8a:a8:9a:bf:15:31:a1:76:81:57:67: 94:32:6c:89:e8:b9:24:ce:9b:8f:00:ae:5e:e4:d8:5d:83:b1: 35:16:0a:a0:0d:52:ef:8c:dd:40:a8:52:73:af:f8:e0:73:3d: 35:fa:2c:22:1c:bf:8e:d6:96:b0:0c:59:4d:8e:0f:82:62:da: c0:71:da:c2:b3:64:86:b9:e9:8c:70:1b:e9:0d:9f:09:42:b8: 97:67:57:41:aa:7e:1a:ae:ba:6b:c1:1f:7c:6b:2c:ea:9e:d9: 67:bb:19:91 -----BEGIN CERTIFICATE----- MIIFSDCCBDCgAwIBAgIUB23N19+p5+3nfsI9x3E6JBd6b8gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0U2MkFGQzUwNkYxODYwNDgwQUFGNkE3MjMzOTMyNzg2 NDRDRkQ3RjAeFw0yNjAzMjYyMjU1MDZaFw0yNjAzMjgwMDU3MDZaMDMxMTAvBgNV BAMTKDI4NDFBRTZGQzA4OEY3RDVBQjZCRDI4NzdEMzU4Q0E4Mjg4OUU4OTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDaMoozv5lPHt6WVDzk1zZd9PBV oNLysdvNH2+HaqVlDPzkaOvu4nAAWJebyhqrjv4icG6xBTE3/NQRTclbfZgNvfK7 T5ruqzj55hjD2tp9xbqdM4aDNTcvYWtWoJFT8SrvFOG9c/9kOXoutOUTtCI5xF/J ZVlG9y0M5XjwycrkZ3Pb7DLlYLpMKLRdLyyrttbkWEoei/DFvsNjiBHg/JHbdq8+ Mobj7L9h7b5PpOfNb/s2PC64DxF1p24mHsYmcvUYgtkMu12X8n0bm0TC4feyM2SH rRhrgEfm5u6g0vLgfM+duh5uWBvFqFdjBRFFvCWttB7O7CBbF8t9h7EJbnllAgMB AAGjggJSMIICTjAdBgNVHQ4EFgQUKEGub8CI99Wra9KHfTWMqCiJ6JIwHwYDVR0j BBgwFoAUzmKvxQbxhgSAqvanIzkyeGRM/X8wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNmU3Zjc0N2UtZmY2OC00ZmEyLWIyZTMtZjZlZGU1NDhh MzIwLzIvQ0U2MkFGQzUwNkYxODYwNDgwQUFGNkE3MjMzOTMyNzg2NDRDRkQ3Ri5j cmwwbwYIKwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL2tyaWxsLjQ3 MjcyLm5ldC9yZXBvL0hZRUhPU1QvNS9DRTYyQUZDNTA2RjE4NjA0ODBBQUY2QTcy MzM5MzI3ODY0NENGRDdGLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzZlN2Y3NDdlLWZmNjgtNGZhMi1iMmUzLWY2ZWRlNTQ4YTMyMC8yL0NFNjJBRkM1 MDZGMTg2MDQ4MEFBRjZBNzIzMzkzMjc4NjQ0Q0ZEN0YubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQApZeUT OrrxzA3KG0rEV1MI1uFvAilqalCl8PniMPC+XHkp08cmTfqiy3Yw1h/pIMnDl3g4 EUgBYMcHsE2Ag7rx0XEFf0LwsT+p3syiVwNELiRpmpYfrwKwntDVBw37TnBN7Poi 68YQel4YSxjit1/2GUNz/3vnz9P+NKCyUA9mMqXOfg4K/HfS3ohbcdNP2mZKmSQ3 eOBXiqiavxUxoXaBV2eUMmyJ6LkkzpuPAK5e5Nhdg7E1FgqgDVLvjN1AqFJzr/jg cz01+iwiHL+O1pawDFlNjg+CYtrAcdrCs2SGuemMcBvpDZ8JQriXZ1dBqn4arrpr wR98ayzqntlnuxmR -----END CERTIFICATE-----Generated at Fri Mar 27 01:46:50 2026 by rpki-client