$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/2/B3F0D773DCBE523A3FB1F5D26D00334874BC9FB2.mft File: B3F0D773DCBE523A3FB1F5D26D00334874BC9FB2.mft (raw, json) Hash identifier: OrLNHkG2oEYN4xuyRCPZTTU4eUp3LiujdszCutf5478= Subject key identifier: D8:90:A0:E8:CE:88:AF:9D:3A:DC:17:DD:88:28:5D:39:B9:A4:5E:CF Authority key identifier: B3:F0:D7:73:DC:BE:52:3A:3F:B1:F5:D2:6D:00:33:48:74:BC:9F:B2 Certificate issuer: /CN=B3F0D773DCBE523A3FB1F5D26D00334874BC9FB2 Certificate serial: 269271712F71436AC7E8DBDCDF8406CC2B4FAFF6 Authority info access: rsync://krill.47272.net/repo/HYEHOST/5/B3F0D773DCBE523A3FB1F5D26D00334874BC9FB2.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/2/B3F0D773DCBE523A3FB1F5D26D00334874BC9FB2.mft Manifest number: 79 Signing time: Sun 19 Oct 2025 05:33:18 +0000 Manifest this update: Sun 19 Oct 2025 05:28:18 +0000 Manifest next update: Mon 20 Oct 2025 08:44:18 +0000 Files and hashes: 1: B3F0D773DCBE523A3FB1F5D26D00334874BC9FB2.crl (hash: wF+FG8Umaz/5lur3hVQvMw3avFZMmP4W76vxQUrWZIk=) 2: 326130613a363034343a623363303a3a2f34342d3434203d3e203434373333.roa (hash: rJLCwnl4uhsE/sIS8YisrOAIem98x56OxfgeBDZO+zk=) 3: 326130613a363034343a623330303a3a2f34322d3432203d3e20323134383039.roa (hash: rL0HqOB+MnXMFAFPM77NjHuvY8wsbwqcrhR4UPqYqsc=) 4: 326130613a363034343a623334333a3a2f34382d3438203d3e20323039373335.roa (hash: gl3XcUXLDzu/fH6TlbsYQk5DZAQEnfCBBv+yPT42ay4=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/2/B3F0D773DCBE523A3FB1F5D26D00334874BC9FB2.crl rsync://rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/2/B3F0D773DCBE523A3FB1F5D26D00334874BC9FB2.mft rsync://krill.47272.net/repo/HYEHOST/5/B3F0D773DCBE523A3FB1F5D26D00334874BC9FB2.cer rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 20 Oct 2025 08:44:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:92:71:71:2f:71:43:6a:c7:e8:db:dc:df:84:06:cc:2b:4f:af:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B3F0D773DCBE523A3FB1F5D26D00334874BC9FB2 Validity Not Before: Oct 19 05:28:18 2025 GMT Not After : Oct 20 08:44:18 2025 GMT Subject: CN=D890A0E8CE88AF9D3ADC17DD88285D39B9A45ECF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:04:09:b4:fb:b4:72:d6:b1:4f:97:e9:25:45: 37:91:15:a4:2a:00:e2:97:70:ba:a1:07:66:ab:63: 22:df:b3:2b:01:8a:8a:78:df:01:84:a0:2d:65:3c: 48:04:08:ef:73:04:52:8d:83:ce:5a:8b:e9:70:ce: 50:a7:5d:85:3f:de:c2:73:57:a0:e7:c3:d3:1c:99: 90:f8:a1:36:98:67:5d:de:8b:a3:c7:f3:d2:6b:0f: 52:dc:cf:8e:65:7d:23:35:4c:9c:0f:89:89:a6:29: 2e:f9:41:ac:43:de:33:2a:36:f2:9e:67:7a:4a:63: d6:e1:b8:2b:dd:28:c9:ec:df:c5:10:de:15:eb:e9: c5:93:09:e3:d1:81:f8:32:49:ed:ec:58:99:5a:98: 10:e7:2b:b9:f4:7c:36:95:9f:99:bf:ba:42:0b:78: f0:31:b2:01:ba:82:4f:0a:dc:16:70:28:86:79:7b: 16:85:d8:54:a0:8c:76:f5:40:d6:83:1e:47:c8:9e: c6:33:45:b7:6c:b2:09:3c:0d:9e:1a:ca:b7:bd:0f: 30:96:7b:6d:7d:95:af:46:20:31:6c:78:b1:0a:32: 83:e8:05:34:9f:c0:b8:1a:bc:2b:c9:52:4e:db:67: 53:10:d7:43:67:4e:76:00:44:ca:b6:4f:56:dd:6d: 9c:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:90:A0:E8:CE:88:AF:9D:3A:DC:17:DD:88:28:5D:39:B9:A4:5E:CF X509v3 Authority Key Identifier: keyid:B3:F0:D7:73:DC:BE:52:3A:3F:B1:F5:D2:6D:00:33:48:74:BC:9F:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/2/B3F0D773DCBE523A3FB1F5D26D00334874BC9FB2.crl Authority Information Access: CA Issuers - URI:rsync://krill.47272.net/repo/HYEHOST/5/B3F0D773DCBE523A3FB1F5D26D00334874BC9FB2.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/2/B3F0D773DCBE523A3FB1F5D26D00334874BC9FB2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:3e:6b:1b:bb:c5:e6:f5:fa:e1:99:06:2f:90:e9:36:78:0f: 68:66:8b:06:17:97:a0:f1:d2:39:66:41:1a:7e:b3:45:f3:44: 8f:ac:8a:37:b8:22:8a:c6:05:a6:f3:f1:5c:13:6a:6f:f4:6d: 24:1f:70:d4:2f:9f:7c:50:7d:89:e4:4b:6a:73:37:28:fa:cb: 2f:d8:7d:07:4c:7b:b4:bb:09:fe:d8:aa:92:fe:90:20:39:6b: 57:48:3c:9b:ff:cb:c5:67:8e:b1:c9:32:a6:5c:62:30:d2:42: ba:ad:22:df:01:41:1e:f5:45:f4:2d:a0:a7:ec:c7:3a:03:b1: 1e:fa:b6:3c:4c:8a:3c:d7:d5:0c:68:d8:b4:9d:9e:ea:bc:31: 7c:ee:03:17:29:92:80:1c:5e:c8:84:b9:e0:30:d4:ed:e8:4f: 63:89:2b:ce:f1:b7:e1:93:a5:c3:a0:d8:fd:0b:89:13:e0:e6: 69:06:62:e5:2a:3d:4c:e2:3a:e7:34:e3:d9:44:18:91:06:dd: 3c:82:13:ee:d6:25:b9:91:e7:95:c8:57:94:4b:93:19:51:1a: 03:31:ab:a7:e9:8c:1f:66:8b:91:71:46:8b:e5:2c:b4:f9:86: 60:ff:b6:92:98:34:22:72:a9:d4:05:e6:31:a9:c6:c5:c5:e6: 4e:22:ce:0b -----BEGIN CERTIFICATE----- MIIFSDCCBDCgAwIBAgIUJpJxcS9xQ2rH6Nvc34QGzCtPr/YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjNGMEQ3NzNEQ0JFNTIzQTNGQjFGNUQyNkQwMDMzNDg3 NEJDOUZCMjAeFw0yNTEwMTkwNTI4MThaFw0yNTEwMjAwODQ0MThaMDMxMTAvBgNV BAMTKEQ4OTBBMEU4Q0U4OEFGOUQzQURDMTdERDg4Mjg1RDM5QjlBNDVFQ0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFBAm0+7Ry1rFPl+klRTeRFaQq AOKXcLqhB2arYyLfsysBiop43wGEoC1lPEgECO9zBFKNg85ai+lwzlCnXYU/3sJz V6Dnw9McmZD4oTaYZ13ei6PH89JrD1Lcz45lfSM1TJwPiYmmKS75QaxD3jMqNvKe Z3pKY9bhuCvdKMns38UQ3hXr6cWTCePRgfgySe3sWJlamBDnK7n0fDaVn5m/ukIL ePAxsgG6gk8K3BZwKIZ5exaF2FSgjHb1QNaDHkfInsYzRbdssgk8DZ4ayre9DzCW e219la9GIDFseLEKMoPoBTSfwLgavCvJUk7bZ1MQ10NnTnYARMq2T1bdbZxvAgMB AAGjggJSMIICTjAdBgNVHQ4EFgQU2JCg6M6Ir5063BfdiChdObmkXs8wHwYDVR0j BBgwFoAUs/DXc9y+Ujo/sfXSbQAzSHS8n7IwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNzEwOThjMjMtYTk3Ny00ZjlhLTk3YzktY2Q0ZTc1OWRl YTA5LzIvQjNGMEQ3NzNEQ0JFNTIzQTNGQjFGNUQyNkQwMDMzNDg3NEJDOUZCMi5j cmwwbwYIKwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL2tyaWxsLjQ3 MjcyLm5ldC9yZXBvL0hZRUhPU1QvNS9CM0YwRDc3M0RDQkU1MjNBM0ZCMUY1RDI2 RDAwMzM0ODc0QkM5RkIyLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzcxMDk4YzIzLWE5NzctNGY5YS05N2M5LWNkNGU3NTlkZWEwOS8yL0IzRjBENzcz RENCRTUyM0EzRkIxRjVEMjZEMDAzMzQ4NzRCQzlGQjIubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBgPmsb u8Xm9frhmQYvkOk2eA9oZosGF5eg8dI5ZkEafrNF80SPrIo3uCKKxgWm8/FcE2pv 9G0kH3DUL598UH2J5Etqczco+ssv2H0HTHu0uwn+2KqS/pAgOWtXSDyb/8vFZ46x yTKmXGIw0kK6rSLfAUEe9UX0LaCn7Mc6A7Ee+rY8TIo819UMaNi0nZ7qvDF87gMX KZKAHF7IhLngMNTt6E9jiSvO8bfhk6XDoNj9C4kT4OZpBmLlKj1M4jrnNOPZRBiR Bt08ghPu1iW5keeVyFeUS5MZURoDMaun6YwfZouRcUaL5Sy0+YZg/7aSmDQicqnU BeYxqcbFxeZOIs4L -----END CERTIFICATE-----Generated at Mon Oct 20 00:08:50 2025 by rpki-client