$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/2/B3F0D773DCBE523A3FB1F5D26D00334874BC9FB2.mft File: B3F0D773DCBE523A3FB1F5D26D00334874BC9FB2.mft (raw, json) Hash identifier: 7avWoTg8voEnt2xzMr/xjhILr3cfmOMrbfdKWMcqDA4= Subject key identifier: 09:17:E2:0E:7E:41:A8:D5:7B:3C:BA:A7:86:43:CB:6D:AA:FE:E5:2E Authority key identifier: B3:F0:D7:73:DC:BE:52:3A:3F:B1:F5:D2:6D:00:33:48:74:BC:9F:B2 Certificate issuer: /CN=B3F0D773DCBE523A3FB1F5D26D00334874BC9FB2 Certificate serial: 4E7490AF84D70D00F04EF6169A1CB1F734565B56 Authority info access: rsync://krill.47272.net/repo/HYEHOST/5/B3F0D773DCBE523A3FB1F5D26D00334874BC9FB2.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/2/B3F0D773DCBE523A3FB1F5D26D00334874BC9FB2.mft Manifest number: 2D Signing time: Sat 23 Aug 2025 16:58:03 +0000 Manifest this update: Sat 23 Aug 2025 16:53:03 +0000 Manifest next update: Sun 24 Aug 2025 19:15:03 +0000 Files and hashes: 1: 326130613a363034343a623330303a3a2f34322d3432203d3e20323134383039.roa (hash: rL0HqOB+MnXMFAFPM77NjHuvY8wsbwqcrhR4UPqYqsc=) 2: 326130613a363034343a623363303a3a2f34342d3434203d3e203434373333.roa (hash: rJLCwnl4uhsE/sIS8YisrOAIem98x56OxfgeBDZO+zk=) 3: B3F0D773DCBE523A3FB1F5D26D00334874BC9FB2.crl (hash: Dzv69U+S7+KuYnWVMs3LEWcZhW34Q86Rt2KGEUrS+Cg=) 4: 326130613a363034343a623334333a3a2f34382d3438203d3e20323039373335.roa (hash: gl3XcUXLDzu/fH6TlbsYQk5DZAQEnfCBBv+yPT42ay4=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/2/B3F0D773DCBE523A3FB1F5D26D00334874BC9FB2.crl rsync://rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/2/B3F0D773DCBE523A3FB1F5D26D00334874BC9FB2.mft rsync://krill.47272.net/repo/HYEHOST/5/B3F0D773DCBE523A3FB1F5D26D00334874BC9FB2.cer rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 24 Aug 2025 13:34:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:74:90:af:84:d7:0d:00:f0:4e:f6:16:9a:1c:b1:f7:34:56:5b:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B3F0D773DCBE523A3FB1F5D26D00334874BC9FB2 Validity Not Before: Aug 23 16:53:03 2025 GMT Not After : Aug 24 19:15:03 2025 GMT Subject: CN=0917E20E7E41A8D57B3CBAA78643CB6DAAFEE52E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:52:09:27:1a:f4:df:c9:0a:1a:66:36:f0:63: b4:9c:04:fb:8c:31:e0:19:f0:c4:2d:cf:0d:9e:97: 20:7a:a1:44:bb:ec:0c:85:65:90:d9:db:3d:4a:28: ce:79:ad:79:cf:aa:c8:62:a9:a5:de:36:cc:34:92: 27:ae:72:29:b9:df:16:83:b2:f9:ce:ce:c5:28:00: a0:19:0a:2f:a5:19:28:93:93:8a:f3:4b:88:2b:58: 2a:fd:d7:1f:fd:7b:2c:ab:54:4e:ab:1b:d7:63:3e: 0a:c2:84:0f:0c:0a:6b:ad:80:ce:84:23:5e:1d:89: 20:77:09:0f:78:dd:13:3a:dc:05:5d:fa:bf:b1:9d: 80:b7:b2:ad:68:cd:42:17:92:8c:d6:77:d4:6b:a5: f7:a4:5e:5a:40:11:c5:f0:b3:87:fe:86:2b:79:72: 35:39:0d:c7:87:94:32:1e:40:a2:5e:9a:b1:c1:be: b9:71:59:53:8e:dc:5e:ca:b1:fd:ab:e5:6c:c5:a8: fc:b5:4b:c0:26:85:2b:03:ad:0b:22:0e:fe:81:68: ec:33:71:53:c2:97:bb:68:7d:9f:c7:8f:23:9a:9a: f8:8a:1e:c8:0a:69:ca:d0:5b:99:f6:75:63:ca:76: 33:73:09:40:7e:84:4b:dc:dd:5c:77:3d:00:dc:48: 74:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:17:E2:0E:7E:41:A8:D5:7B:3C:BA:A7:86:43:CB:6D:AA:FE:E5:2E X509v3 Authority Key Identifier: keyid:B3:F0:D7:73:DC:BE:52:3A:3F:B1:F5:D2:6D:00:33:48:74:BC:9F:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/2/B3F0D773DCBE523A3FB1F5D26D00334874BC9FB2.crl Authority Information Access: CA Issuers - URI:rsync://krill.47272.net/repo/HYEHOST/5/B3F0D773DCBE523A3FB1F5D26D00334874BC9FB2.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/2/B3F0D773DCBE523A3FB1F5D26D00334874BC9FB2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:e6:95:c1:87:23:3d:b4:f0:4a:44:2a:b3:2b:eb:f6:d3:45: df:58:45:39:d6:d4:64:f4:bc:fd:f8:aa:bf:f2:22:83:43:d3: e0:87:43:f7:b9:54:9f:d3:a2:f6:89:a9:bc:83:48:6d:57:3b: 3d:2c:e3:4c:07:b4:16:f2:ef:f8:de:eb:95:95:23:a3:3a:b6: 99:2f:1a:e3:d6:dd:d5:4c:43:94:63:57:50:c7:dd:8c:75:37: ac:ec:b2:e0:0f:fa:e4:38:cb:07:6b:26:10:27:df:7c:33:94: 18:82:a9:2d:5a:9a:26:77:e7:35:ca:f1:1b:fd:87:08:11:f2: 2e:9d:1e:61:6d:dd:39:07:dd:9a:58:01:46:85:50:b6:4a:4e: 97:9a:4e:96:6f:ce:7f:de:0c:dd:19:60:62:05:90:04:39:54: c7:12:a5:fc:06:11:29:33:90:86:cd:0e:11:ac:d9:e5:a9:91: 3e:18:70:2a:71:31:49:36:87:49:c4:6f:46:51:87:89:f8:87: a5:a1:b6:85:de:c4:26:ed:2f:35:32:76:c0:a6:0f:a0:05:85: 6b:a6:4e:1d:b5:f0:12:21:7d:1a:8e:9f:da:b6:31:59:32:b8: c2:13:90:67:4c:da:a6:72:d5:f0:8a:06:9a:d6:6e:1e:2f:c6: 80:06:ec:18 -----BEGIN CERTIFICATE----- MIIFSDCCBDCgAwIBAgIUTnSQr4TXDQDwTvYWmhyx9zRWW1YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjNGMEQ3NzNEQ0JFNTIzQTNGQjFGNUQyNkQwMDMzNDg3 NEJDOUZCMjAeFw0yNTA4MjMxNjUzMDNaFw0yNTA4MjQxOTE1MDNaMDMxMTAvBgNV BAMTKDA5MTdFMjBFN0U0MUE4RDU3QjNDQkFBNzg2NDNDQjZEQUFGRUU1MkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtUgknGvTfyQoaZjbwY7ScBPuM MeAZ8MQtzw2elyB6oUS77AyFZZDZ2z1KKM55rXnPqshiqaXeNsw0kieucim53xaD svnOzsUoAKAZCi+lGSiTk4rzS4grWCr91x/9eyyrVE6rG9djPgrChA8MCmutgM6E I14diSB3CQ943RM63AVd+r+xnYC3sq1ozUIXkozWd9RrpfekXlpAEcXws4f+hit5 cjU5DceHlDIeQKJemrHBvrlxWVOO3F7Ksf2r5WzFqPy1S8AmhSsDrQsiDv6BaOwz cVPCl7tofZ/HjyOamviKHsgKacrQW5n2dWPKdjNzCUB+hEvc3Vx3PQDcSHSjAgMB AAGjggJSMIICTjAdBgNVHQ4EFgQUCRfiDn5BqNV7PLqnhkPLbar+5S4wHwYDVR0j BBgwFoAUs/DXc9y+Ujo/sfXSbQAzSHS8n7IwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNzEwOThjMjMtYTk3Ny00ZjlhLTk3YzktY2Q0ZTc1OWRl YTA5LzIvQjNGMEQ3NzNEQ0JFNTIzQTNGQjFGNUQyNkQwMDMzNDg3NEJDOUZCMi5j cmwwbwYIKwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL2tyaWxsLjQ3 MjcyLm5ldC9yZXBvL0hZRUhPU1QvNS9CM0YwRDc3M0RDQkU1MjNBM0ZCMUY1RDI2 RDAwMzM0ODc0QkM5RkIyLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzcxMDk4YzIzLWE5NzctNGY5YS05N2M5LWNkNGU3NTlkZWEwOS8yL0IzRjBENzcz RENCRTUyM0EzRkIxRjVEMjZEMDAzMzQ4NzRCQzlGQjIubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAF5pXB hyM9tPBKRCqzK+v200XfWEU51tRk9Lz9+Kq/8iKDQ9Pgh0P3uVSf06L2iam8g0ht Vzs9LONMB7QW8u/43uuVlSOjOraZLxrj1t3VTEOUY1dQx92MdTes7LLgD/rkOMsH ayYQJ998M5QYgqktWpomd+c1yvEb/YcIEfIunR5hbd05B92aWAFGhVC2Sk6Xmk6W b85/3gzdGWBiBZAEOVTHEqX8BhEpM5CGzQ4RrNnlqZE+GHAqcTFJNodJxG9GUYeJ +IelobaF3sQm7S81MnbApg+gBYVrpk4dtfASIX0ajp/atjFZMrjCE5BnTNqmctXw igaa1m4eL8aABuwY -----END CERTIFICATE-----Generated at Sat Aug 23 23:45:36 2025 by rpki-client