$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/cf81e235-8158-407e-bcff-f096348357a2/2/B46FBF1DD35487568FC708767F085FAD2881F56D.mft File: B46FBF1DD35487568FC708767F085FAD2881F56D.mft (raw, json) Hash identifier: 5YjAW3SU0x+M7nFdZM7IDZ48u6De83m35G4o3pV/Pxg= Subject key identifier: 58:22:CC:A0:99:C1:D1:63:0C:E2:3F:57:29:06:6B:B5:A2:B2:92:16 Authority key identifier: B4:6F:BF:1D:D3:54:87:56:8F:C7:08:76:7F:08:5F:AD:28:81:F5:6D Certificate issuer: /CN=B46FBF1DD35487568FC708767F085FAD2881F56D Certificate serial: 31D9550ADF83447F6DE25EC75E8C1206D2EFA322 Authority info access: rsync://krill.47272.net/repo/HYEHOST/5/B46FBF1DD35487568FC708767F085FAD2881F56D.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/cf81e235-8158-407e-bcff-f096348357a2/2/B46FBF1DD35487568FC708767F085FAD2881F56D.mft Manifest number: 92 Signing time: Mon 20 Oct 2025 10:42:06 +0000 Manifest this update: Mon 20 Oct 2025 10:37:06 +0000 Manifest next update: Tue 21 Oct 2025 14:31:06 +0000 Files and hashes: 1: B46FBF1DD35487568FC708767F085FAD2881F56D.crl (hash: fxns4jN6SH/9IOHWTX0wwFiBJoU6sYqbkikNVHNZl0A=) 2: 326130353a646663333a666434303a3a2f34342d3438203d3e20323134323939.roa (hash: FrXtmk7pAG6qQfvQv6ZeMBaIdLdax1zCCasuBlvhYoQ=) 3: 326130393a353463373a316562653a3a2f34382d3438203d3e20323039383636.roa (hash: sZm9brK2ynQAL4Qv0qveAPtvaYc2UhrTe5WcBL05BkY=) 4: 326130393a353463373a316562653a3a2f34382d3438203d3e20323134323939.roa (hash: okHzxG/SsTH4RSZQhh7L6C+p8SSVWtUyztCsQOe4d24=) 5: 326130393a353463373a313030313a3a2f34382d3438203d3e20323134323939.roa (hash: uBOfZzLyikTvegmkIxWMQt/2ZVji1t85l3talCttNxU=) 6: 326130393a353463373a313030303a3a2f34382d3438203d3e20323134323939.roa (hash: cVUnxtHKHvSuPoMrFujGuYJeptorC3XFD7GVRffPXsw=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/cf81e235-8158-407e-bcff-f096348357a2/2/B46FBF1DD35487568FC708767F085FAD2881F56D.crl rsync://rsync.paas.rpki.ripe.net/repository/cf81e235-8158-407e-bcff-f096348357a2/2/B46FBF1DD35487568FC708767F085FAD2881F56D.mft rsync://krill.47272.net/repo/HYEHOST/5/B46FBF1DD35487568FC708767F085FAD2881F56D.cer rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 21 Oct 2025 09:01:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:d9:55:0a:df:83:44:7f:6d:e2:5e:c7:5e:8c:12:06:d2:ef:a3:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B46FBF1DD35487568FC708767F085FAD2881F56D Validity Not Before: Oct 20 10:37:06 2025 GMT Not After : Oct 21 14:31:06 2025 GMT Subject: CN=5822CCA099C1D1630CE23F5729066BB5A2B29216 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:cf:3d:9d:82:d7:07:28:20:5d:22:7b:ce:80: 5b:1f:9a:2b:15:2c:00:84:02:03:66:7d:a9:15:3b: 04:3d:97:a1:c4:63:54:c3:57:53:32:60:8b:98:07: 0a:bd:9d:53:0b:92:0b:bf:c3:e6:6f:65:2a:af:26: 20:8c:9e:2f:8c:41:3f:e9:5b:3e:fe:ac:c5:cb:43: 0e:e5:c6:3a:cb:af:37:ca:3e:ae:83:3d:c8:e4:23: e1:a1:21:fc:6b:e2:20:c8:b9:a0:4b:c1:8b:32:b2: 27:fe:47:5c:cb:73:30:95:43:e7:a3:91:4b:e3:b0: 77:bb:e2:10:ae:ff:0f:1e:1b:3a:dd:29:85:75:47: c8:31:24:06:1d:0c:b4:8d:72:9b:0f:d9:d0:cc:3e: ee:51:6b:35:eb:79:ac:e1:d1:9a:a4:7c:c5:d6:d9: db:82:0b:88:ca:34:17:c2:85:53:9b:b2:1b:13:f9: 1b:6d:be:60:93:cb:44:9e:c7:0d:43:ee:4e:c7:f5: 9c:09:e9:6d:f6:44:71:a5:64:bc:81:0b:09:7d:dc: 31:01:30:05:45:55:b0:ce:d6:fd:0b:ad:46:26:07: c0:ac:a6:23:98:d8:b1:48:02:af:84:be:88:c5:6b: cf:b1:71:ce:75:37:9f:d7:2e:1f:b8:31:7b:9c:ee: 28:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:22:CC:A0:99:C1:D1:63:0C:E2:3F:57:29:06:6B:B5:A2:B2:92:16 X509v3 Authority Key Identifier: keyid:B4:6F:BF:1D:D3:54:87:56:8F:C7:08:76:7F:08:5F:AD:28:81:F5:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/cf81e235-8158-407e-bcff-f096348357a2/2/B46FBF1DD35487568FC708767F085FAD2881F56D.crl Authority Information Access: CA Issuers - URI:rsync://krill.47272.net/repo/HYEHOST/5/B46FBF1DD35487568FC708767F085FAD2881F56D.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/cf81e235-8158-407e-bcff-f096348357a2/2/B46FBF1DD35487568FC708767F085FAD2881F56D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:9b:a7:04:72:a3:2a:7f:56:41:ec:ef:a3:87:52:4b:42:8a: de:f5:8a:89:e3:63:90:2a:7b:79:45:b9:3a:2e:d5:92:b8:dc: 09:e1:f1:c9:bb:2f:a6:d7:f6:3f:91:03:27:87:af:b9:56:5e: 6d:bc:ac:71:fa:79:eb:0e:8f:be:e1:55:fb:9b:42:13:1f:81: 06:7f:ce:4c:f5:bd:e7:24:77:47:94:29:8a:7e:87:60:3a:27: 2b:27:38:df:47:b9:44:e8:ba:05:4f:97:39:1c:ef:ff:a1:ca: 8f:2e:64:d1:f2:55:b5:1c:a4:a5:62:b9:c8:88:54:38:a5:96: 3a:3f:c3:d8:43:58:3a:f3:50:ee:24:b8:02:d0:6c:16:d6:3e: 04:53:1a:ab:5a:13:e0:2f:a9:ca:7f:1e:59:80:b8:63:46:a2: 16:59:ee:fc:50:e3:f1:1a:c6:9d:94:ce:e0:6c:1f:43:77:fa: 1c:42:1f:60:40:68:25:c0:60:3f:a0:f4:d0:12:fc:2d:1e:8c: 85:7f:fb:3f:1c:8c:f1:70:73:f0:ce:30:11:bb:32:2a:21:dc: 0c:1b:41:40:8d:a4:f3:b5:52:2b:7b:1f:32:04:c4:61:e3:f1: e9:f4:47:e7:2b:a5:b9:47:ee:e0:96:04:60:d1:4b:d7:d7:42: 13:a2:ab:2c -----BEGIN CERTIFICATE----- MIIFSDCCBDCgAwIBAgIUMdlVCt+DRH9t4l7HXowSBtLvoyIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjQ2RkJGMUREMzU0ODc1NjhGQzcwODc2N0YwODVGQUQy ODgxRjU2RDAeFw0yNTEwMjAxMDM3MDZaFw0yNTEwMjExNDMxMDZaMDMxMTAvBgNV BAMTKDU4MjJDQ0EwOTlDMUQxNjMwQ0UyM0Y1NzI5MDY2QkI1QTJCMjkyMTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCozz2dgtcHKCBdInvOgFsfmisV LACEAgNmfakVOwQ9l6HEY1TDV1MyYIuYBwq9nVMLkgu/w+ZvZSqvJiCMni+MQT/p Wz7+rMXLQw7lxjrLrzfKPq6DPcjkI+GhIfxr4iDIuaBLwYsysif+R1zLczCVQ+ej kUvjsHe74hCu/w8eGzrdKYV1R8gxJAYdDLSNcpsP2dDMPu5RazXreazh0ZqkfMXW 2duCC4jKNBfChVObshsT+RttvmCTy0Sexw1D7k7H9ZwJ6W32RHGlZLyBCwl93DEB MAVFVbDO1v0LrUYmB8CspiOY2LFIAq+EvojFa8+xcc51N5/XLh+4MXuc7ihzAgMB AAGjggJSMIICTjAdBgNVHQ4EFgQUWCLMoJnB0WMM4j9XKQZrtaKykhYwHwYDVR0j BBgwFoAUtG+/HdNUh1aPxwh2fwhfrSiB9W0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvY2Y4MWUyMzUtODE1OC00MDdlLWJjZmYtZjA5NjM0ODM1 N2EyLzIvQjQ2RkJGMUREMzU0ODc1NjhGQzcwODc2N0YwODVGQUQyODgxRjU2RC5j cmwwbwYIKwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL2tyaWxsLjQ3 MjcyLm5ldC9yZXBvL0hZRUhPU1QvNS9CNDZGQkYxREQzNTQ4NzU2OEZDNzA4NzY3 RjA4NUZBRDI4ODFGNTZELmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2NmODFlMjM1LTgxNTgtNDA3ZS1iY2ZmLWYwOTYzNDgzNTdhMi8yL0I0NkZCRjFE RDM1NDg3NTY4RkM3MDg3NjdGMDg1RkFEMjg4MUY1NkQubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBem6cE cqMqf1ZB7O+jh1JLQore9YqJ42OQKnt5Rbk6LtWSuNwJ4fHJuy+m1/Y/kQMnh6+5 Vl5tvKxx+nnrDo++4VX7m0ITH4EGf85M9b3nJHdHlCmKfodgOicrJzjfR7lE6LoF T5c5HO//ocqPLmTR8lW1HKSlYrnIiFQ4pZY6P8PYQ1g681DuJLgC0GwW1j4EUxqr WhPgL6nKfx5ZgLhjRqIWWe78UOPxGsadlM7gbB9Dd/ocQh9gQGglwGA/oPTQEvwt HoyFf/s/HIzxcHPwzjARuzIqIdwMG0FAjaTztVIrex8yBMRh4/Hp9EfnK6W5R+7g lgRg0UvX10IToqss -----END CERTIFICATE-----Generated at Mon Oct 20 19:08:16 2025 by rpki-client