$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/cf81e235-8158-407e-bcff-f096348357a2/2/B46FBF1DD35487568FC708767F085FAD2881F56D.mft File: B46FBF1DD35487568FC708767F085FAD2881F56D.mft (raw, json) Hash identifier: FSoitFrYhxQQQ87XFNf5D+gWY2SsxlBWPfOEGeDcmWk= Subject key identifier: 5F:95:CB:58:35:53:74:46:6E:4E:26:6F:2A:DB:6C:A1:13:9A:7D:81 Authority key identifier: B4:6F:BF:1D:D3:54:87:56:8F:C7:08:76:7F:08:5F:AD:28:81:F5:6D Certificate issuer: /CN=B46FBF1DD35487568FC708767F085FAD2881F56D Certificate serial: 28B13DB3E42DF800EFFAFC2798B0A95C1BC0A893 Authority info access: rsync://krill.47272.net/repo/HYEHOST/5/B46FBF1DD35487568FC708767F085FAD2881F56D.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/cf81e235-8158-407e-bcff-f096348357a2/2/B46FBF1DD35487568FC708767F085FAD2881F56D.mft Manifest number: 45 Signing time: Sat 23 Aug 2025 16:51:59 +0000 Manifest this update: Sat 23 Aug 2025 16:46:59 +0000 Manifest next update: Sun 24 Aug 2025 19:39:59 +0000 Files and hashes: 1: 326130393a353463373a313030303a3a2f34382d3438203d3e20323134323939.roa (hash: FciUVAzI9S+mi5njON8p5QSvWZZPmoftRYdBUiJGcwc=) 2: 326130393a353463373a316562653a3a2f34382d3438203d3e20323134323939.roa (hash: EzVCbaMm1BT+4VuCpmm/8/DdQRnkJJongvTgVxll+Yw=) 3: 326130353a646663333a666434303a3a2f34342d3438203d3e20323134323939.roa (hash: FrXtmk7pAG6qQfvQv6ZeMBaIdLdax1zCCasuBlvhYoQ=) 4: B46FBF1DD35487568FC708767F085FAD2881F56D.crl (hash: 1gotoabACqBusOFtvgurE9SVjfwdFT1vzUZkYQ4eoDc=) 5: 326130393a353463373a316562653a3a2f34382d3438203d3e20323039383636.roa (hash: VGq9MXxV3q0KHWq1w3L98ANgxY0Rn68lBES1HVsVMxg=) 6: 326130393a353463373a313030313a3a2f34382d3438203d3e20323134323939.roa (hash: ZcdksXusZvsGLtEnzA79bXu4R9tRtoB6C1m74jW5A3Q=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/cf81e235-8158-407e-bcff-f096348357a2/2/B46FBF1DD35487568FC708767F085FAD2881F56D.crl rsync://rsync.paas.rpki.ripe.net/repository/cf81e235-8158-407e-bcff-f096348357a2/2/B46FBF1DD35487568FC708767F085FAD2881F56D.mft rsync://krill.47272.net/repo/HYEHOST/5/B46FBF1DD35487568FC708767F085FAD2881F56D.cer rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 24 Aug 2025 13:34:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:b1:3d:b3:e4:2d:f8:00:ef:fa:fc:27:98:b0:a9:5c:1b:c0:a8:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B46FBF1DD35487568FC708767F085FAD2881F56D Validity Not Before: Aug 23 16:46:59 2025 GMT Not After : Aug 24 19:39:59 2025 GMT Subject: CN=5F95CB58355374466E4E266F2ADB6CA1139A7D81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:25:b7:ed:55:df:64:0d:e5:e5:22:89:14:56: 59:09:e5:b3:d1:66:6b:ec:03:49:b0:1e:ce:43:6f: 71:9d:78:d1:ac:31:c6:88:8e:c2:26:3c:2b:bc:3c: fc:10:94:a9:ae:19:ee:63:d6:f0:66:14:de:6b:f1: 8b:ec:a3:d2:8f:c5:a5:5b:19:f9:34:b5:ab:5b:61: cd:f9:35:a6:b9:75:46:75:64:c2:55:e0:cc:24:8e: fc:e6:29:2a:2d:4e:c1:56:45:b1:98:e8:08:fa:97: 9e:a9:c3:a0:05:ed:09:38:75:41:a8:3e:b7:84:4c: 65:0f:38:0d:9f:4a:68:38:ed:e5:de:18:aa:3e:47: b5:a3:46:95:1b:aa:50:0d:89:26:12:1b:ac:a3:50: 32:93:69:e6:2e:57:f7:fd:24:48:d3:a1:d7:8a:64: b7:96:63:13:4d:10:16:96:25:06:a6:13:60:be:7b: 98:01:3e:bf:e7:99:e0:59:0d:56:3f:42:c9:3a:e8: 47:ef:72:a8:17:e4:f7:86:4b:9c:fc:56:aa:b6:96: 4e:81:46:a7:06:31:c7:91:2d:8b:fe:85:0c:56:9d: 0a:ca:67:d6:5a:c1:b2:ad:4a:d0:3e:e0:d6:2f:ba: 60:4b:a9:46:63:47:70:c8:54:c0:9e:b1:86:9f:da: e6:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:95:CB:58:35:53:74:46:6E:4E:26:6F:2A:DB:6C:A1:13:9A:7D:81 X509v3 Authority Key Identifier: keyid:B4:6F:BF:1D:D3:54:87:56:8F:C7:08:76:7F:08:5F:AD:28:81:F5:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/cf81e235-8158-407e-bcff-f096348357a2/2/B46FBF1DD35487568FC708767F085FAD2881F56D.crl Authority Information Access: CA Issuers - URI:rsync://krill.47272.net/repo/HYEHOST/5/B46FBF1DD35487568FC708767F085FAD2881F56D.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/cf81e235-8158-407e-bcff-f096348357a2/2/B46FBF1DD35487568FC708767F085FAD2881F56D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:70:ed:db:76:78:5d:53:7f:a8:15:47:f2:7f:3e:68:81:51: 9f:03:56:a7:c4:05:e7:29:ef:fe:1d:b0:99:c3:5f:56:a3:98: e9:da:e7:ba:fa:0c:31:06:54:43:3e:67:b7:7a:ac:fa:b9:e3: 3f:d0:e7:ab:7f:a2:d9:54:39:b4:3f:19:f0:8d:a7:55:36:72: 4b:2e:b1:4f:01:0f:17:28:43:28:fc:86:60:07:5b:b9:5c:19: c4:56:71:d6:05:6e:31:f4:51:e6:64:02:53:a1:0c:99:e1:05: 3c:18:a8:91:6e:d9:30:cf:14:b9:d1:5e:49:5d:21:65:5d:49: bf:9f:87:d7:f2:d2:4c:5e:fa:d6:92:f5:af:0a:94:0a:3f:cb: 9a:5f:f9:2a:b4:dc:5c:fb:c8:44:4d:cd:1d:ea:3e:a1:0d:9f: d8:ab:04:2a:d8:5f:44:bf:30:a9:f4:34:f0:95:33:bb:98:1e: 07:54:7d:56:08:6a:6c:ab:0c:dc:f7:d6:b1:4d:c5:3a:be:ee: 1c:db:e7:9b:3f:c4:ad:ba:5a:58:1d:99:5e:ff:15:2e:34:2e: 5c:36:3d:a3:17:80:3b:f3:5a:95:5b:fa:d7:e7:eb:42:1d:5e: ff:4e:01:0c:49:16:bb:b8:60:6a:01:bb:2c:11:9c:55:38:8b: 26:a2:53:79 -----BEGIN CERTIFICATE----- MIIFSDCCBDCgAwIBAgIUKLE9s+Qt+ADv+vwnmLCpXBvAqJMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjQ2RkJGMUREMzU0ODc1NjhGQzcwODc2N0YwODVGQUQy ODgxRjU2RDAeFw0yNTA4MjMxNjQ2NTlaFw0yNTA4MjQxOTM5NTlaMDMxMTAvBgNV BAMTKDVGOTVDQjU4MzU1Mzc0NDY2RTRFMjY2RjJBREI2Q0ExMTM5QTdEODEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIJbftVd9kDeXlIokUVlkJ5bPR ZmvsA0mwHs5Db3GdeNGsMcaIjsImPCu8PPwQlKmuGe5j1vBmFN5r8Yvso9KPxaVb Gfk0tatbYc35Naa5dUZ1ZMJV4MwkjvzmKSotTsFWRbGY6Aj6l56pw6AF7Qk4dUGo PreETGUPOA2fSmg47eXeGKo+R7WjRpUbqlANiSYSG6yjUDKTaeYuV/f9JEjTodeK ZLeWYxNNEBaWJQamE2C+e5gBPr/nmeBZDVY/Qsk66EfvcqgX5PeGS5z8Vqq2lk6B RqcGMceRLYv+hQxWnQrKZ9ZawbKtStA+4NYvumBLqUZjR3DIVMCesYaf2uZ/AgMB AAGjggJSMIICTjAdBgNVHQ4EFgQUX5XLWDVTdEZuTiZvKttsoROafYEwHwYDVR0j BBgwFoAUtG+/HdNUh1aPxwh2fwhfrSiB9W0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvY2Y4MWUyMzUtODE1OC00MDdlLWJjZmYtZjA5NjM0ODM1 N2EyLzIvQjQ2RkJGMUREMzU0ODc1NjhGQzcwODc2N0YwODVGQUQyODgxRjU2RC5j cmwwbwYIKwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL2tyaWxsLjQ3 MjcyLm5ldC9yZXBvL0hZRUhPU1QvNS9CNDZGQkYxREQzNTQ4NzU2OEZDNzA4NzY3 RjA4NUZBRDI4ODFGNTZELmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2NmODFlMjM1LTgxNTgtNDA3ZS1iY2ZmLWYwOTYzNDgzNTdhMi8yL0I0NkZCRjFE RDM1NDg3NTY4RkM3MDg3NjdGMDg1RkFEMjg4MUY1NkQubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBUcO3b dnhdU3+oFUfyfz5ogVGfA1anxAXnKe/+HbCZw19Wo5jp2ue6+gwxBlRDPme3eqz6 ueM/0Oerf6LZVDm0PxnwjadVNnJLLrFPAQ8XKEMo/IZgB1u5XBnEVnHWBW4x9FHm ZAJToQyZ4QU8GKiRbtkwzxS50V5JXSFlXUm/n4fX8tJMXvrWkvWvCpQKP8uaX/kq tNxc+8hETc0d6j6hDZ/YqwQq2F9EvzCp9DTwlTO7mB4HVH1WCGpsqwzc99axTcU6 vu4c2+ebP8StulpYHZle/xUuNC5cNj2jF4A781qVW/rX5+tCHV7/TgEMSRa7uGBq AbssEZxVOIsmolN5 -----END CERTIFICATE-----Generated at Sun Aug 24 03:52:13 2025 by rpki-client