$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/9/2F2C3124012C07F6775A6241DFC63BE0414C98AD.mft File: 2F2C3124012C07F6775A6241DFC63BE0414C98AD.mft (raw, json) Hash identifier: lIh8fphDjIh6o8zOP60ltf2lyaxvZP8nnwC8+X1eLKI= Subject key identifier: 2A:9C:8B:1B:B9:4F:3C:4F:3D:66:D4:64:A8:4E:C0:6A:87:F3:41:55 Authority key identifier: 2F:2C:31:24:01:2C:07:F6:77:5A:62:41:DF:C6:3B:E0:41:4C:98:AD Certificate issuer: /CN=2F2C3124012C07F6775A6241DFC63BE0414C98AD Certificate serial: 40AF88A229D1A995D6162DFB1FE0CC4FF3BB1703 Authority info access: rsync://krill.47272.net/repo/HYEHOST/5/2F2C3124012C07F6775A6241DFC63BE0414C98AD.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/9/2F2C3124012C07F6775A6241DFC63BE0414C98AD.mft Manifest number: 026B Signing time: Thu 24 Sep 2026 21:34:28 +0000 Manifest this update: Thu 24 Sep 2026 21:29:28 +0000 Manifest next update: Fri 25 Sep 2026 22:41:28 +0000 Files and hashes: 1: 2F2C3124012C07F6775A6241DFC63BE0414C98AD.crl (hash: 0kI8G0zWBg0xomx294MP+iMiGkr2WRtC0hAZWc6Bg6w=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/9/2F2C3124012C07F6775A6241DFC63BE0414C98AD.crl rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/9/2F2C3124012C07F6775A6241DFC63BE0414C98AD.mft rsync://krill.47272.net/repo/HYEHOST/5/2F2C3124012C07F6775A6241DFC63BE0414C98AD.cer rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 25 Sep 2026 14:17:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:af:88:a2:29:d1:a9:95:d6:16:2d:fb:1f:e0:cc:4f:f3:bb:17:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2F2C3124012C07F6775A6241DFC63BE0414C98AD Validity Not Before: Sep 24 21:29:28 2026 GMT Not After : Sep 25 22:41:28 2026 GMT Subject: CN=2A9C8B1BB94F3C4F3D66D464A84EC06A87F34155 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:82:71:b1:8f:50:f6:44:63:c8:32:c0:fc:c5: 10:3f:f8:df:70:7f:9e:b6:a3:bc:ed:e2:b2:c6:af: d9:d3:2e:8b:c9:2f:20:16:7e:dd:5b:9b:79:46:a9: c1:8e:fb:71:a5:c6:18:40:3f:56:2e:50:e3:49:d2: 44:52:55:78:04:9e:b7:3d:63:02:29:71:6b:cf:87: c3:4d:49:06:3b:fb:a5:01:f6:13:f0:6d:be:d7:f7: e7:3d:3a:47:b0:5e:d9:ab:6b:df:15:d8:ae:df:a4: 27:3a:a7:c6:c5:e5:2d:fa:c1:27:b3:ba:bc:a5:e2: 13:0c:5e:cb:6f:90:0c:d1:1f:a0:01:cd:4d:97:b0: 19:52:09:7e:89:f6:3b:c8:02:36:6e:18:de:5c:7d: b4:53:03:88:d9:f2:66:d1:d0:44:13:4b:11:3e:a8: d9:5a:af:bd:6e:3c:30:d7:9c:19:65:94:72:31:cd: 37:7f:3a:4b:e6:c5:e6:4a:13:27:dc:fe:88:53:e5: aa:70:fc:bd:3c:51:6d:4c:9f:06:4d:bf:b1:08:c6: d9:b7:9f:94:49:4d:f0:c3:4e:28:8d:c6:ec:de:9e: be:92:4a:e4:ba:fe:94:c0:7a:f8:f8:80:7c:9d:2a: f9:b4:72:d6:69:35:d9:12:4e:53:31:a5:bd:bd:74: 21:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:9C:8B:1B:B9:4F:3C:4F:3D:66:D4:64:A8:4E:C0:6A:87:F3:41:55 X509v3 Authority Key Identifier: keyid:2F:2C:31:24:01:2C:07:F6:77:5A:62:41:DF:C6:3B:E0:41:4C:98:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/9/2F2C3124012C07F6775A6241DFC63BE0414C98AD.crl Authority Information Access: CA Issuers - URI:rsync://krill.47272.net/repo/HYEHOST/5/2F2C3124012C07F6775A6241DFC63BE0414C98AD.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/9/2F2C3124012C07F6775A6241DFC63BE0414C98AD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:29:b8:da:fe:57:37:d1:bb:1f:b2:cc:01:dd:e9:15:25:2c: cc:94:1d:40:ff:97:22:2d:42:41:07:30:1a:14:19:d0:79:5c: 0d:80:42:4e:8e:0e:96:0e:da:d1:01:0a:bf:44:4d:69:e5:be: 88:07:a6:a8:09:ac:a3:20:e7:3e:c3:d0:60:39:72:72:1e:ea: 68:d5:c1:1c:ef:25:2c:52:2b:02:25:d8:35:f0:94:14:ab:2f: 7e:a4:9e:b0:22:21:51:5c:99:21:72:99:b8:fa:20:c0:13:e0: 09:fb:e1:e0:73:32:44:ef:81:c9:c1:cc:6b:28:1b:9a:80:b0: 78:f7:cc:11:d6:21:53:e1:af:2a:2e:51:3a:14:c9:cd:e2:ef: 15:1d:74:3d:b9:aa:cd:0d:85:f9:49:e4:19:47:53:a8:c1:fd: cb:e2:a6:51:6c:b9:d4:22:0c:7e:8c:84:85:b9:3f:71:1d:0c: 61:8f:71:41:2e:62:fd:61:bc:4d:6a:ad:bc:0d:e1:ce:4a:37: 6a:33:ef:bc:c3:02:7b:96:a4:d5:79:21:00:51:eb:82:ce:af: 59:f3:d5:61:28:41:1a:63:8c:bc:a3:1d:e2:23:ed:39:24:30: 79:9f:f6:07:d2:04:9d:cc:4d:b0:2b:87:ac:b0:cd:9c:42:d8: 8f:67:d6:53 -----BEGIN CERTIFICATE----- MIIFSDCCBDCgAwIBAgIUQK+IoinRqZXWFi37H+DMT/O7FwMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkYyQzMxMjQwMTJDMDdGNjc3NUE2MjQxREZDNjNCRTA0 MTRDOThBRDAeFw0yNjA5MjQyMTI5MjhaFw0yNjA5MjUyMjQxMjhaMDMxMTAvBgNV BAMTKDJBOUM4QjFCQjk0RjNDNEYzRDY2RDQ2NEE4NEVDMDZBODdGMzQxNTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYgnGxj1D2RGPIMsD8xRA/+N9w f562o7zt4rLGr9nTLovJLyAWft1bm3lGqcGO+3GlxhhAP1YuUONJ0kRSVXgEnrc9 YwIpcWvPh8NNSQY7+6UB9hPwbb7X9+c9OkewXtmra98V2K7fpCc6p8bF5S36wSez uryl4hMMXstvkAzRH6ABzU2XsBlSCX6J9jvIAjZuGN5cfbRTA4jZ8mbR0EQTSxE+ qNlar71uPDDXnBlllHIxzTd/OkvmxeZKEyfc/ohT5apw/L08UW1MnwZNv7EIxtm3 n5RJTfDDTiiNxuzenr6SSuS6/pTAevj4gHydKvm0ctZpNdkSTlMxpb29dCEjAgMB AAGjggJSMIICTjAdBgNVHQ4EFgQUKpyLG7lPPE89ZtRkqE7AaofzQVUwHwYDVR0j BBgwFoAULywxJAEsB/Z3WmJB38Y74EFMmK0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZGU3ZDU1ZjctZWU2MC00MDA1LWJhZDctYjQyODE4Y2Y1 MGU4LzkvMkYyQzMxMjQwMTJDMDdGNjc3NUE2MjQxREZDNjNCRTA0MTRDOThBRC5j cmwwbwYIKwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL2tyaWxsLjQ3 MjcyLm5ldC9yZXBvL0hZRUhPU1QvNS8yRjJDMzEyNDAxMkMwN0Y2Nzc1QTYyNDFE RkM2M0JFMDQxNEM5OEFELmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2RlN2Q1NWY3LWVlNjAtNDAwNS1iYWQ3LWI0MjgxOGNmNTBlOC85LzJGMkMzMTI0 MDEyQzA3RjY3NzVBNjI0MURGQzYzQkUwNDE0Qzk4QUQubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAlKbja /lc30bsfsswB3ekVJSzMlB1A/5ciLUJBBzAaFBnQeVwNgEJOjg6WDtrRAQq/RE1p 5b6IB6aoCayjIOc+w9BgOXJyHupo1cEc7yUsUisCJdg18JQUqy9+pJ6wIiFRXJkh cpm4+iDAE+AJ++HgczJE74HJwcxrKBuagLB498wR1iFT4a8qLlE6FMnN4u8VHXQ9 uarNDYX5SeQZR1Oowf3L4qZRbLnUIgx+jISFuT9xHQxhj3FBLmL9YbxNaq28DeHO SjdqM++8wwJ7lqTVeSEAUeuCzq9Z89VhKEEaY4y8ox3iI+05JDB5n/YH0gSdzE2w K4essM2cQtiPZ9ZT -----END CERTIFICATE-----Generated at Fri Sep 25 01:05:25 2026 by rpki-client