$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/9/2F2C3124012C07F6775A6241DFC63BE0414C98AD.mft File: 2F2C3124012C07F6775A6241DFC63BE0414C98AD.mft (raw, json) Hash identifier: DHu7h6yQ6Iv3d4vcbr5ac3nOHhLTNJAbcaATEN5CJbE= Subject key identifier: 33:98:29:C6:DF:4A:16:1B:93:F6:FE:D4:6A:EF:13:68:B6:20:B2:C6 Authority key identifier: 2F:2C:31:24:01:2C:07:F6:77:5A:62:41:DF:C6:3B:E0:41:4C:98:AD Certificate issuer: /CN=2F2C3124012C07F6775A6241DFC63BE0414C98AD Certificate serial: 375F3EC53A5ED6DF47199D22041C8D1C21C68F71 Authority info access: rsync://krill.47272.net/repo/HYEHOST/5/2F2C3124012C07F6775A6241DFC63BE0414C98AD.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/9/2F2C3124012C07F6775A6241DFC63BE0414C98AD.mft Manifest number: 01AC Signing time: Wed 13 May 2026 02:47:21 +0000 Manifest this update: Wed 13 May 2026 02:42:21 +0000 Manifest next update: Thu 14 May 2026 05:02:21 +0000 Files and hashes: 1: 2F2C3124012C07F6775A6241DFC63BE0414C98AD.crl (hash: 5xqfx6+7JPblPsz0gi4ojPm4uhgWqrm/uPuzCJKRkuY=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/9/2F2C3124012C07F6775A6241DFC63BE0414C98AD.crl rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/9/2F2C3124012C07F6775A6241DFC63BE0414C98AD.mft rsync://krill.47272.net/repo/HYEHOST/5/2F2C3124012C07F6775A6241DFC63BE0414C98AD.cer rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 13 May 2026 14:22:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:5f:3e:c5:3a:5e:d6:df:47:19:9d:22:04:1c:8d:1c:21:c6:8f:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2F2C3124012C07F6775A6241DFC63BE0414C98AD Validity Not Before: May 13 02:42:21 2026 GMT Not After : May 14 05:02:21 2026 GMT Subject: CN=339829C6DF4A161B93F6FED46AEF1368B620B2C6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:94:8a:d9:4f:0c:d8:b0:18:63:07:a1:54:91: dc:b2:cd:94:5d:fc:23:ea:27:f2:d9:b2:9e:46:30: 5a:1a:ae:54:c3:76:3f:f5:e9:0e:f0:e8:c5:86:21: 9b:4c:d0:20:3f:61:66:2f:ec:eb:a9:5b:28:1e:69: 61:ed:cb:55:89:51:62:e8:6b:c7:f9:d1:11:4d:a2: f3:d7:23:69:cc:eb:38:34:a9:96:29:69:8b:ef:3b: f1:61:4c:d8:97:84:60:5a:03:08:12:24:c2:8f:63: c8:6b:15:74:e9:57:f3:9a:68:e2:78:e6:4a:65:40: 1e:48:62:43:8d:38:e4:fa:1a:87:67:5b:60:8d:80: 18:c7:4e:a3:cf:d8:c2:7f:87:c1:1e:dc:7a:28:aa: 5e:e7:cf:c7:69:b5:3d:17:48:fd:14:34:64:ff:59: ef:0d:86:74:e9:91:88:80:ab:d1:8f:2c:cd:76:e4: 34:7d:b5:54:5e:d4:85:d4:6a:eb:99:5f:c2:de:ec: ff:15:f0:8b:de:97:f3:45:7d:82:67:bf:7b:f1:49: e5:d6:09:a5:98:fd:40:3f:07:46:15:2b:ad:3b:cf: 46:13:cf:61:22:58:74:22:16:18:67:02:6c:4e:24: a7:e6:d2:73:aa:33:98:eb:48:09:3f:3e:7d:df:94: 8d:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:98:29:C6:DF:4A:16:1B:93:F6:FE:D4:6A:EF:13:68:B6:20:B2:C6 X509v3 Authority Key Identifier: keyid:2F:2C:31:24:01:2C:07:F6:77:5A:62:41:DF:C6:3B:E0:41:4C:98:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/9/2F2C3124012C07F6775A6241DFC63BE0414C98AD.crl Authority Information Access: CA Issuers - URI:rsync://krill.47272.net/repo/HYEHOST/5/2F2C3124012C07F6775A6241DFC63BE0414C98AD.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/9/2F2C3124012C07F6775A6241DFC63BE0414C98AD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:8b:48:57:ba:91:92:67:a4:75:66:2f:6f:5c:4b:e2:ba:87: b4:6e:6a:40:eb:7b:8c:16:ee:30:9e:ea:a8:0a:db:50:40:94: 04:eb:3f:f5:b5:88:a2:d1:d2:34:e4:3f:a9:50:73:e6:a7:e0: 6d:b3:f4:a3:bc:2f:1a:75:04:82:62:08:aa:1b:92:3c:a3:29: 34:6d:e2:e3:12:a3:cb:a1:ff:29:c6:45:dd:32:d9:7e:eb:1a: 39:f4:91:9c:18:bb:e7:6d:82:0e:2d:2e:cf:50:c4:62:64:f4: 3f:65:e7:fc:53:d6:11:ef:e2:ce:47:1a:3b:3f:3b:29:df:d6: 1f:8d:9a:67:ca:7a:b0:24:b7:28:9b:40:2b:50:b5:67:c0:f2: b7:05:0d:b6:c7:0e:08:ce:20:77:75:12:d3:f6:d0:3d:66:6a: de:57:b2:8d:52:c9:a8:3f:32:19:97:9f:ee:92:ee:a9:e0:63: 90:0b:8a:bf:5b:02:26:93:ce:b9:fe:6c:0a:bb:4e:b1:71:db: bc:bc:cb:30:67:9d:0c:ef:16:90:e3:b4:b4:79:67:3d:6b:06: 5c:13:c8:47:89:40:bd:72:ed:9d:04:cd:1f:2d:a2:e3:8d:30: 4a:98:ce:23:ff:fc:f8:79:da:ad:45:96:45:57:f8:1b:6b:94: a7:15:8e:25 -----BEGIN CERTIFICATE----- MIIFSDCCBDCgAwIBAgIUN18+xTpe1t9HGZ0iBByNHCHGj3EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkYyQzMxMjQwMTJDMDdGNjc3NUE2MjQxREZDNjNCRTA0 MTRDOThBRDAeFw0yNjA1MTMwMjQyMjFaFw0yNjA1MTQwNTAyMjFaMDMxMTAvBgNV BAMTKDMzOTgyOUM2REY0QTE2MUI5M0Y2RkVENDZBRUYxMzY4QjYyMEIyQzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCDlIrZTwzYsBhjB6FUkdyyzZRd /CPqJ/LZsp5GMFoarlTDdj/16Q7w6MWGIZtM0CA/YWYv7OupWygeaWHty1WJUWLo a8f50RFNovPXI2nM6zg0qZYpaYvvO/FhTNiXhGBaAwgSJMKPY8hrFXTpV/OaaOJ4 5kplQB5IYkONOOT6GodnW2CNgBjHTqPP2MJ/h8Ee3Hooql7nz8dptT0XSP0UNGT/ We8NhnTpkYiAq9GPLM125DR9tVRe1IXUauuZX8Le7P8V8Ivel/NFfYJnv3vxSeXW CaWY/UA/B0YVK607z0YTz2EiWHQiFhhnAmxOJKfm0nOqM5jrSAk/Pn3flI2FAgMB AAGjggJSMIICTjAdBgNVHQ4EFgQUM5gpxt9KFhuT9v7Uau8TaLYgssYwHwYDVR0j BBgwFoAULywxJAEsB/Z3WmJB38Y74EFMmK0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZGU3ZDU1ZjctZWU2MC00MDA1LWJhZDctYjQyODE4Y2Y1 MGU4LzkvMkYyQzMxMjQwMTJDMDdGNjc3NUE2MjQxREZDNjNCRTA0MTRDOThBRC5j cmwwbwYIKwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL2tyaWxsLjQ3 MjcyLm5ldC9yZXBvL0hZRUhPU1QvNS8yRjJDMzEyNDAxMkMwN0Y2Nzc1QTYyNDFE RkM2M0JFMDQxNEM5OEFELmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2RlN2Q1NWY3LWVlNjAtNDAwNS1iYWQ3LWI0MjgxOGNmNTBlOC85LzJGMkMzMTI0 MDEyQzA3RjY3NzVBNjI0MURGQzYzQkUwNDE0Qzk4QUQubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQB9i0hX upGSZ6R1Zi9vXEviuoe0bmpA63uMFu4wnuqoCttQQJQE6z/1tYii0dI05D+pUHPm p+Bts/SjvC8adQSCYgiqG5I8oyk0beLjEqPLof8pxkXdMtl+6xo59JGcGLvnbYIO LS7PUMRiZPQ/Zef8U9YR7+LORxo7Pzsp39YfjZpnynqwJLcom0ArULVnwPK3BQ22 xw4IziB3dRLT9tA9ZmreV7KNUsmoPzIZl5/uku6p4GOQC4q/WwImk865/mwKu06x cdu8vMswZ50M7xaQ47S0eWc9awZcE8hHiUC9cu2dBM0fLaLjjTBKmM4j//z4edqt RZZFV/gba5SnFY4l -----END CERTIFICATE-----Generated at Wed May 13 09:00:11 2026 by rpki-client