Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/9/2F2C3124012C07F6775A6241DFC63BE0414C98AD.mft
File:                     2F2C3124012C07F6775A6241DFC63BE0414C98AD.mft (raw, json)
Hash identifier:          dMEQ9JASc8QCIMorGCtQ/SM9LeVdN1TZG63LR48HTNU=
Subject key identifier:   20:53:58:F7:DC:C1:D3:70:6B:BE:3D:78:8B:CA:17:68:AD:5E:98:A1
Authority key identifier: 2F:2C:31:24:01:2C:07:F6:77:5A:62:41:DF:C6:3B:E0:41:4C:98:AD
Certificate issuer:       /CN=2F2C3124012C07F6775A6241DFC63BE0414C98AD
Certificate serial:       690F700058A9B6C68FA0DE56D53049C0D64CAC5B
Authority info access:    rsync://krill.47272.net/repo/HYEHOST/5/2F2C3124012C07F6775A6241DFC63BE0414C98AD.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/9/2F2C3124012C07F6775A6241DFC63BE0414C98AD.mft
Manifest number:          0212
Signing time:             Fri 24 Jul 2026 03:20:48 +0000
Manifest this update:     Fri 24 Jul 2026 03:15:48 +0000
Manifest next update:     Sat 25 Jul 2026 05:42:48 +0000
Files and hashes:         1: 2F2C3124012C07F6775A6241DFC63BE0414C98AD.crl (hash: gFrSq6ti340LuE8JEoTSYW55tg/dQhhE3Lc5QfrQOno=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/9/2F2C3124012C07F6775A6241DFC63BE0414C98AD.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/9/2F2C3124012C07F6775A6241DFC63BE0414C98AD.mft
                          rsync://krill.47272.net/repo/HYEHOST/5/2F2C3124012C07F6775A6241DFC63BE0414C98AD.cer
                          rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl
                          rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 22:20:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:0f:70:00:58:a9:b6:c6:8f:a0:de:56:d5:30:49:c0:d6:4c:ac:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2F2C3124012C07F6775A6241DFC63BE0414C98AD
        Validity
            Not Before: Jul 24 03:15:48 2026 GMT
            Not After : Jul 25 05:42:48 2026 GMT
        Subject: CN=205358F7DCC1D3706BBE3D788BCA1768AD5E98A1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:49:81:84:8b:8a:6e:11:ff:2a:6a:f9:8a:25:
                    ed:03:2b:f2:82:7e:82:59:a6:be:41:f7:4e:f8:b3:
                    94:4a:77:f5:e4:02:88:f7:21:46:ca:b7:35:40:33:
                    9e:9f:77:46:9c:15:2b:1d:b9:82:4f:a5:84:8d:06:
                    53:22:8e:68:8a:e1:86:81:83:01:6e:60:d3:bc:ec:
                    ae:ad:be:59:92:1c:7d:52:84:66:50:b7:47:b7:47:
                    52:4b:c2:c6:58:ae:a0:20:38:40:56:e2:c9:3f:be:
                    94:cf:e5:fb:1f:46:73:ed:9c:77:58:a9:1d:b5:fc:
                    6e:65:f8:a8:9b:70:8f:5c:79:9b:ad:c9:67:58:5e:
                    8f:77:64:19:96:4d:d5:62:83:4a:5c:96:1d:72:36:
                    3e:45:5d:f2:b5:ab:0e:ca:9d:ef:98:e9:95:af:7f:
                    5a:ab:b5:b2:9e:fa:e8:5e:f0:68:7e:a9:da:40:4c:
                    0f:a7:08:a7:81:f9:4f:28:1b:f0:59:db:4c:6d:87:
                    e8:68:04:fd:06:d4:64:49:98:35:90:fd:88:7e:c7:
                    ec:ca:56:99:fc:f5:00:2b:ce:57:66:a4:98:a4:5f:
                    2e:43:28:71:02:38:ff:05:6d:05:fb:3f:a2:48:8e:
                    91:e4:1a:c0:e1:8d:e9:e5:c3:21:b7:c9:64:6c:da:
                    c2:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:53:58:F7:DC:C1:D3:70:6B:BE:3D:78:8B:CA:17:68:AD:5E:98:A1
            X509v3 Authority Key Identifier:
                keyid:2F:2C:31:24:01:2C:07:F6:77:5A:62:41:DF:C6:3B:E0:41:4C:98:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/9/2F2C3124012C07F6775A6241DFC63BE0414C98AD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://krill.47272.net/repo/HYEHOST/5/2F2C3124012C07F6775A6241DFC63BE0414C98AD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/9/2F2C3124012C07F6775A6241DFC63BE0414C98AD.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:25:ba:8b:6a:3d:bf:f4:58:08:d5:1e:34:0d:8b:10:59:d3:
         15:d3:33:76:08:a9:08:cf:a1:f6:85:68:c2:8c:ad:27:70:bc:
         82:db:58:f1:4b:3d:30:8a:cc:4a:98:e6:43:9b:17:dd:60:c6:
         b5:a3:74:ed:fd:5e:60:f6:35:c2:cb:4b:27:83:06:00:d2:cb:
         00:5c:43:13:20:b9:c5:3c:1b:b7:c2:e7:d3:48:69:8b:3b:64:
         8d:fb:7f:75:e6:a4:ac:a0:c5:3c:3e:2b:ee:0b:98:9c:48:d1:
         09:f3:61:56:ea:bc:e5:23:32:45:78:19:10:b0:9d:4b:6d:1a:
         54:30:18:0a:2a:be:a9:fe:77:aa:01:d3:06:12:44:b1:00:8d:
         d2:e6:8f:84:85:94:63:b4:2b:89:ef:73:a8:e6:30:e9:cd:d2:
         3c:3b:64:a8:9e:fa:35:e6:16:af:14:9b:03:4c:97:c1:76:de:
         ca:d0:27:55:5d:3c:a5:9d:bf:8c:7f:ec:91:15:37:7d:14:c1:
         5b:bb:97:05:43:84:10:cf:cd:21:bf:cb:cf:6b:13:a1:57:a8:
         0f:d5:e3:5c:e2:ec:a5:7c:54:9d:06:20:a1:df:db:80:a2:d4:
         ec:81:2d:fd:97:7f:8c:c3:92:cb:77:94:69:60:89:f1:b3:eb:
         09:3e:2a:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 06:22:04 2026 by rpki-client