$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/2ed4b7eb-17a7-44e1-9ca2-098a32383c90/2/0D6B538349B436ADE8D1CAFC73E5341BBC88AD57.mft File: 0D6B538349B436ADE8D1CAFC73E5341BBC88AD57.mft (raw, json) Hash identifier: 4EcajOyaq9fKG2MlDtSZDYEOfvvi8Qa8cYMEjxI7rWk= Subject key identifier: 3C:14:E4:E6:15:C3:6F:35:18:10:9F:54:DC:89:42:66:41:47:99:89 Authority key identifier: 0D:6B:53:83:49:B4:36:AD:E8:D1:CA:FC:73:E5:34:1B:BC:88:AD:57 Certificate issuer: /CN=0D6B538349B436ADE8D1CAFC73E5341BBC88AD57 Certificate serial: 1116C133E7F31B1CB1DD9E7E1F8DF1E271A62698 Authority info access: rsync://krill.47272.net/repo/HYEHOST/5/0D6B538349B436ADE8D1CAFC73E5341BBC88AD57.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/2ed4b7eb-17a7-44e1-9ca2-098a32383c90/2/0D6B538349B436ADE8D1CAFC73E5341BBC88AD57.mft Manifest number: 6F Signing time: Wed 25 Mar 2026 11:29:30 +0000 Manifest this update: Wed 25 Mar 2026 11:24:30 +0000 Manifest next update: Thu 26 Mar 2026 12:52:30 +0000 Files and hashes: 1: 0D6B538349B436ADE8D1CAFC73E5341BBC88AD57.crl (hash: HtxYCL2/PA+D8btTKUypg6rtSocRrjeabqeQP21Cir8=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/2ed4b7eb-17a7-44e1-9ca2-098a32383c90/2/0D6B538349B436ADE8D1CAFC73E5341BBC88AD57.crl rsync://rsync.paas.rpki.ripe.net/repository/2ed4b7eb-17a7-44e1-9ca2-098a32383c90/2/0D6B538349B436ADE8D1CAFC73E5341BBC88AD57.mft rsync://krill.47272.net/repo/HYEHOST/5/0D6B538349B436ADE8D1CAFC73E5341BBC88AD57.cer rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 26 Mar 2026 12:52:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:16:c1:33:e7:f3:1b:1c:b1:dd:9e:7e:1f:8d:f1:e2:71:a6:26:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0D6B538349B436ADE8D1CAFC73E5341BBC88AD57 Validity Not Before: Mar 25 11:24:30 2026 GMT Not After : Mar 26 12:52:30 2026 GMT Subject: CN=3C14E4E615C36F3518109F54DC89426641479989 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:59:d2:f2:e2:27:de:a4:8f:6c:4e:95:ad:ba: d4:b7:d5:82:55:b0:a2:56:57:cb:d7:30:af:7e:db: 81:22:5f:e0:ba:51:ce:ca:20:1a:43:3a:78:31:d8: b4:ea:b0:fc:b7:60:65:bc:4a:c2:e8:f2:02:6e:c1: 12:06:0d:88:4a:b1:f2:71:e9:0b:9c:a6:f8:4c:1d: e6:bf:45:7e:9a:38:76:41:44:d5:b0:b0:34:17:1c: b2:03:ba:4d:6d:cc:4e:d9:c5:e7:f3:1f:26:7a:db: 91:73:08:3a:24:7b:c8:55:8a:70:30:b5:3c:de:9d: b9:b9:f1:64:3a:e9:08:ae:4d:29:b8:56:bd:e8:1d: ee:89:0d:eb:0c:9d:6d:85:06:2d:fe:93:1b:d9:5b: 26:43:d8:09:f5:4c:40:20:ea:17:71:87:3e:ec:d9: a6:d6:6a:5d:64:55:25:cc:bf:35:7e:6c:88:75:5f: 1c:0c:56:35:b7:7f:bc:9a:20:ea:46:22:0c:d0:f0: a9:bc:1b:86:3c:f3:af:4a:71:cc:87:17:67:c0:a9: 21:79:e5:39:33:fb:54:62:4a:d0:01:72:06:54:8a: ad:f2:f5:45:59:b6:d1:71:74:a6:97:8e:a4:48:a1: e0:9a:45:4c:09:5e:f0:a1:32:7b:90:0f:0f:bb:ba: 63:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:14:E4:E6:15:C3:6F:35:18:10:9F:54:DC:89:42:66:41:47:99:89 X509v3 Authority Key Identifier: keyid:0D:6B:53:83:49:B4:36:AD:E8:D1:CA:FC:73:E5:34:1B:BC:88:AD:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/2ed4b7eb-17a7-44e1-9ca2-098a32383c90/2/0D6B538349B436ADE8D1CAFC73E5341BBC88AD57.crl Authority Information Access: CA Issuers - URI:rsync://krill.47272.net/repo/HYEHOST/5/0D6B538349B436ADE8D1CAFC73E5341BBC88AD57.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/2ed4b7eb-17a7-44e1-9ca2-098a32383c90/2/0D6B538349B436ADE8D1CAFC73E5341BBC88AD57.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c8:ac:71:9a:7d:fe:aa:4d:e3:a4:1a:f8:77:95:78:95:c1:0d: c5:33:a5:01:24:cb:44:38:20:da:77:56:a9:4b:68:cf:c0:9e: bc:6e:6c:4c:4e:ab:25:8a:14:80:09:f6:fe:9e:14:c4:dd:87: 97:b5:ce:40:9c:f9:5b:f2:e1:52:ce:ae:a8:d7:0e:1a:c4:fa: 7e:6d:d7:b3:9f:90:ee:77:22:81:62:21:21:7c:7e:8d:92:ab: 51:28:34:49:c5:da:05:26:f2:ee:76:26:29:57:3f:ac:d5:f8: 03:14:b2:1e:75:18:91:7d:f9:ad:24:b7:cf:96:0d:d7:23:94: a2:4e:67:4b:50:e6:3c:6c:be:7b:d0:cd:bb:0a:e5:0d:74:ce: e9:75:46:fd:b7:c5:33:2a:38:b9:4d:c0:f1:8a:2b:af:00:9d: 7c:38:b7:f5:0c:c9:47:97:8a:6f:94:65:49:a8:ed:cf:a3:4a: 00:0c:04:ea:b2:1c:1b:af:c4:c1:00:68:60:f6:49:f9:e3:d4: 9a:92:4b:52:e9:80:81:ab:99:cc:35:47:46:50:7c:4b:00:3b: 77:96:0c:24:c2:ae:20:f1:7b:9d:69:39:70:24:c8:59:5e:15: c4:7a:74:80:b4:e6:ea:9a:61:94:86:45:ae:7a:2d:64:35:b7: 5a:bd:d3:f1 -----BEGIN CERTIFICATE----- MIIFSDCCBDCgAwIBAgIUERbBM+fzGxyx3Z5+H43x4nGmJpgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEQ2QjUzODM0OUI0MzZBREU4RDFDQUZDNzNFNTM0MUJC Qzg4QUQ1NzAeFw0yNjAzMjUxMTI0MzBaFw0yNjAzMjYxMjUyMzBaMDMxMTAvBgNV BAMTKDNDMTRFNEU2MTVDMzZGMzUxODEwOUY1NERDODk0MjY2NDE0Nzk5ODkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpWdLy4ifepI9sTpWtutS31YJV sKJWV8vXMK9+24EiX+C6Uc7KIBpDOngx2LTqsPy3YGW8SsLo8gJuwRIGDYhKsfJx 6QucpvhMHea/RX6aOHZBRNWwsDQXHLIDuk1tzE7ZxefzHyZ625FzCDoke8hVinAw tTzenbm58WQ66QiuTSm4Vr3oHe6JDesMnW2FBi3+kxvZWyZD2An1TEAg6hdxhz7s 2abWal1kVSXMvzV+bIh1XxwMVjW3f7yaIOpGIgzQ8Km8G4Y8869KccyHF2fAqSF5 5Tkz+1RiStABcgZUiq3y9UVZttFxdKaXjqRIoeCaRUwJXvChMnuQDw+7umOLAgMB AAGjggJSMIICTjAdBgNVHQ4EFgQUPBTk5hXDbzUYEJ9U3IlCZkFHmYkwHwYDVR0j BBgwFoAUDWtTg0m0Nq3o0cr8c+U0G7yIrVcwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMmVkNGI3ZWItMTdhNy00NGUxLTljYTItMDk4YTMyMzgz YzkwLzIvMEQ2QjUzODM0OUI0MzZBREU4RDFDQUZDNzNFNTM0MUJCQzg4QUQ1Ny5j cmwwbwYIKwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL2tyaWxsLjQ3 MjcyLm5ldC9yZXBvL0hZRUhPU1QvNS8wRDZCNTM4MzQ5QjQzNkFERThEMUNBRkM3 M0U1MzQxQkJDODhBRDU3LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzJlZDRiN2ViLTE3YTctNDRlMS05Y2EyLTA5OGEzMjM4M2M5MC8yLzBENkI1Mzgz NDlCNDM2QURFOEQxQ0FGQzczRTUzNDFCQkM4OEFENTcubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQDIrHGa ff6qTeOkGvh3lXiVwQ3FM6UBJMtEOCDad1apS2jPwJ68bmxMTqslihSACfb+nhTE 3YeXtc5AnPlb8uFSzq6o1w4axPp+bdezn5DudyKBYiEhfH6NkqtRKDRJxdoFJvLu diYpVz+s1fgDFLIedRiRffmtJLfPlg3XI5SiTmdLUOY8bL570M27CuUNdM7pdUb9 t8UzKji5TcDxiiuvAJ18OLf1DMlHl4pvlGVJqO3Po0oADATqshwbr8TBAGhg9kn5 49SakktS6YCBq5nMNUdGUHxLADt3lgwkwq4g8XudaTlwJMhZXhXEenSAtObqmmGU hkWuei1kNbdavdPx -----END CERTIFICATE-----Generated at Thu Mar 26 07:11:13 2026 by rpki-client