$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/4bfa7a9f-28d3-45b0-a839-a57519ecaeae/2/627B387604DE44D6006F0E7567E2D07EE82CF6BD.mft File: 627B387604DE44D6006F0E7567E2D07EE82CF6BD.mft (raw, json) Hash identifier: RzZPkMOmXRnJtpB6wW8a+EIGkJNbjbP7WR4blaHDcCo= Subject key identifier: 81:77:3E:2C:AF:AC:57:09:F2:85:19:B2:B4:89:F6:C6:C1:A2:6F:13 Authority key identifier: 62:7B:38:76:04:DE:44:D6:00:6F:0E:75:67:E2:D0:7E:E8:2C:F6:BD Certificate issuer: /CN=627B387604DE44D6006F0E7567E2D07EE82CF6BD Certificate serial: 37B72776847D8C973B8CEF25759A92A61E05B992 Authority info access: rsync://krill.47272.net/repo/HYEHOST/5/627B387604DE44D6006F0E7567E2D07EE82CF6BD.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/4bfa7a9f-28d3-45b0-a839-a57519ecaeae/2/627B387604DE44D6006F0E7567E2D07EE82CF6BD.mft Manifest number: 3A Signing time: Wed 25 Mar 2026 21:18:20 +0000 Manifest this update: Wed 25 Mar 2026 21:13:20 +0000 Manifest next update: Thu 26 Mar 2026 22:42:20 +0000 Files and hashes: 1: 326130613a363034343a376432323a3a2f34382d3438203d3e20323134353130.roa (hash: 2VvQmqh0rgVlWv8W6Pzf59GFxuPhxLO/UhXjGSwmG7I=) 2: 326130613a363034343a376436303a3a2f34342d3434203d3e20323134353130.roa (hash: y/xuVv7X6zYCJrPA+bDxsoe/LQIZz7CWdfVo8c7UFKw=) 3: 326130613a363034343a376432303a3a2f34382d3438203d3e20323134353130.roa (hash: c4XzPukkzKV+FHVuebz0bc6eIqhJ7TnmT9Q2167h39Y=) 4: 326130613a363034343a376430303a3a2f34342d3434203d3e20323134353130.roa (hash: ae529QqeuntcTFvv9T15+WP4/UdZC9RUyhsU7rktznM=) 5: 627B387604DE44D6006F0E7567E2D07EE82CF6BD.crl (hash: 3LzFxHgK5LaitmLp3LycuqJhhLWdoI9uch1huCECBj8=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/4bfa7a9f-28d3-45b0-a839-a57519ecaeae/2/627B387604DE44D6006F0E7567E2D07EE82CF6BD.crl rsync://rsync.paas.rpki.ripe.net/repository/4bfa7a9f-28d3-45b0-a839-a57519ecaeae/2/627B387604DE44D6006F0E7567E2D07EE82CF6BD.mft rsync://krill.47272.net/repo/HYEHOST/5/627B387604DE44D6006F0E7567E2D07EE82CF6BD.cer rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 26 Mar 2026 22:42:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:b7:27:76:84:7d:8c:97:3b:8c:ef:25:75:9a:92:a6:1e:05:b9:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=627B387604DE44D6006F0E7567E2D07EE82CF6BD Validity Not Before: Mar 25 21:13:20 2026 GMT Not After : Mar 26 22:42:20 2026 GMT Subject: CN=81773E2CAFAC5709F28519B2B489F6C6C1A26F13 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:04:80:a0:76:f2:13:33:eb:ba:50:41:fc:b7: 3e:43:ea:02:e8:58:9f:97:c4:0b:8d:8c:c3:25:5c: 33:a4:0c:50:4b:c0:2b:c7:eb:7e:eb:f0:ca:2c:52: 38:4e:1a:3c:1c:8c:48:98:c0:9e:3d:24:14:c2:4a: f3:47:a5:e0:95:ed:a1:b0:51:8c:be:36:43:e3:d3: 52:e7:f1:bb:56:dd:b9:f3:99:ad:37:01:8b:80:14: da:74:78:89:85:7c:7e:d2:dc:b2:8c:40:0f:61:ff: ae:81:70:cf:be:79:72:11:61:c0:1f:1c:b6:4b:27: 40:8e:d6:02:0d:96:20:0c:66:fd:ec:da:ee:4e:ef: ab:3e:d4:29:50:d8:00:78:4c:8d:8f:07:e9:fb:cf: 9f:43:ef:cd:89:92:17:81:80:c2:0d:0e:fa:ca:a6: a0:bd:43:e0:c6:8a:b2:6d:17:17:0c:ac:2b:f5:6c: c8:2b:a1:29:28:61:31:9c:29:2f:32:60:0d:20:a7: c3:25:08:0b:8b:c4:85:ef:c9:f2:60:63:1c:a5:f3: 46:8a:8e:5d:37:26:df:69:ec:94:e5:e7:63:e1:9c: 20:6a:ca:61:cd:20:52:3e:a1:3e:1e:34:63:be:0b: f1:0d:30:1b:8e:28:05:5e:61:34:2c:5b:2f:a5:a7: 67:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:77:3E:2C:AF:AC:57:09:F2:85:19:B2:B4:89:F6:C6:C1:A2:6F:13 X509v3 Authority Key Identifier: keyid:62:7B:38:76:04:DE:44:D6:00:6F:0E:75:67:E2:D0:7E:E8:2C:F6:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/4bfa7a9f-28d3-45b0-a839-a57519ecaeae/2/627B387604DE44D6006F0E7567E2D07EE82CF6BD.crl Authority Information Access: CA Issuers - URI:rsync://krill.47272.net/repo/HYEHOST/5/627B387604DE44D6006F0E7567E2D07EE82CF6BD.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/4bfa7a9f-28d3-45b0-a839-a57519ecaeae/2/627B387604DE44D6006F0E7567E2D07EE82CF6BD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:d2:5e:da:27:aa:1f:e9:ac:fe:b9:2e:b4:fc:3d:5a:31:8f: a5:19:90:84:eb:bd:d9:17:6b:4a:59:a1:dc:e5:e9:9d:b8:c5: 6d:bf:ae:9b:96:6b:40:45:42:0f:74:fc:df:a5:c6:43:cf:d2: 84:cd:d7:2a:12:a3:54:a9:0e:15:37:f2:85:91:f9:20:41:14: a0:33:94:d6:92:69:22:da:62:f4:f7:f6:e7:5a:fc:e3:89:4c: 74:fb:1c:26:c6:45:20:15:7d:31:62:10:68:c5:0f:8d:29:f8: 7f:79:38:5e:ff:d3:71:09:8c:39:42:0e:ec:1d:8d:25:dd:d2: d8:e4:6a:c8:b6:87:a4:19:69:f6:13:d2:e8:14:2d:9a:20:2d: 0c:c2:44:eb:9c:52:8a:c5:d5:2b:67:8b:ba:3a:15:f3:a3:2b: dd:c3:da:dd:cb:d1:b1:f6:c8:62:f8:bd:6f:3a:28:4b:68:40: c5:48:be:b1:7e:0b:e6:c5:3c:af:81:43:a8:62:6b:09:9e:6c: 89:3c:02:fa:20:7f:fe:5c:c4:56:d1:a0:ba:e2:21:10:16:90: 91:49:e4:89:d1:ce:20:bd:ea:b7:bd:b4:e2:82:24:00:12:c6: 59:9d:ce:76:5c:93:32:9d:c7:88:80:1a:9f:4c:33:46:9d:85: 44:08:7d:b8 -----BEGIN CERTIFICATE----- MIIFSDCCBDCgAwIBAgIUN7cndoR9jJc7jO8ldZqSph4FuZIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjI3QjM4NzYwNERFNDRENjAwNkYwRTc1NjdFMkQwN0VF ODJDRjZCRDAeFw0yNjAzMjUyMTEzMjBaFw0yNjAzMjYyMjQyMjBaMDMxMTAvBgNV BAMTKDgxNzczRTJDQUZBQzU3MDlGMjg1MTlCMkI0ODlGNkM2QzFBMjZGMTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChBICgdvITM+u6UEH8tz5D6gLo WJ+XxAuNjMMlXDOkDFBLwCvH637r8MosUjhOGjwcjEiYwJ49JBTCSvNHpeCV7aGw UYy+NkPj01Ln8btW3bnzma03AYuAFNp0eImFfH7S3LKMQA9h/66BcM++eXIRYcAf HLZLJ0CO1gINliAMZv3s2u5O76s+1ClQ2AB4TI2PB+n7z59D782JkheBgMINDvrK pqC9Q+DGirJtFxcMrCv1bMgroSkoYTGcKS8yYA0gp8MlCAuLxIXvyfJgYxyl80aK jl03Jt9p7JTl52PhnCBqymHNIFI+oT4eNGO+C/ENMBuOKAVeYTQsWy+lp2ddAgMB AAGjggJSMIICTjAdBgNVHQ4EFgQUgXc+LK+sVwnyhRmytIn2xsGibxMwHwYDVR0j BBgwFoAUYns4dgTeRNYAbw51Z+LQfugs9r0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNGJmYTdhOWYtMjhkMy00NWIwLWE4MzktYTU3NTE5ZWNh ZWFlLzIvNjI3QjM4NzYwNERFNDRENjAwNkYwRTc1NjdFMkQwN0VFODJDRjZCRC5j cmwwbwYIKwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL2tyaWxsLjQ3 MjcyLm5ldC9yZXBvL0hZRUhPU1QvNS82MjdCMzg3NjA0REU0NEQ2MDA2RjBFNzU2 N0UyRDA3RUU4MkNGNkJELmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzRiZmE3YTlmLTI4ZDMtNDViMC1hODM5LWE1NzUxOWVjYWVhZS8yLzYyN0IzODc2 MDRERTQ0RDYwMDZGMEU3NTY3RTJEMDdFRTgyQ0Y2QkQubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAe0l7a J6of6az+uS60/D1aMY+lGZCE673ZF2tKWaHc5emduMVtv66blmtARUIPdPzfpcZD z9KEzdcqEqNUqQ4VN/KFkfkgQRSgM5TWkmki2mL09/bnWvzjiUx0+xwmxkUgFX0x YhBoxQ+NKfh/eThe/9NxCYw5Qg7sHY0l3dLY5GrItoekGWn2E9LoFC2aIC0MwkTr nFKKxdUrZ4u6OhXzoyvdw9rdy9Gx9shi+L1vOihLaEDFSL6xfgvmxTyvgUOoYmsJ nmyJPAL6IH/+XMRW0aC64iEQFpCRSeSJ0c4gveq3vbTigiQAEsZZnc52XJMynceI gBqfTDNGnYVECH24 -----END CERTIFICATE-----Generated at Thu Mar 26 08:37:18 2026 by rpki-client