$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/4bfa7a9f-28d3-45b0-a839-a57519ecaeae/2/627B387604DE44D6006F0E7567E2D07EE82CF6BD.mft File: 627B387604DE44D6006F0E7567E2D07EE82CF6BD.mft (raw, json) Hash identifier: bJuUUC5Mq7IWLyMdViv2Xdqr1m5SHvDj3gRHMdFLuIE= Subject key identifier: A4:27:8B:A5:A3:6A:30:B9:60:15:9B:0D:44:50:72:20:67:45:C9:27 Authority key identifier: 62:7B:38:76:04:DE:44:D6:00:6F:0E:75:67:E2:D0:7E:E8:2C:F6:BD Certificate issuer: /CN=627B387604DE44D6006F0E7567E2D07EE82CF6BD Certificate serial: 2696D37E5C53CF7946C5A0F6E4257E7CD5FB47EE Authority info access: rsync://krill.47272.net/repo/HYEHOST/5/627B387604DE44D6006F0E7567E2D07EE82CF6BD.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/4bfa7a9f-28d3-45b0-a839-a57519ecaeae/2/627B387604DE44D6006F0E7567E2D07EE82CF6BD.mft Manifest number: 7A Signing time: Wed 13 May 2026 00:05:10 +0000 Manifest this update: Wed 13 May 2026 00:00:10 +0000 Manifest next update: Thu 14 May 2026 01:02:10 +0000 Files and hashes: 1: 326130613a363034343a376436303a3a2f34342d3434203d3e20323134353130.roa (hash: y/xuVv7X6zYCJrPA+bDxsoe/LQIZz7CWdfVo8c7UFKw=) 2: 326130613a363034343a376432323a3a2f34382d3438203d3e20323134353130.roa (hash: 2VvQmqh0rgVlWv8W6Pzf59GFxuPhxLO/UhXjGSwmG7I=) 3: 326130613a363034343a376430303a3a2f34342d3434203d3e20323134353130.roa (hash: ae529QqeuntcTFvv9T15+WP4/UdZC9RUyhsU7rktznM=) 4: 627B387604DE44D6006F0E7567E2D07EE82CF6BD.crl (hash: RxUxR+19+ZyzNqCo8dCUTQWDxBRTebV1Tm25rgIytVE=) 5: 326130613a363034343a376432303a3a2f34382d3438203d3e20323134353130.roa (hash: c4XzPukkzKV+FHVuebz0bc6eIqhJ7TnmT9Q2167h39Y=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/4bfa7a9f-28d3-45b0-a839-a57519ecaeae/2/627B387604DE44D6006F0E7567E2D07EE82CF6BD.crl rsync://rsync.paas.rpki.ripe.net/repository/4bfa7a9f-28d3-45b0-a839-a57519ecaeae/2/627B387604DE44D6006F0E7567E2D07EE82CF6BD.mft rsync://krill.47272.net/repo/HYEHOST/5/627B387604DE44D6006F0E7567E2D07EE82CF6BD.cer rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 13 May 2026 14:22:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:96:d3:7e:5c:53:cf:79:46:c5:a0:f6:e4:25:7e:7c:d5:fb:47:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=627B387604DE44D6006F0E7567E2D07EE82CF6BD Validity Not Before: May 13 00:00:10 2026 GMT Not After : May 14 01:02:10 2026 GMT Subject: CN=A4278BA5A36A30B960159B0D445072206745C927 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:62:f2:ea:3a:a0:18:b8:5c:51:0c:82:49:02: e0:b9:ef:f2:b7:2b:43:f7:e5:2a:a4:4a:09:0e:e6: 3a:2b:3b:cb:7c:6b:4e:12:51:b1:ca:49:0a:07:f3: ca:0c:7a:94:64:63:3b:ad:74:0c:ec:33:27:af:ba: 0d:d6:87:e9:b8:f1:8e:3a:1b:64:09:c6:e1:77:0b: ad:70:a9:f0:33:f9:b0:27:88:a9:12:88:50:2c:32: ff:03:b1:d5:ad:44:79:65:17:5f:f9:65:7d:eb:d9: 08:5b:6b:7e:a3:d3:75:cc:0a:ce:71:a6:04:d2:00: b2:04:ad:4c:ac:84:43:1c:4b:cd:dd:24:58:bb:61: 71:70:57:2c:9d:fe:81:6c:36:1d:3e:6b:73:43:ce: 10:12:89:be:55:ed:6c:27:78:ff:64:f8:7a:41:8e: 9f:0e:09:b3:5b:fe:6b:f3:23:85:b5:aa:3a:7e:41: e3:7a:4a:ef:ff:d3:24:ed:2c:ce:9b:e7:1c:75:f7: 7c:d2:e6:14:26:98:0f:b8:ca:b9:f7:97:d8:b4:ff: 6c:01:89:40:6a:86:f6:f6:b9:f0:75:e4:b8:80:e9: 84:6a:1b:45:62:54:0c:7f:93:3b:a0:8e:a6:6b:a6: 61:7d:61:6a:a7:42:72:4a:57:95:1e:e7:b6:94:56: ef:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:27:8B:A5:A3:6A:30:B9:60:15:9B:0D:44:50:72:20:67:45:C9:27 X509v3 Authority Key Identifier: keyid:62:7B:38:76:04:DE:44:D6:00:6F:0E:75:67:E2:D0:7E:E8:2C:F6:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/4bfa7a9f-28d3-45b0-a839-a57519ecaeae/2/627B387604DE44D6006F0E7567E2D07EE82CF6BD.crl Authority Information Access: CA Issuers - URI:rsync://krill.47272.net/repo/HYEHOST/5/627B387604DE44D6006F0E7567E2D07EE82CF6BD.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/4bfa7a9f-28d3-45b0-a839-a57519ecaeae/2/627B387604DE44D6006F0E7567E2D07EE82CF6BD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:2b:75:0b:77:7a:61:ef:e9:c7:f2:37:74:0f:b8:f1:a5:1e: e9:86:b7:4f:72:fe:71:22:ae:36:24:37:f6:92:2f:f4:ec:f9: 94:ba:87:0a:76:79:df:cc:10:80:83:ac:45:74:54:20:13:76: ec:62:9b:87:ca:3a:22:7f:f1:93:f4:bf:bf:95:f8:58:11:07: 3d:45:fe:69:b2:e4:06:ba:19:0a:17:fb:d4:7c:18:96:0b:00: 64:ba:d1:1a:3c:ef:fc:a1:7d:3d:15:ab:64:86:bd:98:66:c5: 84:27:10:b8:c5:86:a5:62:46:39:cf:38:dc:25:f1:23:43:5d: bb:08:fc:19:ee:19:54:3e:50:23:75:f8:45:d4:d0:57:c6:4b: b2:2d:7d:59:ab:31:19:59:a0:2d:36:d7:80:5f:0f:29:6f:77: 82:25:29:d5:47:d3:60:c1:2b:d2:e9:79:64:e1:da:58:f3:5c: a1:c1:5c:05:ff:2d:9f:e5:3b:a8:81:e2:79:24:e1:4b:d5:88: 41:8f:25:e0:07:90:e6:a2:17:37:34:20:51:ac:98:33:a8:f4: de:93:5a:f2:00:f0:f2:09:1c:22:36:ce:2c:95:28:a9:4c:3f: 6d:17:c4:80:7d:79:06:5e:57:2e:b3:24:0b:ee:bc:a1:c7:e7: 86:ad:80:4b -----BEGIN CERTIFICATE----- MIIFSDCCBDCgAwIBAgIUJpbTflxTz3lGxaD25CV+fNX7R+4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjI3QjM4NzYwNERFNDRENjAwNkYwRTc1NjdFMkQwN0VF ODJDRjZCRDAeFw0yNjA1MTMwMDAwMTBaFw0yNjA1MTQwMTAyMTBaMDMxMTAvBgNV BAMTKEE0Mjc4QkE1QTM2QTMwQjk2MDE1OUIwRDQ0NTA3MjIwNjc0NUM5MjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtYvLqOqAYuFxRDIJJAuC57/K3 K0P35SqkSgkO5jorO8t8a04SUbHKSQoH88oMepRkYzutdAzsMyevug3Wh+m48Y46 G2QJxuF3C61wqfAz+bAniKkSiFAsMv8DsdWtRHllF1/5ZX3r2Qhba36j03XMCs5x pgTSALIErUyshEMcS83dJFi7YXFwVyyd/oFsNh0+a3NDzhASib5V7WwneP9k+HpB jp8OCbNb/mvzI4W1qjp+QeN6Su//0yTtLM6b5xx193zS5hQmmA+4yrn3l9i0/2wB iUBqhvb2ufB15LiA6YRqG0ViVAx/kzugjqZrpmF9YWqnQnJKV5Ue57aUVu+rAgMB AAGjggJSMIICTjAdBgNVHQ4EFgQUpCeLpaNqMLlgFZsNRFByIGdFyScwHwYDVR0j BBgwFoAUYns4dgTeRNYAbw51Z+LQfugs9r0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNGJmYTdhOWYtMjhkMy00NWIwLWE4MzktYTU3NTE5ZWNh ZWFlLzIvNjI3QjM4NzYwNERFNDRENjAwNkYwRTc1NjdFMkQwN0VFODJDRjZCRC5j cmwwbwYIKwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL2tyaWxsLjQ3 MjcyLm5ldC9yZXBvL0hZRUhPU1QvNS82MjdCMzg3NjA0REU0NEQ2MDA2RjBFNzU2 N0UyRDA3RUU4MkNGNkJELmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzRiZmE3YTlmLTI4ZDMtNDViMC1hODM5LWE1NzUxOWVjYWVhZS8yLzYyN0IzODc2 MDRERTQ0RDYwMDZGMEU3NTY3RTJEMDdFRTgyQ0Y2QkQubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBkK3UL d3ph7+nH8jd0D7jxpR7phrdPcv5xIq42JDf2ki/07PmUuocKdnnfzBCAg6xFdFQg E3bsYpuHyjoif/GT9L+/lfhYEQc9Rf5psuQGuhkKF/vUfBiWCwBkutEaPO/8oX09 Fatkhr2YZsWEJxC4xYalYkY5zzjcJfEjQ127CPwZ7hlUPlAjdfhF1NBXxkuyLX1Z qzEZWaAtNteAXw8pb3eCJSnVR9NgwSvS6Xlk4dpY81yhwVwF/y2f5TuogeJ5JOFL 1YhBjyXgB5Dmohc3NCBRrJgzqPTek1ryAPDyCRwiNs4slSipTD9tF8SAfXkGXlcu syQL7ryhx+eGrYBL -----END CERTIFICATE-----Generated at Wed May 13 06:24:31 2026 by rpki-client