$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/2/575051DD9A9BFA57BCC3A2B982F24E11D9BAD63C.mft File: 575051DD9A9BFA57BCC3A2B982F24E11D9BAD63C.mft (raw, json) Hash identifier: CxSY1PTjRa29DtnZYasA5vHxCesbjaLacYkbqTT6PLA= Subject key identifier: 39:B0:DD:7E:C3:13:60:72:93:E9:1C:C2:AB:1D:EC:DB:DF:58:5B:D6 Authority key identifier: 57:50:51:DD:9A:9B:FA:57:BC:C3:A2:B9:82:F2:4E:11:D9:BA:D6:3C Certificate issuer: /CN=575051DD9A9BFA57BCC3A2B982F24E11D9BAD63C Certificate serial: 5462CFD4F111D3AE1D1BCB0F85C415E8938E3AE9 Authority info access: rsync://krill.47272.net/repo/HYEHOST/5/575051DD9A9BFA57BCC3A2B982F24E11D9BAD63C.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/2/575051DD9A9BFA57BCC3A2B982F24E11D9BAD63C.mft Manifest number: 2C Signing time: Wed 25 Mar 2026 15:58:58 +0000 Manifest this update: Wed 25 Mar 2026 15:53:58 +0000 Manifest next update: Thu 26 Mar 2026 19:40:58 +0000 Files and hashes: 1: 326130613a363034343a623330303a3a2f34322d3432203d3e20323134383039.roa (hash: BTLRcVPEb+mlVG5DuFyrRpHPvxtI1AwdQSn94JOGmgg=) 2: 326130613a363034343a623334333a3a2f34382d3438203d3e20323039373335.roa (hash: JQ2KOFyxDm27iRQUekpK6hAiBu9T23O5crpHLbozT4Q=) 3: 575051DD9A9BFA57BCC3A2B982F24E11D9BAD63C.crl (hash: Cc7Wai21vLXLKLwhDYQUS6ZzwvoddjaMSZ1KN3s35/s=) 4: 326130613a363034343a623363303a3a2f34342d3434203d3e203434373333.roa (hash: PYUZfxiEyn8hXYt+1cuoAJSsYY9rYNGWkjKHW4eXgHI=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/2/575051DD9A9BFA57BCC3A2B982F24E11D9BAD63C.crl rsync://rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/2/575051DD9A9BFA57BCC3A2B982F24E11D9BAD63C.mft rsync://krill.47272.net/repo/HYEHOST/5/575051DD9A9BFA57BCC3A2B982F24E11D9BAD63C.cer rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 26 Mar 2026 19:40:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:62:cf:d4:f1:11:d3:ae:1d:1b:cb:0f:85:c4:15:e8:93:8e:3a:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=575051DD9A9BFA57BCC3A2B982F24E11D9BAD63C Validity Not Before: Mar 25 15:53:58 2026 GMT Not After : Mar 26 19:40:58 2026 GMT Subject: CN=39B0DD7EC313607293E91CC2AB1DECDBDF585BD6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:f9:05:c3:fb:a1:7b:f6:f5:a4:f5:72:06:44: 3f:5a:cc:55:08:42:1b:f1:38:10:a7:0e:7b:dc:b4: e0:c5:78:3f:16:80:83:c7:d9:76:be:08:28:2c:af: d3:b8:af:cc:ea:c5:0d:20:58:52:a6:c8:48:27:c1: 08:54:9e:9c:00:07:c7:86:7a:c6:bf:5f:15:f2:66: 3e:05:a3:1b:f8:66:50:7e:ea:9f:0e:fc:fc:50:7e: ca:30:67:cb:b8:7b:83:1c:1c:ed:4b:64:3f:c2:28: 33:81:8c:78:58:c2:23:f1:a5:55:b5:c8:d4:ca:86: de:b0:76:da:3a:d2:ac:18:c4:81:3a:87:41:99:70: 63:37:d2:b2:4d:0a:fa:47:1c:23:cf:55:08:24:8b: d6:e9:bc:f1:8f:f4:cb:19:99:00:97:5f:cb:a1:4a: bc:64:e0:9c:e3:80:86:9d:ed:94:c0:a4:43:f9:0b: a5:40:0c:01:c5:f1:d9:41:e7:95:cb:ac:2c:a8:3e: 61:6e:fb:70:75:ba:00:0a:dd:98:dc:7d:df:11:90: 2c:c6:bd:14:d3:7d:e1:85:04:37:5c:41:f5:94:97: c8:39:7f:19:ca:c0:d1:1b:9f:33:f9:89:ae:4a:5d: a2:bc:94:31:e7:20:bf:60:41:b8:73:f0:75:4f:9c: a3:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:B0:DD:7E:C3:13:60:72:93:E9:1C:C2:AB:1D:EC:DB:DF:58:5B:D6 X509v3 Authority Key Identifier: keyid:57:50:51:DD:9A:9B:FA:57:BC:C3:A2:B9:82:F2:4E:11:D9:BA:D6:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/2/575051DD9A9BFA57BCC3A2B982F24E11D9BAD63C.crl Authority Information Access: CA Issuers - URI:rsync://krill.47272.net/repo/HYEHOST/5/575051DD9A9BFA57BCC3A2B982F24E11D9BAD63C.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/2/575051DD9A9BFA57BCC3A2B982F24E11D9BAD63C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:23:c4:75:35:d3:c4:1a:5e:48:d9:19:0c:62:79:1f:d1:03: bb:68:4a:16:fe:b0:69:23:2b:b3:93:4e:24:fa:e9:c4:58:cd: 84:5c:39:68:45:c7:b5:cb:f8:4a:8d:38:9c:e9:0e:49:e3:95: f0:de:ff:6e:ce:38:0b:fe:e2:1b:c8:6a:69:16:eb:9b:a0:72: 1f:4b:cb:72:e1:80:ac:5b:9d:4d:16:fc:1e:f8:87:90:4f:04: 9a:90:4e:90:05:25:7b:0a:d1:2c:88:dc:b2:50:3a:49:ba:89: db:2d:0a:7f:f0:7e:36:d1:98:9d:2d:d4:87:80:56:66:77:98: 05:51:4b:ef:19:70:08:c5:36:0b:01:bc:41:93:d9:00:f8:61: bc:fb:7f:24:a0:fe:a9:6b:a4:d5:62:c9:96:48:3c:f9:ab:b8: 1b:9c:31:2c:53:58:6b:27:44:ba:f9:c3:13:b1:bf:e4:8f:11: be:b9:55:85:f7:3c:80:a7:b6:27:98:7d:6a:3f:81:87:4a:46: 5c:40:56:b4:69:02:da:dc:b6:4d:1f:ab:76:66:21:54:1c:e6: 1f:69:38:bc:00:81:8c:7f:66:d8:51:bf:5e:91:25:07:d4:12: 04:35:9d:05:32:7f:a6:d7:bf:86:93:fb:43:af:f4:a2:9d:78: cb:0e:aa:83 -----BEGIN CERTIFICATE----- MIIFSDCCBDCgAwIBAgIUVGLP1PER064dG8sPhcQV6JOOOukwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTc1MDUxREQ5QTlCRkE1N0JDQzNBMkI5ODJGMjRFMTFE OUJBRDYzQzAeFw0yNjAzMjUxNTUzNThaFw0yNjAzMjYxOTQwNThaMDMxMTAvBgNV BAMTKDM5QjBERDdFQzMxMzYwNzI5M0U5MUNDMkFCMURFQ0RCREY1ODVCRDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCn+QXD+6F79vWk9XIGRD9azFUI QhvxOBCnDnvctODFeD8WgIPH2Xa+CCgsr9O4r8zqxQ0gWFKmyEgnwQhUnpwAB8eG esa/XxXyZj4Foxv4ZlB+6p8O/PxQfsowZ8u4e4McHO1LZD/CKDOBjHhYwiPxpVW1 yNTKht6wdto60qwYxIE6h0GZcGM30rJNCvpHHCPPVQgki9bpvPGP9MsZmQCXX8uh Srxk4JzjgIad7ZTApEP5C6VADAHF8dlB55XLrCyoPmFu+3B1ugAK3Zjcfd8RkCzG vRTTfeGFBDdcQfWUl8g5fxnKwNEbnzP5ia5KXaK8lDHnIL9gQbhz8HVPnKPVAgMB AAGjggJSMIICTjAdBgNVHQ4EFgQUObDdfsMTYHKT6RzCqx3s299YW9YwHwYDVR0j BBgwFoAUV1BR3Zqb+le8w6K5gvJOEdm61jwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNzEwOThjMjMtYTk3Ny00ZjlhLTk3YzktY2Q0ZTc1OWRl YTA5LzIvNTc1MDUxREQ5QTlCRkE1N0JDQzNBMkI5ODJGMjRFMTFEOUJBRDYzQy5j cmwwbwYIKwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL2tyaWxsLjQ3 MjcyLm5ldC9yZXBvL0hZRUhPU1QvNS81NzUwNTFERDlBOUJGQTU3QkNDM0EyQjk4 MkYyNEUxMUQ5QkFENjNDLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzcxMDk4YzIzLWE5NzctNGY5YS05N2M5LWNkNGU3NTlkZWEwOS8yLzU3NTA1MURE OUE5QkZBNTdCQ0MzQTJCOTgyRjI0RTExRDlCQUQ2M0MubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCNI8R1 NdPEGl5I2RkMYnkf0QO7aEoW/rBpIyuzk04k+unEWM2EXDloRce1y/hKjTic6Q5J 45Xw3v9uzjgL/uIbyGppFuuboHIfS8ty4YCsW51NFvwe+IeQTwSakE6QBSV7CtEs iNyyUDpJuonbLQp/8H420ZidLdSHgFZmd5gFUUvvGXAIxTYLAbxBk9kA+GG8+38k oP6pa6TVYsmWSDz5q7gbnDEsU1hrJ0S6+cMTsb/kjxG+uVWF9zyAp7YnmH1qP4GH SkZcQFa0aQLa3LZNH6t2ZiFUHOYfaTi8AIGMf2bYUb9ekSUH1BIENZ0FMn+m17+G k/tDr/SinXjLDqqD -----END CERTIFICATE-----Generated at Thu Mar 26 12:14:17 2026 by rpki-client