$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/6/6003354361AF66B2F37153B9A7365EE572F6822E.mft File: 6003354361AF66B2F37153B9A7365EE572F6822E.mft (raw, json) Hash identifier: nRqMT3Ewt5vDvUoPmcjMRIuBEb3rsBdXEP9VM6tClmk= Subject key identifier: 60:13:6E:D1:E7:F8:02:CF:4B:8B:84:63:AD:6C:B1:ED:5D:CE:46:90 Authority key identifier: 60:03:35:43:61:AF:66:B2:F3:71:53:B9:A7:36:5E:E5:72:F6:82:2E Certificate issuer: /CN=6003354361AF66B2F37153B9A7365EE572F6822E Certificate serial: 4DAC68ECB178D8844CA5BEB8CDB9E91DED5E377D Authority info access: rsync://krill.47272.net/repo/HYEHOST/5/6003354361AF66B2F37153B9A7365EE572F6822E.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/6/6003354361AF66B2F37153B9A7365EE572F6822E.mft Manifest number: 0255 Signing time: Thu 24 Sep 2026 02:26:06 +0000 Manifest this update: Thu 24 Sep 2026 02:21:06 +0000 Manifest next update: Fri 25 Sep 2026 05:59:06 +0000 Files and hashes: 1: 326130613a363034343a626130323a3a2f34372d3438203d3e20323134373233.roa (hash: g+zrmwdq6hWdyayuUZ4HEI1hjl4/P26SKw7jOnKO8XQ=) 2: 6003354361AF66B2F37153B9A7365EE572F6822E.crl (hash: w/oPR2z7VDCp8Qoy9aEKCnGG8303UCTJTuWTg3G8n/M=) 3: 326130613a363034343a626130303a3a2f34382d3438203d3e20323134373233.roa (hash: LzTu6U40g1XTezmtW0NeoVe0srZk8dKNtz7kNoofjgM=) 4: 326130613a363034343a626130303a3a2f34302d3430203d3e20323134373233.roa (hash: Me4H7YZgZygEIvpxgeeEc04IMatngbdJsoUf/hlBlAQ=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/6/6003354361AF66B2F37153B9A7365EE572F6822E.crl rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/6/6003354361AF66B2F37153B9A7365EE572F6822E.mft rsync://krill.47272.net/repo/HYEHOST/5/6003354361AF66B2F37153B9A7365EE572F6822E.cer rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 24 Sep 2026 23:00:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:ac:68:ec:b1:78:d8:84:4c:a5:be:b8:cd:b9:e9:1d:ed:5e:37:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6003354361AF66B2F37153B9A7365EE572F6822E Validity Not Before: Sep 24 02:21:06 2026 GMT Not After : Sep 25 05:59:06 2026 GMT Subject: CN=60136ED1E7F802CF4B8B8463AD6CB1ED5DCE4690 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:2f:84:dd:63:7a:ed:c9:5b:e5:be:a0:57:e9: 65:4a:df:7f:7b:49:61:1e:aa:dd:20:80:dc:08:1d: e2:82:28:72:b6:b8:b4:18:f7:76:e2:59:1e:82:95: 54:70:86:c7:17:20:88:47:fb:dc:be:0a:8b:57:f9: c8:c9:62:22:3b:9e:bb:13:dd:61:b0:6c:e4:1c:aa: 66:ce:21:e4:42:92:7e:ad:37:b7:64:b0:1f:af:e0: 29:9a:d6:bc:36:79:f6:fe:a3:20:a8:d5:db:06:15: 5f:c8:16:15:ec:21:36:1c:94:b1:ca:ff:57:75:fb: 7e:17:c2:39:dc:de:c6:d4:3a:60:2f:40:84:0f:3c: e6:0d:b1:1b:44:42:fd:ab:42:e1:f4:ce:5e:e5:ce: 85:c7:ae:c9:e8:98:b7:30:ec:4d:2d:4f:a0:6c:2b: 29:54:fc:c6:db:8f:c6:34:d2:ea:64:57:75:b1:20: c5:5a:51:ae:02:45:d2:dc:2e:10:5f:57:fe:9e:e0: 8b:2c:75:79:f3:1a:70:fd:98:01:1f:b3:06:4e:2c: f8:ee:e4:76:1a:84:ef:ac:2b:0b:ff:c4:0d:cd:1c: 00:a9:27:09:78:ee:e6:47:47:38:a5:9e:f4:d4:82: 32:9e:f2:90:51:11:fc:01:d9:4e:e7:45:42:84:60: 91:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:13:6E:D1:E7:F8:02:CF:4B:8B:84:63:AD:6C:B1:ED:5D:CE:46:90 X509v3 Authority Key Identifier: keyid:60:03:35:43:61:AF:66:B2:F3:71:53:B9:A7:36:5E:E5:72:F6:82:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/6/6003354361AF66B2F37153B9A7365EE572F6822E.crl Authority Information Access: CA Issuers - URI:rsync://krill.47272.net/repo/HYEHOST/5/6003354361AF66B2F37153B9A7365EE572F6822E.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/6/6003354361AF66B2F37153B9A7365EE572F6822E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:19:68:c9:b0:e3:5f:99:76:52:82:c2:1b:19:9c:01:65:15: b8:d4:54:ca:d7:9c:84:a4:7a:54:c5:4e:5f:9d:65:75:2c:26: e1:61:15:3a:ea:7a:80:39:48:02:9f:39:39:43:4f:40:f9:53: 5a:d2:bb:0c:6e:22:4b:75:8c:99:ac:b2:b2:98:52:d0:f6:8a: 1c:3e:a6:0d:7b:6e:a2:55:3b:c3:30:7a:6b:fc:fd:ee:f3:b0: 5c:e4:4c:24:d1:88:35:ef:a8:8e:a6:aa:2f:e7:64:4a:b0:8e: ef:b6:56:08:10:de:e8:ef:40:9e:d8:cf:c8:45:80:7e:8a:d9: aa:fa:fc:f3:f2:47:0e:ff:34:5b:9e:87:94:30:9a:f5:7a:52: 63:91:61:72:c7:85:2c:3a:7d:87:f8:cc:cc:3c:a5:18:a4:c6: ca:31:ac:7d:3c:e7:58:55:f6:af:52:f4:c8:c0:a4:b2:e9:b2: d4:19:a7:3e:af:99:7b:eb:e8:58:e9:50:04:93:21:1a:bb:66: f5:49:a8:29:3c:f1:b5:26:df:4c:46:39:01:63:d8:43:dc:d8: 14:7b:8f:f4:3c:6f:bb:e3:e8:96:d2:4c:9d:81:d8:2e:29:5a: 3b:1a:a7:f5:1a:a7:a2:41:aa:be:23:39:36:00:e2:e2:03:54: 46:f0:a1:c1 -----BEGIN CERTIFICATE----- MIIFSDCCBDCgAwIBAgIUTaxo7LF42IRMpb64zbnpHe1eN30wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjAwMzM1NDM2MUFGNjZCMkYzNzE1M0I5QTczNjVFRTU3 MkY2ODIyRTAeFw0yNjA5MjQwMjIxMDZaFw0yNjA5MjUwNTU5MDZaMDMxMTAvBgNV BAMTKDYwMTM2RUQxRTdGODAyQ0Y0QjhCODQ2M0FENkNCMUVENURDRTQ2OTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgL4TdY3rtyVvlvqBX6WVK3397 SWEeqt0ggNwIHeKCKHK2uLQY93biWR6ClVRwhscXIIhH+9y+CotX+cjJYiI7nrsT 3WGwbOQcqmbOIeRCkn6tN7dksB+v4Cma1rw2efb+oyCo1dsGFV/IFhXsITYclLHK /1d1+34Xwjnc3sbUOmAvQIQPPOYNsRtEQv2rQuH0zl7lzoXHrsnomLcw7E0tT6Bs KylU/Mbbj8Y00upkV3WxIMVaUa4CRdLcLhBfV/6e4IssdXnzGnD9mAEfswZOLPju 5HYahO+sKwv/xA3NHACpJwl47uZHRzilnvTUgjKe8pBREfwB2U7nRUKEYJHHAgMB AAGjggJSMIICTjAdBgNVHQ4EFgQUYBNu0ef4As9Li4RjrWyx7V3ORpAwHwYDVR0j BBgwFoAUYAM1Q2GvZrLzcVO5pzZe5XL2gi4wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZDdlNDU5MmUtMjNjMC00Y2NjLTk0ZGEtNmM5NTgwN2Y4 M2U3LzYvNjAwMzM1NDM2MUFGNjZCMkYzNzE1M0I5QTczNjVFRTU3MkY2ODIyRS5j cmwwbwYIKwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL2tyaWxsLjQ3 MjcyLm5ldC9yZXBvL0hZRUhPU1QvNS82MDAzMzU0MzYxQUY2NkIyRjM3MTUzQjlB NzM2NUVFNTcyRjY4MjJFLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2Q3ZTQ1OTJlLTIzYzAtNGNjYy05NGRhLTZjOTU4MDdmODNlNy82LzYwMDMzNTQz NjFBRjY2QjJGMzcxNTNCOUE3MzY1RUU1NzJGNjgyMkUubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQApGWjJ sONfmXZSgsIbGZwBZRW41FTK15yEpHpUxU5fnWV1LCbhYRU66nqAOUgCnzk5Q09A +VNa0rsMbiJLdYyZrLKymFLQ9oocPqYNe26iVTvDMHpr/P3u87Bc5Ewk0Yg176iO pqov52RKsI7vtlYIEN7o70Ce2M/IRYB+itmq+vzz8kcO/zRbnoeUMJr1elJjkWFy x4UsOn2H+MzMPKUYpMbKMax9POdYVfavUvTIwKSy6bLUGac+r5l76+hY6VAEkyEa u2b1SagpPPG1Jt9MRjkBY9hD3NgUe4/0PG+74+iW0kydgdguKVo7Gqf1GqeiQaq+ Izk2AOLiA1RG8KHB -----END CERTIFICATE-----Generated at Thu Sep 24 07:07:01 2026 by rpki-client