$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/6/6003354361AF66B2F37153B9A7365EE572F6822E.mft File: 6003354361AF66B2F37153B9A7365EE572F6822E.mft (raw, json) Hash identifier: KMYxYycWQ3D53o41aTnvA7LFpUQFUir4rXm4Ykfw9SM= Subject key identifier: E7:14:01:74:8A:7D:05:FE:BA:DD:60:93:BA:88:81:07:36:55:9D:35 Authority key identifier: 60:03:35:43:61:AF:66:B2:F3:71:53:B9:A7:36:5E:E5:72:F6:82:2E Certificate issuer: /CN=6003354361AF66B2F37153B9A7365EE572F6822E Certificate serial: 5ACD8B1449FE406631944EE509B134002E695888 Authority info access: rsync://krill.47272.net/repo/HYEHOST/5/6003354361AF66B2F37153B9A7365EE572F6822E.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/6/6003354361AF66B2F37153B9A7365EE572F6822E.mft Manifest number: 46 Signing time: Sat 23 Aug 2025 20:50:56 +0000 Manifest this update: Sat 23 Aug 2025 20:45:56 +0000 Manifest next update: Sun 24 Aug 2025 22:08:56 +0000 Files and hashes: 1: 326130613a363034343a626130303a3a2f34302d3430203d3e20323134373233.roa (hash: QFhWc/Qi1XwFuZFFUxrJkVVsMNht6HRi/KIA9CCJysc=) 2: 6003354361AF66B2F37153B9A7365EE572F6822E.crl (hash: zpv1gG8DhppPk9G507pXoV0ev7VmpOsUimo8ZRtDfOg=) 3: 326130613a363034343a626130303a3a2f34382d3438203d3e20323134373233.roa (hash: hj2OdTJzJ/lMhD2+bSlhDwRPDkQ5RRLmuL3t94lTgMc=) 4: 326130613a363034343a626130323a3a2f34372d3438203d3e20323134373233.roa (hash: hUN5naRtN06Ia8W+gZVWL0PjC5030tIqv7AoahnILWU=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/6/6003354361AF66B2F37153B9A7365EE572F6822E.crl rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/6/6003354361AF66B2F37153B9A7365EE572F6822E.mft rsync://krill.47272.net/repo/HYEHOST/5/6003354361AF66B2F37153B9A7365EE572F6822E.cer rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 24 Aug 2025 13:34:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:cd:8b:14:49:fe:40:66:31:94:4e:e5:09:b1:34:00:2e:69:58:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6003354361AF66B2F37153B9A7365EE572F6822E Validity Not Before: Aug 23 20:45:56 2025 GMT Not After : Aug 24 22:08:56 2025 GMT Subject: CN=E71401748A7D05FEBADD6093BA88810736559D35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:1e:4e:02:90:3c:a9:e5:08:72:6c:42:c8:a4: b6:00:70:e9:d5:6f:6d:4d:ca:8c:46:ea:e8:75:0e: f0:3b:c0:d3:1b:a1:cf:c1:5a:51:87:60:9a:95:5c: 5d:b9:56:43:6c:94:84:8d:0b:ac:f2:8b:9b:d0:33: 47:43:0b:00:a3:c7:b6:9c:41:10:ad:f2:4c:54:9b: 26:3e:68:6e:89:dd:53:98:b9:e5:ef:d1:87:30:c1: 55:d2:3f:dc:60:88:24:2f:8c:b3:d7:c3:11:1e:36: 0a:b8:a3:c1:ea:24:86:46:15:2f:9d:30:6c:9a:48: 8e:a0:8b:48:65:5f:74:44:cc:46:eb:a6:6a:e1:f6: 4f:2c:22:9e:06:61:0f:dc:f9:62:d8:c6:af:55:50: ea:88:b9:86:74:fb:ae:70:b3:7d:07:54:24:d1:aa: ea:67:31:2d:03:6b:86:1a:b7:6c:0d:d0:90:c5:7b: ee:58:66:8a:87:be:01:b4:f9:26:37:8b:3a:e9:33: a0:6f:98:48:09:09:45:ed:4c:26:6d:fa:ab:45:67: 81:92:65:c6:2e:7f:32:20:7c:cf:38:c3:2c:8b:1d: a8:5c:12:b1:4d:ff:e4:9f:c9:5e:84:43:f9:59:92: ed:bd:f0:13:c5:89:62:af:ec:f9:53:96:a8:8a:8a: 85:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:14:01:74:8A:7D:05:FE:BA:DD:60:93:BA:88:81:07:36:55:9D:35 X509v3 Authority Key Identifier: keyid:60:03:35:43:61:AF:66:B2:F3:71:53:B9:A7:36:5E:E5:72:F6:82:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/6/6003354361AF66B2F37153B9A7365EE572F6822E.crl Authority Information Access: CA Issuers - URI:rsync://krill.47272.net/repo/HYEHOST/5/6003354361AF66B2F37153B9A7365EE572F6822E.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/6/6003354361AF66B2F37153B9A7365EE572F6822E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:46:9d:94:de:6f:df:01:61:92:37:df:f8:49:05:30:d6:34: 64:2d:78:cd:1b:af:6c:f4:15:f9:2b:28:70:db:12:a7:a6:02: 49:80:49:1b:45:70:f0:73:f4:75:48:10:cd:0a:2a:6c:f5:7d: 9f:9b:29:a8:a0:c5:73:e4:d4:d1:cf:43:7c:7c:99:c6:85:25: 4f:b9:55:1e:91:35:67:55:e7:3b:35:b9:05:c7:d0:ec:84:a4: b9:b6:14:55:e6:40:a4:de:55:09:f6:2e:b8:32:dd:50:d3:84: 10:d5:c8:90:cf:c6:7a:fb:09:3a:b5:ec:61:a9:fd:96:da:67: cc:b9:0a:15:3d:8f:39:5a:99:3e:1a:93:ee:9c:1f:d5:9b:d0: 11:72:69:d8:7d:ab:0f:cf:31:5a:b1:9b:dc:92:8f:98:06:32: 27:dd:ea:7f:6a:8d:02:d1:41:1a:9d:25:5d:9e:e9:f8:48:de: 21:57:b7:ac:cb:aa:b1:92:86:74:2d:ab:4f:5b:a8:33:5b:b4: 65:05:62:a2:96:d2:00:e6:bc:23:32:eb:69:04:b4:c0:fb:ab: aa:b3:a5:c9:f4:cb:fc:97:b7:6f:fc:99:75:68:1d:2b:78:ef: 73:14:e5:b2:9f:ee:21:50:09:c4:5c:08:53:d9:17:e5:9e:d7: 41:4a:58:d0 -----BEGIN CERTIFICATE----- MIIFSDCCBDCgAwIBAgIUWs2LFEn+QGYxlE7lCbE0AC5pWIgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjAwMzM1NDM2MUFGNjZCMkYzNzE1M0I5QTczNjVFRTU3 MkY2ODIyRTAeFw0yNTA4MjMyMDQ1NTZaFw0yNTA4MjQyMjA4NTZaMDMxMTAvBgNV BAMTKEU3MTQwMTc0OEE3RDA1RkVCQURENjA5M0JBODg4MTA3MzY1NTlEMzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCiHk4CkDyp5QhybELIpLYAcOnV b21NyoxG6uh1DvA7wNMboc/BWlGHYJqVXF25VkNslISNC6zyi5vQM0dDCwCjx7ac QRCt8kxUmyY+aG6J3VOYueXv0YcwwVXSP9xgiCQvjLPXwxEeNgq4o8HqJIZGFS+d MGyaSI6gi0hlX3REzEbrpmrh9k8sIp4GYQ/c+WLYxq9VUOqIuYZ0+65ws30HVCTR qupnMS0Da4Yat2wN0JDFe+5YZoqHvgG0+SY3izrpM6BvmEgJCUXtTCZt+qtFZ4GS ZcYufzIgfM84wyyLHahcErFN/+SfyV6EQ/lZku298BPFiWKv7PlTlqiKioU5AgMB AAGjggJSMIICTjAdBgNVHQ4EFgQU5xQBdIp9Bf663WCTuoiBBzZVnTUwHwYDVR0j BBgwFoAUYAM1Q2GvZrLzcVO5pzZe5XL2gi4wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZDdlNDU5MmUtMjNjMC00Y2NjLTk0ZGEtNmM5NTgwN2Y4 M2U3LzYvNjAwMzM1NDM2MUFGNjZCMkYzNzE1M0I5QTczNjVFRTU3MkY2ODIyRS5j cmwwbwYIKwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL2tyaWxsLjQ3 MjcyLm5ldC9yZXBvL0hZRUhPU1QvNS82MDAzMzU0MzYxQUY2NkIyRjM3MTUzQjlB NzM2NUVFNTcyRjY4MjJFLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2Q3ZTQ1OTJlLTIzYzAtNGNjYy05NGRhLTZjOTU4MDdmODNlNy82LzYwMDMzNTQz NjFBRjY2QjJGMzcxNTNCOUE3MzY1RUU1NzJGNjgyMkUubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAIRp2U 3m/fAWGSN9/4SQUw1jRkLXjNG69s9BX5Kyhw2xKnpgJJgEkbRXDwc/R1SBDNCips 9X2fmymooMVz5NTRz0N8fJnGhSVPuVUekTVnVec7NbkFx9DshKS5thRV5kCk3lUJ 9i64Mt1Q04QQ1ciQz8Z6+wk6texhqf2W2mfMuQoVPY85Wpk+GpPunB/Vm9ARcmnY fasPzzFasZvcko+YBjIn3ep/ao0C0UEanSVdnun4SN4hV7esy6qxkoZ0LatPW6gz W7RlBWKiltIA5rwjMutpBLTA+6uqs6XJ9Mv8l7dv/Jl1aB0reO9zFOWyn+4hUAnE XAhT2RflntdBSljQ -----END CERTIFICATE-----Generated at Sun Aug 24 03:18:34 2025 by rpki-client