$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/6/6003354361AF66B2F37153B9A7365EE572F6822E.mft File: 6003354361AF66B2F37153B9A7365EE572F6822E.mft (raw, json) Hash identifier: MUUh3gFSHEZTJosMwtB+Lo3zSNlnUpxAwNgi8GZpOZo= Subject key identifier: 26:BA:88:DC:B3:C0:DC:FA:CD:5B:68:BE:7F:5B:6B:12:57:B1:B6:EE Authority key identifier: 60:03:35:43:61:AF:66:B2:F3:71:53:B9:A7:36:5E:E5:72:F6:82:2E Certificate issuer: /CN=6003354361AF66B2F37153B9A7365EE572F6822E Certificate serial: 6A15898181B5008D89534C71D95AFC43D45BD4CB Authority info access: rsync://krill.47272.net/repo/HYEHOST/5/6003354361AF66B2F37153B9A7365EE572F6822E.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/6/6003354361AF66B2F37153B9A7365EE572F6822E.mft Manifest number: 0163 Signing time: Wed 25 Mar 2026 05:16:23 +0000 Manifest this update: Wed 25 Mar 2026 05:11:23 +0000 Manifest next update: Thu 26 Mar 2026 06:40:23 +0000 Files and hashes: 1: 326130613a363034343a626130303a3a2f34382d3438203d3e20323134373233.roa (hash: hj2OdTJzJ/lMhD2+bSlhDwRPDkQ5RRLmuL3t94lTgMc=) 2: 326130613a363034343a626130303a3a2f34302d3430203d3e20323134373233.roa (hash: QFhWc/Qi1XwFuZFFUxrJkVVsMNht6HRi/KIA9CCJysc=) 3: 326130613a363034343a626130323a3a2f34372d3438203d3e20323134373233.roa (hash: hUN5naRtN06Ia8W+gZVWL0PjC5030tIqv7AoahnILWU=) 4: 6003354361AF66B2F37153B9A7365EE572F6822E.crl (hash: 2eMnUAul3j8CfDszSsVgEtag0WvXtCBh3O/KWYP+iPk=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/6/6003354361AF66B2F37153B9A7365EE572F6822E.crl rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/6/6003354361AF66B2F37153B9A7365EE572F6822E.mft rsync://krill.47272.net/repo/HYEHOST/5/6003354361AF66B2F37153B9A7365EE572F6822E.cer rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 26 Mar 2026 06:40:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:15:89:81:81:b5:00:8d:89:53:4c:71:d9:5a:fc:43:d4:5b:d4:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6003354361AF66B2F37153B9A7365EE572F6822E Validity Not Before: Mar 25 05:11:23 2026 GMT Not After : Mar 26 06:40:23 2026 GMT Subject: CN=26BA88DCB3C0DCFACD5B68BE7F5B6B1257B1B6EE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:33:01:32:20:c1:40:90:a0:db:b9:62:c5:00: 05:9e:c9:e5:d6:ee:a2:45:5c:d8:10:fa:6b:a2:40: f5:92:15:cc:78:25:00:47:18:58:e3:46:f1:0f:0b: ec:26:00:88:1a:41:6a:72:99:81:11:84:11:3a:4a: e4:be:17:18:59:a7:2a:a0:b5:0c:9b:4f:2d:8f:b6: 21:64:a1:07:bb:1e:63:ec:d0:1d:2b:4d:e5:ba:3a: 33:78:ed:ce:12:c6:9d:bb:39:5b:e6:86:7f:c7:9c: 1d:06:bc:7e:aa:b2:d1:5d:d6:3c:3f:55:2f:1c:ba: 33:41:3d:a2:45:fb:a1:e1:24:f3:df:40:c3:67:03: 45:56:8a:b4:2d:cf:e5:a3:a6:74:62:2a:a6:6c:fb: a8:62:83:6e:2c:77:98:8a:81:63:40:1b:1a:8b:60: a6:4b:a8:75:da:03:b5:dc:d5:46:77:a8:1a:b1:07: ff:d7:c3:32:9c:64:b0:03:5b:6b:c1:c0:1b:a4:a9: 4d:b9:12:0e:05:27:23:35:67:42:c4:08:8f:47:29: eb:12:0a:05:68:84:71:d2:59:49:54:29:87:5b:fc: 63:49:c9:97:ad:18:f0:c7:c7:ab:f5:41:7c:f3:c1: 3b:63:0a:88:67:62:c5:e3:60:38:08:88:81:42:96: 44:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:BA:88:DC:B3:C0:DC:FA:CD:5B:68:BE:7F:5B:6B:12:57:B1:B6:EE X509v3 Authority Key Identifier: keyid:60:03:35:43:61:AF:66:B2:F3:71:53:B9:A7:36:5E:E5:72:F6:82:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/6/6003354361AF66B2F37153B9A7365EE572F6822E.crl Authority Information Access: CA Issuers - URI:rsync://krill.47272.net/repo/HYEHOST/5/6003354361AF66B2F37153B9A7365EE572F6822E.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/6/6003354361AF66B2F37153B9A7365EE572F6822E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a6:09:0f:8b:22:be:4c:ff:5c:79:bc:8c:6e:59:77:62:20:51: 0a:23:0e:4e:99:31:47:4f:6d:70:db:97:57:ee:b9:f1:2f:58: 68:18:23:77:3f:5d:c2:16:21:4d:9d:55:b3:bf:f8:dc:c9:30: 99:f8:db:50:80:2f:75:be:ae:d3:80:38:ad:64:11:b4:3f:1f: 7a:c0:9a:98:09:8f:d9:e9:70:25:25:d9:92:e4:76:ed:15:07: b4:0d:76:a3:c1:4a:b7:af:a5:09:25:e5:97:c4:0e:9e:d8:10: e1:18:7f:f4:05:5c:f4:d8:8f:8d:63:90:96:be:93:82:10:39: f9:22:79:3b:12:a3:15:af:89:64:1c:d0:9d:4f:b0:e8:d1:83: 66:88:7e:ee:2f:3c:ab:7d:ed:7b:97:9e:fb:e8:36:9f:26:4d: 33:80:6c:26:66:24:2e:3b:ec:cc:cb:bb:a7:5a:f2:52:2d:70: 2c:f8:dc:a9:96:20:66:69:8f:fa:23:fc:52:53:54:75:0b:0b: e9:14:a2:56:3d:0e:ae:ac:d4:2c:16:d3:d5:15:10:19:aa:84: c5:9e:5f:92:f3:8c:41:b5:79:5a:6f:6c:de:ac:ad:37:75:36: 3a:81:8f:04:d3:aa:00:83:f6:ed:40:08:f0:57:75:04:63:ff: 0c:a6:9b:66 -----BEGIN CERTIFICATE----- MIIFSDCCBDCgAwIBAgIUahWJgYG1AI2JU0xx2Vr8Q9Rb1MswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjAwMzM1NDM2MUFGNjZCMkYzNzE1M0I5QTczNjVFRTU3 MkY2ODIyRTAeFw0yNjAzMjUwNTExMjNaFw0yNjAzMjYwNjQwMjNaMDMxMTAvBgNV BAMTKDI2QkE4OERDQjNDMERDRkFDRDVCNjhCRTdGNUI2QjEyNTdCMUI2RUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCUMwEyIMFAkKDbuWLFAAWeyeXW 7qJFXNgQ+muiQPWSFcx4JQBHGFjjRvEPC+wmAIgaQWpymYERhBE6SuS+FxhZpyqg tQybTy2PtiFkoQe7HmPs0B0rTeW6OjN47c4Sxp27OVvmhn/HnB0GvH6qstFd1jw/ VS8cujNBPaJF+6HhJPPfQMNnA0VWirQtz+WjpnRiKqZs+6hig24sd5iKgWNAGxqL YKZLqHXaA7Xc1UZ3qBqxB//XwzKcZLADW2vBwBukqU25Eg4FJyM1Z0LECI9HKesS CgVohHHSWUlUKYdb/GNJyZetGPDHx6v1QXzzwTtjCohnYsXjYDgIiIFClkQRAgMB AAGjggJSMIICTjAdBgNVHQ4EFgQUJrqI3LPA3PrNW2i+f1trElextu4wHwYDVR0j BBgwFoAUYAM1Q2GvZrLzcVO5pzZe5XL2gi4wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZDdlNDU5MmUtMjNjMC00Y2NjLTk0ZGEtNmM5NTgwN2Y4 M2U3LzYvNjAwMzM1NDM2MUFGNjZCMkYzNzE1M0I5QTczNjVFRTU3MkY2ODIyRS5j cmwwbwYIKwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL2tyaWxsLjQ3 MjcyLm5ldC9yZXBvL0hZRUhPU1QvNS82MDAzMzU0MzYxQUY2NkIyRjM3MTUzQjlB NzM2NUVFNTcyRjY4MjJFLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2Q3ZTQ1OTJlLTIzYzAtNGNjYy05NGRhLTZjOTU4MDdmODNlNy82LzYwMDMzNTQz NjFBRjY2QjJGMzcxNTNCOUE3MzY1RUU1NzJGNjgyMkUubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCmCQ+L Ir5M/1x5vIxuWXdiIFEKIw5OmTFHT21w25dX7rnxL1hoGCN3P13CFiFNnVWzv/jc yTCZ+NtQgC91vq7TgDitZBG0Px96wJqYCY/Z6XAlJdmS5HbtFQe0DXajwUq3r6UJ JeWXxA6e2BDhGH/0BVz02I+NY5CWvpOCEDn5Ink7EqMVr4lkHNCdT7Do0YNmiH7u Lzyrfe17l5776DafJk0zgGwmZiQuO+zMy7unWvJSLXAs+NypliBmaY/6I/xSU1R1 CwvpFKJWPQ6urNQsFtPVFRAZqoTFnl+S84xBtXlab2zerK03dTY6gY8E06oAg/bt QAjwV3UEY/8Mpptm -----END CERTIFICATE-----Generated at Wed Mar 25 23:14:13 2026 by rpki-client