$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/6/6003354361AF66B2F37153B9A7365EE572F6822E.mft File: 6003354361AF66B2F37153B9A7365EE572F6822E.mft (raw, json) Hash identifier: hOCxQJgTPxDdMJiWdpNFQqyx+vhgi+cmIup9n6XgNNw= Subject key identifier: 3D:D8:B4:AD:FB:DA:22:D6:43:C2:3E:FD:22:42:63:A7:B6:CD:49:AD Authority key identifier: 60:03:35:43:61:AF:66:B2:F3:71:53:B9:A7:36:5E:E5:72:F6:82:2E Certificate issuer: /CN=6003354361AF66B2F37153B9A7365EE572F6822E Certificate serial: 68260292EC745AAFDFCCA952460C7F74C88C1A7C Authority info access: rsync://krill.47272.net/repo/HYEHOST/5/6003354361AF66B2F37153B9A7365EE572F6822E.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/6/6003354361AF66B2F37153B9A7365EE572F6822E.mft Manifest number: 0202 Signing time: Thu 23 Jul 2026 07:21:07 +0000 Manifest this update: Thu 23 Jul 2026 07:16:07 +0000 Manifest next update: Fri 24 Jul 2026 08:35:07 +0000 Files and hashes: 1: 6003354361AF66B2F37153B9A7365EE572F6822E.crl (hash: wJwFTlE2+gcFVRTbFd/xVuSDHXk4feNaOjk9Xf8eD0g=) 2: 326130613a363034343a626130303a3a2f34302d3430203d3e20323134373233.roa (hash: Me4H7YZgZygEIvpxgeeEc04IMatngbdJsoUf/hlBlAQ=) 3: 326130613a363034343a626130323a3a2f34372d3438203d3e20323134373233.roa (hash: g+zrmwdq6hWdyayuUZ4HEI1hjl4/P26SKw7jOnKO8XQ=) 4: 326130613a363034343a626130303a3a2f34382d3438203d3e20323134373233.roa (hash: LzTu6U40g1XTezmtW0NeoVe0srZk8dKNtz7kNoofjgM=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/6/6003354361AF66B2F37153B9A7365EE572F6822E.crl rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/6/6003354361AF66B2F37153B9A7365EE572F6822E.mft rsync://krill.47272.net/repo/HYEHOST/5/6003354361AF66B2F37153B9A7365EE572F6822E.cer rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 24 Jul 2026 08:35:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:26:02:92:ec:74:5a:af:df:cc:a9:52:46:0c:7f:74:c8:8c:1a:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6003354361AF66B2F37153B9A7365EE572F6822E Validity Not Before: Jul 23 07:16:07 2026 GMT Not After : Jul 24 08:35:07 2026 GMT Subject: CN=3DD8B4ADFBDA22D643C23EFD224263A7B6CD49AD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:4a:91:8d:6f:2a:21:e4:f7:ac:98:e8:f1:bc: 76:81:7a:ae:06:67:df:a2:d3:ab:22:96:a7:6f:69: 6c:e4:09:a4:10:c8:50:af:04:11:a0:58:11:04:b1: 23:42:97:b8:ee:b8:10:85:3d:6f:f7:9f:fc:b8:0b: 18:af:52:44:58:11:fa:fb:78:58:51:16:41:0b:eb: d5:fe:03:39:aa:f4:80:fb:b8:a7:b9:d7:92:a7:2e: 71:9a:52:a7:70:bf:cc:14:7d:00:c2:bd:d1:39:c9: 32:71:63:53:d7:2d:f2:60:33:0a:d1:71:16:21:60: 92:6d:c6:ac:7b:b7:6e:84:d9:57:8e:55:ae:2c:c1: 61:bd:6e:9f:84:23:69:67:61:75:58:a6:d5:cb:73: 6f:4b:c5:e2:9a:a4:a8:05:b7:f7:81:40:c0:70:b4: c1:ef:c0:c4:a0:58:24:5f:32:15:85:a3:4b:4b:4d: 2a:08:3d:d1:eb:15:17:b2:8e:0d:91:6b:1f:3d:85: b8:a7:23:04:38:56:40:d3:ad:98:83:7c:69:70:66: d5:e6:13:63:ff:40:18:ef:f7:b5:3d:1a:30:24:18: c1:b4:65:8a:bd:55:db:5d:49:7d:5f:c7:99:ea:34: 46:f5:5b:13:e6:1b:7d:e7:4f:69:6f:a0:37:30:c4: 5c:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:D8:B4:AD:FB:DA:22:D6:43:C2:3E:FD:22:42:63:A7:B6:CD:49:AD X509v3 Authority Key Identifier: keyid:60:03:35:43:61:AF:66:B2:F3:71:53:B9:A7:36:5E:E5:72:F6:82:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/6/6003354361AF66B2F37153B9A7365EE572F6822E.crl Authority Information Access: CA Issuers - URI:rsync://krill.47272.net/repo/HYEHOST/5/6003354361AF66B2F37153B9A7365EE572F6822E.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/6/6003354361AF66B2F37153B9A7365EE572F6822E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:d4:c3:9f:46:df:ad:67:11:e5:d3:95:cd:52:f7:fd:b2:af: dc:cb:d6:24:71:3f:d4:3f:37:5b:0e:b6:f1:6a:25:c4:ae:4b: 77:ea:45:1b:b4:cd:a0:db:b5:69:c5:95:4b:aa:c3:53:94:02: 8f:6f:e4:f8:3c:60:c4:e1:52:e9:60:bf:a9:42:99:6d:36:ba: 6e:a4:37:0d:46:d8:fd:e3:cf:73:e9:8e:46:de:79:c3:88:9c: c0:4c:d2:55:55:16:98:30:d2:b2:77:0e:02:89:3d:ec:7c:15: 95:73:91:c7:c7:30:74:ae:cb:ca:a3:9d:d6:23:e7:3d:88:e8: c3:d7:af:35:87:89:b2:15:b2:ee:61:a3:45:3a:19:ca:2c:e1: 47:12:2c:29:2b:04:08:ba:01:80:49:c0:6b:38:2d:ad:6c:e0: 21:dd:52:be:de:b3:6a:2a:e1:63:c0:ce:60:48:67:da:64:93: ee:88:9d:91:55:71:cc:32:0b:57:4a:7d:9a:98:9d:49:5e:7f: c6:fc:a0:5b:ac:ea:cf:6d:34:bb:0b:48:67:05:9d:56:84:06: 8b:37:5d:3f:d2:30:76:f7:73:a5:7e:87:3d:50:88:3f:e5:ba: 7f:36:63:63:17:66:19:bd:64:fd:10:63:be:ad:ef:4f:a3:20: 22:9f:b2:94 -----BEGIN CERTIFICATE----- MIIFSDCCBDCgAwIBAgIUaCYCkux0Wq/fzKlSRgx/dMiMGnwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjAwMzM1NDM2MUFGNjZCMkYzNzE1M0I5QTczNjVFRTU3 MkY2ODIyRTAeFw0yNjA3MjMwNzE2MDdaFw0yNjA3MjQwODM1MDdaMDMxMTAvBgNV BAMTKDNERDhCNEFERkJEQTIyRDY0M0MyM0VGRDIyNDI2M0E3QjZDRDQ5QUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/SpGNbyoh5PesmOjxvHaBeq4G Z9+i06silqdvaWzkCaQQyFCvBBGgWBEEsSNCl7juuBCFPW/3n/y4CxivUkRYEfr7 eFhRFkEL69X+Azmq9ID7uKe515KnLnGaUqdwv8wUfQDCvdE5yTJxY1PXLfJgMwrR cRYhYJJtxqx7t26E2VeOVa4swWG9bp+EI2lnYXVYptXLc29LxeKapKgFt/eBQMBw tMHvwMSgWCRfMhWFo0tLTSoIPdHrFReyjg2Rax89hbinIwQ4VkDTrZiDfGlwZtXm E2P/QBjv97U9GjAkGMG0ZYq9VdtdSX1fx5nqNEb1WxPmG33nT2lvoDcwxFwVAgMB AAGjggJSMIICTjAdBgNVHQ4EFgQUPdi0rfvaItZDwj79IkJjp7bNSa0wHwYDVR0j BBgwFoAUYAM1Q2GvZrLzcVO5pzZe5XL2gi4wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZDdlNDU5MmUtMjNjMC00Y2NjLTk0ZGEtNmM5NTgwN2Y4 M2U3LzYvNjAwMzM1NDM2MUFGNjZCMkYzNzE1M0I5QTczNjVFRTU3MkY2ODIyRS5j cmwwbwYIKwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL2tyaWxsLjQ3 MjcyLm5ldC9yZXBvL0hZRUhPU1QvNS82MDAzMzU0MzYxQUY2NkIyRjM3MTUzQjlB NzM2NUVFNTcyRjY4MjJFLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2Q3ZTQ1OTJlLTIzYzAtNGNjYy05NGRhLTZjOTU4MDdmODNlNy82LzYwMDMzNTQz NjFBRjY2QjJGMzcxNTNCOUE3MzY1RUU1NzJGNjgyMkUubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBj1MOf Rt+tZxHl05XNUvf9sq/cy9YkcT/UPzdbDrbxaiXErkt36kUbtM2g27VpxZVLqsNT lAKPb+T4PGDE4VLpYL+pQpltNrpupDcNRtj9489z6Y5G3nnDiJzATNJVVRaYMNKy dw4CiT3sfBWVc5HHxzB0rsvKo53WI+c9iOjD1681h4myFbLuYaNFOhnKLOFHEiwp KwQIugGAScBrOC2tbOAh3VK+3rNqKuFjwM5gSGfaZJPuiJ2RVXHMMgtXSn2amJ1J Xn/G/KBbrOrPbTS7C0hnBZ1WhAaLN10/0jB293Olfoc9UIg/5bp/NmNjF2YZvWT9 EGO+re9PoyAin7KU -----END CERTIFICATE-----Generated at Thu Jul 23 20:26:50 2026 by rpki-client