$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/6/6003354361AF66B2F37153B9A7365EE572F6822E.mft File: 6003354361AF66B2F37153B9A7365EE572F6822E.mft (raw, json) Hash identifier: WUDD+p9bKH0zzH0mdNlbJmp+XO/UAy+AG7JQuETQRwg= Subject key identifier: A2:1A:49:E5:A2:4B:38:B0:24:A3:DD:FE:FC:68:C8:87:36:06:E8:2D Authority key identifier: 60:03:35:43:61:AF:66:B2:F3:71:53:B9:A7:36:5E:E5:72:F6:82:2E Certificate issuer: /CN=6003354361AF66B2F37153B9A7365EE572F6822E Certificate serial: 3451B4C8438D5233BA9AACB9A9F1E21E2B0E504B Authority info access: rsync://krill.47272.net/repo/HYEHOST/5/6003354361AF66B2F37153B9A7365EE572F6822E.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/6/6003354361AF66B2F37153B9A7365EE572F6822E.mft Manifest number: 92 Signing time: Sun 19 Oct 2025 13:47:48 +0000 Manifest this update: Sun 19 Oct 2025 13:42:48 +0000 Manifest next update: Mon 20 Oct 2025 17:39:48 +0000 Files and hashes: 1: 6003354361AF66B2F37153B9A7365EE572F6822E.crl (hash: jrlB4Mc6cglbXJICE/6NtRxFrlznzp1uZ6zw6jYVObo=) 2: 326130613a363034343a626130303a3a2f34302d3430203d3e20323134373233.roa (hash: QFhWc/Qi1XwFuZFFUxrJkVVsMNht6HRi/KIA9CCJysc=) 3: 326130613a363034343a626130323a3a2f34372d3438203d3e20323134373233.roa (hash: hUN5naRtN06Ia8W+gZVWL0PjC5030tIqv7AoahnILWU=) 4: 326130613a363034343a626130303a3a2f34382d3438203d3e20323134373233.roa (hash: hj2OdTJzJ/lMhD2+bSlhDwRPDkQ5RRLmuL3t94lTgMc=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/6/6003354361AF66B2F37153B9A7365EE572F6822E.crl rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/6/6003354361AF66B2F37153B9A7365EE572F6822E.mft rsync://krill.47272.net/repo/HYEHOST/5/6003354361AF66B2F37153B9A7365EE572F6822E.cer rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 20 Oct 2025 12:13:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:51:b4:c8:43:8d:52:33:ba:9a:ac:b9:a9:f1:e2:1e:2b:0e:50:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6003354361AF66B2F37153B9A7365EE572F6822E Validity Not Before: Oct 19 13:42:48 2025 GMT Not After : Oct 20 17:39:48 2025 GMT Subject: CN=A21A49E5A24B38B024A3DDFEFC68C8873606E82D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:8f:8b:b1:ff:89:6e:90:8b:78:38:ea:95:c4: c5:46:94:e9:f4:b6:d7:01:9c:a0:6f:5f:57:fa:80: 6e:0a:8e:fe:f9:3a:92:7a:97:a5:aa:e0:b7:f6:22: 78:4d:89:d2:f6:77:fc:5a:ce:49:d5:e8:ee:9b:40: bb:14:55:ed:aa:61:86:c4:0a:0a:a6:47:da:4f:7e: 98:c4:30:64:d7:6e:76:d6:3a:e1:eb:a6:94:40:12: 20:69:57:15:5c:3b:61:99:9f:53:b7:9b:89:a9:48: ef:c8:06:af:e3:6c:2b:45:bc:2f:52:f5:10:55:cc: 4c:eb:b1:46:39:d8:b9:c0:be:32:77:96:3a:c5:02: a9:23:6a:46:64:6a:3a:a4:23:5f:36:0b:a8:ad:08: e6:2e:e3:15:5e:a1:ef:3f:af:f0:63:a6:ef:95:a0: ad:1a:5d:4c:d4:d6:a4:57:57:ec:77:06:84:72:06: 97:72:de:4b:60:cd:70:32:50:ea:35:82:62:94:f5: 6e:00:e3:41:13:86:8d:4a:71:e3:fb:77:1c:fc:77: 31:2c:a1:58:6a:28:c2:d8:c4:24:fe:7d:0f:bf:d2: 24:78:59:58:c0:ca:dc:c4:38:c7:06:03:27:c5:d0: 34:55:14:da:a4:da:1d:30:6a:46:2b:45:2f:61:ff: 61:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:1A:49:E5:A2:4B:38:B0:24:A3:DD:FE:FC:68:C8:87:36:06:E8:2D X509v3 Authority Key Identifier: keyid:60:03:35:43:61:AF:66:B2:F3:71:53:B9:A7:36:5E:E5:72:F6:82:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/6/6003354361AF66B2F37153B9A7365EE572F6822E.crl Authority Information Access: CA Issuers - URI:rsync://krill.47272.net/repo/HYEHOST/5/6003354361AF66B2F37153B9A7365EE572F6822E.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/6/6003354361AF66B2F37153B9A7365EE572F6822E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bf:bc:18:6d:d7:38:65:f1:5b:ab:e2:cc:4b:4c:69:b8:a4:b1: f4:5b:9e:0e:9e:7a:bf:f4:d6:3d:a5:ee:1d:30:29:af:25:ff: 1b:dd:74:26:f7:f2:33:d7:a9:29:75:5b:4b:ad:d5:15:8a:e6: c1:f1:f6:f5:49:a7:a9:16:b1:dd:eb:12:d8:0c:fd:99:38:9c: 61:39:ee:ff:d1:52:72:e3:dc:02:95:36:36:96:a9:bd:6a:30: b9:af:72:ce:7d:68:82:01:d5:0e:2a:4e:59:c4:60:90:f0:1e: 58:ef:fa:17:1a:6d:2d:a6:c5:80:fb:31:3b:d4:fb:af:8b:5b: 86:bf:19:3b:b1:c9:dd:b9:95:de:cd:a5:0e:8d:89:8d:df:8c: 64:5f:63:fb:7a:aa:de:78:2e:41:a8:88:e4:f5:40:29:4d:45: dc:60:25:b1:d2:88:9f:0f:91:80:d5:9e:c0:e9:26:c2:64:45: 9e:f3:b2:12:be:ba:c1:12:93:8b:63:e2:43:1b:30:c4:c4:15: cd:97:74:ca:5b:8f:aa:c2:4e:b8:74:39:29:cf:a8:e5:fc:5f: 36:eb:3b:c4:76:b7:f7:08:6c:8b:e5:76:12:55:c9:c8:8c:4c: 69:ee:50:a0:6e:ca:55:ea:8c:f8:51:e9:13:af:b1:b9:ae:1e: 79:96:f5:f1 -----BEGIN CERTIFICATE----- MIIFSDCCBDCgAwIBAgIUNFG0yEONUjO6mqy5qfHiHisOUEswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjAwMzM1NDM2MUFGNjZCMkYzNzE1M0I5QTczNjVFRTU3 MkY2ODIyRTAeFw0yNTEwMTkxMzQyNDhaFw0yNTEwMjAxNzM5NDhaMDMxMTAvBgNV BAMTKEEyMUE0OUU1QTI0QjM4QjAyNEEzRERGRUZDNjhDODg3MzYwNkU4MkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQj4ux/4lukIt4OOqVxMVGlOn0 ttcBnKBvX1f6gG4Kjv75OpJ6l6Wq4Lf2InhNidL2d/xazknV6O6bQLsUVe2qYYbE CgqmR9pPfpjEMGTXbnbWOuHrppRAEiBpVxVcO2GZn1O3m4mpSO/IBq/jbCtFvC9S 9RBVzEzrsUY52LnAvjJ3ljrFAqkjakZkajqkI182C6itCOYu4xVeoe8/r/Bjpu+V oK0aXUzU1qRXV+x3BoRyBpdy3ktgzXAyUOo1gmKU9W4A40ETho1KceP7dxz8dzEs oVhqKMLYxCT+fQ+/0iR4WVjAytzEOMcGAyfF0DRVFNqk2h0wakYrRS9h/2FRAgMB AAGjggJSMIICTjAdBgNVHQ4EFgQUohpJ5aJLOLAko93+/GjIhzYG6C0wHwYDVR0j BBgwFoAUYAM1Q2GvZrLzcVO5pzZe5XL2gi4wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZDdlNDU5MmUtMjNjMC00Y2NjLTk0ZGEtNmM5NTgwN2Y4 M2U3LzYvNjAwMzM1NDM2MUFGNjZCMkYzNzE1M0I5QTczNjVFRTU3MkY2ODIyRS5j cmwwbwYIKwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL2tyaWxsLjQ3 MjcyLm5ldC9yZXBvL0hZRUhPU1QvNS82MDAzMzU0MzYxQUY2NkIyRjM3MTUzQjlB NzM2NUVFNTcyRjY4MjJFLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2Q3ZTQ1OTJlLTIzYzAtNGNjYy05NGRhLTZjOTU4MDdmODNlNy82LzYwMDMzNTQz NjFBRjY2QjJGMzcxNTNCOUE3MzY1RUU1NzJGNjgyMkUubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQC/vBht 1zhl8Vur4sxLTGm4pLH0W54Onnq/9NY9pe4dMCmvJf8b3XQm9/Iz16kpdVtLrdUV iubB8fb1SaepFrHd6xLYDP2ZOJxhOe7/0VJy49wClTY2lqm9ajC5r3LOfWiCAdUO Kk5ZxGCQ8B5Y7/oXGm0tpsWA+zE71Puvi1uGvxk7scnduZXezaUOjYmN34xkX2P7 eqreeC5BqIjk9UApTUXcYCWx0oifD5GA1Z7A6SbCZEWe87ISvrrBEpOLY+JDGzDE xBXNl3TKW4+qwk64dDkpz6jl/F826zvEdrf3CGyL5XYSVcnIjExp7lCgbspV6oz4 UekTr7G5rh55lvXx -----END CERTIFICATE-----Generated at Mon Oct 20 00:08:03 2025 by rpki-client