$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/6/6003354361AF66B2F37153B9A7365EE572F6822E.mft File: 6003354361AF66B2F37153B9A7365EE572F6822E.mft (raw, json) Hash identifier: fG+VR9lmPONa2HN00Cmt7Ejob1n3nYh83KS0C2Wt78I= Subject key identifier: F3:87:B5:9E:1E:88:E3:E1:1B:2D:48:45:E2:93:59:E5:1B:87:22:E0 Authority key identifier: 60:03:35:43:61:AF:66:B2:F3:71:53:B9:A7:36:5E:E5:72:F6:82:2E Certificate issuer: /CN=6003354361AF66B2F37153B9A7365EE572F6822E Certificate serial: 74AFD29406F2D7014315107419CFD751B6EEDA23 Authority info access: rsync://krill.47272.net/repo/HYEHOST/5/6003354361AF66B2F37153B9A7365EE572F6822E.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/6/6003354361AF66B2F37153B9A7365EE572F6822E.mft Manifest number: 01A4 Signing time: Tue 12 May 2026 23:16:43 +0000 Manifest this update: Tue 12 May 2026 23:11:43 +0000 Manifest next update: Wed 13 May 2026 23:57:43 +0000 Files and hashes: 1: 326130613a363034343a626130323a3a2f34372d3438203d3e20323134373233.roa (hash: hUN5naRtN06Ia8W+gZVWL0PjC5030tIqv7AoahnILWU=) 2: 326130613a363034343a626130303a3a2f34302d3430203d3e20323134373233.roa (hash: QFhWc/Qi1XwFuZFFUxrJkVVsMNht6HRi/KIA9CCJysc=) 3: 326130613a363034343a626130303a3a2f34382d3438203d3e20323134373233.roa (hash: hj2OdTJzJ/lMhD2+bSlhDwRPDkQ5RRLmuL3t94lTgMc=) 4: 6003354361AF66B2F37153B9A7365EE572F6822E.crl (hash: epqlpeuCAEIFMi3UArbYwK7dA8WkzZQS3KDu9R3pjrA=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/6/6003354361AF66B2F37153B9A7365EE572F6822E.crl rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/6/6003354361AF66B2F37153B9A7365EE572F6822E.mft rsync://krill.47272.net/repo/HYEHOST/5/6003354361AF66B2F37153B9A7365EE572F6822E.cer rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 13 May 2026 14:22:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:af:d2:94:06:f2:d7:01:43:15:10:74:19:cf:d7:51:b6:ee:da:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6003354361AF66B2F37153B9A7365EE572F6822E Validity Not Before: May 12 23:11:43 2026 GMT Not After : May 13 23:57:43 2026 GMT Subject: CN=F387B59E1E88E3E11B2D4845E29359E51B8722E0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:92:d9:30:0e:69:50:04:51:34:77:77:e0:4d: 12:c5:de:f1:3b:cc:c5:67:d7:44:68:ac:8a:92:d0: d3:fe:d7:b0:bf:42:40:2e:3c:8f:bf:89:23:21:8e: 82:a9:a7:dc:f8:54:77:03:cc:87:23:48:0a:fd:d9: 00:15:16:6a:d5:d3:4f:1d:ce:19:f4:b7:89:60:fd: ac:63:ef:91:8f:90:c1:7f:e1:95:ec:c1:66:59:42: 9d:af:32:5b:43:b8:47:1c:ac:17:16:bf:9c:77:06: 23:d0:80:55:a9:5c:71:dc:82:66:51:1c:af:72:42: e6:fc:ad:f9:38:0f:58:a3:37:b8:ea:4d:65:62:8d: 52:e7:ed:64:2a:ee:e8:77:2b:6d:5c:87:c8:4b:37: 5c:20:94:13:c0:e0:2f:24:af:8e:95:e6:aa:81:bd: 98:46:c5:72:ab:03:4d:cf:90:82:c0:ae:57:6f:a9: 41:fd:f0:2e:fd:d3:8e:ee:3d:09:c7:d1:2a:fd:e9: d2:f1:c0:d8:b6:1b:5f:21:62:1f:f2:2f:9d:99:a8: cc:3c:7d:58:d4:0f:01:d8:89:bd:bf:f3:0a:29:5c: dd:7f:ad:7f:bb:57:93:ef:ba:5c:8e:ba:bb:4a:7d: 52:ff:b5:cb:1c:63:1f:db:42:03:32:dd:fa:6f:92: 81:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:87:B5:9E:1E:88:E3:E1:1B:2D:48:45:E2:93:59:E5:1B:87:22:E0 X509v3 Authority Key Identifier: keyid:60:03:35:43:61:AF:66:B2:F3:71:53:B9:A7:36:5E:E5:72:F6:82:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/6/6003354361AF66B2F37153B9A7365EE572F6822E.crl Authority Information Access: CA Issuers - URI:rsync://krill.47272.net/repo/HYEHOST/5/6003354361AF66B2F37153B9A7365EE572F6822E.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/6/6003354361AF66B2F37153B9A7365EE572F6822E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:d1:3a:71:ac:91:46:08:48:4f:c0:7d:75:20:a8:c1:96:47: d6:cc:58:8f:a4:17:5e:23:58:84:28:a1:7b:5d:5a:50:a9:95: 6e:25:e4:9b:ae:b4:6d:34:a9:7e:e8:91:93:0d:8f:b4:d2:3a: 1c:57:89:42:db:d2:fe:3e:98:e1:55:18:af:0d:9b:a9:42:b0: 1f:14:80:dd:de:dd:0d:b8:e9:db:a8:31:a0:be:e4:a8:3f:7c: 2c:1c:19:e4:6b:b1:d0:48:64:38:1a:11:24:25:c7:ac:db:40: 43:ed:48:bb:e1:67:3b:18:a8:8a:5c:12:79:4e:21:b0:99:ad: 75:38:f0:18:79:12:b1:ec:5d:c9:3c:0f:e3:53:5c:ff:c2:97: d9:fb:31:59:f3:75:a7:a5:02:bb:e1:d4:26:38:7d:40:c1:50: d1:2b:db:03:aa:29:a2:52:d8:57:cf:40:31:34:5c:57:20:d7: e8:09:63:1d:fd:fd:e9:ec:4d:2d:d9:54:f7:12:f2:0b:05:2e: 1d:8c:6f:21:66:9c:c9:b0:0d:64:bd:2c:59:cc:a8:55:30:31: 49:67:c7:1b:8c:3f:13:c9:4b:75:c7:86:9a:a1:8c:8b:50:82: ce:44:fa:c7:bf:4e:9d:a8:d6:5c:ac:c0:c7:71:9e:d4:a3:4b: a4:76:a5:eb -----BEGIN CERTIFICATE----- MIIFSDCCBDCgAwIBAgIUdK/SlAby1wFDFRB0Gc/XUbbu2iMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjAwMzM1NDM2MUFGNjZCMkYzNzE1M0I5QTczNjVFRTU3 MkY2ODIyRTAeFw0yNjA1MTIyMzExNDNaFw0yNjA1MTMyMzU3NDNaMDMxMTAvBgNV BAMTKEYzODdCNTlFMUU4OEUzRTExQjJENDg0NUUyOTM1OUU1MUI4NzIyRTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDwktkwDmlQBFE0d3fgTRLF3vE7 zMVn10RorIqS0NP+17C/QkAuPI+/iSMhjoKpp9z4VHcDzIcjSAr92QAVFmrV008d zhn0t4lg/axj75GPkMF/4ZXswWZZQp2vMltDuEccrBcWv5x3BiPQgFWpXHHcgmZR HK9yQub8rfk4D1ijN7jqTWVijVLn7WQq7uh3K21ch8hLN1wglBPA4C8kr46V5qqB vZhGxXKrA03PkILArldvqUH98C79047uPQnH0Sr96dLxwNi2G18hYh/yL52ZqMw8 fVjUDwHYib2/8wopXN1/rX+7V5PvulyOurtKfVL/tcscYx/bQgMy3fpvkoFnAgMB AAGjggJSMIICTjAdBgNVHQ4EFgQU84e1nh6I4+EbLUhF4pNZ5RuHIuAwHwYDVR0j BBgwFoAUYAM1Q2GvZrLzcVO5pzZe5XL2gi4wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZDdlNDU5MmUtMjNjMC00Y2NjLTk0ZGEtNmM5NTgwN2Y4 M2U3LzYvNjAwMzM1NDM2MUFGNjZCMkYzNzE1M0I5QTczNjVFRTU3MkY2ODIyRS5j cmwwbwYIKwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL2tyaWxsLjQ3 MjcyLm5ldC9yZXBvL0hZRUhPU1QvNS82MDAzMzU0MzYxQUY2NkIyRjM3MTUzQjlB NzM2NUVFNTcyRjY4MjJFLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2Q3ZTQ1OTJlLTIzYzAtNGNjYy05NGRhLTZjOTU4MDdmODNlNy82LzYwMDMzNTQz NjFBRjY2QjJGMzcxNTNCOUE3MzY1RUU1NzJGNjgyMkUubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAb0Tpx rJFGCEhPwH11IKjBlkfWzFiPpBdeI1iEKKF7XVpQqZVuJeSbrrRtNKl+6JGTDY+0 0jocV4lC29L+PpjhVRivDZupQrAfFIDd3t0NuOnbqDGgvuSoP3wsHBnka7HQSGQ4 GhEkJces20BD7Ui74Wc7GKiKXBJ5TiGwma11OPAYeRKx7F3JPA/jU1z/wpfZ+zFZ 83WnpQK74dQmOH1AwVDRK9sDqimiUthXz0AxNFxXINfoCWMd/f3p7E0t2VT3EvIL BS4djG8hZpzJsA1kvSxZzKhVMDFJZ8cbjD8TyUt1x4aaoYyLUILORPrHv06dqNZc rMDHcZ7Uo0ukdqXr -----END CERTIFICATE-----Generated at Wed May 13 05:02:53 2026 by rpki-client