$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/6e7f747e-ff68-4fa2-b2e3-f6ede548a320/2/CE62AFC506F1860480AAF6A723393278644CFD7F.mft File: CE62AFC506F1860480AAF6A723393278644CFD7F.mft (raw, json) Hash identifier: Uf8Z7t3ScPh+X/89IH6d5Ahk5JQdtGXS+pc2ssWMsw8= Subject key identifier: 72:08:A9:96:3C:A2:47:43:41:91:18:47:CC:72:55:70:18:A1:AE:47 Authority key identifier: CE:62:AF:C5:06:F1:86:04:80:AA:F6:A7:23:39:32:78:64:4C:FD:7F Certificate issuer: /CN=CE62AFC506F1860480AAF6A723393278644CFD7F Certificate serial: 7A05378852E4ED8909E16268421D359110FCA40F Authority info access: rsync://krill.47272.net/repo/HYEHOST/5/CE62AFC506F1860480AAF6A723393278644CFD7F.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/6e7f747e-ff68-4fa2-b2e3-f6ede548a320/2/CE62AFC506F1860480AAF6A723393278644CFD7F.mft Manifest number: 57 Signing time: Thu 09 Apr 2026 07:05:06 +0000 Manifest this update: Thu 09 Apr 2026 07:00:06 +0000 Manifest next update: Fri 10 Apr 2026 08:14:06 +0000 Files and hashes: 1: CE62AFC506F1860480AAF6A723393278644CFD7F.crl (hash: k/El6BN8z0olhzrUETAgxKwDTPFayr78DoQV1YqcFxg=) 2: 326130663a363238333a663030303a3a2f33362d3438203d3e20323135363835.roa (hash: bftpMskrnD/aa36IYmV90P4CJu+vNDx21LpK22sMgD4=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/6e7f747e-ff68-4fa2-b2e3-f6ede548a320/2/CE62AFC506F1860480AAF6A723393278644CFD7F.crl rsync://rsync.paas.rpki.ripe.net/repository/6e7f747e-ff68-4fa2-b2e3-f6ede548a320/2/CE62AFC506F1860480AAF6A723393278644CFD7F.mft rsync://krill.47272.net/repo/HYEHOST/5/CE62AFC506F1860480AAF6A723393278644CFD7F.cer rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 10 Apr 2026 08:14:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:05:37:88:52:e4:ed:89:09:e1:62:68:42:1d:35:91:10:fc:a4:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CE62AFC506F1860480AAF6A723393278644CFD7F Validity Not Before: Apr 9 07:00:06 2026 GMT Not After : Apr 10 08:14:06 2026 GMT Subject: CN=7208A9963CA2474341911847CC72557018A1AE47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:b1:10:bc:1d:17:e0:b1:0e:ea:7d:78:46:2e: 00:2d:13:e5:20:21:9f:8c:51:d1:f7:1c:28:3f:cb: 37:87:79:9f:b4:22:a8:75:a0:4b:37:a1:79:fc:46: c2:80:33:25:1a:f1:bc:b8:c1:65:d0:c4:7f:97:38: 27:f6:02:07:90:97:9a:b7:3d:96:67:6b:79:18:ad: b4:2b:77:27:96:64:b3:b3:f7:04:54:01:03:8b:b0: c5:89:8e:84:75:2b:5d:d2:e5:95:46:f4:74:98:05: 63:0a:1b:5e:dd:07:45:96:15:92:0f:74:3b:10:b4: 42:26:b3:ef:89:2b:6e:7c:9b:bb:3d:49:19:cc:58: 7c:79:aa:d6:64:bf:df:aa:0c:25:d2:2b:88:17:af: 4b:13:95:46:9a:7c:8b:71:17:3d:6b:0b:d7:c3:5c: 42:87:5d:be:eb:3a:ae:9f:4e:76:bc:3c:1f:30:be: ec:a1:9f:fa:f3:ec:4b:e8:cc:d8:98:80:3f:c3:3d: fd:cf:83:10:e5:9f:72:ce:07:c5:09:a0:0b:25:79: 7e:52:06:23:7f:8d:55:24:97:b4:78:24:7a:8c:0d: bf:52:00:b0:a6:42:77:53:cd:f2:25:2d:fe:bf:64: 22:49:50:96:e0:71:02:8a:5b:3a:57:47:dc:f6:07: da:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:08:A9:96:3C:A2:47:43:41:91:18:47:CC:72:55:70:18:A1:AE:47 X509v3 Authority Key Identifier: keyid:CE:62:AF:C5:06:F1:86:04:80:AA:F6:A7:23:39:32:78:64:4C:FD:7F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/6e7f747e-ff68-4fa2-b2e3-f6ede548a320/2/CE62AFC506F1860480AAF6A723393278644CFD7F.crl Authority Information Access: CA Issuers - URI:rsync://krill.47272.net/repo/HYEHOST/5/CE62AFC506F1860480AAF6A723393278644CFD7F.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6e7f747e-ff68-4fa2-b2e3-f6ede548a320/2/CE62AFC506F1860480AAF6A723393278644CFD7F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a1:f5:a6:1a:af:73:ae:e9:bb:21:19:b8:82:70:1a:78:f1:f2: c1:62:bd:07:93:40:0b:b1:16:8f:6b:8e:11:f8:7c:07:b2:76: 13:43:20:31:6f:8e:c7:42:1a:53:85:2b:fa:cc:5b:c3:7a:03: b9:9c:3c:3d:d5:13:9c:b8:80:d9:5e:7f:12:09:7c:5a:78:0e: b7:6e:81:c0:38:0c:21:11:27:37:02:09:19:fa:5a:5f:6f:ca: 77:69:3d:a9:96:e7:78:f1:91:ff:2d:88:b2:61:9e:76:4d:a4: 5b:6e:72:73:f4:8c:ba:8d:bb:e2:c7:9f:db:22:e3:25:e7:55: a9:dc:26:0e:48:a3:c5:0e:86:5b:cd:d1:08:14:c9:b5:e2:7b: 6b:18:66:ff:27:7f:7b:a1:a0:58:b6:26:a6:7d:d0:4b:52:5b: e7:a2:9f:a5:f8:c2:ed:89:44:b2:c1:fb:8e:57:41:57:01:72: 6a:09:aa:8f:df:d0:dc:61:2c:81:9d:8d:8a:06:5a:10:c0:86: d4:ee:26:e7:bd:81:dc:01:5e:12:32:71:68:c4:cf:3f:2e:c5: 05:d9:18:00:83:39:4b:d9:f8:3e:76:f9:2e:9f:d5:a6:92:b1: 7e:c4:26:ef:1d:f1:bd:95:54:a7:72:b7:09:1e:6a:43:97:16: 66:1a:28:77 -----BEGIN CERTIFICATE----- MIIFSDCCBDCgAwIBAgIUegU3iFLk7YkJ4WJoQh01kRD8pA8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0U2MkFGQzUwNkYxODYwNDgwQUFGNkE3MjMzOTMyNzg2 NDRDRkQ3RjAeFw0yNjA0MDkwNzAwMDZaFw0yNjA0MTAwODE0MDZaMDMxMTAvBgNV BAMTKDcyMDhBOTk2M0NBMjQ3NDM0MTkxMTg0N0NDNzI1NTcwMThBMUFFNDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnsRC8HRfgsQ7qfXhGLgAtE+Ug IZ+MUdH3HCg/yzeHeZ+0Iqh1oEs3oXn8RsKAMyUa8by4wWXQxH+XOCf2AgeQl5q3 PZZna3kYrbQrdyeWZLOz9wRUAQOLsMWJjoR1K13S5ZVG9HSYBWMKG17dB0WWFZIP dDsQtEIms++JK258m7s9SRnMWHx5qtZkv9+qDCXSK4gXr0sTlUaafItxFz1rC9fD XEKHXb7rOq6fTna8PB8wvuyhn/rz7EvozNiYgD/DPf3PgxDln3LOB8UJoAsleX5S BiN/jVUkl7R4JHqMDb9SALCmQndTzfIlLf6/ZCJJUJbgcQKKWzpXR9z2B9qnAgMB AAGjggJSMIICTjAdBgNVHQ4EFgQUcgipljyiR0NBkRhHzHJVcBihrkcwHwYDVR0j BBgwFoAUzmKvxQbxhgSAqvanIzkyeGRM/X8wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNmU3Zjc0N2UtZmY2OC00ZmEyLWIyZTMtZjZlZGU1NDhh MzIwLzIvQ0U2MkFGQzUwNkYxODYwNDgwQUFGNkE3MjMzOTMyNzg2NDRDRkQ3Ri5j cmwwbwYIKwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL2tyaWxsLjQ3 MjcyLm5ldC9yZXBvL0hZRUhPU1QvNS9DRTYyQUZDNTA2RjE4NjA0ODBBQUY2QTcy MzM5MzI3ODY0NENGRDdGLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzZlN2Y3NDdlLWZmNjgtNGZhMi1iMmUzLWY2ZWRlNTQ4YTMyMC8yL0NFNjJBRkM1 MDZGMTg2MDQ4MEFBRjZBNzIzMzkzMjc4NjQ0Q0ZEN0YubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCh9aYa r3Ou6bshGbiCcBp48fLBYr0Hk0ALsRaPa44R+HwHsnYTQyAxb47HQhpThSv6zFvD egO5nDw91ROcuIDZXn8SCXxaeA63boHAOAwhESc3AgkZ+lpfb8p3aT2plud48ZH/ LYiyYZ52TaRbbnJz9Iy6jbvix5/bIuMl51Wp3CYOSKPFDoZbzdEIFMm14ntrGGb/ J397oaBYtiamfdBLUlvnop+l+MLtiUSywfuOV0FXAXJqCaqP39DcYSyBnY2KBloQ wIbU7ibnvYHcAV4SMnFoxM8/LsUF2RgAgzlL2fg+dvkun9WmkrF+xCbvHfG9lVSn crcJHmpDlxZmGih3 -----END CERTIFICATE-----Generated at Thu Apr 9 23:59:20 2026 by rpki-client