$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/2/575051DD9A9BFA57BCC3A2B982F24E11D9BAD63C.mft File: 575051DD9A9BFA57BCC3A2B982F24E11D9BAD63C.mft (raw, json) Hash identifier: 6/aA2RWWPh5cuKSVoJjR4XG6b21EsoI9lCYKkf++i9Y= Subject key identifier: 8B:C4:A6:3D:B9:53:84:FA:14:17:BE:F5:2F:07:B5:8B:30:94:1E:D1 Authority key identifier: 57:50:51:DD:9A:9B:FA:57:BC:C3:A2:B9:82:F2:4E:11:D9:BA:D6:3C Certificate issuer: /CN=575051DD9A9BFA57BCC3A2B982F24E11D9BAD63C Certificate serial: 57EDF2514E2F744D351FD4F4C781916357DDEC9F Authority info access: rsync://krill.47272.net/repo/HYEHOST/5/575051DD9A9BFA57BCC3A2B982F24E11D9BAD63C.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/2/575051DD9A9BFA57BCC3A2B982F24E11D9BAD63C.mft Manifest number: 7D Signing time: Mon 25 May 2026 08:03:55 +0000 Manifest this update: Mon 25 May 2026 07:58:55 +0000 Manifest next update: Tue 26 May 2026 09:56:55 +0000 Files and hashes: 1: 575051DD9A9BFA57BCC3A2B982F24E11D9BAD63C.crl (hash: WBezS/OXhmf0TfiYo/Y/EryNIIOPz6ZVtr3MDcLxWaY=) 2: 326130613a363034343a623363303a3a2f34342d3434203d3e203434373333.roa (hash: PYUZfxiEyn8hXYt+1cuoAJSsYY9rYNGWkjKHW4eXgHI=) 3: 326130613a363034343a623334333a3a2f34382d3438203d3e20323039373335.roa (hash: JQ2KOFyxDm27iRQUekpK6hAiBu9T23O5crpHLbozT4Q=) 4: 326130613a363034343a623330303a3a2f34322d3432203d3e20323134383039.roa (hash: BTLRcVPEb+mlVG5DuFyrRpHPvxtI1AwdQSn94JOGmgg=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/2/575051DD9A9BFA57BCC3A2B982F24E11D9BAD63C.crl rsync://rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/2/575051DD9A9BFA57BCC3A2B982F24E11D9BAD63C.mft rsync://krill.47272.net/repo/HYEHOST/5/575051DD9A9BFA57BCC3A2B982F24E11D9BAD63C.cer rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 26 May 2026 08:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:ed:f2:51:4e:2f:74:4d:35:1f:d4:f4:c7:81:91:63:57:dd:ec:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=575051DD9A9BFA57BCC3A2B982F24E11D9BAD63C Validity Not Before: May 25 07:58:55 2026 GMT Not After : May 26 09:56:55 2026 GMT Subject: CN=8BC4A63DB95384FA1417BEF52F07B58B30941ED1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:b5:ec:3b:e3:59:d3:00:94:b6:58:fa:fa:bb: 5c:5d:fb:12:9b:ce:c5:a7:e6:1e:9d:78:c5:1e:c9: ef:d6:7c:9c:3f:86:eb:5c:0a:d2:b5:7c:e3:34:32: 2f:e3:25:31:37:50:30:77:01:25:15:04:60:0f:b7: 6f:af:b0:e5:60:c5:00:86:ab:03:5d:f1:c1:09:21: b2:09:dc:f7:c1:d5:3a:0b:55:44:e4:6b:5c:de:41: d5:3f:cf:c9:3d:53:a1:8a:8d:f6:43:62:a2:6a:08: 3b:f3:ce:fb:fe:70:c5:32:2b:7e:3f:f4:23:52:5d: 2d:49:08:28:8c:38:80:5b:14:ed:17:ef:49:8e:17: 42:2d:85:a5:f5:5e:e6:f2:6d:6b:23:1a:3f:8d:28: c9:3f:bb:7e:12:47:81:a7:4a:09:ab:ab:8e:aa:88: 03:69:5f:84:4e:db:93:5d:5a:ba:ce:44:e8:bf:75: 85:17:ac:9d:42:31:44:53:cf:e2:95:8c:d8:d0:31: dd:e8:d2:74:09:69:93:a0:94:66:0a:61:4b:3f:0e: 06:9e:84:82:92:e0:dd:41:0b:71:5c:e6:e9:3b:f0: cb:26:c4:8c:ca:bb:13:bc:66:83:7e:78:2c:f3:de: 9c:6d:5c:fd:9f:a8:9a:17:c5:24:54:ee:87:4c:b7: 27:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:C4:A6:3D:B9:53:84:FA:14:17:BE:F5:2F:07:B5:8B:30:94:1E:D1 X509v3 Authority Key Identifier: keyid:57:50:51:DD:9A:9B:FA:57:BC:C3:A2:B9:82:F2:4E:11:D9:BA:D6:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/2/575051DD9A9BFA57BCC3A2B982F24E11D9BAD63C.crl Authority Information Access: CA Issuers - URI:rsync://krill.47272.net/repo/HYEHOST/5/575051DD9A9BFA57BCC3A2B982F24E11D9BAD63C.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/2/575051DD9A9BFA57BCC3A2B982F24E11D9BAD63C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:ce:a4:1c:74:bc:05:77:3e:a8:e9:4f:a7:6f:5f:99:fe:10: d0:71:77:33:0c:de:33:63:42:3d:f1:13:be:d2:65:b9:c7:de: 73:4a:e1:53:55:27:48:ca:f6:61:d7:40:5a:b7:51:f7:ab:53: 4f:66:f8:af:c5:65:8b:3f:66:90:2e:df:f2:c7:03:db:fc:01: 46:9d:15:71:f4:24:7b:be:65:ea:c7:94:40:bc:0e:8f:51:88: 14:54:f3:7c:40:59:2d:5d:35:27:d0:14:76:f0:f6:f6:39:63: dc:a9:cc:0c:e6:1e:0c:a3:e3:a0:e0:18:8a:03:6a:a2:96:46: 29:a2:0c:0c:83:69:af:3e:5b:83:63:c5:e9:3a:d7:c8:99:42: e2:7d:1b:fe:3f:18:08:a6:63:f5:1b:20:1b:d3:4b:20:6d:77: d2:8b:63:cb:16:74:aa:cb:c5:09:70:69:c3:b4:7d:ee:f6:04: c2:31:0a:eb:18:a7:46:ae:a4:0d:ce:a2:8d:d7:4d:91:6c:23: 1f:69:18:f1:a3:f6:65:54:8f:40:67:f4:c3:f7:8d:a1:db:9a: 42:90:07:28:77:8f:ad:e8:61:1d:c8:18:37:28:37:c4:81:0a: a3:05:e0:c8:f8:4a:e0:98:8a:2d:68:ce:57:c4:e7:9b:cc:86: b5:3e:dd:6a -----BEGIN CERTIFICATE----- MIIFSDCCBDCgAwIBAgIUV+3yUU4vdE01H9T0x4GRY1fd7J8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTc1MDUxREQ5QTlCRkE1N0JDQzNBMkI5ODJGMjRFMTFE OUJBRDYzQzAeFw0yNjA1MjUwNzU4NTVaFw0yNjA1MjYwOTU2NTVaMDMxMTAvBgNV BAMTKDhCQzRBNjNEQjk1Mzg0RkExNDE3QkVGNTJGMDdCNThCMzA5NDFFRDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5tew741nTAJS2WPr6u1xd+xKb zsWn5h6deMUeye/WfJw/hutcCtK1fOM0Mi/jJTE3UDB3ASUVBGAPt2+vsOVgxQCG qwNd8cEJIbIJ3PfB1ToLVUTka1zeQdU/z8k9U6GKjfZDYqJqCDvzzvv+cMUyK34/ 9CNSXS1JCCiMOIBbFO0X70mOF0IthaX1XubybWsjGj+NKMk/u34SR4GnSgmrq46q iANpX4RO25NdWrrOROi/dYUXrJ1CMURTz+KVjNjQMd3o0nQJaZOglGYKYUs/Dgae hIKS4N1BC3Fc5uk78MsmxIzKuxO8ZoN+eCzz3pxtXP2fqJoXxSRU7odMtye/AgMB AAGjggJSMIICTjAdBgNVHQ4EFgQUi8SmPblThPoUF771Lwe1izCUHtEwHwYDVR0j BBgwFoAUV1BR3Zqb+le8w6K5gvJOEdm61jwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNzEwOThjMjMtYTk3Ny00ZjlhLTk3YzktY2Q0ZTc1OWRl YTA5LzIvNTc1MDUxREQ5QTlCRkE1N0JDQzNBMkI5ODJGMjRFMTFEOUJBRDYzQy5j cmwwbwYIKwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL2tyaWxsLjQ3 MjcyLm5ldC9yZXBvL0hZRUhPU1QvNS81NzUwNTFERDlBOUJGQTU3QkNDM0EyQjk4 MkYyNEUxMUQ5QkFENjNDLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzcxMDk4YzIzLWE5NzctNGY5YS05N2M5LWNkNGU3NTlkZWEwOS8yLzU3NTA1MURE OUE5QkZBNTdCQ0MzQTJCOTgyRjI0RTExRDlCQUQ2M0MubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQB7zqQc dLwFdz6o6U+nb1+Z/hDQcXczDN4zY0I98RO+0mW5x95zSuFTVSdIyvZh10Bat1H3 q1NPZvivxWWLP2aQLt/yxwPb/AFGnRVx9CR7vmXqx5RAvA6PUYgUVPN8QFktXTUn 0BR28Pb2OWPcqcwM5h4Mo+Og4BiKA2qilkYpogwMg2mvPluDY8XpOtfImULifRv+ PxgIpmP1GyAb00sgbXfSi2PLFnSqy8UJcGnDtH3u9gTCMQrrGKdGrqQNzqKN102R bCMfaRjxo/ZlVI9AZ/TD942h25pCkAcod4+t6GEdyBg3KDfEgQqjBeDI+ErgmIot aM5XxOebzIa1Pt1q -----END CERTIFICATE-----Generated at Mon May 25 15:46:31 2026 by rpki-client