$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/2/575051DD9A9BFA57BCC3A2B982F24E11D9BAD63C.mft File: 575051DD9A9BFA57BCC3A2B982F24E11D9BAD63C.mft (raw, json) Hash identifier: /kig4sgicTkpYpJOrHKALCUYB66qTyQCXPMXsDofBM0= Subject key identifier: BD:B7:10:CB:53:C0:BC:1F:C6:82:33:E9:91:39:CA:57:E1:ED:C1:96 Authority key identifier: 57:50:51:DD:9A:9B:FA:57:BC:C3:A2:B9:82:F2:4E:11:D9:BA:D6:3C Certificate issuer: /CN=575051DD9A9BFA57BCC3A2B982F24E11D9BAD63C Certificate serial: 589B09951585CA5790195A470879776A4D415957 Authority info access: rsync://krill.47272.net/repo/HYEHOST/5/575051DD9A9BFA57BCC3A2B982F24E11D9BAD63C.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/2/575051DD9A9BFA57BCC3A2B982F24E11D9BAD63C.mft Manifest number: 3F Signing time: Thu 09 Apr 2026 03:37:40 +0000 Manifest this update: Thu 09 Apr 2026 03:32:40 +0000 Manifest next update: Fri 10 Apr 2026 06:30:40 +0000 Files and hashes: 1: 575051DD9A9BFA57BCC3A2B982F24E11D9BAD63C.crl (hash: GUk6p6m2qWoNIbBMe2fYPTz4mVQ14j76PYBxVD6zdB8=) 2: 326130613a363034343a623330303a3a2f34322d3432203d3e20323134383039.roa (hash: BTLRcVPEb+mlVG5DuFyrRpHPvxtI1AwdQSn94JOGmgg=) 3: 326130613a363034343a623363303a3a2f34342d3434203d3e203434373333.roa (hash: PYUZfxiEyn8hXYt+1cuoAJSsYY9rYNGWkjKHW4eXgHI=) 4: 326130613a363034343a623334333a3a2f34382d3438203d3e20323039373335.roa (hash: JQ2KOFyxDm27iRQUekpK6hAiBu9T23O5crpHLbozT4Q=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/2/575051DD9A9BFA57BCC3A2B982F24E11D9BAD63C.crl rsync://rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/2/575051DD9A9BFA57BCC3A2B982F24E11D9BAD63C.mft rsync://krill.47272.net/repo/HYEHOST/5/575051DD9A9BFA57BCC3A2B982F24E11D9BAD63C.cer rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 10 Apr 2026 06:30:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:9b:09:95:15:85:ca:57:90:19:5a:47:08:79:77:6a:4d:41:59:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=575051DD9A9BFA57BCC3A2B982F24E11D9BAD63C Validity Not Before: Apr 9 03:32:40 2026 GMT Not After : Apr 10 06:30:40 2026 GMT Subject: CN=BDB710CB53C0BC1FC68233E99139CA57E1EDC196 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:86:fa:4f:82:86:bd:35:75:4c:8e:26:f4:24: b2:21:a4:7c:ee:9f:dc:b1:ee:d7:08:5a:45:c4:b3: 44:30:2b:d9:c6:f1:14:94:d0:90:94:39:1c:79:ca: 7e:74:d1:73:83:a2:ae:b5:db:a1:6c:25:bc:f8:0e: fc:36:0a:a0:1a:e4:2e:7d:e5:11:61:a3:f5:7b:05: 34:9c:35:fa:e9:d8:00:c9:5c:39:5f:50:41:a6:e6: a6:e1:16:24:8d:af:d3:b6:39:85:8b:00:00:10:45: 88:e9:20:a1:b5:28:35:7c:3b:9a:76:33:6b:4c:c1: b0:ef:4d:c9:a1:5a:1a:bb:f1:b7:2e:73:68:0e:e5: e2:99:74:7d:d2:81:03:7f:26:f2:b1:3c:03:a9:23: c4:b1:d6:a3:1f:d7:da:2c:9b:d4:d2:5f:9f:b8:c8: 6c:89:88:c8:70:40:e1:60:a0:6f:1c:79:bf:c6:0a: ce:cc:ea:9c:78:27:89:f6:3c:71:c1:e3:13:26:55: c1:45:6f:90:29:f2:b1:b2:6d:45:de:dc:73:ef:92: e3:6c:6a:26:f8:18:4a:e4:24:52:3d:11:1d:49:7e: f8:64:c1:d5:68:4f:d3:45:a5:9b:b2:11:c1:2b:d7: af:88:ec:ba:33:4b:55:32:7f:5a:c3:a4:f8:aa:12: a7:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:B7:10:CB:53:C0:BC:1F:C6:82:33:E9:91:39:CA:57:E1:ED:C1:96 X509v3 Authority Key Identifier: keyid:57:50:51:DD:9A:9B:FA:57:BC:C3:A2:B9:82:F2:4E:11:D9:BA:D6:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/2/575051DD9A9BFA57BCC3A2B982F24E11D9BAD63C.crl Authority Information Access: CA Issuers - URI:rsync://krill.47272.net/repo/HYEHOST/5/575051DD9A9BFA57BCC3A2B982F24E11D9BAD63C.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/2/575051DD9A9BFA57BCC3A2B982F24E11D9BAD63C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:cf:08:52:1f:9e:51:f4:54:dd:75:7a:ce:ec:d2:1c:5f:a2: 11:26:c2:e9:6e:69:5d:76:8f:df:65:0d:b1:f5:47:50:70:43: e5:f9:18:86:f9:70:a5:2a:67:54:63:2c:5a:41:a9:54:10:7c: cc:0b:98:56:09:13:16:33:26:1d:d9:be:af:71:6f:56:78:bb: cd:07:71:f3:d1:aa:f6:dd:ed:66:d0:37:51:e8:47:67:af:50: ec:1e:7b:d9:ed:6c:d2:9b:32:c6:45:eb:44:7c:b3:ab:74:ef: 83:3a:6e:5e:60:7c:1f:8b:ea:ff:e1:84:75:62:4b:b9:4e:3e: 9a:d0:17:e7:54:7c:c4:dd:7c:6e:c1:55:3b:4e:09:a8:60:b2: e6:01:17:7c:8c:16:0a:04:d2:5c:af:57:6d:ba:7e:16:7f:5d: d1:90:96:b9:a1:e2:09:68:f5:13:37:98:18:7c:c4:73:74:19: cd:2f:ee:e2:66:07:7d:10:1b:31:1e:38:1f:3d:de:ad:c6:09: c5:22:39:43:05:c2:0c:28:8a:da:b7:08:79:67:dc:6b:6a:f6: 0b:fe:7a:fb:1a:56:ea:77:45:1a:58:40:50:6c:2e:07:70:ca: bc:e7:ce:ad:82:29:c7:b8:60:bb:3f:91:9e:b7:76:05:6c:d0: 9d:aa:7b:5b -----BEGIN CERTIFICATE----- MIIFSDCCBDCgAwIBAgIUWJsJlRWFyleQGVpHCHl3ak1BWVcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTc1MDUxREQ5QTlCRkE1N0JDQzNBMkI5ODJGMjRFMTFE OUJBRDYzQzAeFw0yNjA0MDkwMzMyNDBaFw0yNjA0MTAwNjMwNDBaMDMxMTAvBgNV BAMTKEJEQjcxMENCNTNDMEJDMUZDNjgyMzNFOTkxMzlDQTU3RTFFREMxOTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3hvpPgoa9NXVMjib0JLIhpHzu n9yx7tcIWkXEs0QwK9nG8RSU0JCUORx5yn500XODoq6126FsJbz4Dvw2CqAa5C59 5RFho/V7BTScNfrp2ADJXDlfUEGm5qbhFiSNr9O2OYWLAAAQRYjpIKG1KDV8O5p2 M2tMwbDvTcmhWhq78bcuc2gO5eKZdH3SgQN/JvKxPAOpI8Sx1qMf19osm9TSX5+4 yGyJiMhwQOFgoG8ceb/GCs7M6px4J4n2PHHB4xMmVcFFb5Ap8rGybUXe3HPvkuNs aib4GErkJFI9ER1JfvhkwdVoT9NFpZuyEcEr16+I7LozS1Uyf1rDpPiqEqfBAgMB AAGjggJSMIICTjAdBgNVHQ4EFgQUvbcQy1PAvB/GgjPpkTnKV+HtwZYwHwYDVR0j BBgwFoAUV1BR3Zqb+le8w6K5gvJOEdm61jwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNzEwOThjMjMtYTk3Ny00ZjlhLTk3YzktY2Q0ZTc1OWRl YTA5LzIvNTc1MDUxREQ5QTlCRkE1N0JDQzNBMkI5ODJGMjRFMTFEOUJBRDYzQy5j cmwwbwYIKwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL2tyaWxsLjQ3 MjcyLm5ldC9yZXBvL0hZRUhPU1QvNS81NzUwNTFERDlBOUJGQTU3QkNDM0EyQjk4 MkYyNEUxMUQ5QkFENjNDLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzcxMDk4YzIzLWE5NzctNGY5YS05N2M5LWNkNGU3NTlkZWEwOS8yLzU3NTA1MURE OUE5QkZBNTdCQ0MzQTJCOTgyRjI0RTExRDlCQUQ2M0MubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAmzwhS H55R9FTddXrO7NIcX6IRJsLpbmlddo/fZQ2x9UdQcEPl+RiG+XClKmdUYyxaQalU EHzMC5hWCRMWMyYd2b6vcW9WeLvNB3Hz0ar23e1m0DdR6Ednr1DsHnvZ7WzSmzLG RetEfLOrdO+DOm5eYHwfi+r/4YR1Yku5Tj6a0BfnVHzE3XxuwVU7TgmoYLLmARd8 jBYKBNJcr1dtun4Wf13RkJa5oeIJaPUTN5gYfMRzdBnNL+7iZgd9EBsxHjgfPd6t xgnFIjlDBcIMKIratwh5Z9xravYL/nr7Glbqd0UaWEBQbC4HcMq8586tginHuGC7 P5Get3YFbNCdqntb -----END CERTIFICATE-----Generated at Thu Apr 9 23:59:21 2026 by rpki-client