$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/6/6003354361AF66B2F37153B9A7365EE572F6822E.mft File: 6003354361AF66B2F37153B9A7365EE572F6822E.mft (raw, json) Hash identifier: 8y2D5bF/KPkuu8d2rqDy1xHJnWxbOxA2oZIegv4yCdo= Subject key identifier: 26:61:E7:62:E7:0A:25:C8:B0:EC:67:F4:20:0B:2D:AD:5D:CD:92:5F Authority key identifier: 60:03:35:43:61:AF:66:B2:F3:71:53:B9:A7:36:5E:E5:72:F6:82:2E Certificate issuer: /CN=6003354361AF66B2F37153B9A7365EE572F6822E Certificate serial: 43EFEA266A9E57152F2863F10EE649EF6686EA22 Authority info access: rsync://krill.47272.net/repo/HYEHOST/5/6003354361AF66B2F37153B9A7365EE572F6822E.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/6/6003354361AF66B2F37153B9A7365EE572F6822E.mft Manifest number: 0148 Signing time: Wed 04 Mar 2026 21:49:28 +0000 Manifest this update: Wed 04 Mar 2026 21:44:28 +0000 Manifest next update: Thu 05 Mar 2026 23:21:28 +0000 Files and hashes: 1: 326130613a363034343a626130323a3a2f34372d3438203d3e20323134373233.roa (hash: hUN5naRtN06Ia8W+gZVWL0PjC5030tIqv7AoahnILWU=) 2: 326130613a363034343a626130303a3a2f34382d3438203d3e20323134373233.roa (hash: hj2OdTJzJ/lMhD2+bSlhDwRPDkQ5RRLmuL3t94lTgMc=) 3: 326130613a363034343a626130303a3a2f34302d3430203d3e20323134373233.roa (hash: QFhWc/Qi1XwFuZFFUxrJkVVsMNht6HRi/KIA9CCJysc=) 4: 6003354361AF66B2F37153B9A7365EE572F6822E.crl (hash: Jn/pkJRy1Dt+RxybfcddEcr5Mr238qM03uMq1yfe3Sg=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/6/6003354361AF66B2F37153B9A7365EE572F6822E.crl rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/6/6003354361AF66B2F37153B9A7365EE572F6822E.mft rsync://krill.47272.net/repo/HYEHOST/5/6003354361AF66B2F37153B9A7365EE572F6822E.cer rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 05 Mar 2026 19:55:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:ef:ea:26:6a:9e:57:15:2f:28:63:f1:0e:e6:49:ef:66:86:ea:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6003354361AF66B2F37153B9A7365EE572F6822E Validity Not Before: Mar 4 21:44:28 2026 GMT Not After : Mar 5 23:21:28 2026 GMT Subject: CN=2661E762E70A25C8B0EC67F4200B2DAD5DCD925F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:64:94:fe:99:86:d6:72:14:16:59:9e:71:a6: d5:d2:d3:f7:42:d7:f3:ae:e3:51:e8:46:aa:73:ce: 47:7b:6c:81:33:d5:01:bd:ab:99:4f:f0:bc:5b:69: d7:72:de:ff:22:d7:be:39:88:bf:df:ad:b8:d8:8c: 9f:d0:04:82:57:a5:59:2c:b2:22:61:fe:73:db:ab: f5:75:b8:3a:fc:18:38:ba:55:6d:03:8e:fd:75:37: 37:7b:6c:7e:5d:71:26:a7:c1:44:23:1e:ed:c2:07: 53:40:e1:48:54:3b:49:7e:28:c9:a0:fb:3d:82:1f: ce:e9:32:e2:01:97:fc:24:c3:d3:1a:3f:83:c7:b6: 47:c3:a7:89:f5:f1:e3:37:0c:f4:ca:9e:0f:a0:26: d5:7b:0f:0c:00:65:82:6a:d7:07:11:49:15:71:d2: e2:60:fa:ce:95:d2:ae:94:3c:89:49:52:a4:de:aa: 8d:69:21:e6:a0:05:50:99:2b:d6:e1:b9:77:99:5a: 02:9c:94:f0:b9:be:ca:97:5b:84:a3:5e:56:dc:ee: f6:9f:65:de:a8:ed:09:c0:5c:08:75:60:08:a3:61: 2d:76:57:59:a5:bc:90:51:6b:b2:70:bb:49:16:0e: a6:eb:b7:7e:3b:78:03:2c:90:c1:b3:ef:01:cf:fe: 01:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:61:E7:62:E7:0A:25:C8:B0:EC:67:F4:20:0B:2D:AD:5D:CD:92:5F X509v3 Authority Key Identifier: keyid:60:03:35:43:61:AF:66:B2:F3:71:53:B9:A7:36:5E:E5:72:F6:82:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/6/6003354361AF66B2F37153B9A7365EE572F6822E.crl Authority Information Access: CA Issuers - URI:rsync://krill.47272.net/repo/HYEHOST/5/6003354361AF66B2F37153B9A7365EE572F6822E.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/6/6003354361AF66B2F37153B9A7365EE572F6822E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b4:fb:da:e6:36:10:a5:9e:22:b5:d0:7a:b9:66:15:ba:67:b7: 7d:39:5e:87:67:44:e3:50:14:d5:45:68:8f:71:d4:ce:ce:c7: e3:fe:9d:08:63:86:51:a6:de:43:d7:34:f1:3b:57:94:1b:1b: 73:03:a6:99:c4:57:16:3b:fd:1c:d0:80:3e:2d:ca:62:f7:bd: 7e:cb:3b:f3:65:27:29:a8:39:f3:bb:23:1e:e1:a4:0b:c4:8d: fe:8d:7a:cc:fe:ec:c2:ec:91:0b:5a:6a:ed:bb:e1:cf:da:6e: a9:94:0a:62:53:8a:8f:a4:36:72:f3:99:a9:c9:90:ba:bf:64: a4:8e:ce:35:88:4e:d7:fb:bc:57:65:9f:0b:4c:51:ef:33:2a: 31:a8:d7:d1:c4:16:94:b2:3f:4a:6e:a2:7f:af:57:e7:a9:24: 13:f5:60:93:3a:4a:29:c9:49:49:c6:d3:3c:5b:bf:39:14:3b: b3:28:6e:c0:f1:a7:46:2d:1f:f2:f7:cd:d2:75:72:64:6c:60: 31:7e:29:1d:a6:4f:4a:11:f9:a9:05:5c:25:33:54:fa:63:d3: d5:66:53:89:ce:85:57:cc:06:22:f6:7b:aa:50:7c:83:02:e2: 9e:9b:5e:f5:3c:08:dc:82:60:c4:c6:97:db:c9:9a:1e:6e:63: 7a:04:6f:7f -----BEGIN CERTIFICATE----- MIIFSDCCBDCgAwIBAgIUQ+/qJmqeVxUvKGPxDuZJ72aG6iIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjAwMzM1NDM2MUFGNjZCMkYzNzE1M0I5QTczNjVFRTU3 MkY2ODIyRTAeFw0yNjAzMDQyMTQ0MjhaFw0yNjAzMDUyMzIxMjhaMDMxMTAvBgNV BAMTKDI2NjFFNzYyRTcwQTI1QzhCMEVDNjdGNDIwMEIyREFENURDRDkyNUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCaZJT+mYbWchQWWZ5xptXS0/dC 1/Ou41HoRqpzzkd7bIEz1QG9q5lP8Lxbaddy3v8i1745iL/frbjYjJ/QBIJXpVks siJh/nPbq/V1uDr8GDi6VW0Djv11Nzd7bH5dcSanwUQjHu3CB1NA4UhUO0l+KMmg +z2CH87pMuIBl/wkw9MaP4PHtkfDp4n18eM3DPTKng+gJtV7DwwAZYJq1wcRSRVx 0uJg+s6V0q6UPIlJUqTeqo1pIeagBVCZK9bhuXeZWgKclPC5vsqXW4SjXlbc7vaf Zd6o7QnAXAh1YAijYS12V1mlvJBRa7Jwu0kWDqbrt347eAMskMGz7wHP/gG9AgMB AAGjggJSMIICTjAdBgNVHQ4EFgQUJmHnYucKJciw7Gf0IAstrV3Nkl8wHwYDVR0j BBgwFoAUYAM1Q2GvZrLzcVO5pzZe5XL2gi4wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZDdlNDU5MmUtMjNjMC00Y2NjLTk0ZGEtNmM5NTgwN2Y4 M2U3LzYvNjAwMzM1NDM2MUFGNjZCMkYzNzE1M0I5QTczNjVFRTU3MkY2ODIyRS5j cmwwbwYIKwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL2tyaWxsLjQ3 MjcyLm5ldC9yZXBvL0hZRUhPU1QvNS82MDAzMzU0MzYxQUY2NkIyRjM3MTUzQjlB NzM2NUVFNTcyRjY4MjJFLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2Q3ZTQ1OTJlLTIzYzAtNGNjYy05NGRhLTZjOTU4MDdmODNlNy82LzYwMDMzNTQz NjFBRjY2QjJGMzcxNTNCOUE3MzY1RUU1NzJGNjgyMkUubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQC0+9rm NhClniK10Hq5ZhW6Z7d9OV6HZ0TjUBTVRWiPcdTOzsfj/p0IY4ZRpt5D1zTxO1eU GxtzA6aZxFcWO/0c0IA+Lcpi971+yzvzZScpqDnzuyMe4aQLxI3+jXrM/uzC7JEL Wmrtu+HP2m6plApiU4qPpDZy85mpyZC6v2Skjs41iE7X+7xXZZ8LTFHvMyoxqNfR xBaUsj9KbqJ/r1fnqSQT9WCTOkopyUlJxtM8W785FDuzKG7A8adGLR/y983SdXJk bGAxfikdpk9KEfmpBVwlM1T6Y9PVZlOJzoVXzAYi9nuqUHyDAuKem171PAjcgmDE xpfbyZoebmN6BG9/ -----END CERTIFICATE-----Generated at Thu Mar 5 04:10:20 2026 by rpki-client