$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/6/6003354361AF66B2F37153B9A7365EE572F6822E.mft File: 6003354361AF66B2F37153B9A7365EE572F6822E.mft (raw, json) Hash identifier: 4YZjk9ryp943lQih/sqYZpbtTIXcG79DxK/+Q2hdDpM= Subject key identifier: EA:E9:0A:12:59:A9:76:D2:8D:CD:F4:6A:66:97:4C:F1:7B:DE:35:4E Authority key identifier: 60:03:35:43:61:AF:66:B2:F3:71:53:B9:A7:36:5E:E5:72:F6:82:2E Certificate issuer: /CN=6003354361AF66B2F37153B9A7365EE572F6822E Certificate serial: 3DC563DB733DA2C138746A290933BC9E149F3E16 Authority info access: rsync://krill.47272.net/repo/HYEHOST/5/6003354361AF66B2F37153B9A7365EE572F6822E.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/6/6003354361AF66B2F37153B9A7365EE572F6822E.mft Manifest number: 0213 Signing time: Wed 05 Aug 2026 01:01:03 +0000 Manifest this update: Wed 05 Aug 2026 00:56:03 +0000 Manifest next update: Thu 06 Aug 2026 04:17:03 +0000 Files and hashes: 1: 326130613a363034343a626130323a3a2f34372d3438203d3e20323134373233.roa (hash: g+zrmwdq6hWdyayuUZ4HEI1hjl4/P26SKw7jOnKO8XQ=) 2: 6003354361AF66B2F37153B9A7365EE572F6822E.crl (hash: BDnPaRWQEV7xlD384gk7wtQzKrN1aD4lX4yqR6+9ijk=) 3: 326130613a363034343a626130303a3a2f34302d3430203d3e20323134373233.roa (hash: Me4H7YZgZygEIvpxgeeEc04IMatngbdJsoUf/hlBlAQ=) 4: 326130613a363034343a626130303a3a2f34382d3438203d3e20323134373233.roa (hash: LzTu6U40g1XTezmtW0NeoVe0srZk8dKNtz7kNoofjgM=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/6/6003354361AF66B2F37153B9A7365EE572F6822E.crl rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/6/6003354361AF66B2F37153B9A7365EE572F6822E.mft rsync://krill.47272.net/repo/HYEHOST/5/6003354361AF66B2F37153B9A7365EE572F6822E.cer rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 05 Aug 2026 17:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:c5:63:db:73:3d:a2:c1:38:74:6a:29:09:33:bc:9e:14:9f:3e:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6003354361AF66B2F37153B9A7365EE572F6822E Validity Not Before: Aug 5 00:56:03 2026 GMT Not After : Aug 6 04:17:03 2026 GMT Subject: CN=EAE90A1259A976D28DCDF46A66974CF17BDE354E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:21:a0:76:f4:e0:e7:99:82:3e:69:eb:93:3b: f8:01:16:fe:1f:59:41:13:11:53:fa:06:07:8e:77: d7:f5:e3:1a:32:e9:99:a5:63:63:8a:90:27:f4:7d: 15:2f:69:82:78:94:50:d1:9d:e0:fd:69:d0:17:85: 93:1d:67:22:31:16:b7:2c:76:b3:af:b0:22:d6:ff: 4d:28:8a:9b:e3:68:7e:a1:c6:d2:09:64:cc:10:5c: 00:33:ce:c9:0f:b9:32:73:e8:a2:85:a9:5c:d4:2a: aa:8d:d7:73:09:41:e0:05:60:f6:d1:a1:61:e2:ad: cd:9c:d4:99:69:c9:a0:b0:3c:0d:dc:40:bb:41:0a: f6:9a:7c:45:71:34:c5:19:fe:ac:31:3f:3a:bf:f0: 8c:cf:b5:0d:09:ab:3f:c4:c8:9a:6e:5b:17:32:e7: 2c:23:07:47:ff:b2:0d:bd:61:39:b5:a5:b8:b7:11: 29:60:99:28:2b:83:28:9a:03:5b:e8:11:b7:4d:fe: e3:a7:b7:1b:a2:f7:7b:3c:39:a0:26:c0:4a:43:c5: 74:6b:8f:c9:6d:0c:ec:30:bd:4d:de:55:37:3f:a6: 03:22:3b:8b:81:60:70:cd:ac:f2:a4:16:1d:0e:8e: 0e:51:1f:6d:fb:1e:52:70:4d:60:0c:8f:8c:cd:8a: c9:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:E9:0A:12:59:A9:76:D2:8D:CD:F4:6A:66:97:4C:F1:7B:DE:35:4E X509v3 Authority Key Identifier: keyid:60:03:35:43:61:AF:66:B2:F3:71:53:B9:A7:36:5E:E5:72:F6:82:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/6/6003354361AF66B2F37153B9A7365EE572F6822E.crl Authority Information Access: CA Issuers - URI:rsync://krill.47272.net/repo/HYEHOST/5/6003354361AF66B2F37153B9A7365EE572F6822E.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/6/6003354361AF66B2F37153B9A7365EE572F6822E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:fd:84:b8:d8:82:34:a1:27:35:7b:2c:28:d5:c4:76:fc:84: 33:af:21:ad:49:15:65:58:05:1d:7e:95:8c:92:d6:5c:3d:52: de:b3:bf:26:ad:b5:8a:f1:4a:2c:df:99:89:35:ff:47:4f:5b: e4:42:61:17:26:aa:b5:b1:3b:9b:f7:bc:d5:a6:c4:af:8f:b0: 63:cb:4f:e4:11:db:b2:7c:17:4b:95:fa:95:b1:19:51:e4:82: e9:8f:b5:93:81:54:0a:b0:85:7a:4f:28:15:fb:e6:34:77:1d: 60:70:c1:d1:a6:98:ba:d2:f7:48:26:6f:38:a8:26:87:42:4c: bd:b6:8b:3f:53:b0:32:40:3e:db:d4:eb:2c:01:38:9b:fa:e7: e4:92:1c:ea:a8:c8:1d:4e:57:bc:11:9a:6b:b5:d0:ef:bf:64: 01:00:3f:ef:16:cc:a0:93:70:4c:fa:b8:20:21:78:b5:4a:e1: bd:cf:bf:02:81:34:39:10:3a:eb:a1:95:cf:07:19:a2:14:63: ce:f4:b7:48:42:6c:fa:7e:ae:cf:98:46:dc:8b:df:ca:86:43: 77:55:30:eb:69:df:c8:c3:71:f4:63:ea:c0:ac:77:d8:48:43: e5:79:67:0a:9f:b0:f4:8a:46:6b:af:ab:cb:0c:f2:1a:65:90: 91:2c:7e:69 -----BEGIN CERTIFICATE----- MIIFSDCCBDCgAwIBAgIUPcVj23M9osE4dGopCTO8nhSfPhYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjAwMzM1NDM2MUFGNjZCMkYzNzE1M0I5QTczNjVFRTU3 MkY2ODIyRTAeFw0yNjA4MDUwMDU2MDNaFw0yNjA4MDYwNDE3MDNaMDMxMTAvBgNV BAMTKEVBRTkwQTEyNTlBOTc2RDI4RENERjQ2QTY2OTc0Q0YxN0JERTM1NEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAIaB29ODnmYI+aeuTO/gBFv4f WUETEVP6BgeOd9f14xoy6ZmlY2OKkCf0fRUvaYJ4lFDRneD9adAXhZMdZyIxFrcs drOvsCLW/00oipvjaH6hxtIJZMwQXAAzzskPuTJz6KKFqVzUKqqN13MJQeAFYPbR oWHirc2c1JlpyaCwPA3cQLtBCvaafEVxNMUZ/qwxPzq/8IzPtQ0Jqz/EyJpuWxcy 5ywjB0f/sg29YTm1pbi3ESlgmSgrgyiaA1voEbdN/uOntxui93s8OaAmwEpDxXRr j8ltDOwwvU3eVTc/pgMiO4uBYHDNrPKkFh0Ojg5RH237HlJwTWAMj4zNislDAgMB AAGjggJSMIICTjAdBgNVHQ4EFgQU6ukKElmpdtKNzfRqZpdM8XveNU4wHwYDVR0j BBgwFoAUYAM1Q2GvZrLzcVO5pzZe5XL2gi4wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZDdlNDU5MmUtMjNjMC00Y2NjLTk0ZGEtNmM5NTgwN2Y4 M2U3LzYvNjAwMzM1NDM2MUFGNjZCMkYzNzE1M0I5QTczNjVFRTU3MkY2ODIyRS5j cmwwbwYIKwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL2tyaWxsLjQ3 MjcyLm5ldC9yZXBvL0hZRUhPU1QvNS82MDAzMzU0MzYxQUY2NkIyRjM3MTUzQjlB NzM2NUVFNTcyRjY4MjJFLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2Q3ZTQ1OTJlLTIzYzAtNGNjYy05NGRhLTZjOTU4MDdmODNlNy82LzYwMDMzNTQz NjFBRjY2QjJGMzcxNTNCOUE3MzY1RUU1NzJGNjgyMkUubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBa/YS4 2II0oSc1eywo1cR2/IQzryGtSRVlWAUdfpWMktZcPVLes78mrbWK8Uos35mJNf9H T1vkQmEXJqq1sTub97zVpsSvj7Bjy0/kEduyfBdLlfqVsRlR5ILpj7WTgVQKsIV6 TygV++Y0dx1gcMHRppi60vdIJm84qCaHQky9tos/U7AyQD7b1OssATib+ufkkhzq qMgdTle8EZprtdDvv2QBAD/vFsygk3BM+rggIXi1SuG9z78CgTQ5EDrroZXPBxmi FGPO9LdIQmz6fq7PmEbci9/KhkN3VTDrad/Iw3H0Y+rArHfYSEPleWcKn7D0ikZr r6vLDPIaZZCRLH5p -----END CERTIFICATE-----Generated at Wed Aug 5 02:23:14 2026 by rpki-client