$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/6/6003354361AF66B2F37153B9A7365EE572F6822E.mft File: 6003354361AF66B2F37153B9A7365EE572F6822E.mft (raw, json) Hash identifier: GUgJPM53/k0V5sJ6y7CeWsyWdAtM+iSBXm699oOICw0= Subject key identifier: F2:34:A6:A7:94:FA:13:33:B8:3B:3E:AE:06:53:DE:A6:95:B0:97:9D Authority key identifier: 60:03:35:43:61:AF:66:B2:F3:71:53:B9:A7:36:5E:E5:72:F6:82:2E Certificate issuer: /CN=6003354361AF66B2F37153B9A7365EE572F6822E Certificate serial: 8E292AC715F1ABDB455A83A69AFDB3B6FA7265 Authority info access: rsync://krill.47272.net/repo/HYEHOST/5/6003354361AF66B2F37153B9A7365EE572F6822E.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/6/6003354361AF66B2F37153B9A7365EE572F6822E.mft Manifest number: 01D7 Signing time: Sat 20 Jun 2026 16:33:23 +0000 Manifest this update: Sat 20 Jun 2026 16:28:23 +0000 Manifest next update: Sun 21 Jun 2026 20:00:23 +0000 Files and hashes: 1: 326130613a363034343a626130303a3a2f34382d3438203d3e20323134373233.roa (hash: LzTu6U40g1XTezmtW0NeoVe0srZk8dKNtz7kNoofjgM=) 2: 326130613a363034343a626130303a3a2f34302d3430203d3e20323134373233.roa (hash: Me4H7YZgZygEIvpxgeeEc04IMatngbdJsoUf/hlBlAQ=) 3: 326130613a363034343a626130323a3a2f34372d3438203d3e20323134373233.roa (hash: g+zrmwdq6hWdyayuUZ4HEI1hjl4/P26SKw7jOnKO8XQ=) 4: 6003354361AF66B2F37153B9A7365EE572F6822E.crl (hash: DHgwY0dpyRyfHUj8NAFDAbD5ISNuM/7H1sAIb7jQJTQ=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/6/6003354361AF66B2F37153B9A7365EE572F6822E.crl rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/6/6003354361AF66B2F37153B9A7365EE572F6822E.mft rsync://krill.47272.net/repo/HYEHOST/5/6003354361AF66B2F37153B9A7365EE572F6822E.cer rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Jun 2026 10:12:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8e:29:2a:c7:15:f1:ab:db:45:5a:83:a6:9a:fd:b3:b6:fa:72:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6003354361AF66B2F37153B9A7365EE572F6822E Validity Not Before: Jun 20 16:28:23 2026 GMT Not After : Jun 21 20:00:23 2026 GMT Subject: CN=F234A6A794FA1333B83B3EAE0653DEA695B0979D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:ef:e7:f7:3d:df:89:2a:6d:e6:8d:17:8f:46: 49:6c:33:23:5d:14:50:4d:2c:a6:8c:75:5b:7c:61: ac:47:1b:15:42:2b:7c:ed:b5:e1:02:6f:fd:a6:c0: 30:9a:68:45:9b:04:7c:54:9c:a2:2a:1f:27:bb:c5: f6:97:de:e6:54:8e:84:4e:a0:29:23:bc:0f:f7:9d: 09:43:f2:b7:3d:13:4b:25:1d:ca:bb:00:f9:8b:05: ea:05:1a:67:da:3f:a4:f1:56:60:97:e4:ec:c6:ad: 2f:d1:d9:10:92:9f:1d:f1:b0:5c:01:9f:aa:9f:51: 95:c7:c2:4d:89:b7:e9:71:27:02:8a:8e:9b:11:91: ba:92:19:65:fc:72:84:95:c5:39:a5:01:4a:60:9c: 02:3f:17:7e:28:25:74:09:71:fa:3e:d2:65:39:e1: 15:c7:79:7c:81:64:b6:33:f0:f0:f8:30:cf:61:b2: 5e:9e:ca:6d:9c:f6:18:cc:f2:f2:41:5b:12:41:ab: d6:7a:c1:1a:0f:00:f0:37:55:1d:86:6d:6d:2b:35: 26:ea:53:51:32:eb:e3:db:78:f0:d7:c8:fc:17:f0: 3c:17:20:3b:eb:0a:c6:be:cc:5c:d0:ed:a9:92:85: a3:d4:d1:e1:25:45:e8:4b:7f:23:21:00:39:a0:ac: 6e:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:34:A6:A7:94:FA:13:33:B8:3B:3E:AE:06:53:DE:A6:95:B0:97:9D X509v3 Authority Key Identifier: keyid:60:03:35:43:61:AF:66:B2:F3:71:53:B9:A7:36:5E:E5:72:F6:82:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/6/6003354361AF66B2F37153B9A7365EE572F6822E.crl Authority Information Access: CA Issuers - URI:rsync://krill.47272.net/repo/HYEHOST/5/6003354361AF66B2F37153B9A7365EE572F6822E.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/6/6003354361AF66B2F37153B9A7365EE572F6822E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:76:88:21:41:a6:b1:ad:b4:bf:4a:cc:fd:3b:2a:5c:85:75: 74:f1:0a:d8:29:b1:17:4a:54:c0:e9:80:5c:d0:ae:50:de:92: cb:be:7b:18:49:5c:a6:6f:5e:56:7d:77:c3:a1:dc:ee:4d:fe: 08:a8:1e:95:10:76:b0:a8:3a:fe:1b:d0:11:81:12:4d:f9:98: ed:af:eb:55:70:dc:ab:4f:bf:da:03:7f:e3:da:53:28:b2:1a: 95:cc:40:3d:47:90:26:5b:27:58:be:13:9f:a1:49:f1:5d:d7: 86:12:1f:94:80:df:1e:10:23:f3:7a:bb:9a:dc:1f:83:42:87: 29:03:7c:6f:5a:e5:21:30:c1:9b:b4:df:25:3e:0f:0a:74:b5: 97:57:41:66:ee:d9:4f:6c:01:8a:a4:95:7b:56:b7:dc:57:f4: 8d:9c:1b:85:95:39:06:1a:73:e3:e7:41:67:53:5e:6e:74:e1: 6e:71:b4:96:6b:38:b9:a5:21:3c:01:2a:99:dd:f1:b4:b5:b5: c7:eb:66:86:68:76:63:ae:e5:4a:11:ea:9d:27:83:1f:5a:68: 9e:f8:30:74:c1:9a:34:ed:27:f8:ca:c2:51:15:7b:90:89:9c: 90:1b:d1:0e:da:e2:f8:c1:75:91:79:48:a4:4a:00:9f:24:d7: 85:e1:ab:55 -----BEGIN CERTIFICATE----- MIIFSDCCBDCgAwIBAgIUAI4pKscV8avbRVqDppr9s7b6cmUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjAwMzM1NDM2MUFGNjZCMkYzNzE1M0I5QTczNjVFRTU3 MkY2ODIyRTAeFw0yNjA2MjAxNjI4MjNaFw0yNjA2MjEyMDAwMjNaMDMxMTAvBgNV BAMTKEYyMzRBNkE3OTRGQTEzMzNCODNCM0VBRTA2NTNERUE2OTVCMDk3OUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCk7+f3Pd+JKm3mjRePRklsMyNd FFBNLKaMdVt8YaxHGxVCK3ztteECb/2mwDCaaEWbBHxUnKIqHye7xfaX3uZUjoRO oCkjvA/3nQlD8rc9E0slHcq7APmLBeoFGmfaP6TxVmCX5OzGrS/R2RCSnx3xsFwB n6qfUZXHwk2Jt+lxJwKKjpsRkbqSGWX8coSVxTmlAUpgnAI/F34oJXQJcfo+0mU5 4RXHeXyBZLYz8PD4MM9hsl6eym2c9hjM8vJBWxJBq9Z6wRoPAPA3VR2GbW0rNSbq U1Ey6+PbePDXyPwX8DwXIDvrCsa+zFzQ7amShaPU0eElRehLfyMhADmgrG5nAgMB AAGjggJSMIICTjAdBgNVHQ4EFgQU8jSmp5T6EzO4Oz6uBlPeppWwl50wHwYDVR0j BBgwFoAUYAM1Q2GvZrLzcVO5pzZe5XL2gi4wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZDdlNDU5MmUtMjNjMC00Y2NjLTk0ZGEtNmM5NTgwN2Y4 M2U3LzYvNjAwMzM1NDM2MUFGNjZCMkYzNzE1M0I5QTczNjVFRTU3MkY2ODIyRS5j cmwwbwYIKwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL2tyaWxsLjQ3 MjcyLm5ldC9yZXBvL0hZRUhPU1QvNS82MDAzMzU0MzYxQUY2NkIyRjM3MTUzQjlB NzM2NUVFNTcyRjY4MjJFLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2Q3ZTQ1OTJlLTIzYzAtNGNjYy05NGRhLTZjOTU4MDdmODNlNy82LzYwMDMzNTQz NjFBRjY2QjJGMzcxNTNCOUE3MzY1RUU1NzJGNjgyMkUubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBEdogh QaaxrbS/Ssz9OypchXV08QrYKbEXSlTA6YBc0K5Q3pLLvnsYSVymb15WfXfDodzu Tf4IqB6VEHawqDr+G9ARgRJN+Zjtr+tVcNyrT7/aA3/j2lMoshqVzEA9R5AmWydY vhOfoUnxXdeGEh+UgN8eECPzerua3B+DQocpA3xvWuUhMMGbtN8lPg8KdLWXV0Fm 7tlPbAGKpJV7VrfcV/SNnBuFlTkGGnPj50FnU15udOFucbSWazi5pSE8ASqZ3fG0 tbXH62aGaHZjruVKEeqdJ4MfWmie+DB0wZo07Sf4ysJRFXuQiZyQG9EO2uL4wXWR eUikSgCfJNeF4atV -----END CERTIFICATE-----Generated at Sat Jun 20 19:48:24 2026 by rpki-client