$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/6/6003354361AF66B2F37153B9A7365EE572F6822E.mft File: 6003354361AF66B2F37153B9A7365EE572F6822E.mft (raw, json) Hash identifier: oSK1+HTWVoh9ic4IuKQwSgvLmNVmq9u853hm9wS+CYc= Subject key identifier: E1:BF:7A:1D:81:AD:13:1C:09:6B:BF:F2:34:51:83:32:6B:07:06:00 Authority key identifier: 60:03:35:43:61:AF:66:B2:F3:71:53:B9:A7:36:5E:E5:72:F6:82:2E Certificate issuer: /CN=6003354361AF66B2F37153B9A7365EE572F6822E Certificate serial: 50308E6A777338ADE3BC32B9C3F32A4CA2A09FA7 Authority info access: rsync://krill.47272.net/repo/HYEHOST/5/6003354361AF66B2F37153B9A7365EE572F6822E.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/6/6003354361AF66B2F37153B9A7365EE572F6822E.mft Manifest number: 0184 Signing time: Sun 19 Apr 2026 02:34:47 +0000 Manifest this update: Sun 19 Apr 2026 02:29:47 +0000 Manifest next update: Mon 20 Apr 2026 06:07:47 +0000 Files and hashes: 1: 326130613a363034343a626130323a3a2f34372d3438203d3e20323134373233.roa (hash: hUN5naRtN06Ia8W+gZVWL0PjC5030tIqv7AoahnILWU=) 2: 326130613a363034343a626130303a3a2f34302d3430203d3e20323134373233.roa (hash: QFhWc/Qi1XwFuZFFUxrJkVVsMNht6HRi/KIA9CCJysc=) 3: 6003354361AF66B2F37153B9A7365EE572F6822E.crl (hash: YbDJds/bQP0AFjHrj11/8QTj2klic+iGpd1OAGS24Y4=) 4: 326130613a363034343a626130303a3a2f34382d3438203d3e20323134373233.roa (hash: hj2OdTJzJ/lMhD2+bSlhDwRPDkQ5RRLmuL3t94lTgMc=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/6/6003354361AF66B2F37153B9A7365EE572F6822E.crl rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/6/6003354361AF66B2F37153B9A7365EE572F6822E.mft rsync://krill.47272.net/repo/HYEHOST/5/6003354361AF66B2F37153B9A7365EE572F6822E.cer rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 20 Apr 2026 02:00:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:30:8e:6a:77:73:38:ad:e3:bc:32:b9:c3:f3:2a:4c:a2:a0:9f:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6003354361AF66B2F37153B9A7365EE572F6822E Validity Not Before: Apr 19 02:29:47 2026 GMT Not After : Apr 20 06:07:47 2026 GMT Subject: CN=E1BF7A1D81AD131C096BBFF2345183326B070600 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:fe:17:68:a9:b3:30:e9:c6:6d:d6:de:41:ce: 8e:9a:28:27:40:b6:17:47:b5:5d:97:68:5d:84:15: af:97:da:c8:b1:43:7b:d0:a0:eb:65:c1:57:d7:17: 67:86:36:5b:26:11:85:e9:21:18:43:6d:e7:56:ef: 0d:d1:f2:be:9a:73:c8:f9:a7:cc:c6:58:29:71:26: a8:6a:0b:e0:28:2e:95:a1:bf:14:72:3d:c2:e4:0e: e3:23:26:d3:46:bc:5b:a1:0e:df:42:08:77:5f:e3: d4:98:11:1a:b1:7a:42:8a:f1:c9:5c:2b:98:6c:a9: 70:52:fa:d0:c6:6f:c5:00:f1:9f:35:45:c8:45:2a: db:53:c5:1f:22:63:d1:43:8c:62:e2:7d:87:c2:c9: 30:83:1e:ff:9d:79:c7:cf:03:5f:c6:c1:3e:5a:4f: c3:93:e1:51:93:3b:c5:f2:0c:b1:2b:2b:65:d9:52: 2e:44:20:4b:5d:dd:09:37:e1:9b:a2:36:8f:d6:d9: 76:72:75:83:5f:80:38:96:7f:88:23:d7:21:12:81: 45:b1:4b:bc:a9:4d:4b:d7:1b:2a:d6:eb:44:9e:e2: 46:54:70:5e:28:d1:e1:b8:58:ec:bf:ca:8b:d7:c5: 7a:5b:a0:f8:4d:f8:d8:20:fc:78:54:63:34:43:d5: d2:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:BF:7A:1D:81:AD:13:1C:09:6B:BF:F2:34:51:83:32:6B:07:06:00 X509v3 Authority Key Identifier: keyid:60:03:35:43:61:AF:66:B2:F3:71:53:B9:A7:36:5E:E5:72:F6:82:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/6/6003354361AF66B2F37153B9A7365EE572F6822E.crl Authority Information Access: CA Issuers - URI:rsync://krill.47272.net/repo/HYEHOST/5/6003354361AF66B2F37153B9A7365EE572F6822E.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/6/6003354361AF66B2F37153B9A7365EE572F6822E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:23:7e:1c:bc:2b:40:45:b5:79:a3:96:d3:5b:91:ab:69:58: bc:1e:e1:d7:8b:b0:54:61:d1:7b:b9:4e:f3:ba:1c:b2:af:d9: 12:87:0b:7a:dc:6d:92:30:19:7f:e4:1a:65:d4:d6:6b:34:61: 02:8d:22:02:78:49:61:8d:68:a8:56:df:bc:79:f3:ed:11:a1: 6d:d7:93:7a:fa:6f:b2:6d:7a:35:6d:39:8a:52:18:3b:c7:ce: ff:cb:ad:71:ac:19:69:21:ca:d4:25:25:fd:12:ab:7b:56:db: b5:cc:86:d3:bf:12:b9:71:7f:5e:9f:2f:0a:03:e6:b8:7f:5c: c0:a9:39:5a:07:b5:e6:b9:3f:b7:f9:52:c6:f6:98:73:00:b4: 9d:0b:fe:28:df:ac:ce:eb:07:b5:e1:97:d3:a8:40:fc:01:0e: 74:8e:5d:b1:33:ca:67:ea:54:35:89:a6:3d:d3:c3:1f:b4:34: 14:38:1c:2f:ed:b0:df:80:27:b5:e2:e1:84:6f:8a:ae:2b:1f: 42:3d:a7:6c:3a:8d:06:cd:bc:bf:86:22:c4:74:ed:95:4d:ba: 0d:f6:a2:e1:62:be:26:20:b2:1e:1d:7c:e5:ea:fe:2a:b6:21: ab:de:67:79:7d:ca:ef:dd:11:6f:c6:99:17:8a:4c:85:d0:6a: c6:43:f5:f0 -----BEGIN CERTIFICATE----- MIIFSDCCBDCgAwIBAgIUUDCOandzOK3jvDK5w/MqTKKgn6cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjAwMzM1NDM2MUFGNjZCMkYzNzE1M0I5QTczNjVFRTU3 MkY2ODIyRTAeFw0yNjA0MTkwMjI5NDdaFw0yNjA0MjAwNjA3NDdaMDMxMTAvBgNV BAMTKEUxQkY3QTFEODFBRDEzMUMwOTZCQkZGMjM0NTE4MzMyNkIwNzA2MDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCg/hdoqbMw6cZt1t5Bzo6aKCdA thdHtV2XaF2EFa+X2sixQ3vQoOtlwVfXF2eGNlsmEYXpIRhDbedW7w3R8r6ac8j5 p8zGWClxJqhqC+AoLpWhvxRyPcLkDuMjJtNGvFuhDt9CCHdf49SYERqxekKK8clc K5hsqXBS+tDGb8UA8Z81RchFKttTxR8iY9FDjGLifYfCyTCDHv+decfPA1/GwT5a T8OT4VGTO8XyDLErK2XZUi5EIEtd3Qk34ZuiNo/W2XZydYNfgDiWf4gj1yESgUWx S7ypTUvXGyrW60Se4kZUcF4o0eG4WOy/yovXxXpboPhN+Ngg/HhUYzRD1dI3AgMB AAGjggJSMIICTjAdBgNVHQ4EFgQU4b96HYGtExwJa7/yNFGDMmsHBgAwHwYDVR0j BBgwFoAUYAM1Q2GvZrLzcVO5pzZe5XL2gi4wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZDdlNDU5MmUtMjNjMC00Y2NjLTk0ZGEtNmM5NTgwN2Y4 M2U3LzYvNjAwMzM1NDM2MUFGNjZCMkYzNzE1M0I5QTczNjVFRTU3MkY2ODIyRS5j cmwwbwYIKwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL2tyaWxsLjQ3 MjcyLm5ldC9yZXBvL0hZRUhPU1QvNS82MDAzMzU0MzYxQUY2NkIyRjM3MTUzQjlB NzM2NUVFNTcyRjY4MjJFLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2Q3ZTQ1OTJlLTIzYzAtNGNjYy05NGRhLTZjOTU4MDdmODNlNy82LzYwMDMzNTQz NjFBRjY2QjJGMzcxNTNCOUE3MzY1RUU1NzJGNjgyMkUubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAlI34c vCtARbV5o5bTW5GraVi8HuHXi7BUYdF7uU7zuhyyr9kShwt63G2SMBl/5Bpl1NZr NGECjSICeElhjWioVt+8efPtEaFt15N6+m+ybXo1bTmKUhg7x87/y61xrBlpIcrU JSX9Eqt7Vtu1zIbTvxK5cX9eny8KA+a4f1zAqTlaB7XmuT+3+VLG9phzALSdC/4o 36zO6we14ZfTqED8AQ50jl2xM8pn6lQ1iaY908MftDQUOBwv7bDfgCe14uGEb4qu Kx9CPadsOo0Gzby/hiLEdO2VTboN9qLhYr4mILIeHXzl6v4qtiGr3md5fcrv3RFv xpkXikyF0GrGQ/Xw -----END CERTIFICATE-----Generated at Sun Apr 19 11:29:58 2026 by rpki-client