$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/6/6003354361AF66B2F37153B9A7365EE572F6822E.mft File: 6003354361AF66B2F37153B9A7365EE572F6822E.mft (raw, json) Hash identifier: xkbUFvfAdjRHqe/Cj5B/oJqeOIhGQeOZ6luzG4IXdjQ= Subject key identifier: E1:31:0E:2E:30:89:B0:83:3B:CD:46:12:71:E7:2C:47:92:F0:55:FC Authority key identifier: 60:03:35:43:61:AF:66:B2:F3:71:53:B9:A7:36:5E:E5:72:F6:82:2E Certificate issuer: /CN=6003354361AF66B2F37153B9A7365EE572F6822E Certificate serial: 6E62FD9A3DDB7C72CDF56B69A1DE4CB0243739B3 Authority info access: rsync://krill.47272.net/repo/HYEHOST/5/6003354361AF66B2F37153B9A7365EE572F6822E.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/6/6003354361AF66B2F37153B9A7365EE572F6822E.mft Manifest number: 41 Signing time: Wed 20 Aug 2025 06:30:56 +0000 Manifest this update: Wed 20 Aug 2025 06:25:56 +0000 Manifest next update: Thu 21 Aug 2025 07:19:56 +0000 Files and hashes: 1: 326130613a363034343a626130303a3a2f34302d3430203d3e20323134373233.roa (hash: QFhWc/Qi1XwFuZFFUxrJkVVsMNht6HRi/KIA9CCJysc=) 2: 326130613a363034343a626130303a3a2f34382d3438203d3e20323134373233.roa (hash: hj2OdTJzJ/lMhD2+bSlhDwRPDkQ5RRLmuL3t94lTgMc=) 3: 326130613a363034343a626130323a3a2f34372d3438203d3e20323134373233.roa (hash: hUN5naRtN06Ia8W+gZVWL0PjC5030tIqv7AoahnILWU=) 4: 6003354361AF66B2F37153B9A7365EE572F6822E.crl (hash: VWJwxj7EsOd7H6aQazsLxherfC+KJk9x3NSNqpeQFB4=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/6/6003354361AF66B2F37153B9A7365EE572F6822E.crl rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/6/6003354361AF66B2F37153B9A7365EE572F6822E.mft rsync://krill.47272.net/repo/HYEHOST/5/6003354361AF66B2F37153B9A7365EE572F6822E.cer rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 21 Aug 2025 04:58:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:62:fd:9a:3d:db:7c:72:cd:f5:6b:69:a1:de:4c:b0:24:37:39:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6003354361AF66B2F37153B9A7365EE572F6822E Validity Not Before: Aug 20 06:25:56 2025 GMT Not After : Aug 21 07:19:56 2025 GMT Subject: CN=E1310E2E3089B0833BCD461271E72C4792F055FC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:f2:c4:db:1c:7b:c0:56:1b:9b:c0:17:24:62: c0:9f:bc:0f:76:35:6f:a7:77:0a:8c:6e:c7:52:7e: a4:fa:4b:cc:e7:e7:e2:79:f8:9f:da:e2:0e:de:d1: d4:6f:d0:f8:4d:c4:21:2c:25:b4:71:d3:40:33:94: 58:17:8e:fe:5e:53:df:87:93:d6:71:0a:0f:bf:94: 3c:cf:b4:7f:f5:c6:74:6a:fd:ef:cd:2f:04:5b:08: c4:e1:b6:8c:f1:0d:f6:89:2f:fb:58:47:31:e6:4d: ca:4f:2c:4a:ac:ce:0e:c9:3f:be:d4:cc:a0:29:26: e5:c8:bb:c2:dd:c5:e5:10:c8:c7:ab:b5:16:64:b0: 70:f1:98:40:e5:e1:39:4b:52:b9:b0:e8:82:03:1a: d2:61:b1:78:b1:57:12:6d:b4:25:46:1c:db:04:d5: 91:fc:2f:73:e7:7e:3e:a4:ff:ee:88:99:92:44:9c: 93:e7:8e:45:e5:b4:7b:a7:8b:50:52:c1:5a:35:76: 95:56:35:9f:0d:00:81:5b:b8:c1:8d:97:cc:17:7f: e5:50:b5:20:23:f3:e6:e3:d0:b3:69:d0:fc:7f:47: c9:81:ce:09:0a:55:cf:83:07:a4:32:a9:85:c9:fb: f6:7d:86:d3:a6:5b:97:ca:f2:8b:92:93:83:5a:95: 81:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:31:0E:2E:30:89:B0:83:3B:CD:46:12:71:E7:2C:47:92:F0:55:FC X509v3 Authority Key Identifier: keyid:60:03:35:43:61:AF:66:B2:F3:71:53:B9:A7:36:5E:E5:72:F6:82:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/6/6003354361AF66B2F37153B9A7365EE572F6822E.crl Authority Information Access: CA Issuers - URI:rsync://krill.47272.net/repo/HYEHOST/5/6003354361AF66B2F37153B9A7365EE572F6822E.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/6/6003354361AF66B2F37153B9A7365EE572F6822E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:3f:dc:3b:41:15:69:65:bd:54:c5:eb:6b:e4:19:9d:49:d0: e9:59:51:d0:c8:ba:98:c8:f4:dc:5a:28:d4:cc:08:a2:1a:ad: b0:95:44:13:b0:c5:5e:6a:d2:29:b4:2a:02:91:3a:c1:fd:1f: b6:86:5e:3c:fb:12:f7:cb:ff:a8:4f:53:66:56:e8:b6:32:6e: be:09:b0:d8:f2:ba:fb:cf:81:89:19:9d:6e:42:1f:89:9d:8a: da:17:a9:4e:21:08:24:90:85:9a:60:85:ea:5e:4c:cc:1a:3f: 1e:38:1c:43:2a:1a:56:0a:38:ba:63:82:51:c0:e5:03:b9:a2: 78:a8:f0:6e:26:14:9b:99:86:23:f4:ca:b7:f6:c8:51:2d:af: 71:d8:72:54:4c:0f:57:ac:cf:7b:e3:66:83:6e:e1:ce:dc:ff: 46:09:32:84:03:7b:11:27:2a:52:5e:80:78:2d:64:94:fc:88: 6c:11:3e:09:f3:db:a1:ed:09:4d:62:8c:04:79:e3:4f:d2:80: 25:dc:a4:71:3c:5a:ca:6a:6d:53:41:be:e9:b9:08:1d:69:59: 7f:72:66:fc:7a:56:f5:39:8c:52:03:62:34:f6:86:7a:11:b1: 11:d6:64:ad:ae:09:2d:cf:a2:e0:90:4e:d6:25:3e:b3:bd:4e: 6d:a5:4b:fb -----BEGIN CERTIFICATE----- MIIFSDCCBDCgAwIBAgIUbmL9mj3bfHLN9Wtpod5MsCQ3ObMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjAwMzM1NDM2MUFGNjZCMkYzNzE1M0I5QTczNjVFRTU3 MkY2ODIyRTAeFw0yNTA4MjAwNjI1NTZaFw0yNTA4MjEwNzE5NTZaMDMxMTAvBgNV BAMTKEUxMzEwRTJFMzA4OUIwODMzQkNENDYxMjcxRTcyQzQ3OTJGMDU1RkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCP8sTbHHvAVhubwBckYsCfvA92 NW+ndwqMbsdSfqT6S8zn5+J5+J/a4g7e0dRv0PhNxCEsJbRx00AzlFgXjv5eU9+H k9ZxCg+/lDzPtH/1xnRq/e/NLwRbCMThtozxDfaJL/tYRzHmTcpPLEqszg7JP77U zKApJuXIu8LdxeUQyMertRZksHDxmEDl4TlLUrmw6IIDGtJhsXixVxJttCVGHNsE 1ZH8L3Pnfj6k/+6ImZJEnJPnjkXltHuni1BSwVo1dpVWNZ8NAIFbuMGNl8wXf+VQ tSAj8+bj0LNp0Px/R8mBzgkKVc+DB6QyqYXJ+/Z9htOmW5fK8ouSk4NalYG/AgMB AAGjggJSMIICTjAdBgNVHQ4EFgQU4TEOLjCJsIM7zUYScecsR5LwVfwwHwYDVR0j BBgwFoAUYAM1Q2GvZrLzcVO5pzZe5XL2gi4wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZDdlNDU5MmUtMjNjMC00Y2NjLTk0ZGEtNmM5NTgwN2Y4 M2U3LzYvNjAwMzM1NDM2MUFGNjZCMkYzNzE1M0I5QTczNjVFRTU3MkY2ODIyRS5j cmwwbwYIKwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL2tyaWxsLjQ3 MjcyLm5ldC9yZXBvL0hZRUhPU1QvNS82MDAzMzU0MzYxQUY2NkIyRjM3MTUzQjlB NzM2NUVFNTcyRjY4MjJFLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2Q3ZTQ1OTJlLTIzYzAtNGNjYy05NGRhLTZjOTU4MDdmODNlNy82LzYwMDMzNTQz NjFBRjY2QjJGMzcxNTNCOUE3MzY1RUU1NzJGNjgyMkUubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCLP9w7 QRVpZb1Uxetr5BmdSdDpWVHQyLqYyPTcWijUzAiiGq2wlUQTsMVeatIptCoCkTrB /R+2hl48+xL3y/+oT1NmVui2Mm6+CbDY8rr7z4GJGZ1uQh+JnYraF6lOIQgkkIWa YIXqXkzMGj8eOBxDKhpWCji6Y4JRwOUDuaJ4qPBuJhSbmYYj9Mq39shRLa9x2HJU TA9XrM9742aDbuHO3P9GCTKEA3sRJypSXoB4LWSU/IhsET4J89uh7QlNYowEeeNP 0oAl3KRxPFrKam1TQb7puQgdaVl/cmb8elb1OYxSA2I09oZ6EbER1mStrgktz6Lg kE7WJT6zvU5tpUv7 -----END CERTIFICATE-----Generated at Wed Aug 20 16:09:01 2025 by rpki-client