$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/6/6003354361AF66B2F37153B9A7365EE572F6822E.mft File: 6003354361AF66B2F37153B9A7365EE572F6822E.mft (raw, json) Hash identifier: oUOvVS5XGc8J4bThNS00AxO+92DKl8krXuSMiSTyCdw= Subject key identifier: A6:22:B9:20:8A:84:AA:AF:D6:C2:C6:FA:D1:14:1A:5A:19:48:55:89 Authority key identifier: 60:03:35:43:61:AF:66:B2:F3:71:53:B9:A7:36:5E:E5:72:F6:82:2E Certificate issuer: /CN=6003354361AF66B2F37153B9A7365EE572F6822E Certificate serial: 7466547AE7AE363E7768ED52940AD89A38DFC5EF Authority info access: rsync://krill.47272.net/repo/HYEHOST/5/6003354361AF66B2F37153B9A7365EE572F6822E.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/6/6003354361AF66B2F37153B9A7365EE572F6822E.mft Manifest number: 04 Signing time: Sat 05 Jul 2025 09:20:52 +0000 Manifest this update: Sat 05 Jul 2025 09:15:52 +0000 Manifest next update: Sun 06 Jul 2025 13:09:52 +0000 Files and hashes: 1: 6003354361AF66B2F37153B9A7365EE572F6822E.crl (hash: urPvT34Xio1WEqseDRClQf+AU7yhA74t26m4BQ2KTuc=) 2: 326130613a363034343a626130303a3a2f34382d3438203d3e20323134373233.roa (hash: hj2OdTJzJ/lMhD2+bSlhDwRPDkQ5RRLmuL3t94lTgMc=) 3: 326130613a363034343a626130303a3a2f34302d3430203d3e20323134373233.roa (hash: QFhWc/Qi1XwFuZFFUxrJkVVsMNht6HRi/KIA9CCJysc=) 4: 326130613a363034343a626130323a3a2f34372d3438203d3e20323134373233.roa (hash: hUN5naRtN06Ia8W+gZVWL0PjC5030tIqv7AoahnILWU=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/6/6003354361AF66B2F37153B9A7365EE572F6822E.crl rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/6/6003354361AF66B2F37153B9A7365EE572F6822E.mft rsync://krill.47272.net/repo/HYEHOST/5/6003354361AF66B2F37153B9A7365EE572F6822E.cer rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 06 Jul 2025 13:09:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:66:54:7a:e7:ae:36:3e:77:68:ed:52:94:0a:d8:9a:38:df:c5:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6003354361AF66B2F37153B9A7365EE572F6822E Validity Not Before: Jul 5 09:15:52 2025 GMT Not After : Jul 6 13:09:52 2025 GMT Subject: CN=A622B9208A84AAAFD6C2C6FAD1141A5A19485589 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:ab:1b:fb:d1:55:3f:f3:08:47:64:90:c7:bc: 7d:63:70:3c:5c:6f:00:71:1f:5a:bf:3e:e8:22:8c: 82:33:99:51:97:84:b5:8a:13:01:f4:2a:d0:e4:9b: 7f:87:95:4f:e4:7e:7d:29:04:eb:15:e4:58:25:b7: f9:3a:b0:a3:6a:19:5b:15:17:a4:ad:c3:b2:0c:4e: c4:34:81:9b:1e:a2:d0:0c:d9:e7:9e:5e:c5:e6:f5: 94:5c:e4:70:55:a7:5f:82:38:1f:85:1c:52:50:1f: ba:8a:71:92:4b:f3:16:38:0b:c4:99:f7:23:e0:02: 78:44:10:0b:a7:2f:53:a4:42:50:d1:12:93:45:09: 12:a0:34:d1:43:9d:9b:92:6b:2f:6e:ea:09:c4:61: dd:06:51:07:0b:69:61:8d:30:d2:ff:7d:83:d7:f9: 42:12:10:a9:54:18:a2:86:75:ae:33:48:69:c4:0a: 15:b9:63:3d:c1:35:70:08:f6:c6:f2:88:d7:02:b2: db:0e:ef:55:26:d4:99:8f:bf:44:2f:e9:08:25:e7: 74:8c:ce:6b:13:7c:28:f6:38:40:b2:29:73:00:29: 6e:44:94:71:58:fd:29:33:95:29:07:dd:9f:ca:c1: 95:ae:2c:54:6a:03:52:fc:3e:0d:6c:c3:80:37:36: 9a:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:22:B9:20:8A:84:AA:AF:D6:C2:C6:FA:D1:14:1A:5A:19:48:55:89 X509v3 Authority Key Identifier: keyid:60:03:35:43:61:AF:66:B2:F3:71:53:B9:A7:36:5E:E5:72:F6:82:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/6/6003354361AF66B2F37153B9A7365EE572F6822E.crl Authority Information Access: CA Issuers - URI:rsync://krill.47272.net/repo/HYEHOST/5/6003354361AF66B2F37153B9A7365EE572F6822E.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/6/6003354361AF66B2F37153B9A7365EE572F6822E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c6:6d:97:bb:e2:fa:03:a3:7f:26:12:be:bd:16:3d:15:4c:75: 83:f0:40:2f:77:4f:25:36:e6:2b:fc:5a:70:32:e4:1e:88:48: 3c:46:fb:f2:62:8f:ea:2e:57:bd:a8:d4:51:5f:83:d9:16:d7: 20:d0:e6:94:07:8e:14:be:60:16:24:f9:60:05:a3:50:a5:ff: d4:f4:b8:12:af:01:12:f7:d2:a0:4d:bf:83:a8:f7:0a:b5:3f: 95:62:d6:7f:69:a4:c3:d5:b1:a4:6b:1f:d0:89:1b:17:3b:d4: 1d:c8:e4:5e:a9:54:42:a3:35:3e:1a:59:20:69:b5:d6:bd:ba: 68:0d:b5:00:fb:89:b8:4b:64:b3:39:18:3c:3a:8c:7e:47:7e: 8f:f5:96:ea:9c:b7:60:28:47:10:4e:d1:d6:9d:31:f5:dc:0a: 93:54:25:9e:ff:c6:01:b5:df:00:d9:bb:da:8f:c4:1c:65:39: 99:a3:5b:eb:a6:e2:f5:48:55:25:22:0a:9a:01:3c:e8:56:c4: 78:b6:d7:86:ec:92:1f:65:e6:38:0e:5d:7c:91:12:bf:ab:6a: 43:60:f1:2d:c6:b6:12:1d:3f:71:ee:a8:fb:8f:92:66:35:c5: 62:ac:80:53:50:99:a5:e9:be:33:a4:b5:fc:ec:62:63:b3:5b: df:1b:8d:21 -----BEGIN CERTIFICATE----- MIIFSDCCBDCgAwIBAgIUdGZUeueuNj53aO1SlArYmjjfxe8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjAwMzM1NDM2MUFGNjZCMkYzNzE1M0I5QTczNjVFRTU3 MkY2ODIyRTAeFw0yNTA3MDUwOTE1NTJaFw0yNTA3MDYxMzA5NTJaMDMxMTAvBgNV BAMTKEE2MjJCOTIwOEE4NEFBQUZENkMyQzZGQUQxMTQxQTVBMTk0ODU1ODkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2qxv70VU/8whHZJDHvH1jcDxc bwBxH1q/PugijIIzmVGXhLWKEwH0KtDkm3+HlU/kfn0pBOsV5Fglt/k6sKNqGVsV F6Stw7IMTsQ0gZseotAM2eeeXsXm9ZRc5HBVp1+COB+FHFJQH7qKcZJL8xY4C8SZ 9yPgAnhEEAunL1OkQlDREpNFCRKgNNFDnZuSay9u6gnEYd0GUQcLaWGNMNL/fYPX +UISEKlUGKKGda4zSGnEChW5Yz3BNXAI9sbyiNcCstsO71Um1JmPv0Qv6Qgl53SM zmsTfCj2OECyKXMAKW5ElHFY/SkzlSkH3Z/KwZWuLFRqA1L8Pg1sw4A3Npp/AgMB AAGjggJSMIICTjAdBgNVHQ4EFgQUpiK5IIqEqq/Wwsb60RQaWhlIVYkwHwYDVR0j BBgwFoAUYAM1Q2GvZrLzcVO5pzZe5XL2gi4wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZDdlNDU5MmUtMjNjMC00Y2NjLTk0ZGEtNmM5NTgwN2Y4 M2U3LzYvNjAwMzM1NDM2MUFGNjZCMkYzNzE1M0I5QTczNjVFRTU3MkY2ODIyRS5j cmwwbwYIKwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL2tyaWxsLjQ3 MjcyLm5ldC9yZXBvL0hZRUhPU1QvNS82MDAzMzU0MzYxQUY2NkIyRjM3MTUzQjlB NzM2NUVFNTcyRjY4MjJFLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2Q3ZTQ1OTJlLTIzYzAtNGNjYy05NGRhLTZjOTU4MDdmODNlNy82LzYwMDMzNTQz NjFBRjY2QjJGMzcxNTNCOUE3MzY1RUU1NzJGNjgyMkUubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQDGbZe7 4voDo38mEr69Fj0VTHWD8EAvd08lNuYr/FpwMuQeiEg8RvvyYo/qLle9qNRRX4PZ Ftcg0OaUB44UvmAWJPlgBaNQpf/U9LgSrwES99KgTb+DqPcKtT+VYtZ/aaTD1bGk ax/QiRsXO9QdyOReqVRCozU+GlkgabXWvbpoDbUA+4m4S2SzORg8Oox+R36P9Zbq nLdgKEcQTtHWnTH13AqTVCWe/8YBtd8A2bvaj8QcZTmZo1vrpuL1SFUlIgqaATzo VsR4tteG7JIfZeY4Dl18kRK/q2pDYPEtxrYSHT9x7qj7j5JmNcVirIBTUJml6b4z pLX87GJjs1vfG40h -----END CERTIFICATE-----Generated at Sat Jul 5 23:20:20 2025 by rpki-client