$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/6/6003354361AF66B2F37153B9A7365EE572F6822E.mft File: 6003354361AF66B2F37153B9A7365EE572F6822E.mft (raw, json) Hash identifier: PfZzCZRZGboVGNtwL3rQauYVa9sLiZcKv9PlPwqykvQ= Subject key identifier: B7:EB:9F:11:0C:E7:EA:C7:78:CE:3A:77:AB:41:52:A7:B1:51:2D:0D Authority key identifier: 60:03:35:43:61:AF:66:B2:F3:71:53:B9:A7:36:5E:E5:72:F6:82:2E Certificate issuer: /CN=6003354361AF66B2F37153B9A7365EE572F6822E Certificate serial: 22C364DCF5CCB1D050F3759FEA93C3493B427DD3 Authority info access: rsync://krill.47272.net/repo/HYEHOST/5/6003354361AF66B2F37153B9A7365EE572F6822E.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/6/6003354361AF66B2F37153B9A7365EE572F6822E.mft Manifest number: 83 Signing time: Wed 08 Oct 2025 03:52:45 +0000 Manifest this update: Wed 08 Oct 2025 03:47:45 +0000 Manifest next update: Thu 09 Oct 2025 04:07:45 +0000 Files and hashes: 1: 326130613a363034343a626130323a3a2f34372d3438203d3e20323134373233.roa (hash: hUN5naRtN06Ia8W+gZVWL0PjC5030tIqv7AoahnILWU=) 2: 6003354361AF66B2F37153B9A7365EE572F6822E.crl (hash: iF+btafXstxmfWw7n8qeLaND4F0yKU5+8XHZh5/jRR8=) 3: 326130613a363034343a626130303a3a2f34302d3430203d3e20323134373233.roa (hash: QFhWc/Qi1XwFuZFFUxrJkVVsMNht6HRi/KIA9CCJysc=) 4: 326130613a363034343a626130303a3a2f34382d3438203d3e20323134373233.roa (hash: hj2OdTJzJ/lMhD2+bSlhDwRPDkQ5RRLmuL3t94lTgMc=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/6/6003354361AF66B2F37153B9A7365EE572F6822E.crl rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/6/6003354361AF66B2F37153B9A7365EE572F6822E.mft rsync://krill.47272.net/repo/HYEHOST/5/6003354361AF66B2F37153B9A7365EE572F6822E.cer rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 09 Oct 2025 04:07:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:c3:64:dc:f5:cc:b1:d0:50:f3:75:9f:ea:93:c3:49:3b:42:7d:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6003354361AF66B2F37153B9A7365EE572F6822E Validity Not Before: Oct 8 03:47:45 2025 GMT Not After : Oct 9 04:07:45 2025 GMT Subject: CN=B7EB9F110CE7EAC778CE3A77AB4152A7B1512D0D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:6d:e7:c8:50:9e:54:33:bc:1f:6a:c1:2a:17: 0f:b9:eb:36:58:66:ea:47:a1:94:a2:0c:32:1e:92: 85:6b:47:49:c3:be:fc:4b:f7:9e:48:4f:51:35:e7: f4:39:d6:c7:c2:db:5e:27:77:27:32:7c:0c:82:e1: bb:2b:07:a7:73:16:ff:9d:87:dc:c0:c0:fb:4b:d7: a8:d1:c6:19:c2:49:43:24:c3:f4:fc:e0:88:7d:09: 8d:21:35:b3:9c:d0:d3:b2:9b:14:ed:4c:eb:29:9e: 1b:97:a3:97:6a:0f:02:8b:23:ab:e0:89:41:d0:8d: 04:47:02:61:12:9e:9d:f1:ba:71:b9:d9:dc:ac:ce: 1f:0a:1e:01:84:24:e3:37:6d:57:63:f9:28:f4:32: 71:3c:66:ab:d3:ba:cf:10:e6:07:0b:78:01:e3:6d: ed:26:bd:a7:88:a0:a8:a1:e7:8f:a1:5d:34:95:0c: 40:6a:90:b2:b9:16:20:0b:b3:e0:0d:9f:aa:7b:be: e9:d6:a2:aa:19:50:88:12:70:75:65:72:f1:d1:7c: 25:48:9e:82:88:37:58:37:3e:34:c5:9b:f4:f4:84: f9:fc:24:18:97:69:fb:27:10:6b:6d:c3:f7:5c:7a: db:16:fe:76:18:44:b9:e3:24:09:14:a7:ed:22:5c: 97:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:EB:9F:11:0C:E7:EA:C7:78:CE:3A:77:AB:41:52:A7:B1:51:2D:0D X509v3 Authority Key Identifier: keyid:60:03:35:43:61:AF:66:B2:F3:71:53:B9:A7:36:5E:E5:72:F6:82:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/6/6003354361AF66B2F37153B9A7365EE572F6822E.crl Authority Information Access: CA Issuers - URI:rsync://krill.47272.net/repo/HYEHOST/5/6003354361AF66B2F37153B9A7365EE572F6822E.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/6/6003354361AF66B2F37153B9A7365EE572F6822E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:90:2b:9e:b5:d0:c4:6e:dd:a6:4d:ed:9b:5f:13:54:82:f1: 35:1e:01:21:0a:b9:51:fe:8f:5a:7e:b4:99:fe:e3:73:16:69: b8:da:46:e3:e9:93:7d:67:8a:83:bf:b1:ef:70:05:91:93:5a: 10:7e:83:9e:94:c0:71:4e:c9:d6:ea:17:47:59:f0:91:a7:fd: 63:2b:6f:2f:92:7f:87:4b:8c:f6:13:a2:2a:eb:18:d3:f5:53: 7d:62:f8:e2:53:f2:f7:b3:b4:6a:ba:d7:96:5d:24:b5:8c:29: 22:63:fe:79:85:3a:a4:c9:47:b3:ca:f0:c1:b4:c5:eb:86:59: 21:e1:b4:ee:8c:31:f7:de:2f:52:b7:f3:5d:08:93:aa:4d:1b: 87:60:0d:10:11:4f:5f:45:27:d5:b0:ba:43:a8:5a:a9:72:ed: 20:19:cb:b6:0d:10:c8:be:42:9d:f8:8a:5e:ed:5e:7f:c3:f0: e6:a8:b2:f5:01:72:39:c5:9c:e7:4d:9c:42:5b:6a:db:bc:d8: f0:9d:57:24:fa:8d:c5:db:af:ce:4b:77:87:48:0b:af:a7:e0: d7:55:ec:42:ef:c9:60:46:88:34:91:38:85:f1:cd:ec:ac:55: ac:c7:22:74:58:68:18:5b:50:20:94:04:1a:1b:17:2b:5e:8b: 67:f8:d8:7d -----BEGIN CERTIFICATE----- MIIFSDCCBDCgAwIBAgIUIsNk3PXMsdBQ83Wf6pPDSTtCfdMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjAwMzM1NDM2MUFGNjZCMkYzNzE1M0I5QTczNjVFRTU3 MkY2ODIyRTAeFw0yNTEwMDgwMzQ3NDVaFw0yNTEwMDkwNDA3NDVaMDMxMTAvBgNV BAMTKEI3RUI5RjExMENFN0VBQzc3OENFM0E3N0FCNDE1MkE3QjE1MTJEMEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRbefIUJ5UM7wfasEqFw+56zZY ZupHoZSiDDIekoVrR0nDvvxL955IT1E15/Q51sfC214ndycyfAyC4bsrB6dzFv+d h9zAwPtL16jRxhnCSUMkw/T84Ih9CY0hNbOc0NOymxTtTOspnhuXo5dqDwKLI6vg iUHQjQRHAmESnp3xunG52dyszh8KHgGEJOM3bVdj+Sj0MnE8ZqvTus8Q5gcLeAHj be0mvaeIoKih54+hXTSVDEBqkLK5FiALs+ANn6p7vunWoqoZUIgScHVlcvHRfCVI noKIN1g3PjTFm/T0hPn8JBiXafsnEGttw/dcetsW/nYYRLnjJAkUp+0iXJdZAgMB AAGjggJSMIICTjAdBgNVHQ4EFgQUt+ufEQzn6sd4zjp3q0FSp7FRLQ0wHwYDVR0j BBgwFoAUYAM1Q2GvZrLzcVO5pzZe5XL2gi4wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZDdlNDU5MmUtMjNjMC00Y2NjLTk0ZGEtNmM5NTgwN2Y4 M2U3LzYvNjAwMzM1NDM2MUFGNjZCMkYzNzE1M0I5QTczNjVFRTU3MkY2ODIyRS5j cmwwbwYIKwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL2tyaWxsLjQ3 MjcyLm5ldC9yZXBvL0hZRUhPU1QvNS82MDAzMzU0MzYxQUY2NkIyRjM3MTUzQjlB NzM2NUVFNTcyRjY4MjJFLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2Q3ZTQ1OTJlLTIzYzAtNGNjYy05NGRhLTZjOTU4MDdmODNlNy82LzYwMDMzNTQz NjFBRjY2QjJGMzcxNTNCOUE3MzY1RUU1NzJGNjgyMkUubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQARkCue tdDEbt2mTe2bXxNUgvE1HgEhCrlR/o9afrSZ/uNzFmm42kbj6ZN9Z4qDv7HvcAWR k1oQfoOelMBxTsnW6hdHWfCRp/1jK28vkn+HS4z2E6Iq6xjT9VN9YvjiU/L3s7Rq uteWXSS1jCkiY/55hTqkyUezyvDBtMXrhlkh4bTujDH33i9St/NdCJOqTRuHYA0Q EU9fRSfVsLpDqFqpcu0gGcu2DRDIvkKd+Ipe7V5/w/DmqLL1AXI5xZznTZxCW2rb vNjwnVck+o3F26/OS3eHSAuvp+DXVexC78lgRog0kTiF8c3srFWsxyJ0WGgYW1Ag lAQaGxcrXotn+Nh9 -----END CERTIFICATE-----Generated at Wed Oct 8 19:55:40 2025 by rpki-client