$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/2/575051DD9A9BFA57BCC3A2B982F24E11D9BAD63C.mft File: 575051DD9A9BFA57BCC3A2B982F24E11D9BAD63C.mft (raw, json) Hash identifier: k4cWTxVJs5cdH+ikoQfcB7DFBXl7tc322iSWiB4PbQU= Subject key identifier: 11:79:F1:4D:19:A8:4A:C0:2A:11:6F:81:57:5F:F3:F2:D1:99:82:4E Authority key identifier: 57:50:51:DD:9A:9B:FA:57:BC:C3:A2:B9:82:F2:4E:11:D9:BA:D6:3C Certificate issuer: /CN=575051DD9A9BFA57BCC3A2B982F24E11D9BAD63C Certificate serial: 215E49BFC7EE06F287EB21E6C8BE759C45661678 Authority info access: rsync://krill.47272.net/repo/HYEHOST/5/575051DD9A9BFA57BCC3A2B982F24E11D9BAD63C.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/2/575051DD9A9BFA57BCC3A2B982F24E11D9BAD63C.mft Manifest number: 0C Signing time: Sun 01 Mar 2026 08:28:35 +0000 Manifest this update: Sun 01 Mar 2026 08:23:35 +0000 Manifest next update: Mon 02 Mar 2026 11:47:35 +0000 Files and hashes: 1: 326130613a363034343a623363303a3a2f34342d3434203d3e203434373333.roa (hash: PYUZfxiEyn8hXYt+1cuoAJSsYY9rYNGWkjKHW4eXgHI=) 2: 575051DD9A9BFA57BCC3A2B982F24E11D9BAD63C.crl (hash: lzNJ4DMkQ/UIyGDF1NdsamXkZWPIu4f9pJjNd6PlJ0U=) 3: 326130613a363034343a623330303a3a2f34322d3432203d3e20323134383039.roa (hash: BTLRcVPEb+mlVG5DuFyrRpHPvxtI1AwdQSn94JOGmgg=) 4: 326130613a363034343a623334333a3a2f34382d3438203d3e20323039373335.roa (hash: JQ2KOFyxDm27iRQUekpK6hAiBu9T23O5crpHLbozT4Q=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/2/575051DD9A9BFA57BCC3A2B982F24E11D9BAD63C.crl rsync://rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/2/575051DD9A9BFA57BCC3A2B982F24E11D9BAD63C.mft rsync://krill.47272.net/repo/HYEHOST/5/575051DD9A9BFA57BCC3A2B982F24E11D9BAD63C.cer rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Mar 2026 11:47:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:5e:49:bf:c7:ee:06:f2:87:eb:21:e6:c8:be:75:9c:45:66:16:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=575051DD9A9BFA57BCC3A2B982F24E11D9BAD63C Validity Not Before: Mar 1 08:23:35 2026 GMT Not After : Mar 2 11:47:35 2026 GMT Subject: CN=1179F14D19A84AC02A116F81575FF3F2D199824E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:36:69:b6:11:e2:1e:8e:ed:f3:85:f6:5c:ea: 27:46:0f:54:05:2a:90:b1:c6:fa:d8:a5:e0:00:38: 6e:e4:f1:52:f8:54:be:14:d8:db:b5:ad:70:95:0a: c7:61:6f:af:87:fc:4b:f7:95:a6:6e:b7:8e:59:6b: 64:e0:aa:51:f6:e5:15:90:ef:9c:98:72:db:60:47: 8f:27:80:fb:93:6f:f9:d5:fc:3d:9e:8a:93:29:42: c7:7c:10:c5:ca:83:c9:49:17:6d:d9:e1:ca:a8:43: 66:b7:4c:f0:08:60:bb:ee:dc:72:a0:32:a6:96:3b: 4a:3a:a4:c1:8a:1b:b0:d5:0e:c3:d2:2c:0b:39:90: 62:36:c2:87:b8:fb:22:ef:3b:a2:16:7e:68:87:2f: a3:64:43:1c:e5:27:e0:7b:1a:5e:81:4f:84:7d:80: 2c:00:4d:1a:71:c6:4e:8e:d0:b1:0a:c6:d6:82:2e: 18:a1:b9:90:f3:86:71:ec:ef:ea:bb:cf:ac:31:79: 3d:b6:5f:44:88:fb:81:79:38:4a:25:8b:41:74:60: 72:0c:f4:42:64:9a:e4:06:f5:c1:c3:61:d8:dc:97: cb:bd:28:c2:d9:bf:30:44:dc:2d:bf:4e:03:f6:e1: a8:d0:de:3f:89:70:55:99:f9:b2:f7:72:fa:f8:02: 6e:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:79:F1:4D:19:A8:4A:C0:2A:11:6F:81:57:5F:F3:F2:D1:99:82:4E X509v3 Authority Key Identifier: keyid:57:50:51:DD:9A:9B:FA:57:BC:C3:A2:B9:82:F2:4E:11:D9:BA:D6:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/2/575051DD9A9BFA57BCC3A2B982F24E11D9BAD63C.crl Authority Information Access: CA Issuers - URI:rsync://krill.47272.net/repo/HYEHOST/5/575051DD9A9BFA57BCC3A2B982F24E11D9BAD63C.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/2/575051DD9A9BFA57BCC3A2B982F24E11D9BAD63C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:e0:0f:36:e5:4a:32:c6:4c:d4:f9:1e:c6:76:ad:b2:6e:66: 87:1d:e5:4a:df:3c:ad:6e:5b:a3:1c:9f:74:59:a8:31:f6:c0: 33:ca:a1:8a:23:c5:9b:a1:82:a6:56:8b:f7:2f:df:08:ca:65: 8f:f9:3e:df:51:41:05:7a:cb:ea:1c:88:7a:45:10:cd:6f:7e: be:d0:8d:a6:27:07:70:da:b3:89:62:b9:3c:3c:d5:0c:df:9f: 51:fc:de:a4:1a:85:89:71:bf:73:9c:6a:1d:34:57:3c:2f:c0: 0f:74:29:60:22:80:a0:0c:c1:0d:ed:3a:4b:21:56:6c:fa:b1: 22:4d:15:8c:f7:20:be:fd:3b:71:e9:c0:fc:c4:35:d4:be:43: 14:c6:2c:c1:39:52:1b:10:13:d3:f6:ab:85:79:be:7a:e2:41: f6:c6:9c:f3:52:20:f3:eb:b8:8d:22:da:4b:64:f7:ec:4d:29: 9b:5f:43:fa:66:83:80:2b:3d:d1:d4:46:8d:af:a3:ba:07:dd: 85:eb:e8:69:c4:2e:64:f3:dd:ce:9f:0f:eb:d1:9f:cd:ee:61: 85:84:bb:07:55:b9:01:e9:77:14:53:e6:dc:fa:80:f4:e5:1c: c2:dd:29:2b:fd:22:00:39:28:d8:98:7a:90:ad:64:f3:96:bd: dc:7f:d3:61 -----BEGIN CERTIFICATE----- MIIFSDCCBDCgAwIBAgIUIV5Jv8fuBvKH6yHmyL51nEVmFngwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTc1MDUxREQ5QTlCRkE1N0JDQzNBMkI5ODJGMjRFMTFE OUJBRDYzQzAeFw0yNjAzMDEwODIzMzVaFw0yNjAzMDIxMTQ3MzVaMDMxMTAvBgNV BAMTKDExNzlGMTREMTlBODRBQzAyQTExNkY4MTU3NUZGM0YyRDE5OTgyNEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtNmm2EeIeju3zhfZc6idGD1QF KpCxxvrYpeAAOG7k8VL4VL4U2Nu1rXCVCsdhb6+H/Ev3laZut45Za2TgqlH25RWQ 75yYcttgR48ngPuTb/nV/D2eipMpQsd8EMXKg8lJF23Z4cqoQ2a3TPAIYLvu3HKg MqaWO0o6pMGKG7DVDsPSLAs5kGI2woe4+yLvO6IWfmiHL6NkQxzlJ+B7Gl6BT4R9 gCwATRpxxk6O0LEKxtaCLhihuZDzhnHs7+q7z6wxeT22X0SI+4F5OEoli0F0YHIM 9EJkmuQG9cHDYdjcl8u9KMLZvzBE3C2/TgP24ajQ3j+JcFWZ+bL3cvr4Am6NAgMB AAGjggJSMIICTjAdBgNVHQ4EFgQUEXnxTRmoSsAqEW+BV1/z8tGZgk4wHwYDVR0j BBgwFoAUV1BR3Zqb+le8w6K5gvJOEdm61jwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNzEwOThjMjMtYTk3Ny00ZjlhLTk3YzktY2Q0ZTc1OWRl YTA5LzIvNTc1MDUxREQ5QTlCRkE1N0JDQzNBMkI5ODJGMjRFMTFEOUJBRDYzQy5j cmwwbwYIKwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL2tyaWxsLjQ3 MjcyLm5ldC9yZXBvL0hZRUhPU1QvNS81NzUwNTFERDlBOUJGQTU3QkNDM0EyQjk4 MkYyNEUxMUQ5QkFENjNDLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzcxMDk4YzIzLWE5NzctNGY5YS05N2M5LWNkNGU3NTlkZWEwOS8yLzU3NTA1MURE OUE5QkZBNTdCQ0MzQTJCOTgyRjI0RTExRDlCQUQ2M0MubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBL4A82 5UoyxkzU+R7Gdq2ybmaHHeVK3zytblujHJ90Wagx9sAzyqGKI8WboYKmVov3L98I ymWP+T7fUUEFesvqHIh6RRDNb36+0I2mJwdw2rOJYrk8PNUM359R/N6kGoWJcb9z nGodNFc8L8APdClgIoCgDMEN7TpLIVZs+rEiTRWM9yC+/Ttx6cD8xDXUvkMUxizB OVIbEBPT9quFeb564kH2xpzzUiDz67iNItpLZPfsTSmbX0P6ZoOAKz3R1EaNr6O6 B92F6+hpxC5k893Onw/r0Z/N7mGFhLsHVbkB6XcUU+bc+oD05RzC3Skr/SIAOSjY mHqQrWTzlr3cf9Nh -----END CERTIFICATE-----Generated at Mon Mar 2 02:59:12 2026 by rpki-client