$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/2/575051DD9A9BFA57BCC3A2B982F24E11D9BAD63C.mft File: 575051DD9A9BFA57BCC3A2B982F24E11D9BAD63C.mft (raw, json) Hash identifier: hIZlRcSCEoubf7u2Z1cfgLggOVO6JTeGJNaRKGF2Ggk= Subject key identifier: C8:90:DE:EA:8B:C3:D5:1F:58:71:DA:20:EB:E8:20:58:9D:4C:DF:CB Authority key identifier: 57:50:51:DD:9A:9B:FA:57:BC:C3:A2:B9:82:F2:4E:11:D9:BA:D6:3C Certificate issuer: /CN=575051DD9A9BFA57BCC3A2B982F24E11D9BAD63C Certificate serial: 4471453F43473C0BAC81797B05686982093ACD52 Authority info access: rsync://krill.47272.net/repo/HYEHOST/5/575051DD9A9BFA57BCC3A2B982F24E11D9BAD63C.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/2/575051DD9A9BFA57BCC3A2B982F24E11D9BAD63C.mft Manifest number: 4A Signing time: Fri 17 Apr 2026 08:42:46 +0000 Manifest this update: Fri 17 Apr 2026 08:37:46 +0000 Manifest next update: Sat 18 Apr 2026 10:53:46 +0000 Files and hashes: 1: 575051DD9A9BFA57BCC3A2B982F24E11D9BAD63C.crl (hash: x8I9NInwKgx263fBOz8IF5uyXdeSfqtp0aih1fSnSn4=) 2: 326130613a363034343a623363303a3a2f34342d3434203d3e203434373333.roa (hash: PYUZfxiEyn8hXYt+1cuoAJSsYY9rYNGWkjKHW4eXgHI=) 3: 326130613a363034343a623334333a3a2f34382d3438203d3e20323039373335.roa (hash: JQ2KOFyxDm27iRQUekpK6hAiBu9T23O5crpHLbozT4Q=) 4: 326130613a363034343a623330303a3a2f34322d3432203d3e20323134383039.roa (hash: BTLRcVPEb+mlVG5DuFyrRpHPvxtI1AwdQSn94JOGmgg=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/2/575051DD9A9BFA57BCC3A2B982F24E11D9BAD63C.crl rsync://rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/2/575051DD9A9BFA57BCC3A2B982F24E11D9BAD63C.mft rsync://krill.47272.net/repo/HYEHOST/5/575051DD9A9BFA57BCC3A2B982F24E11D9BAD63C.cer rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 18 Apr 2026 07:00:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:71:45:3f:43:47:3c:0b:ac:81:79:7b:05:68:69:82:09:3a:cd:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=575051DD9A9BFA57BCC3A2B982F24E11D9BAD63C Validity Not Before: Apr 17 08:37:46 2026 GMT Not After : Apr 18 10:53:46 2026 GMT Subject: CN=C890DEEA8BC3D51F5871DA20EBE820589D4CDFCB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:8c:7e:9f:08:86:c9:33:d7:d4:77:cf:f9:b4: 19:2e:21:53:fb:e6:71:cf:26:52:0f:6c:3c:a1:b0: 77:ca:1f:e9:a9:28:4d:73:6f:d6:98:9d:04:e7:15: 19:d6:36:e3:64:da:1b:f7:da:dc:91:fc:3e:96:7b: 0a:ee:31:1c:e8:48:26:52:6e:a1:01:66:97:96:e8: c7:a6:af:d8:3c:9f:48:ec:ea:0f:22:b1:56:da:24: 5d:ed:b3:c1:56:0f:c0:36:b5:5c:ff:44:6e:0e:f4: b7:a0:af:de:16:f2:bd:da:69:2e:6e:00:f3:94:86: 0c:83:cf:a4:18:74:6c:bb:7d:02:b1:dd:f4:2b:f2: bd:ee:0f:0c:27:4e:18:cd:53:35:4b:cd:8a:db:c7: 77:35:40:32:50:60:4b:23:e8:c7:2c:a9:19:da:da: c4:28:8d:f3:3f:48:39:a2:c6:db:fe:f4:3d:25:e2: 7e:60:60:f1:11:03:85:0c:30:5e:e1:7a:09:cc:45: b2:89:8d:0c:7b:bf:f3:65:09:cf:7c:ee:46:b1:76: 50:c5:30:e5:2b:01:16:c3:30:36:c8:a1:11:dd:ae: ed:ce:ce:ab:89:91:4a:23:a5:a1:b9:e6:fc:49:e6: d9:1c:a6:2d:f2:e8:43:a5:69:31:02:4d:62:45:6e: 18:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:90:DE:EA:8B:C3:D5:1F:58:71:DA:20:EB:E8:20:58:9D:4C:DF:CB X509v3 Authority Key Identifier: keyid:57:50:51:DD:9A:9B:FA:57:BC:C3:A2:B9:82:F2:4E:11:D9:BA:D6:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/2/575051DD9A9BFA57BCC3A2B982F24E11D9BAD63C.crl Authority Information Access: CA Issuers - URI:rsync://krill.47272.net/repo/HYEHOST/5/575051DD9A9BFA57BCC3A2B982F24E11D9BAD63C.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/2/575051DD9A9BFA57BCC3A2B982F24E11D9BAD63C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:cf:6f:9d:26:ce:8c:c6:d0:7e:33:18:eb:0f:fb:da:86:66: 9b:a1:8c:37:3e:01:1e:3b:14:7d:f4:17:9e:e8:bd:84:34:ab: d7:5e:8b:29:5e:2d:d9:19:35:90:b9:a6:e0:2f:e1:d0:76:2d: c9:10:b7:25:8a:28:b4:aa:72:93:88:48:fa:3e:45:c1:27:5c: b2:77:70:92:59:55:ce:d3:33:87:05:0b:82:d3:79:9c:e1:94: d1:cf:81:f5:af:3a:90:66:51:5b:37:71:53:e9:7f:0c:fd:f7: ab:28:4e:90:66:c0:30:b7:ac:ac:16:02:cd:88:4f:cc:7c:f0: 0e:0b:f4:51:92:d2:92:8b:f2:47:dc:29:50:05:8f:44:33:0a: ba:9f:58:6d:64:be:3f:68:0d:65:da:17:b1:18:a7:4b:7e:28: 11:17:2c:63:77:df:ef:fc:39:cb:ad:5f:54:b5:92:28:6b:16: bf:43:3f:b7:35:f2:7b:81:6e:19:09:ec:7a:55:5f:fd:76:1d: 42:e7:dc:d9:20:60:af:12:0f:8f:60:66:7b:fd:15:2f:3f:3f: e7:b4:cc:e9:82:3f:74:92:b0:89:0f:87:d0:cb:85:6b:cf:dc: 09:83:2f:a9:4b:59:ce:a6:6e:82:ce:3f:8f:fa:69:d3:b8:6c: d4:ec:89:f3 -----BEGIN CERTIFICATE----- MIIFSDCCBDCgAwIBAgIURHFFP0NHPAusgXl7BWhpggk6zVIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTc1MDUxREQ5QTlCRkE1N0JDQzNBMkI5ODJGMjRFMTFE OUJBRDYzQzAeFw0yNjA0MTcwODM3NDZaFw0yNjA0MTgxMDUzNDZaMDMxMTAvBgNV BAMTKEM4OTBERUVBOEJDM0Q1MUY1ODcxREEyMEVCRTgyMDU4OUQ0Q0RGQ0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6jH6fCIbJM9fUd8/5tBkuIVP7 5nHPJlIPbDyhsHfKH+mpKE1zb9aYnQTnFRnWNuNk2hv32tyR/D6WewruMRzoSCZS bqEBZpeW6Memr9g8n0js6g8isVbaJF3ts8FWD8A2tVz/RG4O9Legr94W8r3aaS5u APOUhgyDz6QYdGy7fQKx3fQr8r3uDwwnThjNUzVLzYrbx3c1QDJQYEsj6McsqRna 2sQojfM/SDmixtv+9D0l4n5gYPERA4UMMF7hegnMRbKJjQx7v/NlCc987kaxdlDF MOUrARbDMDbIoRHdru3OzquJkUojpaG55vxJ5tkcpi3y6EOlaTECTWJFbhhBAgMB AAGjggJSMIICTjAdBgNVHQ4EFgQUyJDe6ovD1R9Ycdog6+ggWJ1M38swHwYDVR0j BBgwFoAUV1BR3Zqb+le8w6K5gvJOEdm61jwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNzEwOThjMjMtYTk3Ny00ZjlhLTk3YzktY2Q0ZTc1OWRl YTA5LzIvNTc1MDUxREQ5QTlCRkE1N0JDQzNBMkI5ODJGMjRFMTFEOUJBRDYzQy5j cmwwbwYIKwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL2tyaWxsLjQ3 MjcyLm5ldC9yZXBvL0hZRUhPU1QvNS81NzUwNTFERDlBOUJGQTU3QkNDM0EyQjk4 MkYyNEUxMUQ5QkFENjNDLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzcxMDk4YzIzLWE5NzctNGY5YS05N2M5LWNkNGU3NTlkZWEwOS8yLzU3NTA1MURE OUE5QkZBNTdCQ0MzQTJCOTgyRjI0RTExRDlCQUQ2M0MubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBDz2+d Js6MxtB+MxjrD/vahmaboYw3PgEeOxR99Bee6L2ENKvXXospXi3ZGTWQuabgL+HQ di3JELcliii0qnKTiEj6PkXBJ1yyd3CSWVXO0zOHBQuC03mc4ZTRz4H1rzqQZlFb N3FT6X8M/ferKE6QZsAwt6ysFgLNiE/MfPAOC/RRktKSi/JH3ClQBY9EMwq6n1ht ZL4/aA1l2hexGKdLfigRFyxjd9/v/DnLrV9UtZIoaxa/Qz+3NfJ7gW4ZCex6VV/9 dh1C59zZIGCvEg+PYGZ7/RUvPz/ntMzpgj90krCJD4fQy4Vrz9wJgy+pS1nOpm6C zj+P+mnTuGzU7Inz -----END CERTIFICATE-----Generated at Fri Apr 17 14:05:04 2026 by rpki-client