$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/6/6003354361AF66B2F37153B9A7365EE572F6822E.mft File: 6003354361AF66B2F37153B9A7365EE572F6822E.mft (raw, json) Hash identifier: fV9GRqD9CIR+iKxHh8vSGgWt272PqsDhUFPSOP38CN0= Subject key identifier: 88:E1:80:D8:16:FF:D7:8D:B5:A5:71:CD:60:FA:BF:44:B2:50:23:D5 Authority key identifier: 60:03:35:43:61:AF:66:B2:F3:71:53:B9:A7:36:5E:E5:72:F6:82:2E Certificate issuer: /CN=6003354361AF66B2F37153B9A7365EE572F6822E Certificate serial: 493BA8C26E0CFBCAD872D5D0F9755F59ECF1BEF7 Authority info access: rsync://krill.47272.net/repo/HYEHOST/5/6003354361AF66B2F37153B9A7365EE572F6822E.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/6/6003354361AF66B2F37153B9A7365EE572F6822E.mft Manifest number: A8 Signing time: Tue 04 Nov 2025 23:48:08 +0000 Manifest this update: Tue 04 Nov 2025 23:43:08 +0000 Manifest next update: Thu 06 Nov 2025 02:10:08 +0000 Files and hashes: 1: 326130613a363034343a626130303a3a2f34382d3438203d3e20323134373233.roa (hash: hj2OdTJzJ/lMhD2+bSlhDwRPDkQ5RRLmuL3t94lTgMc=) 2: 6003354361AF66B2F37153B9A7365EE572F6822E.crl (hash: 2iXafVvw0kclaICz+gYl2deG9vSZUVybYKdqVXeoQtA=) 3: 326130613a363034343a626130323a3a2f34372d3438203d3e20323134373233.roa (hash: hUN5naRtN06Ia8W+gZVWL0PjC5030tIqv7AoahnILWU=) 4: 326130613a363034343a626130303a3a2f34302d3430203d3e20323134373233.roa (hash: QFhWc/Qi1XwFuZFFUxrJkVVsMNht6HRi/KIA9CCJysc=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/6/6003354361AF66B2F37153B9A7365EE572F6822E.crl rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/6/6003354361AF66B2F37153B9A7365EE572F6822E.mft rsync://krill.47272.net/repo/HYEHOST/5/6003354361AF66B2F37153B9A7365EE572F6822E.cer rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 06 Nov 2025 02:10:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:3b:a8:c2:6e:0c:fb:ca:d8:72:d5:d0:f9:75:5f:59:ec:f1:be:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6003354361AF66B2F37153B9A7365EE572F6822E Validity Not Before: Nov 4 23:43:08 2025 GMT Not After : Nov 6 02:10:08 2025 GMT Subject: CN=88E180D816FFD78DB5A571CD60FABF44B25023D5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:a7:73:00:03:07:36:3c:ea:3f:f3:56:33:0f: cc:5f:28:2f:01:84:df:22:d9:29:03:3b:f4:5b:d5: 17:50:70:e7:15:78:73:ea:76:5f:aa:8e:28:91:7c: 42:87:6f:07:45:f9:cc:b5:f7:2f:04:22:6a:c3:0d: 02:12:20:94:d7:45:6a:d9:90:c9:75:1c:d8:4d:42: 3d:ab:86:88:a1:aa:97:33:84:5b:49:0f:a8:7c:43: 4c:91:a7:63:8b:4f:52:ea:85:52:b9:56:f1:03:82: 3a:4a:22:cb:45:9e:1f:de:b7:03:c5:3c:51:e6:2e: 3c:5d:ba:5e:fc:21:01:7a:85:31:70:19:c1:ec:fe: 26:b3:ab:33:0e:4c:38:47:2d:b8:ce:e6:7f:a0:2e: 77:01:7a:c5:5a:56:5f:dd:3a:05:af:0a:ab:3b:f7: f5:86:ca:65:c7:79:cf:7b:db:d5:21:5f:93:d3:d2: fd:be:60:c1:a2:83:03:78:ec:55:a0:38:e4:4f:25: cb:83:db:0f:40:34:55:4a:fe:2e:99:28:ca:e9:d4: de:8a:e9:95:0f:1a:39:d3:9e:ab:0f:f9:28:91:3c: ed:cb:9c:74:79:c0:fe:72:31:dd:fc:8d:69:cb:89: 54:20:2c:8f:ea:a3:68:36:92:12:97:bc:f1:d0:11: 99:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:E1:80:D8:16:FF:D7:8D:B5:A5:71:CD:60:FA:BF:44:B2:50:23:D5 X509v3 Authority Key Identifier: keyid:60:03:35:43:61:AF:66:B2:F3:71:53:B9:A7:36:5E:E5:72:F6:82:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/6/6003354361AF66B2F37153B9A7365EE572F6822E.crl Authority Information Access: CA Issuers - URI:rsync://krill.47272.net/repo/HYEHOST/5/6003354361AF66B2F37153B9A7365EE572F6822E.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/6/6003354361AF66B2F37153B9A7365EE572F6822E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:88:e8:68:6a:77:ab:ea:3a:a6:06:93:6d:96:07:ad:70:d2: 79:3a:0f:a9:20:c7:bc:8b:b6:a4:71:5a:54:f5:77:84:f2:4e: b0:37:b4:3e:c6:dc:9f:3f:bb:9f:54:93:60:7e:7a:37:e2:45: 9e:6d:7b:58:71:a6:1d:b6:4b:d5:9c:09:90:94:4f:5b:b7:c2: b1:fd:c9:29:40:8a:76:57:fd:48:3e:b1:d7:9c:99:35:7b:3b: c7:c6:70:94:46:cc:87:22:a4:ea:7c:b3:3a:da:50:06:be:3a: 68:ad:0e:75:a3:3f:df:8f:0f:8c:71:ba:a4:ad:22:1a:3a:69: 73:69:49:da:ec:0a:b4:74:f1:08:f9:41:06:55:5d:ff:17:f6: 08:38:1e:43:67:41:4b:61:19:01:a2:25:e5:2e:81:08:79:7a: fc:0d:a3:fe:a1:06:ec:44:fa:98:0c:3c:75:d1:e1:36:c2:63: 5c:e4:1f:6f:c4:9b:f7:2b:c7:50:42:99:db:d4:c9:03:53:49: cc:83:06:51:e7:61:af:3a:a3:04:1b:f5:a8:3a:c2:0d:fa:15: 29:38:52:7e:88:26:fe:c3:80:ea:43:2c:a9:26:be:d0:13:f5: 77:58:1d:21:35:f2:69:1e:cb:3b:21:2a:24:15:ac:3f:a8:50: b8:5a:98:da -----BEGIN CERTIFICATE----- MIIFSDCCBDCgAwIBAgIUSTuowm4M+8rYctXQ+XVfWezxvvcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjAwMzM1NDM2MUFGNjZCMkYzNzE1M0I5QTczNjVFRTU3 MkY2ODIyRTAeFw0yNTExMDQyMzQzMDhaFw0yNTExMDYwMjEwMDhaMDMxMTAvBgNV BAMTKDg4RTE4MEQ4MTZGRkQ3OERCNUE1NzFDRDYwRkFCRjQ0QjI1MDIzRDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMp3MAAwc2POo/81YzD8xfKC8B hN8i2SkDO/Rb1RdQcOcVeHPqdl+qjiiRfEKHbwdF+cy19y8EImrDDQISIJTXRWrZ kMl1HNhNQj2rhoihqpczhFtJD6h8Q0yRp2OLT1LqhVK5VvEDgjpKIstFnh/etwPF PFHmLjxdul78IQF6hTFwGcHs/iazqzMOTDhHLbjO5n+gLncBesVaVl/dOgWvCqs7 9/WGymXHec9729UhX5PT0v2+YMGigwN47FWgOORPJcuD2w9ANFVK/i6ZKMrp1N6K 6ZUPGjnTnqsP+SiRPO3LnHR5wP5yMd38jWnLiVQgLI/qo2g2khKXvPHQEZnJAgMB AAGjggJSMIICTjAdBgNVHQ4EFgQUiOGA2Bb/1421pXHNYPq/RLJQI9UwHwYDVR0j BBgwFoAUYAM1Q2GvZrLzcVO5pzZe5XL2gi4wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZDdlNDU5MmUtMjNjMC00Y2NjLTk0ZGEtNmM5NTgwN2Y4 M2U3LzYvNjAwMzM1NDM2MUFGNjZCMkYzNzE1M0I5QTczNjVFRTU3MkY2ODIyRS5j cmwwbwYIKwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL2tyaWxsLjQ3 MjcyLm5ldC9yZXBvL0hZRUhPU1QvNS82MDAzMzU0MzYxQUY2NkIyRjM3MTUzQjlB NzM2NUVFNTcyRjY4MjJFLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2Q3ZTQ1OTJlLTIzYzAtNGNjYy05NGRhLTZjOTU4MDdmODNlNy82LzYwMDMzNTQz NjFBRjY2QjJGMzcxNTNCOUE3MzY1RUU1NzJGNjgyMkUubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCCiOho aner6jqmBpNtlgetcNJ5Og+pIMe8i7akcVpU9XeE8k6wN7Q+xtyfP7ufVJNgfno3 4kWebXtYcaYdtkvVnAmQlE9bt8Kx/ckpQIp2V/1IPrHXnJk1ezvHxnCURsyHIqTq fLM62lAGvjporQ51oz/fjw+McbqkrSIaOmlzaUna7Aq0dPEI+UEGVV3/F/YIOB5D Z0FLYRkBoiXlLoEIeXr8DaP+oQbsRPqYDDx10eE2wmNc5B9vxJv3K8dQQpnb1MkD U0nMgwZR52GvOqMEG/WoOsIN+hUpOFJ+iCb+w4DqQyypJr7QE/V3WB0hNfJpHss7 ISokFaw/qFC4Wpja -----END CERTIFICATE-----Generated at Wed Nov 5 18:19:47 2025 by rpki-client