$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/6/6003354361AF66B2F37153B9A7365EE572F6822E.mft File: 6003354361AF66B2F37153B9A7365EE572F6822E.mft (raw, json) Hash identifier: 6y1f+HgVHl/C5dYoFmUk0Djy2GvcIytYsO6T1cUUF9s= Subject key identifier: E5:F7:CB:15:88:C2:5F:A1:61:59:C5:E7:D8:F5:4E:E6:D4:C4:57:A0 Authority key identifier: 60:03:35:43:61:AF:66:B2:F3:71:53:B9:A7:36:5E:E5:72:F6:82:2E Certificate issuer: /CN=6003354361AF66B2F37153B9A7365EE572F6822E Certificate serial: 7D1081BC33C197C6DD9223ECE61A10153E448410 Authority info access: rsync://krill.47272.net/repo/HYEHOST/5/6003354361AF66B2F37153B9A7365EE572F6822E.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/6/6003354361AF66B2F37153B9A7365EE572F6822E.mft Manifest number: 0182 Signing time: Fri 17 Apr 2026 12:39:47 +0000 Manifest this update: Fri 17 Apr 2026 12:34:47 +0000 Manifest next update: Sat 18 Apr 2026 16:20:47 +0000 Files and hashes: 1: 6003354361AF66B2F37153B9A7365EE572F6822E.crl (hash: XAFCO/0lJqqK9uovT+guLt/xeQLmWoLwSBISm9XH1vQ=) 2: 326130613a363034343a626130303a3a2f34382d3438203d3e20323134373233.roa (hash: hj2OdTJzJ/lMhD2+bSlhDwRPDkQ5RRLmuL3t94lTgMc=) 3: 326130613a363034343a626130323a3a2f34372d3438203d3e20323134373233.roa (hash: hUN5naRtN06Ia8W+gZVWL0PjC5030tIqv7AoahnILWU=) 4: 326130613a363034343a626130303a3a2f34302d3430203d3e20323134373233.roa (hash: QFhWc/Qi1XwFuZFFUxrJkVVsMNht6HRi/KIA9CCJysc=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/6/6003354361AF66B2F37153B9A7365EE572F6822E.crl rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/6/6003354361AF66B2F37153B9A7365EE572F6822E.mft rsync://krill.47272.net/repo/HYEHOST/5/6003354361AF66B2F37153B9A7365EE572F6822E.cer rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 18 Apr 2026 08:53:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:10:81:bc:33:c1:97:c6:dd:92:23:ec:e6:1a:10:15:3e:44:84:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6003354361AF66B2F37153B9A7365EE572F6822E Validity Not Before: Apr 17 12:34:47 2026 GMT Not After : Apr 18 16:20:47 2026 GMT Subject: CN=E5F7CB1588C25FA16159C5E7D8F54EE6D4C457A0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:67:d5:23:47:d1:1c:78:d6:e2:3a:a1:4f:d4: 3e:10:62:b0:dc:cc:e6:20:13:da:d3:a6:4f:f8:e7: b2:ab:40:8e:aa:a1:94:fa:94:58:66:fd:6d:f9:ab: 4a:1e:9e:f1:65:79:8f:87:f1:db:7b:d8:63:f5:d8: 8c:3a:c2:8c:fc:7d:59:8c:c9:3e:5d:44:1b:3c:1a: 4a:79:c1:cd:c8:5b:b9:c4:16:db:94:f9:b2:75:c3: 85:12:06:e8:f6:ca:f9:cf:56:65:cf:12:b1:af:b7: e4:d8:46:c3:9c:a7:e3:04:60:fe:47:3f:62:3b:2c: 13:ed:0a:49:99:40:91:d0:36:22:54:3f:42:fb:ae: c2:d3:f3:9f:23:bc:f3:7b:ec:0e:38:ba:d7:de:1e: 6b:fa:18:ef:42:96:15:02:e8:29:76:80:d0:e3:f4: 3d:2f:60:db:ce:56:27:fc:0c:d5:ea:08:ba:92:cf: 75:34:c6:23:05:e7:79:50:fb:5f:c1:07:3e:a3:11: d6:c7:54:6f:25:cd:51:62:1e:22:9a:07:e7:30:c5: 22:b2:f6:6a:1f:b3:b3:f6:49:b9:24:ed:34:06:36: 84:c8:fa:75:57:8e:8d:ef:93:c2:d3:1e:49:83:77: d3:1e:4b:5c:42:77:91:ce:bc:fd:aa:38:35:46:77: f7:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:F7:CB:15:88:C2:5F:A1:61:59:C5:E7:D8:F5:4E:E6:D4:C4:57:A0 X509v3 Authority Key Identifier: keyid:60:03:35:43:61:AF:66:B2:F3:71:53:B9:A7:36:5E:E5:72:F6:82:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/6/6003354361AF66B2F37153B9A7365EE572F6822E.crl Authority Information Access: CA Issuers - URI:rsync://krill.47272.net/repo/HYEHOST/5/6003354361AF66B2F37153B9A7365EE572F6822E.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/6/6003354361AF66B2F37153B9A7365EE572F6822E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:ab:48:36:85:83:4f:4f:dd:05:d7:63:f3:17:3c:67:07:01: 1d:ae:24:cb:a7:5c:ab:5b:ab:92:64:a1:99:4c:77:7c:8d:35: e5:8a:8b:64:68:1e:6e:a4:42:c5:2f:d2:80:1c:73:5a:3a:8d: 3f:7b:61:7c:b6:70:9a:3b:0d:c9:e1:4a:4c:9e:72:94:97:2b: b3:6e:7d:ae:ba:9f:71:95:3a:e4:5a:46:cf:ea:5e:4c:1d:1b: 43:0b:3c:10:77:78:0b:bc:7c:36:b7:09:29:96:ae:f4:50:a7: b0:c1:7d:5c:96:35:b4:56:36:b7:c1:60:ac:bf:03:5a:3c:a0: 7c:d9:a8:9b:78:51:43:eb:6d:88:ed:44:74:94:99:64:90:83: fb:7a:14:8d:f9:46:81:a1:c8:97:d8:63:79:e1:e6:6e:07:89: f7:f9:14:5c:48:a6:f5:0a:39:96:9f:83:dc:e9:4a:7c:bc:50: 79:20:2b:1e:a8:30:47:ab:b8:29:d2:bd:85:bb:d7:dd:a8:77: d8:40:d0:9a:12:6d:55:ab:36:60:0c:64:93:f4:d7:32:11:c5: d2:56:23:3e:98:b8:f4:74:f9:21:75:43:f1:32:73:b8:e7:46: ee:e1:c4:80:21:35:0d:f5:a8:e7:b5:cc:b6:11:66:c9:f3:ee: 62:f0:c0:ce -----BEGIN CERTIFICATE----- MIIFSDCCBDCgAwIBAgIUfRCBvDPBl8bdkiPs5hoQFT5EhBAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjAwMzM1NDM2MUFGNjZCMkYzNzE1M0I5QTczNjVFRTU3 MkY2ODIyRTAeFw0yNjA0MTcxMjM0NDdaFw0yNjA0MTgxNjIwNDdaMDMxMTAvBgNV BAMTKEU1RjdDQjE1ODhDMjVGQTE2MTU5QzVFN0Q4RjU0RUU2RDRDNDU3QTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8Z9UjR9EceNbiOqFP1D4QYrDc zOYgE9rTpk/457KrQI6qoZT6lFhm/W35q0oenvFleY+H8dt72GP12Iw6woz8fVmM yT5dRBs8Gkp5wc3IW7nEFtuU+bJ1w4USBuj2yvnPVmXPErGvt+TYRsOcp+MEYP5H P2I7LBPtCkmZQJHQNiJUP0L7rsLT858jvPN77A44utfeHmv6GO9ClhUC6Cl2gNDj 9D0vYNvOVif8DNXqCLqSz3U0xiMF53lQ+1/BBz6jEdbHVG8lzVFiHiKaB+cwxSKy 9mofs7P2Sbkk7TQGNoTI+nVXjo3vk8LTHkmDd9MeS1xCd5HOvP2qODVGd/cVAgMB AAGjggJSMIICTjAdBgNVHQ4EFgQU5ffLFYjCX6FhWcXn2PVO5tTEV6AwHwYDVR0j BBgwFoAUYAM1Q2GvZrLzcVO5pzZe5XL2gi4wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZDdlNDU5MmUtMjNjMC00Y2NjLTk0ZGEtNmM5NTgwN2Y4 M2U3LzYvNjAwMzM1NDM2MUFGNjZCMkYzNzE1M0I5QTczNjVFRTU3MkY2ODIyRS5j cmwwbwYIKwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL2tyaWxsLjQ3 MjcyLm5ldC9yZXBvL0hZRUhPU1QvNS82MDAzMzU0MzYxQUY2NkIyRjM3MTUzQjlB NzM2NUVFNTcyRjY4MjJFLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2Q3ZTQ1OTJlLTIzYzAtNGNjYy05NGRhLTZjOTU4MDdmODNlNy82LzYwMDMzNTQz NjFBRjY2QjJGMzcxNTNCOUE3MzY1RUU1NzJGNjgyMkUubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBtq0g2 hYNPT90F12PzFzxnBwEdriTLp1yrW6uSZKGZTHd8jTXliotkaB5upELFL9KAHHNa Oo0/e2F8tnCaOw3J4UpMnnKUlyuzbn2uup9xlTrkWkbP6l5MHRtDCzwQd3gLvHw2 twkplq70UKewwX1cljW0Vja3wWCsvwNaPKB82aibeFFD622I7UR0lJlkkIP7ehSN +UaBociX2GN54eZuB4n3+RRcSKb1CjmWn4Pc6Up8vFB5ICseqDBHq7gp0r2Fu9fd qHfYQNCaEm1VqzZgDGST9NcyEcXSViM+mLj0dPkhdUPxMnO450bu4cSAITUN9ajn tcy2EWbJ8+5i8MDO -----END CERTIFICATE-----Generated at Sat Apr 18 01:09:36 2026 by rpki-client