$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/6/6003354361AF66B2F37153B9A7365EE572F6822E.mft File: 6003354361AF66B2F37153B9A7365EE572F6822E.mft (raw, json) Hash identifier: U5fR7LV86j1P7hWoqi/C5knCQQy5eZmLR+8Uu3QYRXU= Subject key identifier: 19:1F:C7:6A:29:80:AA:16:BF:8E:19:F9:20:8B:EC:96:3D:70:03:85 Authority key identifier: 60:03:35:43:61:AF:66:B2:F3:71:53:B9:A7:36:5E:E5:72:F6:82:2E Certificate issuer: /CN=6003354361AF66B2F37153B9A7365EE572F6822E Certificate serial: 17B3D830890D38BCD784121D24484B7CDBCC1F6B Authority info access: rsync://krill.47272.net/repo/HYEHOST/5/6003354361AF66B2F37153B9A7365EE572F6822E.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/6/6003354361AF66B2F37153B9A7365EE572F6822E.mft Manifest number: 0209 Signing time: Tue 28 Jul 2026 10:53:27 +0000 Manifest this update: Tue 28 Jul 2026 10:48:27 +0000 Manifest next update: Wed 29 Jul 2026 14:28:27 +0000 Files and hashes: 1: 326130613a363034343a626130303a3a2f34302d3430203d3e20323134373233.roa (hash: Me4H7YZgZygEIvpxgeeEc04IMatngbdJsoUf/hlBlAQ=) 2: 6003354361AF66B2F37153B9A7365EE572F6822E.crl (hash: bfusKWkuEnNYsTVFw+WB+ypyvQbc+A60Jzy0TMCt0Sg=) 3: 326130613a363034343a626130323a3a2f34372d3438203d3e20323134373233.roa (hash: g+zrmwdq6hWdyayuUZ4HEI1hjl4/P26SKw7jOnKO8XQ=) 4: 326130613a363034343a626130303a3a2f34382d3438203d3e20323134373233.roa (hash: LzTu6U40g1XTezmtW0NeoVe0srZk8dKNtz7kNoofjgM=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/6/6003354361AF66B2F37153B9A7365EE572F6822E.crl rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/6/6003354361AF66B2F37153B9A7365EE572F6822E.mft rsync://krill.47272.net/repo/HYEHOST/5/6003354361AF66B2F37153B9A7365EE572F6822E.cer rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 29 Jul 2026 12:51:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:b3:d8:30:89:0d:38:bc:d7:84:12:1d:24:48:4b:7c:db:cc:1f:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6003354361AF66B2F37153B9A7365EE572F6822E Validity Not Before: Jul 28 10:48:27 2026 GMT Not After : Jul 29 14:28:27 2026 GMT Subject: CN=191FC76A2980AA16BF8E19F9208BEC963D700385 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:70:7b:df:1b:c2:c1:c8:b2:5d:bd:3a:94:92: 26:dd:12:45:c2:7f:28:0c:e9:0f:56:87:92:6d:63: ff:59:82:39:fe:5f:ca:94:d5:30:46:85:cc:2c:8c: ee:a9:5e:89:2e:98:63:17:cc:d3:81:a5:1a:6b:76: e8:05:e7:2c:3a:b9:b5:f7:20:07:bf:c7:a3:d4:ab: 10:37:9d:b5:89:87:af:4d:8b:71:78:af:dd:16:aa: b3:51:2b:04:d7:ad:dd:c0:e4:08:d0:0a:eb:82:0d: 73:90:18:41:eb:7c:71:d1:a9:26:0f:88:6e:ed:1a: 8e:9c:00:8c:39:61:44:56:6e:5b:c9:97:c1:a6:61: 69:89:22:03:64:59:6c:10:7d:c9:b0:0e:64:42:e7: 42:a8:8b:86:9d:66:a2:94:16:76:b6:06:ac:20:50: bc:5c:9b:df:f3:02:50:bf:9e:87:ee:d1:48:de:dc: a6:80:62:69:b1:c2:79:08:5b:36:1c:85:73:6b:ca: 29:8e:01:41:09:3b:c2:62:b2:94:79:f0:b2:2d:7a: 3a:17:d5:af:a8:f5:50:fa:36:36:43:01:bf:d7:ec: c9:38:26:5a:a7:d1:42:d5:e6:b9:bb:20:5c:4a:d4: 4e:28:61:03:df:bc:0b:cb:e1:97:fa:cc:d5:8f:19: 55:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:1F:C7:6A:29:80:AA:16:BF:8E:19:F9:20:8B:EC:96:3D:70:03:85 X509v3 Authority Key Identifier: keyid:60:03:35:43:61:AF:66:B2:F3:71:53:B9:A7:36:5E:E5:72:F6:82:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/6/6003354361AF66B2F37153B9A7365EE572F6822E.crl Authority Information Access: CA Issuers - URI:rsync://krill.47272.net/repo/HYEHOST/5/6003354361AF66B2F37153B9A7365EE572F6822E.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/6/6003354361AF66B2F37153B9A7365EE572F6822E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:02:88:4c:55:00:9c:f2:c5:1f:58:94:24:95:90:e0:50:a6: 0b:34:b2:9e:dd:71:12:d1:3a:58:ad:ae:cc:ee:9e:b2:d2:c3: ce:47:30:d0:f7:c6:1f:31:22:77:d8:58:6b:b2:3f:94:7e:7c: dd:cf:04:76:28:b0:59:ec:e1:cf:99:e1:32:4d:21:fb:09:06: ab:7c:ce:9d:82:3d:e7:ba:f5:50:24:98:be:9f:34:b8:1e:2d: 91:9a:cc:f7:40:f6:9f:86:6b:5a:1f:74:34:31:63:91:8e:46: 77:06:9e:f0:2b:25:76:87:3e:5a:0d:ef:1d:a6:2b:b4:b6:e9: 49:0d:3a:80:d5:a9:55:d4:38:bf:f6:aa:47:9a:ad:9a:8a:c4: 25:f2:ee:04:41:c6:48:80:63:fc:08:f6:42:9c:b8:77:1f:bb: 23:ee:23:d8:f7:81:8b:d0:29:b0:22:77:6e:31:88:96:58:44: 1f:9f:b5:c2:76:8b:32:79:da:ff:6e:97:7c:c8:31:5e:63:ba: 0f:d5:90:02:fb:af:e0:c2:1d:0f:66:0a:ee:3c:1f:db:26:15: f6:60:4e:10:d6:b7:40:33:87:63:f7:4e:99:30:13:51:1a:2d: b1:b7:f7:4d:99:73:19:a8:d7:05:04:aa:03:91:73:63:69:a2: 24:5c:18:74 -----BEGIN CERTIFICATE----- MIIFSDCCBDCgAwIBAgIUF7PYMIkNOLzXhBIdJEhLfNvMH2swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjAwMzM1NDM2MUFGNjZCMkYzNzE1M0I5QTczNjVFRTU3 MkY2ODIyRTAeFw0yNjA3MjgxMDQ4MjdaFw0yNjA3MjkxNDI4MjdaMDMxMTAvBgNV BAMTKDE5MUZDNzZBMjk4MEFBMTZCRjhFMTlGOTIwOEJFQzk2M0Q3MDAzODUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwcHvfG8LByLJdvTqUkibdEkXC fygM6Q9Wh5JtY/9Zgjn+X8qU1TBGhcwsjO6pXokumGMXzNOBpRprdugF5yw6ubX3 IAe/x6PUqxA3nbWJh69Ni3F4r90WqrNRKwTXrd3A5AjQCuuCDXOQGEHrfHHRqSYP iG7tGo6cAIw5YURWblvJl8GmYWmJIgNkWWwQfcmwDmRC50Koi4adZqKUFna2Bqwg ULxcm9/zAlC/nofu0Uje3KaAYmmxwnkIWzYchXNryimOAUEJO8JispR58LItejoX 1a+o9VD6NjZDAb/X7Mk4Jlqn0ULV5rm7IFxK1E4oYQPfvAvL4Zf6zNWPGVWtAgMB AAGjggJSMIICTjAdBgNVHQ4EFgQUGR/HaimAqha/jhn5IIvslj1wA4UwHwYDVR0j BBgwFoAUYAM1Q2GvZrLzcVO5pzZe5XL2gi4wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZDdlNDU5MmUtMjNjMC00Y2NjLTk0ZGEtNmM5NTgwN2Y4 M2U3LzYvNjAwMzM1NDM2MUFGNjZCMkYzNzE1M0I5QTczNjVFRTU3MkY2ODIyRS5j cmwwbwYIKwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL2tyaWxsLjQ3 MjcyLm5ldC9yZXBvL0hZRUhPU1QvNS82MDAzMzU0MzYxQUY2NkIyRjM3MTUzQjlB NzM2NUVFNTcyRjY4MjJFLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2Q3ZTQ1OTJlLTIzYzAtNGNjYy05NGRhLTZjOTU4MDdmODNlNy82LzYwMDMzNTQz NjFBRjY2QjJGMzcxNTNCOUE3MzY1RUU1NzJGNjgyMkUubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCVAohM VQCc8sUfWJQklZDgUKYLNLKe3XES0TpYra7M7p6y0sPORzDQ98YfMSJ32Fhrsj+U fnzdzwR2KLBZ7OHPmeEyTSH7CQarfM6dgj3nuvVQJJi+nzS4Hi2Rmsz3QPafhmta H3Q0MWORjkZ3Bp7wKyV2hz5aDe8dpiu0tulJDTqA1alV1Di/9qpHmq2aisQl8u4E QcZIgGP8CPZCnLh3H7sj7iPY94GL0CmwInduMYiWWEQfn7XCdosyedr/bpd8yDFe Y7oP1ZAC+6/gwh0PZgruPB/bJhX2YE4Q1rdAM4dj906ZMBNRGi2xt/dNmXMZqNcF BKoDkXNjaaIkXBh0 -----END CERTIFICATE-----Generated at Wed Jul 29 00:51:37 2026 by rpki-client