$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/6/6003354361AF66B2F37153B9A7365EE572F6822E.mft File: 6003354361AF66B2F37153B9A7365EE572F6822E.mft (raw, json) Hash identifier: paVF6AaINuumswVu3S9rJRKw2BpHh3VRfF+fd2S5sO8= Subject key identifier: 7D:51:28:21:A2:A7:55:FA:59:24:3C:3E:B9:B1:D6:D0:46:5F:21:82 Authority key identifier: 60:03:35:43:61:AF:66:B2:F3:71:53:B9:A7:36:5E:E5:72:F6:82:2E Certificate issuer: /CN=6003354361AF66B2F37153B9A7365EE572F6822E Certificate serial: 1F5C29261260D98BFDE0BE55299EB1AB0BF8F54F Authority info access: rsync://krill.47272.net/repo/HYEHOST/5/6003354361AF66B2F37153B9A7365EE572F6822E.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/6/6003354361AF66B2F37153B9A7365EE572F6822E.mft Manifest number: 0143 Signing time: Sun 01 Mar 2026 08:53:44 +0000 Manifest this update: Sun 01 Mar 2026 08:48:44 +0000 Manifest next update: Mon 02 Mar 2026 10:07:44 +0000 Files and hashes: 1: 326130613a363034343a626130303a3a2f34302d3430203d3e20323134373233.roa (hash: QFhWc/Qi1XwFuZFFUxrJkVVsMNht6HRi/KIA9CCJysc=) 2: 326130613a363034343a626130323a3a2f34372d3438203d3e20323134373233.roa (hash: hUN5naRtN06Ia8W+gZVWL0PjC5030tIqv7AoahnILWU=) 3: 326130613a363034343a626130303a3a2f34382d3438203d3e20323134373233.roa (hash: hj2OdTJzJ/lMhD2+bSlhDwRPDkQ5RRLmuL3t94lTgMc=) 4: 6003354361AF66B2F37153B9A7365EE572F6822E.crl (hash: 02ghvzm+jgl5gRLqJhUf7dqTiXbKvi35y93ofAGEvsk=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/6/6003354361AF66B2F37153B9A7365EE572F6822E.crl rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/6/6003354361AF66B2F37153B9A7365EE572F6822E.mft rsync://krill.47272.net/repo/HYEHOST/5/6003354361AF66B2F37153B9A7365EE572F6822E.cer rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Mar 2026 10:07:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:5c:29:26:12:60:d9:8b:fd:e0:be:55:29:9e:b1:ab:0b:f8:f5:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6003354361AF66B2F37153B9A7365EE572F6822E Validity Not Before: Mar 1 08:48:44 2026 GMT Not After : Mar 2 10:07:44 2026 GMT Subject: CN=7D512821A2A755FA59243C3EB9B1D6D0465F2182 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:9f:07:71:b9:7f:83:7b:d1:5a:eb:15:5d:c6: cf:1f:bb:ff:24:56:76:bc:73:9f:ba:87:0b:29:b0: 04:f4:9e:e8:d4:48:66:98:08:0a:21:4d:5f:ff:44: 75:15:66:2f:c6:76:e0:b1:3c:49:7d:b0:d2:f0:b2: b8:ad:b9:e1:e4:25:ac:ce:82:4e:18:28:cb:bd:9d: e6:44:7f:14:ab:ee:68:d1:83:7b:c8:76:de:60:50: 8e:a5:ce:da:23:ae:20:90:89:4a:bc:f0:aa:0d:46: db:f5:50:fd:93:02:e3:c7:af:32:fc:23:4b:a2:50: fa:66:d4:84:a5:5f:04:a4:85:c2:b1:1c:94:fd:09: d1:25:84:5f:63:92:41:e7:a7:fd:6e:bd:a4:94:85: 7d:5d:a0:3b:43:12:a2:86:28:8e:c0:02:50:22:1e: 13:57:bd:9f:ff:58:a1:22:86:f4:ee:15:8e:f6:aa: 2f:cb:4f:bd:ef:2c:f1:0a:5a:09:eb:31:66:bd:3d: f1:4a:5d:6c:eb:47:b8:f1:0d:f9:71:9b:5d:19:ae: e6:05:14:56:02:53:65:28:72:80:16:c1:c4:5e:8f: a6:e8:fd:9d:79:2b:bd:6f:5b:39:dc:e0:41:b0:79: e4:0a:2f:3d:53:f8:4b:cd:c4:41:2e:93:2d:b6:37: ab:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:51:28:21:A2:A7:55:FA:59:24:3C:3E:B9:B1:D6:D0:46:5F:21:82 X509v3 Authority Key Identifier: keyid:60:03:35:43:61:AF:66:B2:F3:71:53:B9:A7:36:5E:E5:72:F6:82:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/6/6003354361AF66B2F37153B9A7365EE572F6822E.crl Authority Information Access: CA Issuers - URI:rsync://krill.47272.net/repo/HYEHOST/5/6003354361AF66B2F37153B9A7365EE572F6822E.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/6/6003354361AF66B2F37153B9A7365EE572F6822E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ca:35:b3:2e:f3:5f:4d:3a:dd:ad:f2:da:7b:39:c6:f6:f4:0e: 91:77:d9:22:bb:b0:8b:56:33:77:51:6a:1a:d2:d6:1f:a1:a5: cf:62:04:26:4a:ae:52:f7:41:21:74:e0:98:bc:87:a1:3c:99: 29:40:08:7a:95:d9:28:c8:01:f9:b4:1b:fe:86:c7:29:cd:e0: 6e:18:13:60:a2:07:e6:f8:9d:3a:39:c0:88:dd:c8:33:2b:bc: c2:64:76:3e:46:8d:07:51:12:10:dc:cd:81:f8:ee:7d:9c:a3: da:66:78:e0:d4:79:54:29:f4:a8:6a:3a:83:98:11:1f:c1:57: 62:77:b9:6f:b6:61:ae:a6:73:7d:26:e3:85:ed:3f:f0:8f:b7: 9a:08:80:50:81:75:36:6b:a1:e7:ea:25:00:31:ad:87:0d:a9: 3a:ff:1e:76:95:21:33:a8:e5:91:98:1e:7f:c4:81:f0:57:f9: 8a:8c:d4:d4:37:0a:3c:d0:45:2b:47:56:65:46:0b:03:c9:60: 70:f7:2a:e6:b8:27:d0:a2:41:cf:bb:9f:41:2f:76:1e:86:f3: 3e:e1:fd:9d:c1:27:ff:13:21:dd:75:1d:76:98:47:16:11:0f: 77:b2:3c:3a:17:b0:ab:47:d0:76:d7:d4:28:a1:84:f8:8e:29: 4f:8e:98:17 -----BEGIN CERTIFICATE----- MIIFSDCCBDCgAwIBAgIUH1wpJhJg2Yv94L5VKZ6xqwv49U8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjAwMzM1NDM2MUFGNjZCMkYzNzE1M0I5QTczNjVFRTU3 MkY2ODIyRTAeFw0yNjAzMDEwODQ4NDRaFw0yNjAzMDIxMDA3NDRaMDMxMTAvBgNV BAMTKDdENTEyODIxQTJBNzU1RkE1OTI0M0MzRUI5QjFENkQwNDY1RjIxODIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChnwdxuX+De9Fa6xVdxs8fu/8k Vna8c5+6hwspsAT0nujUSGaYCAohTV//RHUVZi/GduCxPEl9sNLwsritueHkJazO gk4YKMu9neZEfxSr7mjRg3vIdt5gUI6lztojriCQiUq88KoNRtv1UP2TAuPHrzL8 I0uiUPpm1ISlXwSkhcKxHJT9CdElhF9jkkHnp/1uvaSUhX1doDtDEqKGKI7AAlAi HhNXvZ//WKEihvTuFY72qi/LT73vLPEKWgnrMWa9PfFKXWzrR7jxDflxm10ZruYF FFYCU2UocoAWwcRej6bo/Z15K71vWznc4EGweeQKLz1T+EvNxEEuky22N6uxAgMB AAGjggJSMIICTjAdBgNVHQ4EFgQUfVEoIaKnVfpZJDw+ubHW0EZfIYIwHwYDVR0j BBgwFoAUYAM1Q2GvZrLzcVO5pzZe5XL2gi4wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZDdlNDU5MmUtMjNjMC00Y2NjLTk0ZGEtNmM5NTgwN2Y4 M2U3LzYvNjAwMzM1NDM2MUFGNjZCMkYzNzE1M0I5QTczNjVFRTU3MkY2ODIyRS5j cmwwbwYIKwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL2tyaWxsLjQ3 MjcyLm5ldC9yZXBvL0hZRUhPU1QvNS82MDAzMzU0MzYxQUY2NkIyRjM3MTUzQjlB NzM2NUVFNTcyRjY4MjJFLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2Q3ZTQ1OTJlLTIzYzAtNGNjYy05NGRhLTZjOTU4MDdmODNlNy82LzYwMDMzNTQz NjFBRjY2QjJGMzcxNTNCOUE3MzY1RUU1NzJGNjgyMkUubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQDKNbMu 819NOt2t8tp7Ocb29A6Rd9kiu7CLVjN3UWoa0tYfoaXPYgQmSq5S90EhdOCYvIeh PJkpQAh6ldkoyAH5tBv+hscpzeBuGBNgogfm+J06OcCI3cgzK7zCZHY+Ro0HURIQ 3M2B+O59nKPaZnjg1HlUKfSoajqDmBEfwVdid7lvtmGupnN9JuOF7T/wj7eaCIBQ gXU2a6Hn6iUAMa2HDak6/x52lSEzqOWRmB5/xIHwV/mKjNTUNwo80EUrR1ZlRgsD yWBw9yrmuCfQokHPu59BL3YehvM+4f2dwSf/EyHddR12mEcWEQ93sjw6F7CrR9B2 19QooYT4jilPjpgX -----END CERTIFICATE-----Generated at Mon Mar 2 04:03:18 2026 by rpki-client