$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/6/6003354361AF66B2F37153B9A7365EE572F6822E.mft File: 6003354361AF66B2F37153B9A7365EE572F6822E.mft (raw, json) Hash identifier: FsBY3jbnzzAyvhCOJbofJxG+ijZNrc9OpCZ5HH+cXSs= Subject key identifier: 77:7A:9B:90:DC:A3:A8:99:55:F9:B8:00:6E:DC:68:98:03:CD:53:36 Authority key identifier: 60:03:35:43:61:AF:66:B2:F3:71:53:B9:A7:36:5E:E5:72:F6:82:2E Certificate issuer: /CN=6003354361AF66B2F37153B9A7365EE572F6822E Certificate serial: 3F08083949EA434740DD0F103E2766592E6A9ACA Authority info access: rsync://krill.47272.net/repo/HYEHOST/5/6003354361AF66B2F37153B9A7365EE572F6822E.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/6/6003354361AF66B2F37153B9A7365EE572F6822E.mft Manifest number: 0251 Signing time: Mon 21 Sep 2026 02:50:46 +0000 Manifest this update: Mon 21 Sep 2026 02:45:46 +0000 Manifest next update: Tue 22 Sep 2026 05:39:46 +0000 Files and hashes: 1: 326130613a363034343a626130303a3a2f34382d3438203d3e20323134373233.roa (hash: LzTu6U40g1XTezmtW0NeoVe0srZk8dKNtz7kNoofjgM=) 2: 326130613a363034343a626130323a3a2f34372d3438203d3e20323134373233.roa (hash: g+zrmwdq6hWdyayuUZ4HEI1hjl4/P26SKw7jOnKO8XQ=) 3: 326130613a363034343a626130303a3a2f34302d3430203d3e20323134373233.roa (hash: Me4H7YZgZygEIvpxgeeEc04IMatngbdJsoUf/hlBlAQ=) 4: 6003354361AF66B2F37153B9A7365EE572F6822E.crl (hash: TwRS9s2jVrNtwr5UlgAYymGqs0vqwK7SfJC/c3+SrGE=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/6/6003354361AF66B2F37153B9A7365EE572F6822E.crl rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/6/6003354361AF66B2F37153B9A7365EE572F6822E.mft rsync://krill.47272.net/repo/HYEHOST/5/6003354361AF66B2F37153B9A7365EE572F6822E.cer rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 22 Sep 2026 05:39:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:08:08:39:49:ea:43:47:40:dd:0f:10:3e:27:66:59:2e:6a:9a:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6003354361AF66B2F37153B9A7365EE572F6822E Validity Not Before: Sep 21 02:45:46 2026 GMT Not After : Sep 22 05:39:46 2026 GMT Subject: CN=777A9B90DCA3A89955F9B8006EDC689803CD5336 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:4b:c0:91:6f:60:6f:66:f0:07:33:94:b6:93: 58:c9:73:08:07:c6:e3:1b:ee:6e:94:7b:e3:f3:83: 1a:72:d6:6c:5a:5a:e5:c4:b2:40:b2:d6:af:89:94: 22:8a:b8:e8:3e:4b:0c:a6:7a:1e:41:f4:0a:5a:7a: 6b:4c:39:3d:28:f9:0c:df:97:5c:4c:84:7f:49:86: 86:d8:7b:8b:a4:18:39:1d:67:0d:0b:2f:5d:d2:3c: 9c:ab:15:4c:bc:c5:eb:6b:b9:f5:26:d6:ce:1e:86: 85:bf:e2:42:8a:b0:dc:a7:ae:47:41:4c:df:02:ea: 54:b8:f5:e3:41:be:cf:ad:20:da:a9:18:d4:d2:c2: 7f:d3:5a:18:82:bf:52:04:cf:1d:f6:fb:f5:59:f3: df:06:43:c2:6d:c4:a9:c5:c6:7c:86:41:6a:e7:37: 41:99:38:52:cd:6c:1b:ce:d9:9a:b9:4a:ce:fe:57: 44:ae:0c:fe:e8:34:6f:ce:45:ab:47:52:8d:96:f5: 5e:56:eb:2b:b2:d6:7b:a4:f8:7d:a2:fc:a8:57:5d: 5c:a3:99:32:9a:d5:9c:ff:02:fe:a3:c0:21:f8:39: 0f:ae:31:e3:1e:7f:cb:82:59:88:f5:d7:71:a4:97: 14:ff:cd:60:5e:54:cf:bc:fa:c2:03:d8:a8:5f:98: 15:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:7A:9B:90:DC:A3:A8:99:55:F9:B8:00:6E:DC:68:98:03:CD:53:36 X509v3 Authority Key Identifier: keyid:60:03:35:43:61:AF:66:B2:F3:71:53:B9:A7:36:5E:E5:72:F6:82:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/6/6003354361AF66B2F37153B9A7365EE572F6822E.crl Authority Information Access: CA Issuers - URI:rsync://krill.47272.net/repo/HYEHOST/5/6003354361AF66B2F37153B9A7365EE572F6822E.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/6/6003354361AF66B2F37153B9A7365EE572F6822E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b2:0a:24:47:73:2e:5e:60:5e:be:35:e6:ea:91:14:4c:30:97: db:7b:e1:a9:a3:50:1b:c6:52:7b:4f:44:f5:17:0c:2b:98:18: b5:1c:b2:02:dd:99:f4:a9:3b:eb:74:a0:4d:79:07:c2:83:a2: 92:0d:94:6e:a0:56:56:a8:bc:5f:b1:97:14:e2:e8:df:a9:e2: 32:ca:a4:53:05:e4:3e:07:85:17:76:38:5d:14:ed:7e:f9:2a: 49:79:27:97:0e:62:2b:35:3b:0f:80:4c:10:89:84:f0:e5:c5: 35:ec:03:52:e5:70:5c:58:0d:0c:43:28:2c:6b:dc:fd:d4:b6: f4:2d:78:b9:ea:cb:3a:6e:a9:2a:de:48:e7:ab:6e:c7:b7:d0: 68:c0:cc:0c:66:73:d0:cf:55:be:9a:97:68:4b:4a:53:2c:0e: f4:a2:b6:fa:9e:a8:8b:80:bb:dd:27:b1:1b:be:5c:9d:38:79: 1c:3d:d8:74:18:3c:da:ab:42:ef:25:3f:b5:1e:d7:b5:5f:30: a6:76:be:8f:e7:c9:f9:57:65:71:c0:02:42:21:b1:ff:a7:85: 00:32:f9:86:c3:42:76:f6:1e:4f:50:74:26:c4:a2:d2:6a:4d: 35:13:33:04:2d:b8:f8:f6:a9:43:e7:a3:f1:7c:92:9c:8b:54: 36:79:15:d7 -----BEGIN CERTIFICATE----- MIIFSDCCBDCgAwIBAgIUPwgIOUnqQ0dA3Q8QPidmWS5qmsowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjAwMzM1NDM2MUFGNjZCMkYzNzE1M0I5QTczNjVFRTU3 MkY2ODIyRTAeFw0yNjA5MjEwMjQ1NDZaFw0yNjA5MjIwNTM5NDZaMDMxMTAvBgNV BAMTKDc3N0E5QjkwRENBM0E4OTk1NUY5QjgwMDZFREM2ODk4MDNDRDUzMzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQS8CRb2BvZvAHM5S2k1jJcwgH xuMb7m6Ue+Pzgxpy1mxaWuXEskCy1q+JlCKKuOg+Swymeh5B9ApaemtMOT0o+Qzf l1xMhH9JhobYe4ukGDkdZw0LL13SPJyrFUy8xetrufUm1s4ehoW/4kKKsNynrkdB TN8C6lS49eNBvs+tINqpGNTSwn/TWhiCv1IEzx32+/VZ898GQ8JtxKnFxnyGQWrn N0GZOFLNbBvO2Zq5Ss7+V0SuDP7oNG/ORatHUo2W9V5W6yuy1nuk+H2i/KhXXVyj mTKa1Zz/Av6jwCH4OQ+uMeMef8uCWYj113GklxT/zWBeVM+8+sID2KhfmBWBAgMB AAGjggJSMIICTjAdBgNVHQ4EFgQUd3qbkNyjqJlV+bgAbtxomAPNUzYwHwYDVR0j BBgwFoAUYAM1Q2GvZrLzcVO5pzZe5XL2gi4wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZDdlNDU5MmUtMjNjMC00Y2NjLTk0ZGEtNmM5NTgwN2Y4 M2U3LzYvNjAwMzM1NDM2MUFGNjZCMkYzNzE1M0I5QTczNjVFRTU3MkY2ODIyRS5j cmwwbwYIKwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL2tyaWxsLjQ3 MjcyLm5ldC9yZXBvL0hZRUhPU1QvNS82MDAzMzU0MzYxQUY2NkIyRjM3MTUzQjlB NzM2NUVFNTcyRjY4MjJFLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2Q3ZTQ1OTJlLTIzYzAtNGNjYy05NGRhLTZjOTU4MDdmODNlNy82LzYwMDMzNTQz NjFBRjY2QjJGMzcxNTNCOUE3MzY1RUU1NzJGNjgyMkUubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCyCiRH cy5eYF6+NebqkRRMMJfbe+Gpo1AbxlJ7T0T1FwwrmBi1HLIC3Zn0qTvrdKBNeQfC g6KSDZRuoFZWqLxfsZcU4ujfqeIyyqRTBeQ+B4UXdjhdFO1++SpJeSeXDmIrNTsP gEwQiYTw5cU17ANS5XBcWA0MQygsa9z91Lb0LXi56ss6bqkq3kjnq27Ht9BowMwM ZnPQz1W+mpdoS0pTLA70orb6nqiLgLvdJ7EbvlydOHkcPdh0GDzaq0LvJT+1Hte1 XzCmdr6P58n5V2VxwAJCIbH/p4UAMvmGw0J29h5PUHQmxKLSak01EzMELbj49qlD 56PxfJKci1Q2eRXX -----END CERTIFICATE-----Generated at Mon Sep 21 16:42:56 2026 by rpki-client