The name your seeing in the Web Client and via the Get-VMHostFirewallException is not the rulesetid but the Summary field.
The rulesetid that you need in $esxcli.network.firewall.ruleset.set, is in fact the Name field coming from $esxcli.network.firewall.ruleset.list.
For the 'SSH Client' that rulesetid is in fact sshClient.
I would suggest you update your CSV with the real rulesetid.
In fact you can create a table for that
$esxName='MyEsx'
Get-VMHost-Name $esxName|
Get-VMHostFirewallException|
Select Name,@{N='rulesetid';E={$_.Extensiondata.Key}}
