$ rpki-client -vvf rpki-rps.arin.net/repository/cea5b3484c2b450fb2773b1b981f5087/1/ED454B99C2B0E472A9542F909449EBE8F31FFAD9.mft File: ED454B99C2B0E472A9542F909449EBE8F31FFAD9.mft (raw, json) Hash identifier: FRdRlgtrDGT1PAATE9BuobvtgktpKcxnDfDv0sk7dNs= Subject key identifier: A8:2C:6F:3E:B2:90:96:D1:0B:1E:5E:F2:84:AC:75:C7:D2:CD:64:AE Authority key identifier: ED:45:4B:99:C2:B0:E4:72:A9:54:2F:90:94:49:EB:E8:F3:1F:FA:D9 Certificate issuer: /CN=ED454B99C2B0E472A9542F909449EBE8F31FFAD9 Certificate serial: 1B7448EEA4D4E09510CEECF234173E17A27E3CFD Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/ED454B99C2B0E472A9542F909449EBE8F31FFAD9.cer Subject info access: rsync://rpki-rps.arin.net/repository/cea5b3484c2b450fb2773b1b981f5087/1/ED454B99C2B0E472A9542F909449EBE8F31FFAD9.mft Manifest number: A4 Signing time: Thu 26 Mar 2026 06:41:44 +0000 Manifest this update: Thu 26 Mar 2026 06:36:44 +0000 Manifest next update: Fri 27 Mar 2026 07:15:44 +0000 Files and hashes: 1: 326130373a353463313a633030303a3a2f34342d3434203d3e20323134373632.roa (hash: Ehn6pGTxKobCbcqHXhYXu7JSWP4YzSgJi4eDlDBkLxc=) 2: ED454B99C2B0E472A9542F909449EBE8F31FFAD9.crl (hash: 5ZR6MCdvCB+ahvRfduTt0YC/81n0qrVlHY8PVknFHd0=) 3: 326130373a353463313a633031303a3a2f34342d3438203d3e20323031313332.roa (hash: nCaZK5znVYJTFYBYBBiKoIVkT1bc2I4KpDdvg2uat2U=) Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/cea5b3484c2b450fb2773b1b981f5087/1/ED454B99C2B0E472A9542F909449EBE8F31FFAD9.crl rsync://rpki-rps.arin.net/repository/cea5b3484c2b450fb2773b1b981f5087/1/ED454B99C2B0E472A9542F909449EBE8F31FFAD9.mft rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/ED454B99C2B0E472A9542F909449EBE8F31FFAD9.cer rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.crl rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 27 Mar 2026 00:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:74:48:ee:a4:d4:e0:95:10:ce:ec:f2:34:17:3e:17:a2:7e:3c:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ED454B99C2B0E472A9542F909449EBE8F31FFAD9 Validity Not Before: Mar 26 06:36:44 2026 GMT Not After : Mar 27 07:15:44 2026 GMT Subject: CN=A82C6F3EB29096D10B1E5EF284AC75C7D2CD64AE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:05:29:bb:42:9a:0e:c3:88:4b:67:42:85:2c: cd:0f:c8:50:56:5a:f7:40:6f:34:8e:c5:f5:47:36: 5b:f8:2c:38:0d:00:78:26:e3:ea:be:79:ad:be:45: 9c:c7:f5:39:16:49:22:33:31:36:75:a7:c8:d2:d9: f7:8d:a8:d2:4b:a1:f0:96:05:3f:9e:d4:90:d4:fb: 67:93:1f:91:77:4c:57:f8:92:6c:c4:34:c3:a1:eb: c6:8a:bb:c8:58:39:37:fa:de:15:13:37:98:84:a4: 88:2d:22:d6:13:52:f0:23:40:b4:31:98:42:8d:ea: ab:d5:a6:dd:aa:f3:33:e8:4e:54:26:53:dc:35:e8: 31:50:da:46:4b:f3:62:f9:a8:01:60:a1:c7:51:fb: aa:e8:6f:f2:74:31:19:05:6c:52:8c:19:d0:95:4f: 2d:2f:cb:85:ed:47:0f:22:4a:ec:66:4f:a1:b9:e8: 85:12:4a:01:26:62:d7:62:af:dd:2b:c2:1b:09:b1: 15:10:42:95:c0:20:17:7f:db:1d:bc:0c:cd:b2:60: c7:9f:38:bb:44:f1:82:7d:2d:8e:ac:9f:fb:dc:01: 95:09:f6:ff:04:0d:42:9d:f8:1a:94:6b:ef:e5:3e: d6:2c:36:eb:dc:c7:ab:fd:6e:a0:07:d8:2e:4e:69: cd:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:2C:6F:3E:B2:90:96:D1:0B:1E:5E:F2:84:AC:75:C7:D2:CD:64:AE X509v3 Authority Key Identifier: keyid:ED:45:4B:99:C2:B0:E4:72:A9:54:2F:90:94:49:EB:E8:F3:1F:FA:D9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/cea5b3484c2b450fb2773b1b981f5087/1/ED454B99C2B0E472A9542F909449EBE8F31FFAD9.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/ED454B99C2B0E472A9542F909449EBE8F31FFAD9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/cea5b3484c2b450fb2773b1b981f5087/1/ED454B99C2B0E472A9542F909449EBE8F31FFAD9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:35:e1:07:ab:3e:89:4c:79:15:ae:d5:f6:f2:8a:c2:17:a3: ca:1f:c6:2b:f6:a8:c1:b5:09:33:fb:e3:00:d6:70:6b:11:55: 5f:e7:32:fb:99:7a:c9:15:c1:7d:05:be:36:7c:f2:50:60:ed: 74:e1:89:49:25:4c:75:5b:88:f9:3c:63:52:17:98:0e:39:02: 43:9f:ab:10:08:52:8c:c8:af:b3:d8:7c:67:c5:c0:b9:bf:e2: 0b:51:44:dc:ab:97:5c:5f:f9:40:b6:76:0d:87:a9:b4:62:11: f3:6f:7c:3e:14:4b:00:50:f3:17:d3:8d:71:d5:f3:f4:29:a3: 72:9c:ed:4d:c3:1a:c5:58:be:68:4f:2a:fe:e4:be:52:7b:d5: b7:d1:16:07:08:47:77:6a:d9:15:b3:f6:2a:cf:7f:5e:f3:f0: d5:dc:fe:a8:05:bf:f6:36:c8:40:80:01:7d:40:fe:76:03:ab: 1e:84:e2:9f:43:fd:8d:76:24:f2:c6:ec:a9:9b:13:59:db:f8: aa:99:3e:06:56:70:b1:5a:de:17:dc:e1:40:c2:65:cb:74:be: a2:d9:76:15:df:6b:d2:36:33:50:3d:99:ae:d6:aa:24:d9:81: 30:aa:e9:3c:42:5a:e9:e5:e6:99:51:62:ec:92:dd:d9:38:b7: 60:14:67:8a -----BEGIN CERTIFICATE----- MIIFXTCCBEWgAwIBAgIUG3RI7qTU4JUQzuzyNBc+F6J+PP0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUQ0NTRCOTlDMkIwRTQ3MkE5NTQyRjkwOTQ0OUVCRThG MzFGRkFEOTAeFw0yNjAzMjYwNjM2NDRaFw0yNjAzMjcwNzE1NDRaMDMxMTAvBgNV BAMTKEE4MkM2RjNFQjI5MDk2RDEwQjFFNUVGMjg0QUM3NUM3RDJDRDY0QUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDeBSm7QpoOw4hLZ0KFLM0PyFBW WvdAbzSOxfVHNlv4LDgNAHgm4+q+ea2+RZzH9TkWSSIzMTZ1p8jS2feNqNJLofCW BT+e1JDU+2eTH5F3TFf4kmzENMOh68aKu8hYOTf63hUTN5iEpIgtItYTUvAjQLQx mEKN6qvVpt2q8zPoTlQmU9w16DFQ2kZL82L5qAFgocdR+6rob/J0MRkFbFKMGdCV Ty0vy4XtRw8iSuxmT6G56IUSSgEmYtdir90rwhsJsRUQQpXAIBd/2x28DM2yYMef OLtE8YJ9LY6sn/vcAZUJ9v8EDUKd+BqUa+/lPtYsNuvcx6v9bqAH2C5Oac2fAgMB AAGjggJnMIICYzAdBgNVHQ4EFgQUqCxvPrKQltELHl7yhKx1x9LNZK4wHwYDVR0j BBgwFoAU7UVLmcKw5HKpVC+QlEnr6PMf+tkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv cnkvY2VhNWIzNDg0YzJiNDUwZmIyNzczYjFiOTgxZjUwODcvMS9FRDQ1NEI5OUMy QjBFNDcyQTk1NDJGOTA5NDQ5RUJFOEYzMUZGQUQ5LmNybDCBngYIKwYBBQUHAQEE gZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L2FhMDA0YmExLTQxOWItNGRiNS1iYmQzLTVjY2E2MzNj YWUzZi80L0VENDU0Qjk5QzJCMEU0NzJBOTU0MkY5MDk0NDlFQkU4RjMxRkZBRDku Y2VyMIGTBggrBgEFBQcBCwSBhjCBgzCBgAYIKwYBBQUHMAuGdHJzeW5jOi8vcnBr aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS9jZWE1YjM0ODRjMmI0NTBmYjI3NzNi MWI5ODFmNTA4Ny8xL0VENDU0Qjk5QzJCMEU0NzJBOTU0MkY5MDk0NDlFQkU4RjMx RkZBRDkubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcB Af8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0G CSqGSIb3DQEBCwUAA4IBAQA7NeEHqz6JTHkVrtX28orCF6PKH8Yr9qjBtQkz++MA 1nBrEVVf5zL7mXrJFcF9Bb42fPJQYO104YlJJUx1W4j5PGNSF5gOOQJDn6sQCFKM yK+z2HxnxcC5v+ILUUTcq5dcX/lAtnYNh6m0YhHzb3w+FEsAUPMX041x1fP0KaNy nO1NwxrFWL5oTyr+5L5Se9W30RYHCEd3atkVs/Yqz39e8/DV3P6oBb/2NshAgAF9 QP52A6sehOKfQ/2NdiTyxuypmxNZ2/iqmT4GVnCxWt4X3OFAwmXLdL6i2XYV32vS NjNQPZmu1qok2YEwquk8Qlrp5eaZUWLskt3ZOLdgFGeK -----END CERTIFICATE-----Generated at Thu Mar 26 10:00:24 2026 by rpki-client