$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/7/6A6F6EC272A5EBDC18241C2C84D1D9FE94C125AA.mft File: 6A6F6EC272A5EBDC18241C2C84D1D9FE94C125AA.mft (raw, json) Hash identifier: IitO/XEFFS/uwZNwErSsn1kB2wPWbU/piRZtnPRFC3M= Subject key identifier: 3F:5C:BB:07:12:57:CD:7E:0A:5D:A8:31:65:0C:D8:B9:8D:D9:34:1F Authority key identifier: 6A:6F:6E:C2:72:A5:EB:DC:18:24:1C:2C:84:D1:D9:FE:94:C1:25:AA Certificate issuer: /CN=43729997152fd84fcda6d190c3b3195b02679660112be9a2d7 Certificate serial: 5F2628B3CBA8AAFA322F9EEDE9033BBD7C2292B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/829fb872-15bb-4a4e-9ed9-259960b049bd/43729997152fd84fcda6d190c3b3195b02679660112be9a2d7.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/7/6A6F6EC272A5EBDC18241C2C84D1D9FE94C125AA.mft Manifest number: 04CA Signing time: Wed 25 Mar 2026 22:08:09 +0000 Manifest this update: Wed 25 Mar 2026 22:03:09 +0000 Manifest next update: Thu 26 Mar 2026 22:47:09 +0000 Files and hashes: 1: 323630323a666136653a3a2f33362d3336203d3e203133363436.roa (hash: VGLKsgogi2I3ngbX4zz98KwF+ce4xUWbXael6VtJ/R8=) 2: 3139382e3133352e3136392e302f32342d3234203d3e20333936393933.roa (hash: ZuqL+fdFsSzEWPLF+KldkjLdFZi3woWq3fujFGdDY0Y=) 3: 6A6F6EC272A5EBDC18241C2C84D1D9FE94C125AA.crl (hash: DqBkoqw6LO8T0TlAwtqLQVlrfkQAXS3qn5Oyxy6FVuM=) 4: EEF3EC40152A747D52835AE8973E7DC8C193A840.cer (hash: b9uDQIv17Mqj0faPNTNtrEIHppsSxn28riugd1hAwe4=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/7/6A6F6EC272A5EBDC18241C2C84D1D9FE94C125AA.crl rsync://rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/7/6A6F6EC272A5EBDC18241C2C84D1D9FE94C125AA.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/829fb872-15bb-4a4e-9ed9-259960b049bd/43729997152fd84fcda6d190c3b3195b02679660112be9a2d7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/829fb872-15bb-4a4e-9ed9-259960b049bd/829fb872-15bb-4a4e-9ed9-259960b049bd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/829fb872-15bb-4a4e-9ed9-259960b049bd/829fb872-15bb-4a4e-9ed9-259960b049bd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/829fb872-15bb-4a4e-9ed9-259960b049bd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 26 Mar 2026 22:47:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:26:28:b3:cb:a8:aa:fa:32:2f:9e:ed:e9:03:3b:bd:7c:22:92:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=43729997152fd84fcda6d190c3b3195b02679660112be9a2d7 Validity Not Before: Mar 25 22:03:09 2026 GMT Not After : Mar 26 22:47:09 2026 GMT Subject: CN=3F5CBB071257CD7E0A5DA831650CD8B98DD9341F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:6f:39:17:d6:b6:da:4a:67:e8:c8:e5:29:6b: 6a:ff:2c:52:3c:22:96:c8:a3:8a:39:81:d2:87:10: a3:e5:18:4a:a6:23:40:b0:27:be:a0:f0:2b:1f:d4: 9c:bc:2f:3d:19:a0:a0:84:97:05:7e:e1:7e:f0:26: 9d:cf:6a:c9:dd:c2:d1:0c:2c:a9:98:89:f1:06:d5: ff:c0:af:2e:de:9b:b4:4b:8a:4c:f3:9d:13:44:f0: 41:a8:38:60:4a:cc:b3:89:63:aa:62:f7:b1:c4:67: 39:d8:71:9d:77:8e:c5:08:32:d2:b0:a7:71:dd:72: a8:c3:ce:60:74:a1:9a:f1:56:23:fa:63:4e:86:10: 80:8f:c8:5f:39:f0:ae:ce:5b:eb:50:b7:f5:68:5f: 04:c4:cc:ef:19:07:fd:b1:15:67:91:07:15:7c:1b: 6e:50:36:22:1e:83:77:d4:29:dc:be:fa:26:fc:67: 65:fa:33:b0:0b:48:98:04:2c:e4:7c:c3:8c:44:37: 27:3a:35:52:12:fa:fd:96:a2:39:99:4a:0b:d0:ca: 5e:67:b2:fa:b2:a2:e5:6d:7e:92:fb:1d:c5:ff:00: 1c:47:bb:88:60:36:7b:44:70:cf:61:19:a9:e3:25: 9d:56:38:4e:37:e0:19:76:af:c6:d1:f7:09:ee:96: fe:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:5C:BB:07:12:57:CD:7E:0A:5D:A8:31:65:0C:D8:B9:8D:D9:34:1F X509v3 Authority Key Identifier: keyid:6A:6F:6E:C2:72:A5:EB:DC:18:24:1C:2C:84:D1:D9:FE:94:C1:25:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/7/6A6F6EC272A5EBDC18241C2C84D1D9FE94C125AA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/829fb872-15bb-4a4e-9ed9-259960b049bd/43729997152fd84fcda6d190c3b3195b02679660112be9a2d7.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/7/6A6F6EC272A5EBDC18241C2C84D1D9FE94C125AA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:78:09:2c:17:d7:47:61:2f:ec:b1:74:ef:39:b2:06:af:ab: ff:8c:56:79:29:a5:29:fb:e1:86:ed:8b:a9:e0:81:ef:e9:7e: 49:b8:cf:c9:e8:70:90:08:89:e9:41:57:80:0f:e1:dd:7e:6d: 20:d7:3c:44:63:eb:96:cc:82:9d:db:4f:81:85:b1:dd:75:55: c3:25:4b:94:d7:f3:21:b9:a6:01:3a:86:fc:ca:53:8c:46:3a: 9b:f5:87:cc:5c:92:81:dc:b9:89:0a:08:da:df:77:c9:7b:76: 3f:99:bd:fd:8c:2d:1a:da:f7:08:7c:77:cb:aa:eb:06:e7:04: 0e:1c:81:54:eb:12:39:9c:c9:d3:d8:f0:88:b1:95:27:03:ba: 26:46:81:84:58:60:7a:32:68:eb:19:88:d7:c5:75:40:64:cc: c1:64:98:89:ac:79:51:93:4f:39:37:bd:1e:b8:d9:ee:d8:ec: c5:e1:25:57:3e:0f:5c:cc:5a:3a:23:f8:d1:51:91:39:5d:cf: e1:37:4b:64:d5:fd:3a:a1:15:83:0a:71:f2:70:b0:a9:27:fa: 65:5d:c0:6d:c6:7d:d6:bb:67:b1:c2:e0:3c:18:1f:f4:0d:24: cc:a5:4e:03:fa:a3:86:f1:15:3f:95:6a:8c:4e:56:5d:e7:78: f6:04:9d:b1 -----BEGIN CERTIFICATE----- MIIF1zCCBL+gAwIBAgIUXyYos8uoqvoyL57t6QM7vXwikrQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNDM3Mjk5OTcxNTJmZDg0ZmNkYTZkMTkwYzNiMzE5NWIw MjY3OTY2MDExMmJlOWEyZDcwHhcNMjYwMzI1MjIwMzA5WhcNMjYwMzI2MjI0NzA5 WjAzMTEwLwYDVQQDEygzRjVDQkIwNzEyNTdDRDdFMEE1REE4MzE2NTBDRDhCOThE RDkzNDFGMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6W85F9a22kpn 6MjlKWtq/yxSPCKWyKOKOYHShxCj5RhKpiNAsCe+oPArH9ScvC89GaCghJcFfuF+ 8Cadz2rJ3cLRDCypmInxBtX/wK8u3pu0S4pM850TRPBBqDhgSsyziWOqYvexxGc5 2HGdd47FCDLSsKdx3XKow85gdKGa8VYj+mNOhhCAj8hfOfCuzlvrULf1aF8ExMzv GQf9sRVnkQcVfBtuUDYiHoN31Cncvvom/Gdl+jOwC0iYBCzkfMOMRDcnOjVSEvr9 lqI5mUoL0MpeZ7L6sqLlbX6S+x3F/wAcR7uIYDZ7RHDPYRmp4yWdVjhON+AZdq/G 0fcJ7pb+/QIDAQABo4IC1zCCAtMwHQYDVR0OBBYEFD9cuwcSV81+Cl2oMWUM2LmN 2TQfMB8GA1UdIwQYMBaAFGpvbsJypevcGCQcLITR2f6UwSWqMA4GA1UdDwEB/wQE AwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3luYzovL3JzeW5jLnBhYXMu cnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzY2YmQ5MmYxLTQxNWItNDc2NS04YTE2 LWRiZmM0NTkzYzFhOC83LzZBNkY2RUMyNzJBNUVCREMxODI0MUMyQzg0RDFEOUZF OTRDMTI1QUEuY3JsMIHzBggrBgEFBQcBAQSB5jCB4zCB4AYIKwYBBQUHMAKGgdNy c3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0 YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTIt NDk5NC04ZjZjLWQ2YzkxYjBiODQxNS84MjlmYjg3Mi0xNWJiLTRhNGUtOWVkOS0y NTk5NjBiMDQ5YmQvNDM3Mjk5OTcxNTJmZDg0ZmNkYTZkMTkwYzNiMzE5NWIwMjY3 OTY2MDExMmJlOWEyZDcuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYIKwYBBQUH MAuGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv NjZiZDkyZjEtNDE1Yi00NzY1LThhMTYtZGJmYzQ1OTNjMWE4LzcvNkE2RjZFQzI3 MkE1RUJEQzE4MjQxQzJDODREMUQ5RkU5NEMxMjVBQS5tZnQwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUA MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAEJ4CSwX 10dhL+yxdO85sgavq/+MVnkppSn74Ybti6ngge/pfkm4z8nocJAIielBV4AP4d1+ bSDXPERj65bMgp3bT4GFsd11VcMlS5TX8yG5pgE6hvzKU4xGOpv1h8xckoHcuYkK CNrfd8l7dj+Zvf2MLRra9wh8d8uq6wbnBA4cgVTrEjmcydPY8IixlScDuiZGgYRY YHoyaOsZiNfFdUBkzMFkmImseVGTTzk3vR642e7Y7MXhJVc+D1zMWjoj+NFRkTld z+E3S2TV/TqhFYMKcfJwsKkn+mVdwG3Gfda7Z7HC4DwYH/QNJMylTgP6o4bxFT+V aoxOVl3nePYEnbE= -----END CERTIFICATE-----Generated at Thu Mar 26 13:59:00 2026 by rpki-client