$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/1/3FCD3A839EA1417FD988F3DDFD0454197FAAF47A.mft File: 3FCD3A839EA1417FD988F3DDFD0454197FAAF47A.mft (raw, json) Hash identifier: J3ulOW7P65M7ep5+7hcdcVAzWhsHiBzaCYwkNa/PyE8= Subject key identifier: 54:9A:74:AF:5D:6F:F7:50:95:9E:BA:A7:D9:00:FE:B2:D1:24:68:24 Authority key identifier: 3F:CD:3A:83:9E:A1:41:7F:D9:88:F3:DD:FD:04:54:19:7F:AA:F4:7A Certificate issuer: /CN=324ffe39a98a0146b503d8a015ca2c2e767cf3d0b9fde6231b Certificate serial: 12ABE15711CCDFE3D61DDA1F49D438086DCAFDAD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/51cd99f7-2f42-4dec-b2c6-09bafaa3780e/324ffe39a98a0146b503d8a015ca2c2e767cf3d0b9fde6231b.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/1/3FCD3A839EA1417FD988F3DDFD0454197FAAF47A.mft Manifest number: 03A8 Signing time: Thu 23 Jul 2026 08:19:45 +0000 Manifest this update: Thu 23 Jul 2026 08:14:45 +0000 Manifest next update: Fri 24 Jul 2026 10:22:45 +0000 Files and hashes: 1: 3FCD3A839EA1417FD988F3DDFD0454197FAAF47A.crl (hash: u/OS00OGgPRp2ToiGnlLe2MAyxe0AcT6Q3/v5BHd5SE=) 2: AS402536.asa (hash: xuG+rFCTeYrWpHyA7Wqh+96IF5sUkS4DX7TKTpujn3k=) 3: 32332e3139312e34302e302f32342d3234203d3e203236393534.roa (hash: uS9rqFKZ07mB8+YZnPlfGTxqPhMI6sgRdMjKP2z7h/I=) 4: 3133302e31322e39332e302f32342d3234203d3e203236393534.roa (hash: vVLMMj/up4t8BoR2x4+9T6jLFKzm1RRXCwaLQiGBGUU=) 5: 323630323a663764653a3a2f34302d3438203d3e203236393534.roa (hash: huw/azfVtTuGJ+KiuQkTd/zUzlN/Io2KIFdebZxScmw=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/1/3FCD3A839EA1417FD988F3DDFD0454197FAAF47A.crl rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/1/3FCD3A839EA1417FD988F3DDFD0454197FAAF47A.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/51cd99f7-2f42-4dec-b2c6-09bafaa3780e/324ffe39a98a0146b503d8a015ca2c2e767cf3d0b9fde6231b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/51cd99f7-2f42-4dec-b2c6-09bafaa3780e/51cd99f7-2f42-4dec-b2c6-09bafaa3780e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/51cd99f7-2f42-4dec-b2c6-09bafaa3780e/51cd99f7-2f42-4dec-b2c6-09bafaa3780e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/51cd99f7-2f42-4dec-b2c6-09bafaa3780e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 24 Jul 2026 10:22:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:ab:e1:57:11:cc:df:e3:d6:1d:da:1f:49:d4:38:08:6d:ca:fd:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=324ffe39a98a0146b503d8a015ca2c2e767cf3d0b9fde6231b Validity Not Before: Jul 23 08:14:45 2026 GMT Not After : Jul 24 10:22:45 2026 GMT Subject: CN=549A74AF5D6FF750959EBAA7D900FEB2D1246824 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:0a:83:76:84:4c:3b:4f:37:d5:3e:64:c9:38: 10:70:ae:31:a9:19:5e:d4:84:9c:fe:00:9e:14:ac: f2:a5:9f:57:82:d4:f2:26:4d:3e:62:5e:c7:f1:14: a6:34:25:22:8e:44:8e:8b:01:82:a0:ae:93:85:b4: b3:1c:91:87:1f:62:d7:d5:ee:ae:98:b7:70:9a:39: b6:10:04:e4:eb:90:22:14:87:eb:29:cf:0a:ea:55: ab:57:86:68:19:b1:7e:ad:4d:6a:6c:52:cf:03:b9: 4a:b0:43:7e:68:91:4c:66:bb:2f:30:27:78:52:90: a3:bd:1a:b9:df:ac:fe:9c:4f:b6:84:e7:d7:09:34: 7c:54:ca:ab:03:6e:3b:c0:5b:27:76:df:55:e0:72: 23:5a:3a:45:95:30:f8:6b:15:ac:6b:60:9e:01:59: c5:c0:80:f0:20:70:41:87:86:dd:72:ed:56:25:2c: e6:68:99:e6:e7:b6:12:0a:2d:4b:b5:c4:53:e0:04: 15:ac:55:ed:4f:8e:5e:54:8a:33:b2:f6:dd:c2:d7: e7:c5:db:d8:2a:c8:43:13:d3:4c:ea:b7:53:71:9e: f5:ea:53:16:aa:7e:3c:c1:8b:c2:c4:97:f4:d9:be: f6:88:fc:24:3c:f2:f5:6b:2b:ad:04:66:c0:2c:cd: 5e:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:9A:74:AF:5D:6F:F7:50:95:9E:BA:A7:D9:00:FE:B2:D1:24:68:24 X509v3 Authority Key Identifier: keyid:3F:CD:3A:83:9E:A1:41:7F:D9:88:F3:DD:FD:04:54:19:7F:AA:F4:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/1/3FCD3A839EA1417FD988F3DDFD0454197FAAF47A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/51cd99f7-2f42-4dec-b2c6-09bafaa3780e/324ffe39a98a0146b503d8a015ca2c2e767cf3d0b9fde6231b.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/1/3FCD3A839EA1417FD988F3DDFD0454197FAAF47A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:89:1e:5f:1e:d2:e5:2c:de:8c:0d:24:b6:31:00:f2:75:a7: 27:35:6f:5a:f5:d8:b3:0c:ce:3f:e6:4c:34:73:10:4a:0c:e1: e5:ee:e4:01:08:54:40:cf:2b:a6:81:39:32:72:ef:ca:20:16: bf:de:87:21:79:cb:58:1f:29:6d:b3:7f:32:e5:9f:76:bf:78: a5:16:21:f7:e9:98:7a:63:59:3b:7c:cb:4c:69:07:9a:ae:24: 80:58:7d:1f:b9:a1:38:72:0b:e9:f1:d2:63:ae:8a:4d:71:31: 99:fb:af:3d:45:e1:83:4b:db:ab:e3:9b:bf:9e:71:a0:09:4c: cd:52:be:21:39:73:43:66:3e:c0:a0:ee:6b:91:4f:70:c6:8c: 60:d8:de:61:3e:1c:43:e9:c2:ac:d0:69:5f:07:98:64:96:4b: 76:ca:89:3b:f4:f2:66:37:99:7e:64:2c:96:ae:de:43:36:92: af:03:18:53:f1:da:81:d7:22:42:4e:ed:fc:da:6f:92:b3:44: f6:1a:05:17:0f:83:da:95:57:43:fb:da:cc:92:67:d0:d4:0d: a4:1e:8f:09:8d:f4:1d:dd:5c:ef:2e:9a:4d:e7:20:2c:22:ec: 04:85:d6:2c:10:1b:1a:4f:06:f5:f5:ea:f0:58:22:05:42:c0: e4:7b:d0:2d -----BEGIN CERTIFICATE----- MIIF1zCCBL+gAwIBAgIUEqvhVxHM3+PWHdofSdQ4CG3K/a0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyMzI0ZmZlMzlhOThhMDE0NmI1MDNkOGEwMTVjYTJjMmU3 NjdjZjNkMGI5ZmRlNjIzMWIwHhcNMjYwNzIzMDgxNDQ1WhcNMjYwNzI0MTAyMjQ1 WjAzMTEwLwYDVQQDEyg1NDlBNzRBRjVENkZGNzUwOTU5RUJBQTdEOTAwRkVCMkQx MjQ2ODI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtAqDdoRMO083 1T5kyTgQcK4xqRle1ISc/gCeFKzypZ9XgtTyJk0+Yl7H8RSmNCUijkSOiwGCoK6T hbSzHJGHH2LX1e6umLdwmjm2EATk65AiFIfrKc8K6lWrV4ZoGbF+rU1qbFLPA7lK sEN+aJFMZrsvMCd4UpCjvRq536z+nE+2hOfXCTR8VMqrA247wFsndt9V4HIjWjpF lTD4axWsa2CeAVnFwIDwIHBBh4bdcu1WJSzmaJnm57YSCi1LtcRT4AQVrFXtT45e VIozsvbdwtfnxdvYKshDE9NM6rdTcZ716lMWqn48wYvCxJf02b72iPwkPPL1ayut BGbALM1e3wIDAQABo4IC1zCCAtMwHQYDVR0OBBYEFFSadK9db/dQlZ66p9kA/rLR JGgkMB8GA1UdIwQYMBaAFD/NOoOeoUF/2Yjz3f0EVBl/qvR6MA4GA1UdDwEB/wQE AwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3luYzovL3JzeW5jLnBhYXMu cnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzczYjhlYzAxLThiYTUtNDc5Zi1hMjI5 LTBhYjcwZTQ4MTViYi8xLzNGQ0QzQTgzOUVBMTQxN0ZEOTg4RjNEREZEMDQ1NDE5 N0ZBQUY0N0EuY3JsMIHzBggrBgEFBQcBAQSB5jCB4zCB4AYIKwYBBQUHMAKGgdNy c3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0 YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYt NDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS81MWNkOTlmNy0yZjQyLTRkZWMtYjJjNi0w OWJhZmFhMzc4MGUvMzI0ZmZlMzlhOThhMDE0NmI1MDNkOGEwMTVjYTJjMmU3Njdj ZjNkMGI5ZmRlNjIzMWIuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYIKwYBBQUH MAuGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv NzNiOGVjMDEtOGJhNS00NzlmLWEyMjktMGFiNzBlNDgxNWJiLzEvM0ZDRDNBODM5 RUExNDE3RkQ5ODhGM0RERkQwNDU0MTk3RkFBRjQ3QS5tZnQwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUA MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBABaJHl8e 0uUs3owNJLYxAPJ1pyc1b1r12LMMzj/mTDRzEEoM4eXu5AEIVEDPK6aBOTJy78og Fr/ehyF5y1gfKW2zfzLln3a/eKUWIffpmHpjWTt8y0xpB5quJIBYfR+5oThyC+nx 0mOuik1xMZn7rz1F4YNL26vjm7+ecaAJTM1SviE5c0NmPsCg7muRT3DGjGDY3mE+ HEPpwqzQaV8HmGSWS3bKiTv08mY3mX5kLJau3kM2kq8DGFPx2oHXIkJO7fzab5Kz RPYaBRcPg9qVV0P72sySZ9DUDaQejwmN9B3dXO8umk3nICwi7ASF1iwQGxpPBvX1 6vBYIgVCwOR70C0= -----END CERTIFICATE-----Generated at Thu Jul 23 19:03:48 2026 by rpki-client