
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/652C0199E6562FB6119E25923016982629C2108D.mft
File: 652C0199E6562FB6119E25923016982629C2108D.mft (raw, json)
Hash identifier: ozNpbqKVrGmgfjeIwzPpGW/N24RYgFbR4eqZAo79xkM=
Subject key identifier: 94:0F:51:1D:97:47:DE:E3:51:72:01:8F:A1:FE:BD:F2:E6:86:44:B6
Authority key identifier: 65:2C:01:99:E6:56:2F:B6:11:9E:25:92:30:16:98:26:29:C2:10:8D
Certificate issuer: /CN=a22aa82bd609b7b6808e2134a4f8bb6ceef2851441ed7c0fe8
Certificate serial: 05242321DB2F584244E2005E712C66DDCF7F2243
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/a22aa82bd609b7b6808e2134a4f8bb6ceef2851441ed7c0fe8.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/652C0199E6562FB6119E25923016982629C2108D.mft
Manifest number: DB
Signing time: Thu 26 Mar 2026 04:05:55 +0000
Manifest this update: Thu 26 Mar 2026 04:00:55 +0000
Manifest next update: Fri 27 Mar 2026 04:57:55 +0000
Files and hashes: 1: 323630323a663932613a613437663a3a2f34382d3438203d3e20343031383335.roa (hash: VR8n5OiM1XagsyzshXLRVRO8kZHjcaV2UvwohfY+qAQ=)
2: AS40929.asa (hash: ciA+X/4qw1Ic44a6vCoUjQJ+5MIWaj+hDNcIh0l8Dk4=)
3: 323630323a663932613a613437613a3a2f34382d3438203d3e20323136303536.roa (hash: 0Pqy++OUhFsmQuylEZfhVLwMq0m790qyN5/JFrzL8g8=)
4: 323630323a663932613a646561303a3a2f34342d3438203d3e20323133363035.roa (hash: d+oVpHutbFyQRry0VWAIg6yAHPeo2/Kc+Lvm+iA5ji0=)
5: AS53808.asa (hash: WAEZrHuRhdK1Z36FrLyWoQXwLDK1zrdvX2vbKzmSJsU=)
6: 323630323a663932613a6330303a3a2f33382d3438203d3e203430393239.roa (hash: X4uCLc+QUi4BlYjs6hSIP26jH4L3kRKB3mx5SEMVmvs=)
7: 323630323a663932613a613434303a3a2f34342d3438203d3e20323032373334.roa (hash: 7xduKNxFnF4F+moKthO8GxxT77HpW4VFZLxpGPnwP2Q=)
8: 323630323a663932613a313331343a3a2f34382d3438203d3e20323034353138.roa (hash: +hGf1zwD/VOsHCtsdJm6vjqzA9Qar1hq3f+g1LScl20=)
9: 323630323a663932613a613436633a3a2f34382d3438203d3e203531303837.roa (hash: BLqZYyTalxRWLkSRCH3NbfzX0BV/EB7yx8snEAYqCaA=)
10: 323630323a663932613a613437393a3a2f34382d3438203d3e20323037353239.roa (hash: /qmxO62TEMzZ2vSC6btQrvhe0ZmEtLUcutZduW5u2X4=)
11: 323630323a663932613a3a2f33322d3438203d3e203434333234.roa (hash: F/3+/hcXQwWmQPT2L9BIEO/JJlFnHVZNoQMnNhm+tc4=)
12: 323630323a663932613a613437653a3a2f34382d3438203d3e20313530323839.roa (hash: 5jdaGtzWyEuE6pwfQTMlcahgSsIJf1oc0wSJrUGoFWM=)
13: 323630323a663932613a613437633a3a2f34382d3438203d3e20313938303235.roa (hash: t859eM/21Ihz32sEe0c1AsW78lvki7bEFnJsJ550pww=)
14: 323630323a663932613a3a2f33322d3438203d3e203533383038.roa (hash: 4FkS6cxLOa3BJuHaPuW7A4f2/YG2W6yW4OgbVOHPnHE=)
15: 323630323a663932613a653130303a3a2f34342d3438203d3e20313430393135.roa (hash: 2EGlmklKNEj2X3VAACc5ImzmapK/a+f/dwpE/uH21pE=)
16: 323630323a663932613a653030303a3a2f34302d3438203d3e20323033323336.roa (hash: Jp73CAhT8X4qbMvWPriH8XdxbLv++q2700sN8D3HLOc=)
17: AS198304.asa (hash: +rQdbqDMetYc7KkWOy7DXQ+dwSl7QVxC5ENne6yyO0o=)
18: 323630323a663932613a613437643a3a2f34382d3438203d3e20323130333532.roa (hash: 77eb0TAjk47MkAe5OX0t+bmIiF/5o238LUqAq2w/M6s=)
19: 3230362e3235312e35322e302f32322d3234203d3e203332333436.roa (hash: 2HgLzd+gynGabzidkPluIBMAmXgeRg5AWmNASYFvWAg=)
20: 323630323a663932613a613437313a3a2f34382d3438203d3e20323131373239.roa (hash: BYOSvSzHK3d/aeAGCn7LrqqSyr0aELRrR6V1K4HBENw=)
21: 32332e3137352e32342e302f32332d3234203d3e203434333234.roa (hash: D17tZy0W46+eBaikW356HvxnGVw+z5QvhP9P2uKPsGA=)
22: 652C0199E6562FB6119E25923016982629C2108D.crl (hash: iyyoAj/4UQV1vXOcBJmyGUSb5BFesn5BLTUtIX1aL8g=)
23: 3230362e3235312e35322e302f32322d3234203d3e203439333034.roa (hash: EVy9CWEs34kEUh8TkA4Rmz3njW+txDVeXC4tnInrqdQ=)
24: 323630323a663932613a613030303a3a2f34302d3438203d3e20313938333034.roa (hash: YX1mxzfkZu8LGScEYjaMn4TI1hSQfjHgcc9tVmbWEew=)
25: 323630323a663932613a663030303a3a2f34302d3438203d3e20313430393135.roa (hash: HuKbQrOvcjKaYoy37BUB5dGKW0EZLAtznzlUcwdKtQQ=)
26: 323630323a663932613a613437333a3a2f34382d3438203d3e20323134343339.roa (hash: eYJ5D/9jy4JCP/LWnKkem2A6/sqvpj4yLievQ5xZkqc=)
27: 3134392e3131322e3131372e302f32342d3234203d3e2030.roa (hash: wNF04zTzM01ZsoUyNOrqB+433Orn6dMaQ3nxpWytFbE=)
28: 323630323a663932613a613437303a3a2f34382d3438203d3e20323038373534.roa (hash: JA+7vvkApnndXq6JQ4v/gpd5o6G7r0mhztl1imiG/Sc=)
29: 323630323a663932613a613436623a3a2f34382d3438203d3e20323034353339.roa (hash: mTj4Kpj9skM4imBRREZv8jcja5D2jsvUqRlIxwoc3SI=)
30: 323630323a663932613a613437623a3a2f34382d3438203d3e20313531313934.roa (hash: 33uUixA0uJZoNLjO6KgeYE3kw/aA7v5tf1atLI8laIQ=)
31: 323630323a663932613a613435303a3a2f34342d3438203d3e20323037363138.roa (hash: JLb25ZxSGp5EpQKaxM3hHQNAFbR478I5lY6aepa0XPQ=)
32: 323630323a663932613a613437363a3a2f34382d3438203d3e20323135313732.roa (hash: QXjsuQCqZvo7gSFq8pe5a2qbRx0ksORhzu/TOa4aKlE=)
33: 323630323a663932613a613436653a3a2f34382d3438203d3e20323034353335.roa (hash: ZTuzUBd8F+6HeeOFmS8JC85pek1UrzJEnRIsKAeVglc=)
34: 32332e3137352e32342e302f32342d3234203d3e203533383038.roa (hash: 3g+bm1Ov3KS4q8fCecAmN/EtcwCqqHTyfkZNmIpgPag=)
35: 323630323a663932613a613437383a3a2f34382d3438203d3e20323131353735.roa (hash: p2TAJ+SoheZVgt720I7qYK/LH2/2CMUTnLeIel9iBps=)
36: 323630323a663932613a613436643a3a2f34382d3438203d3e20323134393535.roa (hash: nHGY9JwHA1gV3ZB01r0NsQMlXvaKKqpqjnW3pCpd9Fc=)
37: 323630323a663932613a643030303a3a2f34302d3438203d3e20313339323939.roa (hash: kAoBY+HPJ+v2B5y0tTwW0KdPdiz3ZVlVKWhx52C/bb0=)
38: 323630323a663932613a613436663a3a2f34382d3438203d3e20323134393333.roa (hash: 7bJdTrlT6VfYPtZ524N64q5rra/HSG/apOSRN+7RXaM=)
39: 323630323a663932613a613437343a3a2f34382d3438203d3e20313339333137.roa (hash: gY/kBif7jhVfPZuIqYEp13QW/DiRe/GtQlvuralOCJs=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/652C0199E6562FB6119E25923016982629C2108D.crl
rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/652C0199E6562FB6119E25923016982629C2108D.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/a22aa82bd609b7b6808e2134a4f8bb6ceef2851441ed7c0fe8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/7f33cf59-ae35-41d4-8252-d9bdbaba4210.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/7f33cf59-ae35-41d4-8252-d9bdbaba4210.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 27 Mar 2026 04:57:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
05:24:23:21:db:2f:58:42:44:e2:00:5e:71:2c:66:dd:cf:7f:22:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a22aa82bd609b7b6808e2134a4f8bb6ceef2851441ed7c0fe8
Validity
Not Before: Mar 26 04:00:55 2026 GMT
Not After : Mar 27 04:57:55 2026 GMT
Subject: CN=940F511D9747DEE35172018FA1FEBDF2E68644B6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:17:1a:d0:a2:68:fe:9b:67:64:91:5d:10:b7:
f7:05:50:f2:ee:04:0d:d9:26:21:4e:a2:ab:ca:0c:
54:de:37:bb:e7:c1:32:2d:94:d1:29:48:4b:4d:9d:
74:eb:4b:37:32:5f:65:ea:01:8f:0c:e9:24:49:42:
83:63:82:a0:6a:e3:fb:33:4e:a7:ed:31:70:3e:f4:
4c:b0:89:cb:36:33:8c:76:a1:c8:16:5c:5a:f4:a6:
88:85:b4:ed:c0:76:f3:8d:56:8c:fa:b0:a4:09:c8:
e4:75:2c:99:81:5b:db:83:c9:1c:99:b3:bf:34:8f:
af:41:24:8c:1c:f3:62:e0:ec:09:36:49:3a:3a:10:
a9:5e:6b:34:db:83:d8:94:3a:ec:53:4d:04:72:44:
e5:17:27:6e:9f:84:fa:05:89:13:ac:4a:1e:92:4f:
6d:0a:d2:16:ab:eb:23:ab:00:d7:4a:16:74:85:dd:
b9:3f:9b:07:9f:2a:72:cb:60:3c:af:32:15:4f:6f:
b4:00:c2:f1:7d:8d:a8:37:c2:d0:f1:4f:a9:82:4d:
f4:92:a5:10:df:d2:ae:2d:4e:81:53:3f:12:7a:ae:
b4:a2:26:3f:f9:73:05:15:69:5b:70:15:d5:a0:2f:
14:92:ae:20:4e:36:40:84:50:c6:a4:04:0d:d1:22:
07:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:0F:51:1D:97:47:DE:E3:51:72:01:8F:A1:FE:BD:F2:E6:86:44:B6
X509v3 Authority Key Identifier:
keyid:65:2C:01:99:E6:56:2F:B6:11:9E:25:92:30:16:98:26:29:C2:10:8D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/652C0199E6562FB6119E25923016982629C2108D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/a22aa82bd609b7b6808e2134a4f8bb6ceef2851441ed7c0fe8.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/652C0199E6562FB6119E25923016982629C2108D.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:63:e0:82:a7:ff:64:5d:67:3f:67:c8:b0:a9:8a:7f:5d:c9:
6b:0c:b9:3e:80:4f:79:9d:1d:77:68:05:0f:1a:b0:9d:8f:79:
59:b5:64:e8:32:96:ad:c9:3c:96:b9:c6:0c:bf:25:e2:f6:0d:
d2:35:d2:c7:c3:cf:ec:76:60:69:43:87:9e:19:93:aa:54:67:
6b:ee:5f:48:bb:39:be:fa:1b:9e:1e:6a:c6:66:9a:a0:41:1a:
73:31:e1:4c:d8:f7:44:ab:bd:2c:16:14:f8:ba:ce:58:dd:2f:
ca:dd:d3:48:27:c9:92:cc:a2:ca:db:d7:c0:0c:d7:f2:9a:e5:
62:39:09:c9:09:26:71:84:55:60:4c:20:ff:df:c7:b4:92:f0:
68:42:94:1c:10:7f:70:6a:08:97:c0:02:5b:73:5f:f4:cf:c3:
5f:bc:98:17:c8:7e:50:43:0a:65:e7:50:e3:04:24:e9:92:d4:
82:41:29:45:04:e3:0b:7b:8d:6c:6d:d4:dc:73:eb:00:dd:43:
92:19:f7:98:68:13:95:fd:12:ba:2b:93:ab:68:69:30:e8:36:
c5:db:4f:8f:d8:52:b6:a7:d1:cd:8c:31:89:c9:bf:fd:86:6e:
9a:c9:b0:92:68:35:38:1d:1c:25:aa:f3:fd:ee:7a:cb:61:bd:
88:1d:f1:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:53:48 2026 by rpki-client