$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/7/D74983C1FABA0CC1566F0601AFE11423E11B5171.mft File: D74983C1FABA0CC1566F0601AFE11423E11B5171.mft (raw, json) Hash identifier: Di5ATozvAnXtGu+JvnzwX0YryZXZTfNYzosbMejvug0= Subject key identifier: 9A:E9:D4:9D:6B:DB:17:45:0C:DF:0D:2B:B6:6D:78:96:EE:BB:8D:5C Authority key identifier: D7:49:83:C1:FA:BA:0C:C1:56:6F:06:01:AF:E1:14:23:E1:1B:51:71 Certificate issuer: /CN=4b43c64a680efdc51a00463172b8f5aff945e0733fc49c2e4c Certificate serial: 61A825296378CAEDDB401160FADE2470BCE56C1A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b150e98d-80e9-45f6-bc63-6b40a3d59e9c/4b43c64a680efdc51a00463172b8f5aff945e0733fc49c2e4c.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/7/D74983C1FABA0CC1566F0601AFE11423E11B5171.mft Manifest number: 04BF Signing time: Wed 25 Mar 2026 18:30:05 +0000 Manifest this update: Wed 25 Mar 2026 18:25:05 +0000 Manifest next update: Thu 26 Mar 2026 19:56:05 +0000 Files and hashes: 1: D74983C1FABA0CC1566F0601AFE11423E11B5171.crl (hash: BRAHchOciGacJE3eAePAqxvV7x9uFgHti0ZYBzkOui4=) 2: 3139322e37352e3139362e302f32332d3234203d3e20323131363635.roa (hash: EY02IPhkI+bUEpVH6oIXpq9tMDByZp2XBlblwJ3ORuk=) 3: 323630323a666137613a3a2f34302d3438203d3e203539393933.roa (hash: Lb+C3YJn54LxtUf0GyCu85JPoRsStAp6WFsAuvX2G+E=) 4: 3139322e37352e3139372e302f32342d3234203d3e203530323234.roa (hash: XWa1v4ip3kV+r3f119VGt2tZ+jfePtDqCwe/xpwhK0k=) 5: 3139322e37352e3139362e302f32332d3234203d3e203539393933.roa (hash: KNSz4GsVtYNwvMtBZ3CvI93UcAzzIm+CEBGOCv59Ibc=) 6: 32332e3135332e3233322e302f32342d3234203d3e203539393933.roa (hash: Xa94VPXxaKxQavq41HUhZQOU53EjRewYZdqWNPMbOkI=) 7: 3139322e37352e3139362e302f32342d3234203d3e203139363830.roa (hash: yvXeEWRlMmnSNfIrbChtFM+svsvnH2vlOzvMg3QWUIM=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/7/D74983C1FABA0CC1566F0601AFE11423E11B5171.crl rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/7/D74983C1FABA0CC1566F0601AFE11423E11B5171.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b150e98d-80e9-45f6-bc63-6b40a3d59e9c/4b43c64a680efdc51a00463172b8f5aff945e0733fc49c2e4c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b150e98d-80e9-45f6-bc63-6b40a3d59e9c/b150e98d-80e9-45f6-bc63-6b40a3d59e9c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b150e98d-80e9-45f6-bc63-6b40a3d59e9c/b150e98d-80e9-45f6-bc63-6b40a3d59e9c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b150e98d-80e9-45f6-bc63-6b40a3d59e9c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 26 Mar 2026 19:56:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:a8:25:29:63:78:ca:ed:db:40:11:60:fa:de:24:70:bc:e5:6c:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4b43c64a680efdc51a00463172b8f5aff945e0733fc49c2e4c Validity Not Before: Mar 25 18:25:05 2026 GMT Not After : Mar 26 19:56:05 2026 GMT Subject: CN=9AE9D49D6BDB17450CDF0D2BB66D7896EEBB8D5C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:47:6a:14:14:a4:bb:a8:d3:00:f8:3e:6e:4c: ad:1d:89:9f:d5:5a:34:0a:fd:f5:08:d4:34:f4:a3: 1f:bc:0c:2e:ea:ba:97:80:56:78:3f:a8:46:df:05: 43:b9:21:81:27:fb:33:e3:e9:aa:ae:96:32:45:37: 42:f2:71:bb:d9:6b:12:eb:df:ad:da:7f:85:02:60: 32:2b:71:f7:0d:54:bd:83:12:b6:cb:53:45:66:9d: ca:c8:be:20:ca:e9:01:57:dd:6e:c3:9a:18:44:5a: 36:d1:71:2d:ab:9d:c1:b7:af:05:82:08:b4:de:cc: 29:54:57:0e:0e:b0:91:2d:bf:83:f9:31:2d:d7:78: 60:b0:a9:c2:e5:3a:34:3d:c7:18:e1:64:1a:05:5a: af:8b:46:0e:40:47:f7:7f:d0:31:5f:e0:46:ce:87: 68:b7:7c:95:6e:59:0f:58:a4:ed:b1:00:bf:cb:a5: 39:6d:b6:fe:74:dc:7b:3f:68:43:17:e4:31:2b:2a: 7e:a2:bf:bf:a7:68:e2:54:7a:79:ce:dc:3d:9c:37: 45:6a:82:ec:3b:69:b5:31:c2:c5:d6:62:24:50:b9: 4b:b8:d7:d8:78:05:11:4e:15:93:1d:d0:59:ec:f6: de:03:55:1d:9f:7d:ad:12:ae:f8:de:12:72:cb:8c: d2:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:E9:D4:9D:6B:DB:17:45:0C:DF:0D:2B:B6:6D:78:96:EE:BB:8D:5C X509v3 Authority Key Identifier: keyid:D7:49:83:C1:FA:BA:0C:C1:56:6F:06:01:AF:E1:14:23:E1:1B:51:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/7/D74983C1FABA0CC1566F0601AFE11423E11B5171.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b150e98d-80e9-45f6-bc63-6b40a3d59e9c/4b43c64a680efdc51a00463172b8f5aff945e0733fc49c2e4c.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/7/D74983C1FABA0CC1566F0601AFE11423E11B5171.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:fb:e6:ad:cb:e3:5d:c8:2b:e6:1a:3f:72:e5:dd:c0:7b:89: 3c:2c:37:6d:81:01:10:39:d2:7b:86:7d:8b:0d:bb:9d:4d:35: 71:a9:ad:2a:85:d9:2f:40:05:75:79:b9:d8:a4:23:b4:a0:d7: f5:2e:65:a3:8a:4b:40:4e:cb:9e:2b:60:bc:82:eb:cc:c9:7c: f9:e9:c2:af:b5:e7:7e:6e:85:26:2e:98:1c:b6:37:61:b8:26: 02:7e:b3:e5:49:9d:6e:01:65:07:a4:33:95:5e:25:bc:8f:d8: 3d:82:45:73:c1:14:e2:d2:a3:47:2a:54:04:69:3d:5f:fe:4c: c4:49:c1:2e:a2:97:e7:df:e9:aa:e1:82:90:23:06:cc:23:45: 56:7e:13:fa:f3:88:2f:a1:7f:85:ca:e7:2c:c8:5e:9a:a0:fb: 44:ed:64:c6:10:ad:a7:fe:0f:42:8c:d0:97:e8:e3:14:ba:46: 2c:af:e0:38:b7:9a:78:6f:a9:57:77:ba:62:ec:94:30:7b:1b: b0:32:9b:0a:80:8f:4c:90:b1:55:f7:47:36:6f:b4:9d:e9:fa: 7f:7f:6f:0b:ba:77:d6:73:2e:7e:cc:a9:60:bf:e5:9e:47:f7: 60:9f:b4:00:fc:da:09:28:b1:f1:06:0d:54:45:aa:80:9d:5c: 93:98:c9:f4 -----BEGIN CERTIFICATE----- MIIF1zCCBL+gAwIBAgIUYaglKWN4yu3bQBFg+t4kcLzlbBowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNGI0M2M2NGE2ODBlZmRjNTFhMDA0NjMxNzJiOGY1YWZm OTQ1ZTA3MzNmYzQ5YzJlNGMwHhcNMjYwMzI1MTgyNTA1WhcNMjYwMzI2MTk1NjA1 WjAzMTEwLwYDVQQDEyg5QUU5RDQ5RDZCREIxNzQ1MENERjBEMkJCNjZENzg5NkVF QkI4RDVDMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvEdqFBSku6jT APg+bkytHYmf1Vo0Cv31CNQ09KMfvAwu6rqXgFZ4P6hG3wVDuSGBJ/sz4+mqrpYy RTdC8nG72WsS69+t2n+FAmAyK3H3DVS9gxK2y1NFZp3KyL4gyukBV91uw5oYRFo2 0XEtq53Bt68Fggi03swpVFcODrCRLb+D+TEt13hgsKnC5To0PccY4WQaBVqvi0YO QEf3f9AxX+BGzodot3yVblkPWKTtsQC/y6U5bbb+dNx7P2hDF+QxKyp+or+/p2ji VHp5ztw9nDdFaoLsO2m1McLF1mIkULlLuNfYeAURThWTHdBZ7PbeA1Udn32tEq74 3hJyy4zSaQIDAQABo4IC1zCCAtMwHQYDVR0OBBYEFJrp1J1r2xdFDN8NK7ZteJbu u41cMB8GA1UdIwQYMBaAFNdJg8H6ugzBVm8GAa/hFCPhG1FxMA4GA1UdDwEB/wQE AwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3luYzovL3JzeW5jLnBhYXMu cnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2FlNmVkZWVjLTA4YmEtNGNkZS04OTc5 LTRmYWVhNGIxYmMxMi83L0Q3NDk4M0MxRkFCQTBDQzE1NjZGMDYwMUFGRTExNDIz RTExQjUxNzEuY3JsMIHzBggrBgEFBQcBAQSB5jCB4zCB4AYIKwYBBQUHMAKGgdNy c3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0 YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2Mt NGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9iMTUwZTk4ZC04MGU5LTQ1ZjYtYmM2My02 YjQwYTNkNTllOWMvNGI0M2M2NGE2ODBlZmRjNTFhMDA0NjMxNzJiOGY1YWZmOTQ1 ZTA3MzNmYzQ5YzJlNGMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYIKwYBBQUH MAuGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv YWU2ZWRlZWMtMDhiYS00Y2RlLTg5NzktNGZhZWE0YjFiYzEyLzcvRDc0OTgzQzFG QUJBMENDMTU2NkYwNjAxQUZFMTE0MjNFMTFCNTE3MS5tZnQwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUA MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBADz75q3L 413IK+YaP3Ll3cB7iTwsN22BARA50nuGfYsNu51NNXGprSqF2S9ABXV5udikI7Sg 1/UuZaOKS0BOy54rYLyC68zJfPnpwq+1535uhSYumBy2N2G4JgJ+s+VJnW4BZQek M5VeJbyP2D2CRXPBFOLSo0cqVARpPV/+TMRJwS6il+ff6arhgpAjBswjRVZ+E/rz iC+hf4XK5yzIXpqg+0TtZMYQraf+D0KM0Jfo4xS6Riyv4Di3mnhvqVd3umLslDB7 G7AymwqAj0yQsVX3RzZvtJ3p+n9/bwu6d9ZzLn7MqWC/5Z5H92CftAD82gkosfEG DVRFqoCdXJOYyfQ= -----END CERTIFICATE-----Generated at Wed Mar 25 23:15:16 2026 by rpki-client