
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/2/7AFA223B6238B0CC6374F7FE8994364FBF8F54DE.mft
File: 7AFA223B6238B0CC6374F7FE8994364FBF8F54DE.mft (raw, json)
Hash identifier: HOZRcdxXbdNfCjeMU5Hm4it6f7TKXyJc2HF/aQuCWBU=
Subject key identifier: C0:44:E8:84:0E:6D:84:CE:F0:92:01:96:8A:A0:C0:6E:36:C8:63:FA
Authority key identifier: 7A:FA:22:3B:62:38:B0:CC:63:74:F7:FE:89:94:36:4F:BF:8F:54:DE
Certificate issuer: /CN=6e1bbb7e7fef9ebbe2cf0cad47646e6ad7bd9552c30cee0b9c
Certificate serial: 652D64B3C87AE09DCC943550B92FDC9D8E2CB3E7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/46553ad0-fc19-4f28-8ee2-b5cffd430300/6e1bbb7e7fef9ebbe2cf0cad47646e6ad7bd9552c30cee0b9c.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/2/7AFA223B6238B0CC6374F7FE8994364FBF8F54DE.mft
Manifest number: B0
Signing time: Thu 23 Jul 2026 15:51:43 +0000
Manifest this update: Thu 23 Jul 2026 15:46:43 +0000
Manifest next update: Fri 24 Jul 2026 16:54:43 +0000
Files and hashes: 1: 32332e3135352e3133322e302f32342d3234203d3e20323135323438.roa (hash: c3hWnS8DoW546xPA3c5dq6uKI5KCkqswjLoTTVqVVsI=)
2: 323630323a663431313a3a2f34302d3430203d3e20343032333338.roa (hash: yUUqL7xUwt1yHriW5PMoX0e0rvGQY+O+Hz486/mwTRA=)
3: 7AFA223B6238B0CC6374F7FE8994364FBF8F54DE.crl (hash: te7JneEC2MM9qLr1eZ/Fp9yNHyvZr1OzVzuHiHEiK3M=)
4: 32332e3135352e3133322e302f32342d3234203d3e20343032333338.roa (hash: fzU4rchNeg+A4G9P3a1X+ynK3vpCJlAGbjn8hVUYXUY=)
5: AS402338.asa (hash: 0821d3AQl1souCYsRgM1OGi/Rzxf0hN35CNAA2dxvrA=)
6: 323630323a663431313a3a2f34302d3430203d3e20323135323438.roa (hash: 4LMUXuzPxDG0l50qzDgI+GtWvlNgbqsRRyik2rkKxrI=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/2/7AFA223B6238B0CC6374F7FE8994364FBF8F54DE.crl
rsync://rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/2/7AFA223B6238B0CC6374F7FE8994364FBF8F54DE.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/46553ad0-fc19-4f28-8ee2-b5cffd430300/6e1bbb7e7fef9ebbe2cf0cad47646e6ad7bd9552c30cee0b9c.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/46553ad0-fc19-4f28-8ee2-b5cffd430300/46553ad0-fc19-4f28-8ee2-b5cffd430300.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/46553ad0-fc19-4f28-8ee2-b5cffd430300/46553ad0-fc19-4f28-8ee2-b5cffd430300.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/46553ad0-fc19-4f28-8ee2-b5cffd430300.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:2d:64:b3:c8:7a:e0:9d:cc:94:35:50:b9:2f:dc:9d:8e:2c:b3:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e1bbb7e7fef9ebbe2cf0cad47646e6ad7bd9552c30cee0b9c
Validity
Not Before: Jul 23 15:46:43 2026 GMT
Not After : Jul 24 16:54:43 2026 GMT
Subject: CN=C044E8840E6D84CEF09201968AA0C06E36C863FA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:de:3a:31:bd:4b:b1:85:3c:5f:91:90:ac:fa:
e8:77:85:75:22:1a:f4:68:ed:d0:73:9e:a6:c0:15:
11:e5:37:5a:3c:50:57:bc:c5:da:af:98:dd:fd:70:
5e:d8:c5:fa:f8:80:3c:79:2d:50:04:b9:c7:c6:6b:
7d:57:5b:83:d8:15:44:e5:f2:5f:79:b0:e6:aa:da:
6f:ea:59:88:6c:52:20:2e:45:8f:8a:00:5d:cf:90:
73:9c:cf:8c:33:fc:f9:a5:37:97:07:78:18:7c:1c:
03:d7:e0:19:f3:e4:57:01:1d:d7:b2:d7:40:d7:10:
ca:a1:20:d2:05:60:65:6b:d2:dc:79:bb:da:89:49:
50:3f:6a:5f:21:d9:07:02:ad:38:ac:87:4c:46:91:
53:e9:4f:72:94:c6:d1:2b:0a:2b:72:63:62:9c:3b:
32:6c:0e:28:6e:73:d8:00:4b:df:4f:d5:01:ca:4a:
e4:fd:0f:be:a2:07:49:a7:61:c4:06:1a:16:4d:d7:
bb:cd:de:2f:d6:2a:11:5a:3c:76:82:74:58:d4:b9:
ed:b6:24:b0:dc:87:16:0e:f7:14:65:0d:5e:f3:0e:
06:ab:e1:83:0f:9b:29:eb:27:8b:16:0e:07:f5:95:
02:37:ff:29:52:e8:69:ed:c8:cb:29:c7:96:7a:69:
7a:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:44:E8:84:0E:6D:84:CE:F0:92:01:96:8A:A0:C0:6E:36:C8:63:FA
X509v3 Authority Key Identifier:
keyid:7A:FA:22:3B:62:38:B0:CC:63:74:F7:FE:89:94:36:4F:BF:8F:54:DE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/2/7AFA223B6238B0CC6374F7FE8994364FBF8F54DE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/46553ad0-fc19-4f28-8ee2-b5cffd430300/6e1bbb7e7fef9ebbe2cf0cad47646e6ad7bd9552c30cee0b9c.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/2/7AFA223B6238B0CC6374F7FE8994364FBF8F54DE.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:60:37:6a:35:20:85:d3:ef:fb:82:08:bf:cd:62:a0:13:b4:
e5:4f:92:c1:f6:c6:a5:b9:38:54:92:e0:b7:41:47:63:d2:d3:
e7:f4:09:3a:1c:38:f6:ba:16:fe:a9:db:6a:64:a6:86:75:81:
2b:6a:2c:74:5a:71:88:4f:bb:a4:35:b2:14:64:71:c8:13:14:
1a:78:d6:bc:43:84:51:01:2f:f4:4c:24:55:2a:0c:63:fb:1e:
d6:d5:a5:c9:0e:d1:d4:ff:de:e1:3a:37:11:df:6c:82:2a:4a:
b2:98:81:3d:d7:4b:a8:c7:31:c7:a6:b9:cd:a9:0b:5b:cd:13:
cc:b6:7b:16:05:eb:72:1a:99:03:2c:27:d5:43:ea:d0:c6:02:
c1:6f:6c:7a:73:2e:e3:54:4c:3d:1e:bb:90:8b:fd:40:d5:9f:
08:20:9c:5f:a5:cc:71:0f:29:b6:19:af:01:1f:47:50:1d:f5:
e2:e5:79:36:ce:5c:fb:b5:0c:a6:95:3b:5e:34:83:1b:d2:ae:
d8:18:62:2b:f6:c9:e3:bd:79:20:58:e0:51:df:1e:31:2c:5a:
77:8e:a8:17:bf:ce:d0:a9:66:02:87:c4:60:23:8e:92:cd:b6:
a7:26:df:0e:76:48:c4:88:e4:1c:d0:2d:69:94:dd:4c:e7:a3:
d2:34:ea:68
-----BEGIN CERTIFICATE-----
MIIF1zCCBL+gAwIBAgIUZS1ks8h64J3MlDVQuS/cnY4ss+cwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmUxYmJiN2U3ZmVmOWViYmUyY2YwY2FkNDc2NDZlNmFk
N2JkOTU1MmMzMGNlZTBiOWMwHhcNMjYwNzIzMTU0NjQzWhcNMjYwNzI0MTY1NDQz
WjAzMTEwLwYDVQQDEyhDMDQ0RTg4NDBFNkQ4NENFRjA5MjAxOTY4QUEwQzA2RTM2
Qzg2M0ZBMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjd46Mb1LsYU8
X5GQrProd4V1Ihr0aO3Qc56mwBUR5TdaPFBXvMXar5jd/XBe2MX6+IA8eS1QBLnH
xmt9V1uD2BVE5fJfebDmqtpv6lmIbFIgLkWPigBdz5BznM+MM/z5pTeXB3gYfBwD
1+AZ8+RXAR3XstdA1xDKoSDSBWBla9LcebvaiUlQP2pfIdkHAq04rIdMRpFT6U9y
lMbRKworcmNinDsybA4obnPYAEvfT9UBykrk/Q++ogdJp2HEBhoWTde7zd4v1ioR
Wjx2gnRY1LnttiSw3IcWDvcUZQ1e8w4Gq+GDD5sp6yeLFg4H9ZUCN/8pUuhp7cjL
KceWeml6tQIDAQABo4IC1zCCAtMwHQYDVR0OBBYEFMBE6IQObYTO8JIBloqgwG42
yGP6MB8GA1UdIwQYMBaAFHr6IjtiOLDMY3T3/omUNk+/j1TeMA4GA1UdDwEB/wQE
AwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3luYzovL3JzeW5jLnBhYXMu
cnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2NkMTlkYjIwLTQ2NTMtNDhkNC04ZmM0
LTU4MGQxMzY5YjdjNC8yLzdBRkEyMjNCNjIzOEIwQ0M2Mzc0RjdGRTg5OTQzNjRG
QkY4RjU0REUuY3JsMIHzBggrBgEFBQcBAQSB5jCB4zCB4AYIKwYBBQUHMAKGgdNy
c3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0
YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUt
NGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS80NjU1M2FkMC1mYzE5LTRmMjgtOGVlMi1i
NWNmZmQ0MzAzMDAvNmUxYmJiN2U3ZmVmOWViYmUyY2YwY2FkNDc2NDZlNmFkN2Jk
OTU1MmMzMGNlZTBiOWMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYIKwYBBQUH
MAuGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv
Y2QxOWRiMjAtNDY1My00OGQ0LThmYzQtNTgwZDEzNjliN2M0LzIvN0FGQTIyM0I2
MjM4QjBDQzYzNzRGN0ZFODk5NDM2NEZCRjhGNTRERS5tZnQwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUA
MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAAdgN2o1
IIXT7/uCCL/NYqATtOVPksH2xqW5OFSS4LdBR2PS0+f0CTocOPa6Fv6p22pkpoZ1
gStqLHRacYhPu6Q1shRkccgTFBp41rxDhFEBL/RMJFUqDGP7HtbVpckO0dT/3uE6
NxHfbIIqSrKYgT3XS6jHMcemuc2pC1vNE8y2exYF63IamQMsJ9VD6tDGAsFvbHpz
LuNUTD0eu5CL/UDVnwggnF+lzHEPKbYZrwEfR1Ad9eLleTbOXPu1DKaVO140gxvS
rtgYYiv2yeO9eSBY4FHfHjEsWneOqBe/ztCpZgKHxGAjjpLNtqcm3w52SMSI5BzQ
LWmU3Uzno9I06mg=
-----END CERTIFICATE-----
Generated at Thu Jul 23 19:08:34 2026 by rpki-client