
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/2/7AFA223B6238B0CC6374F7FE8994364FBF8F54DE.mft
File: 7AFA223B6238B0CC6374F7FE8994364FBF8F54DE.mft (raw, json)
Hash identifier: jMRTkVIUqE+9BnNpwp2zCZDFHE8/yhak+2rQJoesN0o=
Subject key identifier: B1:EE:28:67:75:CE:C3:3C:67:BF:61:CA:AE:02:E5:FE:41:54:4C:AE
Authority key identifier: 7A:FA:22:3B:62:38:B0:CC:63:74:F7:FE:89:94:36:4F:BF:8F:54:DE
Certificate issuer: /CN=6e1bbb7e7fef9ebbe2cf0cad47646e6ad7bd9552c30cee0b9c
Certificate serial: 531417EA917B9B8646C4E4E472BC3716E941C670
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/46553ad0-fc19-4f28-8ee2-b5cffd430300/6e1bbb7e7fef9ebbe2cf0cad47646e6ad7bd9552c30cee0b9c.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/2/7AFA223B6238B0CC6374F7FE8994364FBF8F54DE.mft
Manifest number: 41
Signing time: Tue 12 May 2026 09:37:07 +0000
Manifest this update: Tue 12 May 2026 09:32:07 +0000
Manifest next update: Wed 13 May 2026 12:31:07 +0000
Files and hashes: 1: AS402338.asa (hash: 54jGN4qAkNbk+RB9cyZmvlfFPCnzi+5Zb23CECUparw=)
2: 323630323a663431313a3a2f34302d3430203d3e20323135323438.roa (hash: 4LMUXuzPxDG0l50qzDgI+GtWvlNgbqsRRyik2rkKxrI=)
3: 32332e3135352e3133322e302f32342d3234203d3e20343032333338.roa (hash: fzU4rchNeg+A4G9P3a1X+ynK3vpCJlAGbjn8hVUYXUY=)
4: 7AFA223B6238B0CC6374F7FE8994364FBF8F54DE.crl (hash: Svy72q3rZorhOxwruIruugeye2GwOFnj2pOw2zdFCAg=)
5: 32332e3135352e3133322e302f32342d3234203d3e20323135323438.roa (hash: c3hWnS8DoW546xPA3c5dq6uKI5KCkqswjLoTTVqVVsI=)
6: 323630323a663431313a3a2f34302d3430203d3e20343032333338.roa (hash: yUUqL7xUwt1yHriW5PMoX0e0rvGQY+O+Hz486/mwTRA=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/2/7AFA223B6238B0CC6374F7FE8994364FBF8F54DE.crl
rsync://rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/2/7AFA223B6238B0CC6374F7FE8994364FBF8F54DE.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/46553ad0-fc19-4f28-8ee2-b5cffd430300/6e1bbb7e7fef9ebbe2cf0cad47646e6ad7bd9552c30cee0b9c.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/46553ad0-fc19-4f28-8ee2-b5cffd430300/46553ad0-fc19-4f28-8ee2-b5cffd430300.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/46553ad0-fc19-4f28-8ee2-b5cffd430300/46553ad0-fc19-4f28-8ee2-b5cffd430300.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/46553ad0-fc19-4f28-8ee2-b5cffd430300.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 13 May 2026 12:31:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:14:17:ea:91:7b:9b:86:46:c4:e4:e4:72:bc:37:16:e9:41:c6:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e1bbb7e7fef9ebbe2cf0cad47646e6ad7bd9552c30cee0b9c
Validity
Not Before: May 12 09:32:07 2026 GMT
Not After : May 13 12:31:07 2026 GMT
Subject: CN=B1EE286775CEC33C67BF61CAAE02E5FE41544CAE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:32:48:5b:10:45:e2:cc:26:c5:25:b6:ad:85:
b2:8a:c4:6e:f8:e8:7a:41:40:09:6f:6e:ca:e5:26:
b9:6e:f0:c7:13:54:27:02:55:64:ed:af:8c:87:98:
33:43:08:55:e3:08:ef:03:d1:32:e1:9f:ac:a3:49:
57:45:6a:22:78:a0:54:1c:b1:60:e3:8b:e6:02:f2:
49:d6:4f:d5:40:4b:9c:57:6c:4d:c3:53:92:d5:4c:
67:7d:da:f2:be:f8:4f:6c:59:c6:bc:c6:e0:99:86:
9b:76:d6:43:30:5b:3a:49:3e:f0:95:31:98:45:d9:
ba:7a:db:e6:2e:28:58:7c:91:54:ac:86:61:55:c0:
77:5a:0e:ce:3c:c1:0f:d9:0e:24:b4:34:c2:24:b2:
06:a8:ce:dd:25:30:8b:11:17:28:da:55:75:cb:f7:
4e:6a:48:bd:0b:68:4a:bf:97:4b:3e:9b:c0:d5:d0:
19:6b:b5:6a:58:31:f5:f9:14:98:bc:f4:1b:b4:4c:
2b:68:77:10:0c:27:e4:2c:69:92:1f:9a:18:de:5d:
b2:a6:3f:7d:a1:89:53:2a:c5:e5:df:dd:c3:0e:ec:
c7:26:64:88:dc:57:a8:2c:f8:9e:54:66:7c:81:33:
2c:00:42:bf:4f:67:95:47:4f:cb:2a:d8:ea:47:79:
17:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:EE:28:67:75:CE:C3:3C:67:BF:61:CA:AE:02:E5:FE:41:54:4C:AE
X509v3 Authority Key Identifier:
keyid:7A:FA:22:3B:62:38:B0:CC:63:74:F7:FE:89:94:36:4F:BF:8F:54:DE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/2/7AFA223B6238B0CC6374F7FE8994364FBF8F54DE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/46553ad0-fc19-4f28-8ee2-b5cffd430300/6e1bbb7e7fef9ebbe2cf0cad47646e6ad7bd9552c30cee0b9c.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/2/7AFA223B6238B0CC6374F7FE8994364FBF8F54DE.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:ca:0b:78:c6:8c:b6:67:cf:f8:7d:71:b4:39:be:16:2f:dd:
9d:95:4f:6d:b2:64:71:38:8c:c8:e3:da:53:f0:d9:6a:df:2f:
42:02:7e:2f:9b:bb:b3:52:d7:13:75:8a:c1:6f:33:ca:2f:f6:
ae:3b:0b:52:40:8b:c2:eb:80:cc:f4:bb:9c:b5:52:ef:cb:ac:
97:13:4e:85:50:c9:3f:6c:d7:f4:76:e0:ca:66:96:ab:7a:2d:
44:da:af:b2:c6:30:90:24:96:4a:be:2d:dc:e7:d0:e0:63:52:
1b:c2:b5:82:73:14:6e:fb:c2:1c:af:7f:c6:ac:17:e2:97:96:
a8:5b:9d:8e:e2:96:c0:6d:cf:33:6d:e2:b8:b9:a7:e0:d9:1d:
ee:fc:55:d0:4e:7e:0e:f6:c0:ff:5f:5a:37:2b:05:ad:2a:fd:
66:1e:51:5b:af:78:01:14:51:48:2c:0a:cc:2c:ea:fe:03:48:
89:4b:df:53:49:e2:a4:33:93:ae:02:46:96:ff:9d:f9:57:18:
0c:80:58:cc:8b:10:b3:ae:3a:c4:ed:7f:2c:ca:43:bf:32:8c:
63:2f:58:1c:f8:74:09:82:5a:76:70:77:24:e3:c5:c1:96:0b:
3c:98:91:8e:a1:29:e2:59:a7:fd:29:77:25:63:c7:6e:89:60:
26:dc:35:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:38:39 2026 by rpki-client