
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.mft
File: 7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.mft (raw, json)
Hash identifier: HO+hreSY1atJdZdvlc7NWXqXbJdKwRy092e/FsIrmcg=
Subject key identifier: 3F:82:D0:AB:B7:81:A8:33:49:04:86:54:FE:7C:8A:5F:7A:DB:4D:7A
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 13F6BFD3C6C3C4F442E03B2F901AC6677DFA7FC2
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.mft
Manifest number: 12E5
Signing time: Thu 23 Oct 2025 08:14:50 +0000
Manifest this update: Thu 23 Oct 2025 08:09:50 +0000
Manifest next update: Fri 24 Oct 2025 11:05:50 +0000
Files and hashes: 1: 326131343a373538313a333538643a3a2f34382d3438203d3e203136393039.roa (hash: hgnX7HeDxBSCgwy+vwPQXIv6xTdi2QxsPHoyfkkcUvs=)
2: 7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl (hash: /Bs+k36Pv8ZRpZi4nl7bPAIe77wSvtsFTXMi9Y5cvtY=)
3: 326131343a373538313a333530303a3a2f34302d3438203d3e20343031353037.roa (hash: 6Df05/vahSbRv4znE3OLfIl0VdNL2j9/fGDSnrxXLG8=)
4: 326131343a373538313a333530303a3a2f34302d3438203d3e20333936393638.roa (hash: hWe0MopsuhhbsZ3S9o8OBwj8cjLWddVpusY7Oex+A3s=)
5: 326131343a373538313a333530303a3a2f34302d3438203d3e203136393039.roa (hash: bvCK0vzABX0GIgAHss3mxvyUiQC1fMmgnIs36fcNdHo=)
6: 326131343a373538313a333563373a3a2f34382d3438203d3e203136393039.roa (hash: exjF0q0aJJV12jth59pchkZ6rTciHjjsF3VzxPVljDU=)
7: 326131343a373538313a333533303a3a2f34382d3438203d3e203136393039.roa (hash: Bd6yXBUpoPF+hYuIfFqAPjVU5fz9MqxpaV5ObqZvP6I=)
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.mft
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Oct 2025 11:05:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
13:f6:bf:d3:c6:c3:c4:f4:42:e0:3b:2f:90:1a:c6:67:7d:fa:7f:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: Oct 23 08:09:50 2025 GMT
Not After : Oct 24 11:05:50 2025 GMT
Subject: CN=3F82D0ABB781A83349048654FE7C8A5F7ADB4D7A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:fb:73:dc:27:ef:db:b8:cf:17:fe:35:1d:af:
64:5d:b0:b2:b0:3b:ed:36:6a:94:16:c1:1a:ed:bd:
a1:9f:00:17:bd:3a:f4:87:f4:76:12:8a:1d:0c:6a:
51:e3:74:55:de:e6:2d:7e:48:19:1a:f8:aa:2f:15:
e4:2a:5d:2a:93:32:da:1a:9a:f4:df:1a:f3:04:c8:
3e:17:d0:7c:65:f9:2f:7a:b3:c6:fe:e1:39:95:25:
f2:ec:17:f9:07:fb:ac:27:74:a8:42:98:0d:8b:75:
1c:38:12:7a:e6:23:fc:d7:1e:f3:31:11:44:1b:df:
91:d8:cd:40:85:c6:91:84:68:bc:b7:63:d7:10:e5:
0d:44:3a:74:26:7d:88:50:f3:82:5b:ac:03:5f:a8:
a4:41:e8:d5:a0:53:75:bb:61:f3:f3:8c:1f:a9:2e:
90:24:9d:5c:6a:21:1c:b8:c4:0c:80:dd:ed:f0:b8:
35:e5:74:f6:5f:cf:17:4c:63:e5:b6:0e:92:4c:16:
f7:14:a8:70:0c:14:a3:3f:b2:df:38:5e:c8:8f:82:
3a:c3:47:57:f2:aa:a7:f0:05:82:11:f2:78:e6:b5:
ff:64:59:3b:b8:15:c2:d4:a1:cf:04:65:b7:2a:65:
d1:18:22:3a:13:c8:07:18:a6:44:12:91:fb:b5:7b:
81:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:82:D0:AB:B7:81:A8:33:49:04:86:54:FE:7C:8A:5F:7A:DB:4D:7A
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:c3:ef:1e:8b:fd:ce:85:48:76:22:bb:79:6d:05:1c:6c:88:
c6:8d:90:bf:c7:4d:29:18:95:44:d6:8c:00:a2:29:7d:0b:69:
cd:2d:48:f6:4b:99:26:1a:dc:47:32:3f:ef:06:83:77:02:c2:
d6:73:6c:a5:55:13:1d:75:a6:fd:d9:c8:ac:80:b8:28:35:5f:
81:b1:76:05:0a:69:21:6f:ca:d4:f8:07:6a:99:5e:21:85:dd:
ab:7b:f3:da:f0:e8:74:64:54:76:17:35:89:87:98:04:4a:ee:
a6:ff:c2:41:6d:80:9a:fb:2c:69:e6:f3:b2:b5:d6:0f:a6:b1:
ce:b8:da:01:a9:10:f4:95:38:b6:5a:37:77:62:57:a6:63:6a:
26:fb:46:89:0c:0b:c5:63:0b:f6:e8:09:b0:af:08:5c:c0:56:
03:6d:7d:22:cf:35:8a:8c:5a:9a:a3:2f:02:80:76:62:e0:c9:
0a:26:0a:a0:79:96:96:64:a0:7e:c0:55:97:5c:02:1f:cc:b7:
3f:bd:0f:ea:0e:70:1d:bb:8a:ed:d2:3e:57:b4:b0:a0:46:d9:
a5:b5:f5:fa:37:69:ff:d4:0f:3c:2e:b9:bf:8b:b8:ff:5a:cd:
3b:64:11:fe:48:be:1d:f9:ce:74:de:a7:f4:8f:80:81:55:7c:
40:7e:77:82
-----BEGIN CERTIFICATE-----
MIIFXTCCBEWgAwIBAgIUE/a/08bDxPRC4DsvkBrGZ336f8IwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0NCMjZGNzY0MkZENkI0Q0JGMzVGQkVFNDU1RjFFRkIw
QzlGMEE0NTAeFw0yNTEwMjMwODA5NTBaFw0yNTEwMjQxMTA1NTBaMDMxMTAvBgNV
BAMTKDNGODJEMEFCQjc4MUE4MzM0OTA0ODY1NEZFN0M4QTVGN0FEQjREN0EwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0+3PcJ+/buM8X/jUdr2RdsLKw
O+02apQWwRrtvaGfABe9OvSH9HYSih0MalHjdFXe5i1+SBka+KovFeQqXSqTMtoa
mvTfGvMEyD4X0Hxl+S96s8b+4TmVJfLsF/kH+6wndKhCmA2LdRw4EnrmI/zXHvMx
EUQb35HYzUCFxpGEaLy3Y9cQ5Q1EOnQmfYhQ84JbrANfqKRB6NWgU3W7YfPzjB+p
LpAknVxqIRy4xAyA3e3wuDXldPZfzxdMY+W2DpJMFvcUqHAMFKM/st84XsiPgjrD
R1fyqqfwBYIR8njmtf9kWTu4FcLUoc8EZbcqZdEYIjoTyAcYpkQSkfu1e4HJAgMB
AAGjggJnMIICYzAdBgNVHQ4EFgQUP4LQq7eBqDNJBIZU/nyKX3rbTXowHwYDVR0j
BBgwFoAUfLJvdkL9a0y/NfvuRV8e+wyfCkUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNkZjQ1YTBlYTY2ODcvMS83Q0IyNkY3NjQy
RkQ2QjRDQkYzNUZCRUU0NTVGMUVGQjBDOUYwQTQ1LmNybDCBngYIKwYBBQUHAQEE
gZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5Lzg5MjcwZjZjLWEzZmUtNDI5OS1iMDc5LTMwOWVkOTdm
MzgyNC8wLzdDQjI2Rjc2NDJGRDZCNENCRjM1RkJFRTQ1NUYxRUZCMEM5RjBBNDUu
Y2VyMIGTBggrBgEFBQcBCwSBhjCBgzCBgAYIKwYBBQUHMAuGdHJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjkyZWU0ZDg0MDE5M2Rm
NDVhMGVhNjY4Ny8xLzdDQjI2Rjc2NDJGRDZCNENCRjM1RkJFRTQ1NUYxRUZCMEM5
RjBBNDUubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcB
Af8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0G
CSqGSIb3DQEBCwUAA4IBAQBAw+8ei/3OhUh2Irt5bQUcbIjGjZC/x00pGJVE1owA
oil9C2nNLUj2S5kmGtxHMj/vBoN3AsLWc2ylVRMddab92cisgLgoNV+BsXYFCmkh
b8rU+AdqmV4hhd2re/Pa8Oh0ZFR2FzWJh5gESu6m/8JBbYCa+yxp5vOytdYPprHO
uNoBqRD0lTi2Wjd3YlemY2om+0aJDAvFYwv26AmwrwhcwFYDbX0izzWKjFqaoy8C
gHZi4MkKJgqgeZaWZKB+wFWXXAIfzLc/vQ/qDnAdu4rt0j5XtLCgRtmltfX6N2n/
1A88Lrm/i7j/Ws07ZBH+SL4d+c503qf0j4CBVXxAfneC
-----END CERTIFICATE-----
Generated at Fri Oct 24 04:31:02 2025 by rpki-client