$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.mft File: 7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.mft (raw, json) Hash identifier: tl5t6UZ+AAr73gjUy2JW2blVlEhluogi7BxgAdezRg0= Subject key identifier: 6E:1E:8F:69:3C:39:0E:7A:1E:92:5D:A3:B5:88:14:8E:6A:11:4F:12 Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45 Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45 Certificate serial: 2D757A087BF9C8691180D1BA12677CEF43385488 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.mft Manifest number: 13C2 Signing time: Mon 20 Apr 2026 01:51:15 +0000 Manifest this update: Mon 20 Apr 2026 01:46:15 +0000 Manifest next update: Tue 21 Apr 2026 02:15:15 +0000 Files and hashes: 1: 7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl (hash: q0f++VrPvzZX7v6Z3zaSalmUYdXPQ823PoJlnE42HtU=) 2: 326131343a373538313a333563373a3a2f34382d3438203d3e203136393039.roa (hash: exjF0q0aJJV12jth59pchkZ6rTciHjjsF3VzxPVljDU=) 3: 326131343a373538313a333530303a3a2f34302d3438203d3e20333936393638.roa (hash: hWe0MopsuhhbsZ3S9o8OBwj8cjLWddVpusY7Oex+A3s=) 4: 326131343a373538313a333530303a3a2f34302d3438203d3e20343031353037.roa (hash: 6Df05/vahSbRv4znE3OLfIl0VdNL2j9/fGDSnrxXLG8=) 5: 326131343a373538313a333533303a3a2f34382d3438203d3e203136393039.roa (hash: Bd6yXBUpoPF+hYuIfFqAPjVU5fz9MqxpaV5ObqZvP6I=) 6: 326131343a373538313a333530303a3a2f34302d3438203d3e203136393039.roa (hash: bvCK0vzABX0GIgAHss3mxvyUiQC1fMmgnIs36fcNdHo=) 7: 326131343a373538313a333538643a3a2f34382d3438203d3e203136393039.roa (hash: hgnX7HeDxBSCgwy+vwPQXIv6xTdi2QxsPHoyfkkcUvs=) Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 21 Apr 2026 02:15:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:75:7a:08:7b:f9:c8:69:11:80:d1:ba:12:67:7c:ef:43:38:54:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45 Validity Not Before: Apr 20 01:46:15 2026 GMT Not After : Apr 21 02:15:15 2026 GMT Subject: CN=6E1E8F693C390E7A1E925DA3B588148E6A114F12 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:70:1a:10:57:12:1f:18:23:29:dd:47:33:bb: 00:86:64:72:9b:e9:12:81:a5:c1:ce:02:f9:7e:c5: a7:b7:76:b8:c2:dd:82:29:d0:95:8c:16:7f:7a:e4: 30:f7:84:f1:c6:d1:cd:13:a0:83:f8:15:41:58:f4: d0:2e:92:14:51:9c:2e:b7:90:d2:a5:9d:50:e0:19: e4:cf:0f:ea:bd:80:80:91:f6:08:57:2c:13:43:d9: 67:36:8c:53:d8:4e:e1:a9:32:70:56:ce:b5:e0:b7: fd:6d:28:3e:0f:5a:10:5d:d0:7b:67:21:ec:0e:5d: 6c:20:6c:d0:03:81:92:56:0a:89:25:7c:a3:d2:75: a0:88:58:7e:e5:0b:38:14:3e:c8:82:59:86:83:f9: 01:ba:f8:0e:47:70:26:ae:c2:19:54:9e:82:ba:50: 26:25:cb:6d:1c:f5:87:90:a8:f8:cb:18:93:28:d2: 9c:b4:62:9a:b7:1d:ef:eb:e6:22:67:f2:66:66:fa: 51:be:84:0d:a4:8d:c5:95:bf:73:8b:3f:e9:45:01: 35:40:d6:69:ba:9e:bd:35:18:56:ec:87:c0:15:fb: fd:02:b3:51:27:8d:26:7d:06:4f:83:64:60:1c:dc: 38:d6:57:c5:4a:ba:90:58:0a:0e:d5:6f:c3:d0:6f: 21:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:1E:8F:69:3C:39:0E:7A:1E:92:5D:A3:B5:88:14:8E:6A:11:4F:12 X509v3 Authority Key Identifier: keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9b:55:05:f1:7e:1b:3b:48:8e:9f:28:db:ae:e7:e1:2e:e7:c7: 8b:3d:4a:79:41:9b:dc:fe:a8:7a:39:d0:e9:1a:93:e9:ac:0c: fb:6d:98:e3:40:ec:10:af:f7:41:ff:0b:e6:4f:02:3f:18:66: 83:de:d5:bf:65:33:47:35:e6:e6:38:f5:83:1c:41:61:0d:f8: cb:3f:a6:fc:3b:2e:ee:43:a3:90:bd:02:fc:16:72:62:bc:b7: 23:f4:f7:8d:ae:10:23:46:48:bb:2a:fd:f6:b5:5f:99:d1:bb: 89:3f:53:9a:b3:33:b5:7e:98:75:9e:c6:ae:b0:8c:ae:65:1d: a8:fa:41:c5:a5:4f:0d:98:46:82:7b:d7:75:8a:71:19:43:56: ae:aa:9a:7b:ac:e2:dd:94:17:48:19:73:47:cc:45:f4:d7:47: 7e:c1:62:a8:a5:51:c4:de:40:81:f8:1b:a9:50:63:51:29:28: 32:43:eb:a4:f9:c1:37:01:d5:7b:09:31:f3:e2:9e:60:2f:a9: 1a:ab:6e:ef:66:b4:c1:a7:c9:90:26:af:da:54:9d:36:dc:1d: 95:d8:81:62:e1:92:90:0e:2c:68:36:2c:23:f6:5a:ca:f7:bc: 32:08:57:73:15:79:f8:ef:d5:86:ec:c8:19:19:57:90:5b:96: 9a:ad:58:a4 -----BEGIN CERTIFICATE----- MIIFXTCCBEWgAwIBAgIULXV6CHv5yGkRgNG6Emd870M4VIgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0NCMjZGNzY0MkZENkI0Q0JGMzVGQkVFNDU1RjFFRkIw QzlGMEE0NTAeFw0yNjA0MjAwMTQ2MTVaFw0yNjA0MjEwMjE1MTVaMDMxMTAvBgNV BAMTKDZFMUU4RjY5M0MzOTBFN0ExRTkyNURBM0I1ODgxNDhFNkExMTRGMTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCocBoQVxIfGCMp3UczuwCGZHKb 6RKBpcHOAvl+xae3drjC3YIp0JWMFn965DD3hPHG0c0ToIP4FUFY9NAukhRRnC63 kNKlnVDgGeTPD+q9gICR9ghXLBND2Wc2jFPYTuGpMnBWzrXgt/1tKD4PWhBd0Htn IewOXWwgbNADgZJWCoklfKPSdaCIWH7lCzgUPsiCWYaD+QG6+A5HcCauwhlUnoK6 UCYly20c9YeQqPjLGJMo0py0Ypq3He/r5iJn8mZm+lG+hA2kjcWVv3OLP+lFATVA 1mm6nr01GFbsh8AV+/0Cs1EnjSZ9Bk+DZGAc3DjWV8VKupBYCg7Vb8PQbyGjAgMB AAGjggJnMIICYzAdBgNVHQ4EFgQUbh6PaTw5Dnoekl2jtYgUjmoRTxIwHwYDVR0j BBgwFoAUfLJvdkL9a0y/NfvuRV8e+wyfCkUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv cnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNkZjQ1YTBlYTY2ODcvMS83Q0IyNkY3NjQy RkQ2QjRDQkYzNUZCRUU0NTVGMUVGQjBDOUYwQTQ1LmNybDCBngYIKwYBBQUHAQEE gZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5Lzg5MjcwZjZjLWEzZmUtNDI5OS1iMDc5LTMwOWVkOTdm MzgyNC8wLzdDQjI2Rjc2NDJGRDZCNENCRjM1RkJFRTQ1NUYxRUZCMEM5RjBBNDUu Y2VyMIGTBggrBgEFBQcBCwSBhjCBgzCBgAYIKwYBBQUHMAuGdHJzeW5jOi8vcnBr aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjkyZWU0ZDg0MDE5M2Rm NDVhMGVhNjY4Ny8xLzdDQjI2Rjc2NDJGRDZCNENCRjM1RkJFRTQ1NUYxRUZCMEM5 RjBBNDUubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcB Af8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0G CSqGSIb3DQEBCwUAA4IBAQCbVQXxfhs7SI6fKNuu5+Eu58eLPUp5QZvc/qh6OdDp GpPprAz7bZjjQOwQr/dB/wvmTwI/GGaD3tW/ZTNHNebmOPWDHEFhDfjLP6b8Oy7u Q6OQvQL8FnJivLcj9PeNrhAjRki7Kv32tV+Z0buJP1OaszO1fph1nsausIyuZR2o +kHFpU8NmEaCe9d1inEZQ1auqpp7rOLdlBdIGXNHzEX010d+wWKopVHE3kCB+Bup UGNRKSgyQ+uk+cE3AdV7CTHz4p5gL6kaq27vZrTBp8mQJq/aVJ023B2V2IFi4ZKQ DixoNiwj9lrK97wyCFdzFXn479WG7MgZGVeQW5aarVik -----END CERTIFICATE-----Generated at Mon Apr 20 13:16:49 2026 by rpki-client