
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/002f8ee6-abe7-4ae8-964c-788bb98c975c/2/D6D172D72D23BAC1F197C131AD720E6E8230B003.mft
File: D6D172D72D23BAC1F197C131AD720E6E8230B003.mft (raw, json)
Hash identifier: SwdhwFki+Of1XQqdQT63/9YyxkVWsAXpQdTwLZ+0KMI=
Subject key identifier: 1D:12:CA:7E:CB:51:41:DF:F5:7B:D8:DB:3B:F5:87:D2:9E:AC:D0:D2
Authority key identifier: D6:D1:72:D7:2D:23:BA:C1:F1:97:C1:31:AD:72:0E:6E:82:30:B0:03
Certificate issuer: /CN=D6D172D72D23BAC1F197C131AD720E6E8230B003
Certificate serial: 674429467266FF4AD6603858C11A820BB767C85F
Authority info access: rsync://rpki-rps.arin.net/repository/ca2b12afc42843dbae4b05cf360d952d/0/D6D172D72D23BAC1F197C131AD720E6E8230B003.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/002f8ee6-abe7-4ae8-964c-788bb98c975c/2/D6D172D72D23BAC1F197C131AD720E6E8230B003.mft
Manifest number: 38
Signing time: Thu 28 May 2026 06:41:18 +0000
Manifest this update: Thu 28 May 2026 06:36:18 +0000
Manifest next update: Fri 29 May 2026 06:56:18 +0000
Files and hashes: 1: D6D172D72D23BAC1F197C131AD720E6E8230B003.crl (hash: HasB+jMgxvQsgrHYu7DIKSViKxbVHRpB8ey9m5l/v1U=)
2: 323630323a663530633a6330303a3a2f34382d313238203d3e20323035393431.roa (hash: cWyW4xHleqLk84rEzGTR8NRbqNQlRwAtCtLspkb3tV8=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/002f8ee6-abe7-4ae8-964c-788bb98c975c/2/D6D172D72D23BAC1F197C131AD720E6E8230B003.crl
rsync://rsync.paas.rpki.ripe.net/repository/002f8ee6-abe7-4ae8-964c-788bb98c975c/2/D6D172D72D23BAC1F197C131AD720E6E8230B003.mft
rsync://rpki-rps.arin.net/repository/ca2b12afc42843dbae4b05cf360d952d/0/D6D172D72D23BAC1F197C131AD720E6E8230B003.cer
rsync://rpki-rps.arin.net/repository/ca2b12afc42843dbae4b05cf360d952d/0/75BF1767564D7C44C5BD395F6A6A2190D2DDD708.crl
rsync://rpki-rps.arin.net/repository/ca2b12afc42843dbae4b05cf360d952d/0/75BF1767564D7C44C5BD395F6A6A2190D2DDD708.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c415644a-a5a4-4849-aba9-198086fd154d/fecfdfdbdb56d3fbfa261bb287bf0c4185572d0c21b64e1f74.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c415644a-a5a4-4849-aba9-198086fd154d/c415644a-a5a4-4849-aba9-198086fd154d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c415644a-a5a4-4849-aba9-198086fd154d/c415644a-a5a4-4849-aba9-198086fd154d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c415644a-a5a4-4849-aba9-198086fd154d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 29 May 2026 06:56:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
67:44:29:46:72:66:ff:4a:d6:60:38:58:c1:1a:82:0b:b7:67:c8:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D6D172D72D23BAC1F197C131AD720E6E8230B003
Validity
Not Before: May 28 06:36:18 2026 GMT
Not After : May 29 06:56:18 2026 GMT
Subject: CN=1D12CA7ECB5141DFF57BD8DB3BF587D29EACD0D2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:46:77:b5:f9:1b:bf:90:37:ea:7d:1d:1b:9f:
14:cf:80:a5:ef:c1:f5:61:3a:9e:8c:98:70:46:8a:
00:a9:b8:3d:ea:d7:72:80:10:d6:f9:1d:78:f3:7f:
41:11:dd:cd:4b:0a:18:1e:ed:50:81:52:82:8c:e2:
c1:a0:45:b2:c4:95:60:81:70:9b:55:3e:8b:59:5c:
83:a7:fd:72:34:bb:a1:4f:ea:80:ba:b9:09:f0:33:
b1:40:38:85:f3:51:47:fd:21:a5:be:b1:1c:21:16:
7d:38:1e:a5:a5:29:cf:88:bb:b3:2f:74:f9:70:08:
03:dc:32:ef:4b:a9:4b:2e:d0:a5:ee:a5:e6:e2:b0:
57:0c:5b:c0:34:aa:5f:d5:32:e8:74:e8:10:86:2c:
c4:00:f4:84:a0:b4:8f:81:01:9e:79:24:a9:12:6b:
9b:4e:79:2b:61:5d:f4:ad:c4:03:b6:37:86:1e:5c:
1d:c1:d9:e1:14:7d:32:d4:ae:12:02:26:20:19:45:
85:de:02:a8:81:aa:a4:cc:17:ae:7e:8b:06:93:7d:
77:05:8b:64:24:f1:7f:98:2e:cd:d1:68:7c:6b:09:
31:f5:7b:2d:e9:73:03:d8:70:fd:03:51:4d:54:6b:
27:42:7a:71:f1:75:d6:84:8d:ea:b6:a8:17:51:8e:
c2:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:12:CA:7E:CB:51:41:DF:F5:7B:D8:DB:3B:F5:87:D2:9E:AC:D0:D2
X509v3 Authority Key Identifier:
keyid:D6:D1:72:D7:2D:23:BA:C1:F1:97:C1:31:AD:72:0E:6E:82:30:B0:03
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/002f8ee6-abe7-4ae8-964c-788bb98c975c/2/D6D172D72D23BAC1F197C131AD720E6E8230B003.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/ca2b12afc42843dbae4b05cf360d952d/0/D6D172D72D23BAC1F197C131AD720E6E8230B003.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/002f8ee6-abe7-4ae8-964c-788bb98c975c/2/D6D172D72D23BAC1F197C131AD720E6E8230B003.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:18:04:e2:3c:d6:b1:ea:1e:5e:f0:20:e3:7a:25:3b:9a:ef:
8f:f3:27:ea:23:cb:98:77:13:2c:07:f0:82:98:ec:b8:cf:24:
ab:e7:21:d8:93:9b:0c:35:3d:1c:69:0b:62:8a:cc:79:6b:e1:
f0:48:c7:b9:ce:13:2d:c1:32:37:92:fb:f1:95:d9:29:c2:62:
d5:03:fa:65:c4:8a:4c:83:d9:bd:3a:6a:a1:61:8b:8b:88:d1:
5a:d9:68:40:ac:43:f4:b8:59:11:12:2d:a6:ca:35:bd:57:bf:
70:13:7f:0e:2c:d2:f6:4d:e7:30:b6:0f:82:d1:e2:ee:f1:f3:
dc:93:8d:38:1e:62:48:bc:64:ea:02:4f:8d:7c:78:96:03:b8:
db:9c:41:9c:ef:65:62:ec:61:91:48:a2:63:54:8c:8e:31:3d:
5d:6f:b9:d0:fc:29:c2:73:1c:3f:fc:65:e4:8f:68:7a:46:df:
c2:e0:dc:b7:b3:bf:c6:eb:8a:e1:81:cb:a6:cd:e0:95:da:60:
f5:72:59:dd:0f:3e:db:40:43:e1:69:d1:b0:4c:bd:30:5d:90:
eb:9e:79:3a:b6:52:3b:0c:ee:5c:da:0a:1d:94:3e:ed:c0:44:
41:69:5e:fc:a9:dc:39:a4:60:b5:72:79:7c:be:a4:26:54:bf:
49:87:56:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 28 16:02:05 2026 by rpki-client