
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/002f8ee6-abe7-4ae8-964c-788bb98c975c/2/D6D172D72D23BAC1F197C131AD720E6E8230B003.mft
File: D6D172D72D23BAC1F197C131AD720E6E8230B003.mft (raw, json)
Hash identifier: Cr7+XcQjxslMbtHyualptGBsBKpBWzh1MteYrpjCYnU=
Subject key identifier: 36:06:F1:00:EC:65:73:61:80:BB:C0:FF:71:2A:55:E1:B1:19:4C:6D
Authority key identifier: D6:D1:72:D7:2D:23:BA:C1:F1:97:C1:31:AD:72:0E:6E:82:30:B0:03
Certificate issuer: /CN=D6D172D72D23BAC1F197C131AD720E6E8230B003
Certificate serial: 373C16946462DF0AD09A250F130A39B737FA8383
Authority info access: rsync://rpki-rps.arin.net/repository/ca2b12afc42843dbae4b05cf360d952d/0/D6D172D72D23BAC1F197C131AD720E6E8230B003.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/002f8ee6-abe7-4ae8-964c-788bb98c975c/2/D6D172D72D23BAC1F197C131AD720E6E8230B003.mft
Manifest number: B6
Signing time: Wed 26 Aug 2026 21:53:23 +0000
Manifest this update: Wed 26 Aug 2026 21:48:23 +0000
Manifest next update: Fri 28 Aug 2026 01:00:23 +0000
Files and hashes: 1: 323630323a663530633a6330303a3a2f34382d313238203d3e20323035393431.roa (hash: cWyW4xHleqLk84rEzGTR8NRbqNQlRwAtCtLspkb3tV8=)
2: D6D172D72D23BAC1F197C131AD720E6E8230B003.crl (hash: q2uT0rfRVr9VF0xP9qGQRBKT9wpK+y/zzJgyWl3668g=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/002f8ee6-abe7-4ae8-964c-788bb98c975c/2/D6D172D72D23BAC1F197C131AD720E6E8230B003.crl
rsync://rsync.paas.rpki.ripe.net/repository/002f8ee6-abe7-4ae8-964c-788bb98c975c/2/D6D172D72D23BAC1F197C131AD720E6E8230B003.mft
rsync://rpki-rps.arin.net/repository/ca2b12afc42843dbae4b05cf360d952d/0/D6D172D72D23BAC1F197C131AD720E6E8230B003.cer
rsync://rpki-rps.arin.net/repository/ca2b12afc42843dbae4b05cf360d952d/0/75BF1767564D7C44C5BD395F6A6A2190D2DDD708.crl
rsync://rpki-rps.arin.net/repository/ca2b12afc42843dbae4b05cf360d952d/0/75BF1767564D7C44C5BD395F6A6A2190D2DDD708.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c415644a-a5a4-4849-aba9-198086fd154d/fecfdfdbdb56d3fbfa261bb287bf0c4185572d0c21b64e1f74.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c415644a-a5a4-4849-aba9-198086fd154d/c415644a-a5a4-4849-aba9-198086fd154d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c415644a-a5a4-4849-aba9-198086fd154d/c415644a-a5a4-4849-aba9-198086fd154d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c415644a-a5a4-4849-aba9-198086fd154d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 27 Aug 2026 22:23:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
37:3c:16:94:64:62:df:0a:d0:9a:25:0f:13:0a:39:b7:37:fa:83:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D6D172D72D23BAC1F197C131AD720E6E8230B003
Validity
Not Before: Aug 26 21:48:23 2026 GMT
Not After : Aug 28 01:00:23 2026 GMT
Subject: CN=3606F100EC65736180BBC0FF712A55E1B1194C6D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:5a:8d:70:0c:91:0e:dd:c6:1a:9a:c9:b3:2a:
58:7b:ea:cd:df:20:3e:e8:7f:4a:7b:5c:17:75:91:
69:dd:1a:fe:69:4e:3d:ec:09:62:09:a0:21:47:c8:
76:5a:b5:c5:7b:9a:67:6e:85:2b:ff:0a:40:23:a4:
3d:19:39:08:40:e2:25:e3:83:bb:94:3d:7f:94:07:
12:f2:c3:26:91:db:d6:c3:c2:a3:aa:a9:7b:60:4b:
6d:1d:14:4b:46:22:92:60:0a:db:f8:03:02:5a:5c:
96:af:97:0d:cb:8b:9d:24:4e:f4:1d:37:77:74:6a:
79:6e:a7:64:f6:4c:0e:19:84:4d:b2:78:8d:c3:2b:
5e:5c:62:04:ac:3e:e1:0e:6b:17:a6:af:61:2a:bc:
3b:71:ed:77:ee:61:68:f7:00:8f:6b:e7:79:5b:52:
96:9e:ad:f2:5d:ae:b2:19:d9:43:a7:ac:89:31:0a:
02:18:41:1b:20:71:e7:d4:e2:89:86:62:ba:d5:76:
c6:c8:1d:af:26:41:f3:01:65:38:c9:68:81:1b:05:
7f:c4:05:fd:e1:92:0c:a2:c7:b7:68:03:71:3d:51:
81:8c:f7:5e:7e:14:71:86:a8:1c:28:bb:2b:0f:f9:
dd:15:08:a9:48:13:af:47:3a:37:db:12:f0:4f:fd:
72:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:06:F1:00:EC:65:73:61:80:BB:C0:FF:71:2A:55:E1:B1:19:4C:6D
X509v3 Authority Key Identifier:
keyid:D6:D1:72:D7:2D:23:BA:C1:F1:97:C1:31:AD:72:0E:6E:82:30:B0:03
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/002f8ee6-abe7-4ae8-964c-788bb98c975c/2/D6D172D72D23BAC1F197C131AD720E6E8230B003.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/ca2b12afc42843dbae4b05cf360d952d/0/D6D172D72D23BAC1F197C131AD720E6E8230B003.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/002f8ee6-abe7-4ae8-964c-788bb98c975c/2/D6D172D72D23BAC1F197C131AD720E6E8230B003.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:f9:e2:82:5f:e8:ce:54:a9:d9:21:43:de:f3:a9:b9:dd:b7:
6c:42:24:6d:31:93:b9:9c:4d:16:a2:76:a8:37:2b:db:86:2d:
77:4c:61:66:9f:11:80:27:77:36:b9:26:cd:58:2d:47:f2:91:
0c:4c:0e:14:60:82:da:86:b5:5c:1e:51:70:c8:13:52:c6:ab:
12:e9:e9:41:eb:ff:28:ed:51:3a:95:8e:c4:2c:96:b5:ed:bd:
aa:f8:e1:a3:4b:de:ad:c6:20:73:7d:01:79:b8:45:09:c1:2a:
eb:af:7e:09:ff:91:51:8a:d0:d3:9f:20:99:33:89:25:a2:43:
4c:c0:c1:bb:f0:a1:ce:8c:13:ad:04:e0:5c:96:67:31:91:bb:
87:d9:07:93:85:f0:d7:c6:40:d6:ff:60:f8:71:4d:3e:b7:0f:
6a:9b:6d:c9:df:c6:e1:35:43:b3:3e:1b:1d:9c:6c:07:6d:b1:
1b:55:21:9d:f2:62:ba:3a:ad:72:13:d1:16:20:53:14:94:06:
a8:a8:ba:76:83:aa:3e:29:c1:c0:d9:14:7c:9f:74:60:e2:2a:
9b:df:08:89:b0:91:48:f1:f8:10:f0:f3:d2:c2:1a:3d:be:77:
7e:cd:61:9f:9e:89:1e:63:a7:bf:b8:6d:69:2f:4d:06:67:e1:
da:cc:e1:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 08:44:54 2026 by rpki-client