$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/002f8ee6-abe7-4ae8-964c-788bb98c975c/2/D6D172D72D23BAC1F197C131AD720E6E8230B003.mft File: D6D172D72D23BAC1F197C131AD720E6E8230B003.mft (raw, json) Hash identifier: X7lPwVKHiXAhcLHpMC6BZMFoyzi6kcwsLNkLLOTApsk= Subject key identifier: 4A:62:95:09:49:54:81:D7:28:26:DB:E0:05:C8:28:8D:3E:C0:A1:73 Authority key identifier: D6:D1:72:D7:2D:23:BA:C1:F1:97:C1:31:AD:72:0E:6E:82:30:B0:03 Certificate issuer: /CN=D6D172D72D23BAC1F197C131AD720E6E8230B003 Certificate serial: 6216C772044037AFB431FE4011EDFADB467E04A4 Authority info access: rsync://rpki-rps.arin.net/repository/ca2b12afc42843dbae4b05cf360d952d/0/D6D172D72D23BAC1F197C131AD720E6E8230B003.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/002f8ee6-abe7-4ae8-964c-788bb98c975c/2/D6D172D72D23BAC1F197C131AD720E6E8230B003.mft Manifest number: 0109 Signing time: Tue 13 Oct 2026 16:48:16 +0000 Manifest this update: Tue 13 Oct 2026 16:43:16 +0000 Manifest next update: Wed 14 Oct 2026 18:42:16 +0000 Files and hashes: 1: 323630323a663530633a6330303a3a2f34382d313238203d3e20323035393431.roa (hash: cWyW4xHleqLk84rEzGTR8NRbqNQlRwAtCtLspkb3tV8=) 2: D6D172D72D23BAC1F197C131AD720E6E8230B003.crl (hash: 0V8jnMEGI/3nY59rvujfcYYcjDA20/dMOa/R/bYu3wA=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/002f8ee6-abe7-4ae8-964c-788bb98c975c/2/D6D172D72D23BAC1F197C131AD720E6E8230B003.crl rsync://rsync.paas.rpki.ripe.net/repository/002f8ee6-abe7-4ae8-964c-788bb98c975c/2/D6D172D72D23BAC1F197C131AD720E6E8230B003.mft rsync://rpki-rps.arin.net/repository/ca2b12afc42843dbae4b05cf360d952d/0/D6D172D72D23BAC1F197C131AD720E6E8230B003.cer rsync://rpki-rps.arin.net/repository/ca2b12afc42843dbae4b05cf360d952d/0/75BF1767564D7C44C5BD395F6A6A2190D2DDD708.crl rsync://rpki-rps.arin.net/repository/ca2b12afc42843dbae4b05cf360d952d/0/75BF1767564D7C44C5BD395F6A6A2190D2DDD708.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c415644a-a5a4-4849-aba9-198086fd154d/fecfdfdbdb56d3fbfa261bb287bf0c4185572d0c21b64e1f74.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c415644a-a5a4-4849-aba9-198086fd154d/c415644a-a5a4-4849-aba9-198086fd154d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c415644a-a5a4-4849-aba9-198086fd154d/c415644a-a5a4-4849-aba9-198086fd154d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c415644a-a5a4-4849-aba9-198086fd154d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 Oct 2026 18:42:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:16:c7:72:04:40:37:af:b4:31:fe:40:11:ed:fa:db:46:7e:04:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D6D172D72D23BAC1F197C131AD720E6E8230B003 Validity Not Before: Oct 13 16:43:16 2026 GMT Not After : Oct 14 18:42:16 2026 GMT Subject: CN=4A629509495481D72826DBE005C8288D3EC0A173 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:e8:da:f8:3b:30:0e:f9:d3:b1:97:49:5e:30: ca:70:88:65:84:11:43:25:0c:00:5f:8d:16:12:4f: 33:42:01:be:b1:d8:72:f2:5b:b3:36:a1:cc:9a:3d: 01:d3:b4:ac:e3:fd:d5:3f:6f:b9:df:60:ff:13:9b: 8f:13:f9:02:05:0a:ec:7e:ef:43:83:2a:40:86:cd: c9:5a:35:ea:23:e1:0d:ba:00:71:1f:3f:f0:a8:41: 1f:f4:7e:3f:0c:4b:12:37:a0:27:41:fd:da:16:7d: 2f:6c:a9:3a:b7:83:e2:ea:da:d2:a4:a7:73:be:17: f2:2e:d0:fd:d5:9b:c7:2f:f1:24:fe:f0:be:3f:2f: f9:6a:fe:04:f9:65:3a:ef:b1:9f:cd:3f:9a:4f:08: 2d:81:3e:8a:ef:95:42:4a:54:5c:0b:48:4a:de:a2: 6b:17:fd:29:53:a2:78:d5:fb:e7:3a:ef:ff:2d:9e: a1:86:b5:88:be:a2:74:0e:7a:c5:35:e6:f0:2d:3b: 90:48:49:d9:64:d2:35:52:1d:d8:30:e4:89:f7:51: 04:79:1c:be:1e:49:3a:36:88:7e:30:b9:53:85:76: 06:31:04:da:95:10:e5:53:6d:31:90:8e:9b:88:a8: ed:65:89:b4:3d:c2:94:0c:ee:07:03:95:f6:bf:47: 9f:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:62:95:09:49:54:81:D7:28:26:DB:E0:05:C8:28:8D:3E:C0:A1:73 X509v3 Authority Key Identifier: keyid:D6:D1:72:D7:2D:23:BA:C1:F1:97:C1:31:AD:72:0E:6E:82:30:B0:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/002f8ee6-abe7-4ae8-964c-788bb98c975c/2/D6D172D72D23BAC1F197C131AD720E6E8230B003.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/ca2b12afc42843dbae4b05cf360d952d/0/D6D172D72D23BAC1F197C131AD720E6E8230B003.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/002f8ee6-abe7-4ae8-964c-788bb98c975c/2/D6D172D72D23BAC1F197C131AD720E6E8230B003.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:c8:68:6a:9f:ad:85:b6:4e:0a:50:8b:67:1a:49:b7:12:7d: e7:9d:65:39:81:e9:9b:d5:7b:c8:75:ee:47:05:5f:38:7b:b9: 97:33:06:ff:ab:20:63:de:89:f6:31:97:2e:21:91:e4:32:27: c1:a0:c0:2f:45:f6:12:0e:d7:dc:88:16:e1:15:e5:32:aa:ed: 72:42:56:da:10:3e:a8:f1:65:ad:28:ba:cb:23:a1:13:f1:12: 9d:80:e8:53:c1:5a:cf:74:eb:cd:ff:1b:1c:8d:05:09:16:15: 4a:df:19:6d:24:25:bc:88:41:0e:48:98:a6:33:0b:f8:ed:45: 0f:d8:f3:5c:ce:d9:73:86:11:78:49:48:25:ff:c6:40:a8:99: 0c:27:8f:dd:7e:d7:b4:95:5b:8c:04:57:7e:ac:9d:d2:38:74: 1b:15:12:0b:5a:c9:d1:99:48:1d:83:e9:6e:31:3c:e1:45:77: cb:6d:f8:e9:71:48:f0:98:28:08:8a:57:f6:df:74:3d:83:a1: af:e2:52:36:c1:1c:04:3b:e7:f8:f6:ab:c3:6b:c6:04:d4:15: b0:35:1b:f7:d8:e8:47:da:31:b9:55:eb:7e:4e:e2:26:9f:62: de:87:78:16:62:38:11:dd:45:41:48:d4:ac:f6:24:de:84:32: 51:e7:39:13 -----BEGIN CERTIFICATE----- MIIFbTCCBFWgAwIBAgIUYhbHcgRAN6+0Mf5AEe3620Z+BKQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDZEMTcyRDcyRDIzQkFDMUYxOTdDMTMxQUQ3MjBFNkU4 MjMwQjAwMzAeFw0yNjEwMTMxNjQzMTZaFw0yNjEwMTQxODQyMTZaMDMxMTAvBgNV BAMTKDRBNjI5NTA5NDk1NDgxRDcyODI2REJFMDA1QzgyODhEM0VDMEExNzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDe6Nr4OzAO+dOxl0leMMpwiGWE EUMlDABfjRYSTzNCAb6x2HLyW7M2ocyaPQHTtKzj/dU/b7nfYP8Tm48T+QIFCux+ 70ODKkCGzclaNeoj4Q26AHEfP/CoQR/0fj8MSxI3oCdB/doWfS9sqTq3g+Lq2tKk p3O+F/Iu0P3Vm8cv8ST+8L4/L/lq/gT5ZTrvsZ/NP5pPCC2BPorvlUJKVFwLSEre omsX/SlTonjV++c67/8tnqGGtYi+onQOesU15vAtO5BISdlk0jVSHdgw5In3UQR5 HL4eSTo2iH4wuVOFdgYxBNqVEOVTbTGQjpuIqO1libQ9wpQM7gcDlfa/R58BAgMB AAGjggJ3MIICczAdBgNVHQ4EFgQUSmKVCUlUgdcoJtvgBcgojT7AoXMwHwYDVR0j BBgwFoAU1tFy1y0jusHxl8ExrXIOboIwsAMwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMDAyZjhlZTYtYWJlNy00YWU4LTk2NGMtNzg4YmI5OGM5 NzVjLzIvRDZEMTcyRDcyRDIzQkFDMUYxOTdDMTMxQUQ3MjBFNkU4MjMwQjAwMy5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5L2NhMmIxMmFmYzQyODQzZGJhZTRiMDVj ZjM2MGQ5NTJkLzAvRDZEMTcyRDcyRDIzQkFDMUYxOTdDMTMxQUQ3MjBFNkU4MjMw QjAwMy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8wMDJmOGVlNi1h YmU3LTRhZTgtOTY0Yy03ODhiYjk4Yzk3NWMvMi9ENkQxNzJENzJEMjNCQUMxRjE5 N0MxMzFBRDcyMEU2RTgyMzBCMDAzLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARMhoap+thbZOClCLZxpJ txJ9551lOYHpm9V7yHXuRwVfOHu5lzMG/6sgY96J9jGXLiGR5DInwaDAL0X2Eg7X 3IgW4RXlMqrtckJW2hA+qPFlrSi6yyOhE/ESnYDoU8Faz3Trzf8bHI0FCRYVSt8Z bSQlvIhBDkiYpjML+O1FD9jzXM7Zc4YReElIJf/GQKiZDCeP3X7XtJVbjARXfqyd 0jh0GxUSC1rJ0ZlIHYPpbjE84UV3y2346XFI8JgoCIpX9t90PYOhr+JSNsEcBDvn +Parw2vGBNQVsDUb99joR9oxuVXrfk7iJp9i3od4FmI4Ed1FQUjUrPYk3oQyUec5 Ew== -----END CERTIFICATE-----Generated at Wed Oct 14 08:52:12 2026 by rpki-client