
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/7/6A6F6EC272A5EBDC18241C2C84D1D9FE94C125AA.mft
File: 6A6F6EC272A5EBDC18241C2C84D1D9FE94C125AA.mft (raw, json)
Hash identifier: tAHPMQZHK+IsZVTCt/pDcoyZhphDNe6jTB5oUGW53YY=
Subject key identifier: 65:AE:AE:DC:35:76:82:99:83:B0:45:B6:CF:E7:57:88:75:A1:C0:C7
Authority key identifier: 6A:6F:6E:C2:72:A5:EB:DC:18:24:1C:2C:84:D1:D9:FE:94:C1:25:AA
Certificate issuer: /CN=43729997152fd84fcda6d190c3b3195b02679660112be9a2d7
Certificate serial: 52C24C3EFDE84177C338E13E17022A758FCB8B6E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/829fb872-15bb-4a4e-9ed9-259960b049bd/43729997152fd84fcda6d190c3b3195b02679660112be9a2d7.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/7/6A6F6EC272A5EBDC18241C2C84D1D9FE94C125AA.mft
Manifest number: 04FA
Signing time: Thu 30 Apr 2026 11:59:39 +0000
Manifest this update: Thu 30 Apr 2026 11:54:39 +0000
Manifest next update: Fri 01 May 2026 15:15:39 +0000
Files and hashes: 1: 6A6F6EC272A5EBDC18241C2C84D1D9FE94C125AA.crl (hash: f3NdolBZ7t2hpBS1SzD0+9zaGU8MhNYxbRhDFYz2N0E=)
2: EEF3EC40152A747D52835AE8973E7DC8C193A840.cer (hash: b9uDQIv17Mqj0faPNTNtrEIHppsSxn28riugd1hAwe4=)
3: 3139382e3133352e3136392e302f32342d3234203d3e20333936393933.roa (hash: ZuqL+fdFsSzEWPLF+KldkjLdFZi3woWq3fujFGdDY0Y=)
4: 323630323a666136653a3a2f33362d3336203d3e203133363436.roa (hash: VGLKsgogi2I3ngbX4zz98KwF+ce4xUWbXael6VtJ/R8=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/7/6A6F6EC272A5EBDC18241C2C84D1D9FE94C125AA.crl
rsync://rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/7/6A6F6EC272A5EBDC18241C2C84D1D9FE94C125AA.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/829fb872-15bb-4a4e-9ed9-259960b049bd/43729997152fd84fcda6d190c3b3195b02679660112be9a2d7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/829fb872-15bb-4a4e-9ed9-259960b049bd/829fb872-15bb-4a4e-9ed9-259960b049bd.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/829fb872-15bb-4a4e-9ed9-259960b049bd/829fb872-15bb-4a4e-9ed9-259960b049bd.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/829fb872-15bb-4a4e-9ed9-259960b049bd.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 01 May 2026 15:15:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:c2:4c:3e:fd:e8:41:77:c3:38:e1:3e:17:02:2a:75:8f:cb:8b:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43729997152fd84fcda6d190c3b3195b02679660112be9a2d7
Validity
Not Before: Apr 30 11:54:39 2026 GMT
Not After : May 1 15:15:39 2026 GMT
Subject: CN=65AEAEDC3576829983B045B6CFE7578875A1C0C7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:7c:db:59:b0:0a:8d:b5:e1:87:de:2d:b1:83:
cb:a4:51:21:50:8f:04:fe:68:23:88:5f:66:8f:ae:
07:9f:d1:65:e4:8f:07:46:dc:4e:3c:ef:6e:50:cc:
b9:dc:60:8e:56:76:a2:cb:82:0a:97:23:b9:19:ee:
12:e5:da:82:90:c8:13:82:ef:ec:d7:1b:f8:29:73:
d3:04:c8:ca:79:bf:aa:5a:5d:2c:d1:83:e3:d1:fc:
e0:38:6c:fc:2e:e4:52:17:f9:f8:3f:47:19:20:2b:
da:fb:0e:6e:90:8b:9e:e9:a2:7c:bc:19:0b:df:84:
da:ab:f5:64:44:e5:17:fe:10:f8:f1:02:ba:00:3b:
85:6f:89:52:f1:08:b8:04:8f:1b:ac:88:fd:f2:d9:
88:c0:58:31:a2:fb:e2:ca:89:ae:d6:25:3c:9a:8e:
0d:e2:d8:21:a6:12:22:cf:26:04:c1:fa:d7:cc:f6:
af:90:d9:cd:57:1b:bc:90:29:dd:87:b6:a3:66:6c:
7e:04:03:1e:89:f0:ee:56:49:0c:61:9d:ac:5d:2f:
12:cb:d7:cf:4d:50:0d:2f:a0:c6:ea:45:a8:31:62:
1f:c4:04:4e:6d:9a:b4:1c:07:e2:ed:57:7c:c1:65:
10:c5:14:21:1e:51:12:d9:7e:bc:4a:73:74:aa:d7:
c6:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:AE:AE:DC:35:76:82:99:83:B0:45:B6:CF:E7:57:88:75:A1:C0:C7
X509v3 Authority Key Identifier:
keyid:6A:6F:6E:C2:72:A5:EB:DC:18:24:1C:2C:84:D1:D9:FE:94:C1:25:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/7/6A6F6EC272A5EBDC18241C2C84D1D9FE94C125AA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/829fb872-15bb-4a4e-9ed9-259960b049bd/43729997152fd84fcda6d190c3b3195b02679660112be9a2d7.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/7/6A6F6EC272A5EBDC18241C2C84D1D9FE94C125AA.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:3d:15:9a:f0:ac:6d:d5:0c:bf:eb:3c:94:13:0c:63:1c:a4:
2b:a2:a8:17:3e:5d:22:75:51:18:7b:6c:2f:bd:96:2c:25:4e:
bc:84:a7:dc:bc:bf:f7:a9:2a:95:ea:54:cd:07:53:6b:4d:b2:
0c:bb:b5:ad:77:af:47:da:2b:4f:be:1b:e7:c5:16:b8:f3:50:
9b:8f:8c:6c:54:eb:88:73:a8:5b:97:e3:a4:04:3e:70:94:81:
c8:3d:63:a6:2a:de:77:b2:01:1e:19:7b:b6:ce:0f:b3:4c:f2:
91:a2:1d:46:ce:be:f5:c0:1d:15:28:92:ed:21:68:b5:c1:0e:
30:1a:1e:09:52:51:19:a3:6a:e7:79:09:d5:b8:25:d2:e2:35:
fe:7c:40:0a:a1:b1:06:2e:f1:46:fd:57:08:f3:79:69:ff:ae:
1e:c5:b5:4d:ed:af:1d:28:da:df:95:8d:aa:a2:53:4e:98:75:
f0:4b:b0:14:0c:31:11:e1:be:16:7e:d1:58:a3:9e:c3:45:0c:
b2:a8:27:2a:ea:15:7d:5d:61:68:c0:d4:30:e8:fc:d5:9d:9f:
55:54:07:92:86:8c:fa:03:1e:a7:9c:6f:98:d7:9c:6e:fb:5b:
ca:df:69:12:30:81:95:36:7c:a0:c3:b5:35:f1:94:aa:0b:a7:
f2:1f:18:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 30 20:19:26 2026 by rpki-client