
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/1/3FCD3A839EA1417FD988F3DDFD0454197FAAF47A.mft
File: 3FCD3A839EA1417FD988F3DDFD0454197FAAF47A.mft (raw, json)
Hash identifier: UZOwkPgTWVvl8z1ctbCMVOrGtlchLO/1L6ua0sMQCi4=
Subject key identifier: 3A:2C:27:74:89:09:FE:13:54:91:0D:E3:47:A3:77:95:FE:77:B1:BE
Authority key identifier: 3F:CD:3A:83:9E:A1:41:7F:D9:88:F3:DD:FD:04:54:19:7F:AA:F4:7A
Certificate issuer: /CN=324ffe39a98a0146b503d8a015ca2c2e767cf3d0b9fde6231b
Certificate serial: 7D7F70BAEB8C3E05D3DCE98D8F5F11CE94B95584
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/51cd99f7-2f42-4dec-b2c6-09bafaa3780e/324ffe39a98a0146b503d8a015ca2c2e767cf3d0b9fde6231b.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/1/3FCD3A839EA1417FD988F3DDFD0454197FAAF47A.mft
Manifest number: 03A5
Signing time: Tue 21 Jul 2026 20:39:59 +0000
Manifest this update: Tue 21 Jul 2026 20:34:59 +0000
Manifest next update: Wed 22 Jul 2026 20:47:59 +0000
Files and hashes: 1: 3133302e31322e39332e302f32342d3234203d3e203236393534.roa (hash: vVLMMj/up4t8BoR2x4+9T6jLFKzm1RRXCwaLQiGBGUU=)
2: 323630323a663764653a3a2f34302d3438203d3e203236393534.roa (hash: huw/azfVtTuGJ+KiuQkTd/zUzlN/Io2KIFdebZxScmw=)
3: 32332e3139312e34302e302f32342d3234203d3e203236393534.roa (hash: uS9rqFKZ07mB8+YZnPlfGTxqPhMI6sgRdMjKP2z7h/I=)
4: 3FCD3A839EA1417FD988F3DDFD0454197FAAF47A.crl (hash: khlKCFdh0uTyj/NHpc5XQFRKNUBecIbU6f2SKPUJESE=)
5: AS402536.asa (hash: xuG+rFCTeYrWpHyA7Wqh+96IF5sUkS4DX7TKTpujn3k=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/1/3FCD3A839EA1417FD988F3DDFD0454197FAAF47A.crl
rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/1/3FCD3A839EA1417FD988F3DDFD0454197FAAF47A.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/51cd99f7-2f42-4dec-b2c6-09bafaa3780e/324ffe39a98a0146b503d8a015ca2c2e767cf3d0b9fde6231b.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/51cd99f7-2f42-4dec-b2c6-09bafaa3780e/51cd99f7-2f42-4dec-b2c6-09bafaa3780e.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/51cd99f7-2f42-4dec-b2c6-09bafaa3780e/51cd99f7-2f42-4dec-b2c6-09bafaa3780e.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/51cd99f7-2f42-4dec-b2c6-09bafaa3780e.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 22 Jul 2026 20:47:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:7f:70:ba:eb:8c:3e:05:d3:dc:e9:8d:8f:5f:11:ce:94:b9:55:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=324ffe39a98a0146b503d8a015ca2c2e767cf3d0b9fde6231b
Validity
Not Before: Jul 21 20:34:59 2026 GMT
Not After : Jul 22 20:47:59 2026 GMT
Subject: CN=3A2C27748909FE1354910DE347A37795FE77B1BE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:e1:d1:a5:81:53:3f:bf:bb:ea:f4:9f:9b:ed:
ec:fe:f1:14:26:90:94:0c:d5:da:93:cf:bc:bd:99:
1b:95:9f:de:33:97:80:7d:2d:22:f0:70:ed:92:14:
9a:ec:d5:fc:ce:f7:e6:00:a5:11:56:d6:df:4a:14:
f3:7b:c6:9b:55:71:5d:fd:67:55:a8:e1:99:5f:0e:
2b:cb:b2:e8:67:b5:9d:18:98:75:72:a5:96:fa:ca:
70:36:75:88:60:cf:9b:49:fe:0d:5c:37:db:03:5e:
45:c8:d7:85:40:c6:8d:f9:7c:6e:60:20:92:25:70:
28:6d:ff:9a:2c:3a:1c:23:42:e0:ba:28:25:55:ff:
ab:a8:7b:ac:8d:1b:6b:e2:78:88:6d:57:67:01:9e:
4e:fe:ee:e9:f3:72:7d:fd:1f:1b:ef:a1:91:d0:fe:
f5:18:cf:f0:b6:14:95:ce:88:a3:6f:f3:e3:e0:b1:
88:3f:b8:9d:27:5d:83:2c:39:a2:5e:f2:be:53:77:
0e:ea:99:69:ad:63:68:d2:3b:d9:b9:68:93:ba:97:
5e:d2:86:61:49:d2:e2:62:bf:39:02:92:be:66:9c:
2c:2e:0a:9d:6a:ea:9e:40:15:e1:f1:29:ef:11:c8:
7e:c9:af:ce:b8:7a:5f:34:51:f1:2b:d8:c2:1c:8e:
80:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:2C:27:74:89:09:FE:13:54:91:0D:E3:47:A3:77:95:FE:77:B1:BE
X509v3 Authority Key Identifier:
keyid:3F:CD:3A:83:9E:A1:41:7F:D9:88:F3:DD:FD:04:54:19:7F:AA:F4:7A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/1/3FCD3A839EA1417FD988F3DDFD0454197FAAF47A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/51cd99f7-2f42-4dec-b2c6-09bafaa3780e/324ffe39a98a0146b503d8a015ca2c2e767cf3d0b9fde6231b.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/1/3FCD3A839EA1417FD988F3DDFD0454197FAAF47A.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:03:2b:11:d1:3d:ba:ba:c6:d9:71:1f:aa:12:f9:4a:60:57:
ad:a4:72:54:0c:40:69:0f:5d:de:4c:ee:e3:87:76:da:32:bb:
21:be:8b:56:b7:00:a7:bb:e6:0d:63:67:e2:11:b8:ae:53:65:
76:03:c3:3f:bc:77:f5:26:bd:bf:73:30:e5:3f:97:29:18:eb:
a3:14:d8:f6:b2:28:1f:96:aa:32:e7:2a:8b:2e:2d:49:fa:cf:
7b:21:43:c2:3f:39:38:19:0d:eb:85:ff:57:c9:c9:96:c2:54:
81:0a:69:6a:39:e9:c8:15:ff:ca:6c:dc:93:cb:68:83:9c:4e:
6a:2c:28:0a:f4:f2:02:b4:86:49:97:57:85:5d:11:35:b2:5a:
84:93:87:d8:10:b8:88:8e:9c:3a:db:dd:0d:b6:8e:4f:ab:e7:
cd:b4:35:3d:c7:94:b8:3b:69:d9:40:16:09:73:94:0b:be:4e:
0b:85:87:44:6e:77:53:8e:9c:bd:65:d7:e3:1a:b8:6c:92:5b:
dd:5a:9d:cb:8b:8d:39:87:b9:fd:be:6a:c5:46:61:88:0d:0a:
e4:c0:f8:f3:9a:ee:18:cb:ef:f5:96:b4:de:c3:9a:5e:b9:0f:
41:fb:08:bc:4c:6a:d3:5f:6a:2e:a9:66:57:4f:c3:4b:42:44:
7e:70:96:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 22 00:40:30 2026 by rpki-client