$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/1/3FCD3A839EA1417FD988F3DDFD0454197FAAF47A.mft File: 3FCD3A839EA1417FD988F3DDFD0454197FAAF47A.mft (raw, json) Hash identifier: 7mPDlkQ1yY8Tc2oG+IaRaPqpjJhQV06CAIn9cTkzSgk= Subject key identifier: 99:42:14:65:68:3E:75:81:00:E9:5A:67:91:75:59:E1:13:BB:50:87 Authority key identifier: 3F:CD:3A:83:9E:A1:41:7F:D9:88:F3:DD:FD:04:54:19:7F:AA:F4:7A Certificate issuer: /CN=324ffe39a98a0146b503d8a015ca2c2e767cf3d0b9fde6231b Certificate serial: 37E590E356687FF8D6C9837F7C855644A3ACC99E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/51cd99f7-2f42-4dec-b2c6-09bafaa3780e/324ffe39a98a0146b503d8a015ca2c2e767cf3d0b9fde6231b.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/1/3FCD3A839EA1417FD988F3DDFD0454197FAAF47A.mft Manifest number: 040E Signing time: Mon 21 Sep 2026 16:52:44 +0000 Manifest this update: Mon 21 Sep 2026 16:47:44 +0000 Manifest next update: Tue 22 Sep 2026 17:44:44 +0000 Files and hashes: 1: 323630323a663764653a3a2f34302d3438203d3e203236393534.roa (hash: huw/azfVtTuGJ+KiuQkTd/zUzlN/Io2KIFdebZxScmw=) 2: AS402536.asa (hash: g8LGBbyfpAn2ClC4x/qVDuR3+weknmyrfoII4gG2Iug=) 3: 3133302e31322e39332e302f32342d3234203d3e203236393534.roa (hash: S/etqWBsJQE1xpnfTaF1R7YzxtdtexqAS5yykGH5s5A=) 4: 32332e3139312e34302e302f32342d3234203d3e203236393534.roa (hash: uS9rqFKZ07mB8+YZnPlfGTxqPhMI6sgRdMjKP2z7h/I=) 5: 3FCD3A839EA1417FD988F3DDFD0454197FAAF47A.crl (hash: Ciljq0/npdWuDhLt0ucTPtb3MusXDu1XR92Xjkc1WhY=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/1/3FCD3A839EA1417FD988F3DDFD0454197FAAF47A.crl rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/1/3FCD3A839EA1417FD988F3DDFD0454197FAAF47A.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/51cd99f7-2f42-4dec-b2c6-09bafaa3780e/324ffe39a98a0146b503d8a015ca2c2e767cf3d0b9fde6231b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/51cd99f7-2f42-4dec-b2c6-09bafaa3780e/51cd99f7-2f42-4dec-b2c6-09bafaa3780e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/51cd99f7-2f42-4dec-b2c6-09bafaa3780e/51cd99f7-2f42-4dec-b2c6-09bafaa3780e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/51cd99f7-2f42-4dec-b2c6-09bafaa3780e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 17:44:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:e5:90:e3:56:68:7f:f8:d6:c9:83:7f:7c:85:56:44:a3:ac:c9:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=324ffe39a98a0146b503d8a015ca2c2e767cf3d0b9fde6231b Validity Not Before: Sep 21 16:47:44 2026 GMT Not After : Sep 22 17:44:44 2026 GMT Subject: CN=99421465683E758100E95A67917559E113BB5087 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:c8:60:0d:d3:9d:51:4a:8b:73:eb:2d:21:24: 5f:f1:02:70:cb:24:9e:37:44:01:43:83:6d:42:82: f9:c8:3c:55:7d:69:17:4d:58:50:4d:dc:d1:05:cf: 52:ab:d5:dc:c8:ca:67:d5:47:c0:c3:04:15:19:84: 78:c6:c3:30:ce:77:f5:5f:8b:20:6d:34:60:1c:28: 99:3d:ba:68:a6:eb:07:ad:82:1a:10:c5:d0:14:1e: 77:35:22:b1:2f:8a:37:60:51:25:da:aa:a0:a5:e6: a7:b3:8c:40:65:f8:43:15:38:b7:8c:96:21:35:43: c9:a8:a7:9d:70:ae:12:cc:05:25:d7:b2:34:12:ce: db:6f:8b:e8:20:d8:23:f3:17:9a:2d:38:bd:e4:e3: ef:e2:6d:d6:a2:7f:b9:11:fe:45:04:af:e7:00:63: 85:b2:22:5c:b4:59:ce:7a:de:93:8a:21:bf:0d:b3: a0:11:87:65:f0:5e:83:3a:cf:72:a9:c9:f0:23:2a: 70:8c:48:8e:ff:eb:a7:4c:70:3d:b0:d8:34:17:0b: aa:2a:8e:3b:77:52:0e:31:bc:21:68:49:11:09:bc: 09:7b:d2:b8:c3:df:6e:a5:d0:8a:d8:fb:21:31:62: 88:28:a6:57:cd:c6:7d:55:30:aa:0c:9b:9e:57:9b: 12:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:42:14:65:68:3E:75:81:00:E9:5A:67:91:75:59:E1:13:BB:50:87 X509v3 Authority Key Identifier: keyid:3F:CD:3A:83:9E:A1:41:7F:D9:88:F3:DD:FD:04:54:19:7F:AA:F4:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/1/3FCD3A839EA1417FD988F3DDFD0454197FAAF47A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/51cd99f7-2f42-4dec-b2c6-09bafaa3780e/324ffe39a98a0146b503d8a015ca2c2e767cf3d0b9fde6231b.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/1/3FCD3A839EA1417FD988F3DDFD0454197FAAF47A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:a4:6e:76:bb:f1:86:a8:1a:84:f5:dc:a7:9c:05:e0:2f:83: 69:a9:b2:4c:a4:20:06:32:35:c7:28:f1:17:6d:94:1d:41:7a: d6:f3:45:de:a7:2c:ac:9d:ed:75:6f:33:fd:60:76:d5:a4:6b: 06:78:7b:60:6e:ad:9e:7f:d0:86:00:39:30:67:11:4f:c2:7d: de:65:9a:b9:d9:4c:1e:21:f9:07:67:90:87:4e:d0:03:4c:c9: d7:54:7b:55:6d:fa:1f:02:71:cd:84:8a:9e:54:7d:37:ca:6e: 9f:38:70:b5:d4:28:3b:5d:b3:ce:27:96:b1:83:e4:1a:86:14: 4d:e7:2a:3f:6f:0f:73:40:a1:7b:23:13:dc:c7:6c:33:3d:5c: 57:e6:3c:8b:44:18:2d:73:ed:d3:af:51:61:a8:98:be:72:4d: f8:c7:1d:fe:92:1c:85:f2:c4:53:1e:f2:59:ee:2b:71:1c:62: 3b:87:30:ad:9c:5c:11:7b:b6:39:e8:ea:78:ff:26:69:0f:9b: 59:29:ed:2c:67:b8:9a:f5:66:d9:db:fa:b3:2b:b1:66:cb:b7: 9d:e7:e5:fd:3e:73:8f:dd:cf:b4:d1:e6:c5:57:0d:41:61:a4: e9:a9:99:e3:ef:42:bd:e6:63:a5:12:63:8d:07:05:56:a5:ca: a0:81:0c:58 -----BEGIN CERTIFICATE----- MIIF1zCCBL+gAwIBAgIUN+WQ41Zof/jWyYN/fIVWRKOsyZ4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyMzI0ZmZlMzlhOThhMDE0NmI1MDNkOGEwMTVjYTJjMmU3 NjdjZjNkMGI5ZmRlNjIzMWIwHhcNMjYwOTIxMTY0NzQ0WhcNMjYwOTIyMTc0NDQ0 WjAzMTEwLwYDVQQDEyg5OTQyMTQ2NTY4M0U3NTgxMDBFOTVBNjc5MTc1NTlFMTEz QkI1MDg3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw8hgDdOdUUqL c+stISRf8QJwyySeN0QBQ4NtQoL5yDxVfWkXTVhQTdzRBc9Sq9XcyMpn1UfAwwQV GYR4xsMwznf1X4sgbTRgHCiZPbpopusHrYIaEMXQFB53NSKxL4o3YFEl2qqgpean s4xAZfhDFTi3jJYhNUPJqKedcK4SzAUl17I0Es7bb4voINgj8xeaLTi95OPv4m3W on+5Ef5FBK/nAGOFsiJctFnOet6TiiG/DbOgEYdl8F6DOs9yqcnwIypwjEiO/+un THA9sNg0FwuqKo47d1IOMbwhaEkRCbwJe9K4w99updCK2PshMWKIKKZXzcZ9VTCq DJueV5sS+wIDAQABo4IC1zCCAtMwHQYDVR0OBBYEFJlCFGVoPnWBAOlaZ5F1WeET u1CHMB8GA1UdIwQYMBaAFD/NOoOeoUF/2Yjz3f0EVBl/qvR6MA4GA1UdDwEB/wQE AwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3luYzovL3JzeW5jLnBhYXMu cnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzczYjhlYzAxLThiYTUtNDc5Zi1hMjI5 LTBhYjcwZTQ4MTViYi8xLzNGQ0QzQTgzOUVBMTQxN0ZEOTg4RjNEREZEMDQ1NDE5 N0ZBQUY0N0EuY3JsMIHzBggrBgEFBQcBAQSB5jCB4zCB4AYIKwYBBQUHMAKGgdNy c3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0 YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYt NDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS81MWNkOTlmNy0yZjQyLTRkZWMtYjJjNi0w OWJhZmFhMzc4MGUvMzI0ZmZlMzlhOThhMDE0NmI1MDNkOGEwMTVjYTJjMmU3Njdj ZjNkMGI5ZmRlNjIzMWIuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYIKwYBBQUH MAuGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv NzNiOGVjMDEtOGJhNS00NzlmLWEyMjktMGFiNzBlNDgxNWJiLzEvM0ZDRDNBODM5 RUExNDE3RkQ5ODhGM0RERkQwNDU0MTk3RkFBRjQ3QS5tZnQwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUA MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAHCkbna7 8YaoGoT13KecBeAvg2mpskykIAYyNcco8RdtlB1BetbzRd6nLKyd7XVvM/1gdtWk awZ4e2BurZ5/0IYAOTBnEU/Cfd5lmrnZTB4h+QdnkIdO0ANMyddUe1Vt+h8Ccc2E ip5UfTfKbp84cLXUKDtds84nlrGD5BqGFE3nKj9vD3NAoXsjE9zHbDM9XFfmPItE GC1z7dOvUWGomL5yTfjHHf6SHIXyxFMe8lnuK3EcYjuHMK2cXBF7tjno6nj/JmkP m1kp7SxnuJr1Ztnb+rMrsWbLt53n5f0+c4/dz7TR5sVXDUFhpOmpmePvQr3mY6US Y40HBValyqCBDFg= -----END CERTIFICATE-----Generated at Tue Sep 22 06:45:40 2026 by rpki-client