$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/1/2F0F1BC67DD2B9A7E2545638C173D5EC060C27D0.mft File: 2F0F1BC67DD2B9A7E2545638C173D5EC060C27D0.mft (raw, json) Hash identifier: 52cy496/KuW9rRtHRtuQbJVALuWr3MRE94ODuMrFS40= Subject key identifier: 31:74:D1:1C:6D:0F:64:A6:F6:D2:CD:A8:5C:66:64:15:47:50:8F:C7 Authority key identifier: 2F:0F:1B:C6:7D:D2:B9:A7:E2:54:56:38:C1:73:D5:EC:06:0C:27:D0 Certificate issuer: /CN=a1ba1093bbf34991bf59a35b2bcaf49ab828176fa4310b6355 Certificate serial: 535B8D7565F770ED0D51B9680EF6CAC7F23CD921 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b915810d-b97a-4696-955d-495d5d12c3b5/a1ba1093bbf34991bf59a35b2bcaf49ab828176fa4310b6355.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/1/2F0F1BC67DD2B9A7E2545638C173D5EC060C27D0.mft Manifest number: 3F82 Signing time: Tue 27 Oct 2026 09:49:51 +0000 Manifest this update: Tue 27 Oct 2026 09:44:51 +0000 Manifest next update: Wed 28 Oct 2026 11:32:51 +0000 Files and hashes: 1: 323630323a663939323a63303a3a2f34342d3438203d3e203236303432.roa (hash: YcD6OJ+CkZWZoPFilNIvkHcy621Zn+qrN1B3xkNtwQc=) 2: 32332e3137302e3231362e302f32342d3234203d3e203538323032.roa (hash: dhvuFNP+dKjaylM9bJGDtxRtOBzy7kE4O1dRl7JrhAc=) 3: 323630323a663939323a65303a3a2f34342d3438203d3e203333333837.roa (hash: Jp0C0pT8pWJqRBdKs6Z8Yx69PQ+TPEU5WL+UawocJjE=) 4: 323630323a663939323a35303a3a2f34342d3438203d3e20313939393539.roa (hash: b0Y9KTtLcurzLdN0rHLtotfhQYSBbk9yeBAxIWe6UDM=) 5: 323630323a663939323a66633a3a2f34382d3438203d3e2030.roa (hash: P0Wxd7YHxu1Ww7VvfRSNOiu4DOsQueuhZO3fCro/WXE=) 6: 3230392e3136332e3130352e302f32342d3332203d3e2030.roa (hash: FKbwQeudM+xj3ZmHz0Rd3chH8oOM/OG/CAqhkbAOwiU=) 7: 2F0F1BC67DD2B9A7E2545638C173D5EC060C27D0.crl (hash: N3nkr1zP8xSS1NORoeU2ZBr+nKGk2zFEOVNkCBzaRKo=) 8: 323630323a663939323a61303a3a2f34342d3438203d3e2030.roa (hash: dIrRhUCsqIlQRkKASf3euKWdJjEjwQuOt/Ix4ZqqXVk=) 9: 323630323a663939323a35303a3a2f34342d3438203d3e203430363736.roa (hash: dfiSzAj0dxIHRnbrV3sYNv7QdmVgZOpy7/5qQbU3b3U=) 10: 323630323a663939323a66333a3a2f34382d3438203d3e203333333837.roa (hash: wWs8ib9AxdStlITj+fRhlFovwHg1pfm3ljVihr6bW+k=) 11: 323630323a663939323a66343a3a2f34382d3438203d3e20323038363939.roa (hash: K8umBIyysIyTKzGAPqQYfyOuH8+F5WnTKQ7wEtfjocE=) 12: 323630323a663939323a61303a3a2f34342d3438203d3e203433363431.roa (hash: VOrAFxco2wif90ptN+7JtyQbdIcEhDu8JRBfxWeM5AA=) 13: 323630323a663939323a66373a3a2f34382d3438203d3e2030.roa (hash: Sevc+sKUYYnZUHh1gZrExTog3yoYNcVhrxdIQjC4dVM=) 14: 323630323a663939323a66613a3a2f34382d3439203d3e203430363736.roa (hash: e0fhRMu+yRz12dIijmE9iRjZQQKxfzNFVogUT3jtPD0=) 15: 323630323a663939323a66663a3a2f34382d3438203d3e203633333930.roa (hash: HhVByOYrx2S9pHnEb1O7wXoTQ+/5YLny6hPGL1uYyM8=) 16: 323630323a663939323a64313a3a2f34382d3438203d3e203230343733.roa (hash: 2w2powaZlQJtb8QkEXb0ohWSFkr6EssBYE5641X43+A=) 17: 323630323a663939323a66323a3a2f34382d3438203d3e20323733323032.roa (hash: iEqw6oJFOmidQ4uO2TC0uMGKQbiMPYv6XpkzxfqW6/I=) 18: 323630323a663939323a36303a3a2f34342d3438203d3e20313532393030.roa (hash: YYf0/nCM78+V7tIM0LmBS6Dvc8Dkds5cV7+r3azqm7c=) 19: 323630323a663939323a62303a3a2f34342d3438203d3e2030.roa (hash: 7NmmEvA5OxLCgc1HX461LiLWtFz8UfSVNBj0uTzj9Mw=) 20: 323630323a663939323a66643a3a2f34382d3438203d3e2030.roa (hash: l9MHeHwPWDpfcYYZeuJdPzAITqqbSJxHyHz6Xc6Iztc=) 21: 323630323a663939323a39303a3a2f34342d3438203d3e2030.roa (hash: aPsopjlXsO9PjZXI0aAo9bHjjiesxBjYYeoVF6XSASU=) 22: 323630323a663939323a66363a3a2f34382d3438203d3e203236323836.roa (hash: ZqVNXzi+RxnP2gAp/IhyHOF5/qmgOKGR7WPfV3jMwnQ=) 23: 323630323a663939323a66383a3a2f34382d3438203d3e203236323836.roa (hash: znzq1JNqY7nwa0VK1203olEAlMeBqmP7Bua598HbZwY=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/1/2F0F1BC67DD2B9A7E2545638C173D5EC060C27D0.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/1/2F0F1BC67DD2B9A7E2545638C173D5EC060C27D0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b915810d-b97a-4696-955d-495d5d12c3b5/a1ba1093bbf34991bf59a35b2bcaf49ab828176fa4310b6355.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b915810d-b97a-4696-955d-495d5d12c3b5/b915810d-b97a-4696-955d-495d5d12c3b5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b915810d-b97a-4696-955d-495d5d12c3b5/b915810d-b97a-4696-955d-495d5d12c3b5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b915810d-b97a-4696-955d-495d5d12c3b5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 28 Oct 2026 11:32:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:5b:8d:75:65:f7:70:ed:0d:51:b9:68:0e:f6:ca:c7:f2:3c:d9:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a1ba1093bbf34991bf59a35b2bcaf49ab828176fa4310b6355 Validity Not Before: Oct 27 09:44:51 2026 GMT Not After : Oct 28 11:32:51 2026 GMT Subject: CN=3174D11C6D0F64A6F6D2CDA85C66641547508FC7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:a9:4c:9f:dd:f1:12:8f:3d:a5:0c:54:a9:73: a5:2a:16:a3:5a:ac:bd:4e:86:42:25:e0:3b:64:92: 11:e3:06:47:5e:f0:1c:d7:ba:57:d5:01:80:86:98: 41:a4:77:61:c1:bd:57:68:0c:40:14:8b:60:5a:ed: eb:86:63:2d:71:b3:6c:05:0a:38:f3:fc:f6:f3:18: ca:e0:16:ec:a1:db:76:76:55:e7:8f:11:47:7f:dd: 4a:3d:7d:42:22:25:5f:b5:e1:fe:5d:ae:d9:9d:24: 2a:9e:0d:11:4f:06:f9:93:ae:ed:8f:e5:da:2f:e9: 8c:29:2e:d6:2f:07:fc:c3:13:19:06:ef:64:7a:89: 1e:c9:24:17:bd:57:e2:b8:c7:05:c8:01:74:46:1a: 7c:f2:21:99:94:2e:22:e4:8a:2c:7a:7a:75:9f:ef: 5c:1d:93:f2:c4:c4:52:45:8f:0f:a5:77:4a:ff:1e: e2:fe:35:18:33:ef:56:43:3b:41:a8:ca:b4:6d:cb: ef:fa:92:f5:1d:bd:19:07:01:39:86:02:f1:46:bf: 45:7e:0f:e8:c3:c9:cf:11:9b:86:49:4a:18:45:51: 96:ed:ab:26:af:5f:1b:9a:39:36:71:4a:85:b6:32: eb:0f:6d:9d:f3:0f:fd:47:8c:fc:65:38:3a:43:9a: 2b:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:74:D1:1C:6D:0F:64:A6:F6:D2:CD:A8:5C:66:64:15:47:50:8F:C7 X509v3 Authority Key Identifier: keyid:2F:0F:1B:C6:7D:D2:B9:A7:E2:54:56:38:C1:73:D5:EC:06:0C:27:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/1/2F0F1BC67DD2B9A7E2545638C173D5EC060C27D0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b915810d-b97a-4696-955d-495d5d12c3b5/a1ba1093bbf34991bf59a35b2bcaf49ab828176fa4310b6355.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/1/2F0F1BC67DD2B9A7E2545638C173D5EC060C27D0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:8d:d1:ac:af:3b:dd:d1:b5:06:96:a8:f5:4b:68:3e:02:83: 80:9d:77:fc:56:a8:c9:74:32:cc:43:ff:f5:d1:14:6f:f1:6a: e7:da:66:b0:42:7b:cc:3c:96:9c:b5:2e:08:b2:15:f6:f3:96: 00:fc:91:58:0c:fc:fd:14:96:cb:e5:9a:af:df:c1:cf:42:50: 82:43:6a:b7:67:bc:6e:d6:17:e8:95:00:72:b3:57:0d:ce:3d: 93:b1:4b:53:3c:07:a3:1d:75:3d:83:e1:8a:34:2e:b2:14:6d: 58:8c:75:cf:89:ba:ae:6e:25:93:47:e3:94:cb:4e:2a:af:d5: 49:b8:3e:dc:25:0d:f2:0d:69:3e:62:d1:e0:ce:65:69:1a:ee: c6:e4:12:46:dd:d5:b0:ae:8f:30:69:cf:15:2f:20:eb:86:b5: 5d:ef:ae:ba:00:9c:f0:2e:80:a7:7b:05:4a:2d:33:f7:9b:c0: 8a:2a:1d:57:37:48:fe:87:3b:fb:60:f4:ec:f0:b3:79:9f:02: 08:20:3e:71:ce:b7:4e:64:ec:17:4f:0e:4c:6f:1d:d3:11:d4: 10:63:0c:0e:0b:d4:68:41:ed:8c:4d:7d:27:b6:31:5d:15:78: d7:35:2e:ad:7a:c2:0f:7d:f3:31:85:e9:a8:aa:ec:dc:f0:cf: 73:fe:ae:ec -----BEGIN CERTIFICATE----- MIIF1zCCBL+gAwIBAgIUU1uNdWX3cO0NUbloDvbKx/I82SEwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYTFiYTEwOTNiYmYzNDk5MWJmNTlhMzViMmJjYWY0OWFi ODI4MTc2ZmE0MzEwYjYzNTUwHhcNMjYxMDI3MDk0NDUxWhcNMjYxMDI4MTEzMjUx WjAzMTEwLwYDVQQDEygzMTc0RDExQzZEMEY2NEE2RjZEMkNEQTg1QzY2NjQxNTQ3 NTA4RkM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4qlMn93xEo89 pQxUqXOlKhajWqy9ToZCJeA7ZJIR4wZHXvAc17pX1QGAhphBpHdhwb1XaAxAFItg Wu3rhmMtcbNsBQo48/z28xjK4Bbsodt2dlXnjxFHf91KPX1CIiVfteH+Xa7ZnSQq ng0RTwb5k67tj+XaL+mMKS7WLwf8wxMZBu9keokeySQXvVfiuMcFyAF0Rhp88iGZ lC4i5Iosenp1n+9cHZPyxMRSRY8PpXdK/x7i/jUYM+9WQztBqMq0bcvv+pL1Hb0Z BwE5hgLxRr9Ffg/ow8nPEZuGSUoYRVGW7asmr18bmjk2cUqFtjLrD22d8w/9R4z8 ZTg6Q5or1wIDAQABo4IC1zCCAtMwHQYDVR0OBBYEFDF00RxtD2Sm9tLNqFxmZBVH UI/HMB8GA1UdIwQYMBaAFC8PG8Z90rmn4lRWOMFz1ewGDCfQMA4GA1UdDwEB/wQE AwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3luYzovL3JzeW5jLnBhYXMu cnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5Lzg5MjcwZjZjLWEzZmUtNDI5OS1iMDc5 LTMwOWVkOTdmMzgyNC8xLzJGMEYxQkM2N0REMkI5QTdFMjU0NTYzOEMxNzNENUVD MDYwQzI3RDAuY3JsMIHzBggrBgEFBQcBAQSB5jCB4zCB4AYIKwYBBQUHMAKGgdNy c3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0 YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2It NGIzMy05YTg4LTViMjJkMmE4MzM3ZC9iOTE1ODEwZC1iOTdhLTQ2OTYtOTU1ZC00 OTVkNWQxMmMzYjUvYTFiYTEwOTNiYmYzNDk5MWJmNTlhMzViMmJjYWY0OWFiODI4 MTc2ZmE0MzEwYjYzNTUuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYIKwYBBQUH MAuGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv ODkyNzBmNmMtYTNmZS00Mjk5LWIwNzktMzA5ZWQ5N2YzODI0LzEvMkYwRjFCQzY3 REQyQjlBN0UyNTQ1NjM4QzE3M0Q1RUMwNjBDMjdEMC5tZnQwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUA MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAGeN0ayv O93RtQaWqPVLaD4Cg4Cdd/xWqMl0MsxD//XRFG/xaufaZrBCe8w8lpy1LgiyFfbz lgD8kVgM/P0Ulsvlmq/fwc9CUIJDardnvG7WF+iVAHKzVw3OPZOxS1M8B6MddT2D 4Yo0LrIUbViMdc+Juq5uJZNH45TLTiqv1Um4PtwlDfINaT5i0eDOZWka7sbkEkbd 1bCujzBpzxUvIOuGtV3vrroAnPAugKd7BUotM/ebwIoqHVc3SP6HO/tg9Ozws3mf AgggPnHOt05k7BdPDkxvHdMR1BBjDA4L1GhB7YxNfSe2MV0VeNc1Lq16wg998zGF 6aiq7Nzwz3P+ruw= -----END CERTIFICATE-----Generated at Tue Oct 27 15:44:23 2026 by rpki-client