$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/7/D74983C1FABA0CC1566F0601AFE11423E11B5171.mft File: D74983C1FABA0CC1566F0601AFE11423E11B5171.mft (raw, json) Hash identifier: grFt3+zLqIkV17ZPgBNbOEVg7h0QMS59oLW4lGmreh4= Subject key identifier: 5F:44:9A:2B:D1:02:DC:88:D6:6C:D0:3E:3F:F9:A9:4F:EB:67:4A:A4 Authority key identifier: D7:49:83:C1:FA:BA:0C:C1:56:6F:06:01:AF:E1:14:23:E1:1B:51:71 Certificate issuer: /CN=4b43c64a680efdc51a00463172b8f5aff945e0733fc49c2e4c Certificate serial: 72FFB527FBAEB663CDFE171D15763D34B84F637F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b150e98d-80e9-45f6-bc63-6b40a3d59e9c/4b43c64a680efdc51a00463172b8f5aff945e0733fc49c2e4c.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/7/D74983C1FABA0CC1566F0601AFE11423E11B5171.mft Manifest number: 04E3 Signing time: Tue 21 Apr 2026 17:18:10 +0000 Manifest this update: Tue 21 Apr 2026 17:13:10 +0000 Manifest next update: Wed 22 Apr 2026 20:13:10 +0000 Files and hashes: 1: 3139322e37352e3139362e302f32332d3234203d3e203539393933.roa (hash: KNSz4GsVtYNwvMtBZ3CvI93UcAzzIm+CEBGOCv59Ibc=) 2: 3139322e37352e3139372e302f32342d3234203d3e203530323234.roa (hash: XWa1v4ip3kV+r3f119VGt2tZ+jfePtDqCwe/xpwhK0k=) 3: 3139322e37352e3139362e302f32332d3234203d3e20323131363635.roa (hash: EY02IPhkI+bUEpVH6oIXpq9tMDByZp2XBlblwJ3ORuk=) 4: D74983C1FABA0CC1566F0601AFE11423E11B5171.crl (hash: ZaCoRtUZzH1//H6B/HK5eWTWpsE0vAw9u3uyZAPlv9E=) 5: 323630323a666137613a3a2f34302d3438203d3e203539393933.roa (hash: Lb+C3YJn54LxtUf0GyCu85JPoRsStAp6WFsAuvX2G+E=) 6: 3139322e37352e3139362e302f32342d3234203d3e203139363830.roa (hash: yvXeEWRlMmnSNfIrbChtFM+svsvnH2vlOzvMg3QWUIM=) 7: 32332e3135332e3233322e302f32342d3234203d3e203539393933.roa (hash: Xa94VPXxaKxQavq41HUhZQOU53EjRewYZdqWNPMbOkI=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/7/D74983C1FABA0CC1566F0601AFE11423E11B5171.crl rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/7/D74983C1FABA0CC1566F0601AFE11423E11B5171.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b150e98d-80e9-45f6-bc63-6b40a3d59e9c/4b43c64a680efdc51a00463172b8f5aff945e0733fc49c2e4c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b150e98d-80e9-45f6-bc63-6b40a3d59e9c/b150e98d-80e9-45f6-bc63-6b40a3d59e9c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b150e98d-80e9-45f6-bc63-6b40a3d59e9c/b150e98d-80e9-45f6-bc63-6b40a3d59e9c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b150e98d-80e9-45f6-bc63-6b40a3d59e9c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Apr 2026 20:13:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:ff:b5:27:fb:ae:b6:63:cd:fe:17:1d:15:76:3d:34:b8:4f:63:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4b43c64a680efdc51a00463172b8f5aff945e0733fc49c2e4c Validity Not Before: Apr 21 17:13:10 2026 GMT Not After : Apr 22 20:13:10 2026 GMT Subject: CN=5F449A2BD102DC88D66CD03E3FF9A94FEB674AA4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:79:82:73:65:4b:06:7e:51:0c:46:73:a5:ae: d6:ab:9b:ed:33:42:8d:6d:f3:0c:38:de:3e:88:15: 5f:6a:e0:bd:50:0c:04:f6:4a:85:7c:a8:67:c9:84: cb:48:29:fe:ec:d1:74:54:2b:40:25:1c:8e:b7:d9: 9e:47:62:5a:31:65:78:ba:06:42:f9:1a:34:3d:bc: e6:5d:f1:6b:50:5f:d9:d8:c8:47:2a:c5:10:9a:e6: 42:03:e6:48:06:f9:ca:d0:a3:b5:b6:5e:c9:d8:a9: 77:f1:1f:c6:85:4c:23:5f:2f:75:4a:c8:ba:16:20: 0c:8e:af:93:b2:e9:d8:68:95:50:ec:0c:16:4d:42: 0c:ea:49:5b:e3:b7:3e:94:75:63:aa:0a:65:f1:58: 03:da:a9:0f:f1:69:d7:77:15:a5:c5:db:57:43:67: f4:b9:6e:12:9f:59:1f:6f:33:4f:88:f0:c5:e9:8e: 8b:c2:d8:81:17:2c:a3:b1:fc:89:84:61:f9:c8:3b: bb:65:96:cd:33:db:5f:17:7a:3b:c5:15:78:b2:89: d4:8d:49:f7:6e:56:4c:1c:b4:1e:0e:d3:30:a0:2e: cc:6e:e4:0d:ba:ab:b5:03:24:57:67:cc:d8:39:ee: 22:c4:87:49:cc:df:3d:ba:07:0d:c3:1b:af:f6:44: d9:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:44:9A:2B:D1:02:DC:88:D6:6C:D0:3E:3F:F9:A9:4F:EB:67:4A:A4 X509v3 Authority Key Identifier: keyid:D7:49:83:C1:FA:BA:0C:C1:56:6F:06:01:AF:E1:14:23:E1:1B:51:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/7/D74983C1FABA0CC1566F0601AFE11423E11B5171.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b150e98d-80e9-45f6-bc63-6b40a3d59e9c/4b43c64a680efdc51a00463172b8f5aff945e0733fc49c2e4c.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/7/D74983C1FABA0CC1566F0601AFE11423E11B5171.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:3d:c6:a8:b3:be:af:44:64:09:50:3c:a7:30:01:eb:df:16: 9c:fb:44:54:bc:1d:79:05:aa:fc:be:54:d0:ef:45:69:23:1c: c5:5b:24:02:b7:2b:6b:91:a5:17:eb:61:87:ac:81:d5:36:0a: a2:3b:69:ad:14:94:d1:c5:ba:84:6a:d0:36:44:1f:1f:77:a0: c8:5f:94:f2:60:f4:93:42:eb:9a:7d:0c:32:70:c1:10:f7:9f: 6e:6e:6c:f9:08:74:0c:27:57:f5:cb:2b:84:d7:1f:c1:f9:bf: 7d:75:3c:8f:64:a0:86:67:4b:60:8d:be:cf:4c:89:d3:a3:47: 95:6e:84:18:f8:f4:79:51:78:07:fb:4d:87:9d:6f:11:04:71: 41:16:29:de:3f:3f:4b:8f:80:8f:13:b3:74:a5:20:56:61:fd: 3f:5d:e8:14:2d:84:a7:bc:d4:39:06:31:c8:0c:d6:99:8e:0d: f8:c0:58:21:c6:cb:09:8c:9e:95:d4:02:9d:58:36:86:2b:71: 81:8c:83:3d:fb:94:f4:40:23:49:dd:36:d1:4f:e1:7a:14:de: 55:58:e8:61:9a:c6:44:cd:d3:09:cd:1d:47:01:c8:06:44:d4: 9f:86:29:75:9d:c0:75:5a:b3:d3:a2:87:21:6b:d2:13:f3:69: 15:f8:f3:63 -----BEGIN CERTIFICATE----- MIIF1zCCBL+gAwIBAgIUcv+1J/uutmPN/hcdFXY9NLhPY38wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNGI0M2M2NGE2ODBlZmRjNTFhMDA0NjMxNzJiOGY1YWZm OTQ1ZTA3MzNmYzQ5YzJlNGMwHhcNMjYwNDIxMTcxMzEwWhcNMjYwNDIyMjAxMzEw WjAzMTEwLwYDVQQDEyg1RjQ0OUEyQkQxMDJEQzg4RDY2Q0QwM0UzRkY5QTk0RkVC Njc0QUE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxnmCc2VLBn5R DEZzpa7Wq5vtM0KNbfMMON4+iBVfauC9UAwE9kqFfKhnyYTLSCn+7NF0VCtAJRyO t9meR2JaMWV4ugZC+Ro0PbzmXfFrUF/Z2MhHKsUQmuZCA+ZIBvnK0KO1tl7J2Kl3 8R/GhUwjXy91Ssi6FiAMjq+TsunYaJVQ7AwWTUIM6klb47c+lHVjqgpl8VgD2qkP 8WnXdxWlxdtXQ2f0uW4Sn1kfbzNPiPDF6Y6LwtiBFyyjsfyJhGH5yDu7ZZbNM9tf F3o7xRV4sonUjUn3blZMHLQeDtMwoC7MbuQNuqu1AyRXZ8zYOe4ixIdJzN89ugcN wxuv9kTZWwIDAQABo4IC1zCCAtMwHQYDVR0OBBYEFF9EmivRAtyI1mzQPj/5qU/r Z0qkMB8GA1UdIwQYMBaAFNdJg8H6ugzBVm8GAa/hFCPhG1FxMA4GA1UdDwEB/wQE AwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3luYzovL3JzeW5jLnBhYXMu cnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2FlNmVkZWVjLTA4YmEtNGNkZS04OTc5 LTRmYWVhNGIxYmMxMi83L0Q3NDk4M0MxRkFCQTBDQzE1NjZGMDYwMUFGRTExNDIz RTExQjUxNzEuY3JsMIHzBggrBgEFBQcBAQSB5jCB4zCB4AYIKwYBBQUHMAKGgdNy c3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0 YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2Mt NGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9iMTUwZTk4ZC04MGU5LTQ1ZjYtYmM2My02 YjQwYTNkNTllOWMvNGI0M2M2NGE2ODBlZmRjNTFhMDA0NjMxNzJiOGY1YWZmOTQ1 ZTA3MzNmYzQ5YzJlNGMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYIKwYBBQUH MAuGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv YWU2ZWRlZWMtMDhiYS00Y2RlLTg5NzktNGZhZWE0YjFiYzEyLzcvRDc0OTgzQzFG QUJBMENDMTU2NkYwNjAxQUZFMTE0MjNFMTFCNTE3MS5tZnQwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUA MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAEU9xqiz vq9EZAlQPKcwAevfFpz7RFS8HXkFqvy+VNDvRWkjHMVbJAK3K2uRpRfrYYesgdU2 CqI7aa0UlNHFuoRq0DZEHx93oMhflPJg9JNC65p9DDJwwRD3n25ubPkIdAwnV/XL K4TXH8H5v311PI9koIZnS2CNvs9MidOjR5VuhBj49HlReAf7TYedbxEEcUEWKd4/ P0uPgI8Ts3SlIFZh/T9d6BQthKe81DkGMcgM1pmODfjAWCHGywmMnpXUAp1YNoYr cYGMgz37lPRAI0ndNtFP4XoU3lVY6GGaxkTN0wnNHUcByAZE1J+GKXWdwHVas9Oi hyFr0hPzaRX482M= -----END CERTIFICATE-----Generated at Wed Apr 22 07:24:32 2026 by rpki-client