
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/7/D74983C1FABA0CC1566F0601AFE11423E11B5171.mft
File: D74983C1FABA0CC1566F0601AFE11423E11B5171.mft (raw, json)
Hash identifier: 9USoQgGPZIEg7jaaeZTMHotrbYkGK7CSCFrECNcwnBg=
Subject key identifier: B8:A2:45:15:F9:E6:35:C0:9A:84:00:93:FC:E6:A3:50:7D:90:BD:23
Authority key identifier: D7:49:83:C1:FA:BA:0C:C1:56:6F:06:01:AF:E1:14:23:E1:1B:51:71
Certificate issuer: /CN=4b43c64a680efdc51a00463172b8f5aff945e0733fc49c2e4c
Certificate serial: 598F15EC945080C12296785DE8F29ECA2D5AC159
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b150e98d-80e9-45f6-bc63-6b40a3d59e9c/4b43c64a680efdc51a00463172b8f5aff945e0733fc49c2e4c.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/7/D74983C1FABA0CC1566F0601AFE11423E11B5171.mft
Manifest number: 05DB
Signing time: Fri 23 Oct 2026 13:17:03 +0000
Manifest this update: Fri 23 Oct 2026 13:12:03 +0000
Manifest next update: Sat 24 Oct 2026 15:19:03 +0000
Files and hashes: 1: 3139322e37352e3139362e302f32332d3234203d3e20323131363635.roa (hash: EY02IPhkI+bUEpVH6oIXpq9tMDByZp2XBlblwJ3ORuk=)
2: 3139322e37352e3139362e302f32342d3234203d3e203139363830.roa (hash: yvXeEWRlMmnSNfIrbChtFM+svsvnH2vlOzvMg3QWUIM=)
3: 3139322e37352e3139372e302f32342d3234203d3e203530323234.roa (hash: XWa1v4ip3kV+r3f119VGt2tZ+jfePtDqCwe/xpwhK0k=)
4: D74983C1FABA0CC1566F0601AFE11423E11B5171.crl (hash: nrRDB8LzhMGUmmWMxoWmxhdZRzpUNWnWyObOZyR6Wuc=)
5: 32332e3135332e3233322e302f32342d3234203d3e203539393933.roa (hash: JHEaGgWPvnLn0wm28zhThMpJYigsCtxXbXsCpQi2K7w=)
6: 323630323a666137613a3a2f34302d3438203d3e203539393933.roa (hash: WmNq9R5LoI7SG6SSOk18g3sMb3zAOCvlOU5kIbj6SGM=)
7: 3139322e37352e3139362e302f32332d3234203d3e203539393933.roa (hash: KNSz4GsVtYNwvMtBZ3CvI93UcAzzIm+CEBGOCv59Ibc=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/7/D74983C1FABA0CC1566F0601AFE11423E11B5171.crl
rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/7/D74983C1FABA0CC1566F0601AFE11423E11B5171.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b150e98d-80e9-45f6-bc63-6b40a3d59e9c/4b43c64a680efdc51a00463172b8f5aff945e0733fc49c2e4c.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b150e98d-80e9-45f6-bc63-6b40a3d59e9c/b150e98d-80e9-45f6-bc63-6b40a3d59e9c.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b150e98d-80e9-45f6-bc63-6b40a3d59e9c/b150e98d-80e9-45f6-bc63-6b40a3d59e9c.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b150e98d-80e9-45f6-bc63-6b40a3d59e9c.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 24 Oct 2026 15:19:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:8f:15:ec:94:50:80:c1:22:96:78:5d:e8:f2:9e:ca:2d:5a:c1:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b43c64a680efdc51a00463172b8f5aff945e0733fc49c2e4c
Validity
Not Before: Oct 23 13:12:03 2026 GMT
Not After : Oct 24 15:19:03 2026 GMT
Subject: CN=B8A24515F9E635C09A840093FCE6A3507D90BD23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:6a:4a:57:c8:0f:61:c7:37:2f:04:a3:fb:8e:
b4:49:ad:ff:2f:b3:40:e7:39:ea:03:da:8a:e0:42:
26:1e:14:26:b7:af:e1:f7:16:85:67:52:08:bb:db:
0e:f3:a9:65:e3:30:15:f6:ed:0b:1a:47:19:39:50:
1d:8a:81:fc:88:01:e1:9b:7e:d0:51:5d:f2:02:3c:
9a:b6:36:8f:6b:47:1b:f9:42:77:8d:03:28:aa:c6:
39:70:0a:8b:a6:e3:4f:51:e7:44:80:3f:64:91:c7:
0d:a7:96:bc:fb:e9:ae:53:42:61:f3:77:35:98:86:
9c:87:26:3b:7c:88:da:d4:52:a5:2a:84:9e:37:67:
68:bb:a3:61:2f:3d:c7:66:b2:a0:51:98:e6:72:5a:
21:10:f6:06:3f:1e:8b:16:47:63:5b:03:19:e1:6e:
7b:a4:4c:11:92:66:d6:e0:95:40:c5:7b:48:01:b6:
12:15:b9:24:34:0a:b8:b3:a9:f9:94:e6:63:74:96:
a4:8d:48:f7:3d:85:31:21:5a:9e:57:c6:53:5b:15:
23:ad:b9:f6:93:65:7a:4c:1e:f3:60:cd:47:34:ba:
8c:fa:27:81:4b:4d:6b:17:b5:8e:00:34:09:f6:fd:
b6:35:46:aa:bf:70:9e:7b:f9:1c:ec:7b:fb:ee:9b:
34:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:A2:45:15:F9:E6:35:C0:9A:84:00:93:FC:E6:A3:50:7D:90:BD:23
X509v3 Authority Key Identifier:
keyid:D7:49:83:C1:FA:BA:0C:C1:56:6F:06:01:AF:E1:14:23:E1:1B:51:71
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/7/D74983C1FABA0CC1566F0601AFE11423E11B5171.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b150e98d-80e9-45f6-bc63-6b40a3d59e9c/4b43c64a680efdc51a00463172b8f5aff945e0733fc49c2e4c.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/7/D74983C1FABA0CC1566F0601AFE11423E11B5171.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:a5:bb:a0:e8:f6:e4:27:41:0f:4f:43:44:30:47:00:5b:b0:
e0:2c:67:6f:4d:d1:55:f8:ac:8d:fd:bb:e9:b8:7c:d3:62:42:
fa:c3:87:d3:87:48:a4:7e:cb:0e:50:8c:1a:9b:59:6f:ff:09:
ef:43:76:c7:75:ff:3d:aa:fe:b6:07:77:d9:48:fe:d4:5d:fc:
c5:2c:40:93:72:8e:9c:c5:78:a8:8d:82:24:ad:37:cd:f8:7f:
c2:fe:a2:ff:ac:cb:dc:e6:ee:67:ff:e0:25:02:ea:6b:68:66:
8a:8c:a6:8d:c8:31:1d:9a:20:4d:4d:9f:92:89:5a:4e:7d:4f:
6e:26:04:93:fd:c6:1d:42:48:a9:e6:e1:01:8f:64:89:87:a0:
59:9f:7d:22:ef:f8:14:01:f7:a5:02:60:e9:74:2f:6e:11:c2:
19:ed:fb:16:02:86:29:44:90:9c:70:2d:8a:a7:76:de:90:4e:
95:d2:5c:ce:8d:7e:7a:ed:1c:77:25:67:eb:7f:b2:c3:b0:d2:
5b:f6:de:f8:c7:1a:e2:cb:f0:71:cb:73:47:75:98:2c:0c:de:
65:92:bd:4e:cc:e7:94:40:e6:ca:21:24:35:c6:15:f9:61:54:
bf:ca:34:4c:25:cc:26:6c:fe:44:25:3b:1b:a6:e7:2a:04:47:
db:91:48:37
-----BEGIN CERTIFICATE-----
MIIF1zCCBL+gAwIBAgIUWY8V7JRQgMEilnhd6PKeyi1awVkwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNGI0M2M2NGE2ODBlZmRjNTFhMDA0NjMxNzJiOGY1YWZm
OTQ1ZTA3MzNmYzQ5YzJlNGMwHhcNMjYxMDIzMTMxMjAzWhcNMjYxMDI0MTUxOTAz
WjAzMTEwLwYDVQQDEyhCOEEyNDUxNUY5RTYzNUMwOUE4NDAwOTNGQ0U2QTM1MDdE
OTBCRDIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlWpKV8gPYcc3
LwSj+460Sa3/L7NA5znqA9qK4EImHhQmt6/h9xaFZ1IIu9sO86ll4zAV9u0LGkcZ
OVAdioH8iAHhm37QUV3yAjyatjaPa0cb+UJ3jQMoqsY5cAqLpuNPUedEgD9kkccN
p5a8++muU0Jh83c1mIachyY7fIja1FKlKoSeN2dou6NhLz3HZrKgUZjmclohEPYG
Px6LFkdjWwMZ4W57pEwRkmbW4JVAxXtIAbYSFbkkNAq4s6n5lOZjdJakjUj3PYUx
IVqeV8ZTWxUjrbn2k2V6TB7zYM1HNLqM+ieBS01rF7WOADQJ9v22NUaqv3Cee/kc
7Hv77ps03QIDAQABo4IC1zCCAtMwHQYDVR0OBBYEFLiiRRX55jXAmoQAk/zmo1B9
kL0jMB8GA1UdIwQYMBaAFNdJg8H6ugzBVm8GAa/hFCPhG1FxMA4GA1UdDwEB/wQE
AwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3luYzovL3JzeW5jLnBhYXMu
cnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2FlNmVkZWVjLTA4YmEtNGNkZS04OTc5
LTRmYWVhNGIxYmMxMi83L0Q3NDk4M0MxRkFCQTBDQzE1NjZGMDYwMUFGRTExNDIz
RTExQjUxNzEuY3JsMIHzBggrBgEFBQcBAQSB5jCB4zCB4AYIKwYBBQUHMAKGgdNy
c3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0
YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2Mt
NGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9iMTUwZTk4ZC04MGU5LTQ1ZjYtYmM2My02
YjQwYTNkNTllOWMvNGI0M2M2NGE2ODBlZmRjNTFhMDA0NjMxNzJiOGY1YWZmOTQ1
ZTA3MzNmYzQ5YzJlNGMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYIKwYBBQUH
MAuGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv
YWU2ZWRlZWMtMDhiYS00Y2RlLTg5NzktNGZhZWE0YjFiYzEyLzcvRDc0OTgzQzFG
QUJBMENDMTU2NkYwNjAxQUZFMTE0MjNFMTFCNTE3MS5tZnQwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUA
MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAF+lu6Do
9uQnQQ9PQ0QwRwBbsOAsZ29N0VX4rI39u+m4fNNiQvrDh9OHSKR+yw5QjBqbWW//
Ce9Ddsd1/z2q/rYHd9lI/tRd/MUsQJNyjpzFeKiNgiStN834f8L+ov+sy9zm7mf/
4CUC6mtoZoqMpo3IMR2aIE1Nn5KJWk59T24mBJP9xh1CSKnm4QGPZImHoFmffSLv
+BQB96UCYOl0L24Rwhnt+xYChilEkJxwLYqndt6QTpXSXM6NfnrtHHclZ+t/ssOw
0lv23vjHGuLL8HHLc0d1mCwM3mWSvU7M55RA5sohJDXGFflhVL/KNEwlzCZs/kQl
Oxum5yoER9uRSDc=
-----END CERTIFICATE-----
Generated at Sat Oct 24 01:55:32 2026 by rpki-client