$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/1/1F7F7249A681F8CD41270B50D8D7E7815881DA36.mft File: 1F7F7249A681F8CD41270B50D8D7E7815881DA36.mft (raw, json) Hash identifier: PgrCmj9oVBiQQfX81w3I3Omc9YMOGj4s1Utp3mfnq6c= Subject key identifier: CA:73:B0:EA:E9:47:8E:BB:78:E8:D6:3F:E8:4B:BE:A5:52:9F:9E:E2 Authority key identifier: 1F:7F:72:49:A6:81:F8:CD:41:27:0B:50:D8:D7:E7:81:58:81:DA:36 Certificate issuer: /CN=23fb3d29e7f67c634df3b7f4a960082e4429f166b65301a9dd Certificate serial: 190AF194A4F1CEDF71A4500984397C914EA51B86 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/383bd50b-b192-44bd-9349-351225a13a33/23fb3d29e7f67c634df3b7f4a960082e4429f166b65301a9dd.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/1/1F7F7249A681F8CD41270B50D8D7E7815881DA36.mft Manifest number: 0223 Signing time: Sun 22 Mar 2026 15:29:05 +0000 Manifest this update: Sun 22 Mar 2026 15:24:05 +0000 Manifest next update: Mon 23 Mar 2026 17:48:05 +0000 Files and hashes: 1: 323630323a663662613a3a2f34302d3430203d3e20323135323438.roa (hash: Kk9CSrNwPsOKUe+v4ZVIi4qEv+Arhq2bOgPkVNwdmaU=) 2: 1F7F7249A681F8CD41270B50D8D7E7815881DA36.crl (hash: RRqzg11abfpYH1krCjvOt3A8SaOZ4/AldsSxscxREbs=) 3: 323630323a663662613a3a2f34302d3430203d3e20333936303634.roa (hash: 5NqZHrqVruAMz6KYjbzv903TP3Du/TFRNl5Uu+JLsuw=) 4: 3135352e3130332e3235302e302f32342d3234203d3e20323132303334.roa (hash: vFsfLtXifEPclvz93gDK73bkEeIrvx8m8FwVJdoxlHk=) 5: 32332e3133362e32302e302f32342d3234203d3e20333936303634.roa (hash: uT+NwPbVKc5sZXDTfAnZ7NBSduHWPZF9xzdlVQV9EOs=) 6: AS396064.asa (hash: djFXHfa2rXK9kZIpu8Ef90RQVXdsC+vkaTA2daMwG3A=) 7: 32332e3133362e32302e302f32342d3234203d3e20323135323438.roa (hash: UEvy/Fk/6V0NUZWmLYAvbYkSNSZ7wnUqypnNnCctoPE=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/1/1F7F7249A681F8CD41270B50D8D7E7815881DA36.crl rsync://rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/1/1F7F7249A681F8CD41270B50D8D7E7815881DA36.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/383bd50b-b192-44bd-9349-351225a13a33/23fb3d29e7f67c634df3b7f4a960082e4429f166b65301a9dd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/383bd50b-b192-44bd-9349-351225a13a33/383bd50b-b192-44bd-9349-351225a13a33.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/383bd50b-b192-44bd-9349-351225a13a33/383bd50b-b192-44bd-9349-351225a13a33.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/383bd50b-b192-44bd-9349-351225a13a33.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 23 Mar 2026 17:48:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:0a:f1:94:a4:f1:ce:df:71:a4:50:09:84:39:7c:91:4e:a5:1b:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23fb3d29e7f67c634df3b7f4a960082e4429f166b65301a9dd Validity Not Before: Mar 22 15:24:05 2026 GMT Not After : Mar 23 17:48:05 2026 GMT Subject: CN=CA73B0EAE9478EBB78E8D63FE84BBEA5529F9EE2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:94:21:41:f5:ac:48:1d:31:53:e0:25:a1:dc: 93:31:c8:68:df:e0:e4:4f:da:ea:34:a4:68:18:fa: b5:ba:08:31:15:c3:76:9e:e8:ec:6b:04:f8:8c:d4: 2a:c4:97:b1:88:2d:13:38:32:7d:25:aa:0f:25:4d: e9:bc:9e:21:ef:df:5d:d1:87:9f:a7:66:24:4c:96: ba:6f:a2:e3:63:0d:31:68:69:a6:4f:62:ff:59:d3: 1e:7a:2d:5f:5e:a2:5d:6e:59:2d:27:9e:11:d7:48: 67:24:91:b6:de:25:ea:e8:39:90:11:df:d6:e2:b9: 11:74:3d:2c:3f:53:be:7c:ac:74:8b:59:61:58:3a: b9:dc:71:95:5a:76:9e:9a:be:be:2b:3c:78:2e:f6: 20:25:c9:e6:dd:84:38:93:a7:f5:48:9a:45:88:ed: 59:17:92:c8:3b:53:7c:7e:75:7d:8f:13:0c:4b:d0: 3f:82:51:8a:ff:72:88:a9:18:d5:42:98:e2:cf:2c: db:39:f3:eb:35:ac:56:5b:0a:68:a9:09:f3:98:67: ea:72:cd:ce:ed:31:dc:6c:25:c4:6b:7f:7c:42:db: b7:23:30:2e:80:0b:a3:2f:c5:e3:96:06:02:06:46: db:2c:62:62:e4:89:81:f0:c7:24:00:71:ed:a3:cd: 96:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:73:B0:EA:E9:47:8E:BB:78:E8:D6:3F:E8:4B:BE:A5:52:9F:9E:E2 X509v3 Authority Key Identifier: keyid:1F:7F:72:49:A6:81:F8:CD:41:27:0B:50:D8:D7:E7:81:58:81:DA:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/1/1F7F7249A681F8CD41270B50D8D7E7815881DA36.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/383bd50b-b192-44bd-9349-351225a13a33/23fb3d29e7f67c634df3b7f4a960082e4429f166b65301a9dd.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/1/1F7F7249A681F8CD41270B50D8D7E7815881DA36.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b1:50:e7:8b:2e:51:ae:c6:62:24:6b:89:46:e6:3e:ed:cf:85: 30:f7:ec:7b:39:a5:d5:4f:77:62:f8:40:02:88:a7:85:05:d0: b8:a5:92:c0:ce:02:58:91:e5:7d:6d:74:ae:73:24:00:c7:31: c4:79:84:58:e3:c4:59:77:f2:47:60:98:c4:1b:d6:c7:40:4d: 4a:11:f9:3b:bb:c6:e3:1f:3b:39:6c:9c:85:85:e1:0f:67:84: a7:24:61:e8:da:c0:29:bb:82:70:d1:ce:e2:22:66:a3:d5:3c: 4a:ae:5d:53:5c:bd:48:61:38:94:8e:a8:37:47:36:da:9b:d6: 8d:39:e1:69:9c:3b:42:02:d6:e8:f1:ec:01:b4:82:db:69:22: f2:a4:84:d8:bb:a5:c7:6e:5b:1b:3d:87:48:6c:f4:3d:a5:d9: b2:6b:60:c0:db:bd:cb:21:e6:8f:57:be:33:8d:b3:59:e0:7e: 0d:15:fb:a9:95:75:1d:c8:c4:24:e6:61:19:e1:e3:2d:c8:d8: af:96:44:8b:66:6d:16:b6:d1:95:29:ac:3b:0f:5e:ed:f5:17: f2:26:1b:93:91:cc:06:4a:49:13:11:ef:04:df:b3:99:e0:ef: 82:62:3c:84:31:9a:39:cf:92:59:79:2c:cc:d2:3d:17:74:1b: 02:3f:a7:0a -----BEGIN CERTIFICATE----- MIIF1zCCBL+gAwIBAgIUGQrxlKTxzt9xpFAJhDl8kU6lG4YwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyMjNmYjNkMjllN2Y2N2M2MzRkZjNiN2Y0YTk2MDA4MmU0 NDI5ZjE2NmI2NTMwMWE5ZGQwHhcNMjYwMzIyMTUyNDA1WhcNMjYwMzIzMTc0ODA1 WjAzMTEwLwYDVQQDEyhDQTczQjBFQUU5NDc4RUJCNzhFOEQ2M0ZFODRCQkVBNTUy OUY5RUUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsZQhQfWsSB0x U+AlodyTMcho3+DkT9rqNKRoGPq1uggxFcN2nujsawT4jNQqxJexiC0TODJ9JaoP JU3pvJ4h799d0Yefp2YkTJa6b6LjYw0xaGmmT2L/WdMeei1fXqJdblktJ54R10hn JJG23iXq6DmQEd/W4rkRdD0sP1O+fKx0i1lhWDq53HGVWnaemr6+Kzx4LvYgJcnm 3YQ4k6f1SJpFiO1ZF5LIO1N8fnV9jxMMS9A/glGK/3KIqRjVQpjizyzbOfPrNaxW WwpoqQnzmGfqcs3O7THcbCXEa398Qtu3IzAugAujL8XjlgYCBkbbLGJi5ImB8Mck AHHto82WiwIDAQABo4IC1zCCAtMwHQYDVR0OBBYEFMpzsOrpR467eOjWP+hLvqVS n57iMB8GA1UdIwQYMBaAFB9/ckmmgfjNQScLUNjX54FYgdo2MA4GA1UdDwEB/wQE AwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3luYzovL3JzeW5jLnBhYXMu cnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2NkMTlkYjIwLTQ2NTMtNDhkNC04ZmM0 LTU4MGQxMzY5YjdjNC8xLzFGN0Y3MjQ5QTY4MUY4Q0Q0MTI3MEI1MEQ4RDdFNzgx NTg4MURBMzYuY3JsMIHzBggrBgEFBQcBAQSB5jCB4zCB4AYIKwYBBQUHMAKGgdNy c3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0 YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMt NDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8zODNiZDUwYi1iMTkyLTQ0YmQtOTM0OS0z NTEyMjVhMTNhMzMvMjNmYjNkMjllN2Y2N2M2MzRkZjNiN2Y0YTk2MDA4MmU0NDI5 ZjE2NmI2NTMwMWE5ZGQuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYIKwYBBQUH MAuGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv Y2QxOWRiMjAtNDY1My00OGQ0LThmYzQtNTgwZDEzNjliN2M0LzEvMUY3RjcyNDlB NjgxRjhDRDQxMjcwQjUwRDhEN0U3ODE1ODgxREEzNi5tZnQwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUA MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBALFQ54su Ua7GYiRriUbmPu3PhTD37Hs5pdVPd2L4QAKIp4UF0LilksDOAliR5X1tdK5zJADH McR5hFjjxFl38kdgmMQb1sdATUoR+Tu7xuMfOzlsnIWF4Q9nhKckYejawCm7gnDR zuIiZqPVPEquXVNcvUhhOJSOqDdHNtqb1o054WmcO0IC1ujx7AG0gttpIvKkhNi7 pcduWxs9h0hs9D2l2bJrYMDbvcsh5o9XvjONs1ngfg0V+6mVdR3IxCTmYRnh4y3I 2K+WRItmbRa20ZUprDsPXu31F/ImG5ORzAZKSRMR7wTfs5ng74JiPIQxmjnPkll5 LMzSPRd0GwI/pwo= -----END CERTIFICATE-----Generated at Mon Mar 23 00:23:03 2026 by rpki-client