
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/1/1F7F7249A681F8CD41270B50D8D7E7815881DA36.mft
File: 1F7F7249A681F8CD41270B50D8D7E7815881DA36.mft (raw, json)
Hash identifier: 38fYIhtnB6mIyasrDE3C7h6VB3O27NTFZLx7RcJWJ1E=
Subject key identifier: 11:20:CE:A6:1B:45:14:9C:BF:16:AD:9A:2A:4B:0F:D0:15:FE:D8:30
Authority key identifier: 1F:7F:72:49:A6:81:F8:CD:41:27:0B:50:D8:D7:E7:81:58:81:DA:36
Certificate issuer: /CN=23fb3d29e7f67c634df3b7f4a960082e4429f166b65301a9dd
Certificate serial: 3D9B5D8EA3E342492D7F7E3852CA66260C8B6040
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/383bd50b-b192-44bd-9349-351225a13a33/23fb3d29e7f67c634df3b7f4a960082e4429f166b65301a9dd.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/1/1F7F7249A681F8CD41270B50D8D7E7815881DA36.mft
Manifest number: 0357
Signing time: Wed 14 Oct 2026 15:34:04 +0000
Manifest this update: Wed 14 Oct 2026 15:29:04 +0000
Manifest next update: Thu 15 Oct 2026 16:57:04 +0000
Files and hashes: 1: AS396064.asa (hash: BqgNCNVsEsvCsfNQHXqLS53CAYpSZsZsFb1s7QOzwTI=)
2: 32332e3133362e32302e302f32342d3234203d3e20323135323438.roa (hash: UEvy/Fk/6V0NUZWmLYAvbYkSNSZ7wnUqypnNnCctoPE=)
3: 1F7F7249A681F8CD41270B50D8D7E7815881DA36.crl (hash: mTOLk8Tkomny7F6nWRrYQyd6gRlS+6yZvWP7zq167/U=)
4: 323630323a663662613a3a2f34302d3430203d3e20333936303634.roa (hash: 5NqZHrqVruAMz6KYjbzv903TP3Du/TFRNl5Uu+JLsuw=)
5: 3135352e3130332e3235302e302f32342d3234203d3e20323132303334.roa (hash: vFsfLtXifEPclvz93gDK73bkEeIrvx8m8FwVJdoxlHk=)
6: 32332e3133362e32302e302f32342d3234203d3e20333936303634.roa (hash: uT+NwPbVKc5sZXDTfAnZ7NBSduHWPZF9xzdlVQV9EOs=)
7: 323630323a663662613a3a2f34302d3430203d3e20323135323438.roa (hash: Kk9CSrNwPsOKUe+v4ZVIi4qEv+Arhq2bOgPkVNwdmaU=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/1/1F7F7249A681F8CD41270B50D8D7E7815881DA36.crl
rsync://rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/1/1F7F7249A681F8CD41270B50D8D7E7815881DA36.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/383bd50b-b192-44bd-9349-351225a13a33/23fb3d29e7f67c634df3b7f4a960082e4429f166b65301a9dd.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/383bd50b-b192-44bd-9349-351225a13a33/383bd50b-b192-44bd-9349-351225a13a33.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/383bd50b-b192-44bd-9349-351225a13a33/383bd50b-b192-44bd-9349-351225a13a33.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/383bd50b-b192-44bd-9349-351225a13a33.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 15 Oct 2026 16:57:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:9b:5d:8e:a3:e3:42:49:2d:7f:7e:38:52:ca:66:26:0c:8b:60:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23fb3d29e7f67c634df3b7f4a960082e4429f166b65301a9dd
Validity
Not Before: Oct 14 15:29:04 2026 GMT
Not After : Oct 15 16:57:04 2026 GMT
Subject: CN=1120CEA61B45149CBF16AD9A2A4B0FD015FED830
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:30:e9:27:7f:9c:46:03:8d:cf:ca:82:59:27:
06:d8:73:2f:20:a8:60:d2:07:da:f1:c6:c7:84:4b:
57:f9:5f:82:38:9a:0e:33:37:31:88:b9:2a:a1:63:
f2:8e:e9:9d:5a:af:c5:6d:ad:eb:26:bd:84:ea:70:
01:ba:ea:d2:74:1c:9a:3f:c7:7d:fa:6f:4a:ef:8f:
9d:27:07:36:5b:0b:b7:4d:3e:00:bf:96:3d:79:6c:
e0:e4:b6:f3:6d:0f:10:f1:cc:60:48:64:df:54:7d:
b3:52:c7:d2:3d:47:6b:c2:20:48:68:d2:53:eb:58:
b1:5e:41:c3:e7:31:53:ce:fd:08:ae:99:be:52:be:
23:91:00:34:b1:73:b6:af:ab:f8:95:a1:48:f4:b8:
e7:f5:fd:43:53:8c:48:0e:31:98:51:47:21:f4:04:
6e:d5:7c:17:3a:d2:4c:b7:a5:7e:11:fa:c0:3d:fd:
1f:bc:16:72:7a:0a:55:ae:67:0e:75:e7:5d:d3:74:
99:6c:77:b0:e1:11:1c:27:94:c1:ee:be:1d:a4:c7:
2c:70:99:bd:ea:08:0b:4d:58:28:2b:94:bb:ae:88:
92:20:47:d9:ca:65:b9:25:a2:b3:10:c3:4c:84:85:
52:49:ab:74:da:a2:db:d5:af:79:c8:4a:96:cc:f3:
47:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:20:CE:A6:1B:45:14:9C:BF:16:AD:9A:2A:4B:0F:D0:15:FE:D8:30
X509v3 Authority Key Identifier:
keyid:1F:7F:72:49:A6:81:F8:CD:41:27:0B:50:D8:D7:E7:81:58:81:DA:36
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/1/1F7F7249A681F8CD41270B50D8D7E7815881DA36.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/383bd50b-b192-44bd-9349-351225a13a33/23fb3d29e7f67c634df3b7f4a960082e4429f166b65301a9dd.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/1/1F7F7249A681F8CD41270B50D8D7E7815881DA36.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:f4:6d:e0:4e:6e:6e:ce:1d:d9:1c:28:d0:4d:92:5f:e6:2a:
cc:6b:ae:fb:74:68:84:e6:98:e6:91:6e:49:23:4e:6d:8c:de:
96:32:ee:2c:d7:92:76:b4:b4:3e:4e:9b:3c:57:c9:75:ae:0c:
1d:aa:21:08:56:9e:22:49:0e:c3:4d:69:6d:39:0f:93:79:d1:
ea:b1:c9:eb:8c:e4:09:9e:d5:a9:25:07:32:73:54:63:7e:8a:
59:c5:55:2a:a4:d8:10:5f:0d:be:21:d1:31:94:e1:ee:b5:c0:
e3:e4:9f:d4:48:93:a1:f4:07:96:84:a8:07:41:c6:d0:6f:96:
c8:7c:6e:18:8d:63:97:df:3b:ea:b2:bc:cc:38:3a:8d:3b:50:
0f:d3:be:6a:3f:f8:b0:0e:a7:4d:34:1a:85:c6:cd:f8:1b:67:
be:4e:78:84:87:63:17:de:a8:f9:21:1a:fb:94:89:05:20:5a:
2d:00:70:c1:85:8d:0b:fe:36:b9:fe:ec:a1:49:1f:55:3f:74:
d2:1c:f1:64:91:cf:8e:08:a2:86:43:c6:3b:dc:36:ab:38:6f:
1c:b6:14:f4:9e:b2:6c:3b:8b:be:5b:1b:6c:4f:73:1f:5b:02:
3a:f9:62:ba:66:07:13:8a:b1:5c:91:00:fd:0f:ca:8a:d5:5c:
06:45:92:54
-----BEGIN CERTIFICATE-----
MIIF1zCCBL+gAwIBAgIUPZtdjqPjQkktf344UspmJgyLYEAwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjNmYjNkMjllN2Y2N2M2MzRkZjNiN2Y0YTk2MDA4MmU0
NDI5ZjE2NmI2NTMwMWE5ZGQwHhcNMjYxMDE0MTUyOTA0WhcNMjYxMDE1MTY1NzA0
WjAzMTEwLwYDVQQDEygxMTIwQ0VBNjFCNDUxNDlDQkYxNkFEOUEyQTRCMEZEMDE1
RkVEODMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtTDpJ3+cRgON
z8qCWScG2HMvIKhg0gfa8cbHhEtX+V+COJoOMzcxiLkqoWPyjumdWq/Fba3rJr2E
6nABuurSdByaP8d9+m9K74+dJwc2Wwu3TT4Av5Y9eWzg5LbzbQ8Q8cxgSGTfVH2z
UsfSPUdrwiBIaNJT61ixXkHD5zFTzv0Irpm+Ur4jkQA0sXO2r6v4laFI9Ljn9f1D
U4xIDjGYUUch9ARu1XwXOtJMt6V+EfrAPf0fvBZyegpVrmcOdedd03SZbHew4REc
J5TB7r4dpMcscJm96ggLTVgoK5S7roiSIEfZymW5JaKzEMNMhIVSSat02qLb1a95
yEqWzPNH+QIDAQABo4IC1zCCAtMwHQYDVR0OBBYEFBEgzqYbRRScvxatmipLD9AV
/tgwMB8GA1UdIwQYMBaAFB9/ckmmgfjNQScLUNjX54FYgdo2MA4GA1UdDwEB/wQE
AwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3luYzovL3JzeW5jLnBhYXMu
cnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2NkMTlkYjIwLTQ2NTMtNDhkNC04ZmM0
LTU4MGQxMzY5YjdjNC8xLzFGN0Y3MjQ5QTY4MUY4Q0Q0MTI3MEI1MEQ4RDdFNzgx
NTg4MURBMzYuY3JsMIHzBggrBgEFBQcBAQSB5jCB4zCB4AYIKwYBBQUHMAKGgdNy
c3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0
YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMt
NDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8zODNiZDUwYi1iMTkyLTQ0YmQtOTM0OS0z
NTEyMjVhMTNhMzMvMjNmYjNkMjllN2Y2N2M2MzRkZjNiN2Y0YTk2MDA4MmU0NDI5
ZjE2NmI2NTMwMWE5ZGQuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYIKwYBBQUH
MAuGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv
Y2QxOWRiMjAtNDY1My00OGQ0LThmYzQtNTgwZDEzNjliN2M0LzEvMUY3RjcyNDlB
NjgxRjhDRDQxMjcwQjUwRDhEN0U3ODE1ODgxREEzNi5tZnQwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUA
MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBACn0beBO
bm7OHdkcKNBNkl/mKsxrrvt0aITmmOaRbkkjTm2M3pYy7izXkna0tD5OmzxXyXWu
DB2qIQhWniJJDsNNaW05D5N50eqxyeuM5Ame1aklBzJzVGN+ilnFVSqk2BBfDb4h
0TGU4e61wOPkn9RIk6H0B5aEqAdBxtBvlsh8bhiNY5ffO+qyvMw4Oo07UA/Tvmo/
+LAOp000GoXGzfgbZ75OeISHYxfeqPkhGvuUiQUgWi0AcMGFjQv+Nrn+7KFJH1U/
dNIc8WSRz44IooZDxjvcNqs4bxy2FPSesmw7i75bG2xPcx9bAjr5YrpmBxOKsVyR
AP0PyorVXAZFklQ=
-----END CERTIFICATE-----
Generated at Thu Oct 15 10:30:20 2026 by rpki-client