$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/2/7AFA223B6238B0CC6374F7FE8994364FBF8F54DE.mft File: 7AFA223B6238B0CC6374F7FE8994364FBF8F54DE.mft (raw, json) Hash identifier: y7Be/bPJmmyHQOx8MFNXhGO5AnXceocUS5RuGPXTE/4= Subject key identifier: 89:2F:55:B3:5D:DD:C1:F0:36:82:87:23:77:B9:C4:7C:2E:59:CD:BE Authority key identifier: 7A:FA:22:3B:62:38:B0:CC:63:74:F7:FE:89:94:36:4F:BF:8F:54:DE Certificate issuer: /CN=6e1bbb7e7fef9ebbe2cf0cad47646e6ad7bd9552c30cee0b9c Certificate serial: 252F2B2B9A2F5BF96D2228A26E8803D8904A413E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/46553ad0-fc19-4f28-8ee2-b5cffd430300/6e1bbb7e7fef9ebbe2cf0cad47646e6ad7bd9552c30cee0b9c.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/2/7AFA223B6238B0CC6374F7FE8994364FBF8F54DE.mft Manifest number: 1D Signing time: Fri 17 Apr 2026 19:04:20 +0000 Manifest this update: Fri 17 Apr 2026 18:59:20 +0000 Manifest next update: Sat 18 Apr 2026 21:48:20 +0000 Files and hashes: 1: 32332e3135352e3133322e302f32342d3234203d3e20323135323438.roa (hash: c3hWnS8DoW546xPA3c5dq6uKI5KCkqswjLoTTVqVVsI=) 2: 323630323a663431313a3a2f34302d3430203d3e20343032333338.roa (hash: yUUqL7xUwt1yHriW5PMoX0e0rvGQY+O+Hz486/mwTRA=) 3: AS402338.asa (hash: CqjHPZA9ZdGOtQ+UOqYiSVjxDDaXUrrEP6+G7zuZ/Rg=) 4: 323630323a663431313a3a2f34302d3430203d3e20323135323438.roa (hash: 4LMUXuzPxDG0l50qzDgI+GtWvlNgbqsRRyik2rkKxrI=) 5: 7AFA223B6238B0CC6374F7FE8994364FBF8F54DE.crl (hash: glBg4sN1NatIIaxXBfgxq1lVM8w+RLILhEa5m/SFxhY=) 6: 32332e3135352e3133322e302f32342d3234203d3e20343032333338.roa (hash: fzU4rchNeg+A4G9P3a1X+ynK3vpCJlAGbjn8hVUYXUY=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/2/7AFA223B6238B0CC6374F7FE8994364FBF8F54DE.crl rsync://rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/2/7AFA223B6238B0CC6374F7FE8994364FBF8F54DE.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/46553ad0-fc19-4f28-8ee2-b5cffd430300/6e1bbb7e7fef9ebbe2cf0cad47646e6ad7bd9552c30cee0b9c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/46553ad0-fc19-4f28-8ee2-b5cffd430300/46553ad0-fc19-4f28-8ee2-b5cffd430300.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/46553ad0-fc19-4f28-8ee2-b5cffd430300/46553ad0-fc19-4f28-8ee2-b5cffd430300.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/46553ad0-fc19-4f28-8ee2-b5cffd430300.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 21:48:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:2f:2b:2b:9a:2f:5b:f9:6d:22:28:a2:6e:88:03:d8:90:4a:41:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6e1bbb7e7fef9ebbe2cf0cad47646e6ad7bd9552c30cee0b9c Validity Not Before: Apr 17 18:59:20 2026 GMT Not After : Apr 18 21:48:20 2026 GMT Subject: CN=892F55B35DDDC1F03682872377B9C47C2E59CDBE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:a1:9b:89:8f:b5:4f:70:24:38:a1:eb:26:4f: 2a:8a:1f:a9:5b:58:a5:7f:4f:75:9a:ef:1b:80:00: e7:05:27:97:d3:ea:db:eb:5a:e2:c8:ed:f2:b8:3a: 35:18:d4:21:d0:1d:ed:4e:ed:a6:98:d3:b2:e4:e8: 62:79:d7:1a:7c:4a:36:13:a6:3d:d5:4e:af:1e:67: fa:e3:e1:3c:2f:a7:d6:fc:49:50:cc:ab:f8:8b:59: 37:7c:2b:7e:96:a1:a6:e3:98:3a:09:a7:44:de:6b: 1e:69:0e:72:cc:51:4d:0c:ec:aa:33:3f:3e:98:46: fa:ed:f6:f0:10:24:68:53:f1:a8:62:59:f1:5b:1b: 4e:6a:6d:9e:be:9e:5e:1b:3c:5d:fc:e6:1b:64:3c: 41:db:44:dd:fb:bd:a4:c8:53:fc:dc:c8:81:4a:10: 56:40:4b:d7:56:08:4e:df:47:8a:29:1c:cc:f8:28: b0:af:eb:d2:e1:13:86:22:eb:b1:7e:28:f6:45:5a: 48:82:f8:43:5b:c9:20:6f:60:6a:fe:3d:55:12:61: 33:7d:3a:10:60:3a:ce:33:f2:99:c9:17:0f:2c:46: 94:fe:6d:50:bf:a6:bb:b4:0b:5a:02:61:1b:9d:19: 5f:41:5e:8f:93:02:86:b2:06:f0:f4:98:06:b7:78: 8a:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:2F:55:B3:5D:DD:C1:F0:36:82:87:23:77:B9:C4:7C:2E:59:CD:BE X509v3 Authority Key Identifier: keyid:7A:FA:22:3B:62:38:B0:CC:63:74:F7:FE:89:94:36:4F:BF:8F:54:DE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/2/7AFA223B6238B0CC6374F7FE8994364FBF8F54DE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/46553ad0-fc19-4f28-8ee2-b5cffd430300/6e1bbb7e7fef9ebbe2cf0cad47646e6ad7bd9552c30cee0b9c.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/2/7AFA223B6238B0CC6374F7FE8994364FBF8F54DE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:ef:f4:5f:ee:a9:33:40:3f:d9:21:ea:00:51:6d:83:b5:a4: 80:34:be:79:83:41:f2:ae:24:57:9b:08:eb:e3:ac:b8:d7:47: 20:10:c1:55:31:54:f6:bd:41:f0:2b:ca:b0:23:ca:5e:5e:1c: 19:7e:51:00:4c:cb:cf:a2:e5:90:15:c2:da:19:8f:57:77:27: e7:d6:5b:2f:17:6b:3f:14:ea:e5:57:41:48:1d:7b:f4:4e:1e: 1c:d3:a4:23:62:11:2a:1a:8e:7d:2c:20:7e:be:8d:cb:bb:a5: 81:34:4f:8c:80:bc:9c:51:23:9d:36:03:bf:ee:2c:80:f2:88: cd:70:42:c2:d7:d3:3c:0f:66:4c:10:be:93:55:bd:36:d0:9c: 3e:a0:85:66:39:9b:de:1a:9b:7b:87:9b:ef:11:61:25:3d:a0: 66:26:e5:62:b8:a2:4e:b3:f9:d6:9b:7b:c6:52:3c:12:57:2a: 22:9f:46:50:d6:6a:d7:e7:02:09:bb:2c:d3:ff:4d:01:79:45: 79:dc:d9:ad:45:ab:58:58:01:b7:32:3b:cb:ff:7d:9a:60:53: 90:9b:f3:20:ab:67:07:09:47:1c:98:6b:b8:af:50:20:cb:47: 22:01:3d:e3:45:0d:a5:0c:2d:6f:e4:cc:ea:95:eb:67:e4:3a: b5:d4:f8:c2 -----BEGIN CERTIFICATE----- MIIF1zCCBL+gAwIBAgIUJS8rK5ovW/ltIiiibogD2JBKQT4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmUxYmJiN2U3ZmVmOWViYmUyY2YwY2FkNDc2NDZlNmFk N2JkOTU1MmMzMGNlZTBiOWMwHhcNMjYwNDE3MTg1OTIwWhcNMjYwNDE4MjE0ODIw WjAzMTEwLwYDVQQDEyg4OTJGNTVCMzVERERDMUYwMzY4Mjg3MjM3N0I5QzQ3QzJF NTlDREJFMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqaGbiY+1T3Ak OKHrJk8qih+pW1ilf091mu8bgADnBSeX0+rb61riyO3yuDo1GNQh0B3tTu2mmNOy 5OhiedcafEo2E6Y91U6vHmf64+E8L6fW/ElQzKv4i1k3fCt+lqGm45g6CadE3mse aQ5yzFFNDOyqMz8+mEb67fbwECRoU/GoYlnxWxtOam2evp5eGzxd/OYbZDxB20Td +72kyFP83MiBShBWQEvXVghO30eKKRzM+Ciwr+vS4ROGIuuxfij2RVpIgvhDW8kg b2Bq/j1VEmEzfToQYDrOM/KZyRcPLEaU/m1Qv6a7tAtaAmEbnRlfQV6PkwKGsgbw 9JgGt3iKewIDAQABo4IC1zCCAtMwHQYDVR0OBBYEFIkvVbNd3cHwNoKHI3e5xHwu Wc2+MB8GA1UdIwQYMBaAFHr6IjtiOLDMY3T3/omUNk+/j1TeMA4GA1UdDwEB/wQE AwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3luYzovL3JzeW5jLnBhYXMu cnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2NkMTlkYjIwLTQ2NTMtNDhkNC04ZmM0 LTU4MGQxMzY5YjdjNC8yLzdBRkEyMjNCNjIzOEIwQ0M2Mzc0RjdGRTg5OTQzNjRG QkY4RjU0REUuY3JsMIHzBggrBgEFBQcBAQSB5jCB4zCB4AYIKwYBBQUHMAKGgdNy c3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0 YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUt NGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS80NjU1M2FkMC1mYzE5LTRmMjgtOGVlMi1i NWNmZmQ0MzAzMDAvNmUxYmJiN2U3ZmVmOWViYmUyY2YwY2FkNDc2NDZlNmFkN2Jk OTU1MmMzMGNlZTBiOWMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYIKwYBBQUH MAuGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv Y2QxOWRiMjAtNDY1My00OGQ0LThmYzQtNTgwZDEzNjliN2M0LzIvN0FGQTIyM0I2 MjM4QjBDQzYzNzRGN0ZFODk5NDM2NEZCRjhGNTRERS5tZnQwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUA MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBACTv9F/u qTNAP9kh6gBRbYO1pIA0vnmDQfKuJFebCOvjrLjXRyAQwVUxVPa9QfAryrAjyl5e HBl+UQBMy8+i5ZAVwtoZj1d3J+fWWy8Xaz8U6uVXQUgde/ROHhzTpCNiESoajn0s IH6+jcu7pYE0T4yAvJxRI502A7/uLIDyiM1wQsLX0zwPZkwQvpNVvTbQnD6ghWY5 m94am3uHm+8RYSU9oGYm5WK4ok6z+dabe8ZSPBJXKiKfRlDWatfnAgm7LNP/TQF5 RXnc2a1Fq1hYAbcyO8v/fZpgU5Cb8yCrZwcJRxyYa7ivUCDLRyIBPeNFDaUMLW/k zOqV62fkOrXU+MI= -----END CERTIFICATE-----Generated at Sat Apr 18 02:43:43 2026 by rpki-client