
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/1/DEF9CF6D4FF8422403A0B65E139AB53C608B9212.mft
File: DEF9CF6D4FF8422403A0B65E139AB53C608B9212.mft (raw, json)
Hash identifier: +cMewpXFBFCRTV7woiLITW9tRceRgIcBa+Bgs5M5PiY=
Subject key identifier: 03:21:89:CB:28:44:B7:79:3D:1F:10:5B:D6:9D:B7:CF:4F:3F:D7:16
Authority key identifier: DE:F9:CF:6D:4F:F8:42:24:03:A0:B6:5E:13:9A:B5:3C:60:8B:92:12
Certificate issuer: /CN=a22aa82bd6af16d70a699d34ed843d71620176f10e2010d22d
Certificate serial: 333B4B6FC48A94C2B069313D709D28C65D0298C0
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/a22aa82bd6af16d70a699d34ed843d71620176f10e2010d22d.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/1/DEF9CF6D4FF8422403A0B65E139AB53C608B9212.mft
Manifest number: D1
Signing time: Sat 17 Jan 2026 09:30:41 +0000
Manifest this update: Sat 17 Jan 2026 09:25:41 +0000
Manifest next update: Sun 18 Jan 2026 11:47:41 +0000
Files and hashes: 1: 323630323a663932613a643030303a3a2f34302d3438203d3e20313339323939.roa (hash: LyhvXLMvCzSxljEklDhIR7CEH4oj9WerwVkkCnG/SsQ=)
2: 323630323a663932613a613437393a3a2f34382d3438203d3e20323037353239.roa (hash: avce3NViBRqstlcRVSZNR/D9S0G0l1args9FWdl6sHM=)
3: 323630323a663932613a613436623a3a2f34382d3438203d3e20323034353339.roa (hash: NmtXX6Mx24HLEY6qgnRY2oV+aGWJjgdkQ91ZdbELFK0=)
4: 323630323a663932613a613437613a3a2f34382d3438203d3e20323136303536.roa (hash: 7Vc50SzPzT8ObUoABToUDthH08et+z87Gi27SG62dw8=)
5: 323630323a663932613a613437333a3a2f34382d3438203d3e20323134343339.roa (hash: 00cEFDgpVA4UIkTJ20Sbm3J+Mc4bybyoiSZwdDvNsnk=)
6: 323630323a663932613a6330303a3a2f33382d3438203d3e203430393239.roa (hash: WAEwY9n9szHi7Kkm4pyIXqQdzMe1DPfR5aylFbxqcm0=)
7: 3230362e3235312e35322e302f32322d3234203d3e203439333034.roa (hash: 9v2QjpDsJPZbBDDpUZr7ydvpM8Cp3G+4wDPcpeGfs24=)
8: 32332e3137352e32342e302f32332d3234203d3e203434333234.roa (hash: Ll5vJFutahJkWr4VzOHWGGr69grKSEO2M/wfqdD5M1s=)
9: 323630323a663932613a653130303a3a2f34342d3438203d3e20313430393135.roa (hash: Rxe81doYcLhSmYGob0lUEF9nPndgWbRjKPZDlpeWJTQ=)
10: DEF9CF6D4FF8422403A0B65E139AB53C608B9212.crl (hash: OZJ5aCQCiOlUWWVaAa7oSxm97XlNgLiMIcx4xhXvuHU=)
11: AS40929.asa (hash: 5lQ3bkE4ecANrM2nmj6HSQ8NEr4/oKc1FhmCxkkQ5D4=)
12: 323630323a663932613a613437313a3a2f34382d3438203d3e20323131373239.roa (hash: YvpJK6nWV+rrvxxMyLyhWpdmUtaTAqqDGbtveQN/mgw=)
13: 323630323a663932613a613437653a3a2f34382d3438203d3e20313530323839.roa (hash: HJhbeBIyN7j+cfMcORgmlgmT0q4RK+5k+fM+/J3jIAM=)
14: 3230362e3235312e35322e302f32322d3234203d3e203332333436.roa (hash: uxLsRPCBsMb1jSf1l2L980Qtuzxr/y4xzBDefSANlEw=)
15: 323630323a663932613a613437643a3a2f34382d3438203d3e20323130333532.roa (hash: ublW8rFIXq/VF+hK9JDmh7flVrTu2j344XC3SkY9ohg=)
16: 323630323a663932613a613437303a3a2f34382d3438203d3e20323038373534.roa (hash: vr8Z8zerFeHLwPG1Sj5JmKhD36wh/wZg2B1HvzcqjWk=)
17: 323630323a663932613a653030303a3a2f34302d3438203d3e20323033323336.roa (hash: IBkuk87LMV+FnqYEF6hfLVWmE1OPlroVpgH2GTCd25A=)
18: 323630323a663932613a646561303a3a2f34342d3438203d3e20323133363035.roa (hash: S2I7MFxagpC/hWfkw5xbkk1THpqc1oHMahoIddI+A44=)
19: 323630323a663932613a313331343a3a2f34382d3438203d3e20323034353138.roa (hash: koHJDDDFT0xYjdI8D+a7kBimNIpjMm1+OQcUfCWMQEc=)
20: 323630323a663932613a613437623a3a2f34382d3438203d3e20313531313934.roa (hash: fH+eAUk8TEes+2Iai8KdY14xxwWZr2HwK76wJzo2G/g=)
21: AS198304.asa (hash: q6KSxo7FHxjgdEPhAALk+XGdsVy+0l6tPN3S2nObclE=)
22: 323630323a663932613a613437633a3a2f34382d3438203d3e20313938303235.roa (hash: KM2hJz/lncCBvTk0N2kNTxTwRufECPfi71/kGX97DdU=)
23: 323630323a663932613a613436633a3a2f34382d3438203d3e203531303837.roa (hash: ImhlVfCJc3FWLZQc/pm1n1pWEHtyCds9nQJVHDbb8vw=)
24: 323630323a663932613a663230303a3a2f34382d3438203d3e203430313135.roa (hash: xB/p4/3fCvd7hS1/dnqM7LuWcD8HfRwy/o0N54fkSrI=)
25: 323630323a663932613a613437663a3a2f34382d3438203d3e20343031383335.roa (hash: tXwIuvLfkqRRbrGnj7O8lQ40iRP7EXPDLkgQZ+fgw6o=)
26: 3134392e3131322e3131372e302f32342d3234203d3e2030.roa (hash: uJSO1uJt/eshe1aZrygG3JkvlAKC5qeHJIgXwEkM6Z4=)
27: 323630323a663932613a613437363a3a2f34382d3438203d3e20323135313732.roa (hash: ZJcY5ZQCl3UQTw0Ssz2Tf/Vt1Fzb/TisP8Zwf+FRylE=)
28: 323630323a663932613a663030303a3a2f34302d3438203d3e20313430393135.roa (hash: 0MEIUBup3qv1i1SPiI38Hu99JxS/lmJ93WOTGaX/FWA=)
29: 32332e3137352e32342e302f32342d3234203d3e203533383038.roa (hash: 0Z2D/+w3fy668bxeM4x+wpPqC/ioLXEh/WHhazBLKNU=)
30: 323630323a663932613a613437383a3a2f34382d3438203d3e20323131353735.roa (hash: GWFj06chKZGucleScz0C7o3A8NGUthJ495skpWCH2b8=)
31: 323630323a663932613a3a2f33322d3438203d3e203533383038.roa (hash: hSQPQNYtaloGuIBTmiDXNzK85H3WsPwGL3kSwWeFwys=)
32: 323630323a663932613a613436653a3a2f34382d3438203d3e20323034353335.roa (hash: 9fJa1nPzLUFXwVfiFrnPGDDs+BHWdaQaTBmBJld2L/4=)
33: 323630323a663932613a613437343a3a2f34382d3438203d3e20313339333137.roa (hash: E4T48Xa0z2oRpppt0kd+9gM6ocnhmZSsvwpBSiuPpCY=)
34: 323630323a663932613a613030303a3a2f34302d3430203d3e20313938333034.roa (hash: oPCojI7Eue0yt942Ht5P7kSBGUXjdXUyDnyhf4wTdXA=)
35: 323630323a663932613a613436663a3a2f34382d3438203d3e20323134393333.roa (hash: TvLJ1Uq1huTW719GR2EFzXXRM09Tw7H6kbirhRZMWCE=)
36: 323630323a663932613a613436643a3a2f34382d3438203d3e20323134393535.roa (hash: mDKI3fNjgDNobKrxL85GJKVH78h3rEa5HjmXCRSoA2Y=)
37: 323630323a663932613a613030303a3a2f34302d3430203d3e203331383938.roa (hash: +XSeZo8L737BIXowSCY8d0AdlufTE4hwscSDAds1k6A=)
38: AS53808.asa (hash: AMYfzaTQZmAvqFumF7UYoeexlN0b7J4WbNQftUc+M5U=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
33:3b:4b:6f:c4:8a:94:c2:b0:69:31:3d:70:9d:28:c6:5d:02:98:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a22aa82bd6af16d70a699d34ed843d71620176f10e2010d22d
Validity
Not Before: Jan 17 09:25:41 2026 GMT
Not After : Jan 18 11:47:41 2026 GMT
Subject: CN=032189CB2844B7793D1F105BD69DB7CF4F3FD716
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:dd:12:1c:cd:81:4f:8c:3b:6d:40:a4:bb:75:
b6:ca:c7:32:62:88:4e:cd:6f:7c:58:cc:25:82:6a:
0b:38:8f:de:34:37:09:28:b4:61:98:84:36:be:47:
af:a4:9c:af:93:5c:39:c3:7d:c9:b8:89:e1:fd:bb:
e2:6c:01:49:4e:28:4d:44:44:3f:ba:9c:80:df:c5:
8c:9b:d0:c3:e6:b3:2d:a0:86:33:d8:b3:94:52:53:
49:d5:3c:3e:f5:3c:4a:d0:ef:73:9e:5b:64:cd:26:
81:35:be:c1:d5:12:bf:fe:3b:67:9f:1e:b9:4f:9b:
c1:d0:4d:92:81:69:bb:f1:94:16:66:dc:d5:65:97:
3c:ff:8a:55:47:72:b2:8e:c7:67:a3:4a:e1:43:2d:
8e:81:e1:37:36:97:1a:6f:7c:bf:c5:0f:c7:c3:13:
6a:0a:e1:ee:f9:aa:76:7e:c7:b5:b3:4e:95:d8:c8:
8e:0e:84:d0:e9:ce:67:92:43:32:63:52:87:79:3b:
ea:91:37:3e:0c:c5:cf:6c:fa:20:79:a3:ec:81:33:
c1:59:9e:8f:bc:af:76:8f:ef:70:94:9a:9a:99:4b:
4b:55:45:ae:65:12:eb:81:c5:56:d0:3b:ac:ef:0a:
af:6a:5b:ff:b6:4f:c2:c6:f4:fc:b8:da:2a:1a:35:
87:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:21:89:CB:28:44:B7:79:3D:1F:10:5B:D6:9D:B7:CF:4F:3F:D7:16
X509v3 Authority Key Identifier:
keyid:DE:F9:CF:6D:4F:F8:42:24:03:A0:B6:5E:13:9A:B5:3C:60:8B:92:12
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/1/DEF9CF6D4FF8422403A0B65E139AB53C608B9212.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/a22aa82bd6af16d70a699d34ed843d71620176f10e2010d22d.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/1/DEF9CF6D4FF8422403A0B65E139AB53C608B9212.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:dc:6d:d5:d5:76:b0:a3:f6:8b:dc:fb:70:a6:c7:e1:87:e0:
f0:e7:b4:f7:85:d6:44:9f:fe:20:00:70:ec:34:13:b3:72:e3:
42:c3:5b:db:ac:82:05:77:88:3f:79:62:93:66:a7:0f:e6:1d:
b4:6d:66:02:2f:f9:08:ec:39:64:ad:53:a9:89:5b:a1:0c:bb:
d3:2d:36:d9:e7:bc:9b:c6:4a:95:b5:6c:a1:82:9c:1b:a6:8c:
c5:10:96:8f:d2:94:55:99:be:0a:11:2e:a1:02:5b:81:1a:c8:
29:0a:15:1c:b0:f3:80:e8:34:70:c2:41:07:bf:c1:42:33:5a:
e4:bd:cb:af:1d:5f:2c:56:04:99:ef:93:d0:13:47:a1:03:76:
72:44:fa:87:c3:c7:06:da:75:dc:c3:c3:0e:6e:a7:2f:9b:6c:
d5:63:58:e1:ec:cc:53:2d:7b:bd:d7:1d:73:f8:0d:6a:6a:97:
cb:8f:b1:49:e8:8b:0b:d5:a0:93:36:ee:99:24:b1:45:57:0b:
10:7e:80:34:19:5c:cd:31:c4:26:f7:54:32:d2:97:2f:75:89:
67:c4:78:9f:ff:4e:a5:f8:89:85:cb:8f:13:d3:64:f1:12:fc:
83:94:cf:d6:9e:11:b9:54:8c:fd:c6:cc:51:c3:bb:69:07:44:
a7:4e:5e:2b
-----BEGIN CERTIFICATE-----
MIIF1zCCBL+gAwIBAgIUMztLb8SKlMKwaTE9cJ0oxl0CmMAwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyYTIyYWE4MmJkNmFmMTZkNzBhNjk5ZDM0ZWQ4NDNkNzE2
MjAxNzZmMTBlMjAxMGQyMmQwHhcNMjYwMTE3MDkyNTQxWhcNMjYwMTE4MTE0NzQx
WjAzMTEwLwYDVQQDEygwMzIxODlDQjI4NDRCNzc5M0QxRjEwNUJENjlEQjdDRjRG
M0ZENzE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs90SHM2BT4w7
bUCku3W2yscyYohOzW98WMwlgmoLOI/eNDcJKLRhmIQ2vkevpJyvk1w5w33JuInh
/bvibAFJTihNREQ/upyA38WMm9DD5rMtoIYz2LOUUlNJ1Tw+9TxK0O9znltkzSaB
Nb7B1RK//jtnnx65T5vB0E2SgWm78ZQWZtzVZZc8/4pVR3Kyjsdno0rhQy2OgeE3
Npcab3y/xQ/HwxNqCuHu+ap2fse1s06V2MiODoTQ6c5nkkMyY1KHeTvqkTc+DMXP
bPogeaPsgTPBWZ6PvK92j+9wlJqamUtLVUWuZRLrgcVW0Dus7wqvalv/tk/CxvT8
uNoqGjWHcwIDAQABo4IC1zCCAtMwHQYDVR0OBBYEFAMhicsoRLd5PR8QW9adt89P
P9cWMB8GA1UdIwQYMBaAFN75z21P+EIkA6C2XhOatTxgi5ISMA4GA1UdDwEB/wQE
AwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3luYzovL3JzeW5jLnBhYXMu
cnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2UyNmViMTM2LTRmZTUtNGU2MS1hNGQ4
LWYzNDVmNTJiYzI1ZC8xL0RFRjlDRjZENEZGODQyMjQwM0EwQjY1RTEzOUFCNTND
NjA4QjkyMTIuY3JsMIHzBggrBgEFBQcBAQSB5jCB4zCB4AYIKwYBBQUHMAKGgdNy
c3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0
YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmIt
NDMwZi1iNzc4LWQyMDRjZmNkOTlhOC83ZjMzY2Y1OS1hZTM1LTQxZDQtODI1Mi1k
OWJkYmFiYTQyMTAvYTIyYWE4MmJkNmFmMTZkNzBhNjk5ZDM0ZWQ4NDNkNzE2MjAx
NzZmMTBlMjAxMGQyMmQuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYIKwYBBQUH
MAuGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv
ZTI2ZWIxMzYtNGZlNS00ZTYxLWE0ZDgtZjM0NWY1MmJjMjVkLzEvREVGOUNGNkQ0
RkY4NDIyNDAzQTBCNjVFMTM5QUI1M0M2MDhCOTIxMi5tZnQwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUA
MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAB/cbdXV
drCj9ovc+3Cmx+GH4PDntPeF1kSf/iAAcOw0E7Ny40LDW9usggV3iD95YpNmpw/m
HbRtZgIv+QjsOWStU6mJW6EMu9MtNtnnvJvGSpW1bKGCnBumjMUQlo/SlFWZvgoR
LqECW4EayCkKFRyw84DoNHDCQQe/wUIzWuS9y68dXyxWBJnvk9ATR6EDdnJE+ofD
xwbaddzDww5upy+bbNVjWOHszFMte73XHXP4DWpql8uPsUnoiwvVoJM27pkksUVX
CxB+gDQZXM0xxCb3VDLSly91iWfEeJ//TqX4iYXLjxPTZPES/IOUz9aeEblUjP3G
zFHDu2kHRKdOXis=
-----END CERTIFICATE-----
Generated at Wed Mar 11 18:56:23 2026 by rpki-client