$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.mft File: 7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.mft (raw, json) Hash identifier: rvyYd/eLwywijq7asKEeOlPhMmSpLcivMppDIGE1XNk= Subject key identifier: 32:85:25:93:42:4E:13:4D:EE:DD:72:D3:C9:7C:6B:CB:61:6F:6F:1D Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45 Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45 Certificate serial: 447C706C313E349EBDB4137DA41C42D251097F4F Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.mft Manifest number: 12F6 Signing time: Tue 04 Nov 2025 23:34:50 +0000 Manifest this update: Tue 04 Nov 2025 23:29:50 +0000 Manifest next update: Thu 06 Nov 2025 00:18:50 +0000 Files and hashes: 1: 326131343a373538313a333538643a3a2f34382d3438203d3e203136393039.roa (hash: hgnX7HeDxBSCgwy+vwPQXIv6xTdi2QxsPHoyfkkcUvs=) 2: 326131343a373538313a333530303a3a2f34302d3438203d3e20343031353037.roa (hash: 6Df05/vahSbRv4znE3OLfIl0VdNL2j9/fGDSnrxXLG8=) 3: 326131343a373538313a333533303a3a2f34382d3438203d3e203136393039.roa (hash: Bd6yXBUpoPF+hYuIfFqAPjVU5fz9MqxpaV5ObqZvP6I=) 4: 326131343a373538313a333530303a3a2f34302d3438203d3e203136393039.roa (hash: bvCK0vzABX0GIgAHss3mxvyUiQC1fMmgnIs36fcNdHo=) 5: 7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl (hash: r+KwR/0jnbJWKEoDM1uQS/KRVx/it5BeOxSsNul3PbU=) 6: 326131343a373538313a333530303a3a2f34302d3438203d3e20333936393638.roa (hash: hWe0MopsuhhbsZ3S9o8OBwj8cjLWddVpusY7Oex+A3s=) 7: 326131343a373538313a333563373a3a2f34382d3438203d3e203136393039.roa (hash: exjF0q0aJJV12jth59pchkZ6rTciHjjsF3VzxPVljDU=) Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 05 Nov 2025 18:00:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:7c:70:6c:31:3e:34:9e:bd:b4:13:7d:a4:1c:42:d2:51:09:7f:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45 Validity Not Before: Nov 4 23:29:50 2025 GMT Not After : Nov 6 00:18:50 2025 GMT Subject: CN=32852593424E134DEEDD72D3C97C6BCB616F6F1D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:e9:11:de:6d:43:fd:8a:af:56:61:e6:c2:ae: 78:29:8d:a4:cb:82:d3:bf:62:dc:45:a0:bf:e7:ed: cc:4c:54:5c:25:72:d2:45:82:fd:a5:27:d4:67:7d: bd:59:d7:2e:c2:36:42:bc:f0:c8:a0:ee:e4:22:8e: 4e:68:bc:f7:a2:5b:0b:86:a8:e2:6d:e0:8f:0d:42: cc:c3:1b:39:13:e6:d2:e5:98:06:f6:b7:58:ec:08: 1a:7b:b8:61:cb:4d:68:2d:fa:f2:d7:1a:5e:1c:1b: fa:1c:e7:74:44:bd:e1:67:68:76:51:f9:4c:79:5c: 3c:57:3e:5c:2c:14:c6:dc:93:ce:12:20:09:ff:1f: 14:4e:9e:fd:e1:db:58:69:70:36:2a:10:85:70:40: 61:11:34:ae:ae:95:3d:b9:98:a2:d8:cb:36:a1:b0: b7:19:a1:e5:42:75:8c:f1:51:2a:45:bc:d1:6c:b7: a5:e3:b5:bd:99:1e:95:b7:4a:13:33:8f:4d:2a:40: 4f:70:5e:f7:66:3f:75:6a:76:a1:5d:64:d7:e4:bd: 59:f9:8f:9e:9e:9c:42:13:04:0d:e6:f4:90:e6:c2: b0:89:49:cf:9a:10:3f:c3:1b:11:fb:9d:dd:b5:0b: a0:40:3c:24:82:56:e4:49:f5:b0:53:29:7c:17:46: a7:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:85:25:93:42:4E:13:4D:EE:DD:72:D3:C9:7C:6B:CB:61:6F:6F:1D X509v3 Authority Key Identifier: keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:68:dc:f7:99:aa:b6:aa:af:3e:f4:e6:ca:dc:5b:07:08:06: 66:cb:43:c0:d8:e5:12:08:66:e7:df:ec:30:ba:45:fe:12:d4: 5b:f0:b2:9b:04:ab:5a:cf:7d:35:91:ca:2f:6d:76:cf:34:97: e5:de:e4:99:23:37:4d:86:9f:9d:94:94:4a:4a:f9:88:13:7c: be:bc:f8:1f:d4:d6:26:8d:f0:dd:9c:9b:31:eb:65:36:d5:56: 9d:9c:08:42:34:29:ff:27:a8:99:d7:6a:ac:ec:07:36:93:7b: 56:79:ab:6c:46:03:35:9d:ce:12:cc:1c:14:f1:fd:c5:50:b9: 21:aa:c6:0f:84:43:ed:39:5c:ff:c8:47:bd:87:f2:e8:36:b5: 7e:4a:57:f0:68:59:b6:af:83:10:58:44:dc:e4:bd:60:c8:f0: eb:bc:f5:8d:0f:89:ce:d8:8f:81:78:5d:56:e0:5d:95:2f:81: 33:bd:50:7b:2d:3f:cd:17:ac:04:14:fa:a0:4c:c9:8b:c0:0d: 71:b8:5e:6a:04:e0:a5:65:f5:b6:4c:d0:f5:84:37:d0:66:dc: db:ca:f1:0f:6a:9b:15:bf:93:fe:e7:2a:0c:89:c1:e7:42:36: 8e:09:c0:0b:22:d8:10:3c:d9:f9:d3:c0:5a:44:15:fa:03:c5: ea:a3:04:41 -----BEGIN CERTIFICATE----- MIIFXTCCBEWgAwIBAgIURHxwbDE+NJ69tBN9pBxC0lEJf08wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0NCMjZGNzY0MkZENkI0Q0JGMzVGQkVFNDU1RjFFRkIw QzlGMEE0NTAeFw0yNTExMDQyMzI5NTBaFw0yNTExMDYwMDE4NTBaMDMxMTAvBgNV BAMTKDMyODUyNTkzNDI0RTEzNERFRURENzJEM0M5N0M2QkNCNjE2RjZGMUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC96RHebUP9iq9WYebCrngpjaTL gtO/YtxFoL/n7cxMVFwlctJFgv2lJ9Rnfb1Z1y7CNkK88Mig7uQijk5ovPeiWwuG qOJt4I8NQszDGzkT5tLlmAb2t1jsCBp7uGHLTWgt+vLXGl4cG/oc53REveFnaHZR +Ux5XDxXPlwsFMbck84SIAn/HxROnv3h21hpcDYqEIVwQGERNK6ulT25mKLYyzah sLcZoeVCdYzxUSpFvNFst6Xjtb2ZHpW3ShMzj00qQE9wXvdmP3VqdqFdZNfkvVn5 j56enEITBA3m9JDmwrCJSc+aED/DGxH7nd21C6BAPCSCVuRJ9bBTKXwXRqcBAgMB AAGjggJnMIICYzAdBgNVHQ4EFgQUMoUlk0JOE03u3XLTyXxry2Fvbx0wHwYDVR0j BBgwFoAUfLJvdkL9a0y/NfvuRV8e+wyfCkUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv cnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNkZjQ1YTBlYTY2ODcvMS83Q0IyNkY3NjQy RkQ2QjRDQkYzNUZCRUU0NTVGMUVGQjBDOUYwQTQ1LmNybDCBngYIKwYBBQUHAQEE gZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5Lzg5MjcwZjZjLWEzZmUtNDI5OS1iMDc5LTMwOWVkOTdm MzgyNC8wLzdDQjI2Rjc2NDJGRDZCNENCRjM1RkJFRTQ1NUYxRUZCMEM5RjBBNDUu Y2VyMIGTBggrBgEFBQcBCwSBhjCBgzCBgAYIKwYBBQUHMAuGdHJzeW5jOi8vcnBr aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjkyZWU0ZDg0MDE5M2Rm NDVhMGVhNjY4Ny8xLzdDQjI2Rjc2NDJGRDZCNENCRjM1RkJFRTQ1NUYxRUZCMEM5 RjBBNDUubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcB Af8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0G CSqGSIb3DQEBCwUAA4IBAQACaNz3maq2qq8+9ObK3FsHCAZmy0PA2OUSCGbn3+ww ukX+EtRb8LKbBKtaz301kcovbXbPNJfl3uSZIzdNhp+dlJRKSvmIE3y+vPgf1NYm jfDdnJsx62U21VadnAhCNCn/J6iZ12qs7Ac2k3tWeatsRgM1nc4SzBwU8f3FULkh qsYPhEPtOVz/yEe9h/LoNrV+SlfwaFm2r4MQWETc5L1gyPDrvPWND4nO2I+BeF1W 4F2VL4EzvVB7LT/NF6wEFPqgTMmLwA1xuF5qBOClZfW2TND1hDfQZtzbyvEPapsV v5P+5yoMicHnQjaOCcALItgQPNn508BaRBX6A8XqowRB -----END CERTIFICATE-----Generated at Wed Nov 5 01:51:17 2025 by rpki-client