$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/7/6A6F6EC272A5EBDC18241C2C84D1D9FE94C125AA.mft File: 6A6F6EC272A5EBDC18241C2C84D1D9FE94C125AA.mft (raw, json) Hash identifier: 7t7uDXixesqcMZ3K69bj0QGdxLYjwbl+/K/9htAUYF8= Subject key identifier: 0F:E7:04:8A:C2:A4:39:BB:A2:BF:A4:A9:71:4E:11:CC:CE:65:E5:37 Authority key identifier: 6A:6F:6E:C2:72:A5:EB:DC:18:24:1C:2C:84:D1:D9:FE:94:C1:25:AA Certificate issuer: /CN=43729997152fd84fcda6d190c3b3195b02679660112be9a2d7 Certificate serial: 423DB81ACF8D3C8F2C70ED257266FA24C16FF7FE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/829fb872-15bb-4a4e-9ed9-259960b049bd/43729997152fd84fcda6d190c3b3195b02679660112be9a2d7.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/7/6A6F6EC272A5EBDC18241C2C84D1D9FE94C125AA.mft Manifest number: 05CE Signing time: Mon 05 Oct 2026 02:59:09 +0000 Manifest this update: Mon 05 Oct 2026 02:54:09 +0000 Manifest next update: Tue 06 Oct 2026 06:03:09 +0000 Files and hashes: 1: 323630323a666136653a3a2f33362d3336203d3e203133363436.roa (hash: UDd+t9EsJDfNHobscIjEAVbA3kTERYkXQAx3CJo6hDs=) 2: 6A6F6EC272A5EBDC18241C2C84D1D9FE94C125AA.crl (hash: Py+AMIASaWAA//zTLPlmfB/OYR8KFd5bEsTjXK2S48k=) 3: 3139382e3133352e3136392e302f32342d3234203d3e20333936393933.roa (hash: ZuqL+fdFsSzEWPLF+KldkjLdFZi3woWq3fujFGdDY0Y=) 4: EEF3EC40152A747D52835AE8973E7DC8C193A840.cer (hash: b9uDQIv17Mqj0faPNTNtrEIHppsSxn28riugd1hAwe4=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/7/6A6F6EC272A5EBDC18241C2C84D1D9FE94C125AA.crl rsync://rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/7/6A6F6EC272A5EBDC18241C2C84D1D9FE94C125AA.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/829fb872-15bb-4a4e-9ed9-259960b049bd/43729997152fd84fcda6d190c3b3195b02679660112be9a2d7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/829fb872-15bb-4a4e-9ed9-259960b049bd/829fb872-15bb-4a4e-9ed9-259960b049bd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/829fb872-15bb-4a4e-9ed9-259960b049bd/829fb872-15bb-4a4e-9ed9-259960b049bd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/829fb872-15bb-4a4e-9ed9-259960b049bd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 Oct 2026 06:03:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:3d:b8:1a:cf:8d:3c:8f:2c:70:ed:25:72:66:fa:24:c1:6f:f7:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=43729997152fd84fcda6d190c3b3195b02679660112be9a2d7 Validity Not Before: Oct 5 02:54:09 2026 GMT Not After : Oct 6 06:03:09 2026 GMT Subject: CN=0FE7048AC2A439BBA2BFA4A9714E11CCCE65E537 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:04:27:41:c4:c2:ec:e5:08:ba:a2:6a:e4:40: 80:38:8a:b3:af:af:56:96:d9:57:c9:03:e7:d0:27: 5d:48:a7:35:7b:97:b8:3b:7e:8c:66:14:66:70:9e: 27:4a:10:ee:12:41:4e:61:c9:88:3e:d2:a1:0f:43: 87:71:93:9c:c9:c0:58:f1:21:8f:a7:2d:4b:6f:0f: bc:9a:c4:72:fa:cf:14:19:1c:70:22:25:3e:95:ac: b5:15:ce:29:74:b7:c3:d8:d1:e6:60:3c:98:1a:46: 19:9f:f1:32:26:a1:eb:b5:f6:1e:bd:e8:cd:7a:e6: d7:79:d5:3b:9f:71:ca:25:a3:48:33:1c:1a:94:d7: 76:c6:2d:83:77:82:b3:0e:a1:21:01:f6:73:10:35: 82:b6:a6:fe:dc:29:78:f9:56:aa:3a:0c:0e:95:40: 0d:f4:60:95:1e:a5:4b:08:03:e3:f2:bd:f4:b4:44: e1:19:17:97:67:f5:3d:e3:1e:46:38:08:eb:49:fe: 29:cd:f5:fe:37:51:ec:3c:42:a7:57:84:72:4e:c6: b2:fb:99:0f:05:be:16:f6:d0:de:a1:15:8a:8d:25: d6:6a:8c:13:88:7e:04:1c:8b:ce:de:aa:eb:ac:e1: be:6a:95:e7:21:7f:b8:e4:5b:c2:67:36:58:88:35: cc:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:E7:04:8A:C2:A4:39:BB:A2:BF:A4:A9:71:4E:11:CC:CE:65:E5:37 X509v3 Authority Key Identifier: keyid:6A:6F:6E:C2:72:A5:EB:DC:18:24:1C:2C:84:D1:D9:FE:94:C1:25:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/7/6A6F6EC272A5EBDC18241C2C84D1D9FE94C125AA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/829fb872-15bb-4a4e-9ed9-259960b049bd/43729997152fd84fcda6d190c3b3195b02679660112be9a2d7.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/7/6A6F6EC272A5EBDC18241C2C84D1D9FE94C125AA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:55:b9:4b:67:d3:c0:fc:bf:22:2c:60:0f:d6:76:d0:f5:9f: 87:57:14:a9:0e:5f:1b:55:8c:bd:c1:eb:9c:dd:a4:b9:65:df: d3:a3:0d:43:8c:95:a8:d4:93:05:48:44:61:7a:87:5e:57:dc: d1:33:93:ff:29:a2:25:5b:d5:58:dd:fb:57:2e:6c:32:57:62: 3a:cf:1e:4f:7e:aa:fc:9d:44:fb:c0:c1:9f:ee:e7:d7:0e:1b: 9d:5f:9f:52:48:42:07:3c:84:2f:a8:c4:58:36:88:11:02:30: 94:4c:4a:71:35:b2:8d:f9:96:1d:b4:0c:4a:62:a0:2d:a0:fc: a8:26:9b:1a:e0:9a:00:0c:11:b0:97:ba:53:14:7a:33:d3:4e: 99:b4:84:1a:b5:3e:c0:2e:34:aa:44:b2:5c:17:ae:62:75:11: 15:c5:1c:d4:d3:d2:b6:ce:57:5a:a8:68:c6:8e:9e:e3:77:f9: 04:31:bd:cf:c0:b8:d3:d0:2d:48:5e:cc:68:bf:fc:58:b0:25: 25:4a:4f:23:88:8d:01:ba:20:1b:a8:22:8c:8c:c6:75:2e:2e: 17:f2:d8:7a:a5:56:76:cd:85:f3:5b:c6:12:9f:52:64:0b:8e: cf:22:de:6a:d3:52:c0:57:ff:11:c5:27:d5:a7:f1:a1:ab:f0: cb:48:2d:aa -----BEGIN CERTIFICATE----- MIIF1zCCBL+gAwIBAgIUQj24Gs+NPI8scO0lcmb6JMFv9/4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNDM3Mjk5OTcxNTJmZDg0ZmNkYTZkMTkwYzNiMzE5NWIw MjY3OTY2MDExMmJlOWEyZDcwHhcNMjYxMDA1MDI1NDA5WhcNMjYxMDA2MDYwMzA5 WjAzMTEwLwYDVQQDEygwRkU3MDQ4QUMyQTQzOUJCQTJCRkE0QTk3MTRFMTFDQ0NF NjVFNTM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuwQnQcTC7OUI uqJq5ECAOIqzr69WltlXyQPn0CddSKc1e5e4O36MZhRmcJ4nShDuEkFOYcmIPtKh D0OHcZOcycBY8SGPpy1Lbw+8msRy+s8UGRxwIiU+lay1Fc4pdLfD2NHmYDyYGkYZ n/EyJqHrtfYevejNeubXedU7n3HKJaNIMxwalNd2xi2Dd4KzDqEhAfZzEDWCtqb+ 3Cl4+VaqOgwOlUAN9GCVHqVLCAPj8r30tEThGReXZ/U94x5GOAjrSf4pzfX+N1Hs PEKnV4RyTsay+5kPBb4W9tDeoRWKjSXWaowTiH4EHIvO3qrrrOG+apXnIX+45FvC ZzZYiDXMwwIDAQABo4IC1zCCAtMwHQYDVR0OBBYEFA/nBIrCpDm7or+kqXFOEczO ZeU3MB8GA1UdIwQYMBaAFGpvbsJypevcGCQcLITR2f6UwSWqMA4GA1UdDwEB/wQE AwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3luYzovL3JzeW5jLnBhYXMu cnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzY2YmQ5MmYxLTQxNWItNDc2NS04YTE2 LWRiZmM0NTkzYzFhOC83LzZBNkY2RUMyNzJBNUVCREMxODI0MUMyQzg0RDFEOUZF OTRDMTI1QUEuY3JsMIHzBggrBgEFBQcBAQSB5jCB4zCB4AYIKwYBBQUHMAKGgdNy c3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0 YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTIt NDk5NC04ZjZjLWQ2YzkxYjBiODQxNS84MjlmYjg3Mi0xNWJiLTRhNGUtOWVkOS0y NTk5NjBiMDQ5YmQvNDM3Mjk5OTcxNTJmZDg0ZmNkYTZkMTkwYzNiMzE5NWIwMjY3 OTY2MDExMmJlOWEyZDcuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYIKwYBBQUH MAuGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv NjZiZDkyZjEtNDE1Yi00NzY1LThhMTYtZGJmYzQ1OTNjMWE4LzcvNkE2RjZFQzI3 MkE1RUJEQzE4MjQxQzJDODREMUQ5RkU5NEMxMjVBQS5tZnQwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUA MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBABxVuUtn 08D8vyIsYA/WdtD1n4dXFKkOXxtVjL3B65zdpLll39OjDUOMlajUkwVIRGF6h15X 3NEzk/8poiVb1Vjd+1cubDJXYjrPHk9+qvydRPvAwZ/u59cOG51fn1JIQgc8hC+o xFg2iBECMJRMSnE1so35lh20DEpioC2g/KgmmxrgmgAMEbCXulMUejPTTpm0hBq1 PsAuNKpEslwXrmJ1ERXFHNTT0rbOV1qoaMaOnuN3+QQxvc/AuNPQLUhezGi//Fiw JSVKTyOIjQG6IBuoIoyMxnUuLhfy2HqlVnbNhfNbxhKfUmQLjs8i3mrTUsBX/xHF J9Wn8aGr8MtILao= -----END CERTIFICATE-----Generated at Tue Oct 6 00:33:06 2026 by rpki-client