
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/7/6A6F6EC272A5EBDC18241C2C84D1D9FE94C125AA.mft
File: 6A6F6EC272A5EBDC18241C2C84D1D9FE94C125AA.mft (raw, json)
Hash identifier: VSw8uRUUBdTn7QA0SmyeO4DPU0aUOck7QBh5lwJe55Q=
Subject key identifier: 4B:2D:B0:B1:B7:87:09:1B:EB:3D:CF:47:49:9A:9F:81:48:D2:70:BA
Authority key identifier: 6A:6F:6E:C2:72:A5:EB:DC:18:24:1C:2C:84:D1:D9:FE:94:C1:25:AA
Certificate issuer: /CN=43729997152fd84fcda6d190c3b3195b02679660112be9a2d7
Certificate serial: 5AD6FA8AF81814A5DB786FF5C397EB25B7F23226
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/829fb872-15bb-4a4e-9ed9-259960b049bd/43729997152fd84fcda6d190c3b3195b02679660112be9a2d7.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/7/6A6F6EC272A5EBDC18241C2C84D1D9FE94C125AA.mft
Manifest number: 0572
Signing time: Tue 28 Jul 2026 20:16:00 +0000
Manifest this update: Tue 28 Jul 2026 20:11:00 +0000
Manifest next update: Wed 29 Jul 2026 21:08:00 +0000
Files and hashes: 1: 323630323a666136653a3a2f33362d3336203d3e203133363436.roa (hash: UDd+t9EsJDfNHobscIjEAVbA3kTERYkXQAx3CJo6hDs=)
2: 6A6F6EC272A5EBDC18241C2C84D1D9FE94C125AA.crl (hash: 4AEJCfP3ecWpFeupTnm5wMrAhA62xnWpx4nORByW27A=)
3: 3139382e3133352e3136392e302f32342d3234203d3e20333936393933.roa (hash: ZuqL+fdFsSzEWPLF+KldkjLdFZi3woWq3fujFGdDY0Y=)
4: EEF3EC40152A747D52835AE8973E7DC8C193A840.cer (hash: b9uDQIv17Mqj0faPNTNtrEIHppsSxn28riugd1hAwe4=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/7/6A6F6EC272A5EBDC18241C2C84D1D9FE94C125AA.crl
rsync://rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/7/6A6F6EC272A5EBDC18241C2C84D1D9FE94C125AA.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/829fb872-15bb-4a4e-9ed9-259960b049bd/43729997152fd84fcda6d190c3b3195b02679660112be9a2d7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/829fb872-15bb-4a4e-9ed9-259960b049bd/829fb872-15bb-4a4e-9ed9-259960b049bd.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/829fb872-15bb-4a4e-9ed9-259960b049bd/829fb872-15bb-4a4e-9ed9-259960b049bd.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/829fb872-15bb-4a4e-9ed9-259960b049bd.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 29 Jul 2026 21:08:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5a:d6:fa:8a:f8:18:14:a5:db:78:6f:f5:c3:97:eb:25:b7:f2:32:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43729997152fd84fcda6d190c3b3195b02679660112be9a2d7
Validity
Not Before: Jul 28 20:11:00 2026 GMT
Not After : Jul 29 21:08:00 2026 GMT
Subject: CN=4B2DB0B1B787091BEB3DCF47499A9F8148D270BA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:5d:5f:0e:fe:d5:ac:c3:b3:e1:40:9a:73:13:
6d:9c:b9:e5:56:bd:b2:c6:36:4d:e2:d5:de:c9:e6:
a9:c8:c6:c0:c7:e3:da:ef:87:b5:a1:93:e4:9d:33:
9e:93:9b:c1:fc:f7:75:0f:0c:a7:c6:e3:66:6e:d0:
b3:13:ae:5a:ce:b4:30:a6:05:63:76:7a:fd:7f:ac:
62:0b:04:00:c9:d4:9c:40:f1:2e:db:fd:51:ba:5d:
a3:79:3b:09:69:5d:df:2e:6f:7b:0f:35:89:ce:f3:
4b:85:43:f9:99:bb:61:a1:b1:bb:4c:b0:a0:1f:9f:
3f:8c:19:9b:1a:eb:42:27:c6:56:b9:6c:68:73:e4:
6e:1c:d7:e3:b0:b2:e9:18:f2:d6:7d:ca:6e:f4:bf:
b1:86:96:75:88:40:ff:2b:1e:a3:3a:c9:8c:67:77:
37:73:2e:42:4f:75:8a:a6:05:c2:81:9f:7d:0d:83:
6f:78:36:5a:76:82:83:6b:a9:ef:c2:a9:23:0c:1c:
3d:8c:6e:a2:b0:1f:fb:1f:5a:3d:f2:93:a8:4a:fd:
0f:11:ae:33:ca:0e:a8:8c:2c:88:8f:1d:30:9a:f4:
15:9e:64:ad:b8:c5:6d:3f:4c:78:15:62:dd:3c:2e:
fc:c1:82:ca:08:da:ef:a8:5e:68:4b:66:a9:f9:15:
0d:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:2D:B0:B1:B7:87:09:1B:EB:3D:CF:47:49:9A:9F:81:48:D2:70:BA
X509v3 Authority Key Identifier:
keyid:6A:6F:6E:C2:72:A5:EB:DC:18:24:1C:2C:84:D1:D9:FE:94:C1:25:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/7/6A6F6EC272A5EBDC18241C2C84D1D9FE94C125AA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/829fb872-15bb-4a4e-9ed9-259960b049bd/43729997152fd84fcda6d190c3b3195b02679660112be9a2d7.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/7/6A6F6EC272A5EBDC18241C2C84D1D9FE94C125AA.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:16:91:f3:10:fe:6b:d7:21:46:d6:de:09:a4:0d:6b:c5:c9:
9a:e0:3d:ce:62:75:ae:e2:bc:1c:79:de:7b:55:b0:70:c2:10:
5e:dc:33:ae:60:bc:9c:ec:90:6f:1a:73:27:b3:82:2b:ed:72:
3d:ff:08:a6:01:70:07:8b:36:94:dc:65:e0:27:ae:25:5c:24:
ea:f8:0b:60:51:ad:9d:1b:21:e5:ef:e3:26:99:c3:5a:13:b8:
92:ce:68:0a:b6:57:ad:a0:28:88:c1:37:aa:33:38:73:31:86:
9d:09:f0:e3:eb:e4:a3:57:30:c7:ce:2e:92:e8:3b:cc:5b:25:
ab:01:8f:20:03:a2:0e:80:b0:91:4b:c0:72:e2:f3:31:6a:98:
1a:9e:25:be:33:9d:52:f1:8e:5b:03:1f:83:81:96:16:da:42:
e7:53:53:d9:90:ab:f4:2f:b1:c4:93:92:ea:27:30:fd:2c:bf:
7e:1e:17:45:fe:32:fe:99:6c:06:9e:d5:8c:f4:4c:b7:35:31:
02:e9:f8:c5:38:f5:81:0e:62:8d:f4:c9:13:8e:d9:9a:6a:f6:
81:16:b5:45:41:8e:f0:96:ec:13:64:0f:7b:59:07:aa:8d:68:
c9:f5:09:b6:e2:bf:c7:a5:14:d1:a4:97:69:f1:a7:51:87:74:
ce:ea:ca:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 09:48:51 2026 by rpki-client